last executing test programs:

1.443373487s ago: executing program 0 (id=612):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfb, 0x25dfdbf7, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async, rerun: 64)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
unshare(0x24020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) (async, rerun: 64)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 64)
close(r1) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

1.247460102s ago: executing program 2 (id=616):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)

1.246520016s ago: executing program 0 (id=617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003007379000000000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000000)=0x5, 0x4)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r4, 0x0)
syz_emit_ethernet(0x134b, &(0x7f0000002500)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x3f, 0x4, 0x2, 0x8, 0x133d, 0x64, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x3, @multicast2, {[@ssrr={0x89, 0x13, 0x3e, [@empty, @local, @loopback, @private=0xa010101]}, @generic={0x89, 0x12, "d3e69eeb1fbcc79158bf962c140a920c"}, @timestamp_prespec={0x44, 0x3c, 0x1a, 0x3, 0x3, [{@multicast1, 0x4}, {@multicast2, 0x40}, {@loopback, 0x9}, {@multicast2, 0x7}, {@empty, 0xce7}, {@private=0xa010101, 0xf751}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x9}]}, @rr={0x7, 0xf, 0x4f, [@multicast2, @local, @empty]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x4, [{@private=0xa010102}]}, @rr={0x7, 0x1f, 0x2d, [@multicast2, @loopback, @broadcast, @empty, @loopback, @multicast2, @multicast1]}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0x12, "6aa05bb7a9a3ad9ae178bc17144678f4"}, {0x6, 0xe, "51eb559d86986247bdd27780"}, {0x7, 0x2}, {0x2, 0x3, "c8"}]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0x1, [0xa28, 0xffffff43, 0x40, 0x1000, 0x0]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x3, [0x30, 0x0], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xfffa, 0x32], "068176a210e26d69e070eb54fcb71d1bf24108d21a6c1142ee7cd20b8518a6078712481b05a53e1093b9b0040433135c225644e8b46e8efc1dcd071646d15281"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xff, 0x92e], "7161048a3209742cd4656cc034c26aeb22e6caeaf9b17918f9f765e41960921fad75b2ccacbea49fb2cd12eed01c1dbe78b1f66a3ee17b16e2e5ad0a56547a3e87006b8a3339cda4ab77244aa810aea8f714cc26eb3f0334ce358665fbc72a17ae8117dbc1ca016ffa9798e296e79e57a5961b7b042ddd9a014279a7ff28a2f653c7652305e4b7e7ff3634fc098282ea78f8f3b221edf96f26cad8ba1641f0c41c536a13e68da4be2e1bd03cb7cdfaab7acf0d96ad1d79cca90f9cfba337d78c1d55c0b3f979e1d6c32a3f1902cb"}, {0x8, 0x88be, 0x1, {{0xe, 0x1, 0x6, 0x0, 0x0, 0x2, 0x4, 0x30}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x2, 0x2, 0x1, 0x2, 0x6, 0x3}, 0x2, {0x2, 0xf, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "4dc6b8eec4a794850ca9bcb05ec13d6b4fca3ddd888277d48939290a8c143d7c3cdd2796f0f0df2ca10983296dc50b8020b1502326cf83ab57432f0259291c17d348430c57af45b198bc71496e082f0421eadf2c1b940a1754d7d1e1afb65e5ea11f2e0d621adfd5f9616bcfd6388e837ebee0e99287423a7807f854d87eea75704ad4889c6119e4dd9a95277a304b8701424f972df0a8a8703cbbbdffa449aec9aa7146f915c142306c034bd6c518e1526842e30279945dbc475b78622d82da43ee9e5b940114a78081a2a41469d6fb9d481b7e298c1ced32b55830b15d49e6a2482a"}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_UID={0x8}]}, 0x24}}, 0x20000050)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000001006e756d67656e00001c0002a00800024000000101080001400000000c08000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8933}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0xf, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @ldst={0x1, 0x0, 0x2, 0x8, 0x4, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x0, 0xd, 0x2, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x7, 0x1000, &(0x7f0000001180)=""/4096, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x1, 0x7, 0xe}, {0x4, 0x2, 0x7}, {0x2, 0x4, 0x5, 0x3}], 0x10, 0x9}, 0x94)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000540))
close(r0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="74000000000201040000000000000000020000052400028014000180080001000000000008000000000000000002028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000180001"], 0x74}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000201000500100005000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000001b400000bde2fbcbf8aab3ace9c00554944ad47c6b39274f9b405100f071fd39363c223ca237f5742efb5effd2cb0c246916ff076af4c0bcb6f04ea7c07290aa"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

