last executing test programs:

1.004842454s ago: executing program 0 (id=1325):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206050000000000000000000000000105000100070000000900020073797a300000000014000700080006000000000008001340000000000500050002000000050004000000000011000300"], 0x60}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001480)={'dummy0\x00', &(0x7f0000001400)=@ethtool_gfeatures})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x60, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9b}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7f}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.004260216s ago: executing program 1 (id=1327):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0xf)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0xc, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed6}, 0x94)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
close(r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000012771d000000000000000000000000000038d26b676f90caf29e29d788996d075487daa51a4871e0af32ecccfeef727cb13e470ae44262bcf3922413755b55c4fc79b2a19b017cb7a8e6722a5a7b3538d6d327ae3d848b7b6269e6dbb6e89e30f92a99036daa65652baec282ffc52fb223de", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000100), 0x0}, 0x20)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_SRC_IF={0x8, 0x9, r11}]}, 0x24}}, 0x0)

915.800183ms ago: executing program 0 (id=1328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=<r1=>0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f0000000340)=""/222}, 0x21)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x20}}, 0x20000000)
r8 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=r10, @ANYBLOB="010000000000feffffff01000000040007800c00020000000000000000000cc6927a5855742bbafba30003000700000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r11)
sendmsg$NLBL_MGMT_C_ADDDEF(r11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r12}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bind(r4, &(0x7f0000000540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x80)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r13 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'sit0\x00', <r14=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r14})
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd707ae6555a8953d24e00fedbdf85d140ce2501000000", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

813.177817ms ago: executing program 0 (id=1330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="effd0000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

808.518183ms ago: executing program 0 (id=1332):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2, 0x0, 0x0, 0x4000}}], 0x1, 0x0)

807.404264ms ago: executing program 0 (id=1334):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x2b)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

806.083557ms ago: executing program 0 (id=1335):
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = socket(0x2c, 0x5, 0x7f)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept$packet(r1, 0x0, 0x0)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x40990)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x9c, r4, 0x85ee6214518f3c89, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
r5 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x1, 0x5)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)

316.413017ms ago: executing program 2 (id=1348):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140))
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000300)="dbf345ed28615e66563f0c009a60701bf3a08e8d33c7be41fa7b7e5bf5ce6e542a1e", 0x22)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x70083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000280)=0x9, 0x4)
syz_emit_ethernet(0x1bb, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1}}, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}, {0x6}], @ipv4=@igmp={{0x38, 0x4, 0x2, 0x9, 0x19d, 0x65, 0x0, 0xa, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x5a, 0xffffffffffffffff, [{0x7, 0x2}, {0x1, 0x10, "c54c0e813f0683ad229a9704589c"}, {0x6, 0xb, "0c9b8dc71ba6db48c7"}, {0x1, 0x12, "311e298c063f7388685ee5b096063c23"}, {0x1, 0xf, "8ea06e6429de0f21823361b567"}, {0x1, 0x10, "45e57abdc00bb4052a8b03b44b9b"}, {0x0, 0x6, "2b708f09"}]}, @timestamp_prespec={0x44, 0x2c, 0x1d, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xa1a3}, {@multicast1, 0x3683}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8c07}, {@multicast2, 0x6}, {@remote, 0x4}]}, @noop, @timestamp={0x44, 0x10, 0xb8, 0x0, 0xb, [0x5, 0x4, 0x24]}, @rr={0x7, 0xf, 0xfa, [@remote, @multicast2, @broadcast]}, @noop, @lsrr={0x83, 0x1b, 0xe3, [@local, @private=0xa010101, @multicast2, @private=0x4, @local, @empty]}, @end, @ssrr={0x89, 0x7, 0xb8, [@multicast1]}]}}, {0x17, 0x7, 0x0, @multicast2, "02825f4fde41003bf6c6f073783b69a65527fdcaca38d76de893fa80b9498ade2ad311132d367722ba292d7d834087157f90a4e225a81ba88b07c9dcf679872d1dad593cca3b57b4fea9074eedef82b208562f3714b2b1cd1887c1bb5aacfc08e820cdd12a940c043ca9f8bc097649463ab509c8112daaa4db22a82104f9fdc4ad9db7609a675d77a364e4e755c9c41211dfe0b8c8862cac28d3da7a801343207b7806614b0ea1377048fa84767a281783ffbca5a5"}}}}}}, &(0x7f0000000080)={0x0, 0x2, [0xd6b, 0xcdf, 0xb16, 0xdc7]})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x59, r2})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000340)=0x6, 0x4)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

314.929445ms ago: executing program 2 (id=1349):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x0)

256.936725ms ago: executing program 2 (id=1350):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

255.836431ms ago: executing program 2 (id=1351):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)

113.841351ms ago: executing program 1 (id=1352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54ef0000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

113.643141ms ago: executing program 2 (id=1353):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x2b)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

112.182189ms ago: executing program 1 (id=1354):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
unshare(0x22020600)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0xfe}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

111.890459ms ago: executing program 2 (id=1355):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000210000007d8468dc97000828a8009500d079"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x3, 0x14)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
pipe(&(0x7f0000000440)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf37, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001880)={'wg1\x00', <r9=>0x0})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_ext={0x1c, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005d00000062a000000800000018000000a7e100000000000005000000186800000200000000000000ff07000095000000000000008520000003000000bfa50400ffffffff18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000008a000000b7000000000000000609020040000000bf91000000000000b7020000020000008500000084000000b7000000000000009500"/80], &(0x7f0000001780)='syzkaller\x00', 0x6, 0xaa, &(0x7f00000017c0)=""/170, 0x41000, 0x1, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000001900)={0x7, 0x2001}, 0x8, 0x10, 0x0, 0x0, 0x1dffa, 0xffffffffffffffff, 0x1, &(0x7f00000019c0), &(0x7f0000001a00)=[{0x0, 0x1, 0x5, 0x1}], 0x10, 0x7f}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r12, 0x4008af60, &(0x7f0000000000)={@local})

67.313534ms ago: executing program 1 (id=1356):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0xfffffffd, 0x3, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1}, 0x3}, 0x18) (async)
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1}, 0x3}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c03000011000100000000000000000000004100", @ANYRES32=0x0, @ANYBLOB="20080100000400001c0024008bae26448880ea9e31d24cb628eb460d8448c418d909feee140014007663616e300000000000000000000000240316802c00018028000100030000000000000000000000000000000000000000000000000000000000000000000000200101800c000900ff01000000010000cc000c801400010043000000b4060000000000008100000014000100050000007b0000000700000081000000140001000500000014030000090000008100000014000100844000004c08000008000000810000001400010089000000d00500000400000088a80000140001000600000017070000030000008100000014000100060000002e0d00000700000088a8000014000100060000009f0b00006032000088a800001400010005000000a40a00000600000081000000140001000f000000e10200000e000000810000001000020001000000e3000000020000000c000500050000000600000028000100ff030000aaaaaaaaaa1b0000000000000000000000000000000000000000000000000000100001800c00050006000000000000002c0001800c000400010100000b000000100006000100000003000000ffffffff0c00090007000000ff7f0000380001800c00050009000000f40000000c00050002000000020a00000c00040080000000b300000010000600100c0000ff0100000e000000f80001800c000700210bfffffcffffffa4000c801400010000000000440b00007fd20000810000001400010045040000b803000001000000810000001400010009000000270100000900000088a8000014000100030000001e050000090000008100000014000100001000001d0200000100000081000000140001000000000004010000380000008100000014000100ffff0000b30500000000a84e88a800001400010004000000130b00000700000088a8000014000b00030000000000000006000000000000000c000300a30000000a0000000c0005000a000000020000000c000400ff0f0000001000000c00090038ff0000070000001800018014000a00080000000000000001feffffffffffff4c0001800c000900ffff0000010000000c000500ec0b0000020000000c0003000b000000020000000c0003000004000085dd00000c000500ffffff7fb30000000c00090001000000000000000400018008001c"], 0x38c}}, 0x4084) (async)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c03000011000100000000000000000000004100", @ANYRES32=0x0, @ANYBLOB="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"], 0x38c}}, 0x4084)
r7 = socket$inet6(0xa, 0x0, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x9, 0x0, 0x100000, 0x5, 0x4}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x9, 0x0, 0x100000, 0x5, 0x4}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2c}, 0x10}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2c}, 0x10}}, 0x0)

67.147876ms ago: executing program 1 (id=1357):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
close(0x3)

