last executing test programs:

1.481689878s ago: executing program 0 (id=4321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2)
r3 = socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x198, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "32a705840498a271648be0ded07d07f1fdde36c3b3db95888f7afa24a0772accbb614df3ec9ca0cdd55e6a8708f1a08cff83dc4ce879e32ca285ce397d0bb514bf67738f0d46d36162eee64f689fb21c4dcf4f58bb7356f7da67b7c5a8d5d75816dd5f2332b018e23ee108bf13c942489d86cd98f35b8ebc19b54752266b599b3d021b94624c1528fd3997683fad174f95a87fe0ea9fef4b5b70181aea3265264a1ad6f28bc8ff7bf2a2b1bcbaa676b29d9fa0b70c9782496eb95faa90fb3a950085da58c845dd08e23291"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x59, 0x6, "6e522fc05142fc31131d5cc14ceb7857490419954c4d608b826393a094c00b60004d1c79003b7815543672e6e6f1e4eb03022784b3e89121c8b49756aa126fb3a7e7de7becf0a98638ad7627a6ba27f0bfac788c7e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0xf36ae91b793af732}, 0x41)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x4c, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, 'rfc4106(gcm(aes))\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x4c}}, 0x20000044)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x5818680ba2430678}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)

1.349855228s ago: executing program 0 (id=4324):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x200, 0x1, 0x6}, 0x10)
sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0)

1.313064882s ago: executing program 0 (id=4326):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e23, 0xa74, @empty, 0x10}}, 0xffff, 0x7fef}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.184270547s ago: executing program 1 (id=4328):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001e00)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x64, 0x0, 0x4, 0xc, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x7805, 0xffffff01, 0xb}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001e40)={@dev, @local}, &(0x7f0000001e80)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001ec0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001f00)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x5}, {0x5, 0x7}, {0xfff1, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001f40)={@dev, @local, <r8=>0x0}, &(0x7f0000001f80)=0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010028bd7000fcdbf29f07000000", @ANYRES32=r10, @ANYBLOB="0200260b0a000200aaaaaaaaaa2e0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000002100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf250f000000380001801400020069703665727370616e3000000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000080003000300000008000300010000007000018014000200766972745f7769666930000000000000140002006e72300000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f6d6163767461700000004400018008000100", @ANYRES32=r8, @ANYBLOB="080003000000000014000200626f6e6430000000000000000000000014000200766574683001006fda627269646765000800030002000000"], 0x100}, 0x1, 0x0, 0x0, 0x8040}, 0x24000080)
r11 = socket$kcm(0x2, 0x922000000001, 0x106)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r11, 0x1, 0x31, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES64=r12, @ANYRESDEC, @ANYRES16=r7], 0x2c}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000e00)={{}, r13, 0x2, @unused=[0x7, 0x1, 0x18d5, 0xf0], @name="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"})
r14 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r14, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r1)
sendmsg$DEVLINK_CMD_SB_GET(r14, &(0x7f0000002340)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000000400)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4040000}, 0x10)

1.182691762s ago: executing program 0 (id=4329):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000000000000000800000a5fc00", @ANYRES32], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'bond_slave_1\x00', 0x9000})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xb}, {0xd, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x40000003, 0x3, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r11, 0x0)
splice(r11, 0x0, r10, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.17244232s ago: executing program 1 (id=4330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@setlink={0x68, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0x2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x3}, @IFLA_HSR_PROTOCOL={0x5}]}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

1.0821193s ago: executing program 2 (id=4331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'erspan0\x00', @multicast})

1.080948267s ago: executing program 2 (id=4332):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000001300000020000000bc"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xe0, &(0x7f00000004c0)=""/224}, 0x80)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@o_path={&(0x7f0000000180)='./file0\x00', r3, 0x4000, r4}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)

973.265097ms ago: executing program 2 (id=4333):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r1, 0x0, &(0x7f0000000200))
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
connect(r1, &(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x106}]}, 0x24}, 0x1, 0x0, 0x0, 0x809}, 0x48800)

900.009164ms ago: executing program 0 (id=4334):
r0 = socket$inet6_sctp(0xa, 0x4, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a)
r3 = accept(r2, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000200)=0x80)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x3, 0x0, 0x8200, 0x100, 0xd0, 0xa, 0x4, 0xffffffff, <r4=>r1}, &(0x7f0000000280)=0x20)
r5 = epoll_create1(0x80000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff})
listen(r8, 0xd)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000300)={'macvtap0\x00', {0x2, 0x4e22, @multicast2}})
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x8000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r9, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendfile(r7, r2, &(0x7f0000000700)=0x4, 0xf442)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x100000000, 0x8, 0x8, 0x7, 0x9], 0x1, &(0x7f0000000740)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000840), 0x0)
ioctl$FIOCLEX(r5, 0x5451)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', <r14=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x48088)
sendmsg$nl_route_sched(r3, &(0x7f0000001340)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000000a80)=@newqdisc={0x860, 0x24, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x5, 0xfff2}, {0x4, 0xa}, {0x4, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x1, 0x7, 0x5, 0x3, 0x1, 0x8, 0x2517, 0xc, 0xfffffff3, 0x8, 0x9, 0x7, 0x2c36, 0x2, 0x101, 0xd, 0x9, 0xfffffffd, 0x8, 0x4, 0x0, 0x2, 0x0, 0x400, 0x0, 0x8001, 0x4, 0x7, 0xfffffe00, 0x61, 0xd, 0xb96, 0x7, 0x5d, 0x8, 0x7, 0x5, 0x6cf5, 0xf, 0x1, 0x2, 0x0, 0x3, 0x7, 0x9, 0xea, 0x4, 0xa, 0x4f, 0x4, 0x1, 0x4, 0x2, 0x40000000, 0x101, 0x7c82, 0x2, 0x31, 0x4, 0x0, 0x40, 0x5, 0x2, 0x4, 0xfffffffa, 0x8, 0x8001, 0x1, 0x68f26676, 0x10, 0x4a, 0x9, 0x4, 0x7, 0x8, 0x5, 0x5, 0x7, 0x6, 0xea, 0x8, 0x2, 0x3, 0x5, 0x0, 0x1, 0x0, 0x7, 0x7, 0x4fa, 0x6, 0x6, 0x7, 0x5, 0x855, 0x77f, 0x1, 0x1, 0x3ff, 0x8, 0x1000, 0x8, 0xaa1, 0xdc2, 0x6, 0x5deb, 0x7, 0x3, 0x10000000, 0x9, 0x7, 0x8, 0xda24, 0x2, 0x6, 0xf704, 0x4, 0x4, 0x1, 0x6, 0x4, 0x8e2, 0x1, 0x7, 0x9, 0xffffd8af, 0x0, 0x8, 0x400, 0x5, 0x1, 0xfffffffd, 0x4, 0xff6, 0xfffffff9, 0x8, 0x3, 0x400, 0x7, 0x7fff, 0xfb, 0x9, 0xc, 0x18d, 0x800, 0xffffffff, 0x1, 0x3, 0xd, 0x7, 0x3, 0x5, 0x80, 0x400, 0x0, 0x100, 0x6, 0x7, 0x3, 0x8, 0x2, 0x1000, 0xb2, 0x7, 0x5, 0x42e, 0x40, 0x9, 0x80000000, 0x4, 0x8, 0x4, 0x0, 0x9, 0x1, 0x4, 0x5, 0x7, 0x2, 0x401, 0x0, 0x51d151d6, 0x1, 0x7fff, 0x5, 0x8, 0x9, 0x2, 0x7c35409b, 0x322, 0x3, 0x9, 0x7, 0xb961, 0x0, 0x1, 0x80, 0x3, 0xd, 0x5, 0xe, 0x100, 0x7fff, 0x9a, 0xd6f, 0x0, 0x0, 0x5, 0xdd, 0x8001, 0x9, 0xc6, 0x200, 0x1, 0x6, 0x9, 0x6a7, 0x3, 0x22, 0x5, 0x200, 0x8, 0x3c5bd6a3, 0x5, 0x2, 0x3, 0x4, 0x8, 0x0, 0x7, 0x7, 0x82, 0x2, 0x800, 0x4, 0x10, 0x80000001, 0x1000, 0xffffffff, 0xffffffff, 0x7ff, 0x6, 0x1, 0x7f, 0x7f, 0x1, 0x5, 0x0, 0x7, 0x6, 0x1ff, 0x1, 0x6, 0x1, 0x4fe94c98]}, @TCA_TBF_RATE64={0xc, 0x4, 0xfa440ef976b1c70f}, @TCA_TBF_RATE64={0xc, 0x4, 0x655aeb98f2df8075}, @TCA_TBF_PTAB={0x404, 0x3, [0x10, 0xfffffffb, 0x1, 0x9, 0x5, 0x7, 0x2, 0x1, 0xffffffff, 0xc920, 0xf2, 0x2e72, 0x2, 0x2, 0xc, 0x8, 0x8001, 0x0, 0x3a, 0x200, 0x8, 0x1, 0x2, 0x40, 0x5, 0xe, 0x4, 0x7, 0x0, 0x2, 0xffff, 0x3000000, 0x4, 0x9, 0x5, 0x6, 0x1, 0x0, 0x9, 0xffffff80, 0x23, 0x8, 0x87dc, 0xffffffff, 0xfffffff5, 0x4, 0x1, 0x1, 0x4, 0xfffff801, 0xfffff0e5, 0x1, 0x200, 0x1, 0xfffffff9, 0x2, 0x4, 0xffffff77, 0x6, 0x1, 0x5, 0x3ff, 0x7ff, 0x9, 0x1ff, 0x6a, 0x2a, 0x7ff, 0x1, 0x9, 0x4, 0x0, 0xfffffffb, 0x6, 0x7ff, 0x84af, 0x3, 0xf, 0xfffffffa, 0xcc7, 0x3, 0x2, 0x9, 0x5, 0xe, 0x3, 0x6, 0x2, 0xb47, 0x6, 0x9, 0x4, 0xa, 0x2, 0x4, 0x1ff, 0x4, 0x7, 0x200, 0xf, 0x0, 0xfb74, 0xc, 0xffffff49, 0x8, 0x9, 0x3, 0x9e, 0xf9d, 0xb36, 0x1, 0x7, 0xff, 0xfffffffe, 0x8, 0x0, 0x2, 0x6, 0x1, 0x7, 0xbe2, 0x0, 0x200, 0x3, 0x0, 0x7fff, 0x4, 0x1, 0x7fff, 0x200, 0x6, 0x4, 0x1, 0x0, 0x2, 0x8, 0x3, 0xffffffff, 0x0, 0xfffff800, 0x4, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0x8, 0x3, 0x0, 0xffff, 0x5, 0x6, 0x0, 0x9, 0xbae, 0xc, 0x8, 0xfffffff3, 0xffff8000, 0x81, 0x5, 0x9, 0x5, 0x8, 0x5, 0xb9de, 0x1, 0x80000001, 0x0, 0x1ff, 0x6, 0xb5b, 0x3ff, 0x3, 0x7, 0x6, 0x1, 0x7, 0x5, 0xcfba, 0x1, 0x5, 0x5, 0x5, 0x6, 0x8, 0x1, 0x4, 0x5d, 0x7, 0x58df, 0x1, 0xfc000000, 0x7, 0xe, 0xff, 0x9, 0x6, 0x1, 0x0, 0x800, 0x4, 0x380, 0xc7, 0x4, 0x10000, 0x1, 0xc2, 0xffad8a1, 0x7, 0x400, 0x92, 0x3, 0x5, 0x9, 0x3, 0xecc, 0x7, 0x3fd, 0xfffffff8, 0x8, 0x42beec1c, 0x115c, 0x10, 0x48b5f4f3, 0x2, 0x3b, 0x7, 0x0, 0xe608, 0xbb0, 0xf, 0xe, 0x0, 0x7, 0x6, 0x3, 0x0, 0x1, 0xf304, 0x80000001, 0x200, 0x9, 0x8856, 0x7, 0x4, 0x6, 0x2, 0x7d08, 0x8, 0x8, 0x48f9, 0x3ff, 0x2, 0xfffff2ae]}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PBURST={0x8, 0x7, 0xb93}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4}, 0x40)
socket$inet6(0xa, 0x4, 0x1)

683.394622ms ago: executing program 0 (id=4335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0)
pread64(r1, &(0x7f0000000200)=""/38, 0x26, 0x5)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x8, 0x3, 0xfffffffd)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xb)
ioctl$SIOCAX25DELUID(r4, 0x891c, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000080)=0xffdffffe, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20044004)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4b6b87d4914c4d4881f4ede2a436659e09a164c35912d2c4a81e0d8f684ef68248ed81bce5cf35ce2327d9d0ba5127e104075c64957861fed6606eedefdabf8301059461450f1b9fb0722b2c7a3d943cf0652876fb98da6531c15dabb524675d1866aa7e073ec0656faef2e52b78f492b098038025e29428966b9159ffa074fbfcb6ff96294cef71d3400cfa072b3e4c69c4bed4b4b64c406fbd619a1344ddc50e23d125fbdef1956c44f82459e397"], 0x34}, 0x1, 0x0, 0x0, 0xc041}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r9, @ANYRES32], 0x128}, 0x24004004)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x11, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRES32=r8, @ANYBLOB="95869dedb1171031c9d3eeb0e56b8b5045eb3834721ad9d3fcc1046733406e6a2a2ff1496b81e576dc3dde59d2be095950ef8ec335c2e33fd8b8a7b7a6a0cef5d52cc32cf55e84a33fe238eda09fa27083d7bcec6fdee86e90df49e4951648a625c2730cf89b6279b440b262d5e6210a1fb4ddfc7b733e96d692f45624ab7cac547df51e5158f741a33486a0304ef981e9bf3ab4bad439e3583ec0a7a12202b2155362c1989090dc4468888705c003bf5bb782d6bd380bb3", @ANYRES64=r12, @ANYRESHEX=r9, @ANYRES32=0x0], 0x128}, 0x20000000)
recvmsg(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4079, 0xfef}, 0x0)

273.910109ms ago: executing program 1 (id=4336):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x80, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
connect$x25(r2, &(0x7f0000000a80), 0x12)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0)
sendmsg$SOCK_DESTROY(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000000140)={&(0x7f0000000d40)={0x1170, 0x15, 0x8, 0x70bd27, 0x25dfdbff, {0x21, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "3a380d23ee29e9aa0ca241e4b6c7a9c6a4bf911708ce152a407e21c0ae40dd3dc9a810ff94a2e63534fe304dac1d9caad2a62880d07958d0b71120ed316a471e79712925c6f9dc1e0d8c7be3da2f3d808fbe903f0e36fa9d173d6e5bfcebee01887e5c137a5b829370844c79db03de4689c2743adea33b73ba91d9e65859b399783ffddf98b70b025ecf1b300e0903d19f80d9314b8ce099e821ac1576e4798d2edb6ca08d6709a1cb823bdd25cb6bb43ee41a3517c7296311119f40c73b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "f9beee8f1d4cd0d0"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "e9b3ffcf4ba53ba7484110955ba989c783e92656d59c97cac09481411a4757088185b510ee0d5f61a1327a8dbcc70f2905394d5d60d48535342b31b0ef97b298fb854974d6a6c539f133024f821629ec4d37b7ff78a96bdf1ae700b17c6fe4207d1c6b609d49787e94fb63e9ad7d0bffeea016367cbd8700d15e76bb4e182d5e20983831"}]}, 0x1170}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000100)=ANY=[], 0x290)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r9=>0x0}) (async)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r10, &(0x7f0000000040)={0x1d, r9}, 0x10) (async)
bind$can_raw(r3, &(0x7f0000000480)={0x1d, r9}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x70, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xddd, 0x9, 0x8100}}, {0x14, 0x1, {0x9, 0x4e6, 0x1, 0x8100}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x6}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x9, 0x5, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3500, 0x0, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x2b}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0e5900001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f030000000a000008000240000000000900010073797a3000000000140000001100010000001b00000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8815}, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f00000004c0)={0x0, 0xe, [0x3, 0x0, 0xfff, 0x4, 0x9, 0xfff]})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYRES8=r12, @ANYRES32=r6, @ANYBLOB="040013001400030017"], 0x68}}, 0x20008804)