1.180622992s ago: executing program 2 (id=618):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x4040001)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000004"], 0x20)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket(0x22, 0x6, 0x7)
ioctl$sock_SIOCETHTOOL(r5, 0x8993, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002000010029bd7000fddbdf250a0080c096cd01745469fb3fad74f70000040000000014000200000000000000000000000000000066c30360acce675e7d1b93e35af2ae7eaeb93624e59c1a02368593e49a09ef1033639b3a0de85a59d4aeb58adfb83a9231af35772300641c5acefeef8f7b503258"], 0x38}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000005c0)={0x2, 0x9, 0xcf, &(0x7f00000004c0)=""/207})
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001a00010000000000000000000a0080", @ANYRES32], 0x38}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=r10, @ANYBLOB="01002d9b0d111ce3b91d1e00000008000300a0eafdbcb74edf9a424afcc581d68dca7352d43b1333edcee008c30c3b34f9624be141cc74bae6c3233e554c4697fce7107b94f5acf7c3764d2f0a0c8f9cde921212f5fdfa62122603168a7d107153092a5f2bbe1b18ccf4013281b1070a44fe7d1642f1b97261e5f14c17cec8561658f70b9d08c1dffd81dbd544a0ee8f4769f683ec425f2255c1a48f4b7adc153278aa097f5cdb6fbcdd429127568bb133111f521464aca86de8f9c1aff3f414cc1f93403b2d65001481cebfe336da02bcafb04a7b92ee08af99c467128f72a3233c837fee64f3613c5747f5cadab9c60b355055c306a8e25a49346147dc74eb3a246ddc237462a58609092c959a760ce11179cc47e70f073e815ef156f63b61d30deab7154883cb669b", @ANYRES32=r8, @ANYBLOB="0800b700f60000000400b8000800260080090000"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044011)

1.177516871s ago: executing program 0 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x1a4, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x38, 0x21}, {0x8, 0x18}, {0x38, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x38, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0xfffffe21, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0x20}, {0x8, 0x0, 0x0, 0x0, 0x2}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x1a4, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x38, 0x21}, {0x8, 0x18}, {0x38, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x38, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0xfffffe21, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0x20}, {0x8, 0x0, 0x0, 0x0, 0x2}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async)

1.080757255s ago: executing program 0 (id=621):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r3, 0x101, 0xa, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040))
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000006d020272d72ab5ed51a3cbea7d140742d62ab0f5cfb09c0a0847daab415d92944633b776c2357ab29643841b7614bc4c"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000006d020272d72ab5ed51a3cbea7d140742d62ab0f5cfb09c0a0847daab415d92944633b776c2357ab29643841b7614bc4c"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
accept(r5, 0x0, 0x0) (async)
r6 = accept(r5, 0x0, 0x0)
setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000180), 0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000d95f0000010000000100000000010000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000008ab0b796889ea49f2693170916fa8178312cb8de6657bb7257a68372e9b020daf15a0f82988cc9b0a55ef29d748b890b779c01650f8ce2fb3628c216afe4fd8a794d8ae2455c484829e64e6628f2623bf36b4e80de33acf8a4b5f6cac36f1ed80c7746cea724db3146ad55bb2a1ca64bde88fd76dd2ff4ceeda2434306645976e4a50d20aa349ded1051fd65ec3c7cade79eb18741afe590bcef191347d035f176be0aca343534ce18397f63462c18f147e3f52c34d47b0e311fe805cb72fce600"/222, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000030000000200"/28], 0x50)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x20}}, 0x40090) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x20}}, 0x40090)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002d00010000000000ffdbdf050400008014054b800d004800636861636861323000000000"], 0x28}], 0x1}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r6) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r6)
close(r1) (async)
close(r1)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