0s ago: executing program 1 (id=1358):
bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d932bbd700000000000010000000800030003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18009' (ED25519) to the list of known hosts.
syzkaller login: [   40.803260][ T5774] cgroup: Unknown subsys name 'net'
[   40.908656][ T5774] cgroup: Unknown subsys name 'cpuset'
[   40.913050][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.151513][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.811124][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.814216][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.817657][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.820839][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.824012][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.833650][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.836089][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.839118][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.841398][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.841724][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.844622][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.849944][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.852440][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.855280][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.855330][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.966626][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   44.994977][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   45.017592][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.020065][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.022361][ T5849] bridge_slave_0: entered allmulticast mode
[   45.024656][ T5849] bridge_slave_0: entered promiscuous mode
[   45.031251][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   45.037383][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.039733][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.042109][ T5849] bridge_slave_1: entered allmulticast mode
[   45.044474][ T5849] bridge_slave_1: entered promiscuous mode
[   45.068055][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.071109][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.074043][ T5840] bridge_slave_0: entered allmulticast mode
[   45.076665][ T5840] bridge_slave_0: entered promiscuous mode
[   45.079375][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.081953][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.085050][ T5840] bridge_slave_1: entered allmulticast mode
[   45.087894][ T5840] bridge_slave_1: entered promiscuous mode
[   45.095387][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.108499][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.125724][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.134899][ T5849] team0: Port device team_slave_0 added
[   45.137329][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.139748][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.142057][ T5844] bridge_slave_0: entered allmulticast mode
[   45.144496][ T5844] bridge_slave_0: entered promiscuous mode
[   45.149054][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.160959][ T5849] team0: Port device team_slave_1 added
[   45.168371][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.171344][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.173877][ T5844] bridge_slave_1: entered allmulticast mode
[   45.177536][ T5844] bridge_slave_1: entered promiscuous mode
[   45.181132][ T5840] team0: Port device team_slave_0 added
[   45.193074][ T5840] team0: Port device team_slave_1 added
[   45.196000][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.199352][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.209710][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.221254][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.225536][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.232862][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.235742][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.246238][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.267991][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.270300][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.279002][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.284058][ T5844] team0: Port device team_slave_0 added
[   45.286224][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.288843][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.297748][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.302319][ T5844] team0: Port device team_slave_1 added
[   45.331268][ T5840] hsr_slave_0: entered promiscuous mode
[   45.333741][ T5840] hsr_slave_1: entered promiscuous mode
[   45.338165][ T5849] hsr_slave_0: entered promiscuous mode
[   45.340506][ T5849] hsr_slave_1: entered promiscuous mode
[   45.342672][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   45.344833][ T5849] Cannot create hsr debugfs directory
[   45.347288][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.349854][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.360018][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.365053][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.367587][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.376203][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.427885][ T5844] hsr_slave_0: entered promiscuous mode
[   45.430558][ T5844] hsr_slave_1: entered promiscuous mode
[   45.433042][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   45.435391][ T5844] Cannot create hsr debugfs directory
[   45.511290][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.515491][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.520590][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.527036][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.545117][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.553374][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.565431][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.568862][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.573257][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.576328][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.579524][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.582536][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.591226][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.595069][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.603106][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.607674][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.618452][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.620908][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.623347][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.625689][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.645916][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.648492][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.650941][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.653270][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.663798][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.672153][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.674722][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.678146][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.680728][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.683723][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.687076][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.695319][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   45.707429][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.709778][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.717726][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.720060][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.729889][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.734897][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.740435][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.749819][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   45.758175][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   45.763460][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.765826][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.769232][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.771571][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.784949][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.787458][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.800258][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.802622][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.825794][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.847328][ T5840] veth0_vlan: entered promiscuous mode
[   45.851423][ T5840] veth1_vlan: entered promiscuous mode
[   45.861857][ T5840] veth0_macvtap: entered promiscuous mode
[   45.864998][ T5840] veth1_macvtap: entered promiscuous mode
[   45.873655][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.889039][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.893822][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.901311][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.904265][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.908555][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.931246][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.946618][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.949577][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.961077][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.963582][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.968183][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.985551][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.987784][ T5844] veth0_vlan: entered promiscuous mode
[   46.008312][ T5844] veth1_vlan: entered promiscuous mode
[   46.019341][ T5849] veth0_vlan: entered promiscuous mode
[   46.025622][ T5911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.030292][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.031276][ T5849] veth1_vlan: entered promiscuous mode
[   46.049481][ T5844] veth0_macvtap: entered promiscuous mode
[   46.063317][ T5844] veth1_macvtap: entered promiscuous mode
[   46.075468][ T5849] veth0_macvtap: entered promiscuous mode
[   46.081602][ T5849] veth1_macvtap: entered promiscuous mode
[   46.088763][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.102068][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.111658][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.114988][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.120734][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.128053][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.131223][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.135799][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.141828][ T5690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.144926][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.149036][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.152313][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.206872][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.210115][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.221422][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.224712][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.366934][ T5920] nbd0: detected capacity change from 0 to 127
[   46.372769][   T57] block nbd0: Receive control failed (result -104)
[   46.373932][ T5923] block nbd0: Receive control failed (result -32)
[   46.395158][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.405373][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.416783][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.423356][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.453773][ T5931] team_slave_0: entered promiscuous mode
[   46.455858][ T5931] team_slave_1: entered promiscuous mode
[   46.462309][ T5931] macsec1: entered promiscuous mode
[   46.464957][ T5931] team0: entered promiscuous mode
[   46.474533][ T5933] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   46.624668][ T5951] xt_policy: neither incoming nor outgoing policy selected
[   46.635791][ T5953] Bluetooth: MGMT ver 1.23
[   46.691775][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   46.699356][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   46.777919][ T5966] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   46.779289][ T5964] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   46.867920][ T5848] Bluetooth: hci1: command tx timeout
[   46.867945][   T55] Bluetooth: hci0: command tx timeout
[   46.869793][ T5848] Bluetooth: hci2: command tx timeout