271.209681ms ago: executing program 1 (id=4337):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x5)
recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/99, 0x63}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r1=>0x0}}}, @rights={{0x24, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x60}, 0x0)
recvmsg$unix(r3, &(0x7f0000000940)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/26, 0x1a}], 0x7}, 0x12062)
recvmsg$unix(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/94, 0x5e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/100, 0x64}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/123, 0x7b}, {&(0x7f0000002c00)=""/250, 0xfa}, {&(0x7f0000002d00)=""/93, 0x5d}], 0x9, &(0x7f0000002e40)=[@rights={{0x20, 0x1, 0x1, [<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r13=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x2020)
preadv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000002f80)=""/130, 0x82}, {&(0x7f0000003040)=""/239, 0xef}, {&(0x7f0000003140)=""/39, 0x27}, {&(0x7f0000003180)=""/93, 0x5d}, {&(0x7f0000003200)=""/81, 0x51}, {&(0x7f0000003280)=""/228, 0xe4}, {&(0x7f0000003380)=""/248, 0xf8}], 0x7, 0x5, 0xac)
recvmsg$unix(r8, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000003500)=""/46, 0x2e}, {&(0x7f0000003540)=""/109, 0x6d}, {&(0x7f00000035c0)=""/133, 0x85}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/98, 0x62}, {&(0x7f0000004700)=""/248, 0xf8}], 0x6, &(0x7f0000004880)}, 0x40)
ioctl$F2FS_IOC_RESIZE_FS(r12, 0x4008f510, &(0x7f0000004900)=0x1)
bind$unix(r11, &(0x7f0000004940)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$AUDIT_USER_AVC(r15, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x78, 0x453, 0x2, 0x70bd2c, 0x25dfdbfc, "efc6b39ce56bbd46c11f05dcade67931946bfdd94b99d0b6f841083bec69c6b52939bf0b9dc64d824f365894f6dd9091f79c0b88c565d0e4dd142f0225dddf9cb7dc7330282fabc9f3f22e8d9bad22eb001093a0de2503ceb28d8d8704d2ee6ff066f77e469a1e", ["", "", "", "", "", "", "", ""]}, 0x78}}, 0x40881)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b40), r2)
sendmsg$NL80211_CMD_LEAVE_MESH(r10, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r17, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
recvmsg$unix(r7, &(0x7f0000004f00)={&(0x7f0000004c40)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/249, 0xf9}, {&(0x7f0000004dc0)=""/61, 0x3d}, {&(0x7f0000004e00)=""/33, 0x21}], 0x3, &(0x7f0000004e80)=[@cred={{0x1c, 0x1, 0x2, {<r18=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2)
getsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000004f40), &(0x7f0000004f80)=0x4)
r21 = socket$unix(0x1, 0x1, 0x0)
r22 = accept(r5, 0x0, &(0x7f0000007400))
sendmsg$unix(r21, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000004fc0)="111fb16fc1de6f643395ebaeac2c97e55ab10708536aa1b2e70ed178e433f82675ce6ad1e0ac763613d672af656c8f170197c30b29a59db6a1fcfd1e91c5a71e0a00427942e2c12659e6509d0cc75f9deca20770128e214d4a2bd3ac1906f98d74ce504aaf842ffc7091133087a84614dfc92ea9a26b62111992468836afd747e96afce27051c5283d55bcb72a2b8dd0a93029dd418c07a2a559714131b35cba9a6cb6358ff5088e7302bfa497111febead1b8ceed35a85debf33f4c664d201f73c86360e0c52d", 0xc7}, {&(0x7f00000050c0)="fe87ee9eb4707c6ccc8ada962df27e94e101a0cdfc192159a82c7580ae8de2692315504e552a0cbeed8a6c9f4ba535421adf21cddfb3e552a05d95837ed76755c8043f7bc0c37bee12f2450cefb2ac58dd2a26c3e614f33df8d19911d3c5514e6869632c41f0b8dcbe30847c91e1f3599891b4421a7691322c2f0802f0368757f43e27ccb210e4c0297c394d808774db3586f6a0be3c2d7e9aa37b9a53861e2e09e7db1b2bd76c10852dbde0ac5fa73984055e1544f437cbc93e3d42498714e844d315bdb4aa36595a62daef9860465c84f291d41d660d48", 0xd8}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="5bdd5ed2ab23c705f79fe4e9f1625c993fb7a4e99fcec62c25dbe6e406a424b61e77c012e1c37c1eb18d888b14bff744d6f1e7fe9676247072255bdbd5623b0bcb9ff869a80a92e3074653574bda3c305ec53842295f15bc775e154263b3b539744bfd549d6bed66fa75f4925ad0a6ecc87508f1e117b5467017cfe7a4837035b4e34d89c2931df1c72e756836dfa7d536", 0x91}, {&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000007280)="d3be0102ed1f69a09e3090d2ebdd16c7501e393ecbab47bc72abb0a3668b75054e19e771b8a5331ec2c0221f2208d45d2bab364455d012423e0ee4930472c91dd6700ab8a46fd946c18aa701a50ca5e3bbe04db742ffd359280e09d51f64a7fe0cfc38139dce96608d3449218f60011f0cda702e08ae97aa7393ae5e10b15a6d0d975b48fb00a17eff0fb829b9ad0f37c5507b34834d1141870a5e2595dcc22d9ede5148a55adc6f78d5157b1e74369a55450a2eff4a80ffeed53e7a6239a09ddb0428cdd344924be4", 0xc9}], 0x6, &(0x7f0000007440)=[@rights={{0x30, 0x1, 0x1, [r7, r16, r22, r19, r7, r14, r9, r20]}}, @cred={{0x1c, 0x1, 0x2, {r18, r1, r13}}}], 0x50, 0x80}, 0x814)
close(r14)
r23 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000007500), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r23, 0xc008af12, &(0x7f0000007540))
r24 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MPATH(r24, &(0x7f0000007640)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007600)={&(0x7f00000075c0)={0x38, r17, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000007740)={&(0x7f0000007680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000007700)={&(0x7f00000076c0)={0x24, r17, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4c}]}, 0x24}}, 0x24040800)
r25 = openat$nci(0xffffffffffffff9c, &(0x7f0000007780), 0x2, 0x0)
write$nci(r25, &(0x7f00000077c0)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x3, {0x0, 0x4, 0x1, 0x4, 0x4, 0xa, 0x3, 0x6, 0x70, "1fc6fa722d8180afae8a93790bea57754ce725dfe823ca5bb37f9bba6ff955e38be507cb9fdfe03df4762e75d9a249ce82c374c3005bc5c08fc1800260ce5e65b2b1a332cbafad34107d0559efc7022c10d9fabb5118d7b4c8dc2313dc371239083756f9270f9e8c817cf4dee791f09c"}}, 0x81)
socket$nl_generic(0x10, 0x3, 0x10)
r26 = socket(0x23, 0x6, 0x10001)
r27 = syz_genetlink_get_family_id$devlink(&(0x7f00000078c0), r15)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r26, &(0x7f0000007980)={&(0x7f0000007880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007940)={&(0x7f0000007900)={0x3c, r27, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040090}, 0x1)
ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0)

133.867966ms ago: executing program 1 (id=4338):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@getchain={0x2c, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0xffff, 0xc}, {0x8}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

133.314885ms ago: executing program 2 (id=4339):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x1, 0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r2=>0x0})
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0xfd}, 0x18)

72.819074ms ago: executing program 2 (id=4340):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f0000001d40))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000b6f18af3acbe412b35683986cc0dcba6b21a24ee97d27a52e0f9b7ad98cb57c5eb9f1a13dbda4621938f28f7ae84558569246003fc59f8b74aba2a9e49f0fb31f7971103c8e83190730a13034aef806cb2856f75f026c26b1ae6db119bd652b40d82f03efe2ae8fa7cb8b3ddb48e3ff5ab35137c4b7958fd7c27b5a55ec73b967e915ad2561b9ea623b94cabe506686dac731b2e8f98de3442288303dbc156461c34bf8718b17df0c9bbd049e150d05951d3ad7dddb64c4818ff7382e82d4c8539710f745d1a103e2ddfcf24f3", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25010000000500040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466", 0x6}], 0x1}, 0x0)
socket(0x10, 0x3, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x100000000000000)

750.852µs ago: executing program 2 (id=4341):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x4}, 0x8)
connect$nfc_raw(r6, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6, @ANYRESOCT=r3], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3cb3a0791}, 0x804)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=<r15=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000300)=<r16=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00012dbd7000fddbdf251000000008000100", @ANYRES32=r15, @ANYBLOB="05000f000900000008000100", @ANYRES32=r16, @ANYBLOB="06001100c4000000060011003a07000005000f00ff00000005000f00060000020200110063000000e3ff0f0005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)

0s ago: executing program 1 (id=4342):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c200000008004502001c000000000000000000000008907800"/42], 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000018500000053004000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000089500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40)={<r9=>0x0, <r10=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000740)=""/135, 0x87}], 0x1, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {&(0x7f0000003800)=""/229, 0xe5}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r9, r10+10000000})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