1.079759627s ago: executing program 2 (id=622):
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f49a953b7c4"], 0x44}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xda68c000)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x70}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
r6 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a00000001000ffff27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a45508e686211a17800128009000100766c616e000000006800028006000100040000000c000200010000001d000000340003800c000100ed00000001f8ffff0c000100000400003d0f00000c000100fbffffff070000000c00010000000034e69430361c0004800c08010003000000000001000c000100090000000000000008000500", @ANYRES32=r5], 0xa0}, 0x1, 0x0, 0x0, 0x8845}, 0x10)

989.668121ms ago: executing program 2 (id=623):
socket(0x28, 0x2, 0x0) (async)
socket(0x28, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x74, 0x2e, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xe}, {0x10, 0x3}, {0x3, 0xb}}, [{0x8, 0xb, 0xb6b}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0xbc}, {0x8, 0xb, 0xad}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x3000c81c)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000640)=@ethtool_rxnfc={0x2f, 0x2, 0xc, {0xe, @usr_ip6_spec={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}, 0x8, [0x6, 0x8, 0x3, 0x7ff, 0x7, 0xbf, 0x9, 0x49]}})
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r1, 0x40, 0x8, 0xf9, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0xff, 0x29, 0x0, @multicast2, @empty}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r1, 0x40, 0x8, 0xf9, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0xff, 0x29, 0x0, @multicast2, @empty}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x29, 0x9, 0x0, 0x800, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x10, 0x0, 0xe7, 0x2}})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRESOCT=r0, @ANYBLOB="fecc830d89ac679f1083bc8475092f45f1d167d597f68657de6ad120d8e09f31c2738369bb2c4dd8b72996b89a5b90dbf01b0698de17b43ce842eb30ad9fd7e4acf12b31780564e20bc7640ccb519e2ccfb87297a68b3ee7b7509a09f56e30cb9b74f26b5dcd4cae3eacc31479e94948d602c966b45f09b9e4842eefa3a91bc4073449257bd11da3f86ecfe9acbede82b819c6d375e655986efe30f91ce56387319c39b5ac95b354a5352cf00c6865ae6257f53db13e9e9bb69a0db7f7d244c4ed609c42ecb0a843a11e1c2f544e98daeb"], 0x48)
socket$rds(0x15, 0x5, 0x0) (async)
socket$rds(0x15, 0x5, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESDEC=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet(0xa, 0x801, 0x84) (async)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
accept4(r9, 0x0, 0x0, 0x0)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)

900.589174ms ago: executing program 0 (id=624):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x7fffffff}]}}]}, 0x3c}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x568, 0x30, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{0x554, 0x1, [@m_skbmod={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x4, 0x20000000, 0x30ec7838, 0x9}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="1b2f9fce6238"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="ecb851f5dd26"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x22, 0x6, "760189e603894a2ca7defb7dbb5c4da8976f43f9bd72469c70a8211ba4f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x104, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}}]}, {0xbd, 0x6, "f5c24850819f8effb827d831b0f3081bc5c3b0af0f98854e9947e9100b63011bdbb54e2e4ed75bbc46253f5ebe436ce78c658de5c59e9e25510dada401d3d608cdb7d95db6be67bfc057e404ced8d85de149b406111eb6e64cc588d5d3504ad56d9cc51e5388ef8b3f28891c5a789197f9fa0b06b07379c3a77cbf414fa96a0d279a0f33c7c6da10a2b4fe05bfd644b709f5902e1df91a6dd049d8698693dfbc8ecb75861fb6e8481ce0005e6e8fd836368898cae5aee11520"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xec, 0x1d, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "5ccd0a23f6726b63e4744468460fcbd5"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_PARMS={0x18, 0x1, {0x95, 0x1, 0x4, 0x10000, 0xffffff80}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_LABELS={0x14, 0x7, "8334f5c7e1a90fe64bba849bd2c51dc4"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x60dc}, @TCA_CT_LABELS={0x14, 0x7, "e340dc21fd90f94e765bf32d980aa937"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "04242706f3ff57655b82f6f9545fe458"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x39, 0x6, "5e8ea2e96f433565881a7f53299186fffa70b19637c391c54e7f42d2f54a78a06b9cfd45c028060b824726ca851b9d4bf7bd538780"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xb8, 0x17, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff80, 0x5, 0x6, 0x5, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x60000000, 0x4, 0x0, 0xfffffffc, 0x40}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0xffffffff, 0x5, 0x0, 0x3}, 0x40}}]}, {0x34, 0x6, "e89639f17a80b68f52e9eac6a4185165120083c9d05d2d9b31eb99b1d0639562844c6de6eb4a51705f462c32ec44da67"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0xd0, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xc, 0xffffffffffffffff, 0xc, 0x80000001}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x7d, 0x6, "8db75e4724e54e4b64e2d297d4b295050ac7820820bfeffe28916a58be535d6cfd9d4a47d399f4df0db8c75502a812d841f887b132fe8201eda91f59a15f29e9b0831b6843353f5f43a34e601b8d74e322bf79bf3b9a37ec35f65fd4806fa6c1f0e157b593e32b61b7c71548d7d0b29fb0284c462cf4a993af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x108, 0x1a, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x883e}]}, {0xd1, 0x6, "22863830a8a7a69498079b1bcf222f8009902a8e897f6d5a6caef89c66f2d13904d260c5cc69efdcd35072d54b33ae3de49950c6a0d4fa84689a4a07a42fcc2f1fba72389a96858d5c781e2a4cba73267c13b96f03fce66e22a585d82051500ede821b5512329c837a320704bee4a1c33ba2607578d3ae4539febab495f80cb18b924c38ad0972b05669a586b8128cb9a82ed3714e6f54b9639e6c039fc11e041f05ce4bfe9de3347282e0cefaf894d8efe73e2d91fa37068dffb3c861774be33c124a987c88327098295c8b2a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x568}}, 0x8040)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