[   46.949253][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   46.952339][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   46.977520][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.980306][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.036090][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.054114][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.128164][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.132004][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.134984][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.143821][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.205345][ T6001] veth0_to_bond: entered allmulticast mode
[   47.442111][ T6007] syzkaller0: entered promiscuous mode
[   47.444165][ T6007] syzkaller0: entered allmulticast mode
[   47.773169][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   47.798979][ T6013] Zero length message leads to an empty skb
[   48.182452][ T6036] tipc: Started in network mode
[   48.184797][ T6036] tipc: Node identity f6e0df0fc076, cluster identity 4711
[   48.189443][ T6036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.277126][ T6046] netlink: 'syz.0.37': attribute type 13 has an invalid length.
[   48.281115][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   48.601311][ T6056] vlan2: entered promiscuous mode
[   48.603681][ T6056] vlan2: entered allmulticast mode
[   48.605876][ T6056] hsr_slave_1: entered allmulticast mode
[   48.678999][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'.
[   48.714232][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[   48.722050][ T6064] netlink: 'syz.1.43': attribute type 30 has an invalid length.
[   48.748531][ T6068] netlink: 'syz.1.45': attribute type 6 has an invalid length.
[   48.873654][ T6081] netlink: 'syz.2.48': attribute type 2 has an invalid length.
[   48.930254][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.947076][ T5848] Bluetooth: hci2: command tx timeout
[   48.947169][ T5233] Bluetooth: hci0: command tx timeout
[   48.949212][ T5848] Bluetooth: hci1: command tx timeout
[   48.990032][ T6090] tipc: Started in network mode
[   48.992114][ T6090] tipc: Node identity 6a6959eefe4e, cluster identity 4711
[   48.995128][ T6090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.001523][ T6090] syzkaller0: entered promiscuous mode
[   49.003628][ T6090] syzkaller0: entered allmulticast mode
[   49.011491][ T6090] tipc: Resetting bearer <eth:syzkaller0>
[   49.014306][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   49.019214][ T6089] tipc: Disabling bearer <eth:syzkaller0>
[   49.186722][ T5907] tipc: Node number set to 915857167
[   49.563138][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.655084][ T6119] tipc: Started in network mode
[   49.656818][ T6119] tipc: Node identity 3a968180e189, cluster identity 4711
[   49.659284][ T6119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.663957][ T6117] macvlan2: entered allmulticast mode
[   49.666823][ T6117] veth1_vlan: entered allmulticast mode
[   49.670308][ T6117] veth1_vlan: left allmulticast mode
[   49.681489][ T6119] syzkaller0: entered promiscuous mode
[   49.683385][ T6119] syzkaller0: entered allmulticast mode
[   49.697066][ T6118] tipc: Resetting bearer <eth:syzkaller0>
[   49.710589][ T6118] tipc: Disabling bearer <eth:syzkaller0>
[   49.816880][ T5909] IPVS: starting estimator thread 0...
[   49.853214][ T6151] tc_dump_action: action bad kind
[   49.908913][ T6146] IPVS: using max 134 ests per chain, 321600 per kthread
[   49.988049][ T6172] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   50.100973][ T6182] netlink: 'syz.1.77': attribute type 13 has an invalid length.
[   50.104029][ T6182] netlink: 'syz.1.77': attribute type 17 has an invalid length.
[   50.137613][ T6182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.379616][ T6217] syzkaller0: entered promiscuous mode
[   50.381485][ T6217] syzkaller0: entered allmulticast mode
[   50.661669][ T6227] bridge_slave_0: left allmulticast mode
[   50.664086][ T6227] bridge_slave_0: left promiscuous mode
[   50.666858][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.671656][ T6227] bridge_slave_1: left allmulticast mode
[   50.674058][ T6227] bridge_slave_1: left promiscuous mode
[   50.677867][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.683602][ T6227] bond0: (slave bond_slave_0): Releasing backup interface
[   50.691014][ T6227] bond0: (slave bond_slave_1): Releasing backup interface
[   50.695763][ T6228] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   50.702704][ T6227] team0: Port device team_slave_0 removed
[   50.713408][ T6227] team0: Port device team_slave_1 removed
[   50.716216][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.720465][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.724462][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.728074][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.738950][ T6231] team0: Mode changed to "broadcast"
[   50.745859][ T6227] vlan0: entered promiscuous mode
[   50.755862][ T6227] team0: Port device vlan0 added
[   50.763008][ T6227] tipc: Enabled bearer <eth:team0>, priority 0
[   50.766772][ T6227] syz.1.89 (6227) used greatest stack depth: 19984 bytes left
[   50.786140][ T6233] openvswitch: netlink: Flow key attr not present in new flow.
[   50.825318][ T6240] netlink: 'syz.1.92': attribute type 27 has an invalid length.
[   50.833612][ T6240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.844478][ T6240] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   51.027017][ T5848] Bluetooth: hci1: command tx timeout
[   51.027158][   T55] Bluetooth: hci0: command tx timeout
[   51.030390][ T5848] Bluetooth: hci2: command tx timeout
[   51.513272][ T6265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.763258][ T6269] warning: `syz.1.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.878815][ T5842] tipc: Node number set to 3676275072
[   51.913321][ T6278] tipc: Resetting bearer <eth:team0>
[   51.975667][ T6278] vlan0: left promiscuous mode
[   52.025563][ T6278] vlan2: left promiscuous mode
[   52.028028][ T6278] vlan2: left allmulticast mode
[   52.030085][ T6278] hsr_slave_1: left allmulticast mode
[   52.035026][ T5690] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.039280][ T5690] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.045025][ T5690] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.049179][ T5690] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.227772][ T6295] __nla_validate_parse: 19 callbacks suppressed
[   52.227786][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'.
[   52.234380][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   52.238184][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   52.352371][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'.
[   52.360263][ T6323] netlink: 'syz.0.114': attribute type 4 has an invalid length.
[   52.362704][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   52.366157][ T6323] netlink: 'syz.0.114': attribute type 4 has an invalid length.
[   52.380168][ T6323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   52.406157][ T6332] syzkaller1: entered promiscuous mode
[   52.408769][ T6332] syzkaller1: entered allmulticast mode
[   52.412272][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   52.460122][ T6334] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   52.470831][ T6334] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.606056][ T6344] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.119'.
[   52.656474][ T6350] netlink: 'syz.0.121': attribute type 11 has an invalid length.
[   52.659084][ T6350] netlink: 'syz.0.121': attribute type 4 has an invalid length.
[   52.661781][ T6350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.121'.
[   52.715982][ T6351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.121'.
[   52.727571][ T6350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.121'.
[   53.106433][   T55] Bluetooth: hci0: command tx timeout
[   53.106554][ T5233] Bluetooth: hci2: command tx timeout
[   53.108903][   T55] Bluetooth: hci1: command tx timeout
[   53.133024][ T6376] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   53.166018][ T6379] netlink: 'syz.1.131': attribute type 2 has an invalid length.
[   53.171674][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.185473][ T6379] bond0: (slave rose0): Enslaving as an active interface with an up link
[   53.418357][ T6411] netlink: 'syz.1.137': attribute type 4 has an invalid length.
[   53.583727][ T6425] vxcan2: entered promiscuous mode
[   53.665369][ T6432] sctp: [Deprecated]: syz.1.143 (pid 6432) Use of int in max_burst socket option deprecated.
[   53.665369][ T6432] Use struct sctp_assoc_value instead
[   53.683103][ T6434] ip6tnl1: entered promiscuous mode
[   53.688523][ T6434] ip6tnl1: entered allmulticast mode
[   53.692202][ T6434] team0: Device ip6tnl1 is of different type
[   53.708652][ T6441] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   53.816030][ T6447] netlink: 'syz.0.147': attribute type 2 has an invalid length.
[   54.065467][ T6467] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   54.119398][ T6472] syzkaller1: entered promiscuous mode
[   54.121385][ T6472] syzkaller1: entered allmulticast mode
[   54.192741][ T6474] netlink: 'syz.2.155': attribute type 12 has an invalid length.
[   54.394344][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.655792][ T6495] vlan2: entered allmulticast mode
[   54.660865][ T6495] bond1: entered allmulticast mode
[   54.721620][ T6498] netlink: 'syz.1.161': attribute type 4 has an invalid length.
[   54.725231][ T6498] : renamed from bond0
[   54.813967][ T6510] vlan2: entered promiscuous mode
[   54.815818][ T6510] macvtap0: entered promiscuous mode
[   54.913487][ T6522] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   55.061559][ T6537] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   55.111726][ T6544] bond2: entered promiscuous mode
[   55.113933][ T6544] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.278234][ T6556] smc: net device bond0 applied user defined pnetid SYZ2
[   55.287055][ T6556] smc: net device bond0 erased user defined pnetid SYZ2
[   55.320704][ T6566] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   55.346712][ T6570] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   55.702105][ T6621] ieee802154 phy1 wpan1: encryption failed: -22
[   55.865365][ T6643] vxcan2: entered promiscuous mode
[   55.984476][ T6656] bond2: entered promiscuous mode
[   55.987836][ T6656] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.995898][ T6656] bond2: (slave bridge1): making interface the new active one
[   55.999356][ T6656] bridge1: entered promiscuous mode
[   56.001823][ T6656] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   56.146438][   T55] Bluetooth: hci0: command tx timeout
[   56.948150][ T6682] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   56.952055][ T6682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.076185][ T6695] 8021q: adding VLAN 0 to HW filter on device bond3
[   57.324757][ T6718] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   57.673397][ T6735] __nla_validate_parse: 43 callbacks suppressed
[   57.673407][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'.
[   57.721812][ T6738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.835066][ T6743] netlink: 168 bytes leftover after parsing attributes in process `syz.1.238'.
[   57.882740][ T6748] netlink: 248 bytes leftover after parsing attributes in process `syz.1.239'.
[   57.935997][ T6750] netlink: 144 bytes leftover after parsing attributes in process `syz.0.240'.
[   57.941329][ T6750] netlink: 464 bytes leftover after parsing attributes in process `syz.0.240'.
[   57.945024][ T6750] netlink: 9 bytes leftover after parsing attributes in process `syz.0.240'.
[   57.948390][ T6750] 0: renamed from hsr0
[   57.951857][ T6750] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.955917][ T6750] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.960185][ T6750] 0: entered allmulticast mode
[   57.962192][ T6750] hsr_slave_0: entered allmulticast mode
[   57.964582][ T6750] hsr_slave_1: entered allmulticast mode
[   57.968758][ T6750] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   58.127885][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[   58.159231][ T6787] validate_nla: 4 callbacks suppressed
[   58.159240][ T6787] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   58.163596][ T6787] netlink: 224 bytes leftover after parsing attributes in process `syz.1.248'.
[   58.190843][ T6790] syzkaller1: entered promiscuous mode
[   58.192963][ T6790] syzkaller1: entered allmulticast mode
[   58.209220][ T6790] netlink: 100 bytes leftover after parsing attributes in process `syz.0.249'.
[   58.345296][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'.