e caif0 may have been left with an inconsistent configuration, please check.
[  356.206983][T19914] wg1 speed is unknown, defaulting to 1000
[  356.210814][T19914] lo speed is unknown, defaulting to 1000
[  356.249618][T19915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.641961][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  357.283876][   T60] block nbd4: Connection timed out, retrying (0/1 alive)
[  357.286813][   T60] block nbd4: Connection timed out, retrying (0/1 alive)
[  357.289156][   T60] block nbd4: Connection timed out, retrying (0/1 alive)
[  357.291529][   T60] block nbd4: Connection timed out, retrying (0/1 alive)
[  357.294715][   T60] block nbd4: Dead connection, failed to find a fallback
[  357.297418][   T60] block nbd4: shutting down sockets
[  357.299145][   T60] blk_print_req_error: 138 callbacks suppressed
[  357.299152][   T60] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.305149][   T60] buffer_io_error: 138 callbacks suppressed
[  357.305157][   T60] Buffer I/O error on dev nbd4, logical block 3, async page read
[  357.310068][   T60] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.313883][   T60] Buffer I/O error on dev nbd4, logical block 2, async page read
[  357.316830][   T60] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.320322][   T60] Buffer I/O error on dev nbd4, logical block 1, async page read
[  357.323235][   T60] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.326599][   T60] Buffer I/O error on dev nbd4, logical block 0, async page read
[  357.331071][T19450] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.334904][T19450] Buffer I/O error on dev nbd4, logical block 0, async page read
[  357.338172][T19450] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.341435][T19450] Buffer I/O error on dev nbd4, logical block 1, async page read
[  357.344455][T19450] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.347605][T19450] Buffer I/O error on dev nbd4, logical block 2, async page read
[  357.350263][T19450] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.353790][T19450] Buffer I/O error on dev nbd4, logical block 3, async page read
[  357.356649][T19450] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.359716][T19450] Buffer I/O error on dev nbd4, logical block 0, async page read
[  357.364985][T19450] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.368084][T19450] Buffer I/O error on dev nbd4, logical block 1, async page read
[  357.376778][T19450] ldm_validate_partition_table(): Disk read failed.
[  357.380377][T19450] Dev nbd4: unable to read RDB block 0
[  357.383564][T19450]  nbd4: unable to read partition table
[  357.388558][T19450] ldm_validate_partition_table(): Disk read failed.
[  357.392039][T19450] Dev nbd4: unable to read RDB block 0
[  357.397161][T19450]  nbd4: unable to read partition table
[  357.426440][T19919] netlink: 'syz.2.3597': attribute type 11 has an invalid length.
[  357.467466][T19919] __nla_validate_parse: 3 callbacks suppressed
[  357.467481][T19919] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3597'.
[  357.516682][T19921] netlink: 'syz.2.3598': attribute type 1 has an invalid length.
[  357.731033][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3601'.
[  357.860714][T19939] batadv_slave_0: entered promiscuous mode
[  358.184811][T19938] batadv_slave_0: left promiscuous mode
[  358.253621][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'.
[  358.381175][T19955] netlink: 844 bytes leftover after parsing attributes in process `syz.2.3607'.
[  358.413688][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3607'.
[  358.477156][T19955] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  358.481023][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.2.3607 Not tainted syzkaller #0 PREEMPT(full) 
[  358.481033][T19955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.481038][T19955] Call Trace:
[  358.481042][T19955]  <TASK>
[  358.481045][T19955]  dump_stack_lvl+0x189/0x250
[  358.481060][T19955]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.481069][T19955]  ? __pfx__printk+0x10/0x10
[  358.481082][T19955]  ? kernfs_path_from_node+0x2f/0x290
[  358.481090][T19955]  ? kernfs_path_from_node+0x250/0x290
[  358.481097][T19955]  ? kernfs_path_from_node+0x2f/0x290
[  358.481107][T19955]  sysfs_warn_dup+0x8e/0xa0
[  358.481115][T19955]  sysfs_do_create_link_sd+0xc0/0x110
[  358.481123][T19955]  device_add_class_symlinks+0x1cf/0x240
[  358.481133][T19955]  device_add+0x475/0xb50
[  358.481142][T19955]  wiphy_register+0x1ba6/0x28d0
[  358.481160][T19955]  ? __pfx_wiphy_register+0x10/0x10
[  358.481170][T19955]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  358.481181][T19955]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  358.481191][T19955]  ieee80211_register_hw+0x3484/0x4100
[  358.481206][T19955]  ? ieee80211_register_hw+0x1481/0x4100
[  358.481218][T19955]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  358.481228][T19955]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  358.481241][T19955]  ? __hrtimer_setup+0x187/0x210
[  358.481248][T19955]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  358.481259][T19955]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  358.481280][T19955]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  358.481288][T19955]  ? trace_kmalloc+0x1f/0xd0
[  358.481295][T19955]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  358.481304][T19955]  ? kstrndup+0xbf/0x160
[  358.481315][T19955]  hwsim_new_radio_nl+0xea4/0x1b10
[  358.481326][T19955]  ? __pfx___nla_validate_parse+0x10/0x10
[  358.481342][T19955]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  358.481356][T19955]  ? __nla_parse+0x40/0x60
[  358.481367][T19955]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  358.481379][T19955]  genl_family_rcv_msg_doit+0x215/0x300
[  358.481390][T19955]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  358.481403][T19955]  ? bpf_lsm_capable+0x9/0x20
[  358.481411][T19955]  ? security_capable+0x7e/0x2e0
[  358.481423][T19955]  genl_rcv_msg+0x60e/0x790
[  358.481434][T19955]  ? __pfx_genl_rcv_msg+0x10/0x10
[  358.481441][T19955]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  358.481456][T19955]  netlink_rcv_skb+0x208/0x470
[  358.481465][T19955]  ? __lock_acquire+0xab9/0xd20
[  358.481475][T19955]  ? __pfx_genl_rcv_msg+0x10/0x10
[  358.481483][T19955]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  358.481500][T19955]  ? down_read+0x1ad/0x2e0
[  358.481508][T19955]  genl_rcv+0x28/0x40
[  358.481515][T19955]  netlink_unicast+0x82f/0x9e0
[  358.481528][T19955]  ? __pfx_netlink_unicast+0x10/0x10
[  358.481537][T19955]  ? netlink_sendmsg+0x642/0xb30
[  358.481542][T19955]  ? skb_put+0x11b/0x210
[  358.481551][T19955]  netlink_sendmsg+0x805/0xb30
[  358.481561][T19955]  ? __pfx_netlink_sendmsg+0x10/0x10
[  358.481610][T19955]  ? aa_sock_msg_perm+0xf1/0x1d0
[  358.481618][T19955]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  358.481625][T19955]  ? __pfx_netlink_sendmsg+0x10/0x10
[  358.481633][T19955]  __sock_sendmsg+0x21c/0x270
[  358.481644][T19955]  ____sys_sendmsg+0x505/0x830
[  358.481654][T19955]  ? __pfx_____sys_sendmsg+0x10/0x10
[  358.481666][T19955]  ? import_iovec+0x74/0xa0
[  358.481676][T19955]  ___sys_sendmsg+0x21f/0x2a0
[  358.481685][T19955]  ? __pfx____sys_sendmsg+0x10/0x10
[  358.481709][T19955]  ? __fget_files+0x2a/0x420
[  358.481720][T19955]  ? __fget_files+0x3a0/0x420
[  358.481748][T19955]  __x64_sys_sendmsg+0x19b/0x260
[  358.481763][T19955]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  358.481776][T19955]  ? rcu_is_watching+0x15/0xb0
[  358.481786][T19955]  ? do_syscall_64+0xbe/0x3b0
[  358.481795][T19955]  do_syscall_64+0xfa/0x3b0
[  358.481801][T19955]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.481810][T19955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.481817][T19955]  ? exc_page_fault+0x9f/0xf0
[  358.481828][T19955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.481835][T19955] RIP: 0033:0x7fbd7038eba9
[  358.481843][T19955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.481849][T19955] RSP: 002b:00007fbd7122c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  358.481858][T19955] RAX: ffffffffffffffda RBX: 00007fbd705d5fa0 RCX: 00007fbd7038eba9
[  358.481863][T19955] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000010
[  358.481868][T19955] RBP: 00007fbd70411e19 R08: 0000000000000000 R09: 0000000000000000
[  358.481872][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.481876][T19955] R13: 00007fbd705d6038 R14: 00007fbd705d5fa0 R15: 00007ffd34e7e868
[  358.481889][T19955]  </TASK>
[  358.721989][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  358.819225][T19962] netlink: 'syz.2.3609': attribute type 1 has an invalid length.
[  358.825861][T19962] vlan2: entered allmulticast mode
[  358.827616][T19962] veth1: entered allmulticast mode
[  359.089382][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3614'.
[  359.238018][T19980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3616'.
[  359.315491][T19980] wg1 speed is unknown, defaulting to 1000
[  359.318627][T19980] lo speed is unknown, defaulting to 1000
[  359.371899][T19986] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3618'.
[  359.375499][T19986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  359.551707][T19993] bridge1: entered allmulticast mode
[  359.562346][ T5864] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  359.565390][ T5864] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  359.582799][ T2309] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  360.011220][T19998] wg1 speed is unknown, defaulting to 1000
[  360.020584][T19998] lo speed is unknown, defaulting to 1000
[  360.161787][T19999] wg1 speed is unknown, defaulting to 1000
[  360.165794][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'.
[  360.186155][T19999] lo speed is unknown, defaulting to 1000
[  360.241898][T17390] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  360.268696][T20006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.311174][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3624'.
[  360.325320][T17390] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  360.389370][T20010] vlan2: entered allmulticast mode
[  360.391521][T20010] erspan0: entered allmulticast mode
[  360.439239][T20016] netlink: 'syz.1.3627': attribute type 1 has an invalid length.
[  360.476263][T20016] veth3: entered promiscuous mode
[  360.573064][T20024] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  360.576708][T20024] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  360.583736][T20027] netlink: 'syz.2.3632': attribute type 1 has an invalid length.
[  360.614303][T20027] bond1: entered promiscuous mode
[  360.616574][T20027] bond1: entered allmulticast mode
[  360.639619][T20027] bridge2: entered promiscuous mode
[  360.645393][T20027] bridge2: entered allmulticast mode
[  360.650258][T20027] bond1: (slave bridge2): making interface the new active one
[  360.663533][T20027] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  360.714533][T20035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  360.721201][T20037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  360.838595][T20044] netlink: 'syz.1.3638': attribute type 2 has an invalid length.
[  360.996115][T20055] netlink: 'syz.1.3641': attribute type 21 has an invalid length.
[  361.079942][T20063] vlan3: entered promiscuous mode
[  361.087603][T20063] vlan3: entered allmulticast mode
[  361.090027][T20063] hsr_slave_1: entered allmulticast mode
[  361.298415][T20075] netlink: 'syz.2.3646': attribute type 2 has an invalid length.
[  361.308274][T20076] tipc: Trying to set illegal importance in message
[  361.309008][T20075] k*]: entered promiscuous mode
[  361.319528][T20075] veth0_to_team: entered promiscuous mode
[  361.322309][T20075] veth0_to_team: entered allmulticast mode
[  361.476931][T20084] netlink: 'syz.2.3649': attribute type 3 has an invalid length.
[  361.487607][T20084] netlink: 'syz.2.3649': attribute type 1 has an invalid length.
[  361.522782][ T5238] Bluetooth: hci2: command 0x040f tx timeout
[  361.547218][T20093] netlink: 'syz.1.3653': attribute type 4 has an invalid length.
[  361.566160][T20093] vlan0: entered promiscuous mode
[  361.579454][ T5876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.586309][ T5876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.602278][T17390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.880872][T20119] wg1 speed is unknown, defaulting to 1000
[  361.883832][T20119] lo speed is unknown, defaulting to 1000
[  362.222164][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  362.555868][T20149] netlink: 'syz.0.3668': attribute type 1 has an invalid length.
[  362.561841][T17390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  362.700302][T20158] veth0_to_team: left promiscuous mode
[  362.702854][T20158] veth0_to_team: left allmulticast mode
[  362.708461][T20158] bridge1: left allmulticast mode
[  362.714183][T20158] bond1: left promiscuous mode
[  362.715983][T20158] bond1: left allmulticast mode
[  362.718497][T20158] bridge2: left promiscuous mode
[  362.720271][T20158] bridge2: left allmulticast mode
[  362.856144][T20167] __nla_validate_parse: 31 callbacks suppressed
[  362.856154][T20167] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3673'.
[  362.861302][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  362.864445][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  362.871093][T20164] netlink: 'syz.0.3672': attribute type 1 has an invalid length.
[  362.871986][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3673'.
[  362.890320][T20164] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  362.895053][T20164] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  363.044305][T20177] wg1 speed is unknown, defaulting to 1000
[  363.048360][T20177] lo speed is unknown, defaulting to 1000
[  363.473648][T20202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3682'.
[  363.478467][T20202] bridge: RTM_NEWNEIGH with invalid ether address
[  363.598734][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.604334][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.607909][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.614296][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.618105][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.644017][T20207] wg1 speed is unknown, defaulting to 1000
[  363.647039][T20207] lo speed is unknown, defaulting to 1000
[  363.737351][T20207] chnl_net:caif_netlink_parms(): no params data found
[  363.789320][T20207] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.792677][T20207] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.795349][T20207] bridge_slave_0: entered allmulticast mode
[  363.798588][T20207] bridge_slave_0: entered promiscuous mode
[  363.802182][T20207] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.804483][T20207] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.806806][T20207] bridge_slave_1: entered allmulticast mode
[  363.809432][T20207] bridge_slave_1: entered promiscuous mode
[  363.828401][T20207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.833493][T20207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.853165][T20207] team0: Port device team_slave_0 added
[  363.856322][T20207] team0: Port device team_slave_1 added
[  363.874702][T20207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.877441][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.887462][T20207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.892139][T20207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.894629][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.903222][T20207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.935247][T20207] hsr_slave_0: entered promiscuous mode
[  363.937974][T20207] hsr_slave_1: entered promiscuous mode
[  363.940172][T20207] debugfs: 'hsr0' already exists in 'hsr'
[  363.942110][T20207] Cannot create hsr debugfs directory
[  364.012699][T20207] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.077391][T20207] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.135910][T20207] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.198327][T20207] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.335615][T20234] netlink: 'syz.0.3686': attribute type 1 has an invalid length.
[  364.372210][T20207] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  364.377299][T20207] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  364.382004][T20207] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  364.386773][T20207] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  364.431769][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3688'.
[  364.434694][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3688'.
[  364.470645][T20207] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.481182][T20207] 8021q: adding VLAN 0 to HW filter on device team0
[  364.492094][T14667] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.495218][T14667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.514319][T14667] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.517205][T14667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.531860][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'.
[  364.534894][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3689'.
[  364.537715][T20249] netlink: 'syz.2.3689': attribute type 18 has an invalid length.
[  364.590040][T20252] vlan1: entered promiscuous mode
[  364.595492][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3691'.
[  364.596351][T20252] vlan1: entered allmulticast mode
[  364.600703][T20252] hsr_slave_1: entered allmulticast mode
[  364.724449][T20261] sock: sock_timestamping_bind_phc: sock not bind to device
[  364.809935][T20266] netlink: 'syz.2.3693': attribute type 1 has an invalid length.
[  364.844440][T20207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.887606][T20207] veth0_vlan: entered promiscuous mode
[  364.899560][T20207] veth1_vlan: entered promiscuous mode
[  364.912355][T20270] netlink: 'syz.2.3695': attribute type 10 has an invalid length.
[  364.919446][T20270] team0: Port device geneve0 added
[  364.930433][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.934947][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.937630][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.964122][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.005965][T20207] veth0_macvtap: entered promiscuous mode
[  365.023212][T20207] veth1_macvtap: entered promiscuous mode
[  365.054186][T20207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.087241][T20207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.096630][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.115416][ T7260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.118971][ T7260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.131355][ T7260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.274078][T14667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.277369][T14667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.305336][T20300] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  365.308820][T20298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  365.327275][T20300] tipc: Started in network mode
[  365.329441][T20300] tipc: Node identity 6afbe51c9725, cluster identity 4711
[  365.332965][T20300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.335969][T20298] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.339879][T20298] syzkaller0: entered promiscuous mode
[  365.342614][T20298] syzkaller0: entered allmulticast mode
[  365.350700][T20298] tipc: Resetting bearer <eth:syzkaller0>
[  365.364376][T20297] tipc: Resetting bearer <eth:syzkaller0>
[  365.375003][T20297] tipc: Disabling bearer <eth:syzkaller0>
[  365.387104][T14663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.390806][T14663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.469526][T20310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  365.618076][T20320] veth3: entered promiscuous mode
[  365.693002][ T5238] Bluetooth: hci2: command tx timeout
[  365.842133][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  366.595270][T20353] validate_nla: 2 callbacks suppressed
[  366.595280][T20353] netlink: 'syz.0.3722': attribute type 13 has an invalid length.
[  366.749757][T20351] syzkaller0: entered promiscuous mode
[  366.753507][T20351] syzkaller0: entered allmulticast mode
[  366.757958][T20357] bridge_slave_1: left allmulticast mode