[   58.389739][ T6810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.395891][ T6810] syzkaller0: entered promiscuous mode
[   58.402463][ T6810] syzkaller0: entered allmulticast mode
[   58.414353][ T6814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   58.424068][ T6814] tipc: Resetting bearer <eth:syzkaller0>
[   58.431505][ T6809] tipc: Resetting bearer <eth:syzkaller0>
[   58.439343][ T6809] tipc: Disabling bearer <eth:syzkaller0>
[   58.794974][ T6866] netlink: 'syz.0.271': attribute type 29 has an invalid length.
[   58.802701][ T6864] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   58.853482][ T6871]  (unregistering): Released all slaves
[   58.915172][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.075186][ T6909] af_packet: tpacket_rcv: packet too big, clamped from 65624 to 3952. macoff=96
[   59.119838][ T6914] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   59.340089][ T6930] pim6reg9: entered allmulticast mode
[   59.829168][ T6933] batadv1: entered promiscuous mode
[   59.831618][ T6933] batadv1: entered allmulticast mode
[   60.003730][ T6942] vlan4: entered promiscuous mode
[   60.005478][ T6942] macvtap0: entered promiscuous mode
[   60.012757][ T6943] vlan4: entered promiscuous mode
[   60.427191][ T6969] netlink: 'syz.1.306': attribute type 12 has an invalid length.
[   60.623871][ T6975] netlink: 'syz.1.308': attribute type 10 has an invalid length.
[   60.655816][ T6975] team0: Port device dummy0 added
[   60.681740][ T6975] netlink: 'syz.1.308': attribute type 10 has an invalid length.
[   60.716871][ T6975] team0: Port device dummy0 removed
[   60.866841][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   61.202746][ T5986] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1
[   61.209879][ T5986] hid-generic 0005:16C0:05DF.0001: probe with driver hid-generic failed with error -22
[   61.231281][ T6994] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   61.574792][ T7036] tap0: tun_chr_ioctl cmd 35108
[   61.700622][ T7049] netlink: 'syz.1.332': attribute type 7 has an invalid length.
[   61.703809][ T7049] netlink: 'syz.1.332': attribute type 8 has an invalid length.
[   61.881204][ T7057] netlink: 'syz.1.334': attribute type 13 has an invalid length.
[   61.884655][ T7057] netlink: 'syz.1.334': attribute type 17 has an invalid length.
[   61.902830][ T7057] 8021q: adding VLAN 0 to HW filter on device team0
[   61.905968][ T7057] tipc: Resetting bearer <eth:team0>
[   61.908794][ T7057] tipc: Resetting bearer <eth:team0>
[   61.912994][ T7057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.045431][ T7066] netlink: 'syz.2.338': attribute type 10 has an invalid length.
[   62.051899][ T7066] batman_adv: batadv0: Adding interface: virt_wifi0
[   62.054621][ T7066] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.064078][ T7066] batman_adv: batadv0: Interface activated: virt_wifi0
[   62.556153][ T7137] pim6reg: entered allmulticast mode
[   62.568861][ T7134] pim6reg: left allmulticast mode
[   62.634092][ T7146] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.641975][ T7146] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   62.704557][ T7159] __nla_validate_parse: 23 callbacks suppressed
[   62.704571][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'.
[   62.720331][ T7159] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.562910][ T7192] netlink: 76 bytes leftover after parsing attributes in process `syz.2.385'.
[   63.679740][ T7207] validate_nla: 2 callbacks suppressed
[   63.679753][ T7207] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   63.684870][ T7207] netlink: 76 bytes leftover after parsing attributes in process `syz.2.389'.
[   63.685350][ T7204] delete_channel: no stack
[   63.720185][ T7210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   63.725281][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[   63.729341][ T7210] netlink: 260 bytes leftover after parsing attributes in process `syz.0.392'.
[   63.801191][ T7218] tipc: Resetting bearer <eth:syzkaller0>
[   63.841592][ T5986] IPVS: starting estimator thread 0...
[   63.862647][ T7224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.866107][ T7224] syzkaller0: entered promiscuous mode
[   63.869393][ T7224] syzkaller0: entered allmulticast mode
[   63.874554][ T7224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   63.882076][ T7224] syzkaller0: mtu less than device minimum
[   63.885469][ T7223] tipc: Resetting bearer <eth:syzkaller0>
[   63.893213][ T7223] tipc: Disabling bearer <eth:syzkaller0>
[   63.907987][ T7228] !: renamed from dummy0
[   63.927726][ T7222] IPVS: using max 76 ests per chain, 182400 per kthread
[   64.018888][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[   64.033063][ T5923] block nbd1: Receive control failed (result -107)
[   64.067852][ T7237] nbd1: detected capacity change from 0 to 32
[   64.071667][ T5845] block nbd1: Dead connection, failed to find a fallback
[   64.084856][ T5845] block nbd1: shutting down sockets
[   64.096031][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.100089][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.103385][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.112260][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.127747][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.131901][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   64.136572][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[   64.140684][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.398'.
[   64.143420][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.156172][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.160633][ T7251] netlink: 'syz.2.400': attribute type 18 has an invalid length.
[   64.163956][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.174191][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.180331][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.184372][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.188526][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.197676][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.209655][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.220592][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.231492][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.234742][ T5845] ldm_validate_partition_table(): Disk read failed.
[   64.237880][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.241578][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.244607][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.251029][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[   64.253998][ T5845] Dev nbd1: unable to read RDB block 0
[   64.256856][ T5845]  nbd1: unable to read partition table
[   64.267896][ T5845] ldm_validate_partition_table(): Disk read failed.
[   64.270945][ T5845] Dev nbd1: unable to read RDB block 0
[   64.273532][ T5845]  nbd1: unable to read partition table
[   64.329598][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'.
[   64.337750][ T7268] netlink: 'syz.2.403': attribute type 7 has an invalid length.
[   64.343095][ T7268] netlink: 'syz.2.403': attribute type 8 has an invalid length.
[   64.418046][ T7282] bridge2: port 1(veth0_to_bond) entered blocking state
[   64.420511][ T7282] bridge2: port 1(veth0_to_bond) entered disabled state
[   64.424174][ T7282] veth0_to_bond: entered allmulticast mode
[   64.431749][ T7282] veth0_to_bond: entered promiscuous mode
[   64.439617][ T7282] vlan2: entered allmulticast mode
[   64.442111][ T7282] veth1: entered allmulticast mode
[   64.444299][ T7282] bridge2: port 2(vlan2) entered blocking state
[   64.447145][ T7282] bridge2: port 2(vlan2) entered disabled state
[   64.451644][ T7282] vlan2: entered promiscuous mode
[   64.453869][ T7282] veth1: entered promiscuous mode
[   64.587602][ T7308] syzkaller0: entered allmulticast mode
[   64.590983][ T7308] syzkaller0 (unregistering): left allmulticast mode
[   64.932367][ T7363] netlink: 'syz.2.415': attribute type 20 has an invalid length.
[   64.938690][ T7363] netlink: 'syz.2.415': attribute type 20 has an invalid length.
[   64.938694][ T5874] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.955424][ T5874] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.962839][ T5874] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.968847][ T5874] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.298284][ T7386] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   65.570911][ T7410] tipc: Resetting bearer <eth:team0>
[   65.780605][ T7425] vlan2: entered promiscuous mode
[   65.782530][ T7425] team0: entered promiscuous mode
[   65.784438][ T7425] team_slave_0: entered promiscuous mode
[   65.786669][ T7425] team_slave_1: entered promiscuous mode
[   65.883004][ T7432] syzkaller1: entered promiscuous mode
[   65.885414][ T7432] syzkaller1: entered allmulticast mode
[   65.924431][ T7437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.052708][ T7449] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[   66.056025][ T7449] netlink: 'syz.2.448': attribute type 11 has an invalid length.
[   66.067468][ T7449] netlink: 'syz.2.448': attribute type 21 has an invalid length.
[   66.070914][ T7449] netlink: 'syz.2.448': attribute type 4 has an invalid length.
[   66.805313][ T7457] 8021q: adding VLAN 0 to HW filter on device bond4
[   66.840710][ T7457] bond4: (slave wlan0): Enslaving as an active interface with a down link
[   66.851101][ T7457] vlan2: entered allmulticast mode
[   66.853279][ T7457] veth1: entered allmulticast mode
[   67.132576][ T7484] bridge_slave_1: left allmulticast mode
[   67.136863][ T7484] bridge_slave_1: left promiscuous mode
[   67.142320][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.151492][ T7484] bridge_slave_0: left allmulticast mode
[   67.154852][ T7484] bridge_slave_0: left promiscuous mode
[   67.166597][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.537953][ T7493] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   67.549966][ T7493] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   67.584845][ T7498] gretap1: entered promiscuous mode
[   67.595837][ T7498] bond4: (slave gretap1): making interface the new active one
[   67.605222][ T7498] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   67.832547][ T7510] vlan0: entered promiscuous mode
[   67.947202][ T7519] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   67.997743][ T7521] __nla_validate_parse: 20 callbacks suppressed
[   67.997756][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'.
[   68.015323][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'.
[   68.043405][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   68.084486][ T7527] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.731865][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'.
[   68.799322][ T7567] validate_nla: 11 callbacks suppressed
[   68.799338][ T7567] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[   68.813291][ T7567] 8021q: adding VLAN 0 to HW filter on device bond5
[   68.821659][ T7567] bond5: (slave ip6erspan0): making interface the new active one
[   68.825704][ T7567] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[   68.856629][ T7570] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003
[   68.888968][ T7572] syz_tun: entered allmulticast mode
[   68.895332][ T7571] syz_tun: left allmulticast mode
[   69.076013][ T7588] netlink: 596 bytes leftover after parsing attributes in process `syz.0.491'.
[   69.107509][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[   69.147518][ T7592] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[   69.150754][ T7592] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.492'.
[   69.353713][ T7608] netlink: 'syz.0.495': attribute type 4 has an invalid length.
[   69.362355][ T7608] netlink: 152 bytes leftover after parsing attributes in process `syz.0.495'.
[   69.420022][ T7611] netlink: 'syz.2.497': attribute type 3 has an invalid length.
[   69.423418][ T7611] netlink: 'syz.2.497': attribute type 3 has an invalid length.
[   69.425495][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'.
[   69.433102][ T7611] netlink: 'syz.2.497': attribute type 2 has an invalid length.
[   69.513847][ T7618] netlink: 168 bytes leftover after parsing attributes in process `syz.0.500'.
[   69.668101][ T7632] netlink: 'syz.1.504': attribute type 7 has an invalid length.
[   69.671143][ T7632] netlink: 'syz.1.504': attribute type 8 has an invalid length.
[   69.774019][ T7646] netlink: 'syz.1.507': attribute type 1 has an invalid length.
[   69.796249][ T7646] bond0 (unregistering): Released all slaves
[   70.018807][ T7680] netlink: 'syz.1.514': attribute type 12 has an invalid length.
[   70.036215][ T7676] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[   70.096248][ T7683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.099218][ T7683] syzkaller0: entered promiscuous mode