[  366.760194][T20357] bridge_slave_1: left promiscuous mode
[  366.763520][T20357] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.768912][T20357] bridge_slave_0: left allmulticast mode
[  366.771197][T20357] bridge_slave_0: left promiscuous mode
[  366.773913][T20357] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.307935][T20364] netlink: 'syz.2.3725': attribute type 6 has an invalid length.
[  367.467478][ T1116] block nbd3: Possible stuck request ffff888022b20000: control (read@0,1024B). Runtime 30 seconds
[  367.474579][ T1116] block nbd3: Possible stuck request ffff888022b20200: control (read@1024,1024B). Runtime 30 seconds
[  367.479134][ T1116] block nbd3: Possible stuck request ffff888022b20400: control (read@2048,1024B). Runtime 30 seconds
[  367.484634][ T1116] block nbd3: Possible stuck request ffff888022b20600: control (read@3072,1024B). Runtime 30 seconds
[  367.771666][ T5238] Bluetooth: hci2: command tx timeout
[  368.031852][T20370] openvswitch: netlink: IPv6 tunnel dst address is zero
[  368.096654][T20372] __nla_validate_parse: 18 callbacks suppressed
[  368.096671][T20372] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3727'.
[  368.366557][T20382] netlink: 'syz.0.3730': attribute type 10 has an invalid length.
[  368.370904][T20384] netlink: 'syz.2.3731': attribute type 12 has an invalid length.
[  368.381486][T20385] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3731'.
[  368.385845][T20384] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3731'.
[  368.509741][T20400] syzkaller1: entered promiscuous mode
[  368.514553][T20400] syzkaller1: entered allmulticast mode
[  368.521446][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'.
[  368.657010][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'.
[  368.660143][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'.
[  368.720181][ T5876] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.782038][T20412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3739'.
[  368.787195][ T5876] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.840219][ T5876] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.865295][T20410] Bluetooth: MGMT ver 1.23
[  368.913034][ T5876] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.047502][ T5876] bridge_slave_1: left allmulticast mode
[  369.049681][ T5876] bridge_slave_1: left promiscuous mode
[  369.062084][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.067172][T20421] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3742'.
[  369.075194][ T5876] bridge_slave_0: left allmulticast mode
[  369.077292][ T5876] bridge_slave_0: left promiscuous mode
[  369.079451][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.084803][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.088821][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.092904][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.096667][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.099966][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.210237][T20429] netlink: 'syz.1.3742': attribute type 1 has an invalid length.
[  369.266261][ T5876] team0: Port device geneve0 removed
[  369.401708][ T5876] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  369.621067][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.625019][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.628105][ T5876] bond0 (unregistering): Released all slaves
[  369.634827][ T5876] bond1 (unregistering): Released all slaves
[  369.641286][T20421] IPVS: Unknown mcast interface: vetN1_macvtap
[  369.644106][T20426] netlink: 'syz.1.3742': attribute type 11 has an invalid length.
[  369.665259][T20432] veth3: entered promiscuous mode
[  369.676945][T20422] wg1 speed is unknown, defaulting to 1000
[  369.679576][T20422] lo speed is unknown, defaulting to 1000
[  369.762905][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3743'.
[  369.823718][T20422] chnl_net:caif_netlink_parms(): no params data found
[  369.851751][ T5238] Bluetooth: hci2: command tx timeout
[  369.985980][T20446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.040113][T20422] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.045431][T20422] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.051182][T20422] bridge_slave_0: entered allmulticast mode
[  370.055867][T20422] bridge_slave_0: entered promiscuous mode
[  370.062534][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3745'.
[  370.068401][T20422] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.071308][T20422] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.083152][T20422] bridge_slave_1: entered allmulticast mode
[  370.087065][T20422] bridge_slave_1: entered promiscuous mode
[  370.100418][T20446] tipc: Resetting bearer <eth:syzkaller0>
[  370.112145][T20446] tipc: Enabling of bearer <eth:syzkaller07> rejected, failed to enable media
[  370.134761][T20422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.146702][T20422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.150459][T20446] syzkaller0: entered promiscuous mode
[  370.152930][T20446] syzkaller0: entered allmulticast mode
[  370.183926][T20444] tipc: Resetting bearer <eth:syzkaller0>
[  370.200797][T20444] tipc: Disabling bearer <eth:syzkaller0>
[  370.207791][T20422] team0: Port device team_slave_0 added
[  370.216925][T20422] team0: Port device team_slave_1 added
[  370.359563][T20465] bridge_slave_1: left allmulticast mode
[  370.371914][T20465] bridge_slave_1: left promiscuous mode
[  370.374616][T20465] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.386293][T20465] bridge_slave_0: left allmulticast mode
[  370.388470][T20465] bridge_slave_0: left promiscuous mode
[  370.390597][T20465] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.567174][T20422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.571134][T20422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.581364][T20422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.588800][T20422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.601709][T20422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.619942][T20422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.721445][T20422] hsr_slave_0: entered promiscuous mode
[  370.729080][T20422] hsr_slave_1: entered promiscuous mode
[  370.731829][T20422] debugfs: 'hsr0' already exists in 'hsr'
[  370.734000][T20422] Cannot create hsr debugfs directory
[  371.123220][ T5238] Bluetooth: hci1: command tx timeout
[  371.334238][ T5876] k*]: left promiscuous mode
[  371.385332][ T5876] tipc: Left network mode
[  371.530782][ T5876] hsr_slave_0: left promiscuous mode
[  371.556210][ T5876] hsr_slave_1: left promiscuous mode
[  371.558233][T20508] netlink: 'syz.0.3752': attribute type 9 has an invalid length.
[  371.559064][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.580357][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.853103][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  371.884389][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  371.922797][ T5238] Bluetooth: hci2: command tx timeout
[  372.189701][T20422] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  372.206171][T20422] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  372.219783][T20422] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  372.241077][T20422] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  372.429759][T20422] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.471006][T20422] 8021q: adding VLAN 0 to HW filter on device team0
[  372.482819][T14667] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.485813][T14667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.506151][T14667] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.509180][T14667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.548470][T20554] pim6reg1: entered promiscuous mode
[  372.550711][T20554] pim6reg1: entered allmulticast mode
[  372.671574][T20564] netlink: 'syz.0.3761': attribute type 2 has an invalid length.
[  372.676942][T20564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  372.804664][T20422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.839661][T20422] veth0_vlan: entered promiscuous mode
[  372.846837][T20422] veth1_vlan: entered promiscuous mode
[  372.867052][T20422] veth0_macvtap: entered promiscuous mode
[  372.874767][T20422] veth1_macvtap: entered promiscuous mode
[  372.899913][T20422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.920449][T20422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.935067][T19662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.948002][T19662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.953383][T19662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.987948][T19662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.051195][T14663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.054217][T14663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.136319][T14655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.138883][T14655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.202727][ T5238] Bluetooth: hci1: command tx timeout
[  373.258162][T20585] __nla_validate_parse: 5 callbacks suppressed
[  373.258178][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3740'.
[  373.302621][T20597] netlink: 'syz.0.3771': attribute type 1 has an invalid length.
[  373.323902][T20597] 8021q: adding VLAN 0 to HW filter on device bond1
[  373.339636][T20597] bond1: (slave geneve2): making interface the new active one
[  373.344044][T20597] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  373.348134][ T7260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.351438][ T7260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.356928][ T7260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.361063][ T7260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.394048][T20603] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  373.414313][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'.
[  373.419580][T20606] tipc: Started in network mode
[  373.423615][T20606] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  373.426531][T20606] tipc: Enabled bearer <eth:geneve1>, priority 10
[  373.456529][T20608] 8021q: VLANs not supported on sit0
[  373.595152][T20624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.629072][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'.
[  373.878282][T20657] netlink: 'syz.1.3786': attribute type 21 has an invalid length.
[  373.881550][T20657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3786'.
[  373.889526][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'.
[  373.973220][T20663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3788'.
[  373.977848][T20663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3788'.
[  373.995028][ T5864] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  373.999070][ T5864] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  374.011309][ T5864] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  374.016100][ T5864] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  374.058798][T20667] veth0: entered promiscuous mode
[  374.060572][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'.
[  374.082679][T20668] veth0 (unregistering): left promiscuous mode
[  374.101782][T20671] bridge: RTM_NEWNEIGH with invalid ether address
[  374.258090][T20676] netlink: 'syz.2.3793': attribute type 7 has an invalid length.
[  374.338252][T20678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3794'.
[  374.423535][T20683] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3796'.
[  374.491767][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  374.541911][ T2210] tipc: Node number set to 15444650
[  375.121827][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.235344][T20699] tun0: tun_chr_ioctl cmd 1074025675
[  375.237648][T20699] tun0: persist enabled
[  375.239712][T20699] tun0: tun_chr_ioctl cmd 1074025675
[  375.244787][T20699] tun0: persist enabled
[  375.317477][T20701] 8021q: adding VLAN 0 to HW filter on device bond1
[  375.325043][T20701] bond0: (slave bond1): Enslaving as an active interface with an up link
[  375.721457][ T7260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.834798][ T7260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.954188][ T7260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.066631][ T7260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.089191][T20728] !: renamed from dummy0
[  376.111259][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.120871][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.132101][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.134949][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.138205][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.164892][T20726] wg1 speed is unknown, defaulting to 1000
[  376.167817][T20726] lo speed is unknown, defaulting to 1000
[  376.314427][T20734] wg1 speed is unknown, defaulting to 1000
[  376.361983][T20734] lo speed is unknown, defaulting to 1000
[  376.492575][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.508216][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.515384][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.525081][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.528353][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.065910][ T7260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.073263][ T7260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.078918][ T7260] bond0 (unregistering): (slave bond1): Releasing backup interface
[  377.083633][ T7260] bond0 (unregistering): Released all slaves
[  377.179702][ T7260] bond1 (unregistering): Released all slaves
[  377.239525][T20740] wg1 speed is unknown, defaulting to 1000
[  377.243833][T20740] lo speed is unknown, defaulting to 1000
[  377.517308][T20726] chnl_net:caif_netlink_parms(): no params data found
[  377.643440][ T7260] hsr_slave_0: left promiscuous mode
[  377.648466][ T7260] hsr_slave_1: left promiscuous mode
[  377.651067][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.663100][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.672067][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.674807][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.707068][ T7260] veth1_macvtap: left promiscuous mode
[  377.709365][ T7260] veth0_macvtap: left promiscuous mode
[  377.996962][ T7260] team0 (unregistering): Port device team_slave_1 removed
[  378.035225][ T7260] team0 (unregistering): Port device team_slave_0 removed
[  378.164355][   T54] Bluetooth: hci1: command tx timeout
[  378.420216][T20726] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.423702][T20726] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.426378][T20726] bridge_slave_0: entered allmulticast mode
[  378.429157][T20726] bridge_slave_0: entered promiscuous mode
[  378.430010][T20788] __nla_validate_parse: 5 callbacks suppressed
[  378.430022][T20788] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3818'.
[  378.434593][T20726] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.439948][T20726] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.442805][T20726] bridge_slave_1: entered allmulticast mode
[  378.446636][T20726] bridge_slave_1: entered promiscuous mode
[  378.449523][T20740] chnl_net:caif_netlink_parms(): no params data found
[  378.452915][T20787] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3818'.
[  378.526141][T20726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.551176][T20726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.566507][   T54] Bluetooth: hci2: command tx timeout
[  378.677871][T20726] team0: Port device team_slave_0 added
[  378.681498][T20726] team0: Port device team_slave_1 added
[  378.728853][T20726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.731382][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.743718][T20726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.772467][T20726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.776241][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.787005][T20726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.798152][T20740] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.802517][T20740] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.809086][T20740] bridge_slave_0: entered allmulticast mode
[  378.818575][T20740] bridge_slave_0: entered promiscuous mode
[  378.835535][T20740] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.838542][T20740] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.841209][T20740] bridge_slave_1: entered allmulticast mode
[  378.845043][T20740] bridge_slave_1: entered promiscuous mode
[  378.867450][T20726] hsr_slave_0: entered promiscuous mode
[  378.870356][T20726] hsr_slave_1: entered promiscuous mode
[  378.877735][T20726] debugfs: 'hsr0' already exists in 'hsr'
[  378.880146][T20726] Cannot create hsr debugfs directory
[  378.927232][T20740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.932671][T20740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.983979][T20740] team0: Port device team_slave_0 added
[  378.987738][T20740] team0: Port device team_slave_1 added
[  379.030720][ T7260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.082219][T20740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.084795][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.094325][T20740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.119009][ T7260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.155201][T20740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.162756][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.187443][T20740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.212021][ T7260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.318226][ T7260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.349398][T20740] hsr_slave_0: entered promiscuous mode
[  379.357870][T20740] hsr_slave_1: entered promiscuous mode
[  379.360870][T20740] debugfs: 'hsr0' already exists in 'hsr'
[  379.371109][T20740] Cannot create hsr debugfs directory
[  379.852168][ T7260] bridge_slave_1: left allmulticast mode
[  379.854368][ T7260] bridge_slave_1: left promiscuous mode
[  379.856652][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.864687][ T7260] bridge_slave_0: left allmulticast mode
[  379.866905][ T7260] bridge_slave_0: left promiscuous mode
[  379.869233][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.877951][ T7260] tipc: Resetting bearer <eth:geneve1>
[  380.067510][ T7260] tipc: Disabling bearer <eth:geneve1>
[  380.237763][ T7260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.243025][   T54] Bluetooth: hci1: command tx timeout
[  380.246267][ T7260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.251981][ T7260] bond0 (unregistering): Released all slaves
[  380.339767][ T7260] tipc: Left network mode
[  380.347228][T20726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  380.448381][T20726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  380.457877][T20726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  380.490177][T20726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  380.616050][ T7260] hsr_slave_0: left promiscuous mode
[  380.618202][ T7260] hsr_slave_1: left promiscuous mode
[  380.620689][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.631533][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.636012][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.638882][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.643776][   T54] Bluetooth: hci2: command tx timeout
[  380.684997][ T7260] veth1_macvtap: left promiscuous mode
[  380.686902][ T7260] veth0_macvtap: left promiscuous mode
[  380.689123][ T7260] veth1_vlan: left promiscuous mode
[  380.691264][ T7260] veth0_vlan: left promiscuous mode
[  381.080166][ T7260] team0 (unregistering): Port device team_slave_1 removed
[  381.120735][ T7260] team0 (unregistering): Port device team_slave_0 removed
[  381.566738][T20874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.590870][T20873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.669150][T20726] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.704568][T20726] 8021q: adding VLAN 0 to HW filter on device team0
[  381.727615][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.730588][ T9749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.760584][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'.