[   70.101676][ T7683] syzkaller0: entered allmulticast mode
[   70.107865][ T7683] tipc: Resetting bearer <eth:syzkaller0>
[   70.110748][ T7682] tipc: Resetting bearer <eth:syzkaller0>
[   70.114199][ T7682] tipc: Disabling bearer <eth:syzkaller0>
[   70.237491][ T7698] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.241513][ T7698] team0: Port device netdevsim0 added
[   70.322547][ T7712] tipc: Failed to remove unknown binding: 66,1,1/3676275072:3580130964/3580130966
[   70.326271][ T7712] tipc: Failed to remove unknown binding: 66,1,1/3676275072:3580130964/3580130966
[   70.330502][ T7712] tipc: Failed to remove unknown binding: 66,1,1/3676275072:3580130964/3580130966
[   70.333574][ T7712] tipc: Failed to remove unknown binding: 66,1,1/3676275072:3580130964/3580130966
[   70.422249][ T7733] syzkaller1: entered promiscuous mode
[   70.424559][ T7733] syzkaller1: entered allmulticast mode
[   70.594383][ T7750] sctp: [Deprecated]: syz.1.535 (pid 7750) Use of int in max_burst socket option.
[   70.594383][ T7750] Use struct sctp_assoc_value instead
[   70.625433][ T7752] tipc: Resetting bearer <eth:team0>
[   70.631814][ T7752] team0: Port device vlan0 removed
[   70.642501][ T7752] tipc: Resetting bearer <eth:team0>
[   70.714342][ T7756] sctp: [Deprecated]: syz.2.538 (pid 7756) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.714342][ T7756] Use struct sctp_sack_info instead
[   70.727811][ T7756] syzkaller1: left promiscuous mode
[   70.729620][ T7756] syzkaller1: left allmulticast mode
[   70.805647][ T7768] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.815800][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.818744][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.901686][ T7772] syz_tun: entered allmulticast mode
[   70.909925][ T7772] dvmrp8: entered allmulticast mode
[   70.953506][ T7771] syz_tun: left allmulticast mode
[   70.955787][ T7771] dvmrp8: left allmulticast mode
[   71.031091][ T7775] geneve0: entered promiscuous mode
[   71.034744][ T7775] team0: Port device geneve0 added
[   71.109459][ T1359] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[   71.161502][ T7779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.206893][ T7784] !: entered promiscuous mode
[   71.209858][ T7784] team0: Failed to send port change of device 0! via netlink (err -105)
[   71.218532][ T7784] team0: Failed to send options change via netlink (err -105)
[   71.225653][ T7784] team0: Port device 0! added
[   71.341422][ T7795] syzkaller1: entered promiscuous mode
[   71.343538][ T7795] syzkaller1: entered allmulticast mode
[   71.477207][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.619947][ T7808] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   71.644015][ T7811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.710705][ T7817] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.851436][ T5909] IPVS: starting estimator thread 0...
[   71.878331][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.936430][ T7846] IPVS: using max 134 ests per chain, 321600 per kthread
[   72.799590][ T7895] netlink: 'syz.1.589': attribute type 11 has an invalid length.
[   72.802506][ T7895] netlink: 'syz.1.589': attribute type 11 has an invalid length.
[   73.026613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   73.032095][ T7926] __nla_validate_parse: 31 callbacks suppressed
[   73.032106][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[   73.039213][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'.
[   73.048450][ T7926] vlan3: entered allmulticast mode
[   73.050728][ T7926] bond0: entered allmulticast mode
[   73.052716][ T7926] bond_slave_0: entered allmulticast mode
[   73.055350][ T7926] bond_slave_1: entered allmulticast mode
[   73.059811][ T7926] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   73.077325][ T7928] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   73.297377][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[   73.303050][ T7969] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   73.341823][ T7974] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   73.391424][ T7981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.617'.
[   73.405087][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[   73.410095][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[   73.410900][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[   73.416250][ T7985] netlink: 200 bytes leftover after parsing attributes in process `syz.1.618'.
[   73.421619][ T7985] netlink: 38 bytes leftover after parsing attributes in process `syz.1.618'.
[   73.449742][ T7991] netlink: 228 bytes leftover after parsing attributes in process `syz.1.620'.
[   73.631524][ T8013] team_slave_0: left promiscuous mode
[   73.634465][ T8013] team0 (unregistering): Port device team_slave_0 removed
[   73.637841][ T8013] team_slave_1: left promiscuous mode
[   73.641191][ T8013] team0 (unregistering): Port device team_slave_1 removed
[   73.644154][ T8013] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   73.651804][ T8013] team0 (unregistering): Port device netdevsim0 removed
[   73.654392][ T8013] !: left promiscuous mode
[   73.658606][ T8013] team0 (unregistering): Port device 0! removed
[   73.669827][ T8015] syzkaller1: entered promiscuous mode
[   73.671790][ T8015] syzkaller1: entered allmulticast mode
[   74.437312][ T8059] validate_nla: 20 callbacks suppressed
[   74.437324][ T8059] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[   74.446106][ T8059] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.660132][ T8079] Driver unsupported XDP return value 0 on prog  (id 199) dev N/A, expect packet loss!
[   74.960539][ T8115] tipc: Resetting bearer <eth:team0>
[   74.978413][ T8115] team0: Mode changed to "activebackup"
[   75.734959][ T8133] netlink: 'syz.0.662': attribute type 7 has an invalid length.
[   75.737931][ T8133] netlink: 'syz.0.662': attribute type 8 has an invalid length.
[   75.741363][ T8133] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   75.927954][ T8138] nbd: nbd1 already in use
[   76.181085][ T8181] nbd: must specify an index to disconnect
[   76.258795][ T8193] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[   76.297613][ T8213] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   76.588384][ T8242] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   76.821043][ T8299] sit0: entered promiscuous mode
[   76.825744][ T8299] netlink: 'syz.2.705': attribute type 1 has an invalid length.
[   76.867116][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[   76.870190][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[   76.872844][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[   76.875331][   T25] block nbd0: Connection timed out, retrying (0/2 alive)
[   76.878166][   T25] block nbd0: Dead connection, failed to find a fallback
[   76.881124][   T25] block nbd0: shutting down sockets
[   76.883434][   T25] blk_print_req_error: 27 callbacks suppressed
[   76.883445][   T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.889921][   T25] buffer_io_error: 27 callbacks suppressed
[   76.889928][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[   76.894466][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.897483][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[   76.900158][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.903321][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[   76.906034][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.909130][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[   76.911775][ T5855] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.915202][ T5855] Buffer I/O error on dev nbd0, logical block 0, async page read
[   76.918567][ T5855] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.922115][ T5855] Buffer I/O error on dev nbd0, logical block 1, async page read
[   76.925136][ T5855] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.928752][ T5855] Buffer I/O error on dev nbd0, logical block 2, async page read
[   76.931811][ T5855] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.935526][ T5855] Buffer I/O error on dev nbd0, logical block 3, async page read
[   76.938841][ T5855] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.943071][ T5855] Buffer I/O error on dev nbd0, logical block 0, async page read
[   76.946170][ T5855] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   76.949817][ T5855] Buffer I/O error on dev nbd0, logical block 1, async page read
[   76.953873][ T5855] ldm_validate_partition_table(): Disk read failed.
[   76.957527][ T5855] Dev nbd0: unable to read RDB block 0
[   76.960503][ T5855]  nbd0: unable to read partition table
[   76.965408][ T5855] ldm_validate_partition_table(): Disk read failed.
[   76.968838][ T5855] Dev nbd0: unable to read RDB block 0
[   76.971765][ T5855]  nbd0: unable to read partition table
[   76.976160][ T5855] block nbd0: NBD_DISCONNECT
[   76.978279][ T5855] block nbd0: Send disconnect failed -32
[   76.980431][ T5855] block nbd0: Send disconnect failed -32
[   77.444171][ T8314] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   77.751133][ T8351] syzkaller1: left promiscuous mode
[   77.753149][ T8351] syzkaller1: left allmulticast mode
[   77.773782][ T8353] batadv_slave_0: entered promiscuous mode
[   77.780577][ T8353] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   77.812896][ T8358] IPVS: set_ctl: invalid protocol: 44 172.20.20.65:20001
[   78.669868][ T8370] __nla_validate_parse: 24 callbacks suppressed
[   78.669893][ T8370] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.727'.
[   78.729203][ T8382] IPv6: sit1: Disabled Multicast RS
[   78.812191][ T8390] netlink: 'syz.1.735': attribute type 13 has an invalid length.
[   78.815152][ T8390] netlink: 'syz.1.735': attribute type 17 has an invalid length.
[   78.838322][ T8390] tipc: Resetting bearer <eth:team0>
[   78.840907][ T8390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.895512][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'.
[   79.429899][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'.
[   79.649773][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'.
[   79.725990][ T8458] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[   79.759630][ T8460] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   79.856785][ T8467] netlink: 'syz.0.750': attribute type 13 has an invalid length.
[   79.859419][ T8467] netlink: 156 bytes leftover after parsing attributes in process `syz.0.750'.
[   80.438254][ T8476] netlink: 248 bytes leftover after parsing attributes in process `syz.1.753'.
[   80.484147][ T8479] vlan4: entered promiscuous mode
[   80.519878][ T8479] netlink: 'syz.1.754': attribute type 46 has an invalid length.
[   80.523208][ T8479] netlink: 104 bytes leftover after parsing attributes in process `syz.1.754'.
[   80.918677][ T8505] veth0_to_bond: left allmulticast mode
[   80.921719][ T8505] batadv_slave_0: left promiscuous mode
[   80.924660][ T8505] 0: left allmulticast mode
[   80.927147][ T8505] hsr_slave_0: left allmulticast mode
[   80.929365][ T8505] hsr_slave_1: left allmulticast mode
[   80.932029][ T8505] vlan0: left promiscuous mode
[   80.935182][ T8505] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   80.939630][ T8505] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   80.942591][ T8505] tipc: Resetting bearer <eth:syzkaller0>
[   80.944687][ T8505] syzkaller0: left promiscuous mode
[   80.946510][ T8505] syzkaller0: left allmulticast mode
[   80.949255][ T8505] bond2: left promiscuous mode
[   80.952159][ T8505] vlan2: left allmulticast mode
[   80.954179][ T8505] veth1: left allmulticast mode
[   81.023506][ T8511] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   81.134200][ T8523] vxcan0: entered promiscuous mode
[   81.367231][ T3141] cfg80211: failed to load regulatory.db
[   81.437693][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[   81.641860][ T8595] netlink: 27 bytes leftover after parsing attributes in process `syz.0.771'.
[   81.795589][ T8613] netlink: 'syz.1.777': attribute type 3 has an invalid length.
[   81.799916][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.777'.
[   82.389994][ T8578] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[   82.475072][ T8644] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   82.511475][ T8646] bridge_slave_1: left allmulticast mode
[   82.514084][ T8646] bridge_slave_1: left promiscuous mode
[   82.517321][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.521945][ T8646] bridge_slave_0: left allmulticast mode
[   82.524427][ T8646] bridge_slave_0: left promiscuous mode
[   82.527319][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.817434][ T8678] geneve2: entered promiscuous mode