[  381.766692][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.769662][ T9749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.793316][T20878] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  381.885258][T20740] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  381.905385][T20740] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  381.927528][T20740] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  381.940403][T20740] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  382.284080][T20740] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.334042][   T54] Bluetooth: hci1: command tx timeout
[  382.350872][T20740] 8021q: adding VLAN 0 to HW filter on device team0
[  382.370219][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.372967][ T9747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.396800][T14667] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.399747][T14667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.459276][T20726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.596755][T20726] veth0_vlan: entered promiscuous mode
[  382.629951][T20726] veth1_vlan: entered promiscuous mode
[  382.689024][T20726] veth0_macvtap: entered promiscuous mode
[  382.709276][T20726] veth1_macvtap: entered promiscuous mode
[  382.722130][   T54] Bluetooth: hci2: command tx timeout
[  382.744999][T20726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.757734][T20726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.764765][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.768662][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.805440][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.825556][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.956168][T14653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.963301][T14653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.967938][T20740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.028907][ T9747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.036768][ T9747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.047279][T20740] veth0_vlan: entered promiscuous mode
[  383.064892][T20740] veth1_vlan: entered promiscuous mode
[  383.088079][T20740] veth0_macvtap: entered promiscuous mode
[  383.094422][T20740] veth1_macvtap: entered promiscuous mode
[  383.107480][T20740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.200152][T20914] vlan0: entered promiscuous mode
[  383.215622][T20740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.237517][T19662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.241985][T19662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.250399][T19662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.271263][T19662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.303930][T20916] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  383.704276][T20918] netlink: 'syz.0.3829': attribute type 17 has an invalid length.
[  384.405813][   T54] Bluetooth: hci1: command tx timeout
[  384.613779][T20918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  384.636235][ T9747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.639480][ T9747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.710141][T14655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.713964][T14655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.776523][T20931] netlink: 'syz.2.3813': attribute type 21 has an invalid length.
[  384.784629][T20931] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3813'.
[  384.802033][   T54] Bluetooth: hci2: command tx timeout
[  384.806808][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'.
[  384.929907][T20941] bond0: default FDB implementation only supports local addresses
[  384.936117][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3833'.
[  385.057490][T20945] netlink: 'syz.1.3835': attribute type 10 has an invalid length.
[  385.063695][T20945] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.067820][T20945] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.079402][T20945] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.082257][T20945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.085597][T20945] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.088611][T20945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.094830][T20945] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  385.150415][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'.
[  385.156435][T20952] bridge_slave_1: left allmulticast mode
[  385.161960][T20952] bridge_slave_1: left promiscuous mode
[  385.164961][T20952] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.170160][T20952] bridge_slave_0: left allmulticast mode
[  385.174090][T20952] bridge_slave_0: left promiscuous mode
[  385.176062][T20952] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.190580][T20952] bond0: (slave bridge0): Releasing backup interface
[  385.263734][T20962] netlink: 'syz.1.3835': attribute type 1 has an invalid length.
[  385.266978][T20962] netlink: 600 bytes leftover after parsing attributes in process `syz.1.3835'.
[  385.731502][T20993] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0
[  385.979722][T21000] IPVS: Scheduler module ip_vs_sip not found
[  386.034422][T21008] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.037151][T21008] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.127147][T21008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.140145][T21008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.252818][ T7260] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.256196][ T7260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.269383][T21010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3842'.
[  386.273703][ T7260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.278212][ T7260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.314028][T21013] bridge_slave_0: left allmulticast mode
[  386.316345][T21013] bridge_slave_0: left promiscuous mode
[  386.319624][T21013] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.329535][T21013] bridge_slave_1: left allmulticast mode
[  386.331698][T21013] bridge_slave_1: left promiscuous mode
[  386.334068][T21013] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.351176][T21013] bond0: (slave bond_slave_0): Releasing backup interface
[  386.364101][T21013] bond0: (slave bond_slave_1): Releasing backup interface
[  386.385803][T21013] team0: Port device team_slave_0 removed
[  386.391078][T21013] team0: Port device team_slave_1 removed
[  386.398900][T21013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.420901][T21013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.442191][T21020] netlink: 'syz.1.3845': attribute type 1 has an invalid length.
[  386.700955][T21034] netlink: 'syz.2.3847': attribute type 1 has an invalid length.
[  386.753172][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'.
[  386.760595][T21035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3847'.
[  386.810594][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3847'.
[  386.842333][T21035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  386.846770][T21035] gretap1: entered promiscuous mode
[  387.034583][T21040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3849'.
[  387.175637][T21046] netlink: 'syz.2.3851': attribute type 1 has an invalid length.
[  387.317164][T21051] wg1 speed is unknown, defaulting to 1000
[  387.320470][T21051] lo speed is unknown, defaulting to 1000
[  387.679775][T21068] tipc: Started in network mode
[  387.681844][T21068] tipc: Node identity ac14140f, cluster identity 4711
[  387.684331][T21068] tipc: New replicast peer: 255.255.255.255
[  387.687092][T21068] tipc: Enabled bearer <udp:syz2>, priority 6
[  387.824902][T21071] hsr_slave_0 (unregistering): left promiscuous mode
[  388.070988][T21079] veth0: entered promiscuous mode
[  388.079077][T21079] netlink: 'syz.1.3862': attribute type 11 has an invalid length.
[  388.099871][T21079] netlink: 'syz.1.3862': attribute type 8 has an invalid length.
[  388.109570][T21078] veth0: left promiscuous mode
[  388.219919][T21088] netlink: 'syz.0.3865': attribute type 1 has an invalid length.
[  388.381559][T21099] netlink: 'syz.0.3867': attribute type 1 has an invalid length.
[  388.402007][T21099] NCSI netlink: No device for ifindex 3321692160
[  388.692460][   T24] tipc: Node number set to 2886997007
[  389.336453][T21135] : (slave bond_slave_0): Releasing backup interface
[  389.351565][T21135] : (slave bond_slave_1): Releasing backup interface
[  389.367557][T21135] team0: Port device team_slave_0 removed
[  389.372174][T21135] team0: Port device team_slave_1 removed
[  389.376645][T21135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.380567][T21135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.384905][T21135] batman_adv: batadv0: Removing interface: gretap1
[  389.390633][T21135] bond1: (slave geneve2): Releasing active interface
[  389.398901][T21137] tipc: Invalid UDP bearer configuration
[  389.398937][T21137] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  389.411814][ T5864] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.412232][ T2210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.419918][ T5864] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.423535][ T5864] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.426507][ T5864] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.474657][T21145] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  389.577218][T21157] validate_nla: 2 callbacks suppressed
[  389.577232][T21157] netlink: 'syz.2.3884': attribute type 1 has an invalid length.
[  389.608214][T21157] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.629061][T21157] bond1: (slave gretap2): making interface the new active one
[  389.635144][T21157] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  389.640456][T21164] IPv6: Can't replace route, no match found
[  389.646576][T21162] xt_limit: Overflow, try lower: 271964/0
[  389.651861][T21162] openvswitch: netlink: nsh attr 0 has unexpected len 60 expected 0
[  389.655182][T21162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.718493][T21168] netlink: 'syz.1.3890': attribute type 1 has an invalid length.
[  389.731218][T21171] gtp0: entered promiscuous mode
[  389.788071][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.908922][T21182] veth3: entered allmulticast mode
[  389.966682][T21187] bridge0: port 1(batadv1) entered blocking state
[  389.969511][T21187] bridge0: port 1(batadv1) entered disabled state
[  389.973595][T21187] batadv1: entered allmulticast mode
[  389.977351][T21187] batadv1: entered promiscuous mode
[  389.988034][T21187] __nla_validate_parse: 10 callbacks suppressed
[  389.988049][T21187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3893'.
[  389.994515][T21187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3893'.
[  390.030803][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3894'.
[  390.035885][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3894'.
[  390.045984][T21189] erspan0: entered promiscuous mode
[  390.048507][T21189] gretap0: entered promiscuous mode
[  390.051996][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  390.182487][ T5912] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.186263][ T5912] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.190375][ T5912] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.200189][ T5912] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.333781][T21210] netlink: 'syz.2.3896': attribute type 1 has an invalid length.
[  390.337059][T21210] netlink: 'syz.2.3896': attribute type 3 has an invalid length.
[  390.340252][T21210] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3896'.
[  390.464683][ T7260] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  390.468873][ T7260] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  390.481768][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  390.683391][T21217] netlink: 'syz.0.3900': attribute type 4 has an invalid length.
[  390.822372][ T7260] syzkaller0: tun_net_xmit 76
[  390.825160][ T7260] syzkaller0: tun_net_xmit 48
[  390.825774][T21224] syzkaller0: create flow: hash 976620926 index 1
[  390.841814][ T5914] syzkaller0: tun_net_xmit 76
[  390.895846][T21225] syzkaller0: delete flow: hash 976620926 index 1
[  391.024847][T21228] netlink: 'syz.2.3902': attribute type 32 has an invalid length.
[  391.028891][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'.
[  391.175849][T21234] netlink: 'syz.1.3903': attribute type 1 has an invalid length.
[  391.179097][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'.
[  392.291296][T21228] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  392.306022][T21231] syzkaller1: entered allmulticast mode
[  392.310675][T21239] syzkaller1: left allmulticast mode
[  392.348519][T21243] netlink: 'syz.2.3904': attribute type 25 has an invalid length.
[  392.465706][T21250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3907'.
[  392.483286][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'.
[  392.647057][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3909'.
[  392.918321][T21284] @0: renamed from bond_slave_1
[  393.025379][T21291] netlink: 'syz.1.3919': attribute type 3 has an invalid length.
[  393.028751][T21291] netlink: 'syz.1.3919': attribute type 2 has an invalid length.
[  393.171260][T21306] netlink: 'syz.0.3924': attribute type 11 has an invalid length.
[  393.229658][T21311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.269446][T21311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.836173][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.840639][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.849777][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.854806][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.858176][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.887129][T21337] wg1 speed is unknown, defaulting to 1000
[  393.890025][T21337] lo speed is unknown, defaulting to 1000
[  394.008749][T21337] chnl_net:caif_netlink_parms(): no params data found
[  394.098567][T21337] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.102074][T21337] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.105738][T21337] bridge_slave_0: entered allmulticast mode
[  394.109881][T21337] bridge_slave_0: entered promiscuous mode
[  394.116755][T21337] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.119864][T21337] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.123143][T21337] bridge_slave_1: entered allmulticast mode
[  394.127114][T21337] bridge_slave_1: entered promiscuous mode
[  394.166945][T21337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.174825][T21337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.213584][T21337] team0: Port device team_slave_0 added
[  394.218247][T21337] team0: Port device team_slave_1 added
[  394.246784][T21348] syz_tun: entered allmulticast mode
[  394.250185][T21337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.253655][T21337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.265840][T21337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.277635][T21348] dvmrp8: entered allmulticast mode
[  394.280878][T21337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.285261][T21337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.302027][T21337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.360707][T21337] hsr_slave_0: entered promiscuous mode
[  394.369906][T21337] hsr_slave_1: entered promiscuous mode
[  394.373012][T21337] debugfs: 'hsr0' already exists in 'hsr'
[  394.375669][T21337] Cannot create hsr debugfs directory
[  394.386904][T21348] wg1 speed is unknown, defaulting to 1000
[  394.415474][T21348] lo speed is unknown, defaulting to 1000
[  394.455046][T21350] wg1 speed is unknown, defaulting to 1000
[  394.458910][T21350] lo speed is unknown, defaulting to 1000
[  394.469855][T21352] geneve2: entered promiscuous mode
[  394.472860][T21352] geneve2: entered allmulticast mode
[  394.667021][T21347] syz_tun: left allmulticast mode
[  394.669351][T21347] dvmrp8: left allmulticast mode
[  395.042204][T21364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.411489][T21337] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  395.420470][T21337] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  395.428655][T21337] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  395.447550][T21337] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  395.682565][T21337] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.703360][T21337] 8021q: adding VLAN 0 to HW filter on device team0
[  395.710844][T14655] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.713368][T14655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.719794][T14655] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.722232][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.725984][T21412] __nla_validate_parse: 12 callbacks suppressed
[  395.725995][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3947'.
[  395.796658][T21418] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3949'.
[  395.927140][ T5238] Bluetooth: hci2: command tx timeout
[  395.966416][T21337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.010475][T21337] veth0_vlan: entered promiscuous mode
[  396.039633][T21337] veth1_vlan: entered promiscuous mode
[  396.071543][T21337] veth0_macvtap: entered promiscuous mode
[  396.090568][T21337] veth1_macvtap: entered promiscuous mode
[  396.116014][T21438] validate_nla: 2 callbacks suppressed
[  396.116027][T21438] netlink: 'syz.0.3956': attribute type 1 has an invalid length.
[  396.120679][T21337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.165474][T21438] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  396.169738][T21438] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  396.176085][T21438] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  396.203141][T21337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.220508][T21440] wg1 speed is unknown, defaulting to 1000
[  396.239928][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.251137][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.260121][T21440] lo speed is unknown, defaulting to 1000
[  396.269930][T19662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.275111][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.357284][T21441] wg1 speed is unknown, defaulting to 1000
[  396.371417][T21441] lo speed is unknown, defaulting to 1000
[  396.502298][ T9751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.506584][ T9751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.547631][ T9751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.550772][ T9751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.700625][T21455] netlink: 'syz.0.3958': attribute type 13 has an invalid length.
[  396.703546][T21456] vlan0: entered promiscuous mode
[  396.709343][T21455] netlink: 'syz.0.3958': attribute type 17 has an invalid length.
[  396.745787][T21455] 8021q: adding VLAN 0 to HW filter on device 
[  396.748998][T21455] 8021q: adding VLAN 0 to HW filter on device team0
[  396.761122][T21455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.818609][T21462] wg1 speed is unknown, defaulting to 1000
[  396.821257][T21462] lo speed is unknown, defaulting to 1000
[  396.854244][T21455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.951083][T21471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3962'.
[  396.971141][T21473] bond0: default FDB implementation only supports local addresses
[  397.044264][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'.
[  397.057917][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'.
[  397.110611][T21483] pim6reg: entered allmulticast mode
[  397.182097][T21488] netlink: 'syz.2.3968': attribute type 1 has an invalid length.
[  397.245812][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'.
[  397.278005][T21489] nbd: nbd1 already in use
[  397.281043][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'.
[  397.289568][T21489] block nbd1: NBD_DISCONNECT
[  397.298069][T21489] block nbd1: Send disconnect failed -32
[  397.326873][T21489] netlink: 'syz.1.3967': attribute type 1 has an invalid length.
[  397.459767][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3971'.
[  397.515571][T21505] wg1 speed is unknown, defaulting to 1000
[  397.519352][T21505] lo speed is unknown, defaulting to 1000
[  397.526197][ T1116] block nbd3: Possible stuck request ffff888022b20000: control (read@0,1024B). Runtime 60 seconds
[  397.530694][ T1116] block nbd3: Possible stuck request ffff888022b20200: control (read@1024,1024B). Runtime 60 seconds