[   82.876096][ T8688] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   82.880424][ T8688] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   82.997993][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv1
[   83.000775][ T8699] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   83.003933][ T8699] team0: Failed to send options change via netlink (err -105)
[   83.006852][ T8699] team0: Port device batadv1 added
[   83.763643][ T8716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.770059][ T8716] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[   83.773319][ T8716] __nla_validate_parse: 6 callbacks suppressed
[   83.773330][ T8716] netlink: 228 bytes leftover after parsing attributes in process `syz.2.802'.
[   83.808482][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.803'.
[   83.813565][ T8717] syzkaller0: entered promiscuous mode
[   83.815488][ T8717] syzkaller0: entered allmulticast mode
[   83.969566][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.058554][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[   84.062185][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'.
[   84.073274][ T8727] netlink: zone id is out of range
[   84.075333][ T8727] netlink: zone id is out of range
[   84.077465][ T8727] netlink: zone id is out of range
[   84.079858][ T8727] netlink: zone id is out of range
[   84.082007][ T8727] netlink: zone id is out of range
[   84.084099][ T8727] netlink: zone id is out of range
[   84.088953][ T8727] netlink: zone id is out of range
[   84.093814][ T8727] netlink: zone id is out of range
[   84.100802][ T8727] netlink: 'syz.1.806': attribute type 3 has an invalid length.
[   84.104177][ T8727] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.806'.
[   84.492966][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'.
[   84.611799][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.818'.
[   84.618684][ T5690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.622239][ T5690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.625354][ T5690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.630125][ T5690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.646909][ T8772] netlink: 256 bytes leftover after parsing attributes in process `syz.1.821'.
[   84.650264][ T8772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.821'.
[   84.655202][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'.
[   84.664738][ T8772] lo speed is unknown, defaulting to 1000
[   84.668481][ T8772] lo speed is unknown, defaulting to 1000
[   84.671378][ T8772] lo speed is unknown, defaulting to 1000
[   84.710698][ T8772] infiniband syz0: set active
[   84.712715][ T5990] lo speed is unknown, defaulting to 1000
[   84.714883][ T8772] infiniband syz0: added lo
[   84.739273][ T8772] RDS/IB: syz0: added
[   84.740645][ T8772] smc: adding ib device syz0 with port count 1
[   84.742785][ T8772] smc:    ib device syz0 port 1 has pnetid 
[   84.751666][ T5990] lo speed is unknown, defaulting to 1000
[   84.754399][ T8772] lo speed is unknown, defaulting to 1000
[   84.849946][ T8772] lo speed is unknown, defaulting to 1000
[   84.942851][ T8772] lo speed is unknown, defaulting to 1000
[   85.079156][ T8805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.082476][ T8805] syzkaller0: entered promiscuous mode
[   85.084765][ T8805] syzkaller0: entered allmulticast mode
[   85.100112][ T8805] tipc: Resetting bearer <eth:syzkaller0>
[   85.103324][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[   85.116640][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[   85.218891][ T8817] batman_adv: batadv0: Adding interface: ip6gretap1
[   85.221587][ T8817] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.233945][ T8817] batman_adv: batadv0: Interface activated: ip6gretap1
[   85.627430][ T8858] netlink: 'syz.0.848': attribute type 8 has an invalid length.
[   85.746394][   T55] Bluetooth: hci2: command tx timeout
[   86.012465][ T8860] netlink: 'syz.2.849': attribute type 12 has an invalid length.
[   86.261415][ T8864] netlink: 'syz.1.850': attribute type 5 has an invalid length.
[   86.336053][ T8867] Bluetooth: hci0: Opcode 0x080f failed: -22
[   86.378684][ T8869] lo speed is unknown, defaulting to 1000
[   86.431763][ T8875] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   86.439601][ T8878] syzkaller1: entered promiscuous mode
[   86.441523][ T8878] syzkaller1: entered allmulticast mode
[   86.444461][ T8876] netlink: 'syz.1.852': attribute type 6 has an invalid length.
[   86.648706][ T8902] syzkaller1: left promiscuous mode
[   86.650804][ T8902] syzkaller1: left allmulticast mode
[   86.711587][ T8907] netlink: 'syz.2.865': attribute type 9 has an invalid length.
[   86.968511][ T8912] syzkaller1: entered allmulticast mode
[   87.241148][ T8917] netlink: 'syz.1.868': attribute type 10 has an invalid length.
[   87.361303][ T8927] syzkaller1: entered promiscuous mode
[   87.363694][ T8927] syzkaller1: entered allmulticast mode
[   87.470346][ T8941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.617181][ T8959] netlink: 'syz.1.886': attribute type 1 has an invalid length.
[   87.643017][ T8964] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[   87.654392][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.664859][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.668543][ T8964] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   87.672412][ T8964] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   87.690042][ T8967] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.698277][ T8967] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   87.701912][ T8967] bond6: (slave macvlan4): Enslaving as a backup interface with an up link
[   87.712350][ T8967] bond0: (slave bond_slave_0): Releasing backup interface
[   87.721457][ T8967] bond0: (slave bond_slave_1): Releasing backup interface
[   87.731592][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.734871][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.743529][ T8967] bond4: (slave wlan0): Releasing active interface
[   87.750378][ T8967] bond0: (slave wlan1): Releasing backup interface
[   87.758564][ T8967] bond6: (slave macvlan4): Releasing backup interface
[   87.774565][ T8972] veth9: entered promiscuous mode
[   87.779323][ T8972] bond0: (slave veth9): Enslaving as an active interface with a down link
[   87.784700][ T8964] erspan0: entered allmulticast mode
[   87.791750][ T8964] bond0: (slave erspan0): making interface the new active one
[   87.795362][ T8964] bond0: (slave erspan0): Enslaving as an active interface with an up link
[   88.139720][ T9024] netlink: 'syz.1.907': attribute type 1 has an invalid length.
[   88.149127][ T9024] bond1: entered promiscuous mode
[   88.151700][ T9024] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.168173][ T9024] bond1: (slave bridge0): making interface the new active one
[   88.170885][ T9024] bridge0: entered promiscuous mode
[   88.172792][ T9028] Bluetooth: MGMT ver 1.23
[   88.173367][ T9024] bond1: (slave bridge0): Enslaving as an active interface with an up link
[   88.220640][ T9038] trusted_key: syz.2.913 sent an empty control message without MSG_MORE.
[   88.231563][ T9038] syzkaller1: left allmulticast mode
[   88.237838][ T9038] bridge0: entered promiscuous mode
[   88.239958][ T9038] bridge0: entered allmulticast mode
[   88.243031][ T9038] team0: Port device bridge0 added
[   88.387489][   T55] Bluetooth: hci0: command tx timeout
[   88.561887][ T9070] netlink: 'syz.2.923': attribute type 11 has an invalid length.
[   88.566219][ T9070] syz_tun: entered promiscuous mode
[   88.568138][ T9070] syz_tun: entered allmulticast mode
[   88.757792][ T9081] team0: Port device bridge0 removed
[   88.938913][ T9086] __nla_validate_parse: 29 callbacks suppressed
[   88.938926][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'.
[   88.944421][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[   88.978083][ T9086] dvmrp1: entered allmulticast mode
[   89.020016][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'.
[   89.076766][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'.
[   89.123278][ T9104] netlink: 96 bytes leftover after parsing attributes in process `syz.2.934'.
[   89.131261][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'.
[   89.247454][ T9119] erspan0: left allmulticast mode
[   89.272790][ T9119] tipc: Resetting bearer <eth:team0>
[   89.298105][ T9119] veth9: left promiscuous mode
[   89.301812][ T9119] bond1: left promiscuous mode
[   89.303449][ T9119] bridge0: left promiscuous mode
[   89.308367][ T3141] lo speed is unknown, defaulting to 1000
[   89.310313][ T3141] syz0: Port: 1 Link DOWN
[   89.313869][ T9118] bond0 (unregistering): Released all slaves
[   89.322146][ T3141] lo speed is unknown, defaulting to 1000
[   89.331490][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'.
[   89.339036][ T9119] hsr_slave_0: left promiscuous mode
[   89.343653][ T9119] hsr_slave_1: left promiscuous mode
[   89.391633][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[   89.428447][ T9137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.945'.
[   89.450619][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'.
[   89.723428][ T9169] 0: renamed from hsr0 (while UP)
[   89.727219][ T9169] 0: entered allmulticast mode
[   89.731071][ T9169] hsr_slave_0: entered allmulticast mode
[   89.733605][ T9169] hsr_slave_1: entered allmulticast mode
[   89.735809][ T9169] net_ratelimit: 109 callbacks suppressed
[   89.735816][ T9169] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   89.876755][ T9179] sit0: left promiscuous mode
[   89.892099][ T9179] syz_tun: left promiscuous mode
[   89.893893][ T9179] syz_tun: left allmulticast mode
[   89.905571][ T9179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.923385][ T9177] lo speed is unknown, defaulting to 1000
[   90.125153][ T9187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.485830][ T9179] syz.2.958 (9179) used greatest stack depth: 19968 bytes left
[   90.513587][ T9206] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20002
[   90.519831][ T9206] syz_tun: entered promiscuous mode
[   90.522113][ T9206] batadv_slave_1: entered promiscuous mode
[   90.524379][ T9206] erspan0: entered promiscuous mode
[   90.528812][ T9206] erspan0: left promiscuous mode
[   90.531064][ T9206] syz_tun: left promiscuous mode
[   90.533553][ T9206] batadv_slave_1: left promiscuous mode
[   90.658810][ T9217] validate_nla: 9 callbacks suppressed
[   90.658822][ T9217] netlink: 'syz.2.973': attribute type 10 has an invalid length.
[   90.688199][ T9219] lo speed is unknown, defaulting to 1000
[   90.768784][ T9227] delete_channel: no stack
[   90.784867][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.954046][ T9257] netlink: 'syz.0.986': attribute type 15 has an invalid length.
[   90.964767][ T9262] netlink: 'syz.1.988': attribute type 9 has an invalid length.
[   91.321458][ T9302] netlink: 'syz.1.1001': attribute type 2 has an invalid length.
[   91.495824][ T9309] ip6gre1: entered promiscuous mode
[   91.534643][ T9315] pim6reg1: entered promiscuous mode
[   91.536990][ T9315] pim6reg1: entered allmulticast mode
[   91.552845][ T9310] dvmrp8: entered allmulticast mode
[   91.559246][ T9308] dvmrp8: left allmulticast mode
[   91.706170][ T9321] bond0: (slave erspan0): Releasing active interface
[   91.713963][ T9321] team0: Port device batadv1 removed
[   91.717525][ T9321] bond0: (slave veth9): Releasing active interface
[   91.721760][ T9321] bond1: (slave bridge0): Releasing backup interface
[   91.851196][ T9342] veth11: entered promiscuous mode
[   92.028203][ T9357] veth0: entered promiscuous mode
[   92.749159][ T9348] veth0: left promiscuous mode
[   92.980214][ T9383] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.040128][ T9390] netlink: 'syz.0.1032': attribute type 11 has an invalid length.
[   93.073720][ T9394] syzkaller0: entered promiscuous mode
[   93.076158][ T9394] syzkaller0: entered allmulticast mode
[   93.263614][ T9415] dvmrp8: entered allmulticast mode
[   93.273131][ T9415] lo speed is unknown, defaulting to 1000
[   93.321898][ T9418] netlink: 'syz.2.1041': attribute type 23 has an invalid length.
[   93.355836][ T9414] dvmrp8: left allmulticast mode
[   93.542077][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.549713][ T9429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   93.689987][ T9445] sctp: [Deprecated]: syz.0.1052 (pid 9445) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.689987][ T9445] Use struct sctp_sack_info instead
[   93.696554][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.986453][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   94.298279][ T9455] __nla_validate_parse: 30 callbacks suppressed