[  397.535443][ T1116] block nbd3: Possible stuck request ffff888022b20400: control (read@2048,1024B). Runtime 60 seconds
[  397.541354][ T1116] block nbd3: Possible stuck request ffff888022b20600: control (read@3072,1024B). Runtime 60 seconds
[  397.609964][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3972'.
[  397.618228][T21505] netlink: 'syz.2.3972': attribute type 13 has an invalid length.
[  397.620963][T21505] netlink: 'syz.2.3972': attribute type 17 has an invalid length.
[  397.639536][T21505] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  397.737086][T21511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3973'.
[  397.749137][T21511] syzkaller1: entered promiscuous mode
[  397.751529][T21511] syzkaller1: entered allmulticast mode
[  398.012168][ T5238] Bluetooth: hci2: command tx timeout
[  398.043122][T21513] openvswitch: netlink: Multiple metadata blocks provided
[  398.467817][T21539] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode
[  398.650671][T21551] netlink: 'syz.1.3982': attribute type 1 has an invalid length.
[  398.720901][T21551] bond1: entered promiscuous mode
[  398.730210][T21551] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.006486][T21569] Bluetooth: MGMT ver 1.23
[  399.430596][T21602] netlink: 'syz.0.3995': attribute type 7 has an invalid length.
[  399.613740][T21616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.939906][T21655] netlink: 'syz.0.4010': attribute type 1 has an invalid length.
[  400.066038][T21674] bridge1: entered promiscuous mode
[  400.068182][T21674] bridge1: entered allmulticast mode
[  400.083175][ T5238] Bluetooth: hci2: command tx timeout
[  400.387622][T21706] tipc: Started in network mode
[  400.389621][T21706] tipc: Node identity 420f141da0b8, cluster identity 4711
[  400.395514][T21706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.411785][T21700] bond2: (slave geneve2): making interface the new active one
[  400.415056][T21700] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  400.418548][T21705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.425953][T21706] syzkaller0: entered promiscuous mode
[  400.427830][T21706] syzkaller0: entered allmulticast mode
[  400.430786][ T5912] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  400.451130][ T5912] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  400.461264][ T5912] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  400.478133][ T5912] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  400.486744][T21706] tipc: Resetting bearer <eth:syzkaller0>
[  400.704839][T21702] tipc: Resetting bearer <eth:syzkaller0>
[  400.718307][T21702] tipc: Disabling bearer <eth:syzkaller0>
[  400.799363][T21721] 8021q: adding VLAN 0 to HW filter on device bond5
[  400.804139][T21721] bond0: (slave bond5): Enslaving as an active interface with a down link
[  400.847023][T21728] pim6reg1: entered promiscuous mode
[  400.848822][T21728] pim6reg1: entered allmulticast mode
[  400.971453][T21735] IPVS: Error connecting to the multicast addr
[  401.123478][T21745] __nla_validate_parse: 25 callbacks suppressed
[  401.123487][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4033'.
[  401.159440][ T5297] udevd[5297]: worker [16965] /devices/virtual/block/nbd3 is taking a long time
[  401.247024][T21753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4035'.
[  401.295966][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037dc3c00: rx timeout, send abort
[  401.299778][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037dc0800: rx timeout, send abort
[  401.303753][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037dc3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  401.309765][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037dc0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  401.461292][T21773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.466483][T21773] syzkaller0: entered promiscuous mode
[  401.468461][T21773] syzkaller0: entered allmulticast mode
[  401.490156][T21773] tipc: Resetting bearer <eth:syzkaller0>
[  401.495174][T21772] tipc: Resetting bearer <eth:syzkaller0>
[  401.509568][T21772] tipc: Disabling bearer <eth:syzkaller0>
[  401.618605][T21786] 8021q: adding VLAN 0 to HW filter on device bond1
[  401.627531][T21786] bond_slave_0: entered promiscuous mode
[  401.629681][T21786] bond_slave_1: entered promiscuous mode
[  401.632268][T21786] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  401.637538][T21786] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  401.739311][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4045'.
[  401.747914][T21796] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.799650][T21796] bridge_slave_1 (unregistering): left allmulticast mode
[  401.803156][T21796] bridge_slave_1 (unregistering): left promiscuous mode
[  401.805692][T21796] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.161770][   T54] Bluetooth: hci2: command tx timeout
[  402.422279][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'.
[  402.427079][T21830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.430487][T21830] syzkaller0: entered promiscuous mode
[  402.433194][T21830] syzkaller0: entered allmulticast mode
[  402.473727][T21832] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.487585][T21830] tipc: Resetting bearer <eth:syzkaller0>
[  402.494026][T21829] tipc: Resetting bearer <eth:syzkaller0>
[  402.504548][T21829] tipc: Disabling bearer <eth:syzkaller0>
[  402.570084][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'.
[  402.587973][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'.
[  402.589780][ T7260] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  402.597885][ T7260] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  402.604711][ T7260] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  402.608692][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4049'.
[  402.616844][ T7260] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.449696][T21865] validate_nla: 4 callbacks suppressed
[  403.449707][T21865] netlink: 'syz.0.4053': attribute type 10 has an invalid length.
[  403.481155][T21865] wlan1: mtu less than device minimum
[  403.485395][T21865] : (slave wlan1): Error -22 calling dev_set_mtu
[  403.530386][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'.
[  403.580344][T21882] veth0: entered promiscuous mode
[  403.599247][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'.
[  403.612245][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4056'.
[  403.695968][ T5886] IPVS: starting estimator thread 0...
[  403.706649][T21887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.813095][T21888] IPVS: using max 80 ests per chain, 192000 per kthread
[  403.848929][T21894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.862450][T21894] syzkaller0: entered promiscuous mode
[  403.864901][T21894] syzkaller0: entered allmulticast mode
[  403.889591][T21894] tipc: Resetting bearer <eth:syzkaller0>
[  403.897148][T21893] tipc: Resetting bearer <eth:syzkaller0>
[  403.913485][T21893] tipc: Disabling bearer <eth:syzkaller0>
[  404.041009][T21907] veth7: entered allmulticast mode
[  404.097386][T21909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.173399][T21909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.233443][T21909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.282930][T21915] wg1 speed is unknown, defaulting to 1000
[  404.286428][T21915] lo speed is unknown, defaulting to 1000
[  404.315291][T21909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.317995][T21916] netlink: 'syz.1.4067': attribute type 1 has an invalid length.
[  404.367543][T21916] 8021q: adding VLAN 0 to HW filter on device bond4
[  404.400228][T21916] 8021q: adding VLAN 0 to HW filter on device bond4
[  404.404260][T21916] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  404.408571][T21916] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  404.457058][T21918] veth5: entered promiscuous mode
[  404.463381][T21918] bond4: (slave veth5): Enslaving as an active interface with a down link
[  404.497606][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.509895][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.565990][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.580666][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.697551][T21925] tc_dump_action: action bad kind
[  404.940659][T21947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.944156][T21947] syzkaller0: entered promiscuous mode
[  404.946425][T21947] syzkaller0: entered allmulticast mode
[  404.968563][T21944] IPVS: Error joining to the multicast group
[  404.972534][T21944] syzkaller0: entered promiscuous mode
[  404.974756][T21944] syzkaller0: entered allmulticast mode
[  404.978814][T21947] tipc: Resetting bearer <eth:syzkaller0>
[  404.984529][T21946] tipc: Resetting bearer <eth:syzkaller0>
[  404.998716][T21946] tipc: Disabling bearer <eth:syzkaller0>
[  405.130218][T21954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.135553][T21955] syzkaller0: entered promiscuous mode
[  405.138009][T21955] syzkaller0: entered allmulticast mode
[  405.160767][T21957] tipc: Resetting bearer <eth:syzkaller0>
[  405.179488][T21957] tipc: Disabling bearer <eth:syzkaller0>
[  405.928457][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.937438][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.945100][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  406.023758][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.034130][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.038385][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  406.113451][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.117437][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.121477][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  406.152019][T21981] gretap2: entered promiscuous mode
[  406.155652][T21981] __nla_validate_parse: 10 callbacks suppressed
[  406.155662][T21981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4085'.
[  406.161494][T21981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  406.193793][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  406.198916][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  406.205519][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.210165][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.215580][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  406.221293][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  406.225296][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  406.236801][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  406.278894][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'.
[  406.329241][T21983] wg1 speed is unknown, defaulting to 1000
[  406.333787][T21983] lo speed is unknown, defaulting to 1000
[  406.585590][ T5876] erspan0 (unregistering): left promiscuous mode
[  406.598527][ T5876] gretap0 (unregistering): left promiscuous mode
[  406.660840][ T5876] bond2 (unregistering): (slave geneve2): Releasing active interface
[  406.909081][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.915043][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.920730][ T5876] bond0 (unregistering): Released all slaves
[  407.033895][ T5876] bond1 (unregistering): Released all slaves
[  407.043574][ T5876] bond2 (unregistering): Released all slaves
[  407.121170][ T5876] bond3 (unregistering): Released all slaves
[  407.203797][ T5876] bond4 (unregistering): (slave veth5): Releasing active interface
[  407.208084][ T5876] bond4 (unregistering): Released all slaves
[  407.216610][T21992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4088'.
[  407.330794][ T5876] tipc: Disabling bearer <udp:syz2>
[  407.336358][ T5876] tipc: Left network mode
[  407.348296][T21996] IPVS: length: 42 != 24
[  407.369494][T21983] chnl_net:caif_netlink_parms(): no params data found
[  407.543889][T22000] wg1 speed is unknown, defaulting to 1000
[  407.558569][T22000] lo speed is unknown, defaulting to 1000
[  407.572076][T22004] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode
[  407.574645][T22004] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode
[  407.615700][T21983] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.618294][T21983] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.621166][T21983] bridge_slave_0: entered allmulticast mode
[  407.635388][T21983] bridge_slave_0: entered promiscuous mode
[  407.646417][ T5876] hsr_slave_0: left promiscuous mode
[  407.650136][ T5876] hsr_slave_1: left promiscuous mode
[  407.653002][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.655910][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.669135][ T5876] veth1_macvtap: left promiscuous mode
[  407.671898][ T5876] veth0_macvtap: left promiscuous mode
[  407.778287][ T5876] pim6reg (unregistering): left allmulticast mode
[  407.991719][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  408.025409][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  408.180940][T22013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4091'.
[  408.243204][   T54] Bluetooth: hci1: command tx timeout
[  408.380912][T21983] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.386596][T21983] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.389748][T21983] bridge_slave_1: entered allmulticast mode
[  408.394041][T21983] bridge_slave_1: entered promiscuous mode
[  408.499809][T21983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.558696][T21983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.646778][T21983] team0: Port device team_slave_0 added
[  408.651431][T21983] team0: Port device team_slave_1 added
[  408.754721][T21983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.755467][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4093'.
[  408.763815][T21983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.781553][T21983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.814985][T21983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.818056][T21983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.831479][T21983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.883101][ T5876] IPVS: stop unused estimator thread 0...
[  408.935224][T21983] hsr_slave_0: entered promiscuous mode
[  408.950599][T21983] hsr_slave_1: entered promiscuous mode
[  408.953752][T21983] debugfs: 'hsr0' already exists in 'hsr'
[  408.955932][T21983] Cannot create hsr debugfs directory
[  409.005812][T22033] wg1 speed is unknown, defaulting to 1000
[  409.040523][T22033] lo speed is unknown, defaulting to 1000
[  409.204271][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'.
[  409.217645][T22045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4096'.
[  409.298730][T22049] wg1 speed is unknown, defaulting to 1000
[  409.316977][T22049] lo speed is unknown, defaulting to 1000
[  409.373305][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'.
[  409.665205][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4101'.
[  409.669017][T22066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4101'.
[  409.811726][T21983] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  409.822544][T21983] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  409.901277][T22072] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.927147][T22072] bond_slave_0: left promiscuous mode
[  409.929211][T22072] bond_slave_1: left promiscuous mode
[  410.008369][T22072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.026411][T22072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.053652][T22072] vlan0: left promiscuous mode
[  410.089305][T22072] bridge1: left promiscuous mode
[  410.091061][T22072] bridge1: left allmulticast mode
[  410.104828][T21983] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  410.111295][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.119645][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.134085][T21983] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  410.142475][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.163146][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.232601][T21983] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.249442][T21983] 8021q: adding VLAN 0 to HW filter on device team0
[  410.259951][T14655] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.262453][T14655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.283775][T14655] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.286525][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.322795][   T54] Bluetooth: hci1: command tx timeout
[  410.404655][T22118] hsr_slave_0: left promiscuous mode
[  410.407199][T22118] hsr_slave_1: left promiscuous mode
[  410.437734][T21983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.475592][T21983] veth0_vlan: entered promiscuous mode
[  410.483803][T21983] veth1_vlan: entered promiscuous mode
[  410.509991][T21983] veth0_macvtap: entered promiscuous mode
[  410.516285][T21983] veth1_macvtap: entered promiscuous mode
[  410.534670][T21983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.547211][T21983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.556767][ T5912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.560653][ T5912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.570504][ T5912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.578759][ T5912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.647492][ T9747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.649983][ T9747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.680699][ T9747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.684449][ T9747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.787890][T22121] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.790515][T22121] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.858641][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.866997][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.932523][T19662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.941279][T19662] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.946539][T19662] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.952455][T19662] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  411.151972][T22137] netlink: 'syz.0.4112': attribute type 39 has an invalid length.
[  411.269779][T22142] netlink: 'syz.1.4114': attribute type 1 has an invalid length.
[  411.283455][T22144] gretap1: entered promiscuous mode
[  411.454865][T22155] __nla_validate_parse: 5 callbacks suppressed
[  411.454874][T22155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4117'.
[  411.459829][T22155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4117'.
[  411.468893][T22155] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  411.474007][T22155] gretap3: entered promiscuous mode
[  411.476058][T22155] gretap3: entered allmulticast mode
[  411.605743][T22163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.637894][T22161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4118'.
[  411.666155][T22163] tipc: Resetting bearer <eth:syzkaller0>
[  411.775356][T22169] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.4121'.
[  411.941193][T22179] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4124'.
[  412.260190][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.264894][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  412.267936][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  412.272135][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  412.274996][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  412.293952][T22183] wg1 speed is unknown, defaulting to 1000
[  412.296707][T22183] lo speed is unknown, defaulting to 1000
[  412.382710][T22183] chnl_net:caif_netlink_parms(): no params data found
[  412.402926][   T54] Bluetooth: hci1: command tx timeout
[  412.410545][T22189] tipc: Started in network mode
[  412.412732][T22189] tipc: Node identity baecc14b9b3, cluster identity 4711
[  412.415172][T22189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.434672][T22189] syzkaller0: entered promiscuous mode
[  412.436507][T22189] syzkaller0: entered allmulticast mode
[  412.447676][T22183] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.450247][T22183] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.453188][T22183] bridge_slave_0: entered allmulticast mode
[  412.455918][T22183] bridge_slave_0: entered promiscuous mode
[  412.460444][T22189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  412.474584][T22183] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.477677][T22183] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.480212][T22183] bridge_slave_1: entered allmulticast mode