[   94.298288][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'.
[   94.309667][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'.
[   94.331366][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'.
[   94.361119][ T9459] tap0: tun_chr_ioctl cmd 1074025675
[   94.363039][ T9459] tap0: persist disabled
[   94.371185][ T9459] vxcan2: entered promiscuous mode
[   94.485136][ T9463] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[   94.488189][ T9463] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1060'.
[   94.544712][ T9472] netlink: 208128 bytes leftover after parsing attributes in process `syz.2.1063'.
[   94.548351][ T9472] openvswitch: netlink: Message has 4 unknown bytes.
[   94.679356][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[   94.702368][ T9484] netlink: 'syz.2.1067': attribute type 7 has an invalid length.
[   94.704937][ T9484] netlink: 'syz.2.1067': attribute type 8 has an invalid length.
[   94.904632][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1077'.
[   94.908254][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1077'.
[   94.924012][ T9519] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   94.931120][ T9519] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   94.953439][ T9527] netlink: 'syz.0.1079': attribute type 37 has an invalid length.
[   95.069609][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[   95.161159][ T9556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1088'.
[   95.189498][ T9564] openvswitch: netlink: Duplicate or invalid key (type 0).
[   95.191960][ T9564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.244160][ T9574] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   95.273684][ T9578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.364302][ T9603] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.434424][ T9614] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[   95.478131][ T5909] hid-generic 0005:15C2:8002.0002: collection stack underflow
[   95.489418][ T5909] hid-generic 0005:15C2:8002.0002: item 0 0 0 12 parsing failed
[   95.498805][ T5909] hid-generic 0005:15C2:8002.0002: probe with driver hid-generic failed with error -22
[   95.571233][ T9631] vlan4: entered allmulticast mode
[   95.575034][ T9631] bridge_slave_0: entered allmulticast mode
[   96.611451][ T9655] dvmrp8: entered allmulticast mode
[   96.623085][ T9654] dvmrp8: left allmulticast mode
[   96.772271][ T9664] syzkaller1: entered promiscuous mode
[   96.774417][ T9664] syzkaller1: entered allmulticast mode
[   96.837805][ T9670] netlink: 'syz.2.1128': attribute type 11 has an invalid length.
[   96.890158][ T9675] syzkaller1: left promiscuous mode
[   96.892026][ T9675] syzkaller1: left allmulticast mode
[   97.025821][ T9689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.030865][ T9689] tipc: Failed to remove unknown binding: 66,1,1/915857167:1163720413/1163720415
[   97.034797][ T9689] tipc: Failed to remove unknown binding: 66,1,1/915857167:1163720413/1163720415
[   97.039205][ T9689] tipc: Failed to remove unknown binding: 66,1,1/915857167:1163720413/1163720415
[   97.167168][ T9699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   97.643419][ T9712] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   97.756093][ T9717] 8021q: VLANs not supported on gre0
[   97.758622][ T9716] 8021q: VLANs not supported on gre0
[   98.044163][ T9745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.095676][ T9750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.105102][ T9745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.148410][ T9745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.210440][ T9745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.263266][ T5690] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.269185][ T5690] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.275176][ T5690] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.281476][ T5690] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.328332][ T9757] netlink: 'syz.0.1159': attribute type 29 has an invalid length.
[   98.762449][ T9784] : entered promiscuous mode
[   99.041191][ T9810] lo speed is unknown, defaulting to 1000
[   99.088641][ T9815] lo speed is unknown, defaulting to 1000
[   99.088831][ T9816] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.150986][ T9820] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[   99.178376][ T9820] bond8: (slave bridge5): making interface the new active one
[   99.181233][ T9820] bond8: (slave bridge5): Enslaving as an active interface with an up link
[   99.240483][ T9826] ip6gre2: entered allmulticast mode
[   99.244467][ T9826] netlink: 'syz.1.1184': attribute type 21 has an invalid length.
[   99.249045][ T9826] netlink: 'syz.1.1184': attribute type 4 has an invalid length.
[   99.252078][ T9826] netlink: 'syz.1.1184': attribute type 5 has an invalid length.
[   99.377467][ T9838] __nla_validate_parse: 30 callbacks suppressed
[   99.377477][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[   99.385233][ T9838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1188'.
[   99.504100][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[   99.630818][ T9861] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[   99.652355][ T9863] netlink: 'syz.1.1199': attribute type 10 has an invalid length.
[   99.713967][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'.
[   99.771418][ T9866] pim6reg: entered allmulticast mode
[   99.773887][ T9866] pim6reg: left allmulticast mode
[   99.958395][ T9880] netlink: 'syz.1.1201': attribute type 12 has an invalid length.
[   99.987800][ T9882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.990641][ T9882] syzkaller0: entered promiscuous mode
[   99.992701][ T9882] syzkaller0: entered allmulticast mode
[   99.999581][ T9881] tipc: Resetting bearer <eth:syzkaller0>
[  100.005213][ T9881] tipc: Disabling bearer <eth:syzkaller0>
[  100.077615][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'.
[  100.099585][ T9886] netlink: 'syz.1.1204': attribute type 5 has an invalid length.
[  100.103036][ T9886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1204'.
[  100.106922][ T9886] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6)
[  100.213002][ T9901] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1210'.
[  100.225945][ T9903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1211'.
[  100.358593][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'.
[  100.567673][ T9950] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1222'.
[  100.610693][ T9954] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.861716][ T9971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.908939][ T9971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.960645][ T9971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.019216][ T9971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.068362][ T5690] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.075807][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.085036][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.092275][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.186450][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.418693][ T9998] syzkaller1: entered promiscuous mode
[  101.420707][ T9998] syzkaller1: entered allmulticast mode
[  101.520234][T10009] lo speed is unknown, defaulting to 1000
[  101.528613][T10011] unsupported nlmsg_type 40
[  101.592126][T10014] lo speed is unknown, defaulting to 1000
[  101.942938][T10049] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  101.948585][T10049] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  101.951966][T10049] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  102.389068][T10077] validate_nla: 6 callbacks suppressed
[  102.389081][T10077] netlink: 'syz.2.1268': attribute type 8 has an invalid length.
[  102.432013][T10079] syzkaller1: entered promiscuous mode
[  102.434422][T10079] syzkaller1: entered allmulticast mode
[  102.741498][T10115] lo speed is unknown, defaulting to 1000
[  103.012972][T10121] netlink: 'syz.1.1281': attribute type 3 has an invalid length.
[  103.873473][T10137] lo speed is unknown, defaulting to 1000
[  103.875418][T10137] lo speed is unknown, defaulting to 1000
[  103.878294][T10137] lo speed is unknown, defaulting to 1000
[  103.880936][T10137] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  103.885084][T10137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.899254][T10137] lo speed is unknown, defaulting to 1000
[  103.902228][T10137] lo speed is unknown, defaulting to 1000
[  103.904620][T10137] lo speed is unknown, defaulting to 1000
[  103.925135][T10143] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  104.029890][T10152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.032480][T10152] syzkaller0: entered promiscuous mode
[  104.034574][T10152] syzkaller0: entered allmulticast mode
[  104.039036][T10148] tipc: Resetting bearer <eth:syzkaller0>
[  104.074153][T10147] tipc: Resetting bearer <eth:syzkaller0>
[  104.079055][T10147] tipc: Disabling bearer <eth:syzkaller0>
[  104.112204][T10165] netlink: 'syz.1.1295': attribute type 1 has an invalid length.
[  104.278665][T10190] netlink: 'syz.0.1301': attribute type 303 has an invalid length.
[  104.282734][T10190] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.286633][T10190] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  105.332115][T10239] __nla_validate_parse: 18 callbacks suppressed
[  105.332133][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  105.345117][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'.
[  105.380619][T10243] netlink: 'syz.0.1325': attribute type 1 has an invalid length.
[  105.388953][T10243] bond0: entered promiscuous mode
[  105.390878][T10243] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.403933][T10243] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.407731][T10243] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  105.411643][T10243] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  105.415873][T10243] bond0: (slave wireguard0): making interface the new active one
[  105.418708][T10243] wireguard0: entered promiscuous mode
[  105.421171][T10243] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  105.425621][T10243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.428113][T10243] IPv6: NLM_F_CREATE should be set when creating new route
[  105.430531][T10243] IPv6: NLM_F_CREATE should be set when creating new route
[  105.433543][T10243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.455402][T10253] bond0: (slave wireguard0): Releasing backup interface
[  105.459441][T10253] wireguard0: left promiscuous mode
[  105.463746][ T5990] lo speed is unknown, defaulting to 1000
[  105.494379][T10259] netlink: 'syz.2.1329': attribute type 13 has an invalid length.
[  105.499641][T10259] netlink: 'syz.2.1329': attribute type 17 has an invalid length.
[  105.518988][T10259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.569359][T10268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.572475][T10268] syzkaller0: entered promiscuous mode
[  105.574443][T10268] syzkaller0: entered allmulticast mode
[  105.579777][T10270] netlink: 'syz.0.1334': attribute type 11 has an invalid length.
[  105.579946][T10268] tipc: Resetting bearer <eth:syzkaller0>
[  105.585934][T10267] tipc: Resetting bearer <eth:syzkaller0>
[  105.594683][T10267] tipc: Disabling bearer <eth:syzkaller0>
[  105.645965][T10275] syzkaller1: left promiscuous mode
[  105.649049][T10275] syzkaller1: left allmulticast mode
[  105.799022][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'.
[  105.799023][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'.
[  105.951413][T10296] netlink: 'syz.2.1343': attribute type 12 has an invalid length.
[  106.166926][T10318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.170323][T10318] syzkaller0: entered promiscuous mode
[  106.172673][T10318] syzkaller0: entered allmulticast mode
[  106.182483][T10318] tipc: Resetting bearer <eth:syzkaller0>
[  106.188035][T10317] tipc: Resetting bearer <eth:syzkaller0>
[  106.191960][T10317] tipc: Disabling bearer <eth:syzkaller0>
[  106.310593][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'.
[  106.310640][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'.
[  106.357449][T10341] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  106.361018][T10341] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1355'.
[  106.400176][T10341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.405269][T10341] bond_slave_0: left allmulticast mode
[  106.412186][T10341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.415861][T10341] bond_slave_1: left allmulticast mode
[  106.420080][T10341] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  106.423509][T10341] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  106.428606][T10341] bond0 (unregistering): Released all slaves