[  412.484113][T22183] bridge_slave_1: entered promiscuous mode
[  412.508771][T22183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.517479][T22183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.553583][T22183] team0: Port device team_slave_0 added
[  412.557211][T22183] team0: Port device team_slave_1 added
[  412.577671][T22183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.580146][T22183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.596525][T22183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.601122][T22183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.606106][T22183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.621965][T22183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.641882][T17390] tipc: Node number set to 1283772936
[  412.665780][T22183] hsr_slave_0: entered promiscuous mode
[  412.668276][T22183] hsr_slave_1: entered promiscuous mode
[  412.670683][T22183] debugfs: 'hsr0' already exists in 'hsr'
[  412.673409][T22183] Cannot create hsr debugfs directory
[  412.815600][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'.
[  412.920706][T22197] bridge_slave_0: left allmulticast mode
[  412.923556][T22197] bridge_slave_0: left promiscuous mode
[  412.926197][T22197] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.084817][T22183] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.098150][T22183] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  413.147619][T22183] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.153709][T22183] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  413.202872][T22183] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.206364][T22183] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  413.222110][T22193] tipc: Resetting bearer <eth:syzkaller0>
[  413.224355][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4131'.
[  413.227877][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4131'.
[  413.240566][T22207] syzkaller1: entered promiscuous mode
[  413.260484][T22207] syzkaller1: entered allmulticast mode
[  413.266583][T22183] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.270671][T22183] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  413.378156][T22188] tipc: Resetting bearer <eth:syzkaller0>
[  413.397387][T22188] tipc: Disabling bearer <eth:syzkaller0>
[  413.453430][T22183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  413.468759][T22183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  413.478506][T22183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  413.485551][T22183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  413.560664][T22183] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.568706][T22212] netlink: 'syz.1.4133': attribute type 2 has an invalid length.
[  413.587256][T22183] 8021q: adding VLAN 0 to HW filter on device team0
[  413.595416][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.597808][ T9751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.608847][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.611696][ T9751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.634814][T22229] netlink: 'syz.1.4136': attribute type 1 has an invalid length.
[  413.637721][T22230] netlink: 'syz.1.4136': attribute type 1 has an invalid length.
[  413.750357][T22183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.779448][T22238] team0: Device gtp0 is of different type
[  413.800400][T22239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.803838][T22239] syzkaller0: entered promiscuous mode
[  413.805630][T22239] syzkaller0: entered allmulticast mode
[  413.820209][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4137'.
[  413.826582][T22183] veth0_vlan: entered promiscuous mode
[  413.830374][T22239] tipc: Resetting bearer <eth:syzkaller0>
[  413.834765][T22237] tipc: Resetting bearer <eth:syzkaller0>
[  413.849133][T22237] tipc: Disabling bearer <eth:syzkaller0>
[  413.857915][T22183] veth1_vlan: entered promiscuous mode
[  413.883617][T22183] veth0_macvtap: entered promiscuous mode
[  413.893709][T22183] veth1_macvtap: entered promiscuous mode
[  413.910073][T22183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.917020][T22183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.928476][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.940623][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.948990][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.964303][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.055250][T22254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.058757][T22254] syzkaller0: entered promiscuous mode
[  414.061223][T22254] syzkaller0: entered allmulticast mode
[  414.071481][T14653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.075528][T14653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.086851][T22254] tipc: Resetting bearer <eth:syzkaller0>
[  414.090895][T22252] tipc: Resetting bearer <eth:syzkaller0>
[  414.101418][T22252] tipc: Disabling bearer <eth:syzkaller0>
[  414.146241][ T9751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.148869][ T9751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.192863][T22264] vlan2: entered promiscuous mode
[  414.200438][T22264] bond0: entered promiscuous mode
[  414.202456][T22264] bond_slave_0: entered promiscuous mode
[  414.204734][T22264] bond_slave_1: entered promiscuous mode
[  414.231896][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'.
[  414.324510][   T54] Bluetooth: hci0: command tx timeout
[  414.361508][T22273] wg1 speed is unknown, defaulting to 1000
[  414.366176][T22273] lo speed is unknown, defaulting to 1000
[  414.482085][   T54] Bluetooth: hci1: command tx timeout
[  414.756014][T22283] netlink: 'syz.1.4150': attribute type 10 has an invalid length.
[  414.759956][T22283] veth0_macvtap: left promiscuous mode
[  414.771004][T22283] team0: Device veth0_macvtap failed to register rx_handler
[  414.995001][T22301] IPv6: sit1: Disabled Multicast RS
[  415.011287][T22304] wg1 speed is unknown, defaulting to 1000
[  415.015507][T22304] lo speed is unknown, defaulting to 1000
[  415.038428][T22306] wg1 speed is unknown, defaulting to 1000
[  415.062691][T22306] lo speed is unknown, defaulting to 1000
[  415.143291][T22313] netlink: 'syz.2.4160': attribute type 1 has an invalid length.
[  416.117059][T19662] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.120097][T19662] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.142638][ T5913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.270157][ T5876] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.301848][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.397453][T22352] Bluetooth: MGMT ver 1.23
[  416.400228][T22352] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  416.412181][   T54] Bluetooth: hci0: command tx timeout
[  416.514700][T22352] bond1: (slave macvlan2): Removing an active aggregator
[  416.517398][T22352] bond1: (slave macvlan2): Releasing backup interface
[  416.523891][T22352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.527727][T22352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.531073][T22352] bond0 (unregistering): Released all slaves
[  416.611281][T22368] siw: device registration error -23
[  416.617122][T22368] veth0_to_bridge: entered promiscuous mode
[  416.619647][T22368] veth0_to_bridge: entered allmulticast mode
[  416.625491][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.755341][T22378] __nla_validate_parse: 8 callbacks suppressed
[  416.755351][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'.
[  416.760669][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'.
[  416.824899][T22370] delete_channel: no stack
[  416.967638][T22392] tipc: Invalid UDP bearer configuration
[  416.967667][T22392] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  416.974624][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4183'.
[  417.047093][T22403] netlink: 'syz.1.4186': attribute type 17 has an invalid length.
[  417.047317][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'.
[  417.054713][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'.
[  417.057437][T22403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.145487][T22414] vlan2: entered promiscuous mode
[  417.147219][T22414] dummy0: entered promiscuous mode
[  417.235789][T22421] netlink: 'syz.0.4191': attribute type 13 has an invalid length.
[  417.238983][T22421] netlink: 'syz.0.4191': attribute type 17 has an invalid length.
[  417.276674][T22421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.300587][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4190'.
[  417.385006][T22427] wg1 speed is unknown, defaulting to 1000
[  417.388926][T22427] lo speed is unknown, defaulting to 1000
[  417.709579][T22444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4196'.
[  417.716685][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4196'.
[  417.720562][T22444] netlink: 'syz.1.4196': attribute type 2 has an invalid length.
[  417.830036][T22452] netlink: 'syz.1.4199': attribute type 1 has an invalid length.
[  417.920572][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'.
[  417.927508][T22466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4203'.
[  418.003074][T22471] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  418.165376][T22474] dvmrp1: tun_chr_ioctl cmd 1074025677
[  418.167502][T22474] dvmrp1: linktype set to 768
[  418.186681][T22482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.191397][T22482] syzkaller0: entered promiscuous mode
[  418.193447][T22482] syzkaller0: entered allmulticast mode
[  418.206794][T22482] tipc: Resetting bearer <eth:syzkaller0>
[  418.227534][T22481] tipc: Resetting bearer <eth:syzkaller0>
[  418.238133][T22481] tipc: Disabling bearer <eth:syzkaller0>
[  418.492250][   T54] Bluetooth: hci0: command tx timeout
[  418.775274][T22509] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  418.976537][T22525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.980192][T22525] syzkaller0: entered promiscuous mode
[  418.982447][T22525] syzkaller0: entered allmulticast mode
[  419.008691][T22525] tipc: Resetting bearer <eth:syzkaller0>
[  419.014215][T22524] tipc: Resetting bearer <eth:syzkaller0>
[  419.034556][T22524] tipc: Disabling bearer <eth:syzkaller0>
[  419.179981][T22534] netlink: 'syz.1.4223': attribute type 9 has an invalid length.
[  419.184704][T22534] netlink: 'syz.1.4223': attribute type 7 has an invalid length.
[  419.187485][T22534] netlink: 'syz.1.4223': attribute type 8 has an invalid length.
[  419.340207][T22542] syzkaller0: entered promiscuous mode
[  419.342584][T22542] syzkaller0: entered allmulticast mode
[  419.348403][T22542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.352963][T22541] tipc: Resetting bearer <eth:syzkaller0>
[  419.369417][T22541] tipc: Disabling bearer <eth:syzkaller0>
[  419.503812][T22553] wg1 speed is unknown, defaulting to 1000
[  419.507569][T22553] lo speed is unknown, defaulting to 1000
[  419.533429][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  419.541707][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  419.563339][   T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  419.841184][T22572] wg1 speed is unknown, defaulting to 1000
[  419.862390][T22572] lo speed is unknown, defaulting to 1000
[  419.908270][T17390] IPVS: starting estimator thread 0...
[  420.004612][T22583] IPVS: using max 79 ests per chain, 189600 per kthread
[  420.372366][T22608] netlink: 'syz.1.4240': attribute type 83 has an invalid length.
[  420.379379][T22611] netlink: 'syz.2.4241': attribute type 12 has an invalid length.
[  420.431576][T22619] ip6gre1: entered allmulticast mode
[  420.458665][T22622] !: renamed from dummy0 (while UP)
[  420.491870][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  420.562101][   T54] Bluetooth: hci0: command tx timeout
[  420.568933][T22639] wg1 speed is unknown, defaulting to 1000
[  420.584756][T22639] lo speed is unknown, defaulting to 1000
[  420.749566][T22658] _Z`Ԁ@S: entered promiscuous mode
[  420.827471][T22667] wg1 speed is unknown, defaulting to 1000
[  420.830921][T22667] lo speed is unknown, defaulting to 1000
[  420.886178][T22670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.007801][T22673] bridge_slave_0: left allmulticast mode
[  421.009963][T22673] bridge_slave_0: left promiscuous mode
[  421.012081][T22673] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.016399][T22673] bridge_slave_1: left allmulticast mode
[  421.018413][T22673] bridge_slave_1: left promiscuous mode
[  421.020546][T22673] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.027151][T22673] bond0: (slave bond_slave_0): Releasing backup interface
[  421.030322][T22673] bond_slave_0: left promiscuous mode
[  421.036186][T22673] bond0: (slave bond_slave_1): Releasing backup interface
[  421.040852][T22673] bond_slave_1: left promiscuous mode
[  421.050536][T22673] team0: Port device team_slave_0 removed
[  421.073819][T22673] team0: Port device team_slave_1 removed
[  421.076916][T22673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.079753][T22673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.090739][T22673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.096590][T22673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.132241][T17390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  421.171927][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  421.364913][T22679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  421.511208][T22689] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  421.692039][T22701] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  421.742127][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  421.889178][T22704] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  422.242789][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  422.256146][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  422.260063][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  422.293956][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  422.299505][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  422.491718][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  423.569971][T22706] wg1 speed is unknown, defaulting to 1000
[  423.575722][T22706] lo speed is unknown, defaulting to 1000
[  423.726732][T22721] __nla_validate_parse: 20 callbacks suppressed
[  423.726749][T22721] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4266'.
[  423.780599][T22706] chnl_net:caif_netlink_parms(): no params data found
[  423.819192][T22729] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4268'.
[  423.834922][T22723] validate_nla: 2 callbacks suppressed
[  423.834936][T22723] netlink: 'syz.0.4268': attribute type 39 has an invalid length.
[  423.980999][T22706] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.984394][T22706] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.987528][T22706] bridge_slave_0: entered allmulticast mode
[  423.991453][T22706] bridge_slave_0: entered promiscuous mode
[  424.027398][T22706] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.030523][T22706] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.036815][T22706] bridge_slave_1: entered allmulticast mode
[  424.040880][T22706] bridge_slave_1: entered promiscuous mode
[  424.108496][T22706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.132315][T22706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.178258][T22706] team0: Port device team_slave_0 added
[  424.193357][T22706] team0: Port device team_slave_1 added
[  424.243750][T22706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.246445][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.256768][T22706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.270951][T22739] wg1 speed is unknown, defaulting to 1000
[  424.274361][T22706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.278625][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.288592][T22706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.305442][T22739] lo speed is unknown, defaulting to 1000
[  424.321993][   T54] Bluetooth: hci1: command tx timeout
[  424.392233][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  424.395874][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  424.399043][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  424.404033][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  424.407036][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  424.677613][ T5912] bond1 (unregistering): Released all slaves
[  424.697743][T22706] hsr_slave_0: entered promiscuous mode
[  424.700689][T22706] hsr_slave_1: entered promiscuous mode
[  424.703746][T22706] debugfs: 'hsr0' already exists in 'hsr'
[  424.706043][T22706] Cannot create hsr debugfs directory
[  424.750410][ T5912] tipc: Left network mode
[  424.855207][T22740] wg1 speed is unknown, defaulting to 1000
[  424.870954][T22740] lo speed is unknown, defaulting to 1000
[  424.945534][T22745] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  425.122338][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.125294][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.436306][ T5912] team0 (unregistering): Port device team_slave_1 removed
[  425.463189][ T5912] team0 (unregistering): Port device team_slave_0 removed
[  425.891509][T22740] chnl_net:caif_netlink_parms(): no params data found
[  426.066541][T22740] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.067197][T22773] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  426.069675][T22740] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.075549][T22740] bridge_slave_0: entered allmulticast mode
[  426.081417][T22740] bridge_slave_0: entered promiscuous mode
[  426.089565][T22740] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.095526][T22740] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.098542][T22740] bridge_slave_1: entered allmulticast mode
[  426.116199][T22740] bridge_slave_1: entered promiscuous mode
[  426.158821][T22773] wg1 speed is unknown, defaulting to 1000
[  426.197320][T22773] lo speed is unknown, defaulting to 1000
[  426.223139][T22740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.229795][T22740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.406210][T22740] team0: Port device team_slave_0 added
[  426.412068][T22740] team0: Port device team_slave_1 added
[  426.412123][ T5238] Bluetooth: hci1: command tx timeout
[  426.453834][T22740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.456882][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.469229][T22740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.485469][T22706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  426.485615][ T5238] Bluetooth: hci2: command tx timeout
[  426.502762][T22740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.505906][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.514841][T22740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.520876][T22706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  426.583919][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'.
[  426.630770][T22706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  426.704760][T22706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  426.750659][T22740] hsr_slave_0: entered promiscuous mode
[  426.770643][T22740] hsr_slave_1: entered promiscuous mode
[  426.783164][T22740] debugfs: 'hsr0' already exists in 'hsr'
[  426.785853][T22740] Cannot create hsr debugfs directory
[  426.810610][T22800] netlink: 'syz.0.4279': attribute type 8 has an invalid length.
[  427.270110][T22706] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.356160][T22706] 8021q: adding VLAN 0 to HW filter on device team0
[  427.416510][T14655] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.419337][T14655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.438618][T14655] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.441520][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.503665][T22829] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  427.612989][ T1116] block nbd3: Possible stuck request ffff888022b20000: control (read@0,1024B). Runtime 90 seconds
[  427.617291][ T1116] block nbd3: Possible stuck request ffff888022b20200: control (read@1024,1024B). Runtime 90 seconds
[  427.623728][ T1116] block nbd3: Possible stuck request ffff888022b20400: control (read@2048,1024B). Runtime 90 seconds
[  427.628098][ T1116] block nbd3: Possible stuck request ffff888022b20600: control (read@3072,1024B). Runtime 90 seconds