[  106.440383][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'.
Connection to localhost closed by remote host.
[  106.552469][ T9622] ==================================================================
[  106.555505][ T9622] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  106.557987][ T9622] Read of size 8 at addr ffff8881058400a0 by task khidpd_15c28002/9622
[  106.561704][ T9622] 
[  106.562607][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: khidpd_15c28002 Not tainted syzkaller #0 PREEMPT(full) 
[  106.562619][ T9622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.562624][ T9622] Call Trace:
[  106.562628][ T9622]  <TASK>
[  106.562632][ T9622]  dump_stack_lvl+0x189/0x250
[  106.562647][ T9622]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.562655][ T9622]  ? lock_release+0x4b/0x3e0
[  106.562667][ T9622]  ? __virt_addr_valid+0x4a5/0x5c0
[  106.562677][ T9622]  print_report+0xca/0x240
[  106.562685][ T9622]  ? __mutex_lock+0x801/0x1350
[  106.562691][ T9622]  kasan_report+0x118/0x150
[  106.562702][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.562713][ T9622]  ? __mutex_lock+0x801/0x1350
[  106.562720][ T9622]  __mutex_lock+0x801/0x1350
[  106.562727][ T9622]  ? __mutex_lock+0x5bb/0x1350
[  106.562733][ T9622]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.562746][ T9622]  ? __pfx___mutex_lock+0x10/0x10
[  106.562753][ T9622]  ? __pfx___timer_delete_sync+0x10/0x10
[  106.562763][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.562774][ T9622]  l2cap_unregister_user+0x6a/0x1b0
[  106.562784][ T9622]  hidp_session_thread+0x3c9/0x410
[  106.562817][ T9622]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.562826][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.562835][ T9622]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.562844][ T9622]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.562853][ T9622]  ? __kthread_parkme+0x7b/0x200
[  106.562861][ T9622]  ? __kthread_parkme+0x1a1/0x200
[  106.562869][ T9622]  kthread+0x711/0x8a0
[  106.562878][ T9622]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.562886][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.562894][ T9622]  ? rcu_is_watching+0x15/0xb0
[  106.562902][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.562910][ T9622]  ret_from_fork+0x3fc/0x770
[  106.562918][ T9622]  ? __pfx_ret_from_fork+0x10/0x10
[  106.562925][ T9622]  ? __switch_to_asm+0x39/0x70
[  106.562934][ T9622]  ? __switch_to_asm+0x33/0x70
[  106.562943][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.562951][ T9622]  ret_from_fork_asm+0x1a/0x30
[  106.562962][ T9622]  </TASK>
[  106.562965][ T9622] 
[  106.636693][ T9622] Allocated by task 5849:
[  106.638554][ T9622]  kasan_save_track+0x3e/0x80
[  106.640575][ T9622]  __kasan_kmalloc+0x93/0xb0
[  106.642487][ T9622]  __kmalloc_noprof+0x27a/0x4f0
[  106.644386][ T9622]  hci_alloc_dev_priv+0x28/0x2060
[  106.646521][ T9622]  vhci_create_device+0x120/0x6e0
[  106.648650][ T9622]  vhci_write+0x3ce/0x4a0
[  106.650482][ T9622]  vfs_write+0x5c9/0xb30
[  106.652236][ T9622]  ksys_write+0x145/0x250
[  106.654056][ T9622]  do_syscall_64+0xfa/0x3b0
[  106.655656][ T9622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.658092][ T9622] 
[  106.659129][ T9622] Freed by task 5849:
[  106.660884][ T9622]  kasan_save_track+0x3e/0x80
[  106.662849][ T9622]  kasan_save_free_info+0x46/0x50
[  106.664934][ T9622]  __kasan_slab_free+0x5b/0x80
[  106.666965][ T9622]  kfree+0x18e/0x440
[  106.668620][ T9622]  bt_host_release+0x82/0x90
[  106.670621][ T9622]  device_release+0x9c/0x1c0
[  106.672576][ T9622]  kobject_put+0x22b/0x480
[  106.674485][ T9622]  vhci_release+0x88/0xd0
[  106.676340][ T9622]  __fput+0x44c/0xa70
[  106.678063][ T9622]  task_work_run+0x1d4/0x260
[  106.680014][ T9622]  do_exit+0x6b5/0x2300
[  106.681812][ T9622]  do_group_exit+0x21c/0x2d0
[  106.683753][ T9622]  __x64_sys_exit_group+0x3f/0x40
[  106.685935][ T9622]  x64_sys_call+0x21f7/0x2200
[  106.687938][ T9622]  do_syscall_64+0xfa/0x3b0
[  106.689879][ T9622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.692347][ T9622] 
[  106.693379][ T9622] Last potentially related work creation:
[  106.695772][ T9622]  kasan_save_stack+0x3e/0x60
[  106.697827][ T9622]  kasan_record_aux_stack+0xbd/0xd0
[  106.700016][ T9622]  insert_work+0x3d/0x330
[  106.701896][ T9622]  __queue_work+0xbaf/0xfb0
[  106.703828][ T9622]  queue_work_on+0x181/0x270
[  106.705816][ T9622]  process_scheduled_works+0xae1/0x17b0
[  106.708165][ T9622]  worker_thread+0x8a0/0xda0
[  106.710143][ T9622]  kthread+0x711/0x8a0
[  106.711937][ T9622]  ret_from_fork+0x3fc/0x770
[  106.713901][ T9622]  ret_from_fork_asm+0x1a/0x30
[  106.715949][ T9622] 
[  106.716978][ T9622] Second to last potentially related work creation:
[  106.719682][ T9622]  kasan_save_stack+0x3e/0x60
[  106.721655][ T9622]  kasan_record_aux_stack+0xbd/0xd0
[  106.723849][ T9622]  insert_work+0x3d/0x330
[  106.725678][ T9622]  __queue_work+0xcd2/0xfb0
[  106.727625][ T9622]  call_timer_fn+0x17e/0x5f0
[  106.729607][ T9622]  __run_timer_base+0x646/0x860
[  106.731636][ T9622]  run_timer_softirq+0xb7/0x180
[  106.733638][ T9622]  handle_softirqs+0x286/0x870
[  106.735481][ T9622]  __irq_exit_rcu+0xca/0x1f0
[  106.737209][ T9622]  irq_exit_rcu+0x9/0x30
[  106.738623][ T9622]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  106.740531][ T9622]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.742480][ T9622] 
[  106.743443][ T9622] The buggy address belongs to the object at ffff888105840000
[  106.743443][ T9622]  which belongs to the cache kmalloc-8k of size 8192
[  106.748614][ T9622] The buggy address is located 160 bytes inside of
[  106.748614][ T9622]  freed 8192-byte region [ffff888105840000, ffff888105842000)
[  106.753498][ T9622] 
[  106.754309][ T9622] The buggy address belongs to the physical page:
[  106.756562][ T9622] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888105844000 pfn:0x105840
[  106.760502][ T9622] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  106.763752][ T9622] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  106.766987][ T9622] page_type: f5(slab)
[  106.768521][ T9622] raw: 057ff00000000240 ffff88801a442280 ffff888100000ac8 ffffea00041f3c10
[  106.771738][ T9622] raw: ffff888105844000 0000000000020001 00000000f5000000 0000000000000000
[  106.774549][ T9622] head: 057ff00000000240 ffff88801a442280 ffff888100000ac8 ffffea00041f3c10
[  106.777269][ T9622] head: ffff888105844000 0000000000020001 00000000f5000000 0000000000000000
[  106.780038][ T9622] head: 057ff00000000003 ffffea0004161001 00000000ffffffff 00000000ffffffff
[  106.782753][ T9622] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  106.785455][ T9622] page dumped because: kasan: bad access detected
[  106.787489][ T9622] page_owner tracks the page as allocated
[  106.789295][ T9622] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6707239042, free_ts 0
[  106.795522][ T9622]  post_alloc_hook+0x240/0x2a0
[  106.797141][ T9622]  get_page_from_freelist+0x21e4/0x22c0
[  106.798952][ T9622]  __alloc_frozen_pages_noprof+0x181/0x370
[  106.800906][ T9622]  alloc_pages_mpol+0x232/0x4a0
[  106.802540][ T9622]  allocate_slab+0x8a/0x370
[  106.804166][ T9622]  ___slab_alloc+0xbeb/0x1410
[  106.805814][ T9622]  __kmalloc_noprof+0x305/0x4f0
[  106.807455][ T9622]  fb_show_logo+0xe6c/0x1b30
[  106.809048][ T9622]  fbcon_switch+0x15f3/0x2040
[  106.810821][ T9622]  redraw_screen+0x56d/0xe90
[  106.812706][ T9622]  fbcon_prepare_logo+0x750/0xa10
[  106.814583][ T9622]  set_con2fb_map+0xd20/0x13c0
[  106.816293][ T9622]  fbcon_fb_registered+0x24e/0x610
[  106.818039][ T9622]  register_framebuffer+0x6f9/0x880
[  106.819858][ T9622]  __drm_fb_helper_initial_config_and_unlock+0x1307/0x18a0
[  106.822326][ T9622]  drm_fbdev_client_hotplug+0x16c/0x230
[  106.824362][ T9622] page_owner free stack trace missing
[  106.826372][ T9622] 
[  106.827218][ T9622] Memory state around the buggy address:
[  106.829117][ T9622]  ffff88810583ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  106.831880][ T9622]  ffff888105840000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.834639][ T9622] >ffff888105840080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.837273][ T9622]                                ^
[  106.839035][ T9622]  ffff888105840100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.841712][ T9622]  ffff888105840180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.844398][ T9622] ==================================================================
[  106.847554][ T9622] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  106.850069][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: khidpd_15c28002 Not tainted syzkaller #0 PREEMPT(full) 
[  106.853513][ T9622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.856808][ T9622] Call Trace:
[  106.857914][ T9622]  <TASK>
[  106.858880][ T9622]  dump_stack_lvl+0x99/0x250
[  106.860451][ T9622]  ? __asan_memcpy+0x40/0x70
[  106.862094][ T9622]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.863876][ T9622]  ? __pfx__printk+0x10/0x10
[  106.865356][ T9622]  vpanic+0x281/0x750
[  106.866639][ T9622]  ? __pfx_vpanic+0x10/0x10
[  106.868165][ T9622]  ? rcu_is_watching+0x15/0xb0
[  106.869730][ T9622]  panic+0xb9/0xc0
[  106.871003][ T9622]  ? __pfx_panic+0x10/0x10
[  106.872704][ T9622]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  106.874668][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.876658][ T9622]  ? __mutex_lock+0x801/0x1350
[  106.878527][ T9622]  check_panic_on_warn+0x89/0xb0
[  106.880154][ T9622]  ? __mutex_lock+0x801/0x1350
[  106.881759][ T9622]  end_report+0x78/0x160
[  106.883354][ T9622]  kasan_report+0x129/0x150
[  106.884911][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.886908][ T9622]  ? __mutex_lock+0x801/0x1350
[  106.888565][ T9622]  __mutex_lock+0x801/0x1350
[  106.890182][ T9622]  ? __mutex_lock+0x5bb/0x1350
[  106.891977][ T9622]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.893871][ T9622]  ? __pfx___mutex_lock+0x10/0x10
[  106.895480][ T9622]  ? __pfx___timer_delete_sync+0x10/0x10
[  106.897283][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.899351][ T9622]  l2cap_unregister_user+0x6a/0x1b0
[  106.901241][ T9622]  hidp_session_thread+0x3c9/0x410
[  106.903131][ T9622]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.905293][ T9622]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.907269][ T9622]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.909446][ T9622]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.911410][ T9622]  ? __kthread_parkme+0x7b/0x200
[  106.913134][ T9622]  ? __kthread_parkme+0x1a1/0x200
[  106.914890][ T9622]  kthread+0x711/0x8a0
[  106.916315][ T9622]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.918595][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.920479][ T9622]  ? rcu_is_watching+0x15/0xb0
[  106.922174][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.923982][ T9622]  ret_from_fork+0x3fc/0x770
[  106.925664][ T9622]  ? __pfx_ret_from_fork+0x10/0x10
[  106.927384][ T9622]  ? __switch_to_asm+0x39/0x70
[  106.929062][ T9622]  ? __switch_to_asm+0x33/0x70
[  106.930665][ T9622]  ? __pfx_kthread+0x10/0x10
[  106.932218][ T9622]  ret_from_fork_asm+0x1a/0x30
[  106.934187][ T9622]  </TASK>
[  106.936178][ T9622] Kernel Offset: disabled
[  106.937646][ T9622] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:48:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fc12050 RCX=ffffffff8fc12054 RDX=ffffffff9041f882
RSI=ffffffff9041f882 RDI=ffffffff8be33620 RBP=dffffc0000000000 RSP=ffffc900032ef538
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900032ef658 R11=ffffffff81ac3810
R12=ffffffff9041f886 R13=ffffffff9041f887 R14=ffffc900032ef608 R15=ffffffff8fc12050
RIP=ffffffff8172c464 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555850a2500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4b289f2348 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005f RBX=000000000000005f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000651f370
R8 =ffff888020140237 R9 =1ffff11004028046 R10=dffffc0000000000 R11=ffffffff854f2400
R12=dffffc0000000000 R13=ffffffff99afd90e R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f247c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c371252 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8797587498 00007f8797587470 XMM03=00007f87975874a8 00007f87975874a0
XMM04=00007f87980ed100 00007f8797587460 XMM05=00007f8797587478 00007f87975874c0
XMM06=00007f87975874b8 00007f87975874b0 XMM07=00007f87975874a8 00007f87975874a0
XMM08=0000000000000000 00007f8797412ee7 XMM09=0000000000000000 00007f8797412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