[  428.485502][ T5238] Bluetooth: hci1: command tx timeout
[  428.561838][ T5238] Bluetooth: hci2: command tx timeout
[  429.147759][T22740] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  429.154891][T22740] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  429.162793][T22849] siw: device registration error -23
[  429.164058][T22740] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  429.184078][T22740] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  429.191287][T22849] veth0_to_bridge: entered promiscuous mode
[  429.194877][T22849] veth0_to_bridge: entered allmulticast mode
[  429.239716][T22706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.305616][T22740] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.339901][T22706] veth0_vlan: entered promiscuous mode
[  429.374656][T22706] veth1_vlan: entered promiscuous mode
[  429.397081][T22740] 8021q: adding VLAN 0 to HW filter on device team0
[  429.444297][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.447291][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.483778][T22706] veth0_macvtap: entered promiscuous mode
[  429.493695][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.496811][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.516722][T22706] veth1_macvtap: entered promiscuous mode
[  429.522376][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.559178][T22706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.574282][T22706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.592989][ T7260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.596744][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.599904][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.613885][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.618649][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'.
[  429.714344][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.717276][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.746855][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.749516][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.775955][T22740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.835931][T22740] veth0_vlan: entered promiscuous mode
[  429.840141][T22889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4289'.
[  429.860552][T22740] veth1_vlan: entered promiscuous mode
[  429.895737][T22740] veth0_macvtap: entered promiscuous mode
[  429.913267][T22740] veth1_macvtap: entered promiscuous mode
[  429.947550][T22740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.958052][T22740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.967042][ T7260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.975713][ T7260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.984644][ T7260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.988693][ T7260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.077772][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.081227][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.141331][T14653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.145854][T14653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.227754][T22906] rdma_rxe: rxe_newlink: failed to add lo
[  430.243839][T22906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.282433][T22909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4270'.
[  430.351041][T22909] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.354201][T22909] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.414402][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4270'.
[  430.457362][T22909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.468302][T22909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.562458][ T5238] Bluetooth: hci1: command tx timeout
[  430.603191][T22916] hsr_slave_0: left promiscuous mode
[  430.606553][T22916] hsr_slave_1: left promiscuous mode
[  430.628642][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.638590][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.644342][ T5238] Bluetooth: hci2: command tx timeout
[  430.653515][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.665509][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.725667][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4296'.
[  430.736204][T22921] geneve2: entered promiscuous mode
[  430.738589][T22921] geneve2: entered allmulticast mode
[  430.743887][T22923] netlink: 'syz.1.4297': attribute type 4 has an invalid length.
[  430.754520][T22923] netlink: 'syz.1.4297': attribute type 4 has an invalid length.
[  430.824922][T22927] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4299'.
[  430.870818][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'.
[  430.880601][T22929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4300'.
[  430.899022][T22930] netlink: 'syz.0.4299': attribute type 10 has an invalid length.
[  430.908933][T22930] 8021q: adding VLAN 0 to HW filter on device team0
[  430.914304][T22930] team0: entered promiscuous mode
[  431.848102][T22943] netlink: 'syz.1.4303': attribute type 1 has an invalid length.
[  431.912287][T22948] netlink: 'syz.0.4305': attribute type 1 has an invalid length.
[  431.949282][T22948] 8021q: adding VLAN 0 to HW filter on device bond3
[  431.956746][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'.
[  431.958124][T22951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  432.134743][T22961] pimreg3: entered allmulticast mode
[  432.170976][T22963] netlink: 'syz.1.4310': attribute type 16 has an invalid length.
[  432.179796][T22963] netlink: 'syz.1.4310': attribute type 3 has an invalid length.
[  432.185450][T22963] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4310'.
[  432.356072][T22977] tipc: Started in network mode
[  432.357787][T22977] tipc: Node identity feaa6dccc39, cluster identity 4711
[  432.360640][T22977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.368703][T22976] syzkaller0: entered promiscuous mode
[  432.372730][T22976] syzkaller0: entered allmulticast mode
[  432.396188][T22976] tipc: Resetting bearer <eth:syzkaller0>
[  432.400541][T22975] tipc: Resetting bearer <eth:syzkaller0>
[  432.419297][T22975] tipc: Disabling bearer <eth:syzkaller0>
[  432.658797][T22998] netlink: 'syz.2.4325': attribute type 12 has an invalid length.
[  432.687207][T23000] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  432.722492][ T5238] Bluetooth: hci2: command tx timeout
[  432.791115][T22998] dvmrp1: tun_chr_ioctl cmd 1074025677
[  432.805931][T22998] dvmrp1: linktype set to 773
[  432.857868][T23012] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  432.901064][T23015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.909408][T23015] syzkaller0: entered promiscuous mode
[  432.911359][T23015] syzkaller0: entered allmulticast mode
[  432.919530][T23015] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  432.949486][T23015] tipc: Resetting bearer <eth:syzkaller0>
[  432.977777][T23013] tipc: Resetting bearer <eth:syzkaller0>
[  433.015625][T23013] tipc: Disabling bearer <eth:syzkaller0>
[  433.138197][T23026] wg1 speed is unknown, defaulting to 1000
[  433.142543][T23026] lo speed is unknown, defaulting to 1000
[  433.888250][T23056] veth0: entered promiscuous mode
[  434.182533][T22775] ==================================================================
[  434.185597][T22775] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  434.188692][T22775] Read of size 8 at addr ffff88801bfe00a0 by task khidpd_15c25886/22775
[  434.193014][T22775] 
[  434.194023][T22775] CPU: 1 UID: 0 PID: 22775 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  434.194039][T22775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  434.194047][T22775] Call Trace:
[  434.194053][T22775]  <TASK>
[  434.194059][T22775]  dump_stack_lvl+0x189/0x250
[  434.194077][T22775]  ? __kasan_check_byte+0x12/0x40
[  434.194094][T22775]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.194107][T22775]  ? lock_release+0x4b/0x3e0
[  434.194124][T22775]  ? __virt_addr_valid+0x4a5/0x5c0
[  434.194140][T22775]  print_report+0xca/0x240
[  434.194151][T22775]  ? __mutex_lock+0x801/0x1350
[  434.194162][T22775]  kasan_report+0x118/0x150
[  434.194179][T22775]  ? __mutex_lock+0x801/0x1350
[  434.194192][T22775]  __mutex_lock+0x801/0x1350
[  434.194203][T22775]  ? __mutex_lock+0x5bb/0x1350
[  434.194238][T22775]  ? l2cap_unregister_user+0x6a/0x1b0
[  434.194257][T22775]  ? __pfx___mutex_lock+0x10/0x10
[  434.194268][T22775]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.194288][T22775]  l2cap_unregister_user+0x6a/0x1b0
[  434.194304][T22775]  hidp_session_thread+0x3c9/0x410
[  434.194320][T22775]  ? __pfx_hidp_session_thread+0x10/0x10
[  434.194333][T22775]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.194348][T22775]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  434.194365][T22775]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  434.194379][T22775]  ? __kthread_parkme+0x7b/0x200
[  434.194392][T22775]  ? __kthread_parkme+0x1a1/0x200
[  434.194406][T22775]  kthread+0x711/0x8a0
[  434.194420][T22775]  ? __pfx_hidp_session_thread+0x10/0x10
[  434.194440][T22775]  ? __pfx_kthread+0x10/0x10
[  434.194454][T22775]  ? _raw_spin_unlock_irq+0x23/0x50
[  434.194468][T22775]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.194484][T22775]  ? __pfx_kthread+0x10/0x10
[  434.194497][T22775]  ret_from_fork+0x3fc/0x770
[  434.194510][T22775]  ? __pfx_ret_from_fork+0x10/0x10
[  434.194523][T22775]  ? __switch_to_asm+0x39/0x70
[  434.194537][T22775]  ? __switch_to_asm+0x33/0x70
[  434.194551][T22775]  ? __pfx_kthread+0x10/0x10
[  434.194565][T22775]  ret_from_fork_asm+0x1a/0x30
[  434.194582][T22775]  </TASK>
[  434.194586][T22775] 
[  434.275688][T22775] Allocated by task 22740:
[  434.277521][T22775]  kasan_save_track+0x3e/0x80
[  434.279499][T22775]  __kasan_kmalloc+0x93/0xb0
[  434.281408][T22775]  __kmalloc_noprof+0x27a/0x4f0
[  434.283408][T22775]  hci_alloc_dev_priv+0x28/0x2060
[  434.285348][T22775]  vhci_create_device+0x120/0x650
[  434.287357][T22775]  vhci_write+0x3ce/0x4a0
[  434.289082][T22775]  vfs_write+0x5c9/0xb30
[  434.290728][T22775]  ksys_write+0x145/0x250
[  434.292455][T22775]  do_syscall_64+0xfa/0x3b0
[  434.294274][T22775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.296662][T22775] 
[  434.297682][T22775] Freed by task 22740:
[  434.299338][T22775]  kasan_save_track+0x3e/0x80
[  434.301331][T22775]  kasan_save_free_info+0x46/0x50
[  434.303383][T22775]  __kasan_slab_free+0x5b/0x80
[  434.305181][T22775]  kfree+0x18e/0x440
[  434.306496][T22775]  bt_host_release+0x82/0x90
[  434.308143][T22775]  device_release+0x9c/0x1c0
[  434.309839][T22775]  kobject_put+0x22b/0x480
[  434.311588][T22775]  vhci_release+0x15a/0x1a0
[  434.313378][T22775]  __fput+0x44c/0xa70
[  434.315041][T22775]  task_work_run+0x1d4/0x260
[  434.316932][T22775]  do_exit+0x6b5/0x2300
[  434.318644][T22775]  do_group_exit+0x21c/0x2d0
[  434.320507][T22775]  __x64_sys_exit_group+0x3f/0x40
[  434.322529][T22775]  x64_sys_call+0x21f7/0x2200
[  434.324506][T22775]  do_syscall_64+0xfa/0x3b0
[  434.326359][T22775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.328801][T22775] 
[  434.329820][T22775] Last potentially related work creation:
[  434.332165][T22775]  kasan_save_stack+0x3e/0x60
[  434.334180][T22775]  kasan_record_aux_stack+0xbd/0xd0
[  434.336355][T22775]  insert_work+0x3d/0x330
[  434.338126][T22775]  __queue_work+0xbaf/0xfb0
[  434.339983][T22775]  queue_work_on+0x181/0x270
[  434.341910][T22775]  process_scheduled_works+0xae1/0x17b0
[  434.344148][T22775]  worker_thread+0x8a0/0xda0
[  434.346014][T22775]  kthread+0x711/0x8a0
[  434.347686][T22775]  ret_from_fork+0x3fc/0x770
[  434.349517][T22775]  ret_from_fork_asm+0x1a/0x30
[  434.351459][T22775] 
[  434.352444][T22775] Second to last potentially related work creation:
[  434.355055][T22775]  kasan_save_stack+0x3e/0x60
[  434.357014][T22775]  kasan_record_aux_stack+0xbd/0xd0
[  434.359089][T22775]  insert_work+0x3d/0x330
[  434.360786][T22775]  __queue_work+0xcd2/0xfb0
[  434.362559][T22775]  call_timer_fn+0x17e/0x5f0
[  434.364258][T22775]  __run_timer_base+0x646/0x860
[  434.365833][T22775]  run_timer_softirq+0xb7/0x180
[  434.367431][T22775]  handle_softirqs+0x286/0x870
[  434.369194][T22775]  __irq_exit_rcu+0xca/0x1f0
[  434.371030][T22775]  irq_exit_rcu+0x9/0x30
[  434.372644][T22775]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  434.374624][T22775]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  434.376758][T22775] 
[  434.377747][T22775] The buggy address belongs to the object at ffff88801bfe0000
[  434.377747][T22775]  which belongs to the cache kmalloc-8k of size 8192
[  434.383293][T22775] The buggy address is located 160 bytes inside of
[  434.383293][T22775]  freed 8192-byte region [ffff88801bfe0000, ffff88801bfe2000)
[  434.388243][T22775] 
[  434.389121][T22775] The buggy address belongs to the physical page:
[  434.391517][T22775] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bfe0
[  434.394669][T22775] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  434.397693][T22775] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  434.400850][T22775] page_type: f5(slab)
[  434.402379][T22775] raw: 00fff00000000040 ffff88801a442280 ffffea0004520600 0000000000000005
[  434.405522][T22775] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  434.408834][T22775] head: 00fff00000000040 ffff88801a442280 ffffea0004520600 0000000000000005
[  434.412299][T22775] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  434.415795][T22775] head: 00fff00000000003 ffffea00006ff801 00000000ffffffff 00000000ffffffff
[  434.419359][T22775] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  434.422916][T22775] page dumped because: kasan: bad access detected
[  434.425579][T22775] page_owner tracks the page as allocated
[  434.427906][T22775] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22740, tgid 22740 (syz-executor), ts 424387162134, free_ts 424357983523
[  434.436672][T22775]  post_alloc_hook+0x240/0x2a0
[  434.438681][T22775]  get_page_from_freelist+0x21e4/0x22c0
[  434.440955][T22775]  __alloc_frozen_pages_noprof+0x181/0x370
[  434.443322][T22775]  alloc_pages_mpol+0x232/0x4a0
[  434.445347][T22775]  allocate_slab+0x8a/0x370
[  434.447195][T22775]  ___slab_alloc+0xbeb/0x1410
[  434.449110][T22775]  __kmalloc_noprof+0x305/0x4f0
[  434.451081][T22775]  hci_alloc_dev_priv+0x28/0x2060
[  434.453125][T22775]  vhci_create_device+0x120/0x650
[  434.455183][T22775]  vhci_write+0x3ce/0x4a0
[  434.457010][T22775]  vfs_write+0x5c9/0xb30
[  434.458784][T22775]  ksys_write+0x145/0x250
[  434.460602][T22775]  do_syscall_64+0xfa/0x3b0
[  434.462450][T22775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.464811][T22775] page last free pid 22739 tgid 22735 stack trace:
[  434.467385][T22775]  __free_frozen_pages+0xbc4/0xd30
[  434.469489][T22775]  __put_partials+0x156/0x1a0
[  434.471470][T22775]  put_cpu_partial+0x17c/0x250
[  434.473413][T22775]  __slab_free+0x2d5/0x3c0
[  434.475274][T22775]  qlist_free_all+0x97/0x140
[  434.477207][T22775]  kasan_quarantine_reduce+0x148/0x160
[  434.479414][T22775]  __kasan_slab_alloc+0x22/0x80
[  434.481430][T22775]  __kmalloc_cache_noprof+0x1be/0x3d0
[  434.483645][T22775]  ref_tracker_alloc+0x133/0x460
[  434.485714][T22775]  netdev_queue_update_kobjects+0x1d1/0x6c0
[  434.488148][T22775]  netdev_register_kobject+0x258/0x310
[  434.490417][T22775]  register_netdevice+0x126c/0x1ae0
[  434.492564][T22775]  __ip_tunnel_create+0x3e7/0x560
[  434.494662][T22775]  ip_tunnel_init_net+0x2ba/0x800
[  434.496760][T22775]  ops_init+0x35c/0x5c0
[  434.498492][T22775]  setup_net+0x10c/0x320
[  434.500274][T22775] 
[  434.501318][T22775] Memory state around the buggy address:
[  434.503622][T22775]  ffff88801bfdff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  434.506895][T22775]  ffff88801bfe0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  434.510181][T22775] >ffff88801bfe0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  434.513432][T22775]                                ^
[  434.515536][T22775]  ffff88801bfe0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  434.518837][T22775]  ffff88801bfe0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  434.522071][T22775] ==================================================================
[  434.526749][T22775] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  434.529669][T22775] CPU: 1 UID: 0 PID: 22775 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  434.533594][T22775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  434.537723][T22775] Call Trace:
[  434.539126][T22775]  <TASK>
[  434.540387][T22775]  dump_stack_lvl+0x99/0x250
[  434.542316][T22775]  ? __asan_memcpy+0x40/0x70
[  434.544265][T22775]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.546393][T22775]  ? __pfx__printk+0x10/0x10
[  434.548024][T22775]  vpanic+0x281/0x750
[  434.549275][T22775]  ? __pfx_vpanic+0x10/0x10
[  434.550717][T22775]  ? irqentry_exit+0x74/0x90
[  434.552258][T22775]  panic+0xb9/0xc0
[  434.553658][T22775]  ? __pfx_panic+0x10/0x10
[  434.555417][T22775]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  434.557304][T22775]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.559236][T22775]  ? __mutex_lock+0x801/0x1350
[  434.561020][T22775]  check_panic_on_warn+0x89/0xb0
[  434.563002][T22775]  ? __mutex_lock+0x801/0x1350
[  434.564962][T22775]  end_report+0x78/0x160
[  434.566739][T22775]  kasan_report+0x129/0x150
[  434.568625][T22775]  ? __mutex_lock+0x801/0x1350
[  434.570543][T22775]  __mutex_lock+0x801/0x1350
[  434.572444][T22775]  ? __mutex_lock+0x5bb/0x1350
[  434.574332][T22775]  ? l2cap_unregister_user+0x6a/0x1b0
[  434.576512][T22775]  ? __pfx___mutex_lock+0x10/0x10
[  434.578546][T22775]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.580881][T22775]  l2cap_unregister_user+0x6a/0x1b0
[  434.582979][T22775]  hidp_session_thread+0x3c9/0x410
[  434.585001][T22775]  ? __pfx_hidp_session_thread+0x10/0x10
[  434.587183][T22775]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.589613][T22775]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  434.592128][T22775]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  434.594658][T22775]  ? __kthread_parkme+0x7b/0x200
[  434.596721][T22775]  ? __kthread_parkme+0x1a1/0x200
[  434.598726][T22775]  kthread+0x711/0x8a0
[  434.600388][T22775]  ? __pfx_hidp_session_thread+0x10/0x10
[  434.602713][T22775]  ? __pfx_kthread+0x10/0x10
[  434.604631][T22775]  ? _raw_spin_unlock_irq+0x23/0x50
[  434.606774][T22775]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.608906][T22775]  ? __pfx_kthread+0x10/0x10
[  434.610810][T22775]  ret_from_fork+0x3fc/0x770
[  434.612728][T22775]  ? __pfx_ret_from_fork+0x10/0x10
[  434.614810][T22775]  ? __switch_to_asm+0x39/0x70
[  434.616752][T22775]  ? __switch_to_asm+0x33/0x70
[  434.618669][T22775]  ? __pfx_kthread+0x10/0x10
[  434.620565][T22775]  ret_from_fork_asm+0x1a/0x30
[  434.622462][T22775]  </TASK>
[  434.624518][T22775] Kernel Offset: disabled
[  434.626320][T22775] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:19:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8d9cbb38 RDI=ffffffff8be33800 RBP=ffffffff8172c195 RSP=ffffc900068b6e20
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900068b7018 R11=ffffffff81ac3820
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b79e1a0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f170de94c80 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000068d000 CR3=0000000027870000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=c225a6481695e449 df906ee8de6fecbc XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=b30b38bdd682b75b bf03c00587886844
XMM06=dc909098c1625315 b20222a1a7c03e58 XMM07=e339d4bab43abfe9 81f94e30a08634a3
XMM08=41f758511ef57d54 ac7cab2456f492d6 XMM09=0000000000000000 00007fb9fea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005f RBX=000000000000005f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900042b7370
R8 =ffff888021858237 R9 =1ffff1100430b046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd90e R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000116194000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8fe83a7498 00007f8fe83a7470 XMM03=00007f8fe83a74a8 00007f8fe83a74a0
XMM04=00007f8fe8f0d100 00007f8fe83a7460 XMM05=00007f8fe83a7478 00007f8fe83a74c0
XMM06=00007f8fe83a74b8 00007f8fe83a74b0 XMM07=00007f8fe83a74a8 00007f8fe83a74a0
XMM08=0000000000000000 00007f8fe8212ee7 XMM09=0000000000000000 00007f8fe8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