839.921856ms ago: executing program 2 (id=625):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1a, 0x2, 0x80000001, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r3, 0x80000000)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000f90f000304000300000000000000000000b54b3958b51c", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001d00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x60}}, 0x8000)

839.112259ms ago: executing program 0 (id=626):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r5, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r1], 0x40}}, 0x40040d0)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000000c0)={0x8, 0xd})

749.677653ms ago: executing program 2 (id=627):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c4}, 0x40081)
socketpair(0xa, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000011000100000000000000000000004100", @ANYRES32=0x0, @ANYBLOB="206163766c616eafe215fc6bb90048300000000000009400b01adf73fb62d83e2c296295c0a68aab3a434d8a550c774016f208cbd1724b0e058133f56752faacdca21a5adcd05c947632f506f83e353e4e991c0cbc4c168be5e3553c6134266a8167f4cb1c510a1bc9b02fa4b2e2e12f91d43a0144b5458bb9691ef843acdc2ff828fa2d0e939d16d394d44fc8cd624c616191eac07f3210b4025880224e6a62adb4841acd7f955f5d531fce39e96650a5ba40c33c2b8c1093039febc613da55266a7730d281098b006cca91428894d9c3b5049f11e3d7814c7c82191086649da578"], 0x34}}, 0x4084)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b000000000032dbf6a090a94e162d9f31a770a50e162b571a8d38223ec7"], 0x30}}, 0x4)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000bc4a9e0b02900000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c009d77d8a9773e360280080002400000000b0900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0x8, 0x400, 0x2, 0xffff}, 0x10)

460.782463ms ago: executing program 1 (id=630):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000001c0)={0x2ce0, 0x1, 0x2, 0x10000, 0x7}, 0x5f)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000ff8110680000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

370.564952ms ago: executing program 1 (id=631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', <r3=>0x0, 0x700, 0x1, 0x9, 0x6, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x2, 0x54, 0x0, @local, @private=0xa010100}}}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r12, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r13, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000810)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000140)=0x5, &(0x7f00000001c0)=0x4)
r14 = socket$unix(0x1, 0x2, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="060028b6286be141526b7e00000008000304928d4a36cffe1bbe7cfc108bc1e2884c7e65fd05cd0e601167079998869b67b3105088251d482e641182c432abe7913dff8f1f5f141873185185e9032e41b8d121c91f2200005824ae41f95b31f5800fe84553bfe7a720607ce9abf6634b37c0cfeff661aff499d1b71900000000", @ANYRESHEX=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x24044884)

369.868691ms ago: executing program 1 (id=632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r2, 0x4000, r2}, 0x18)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5193bb672b65593497c1a8060000001b00", '\x00\x00=*', "2ce2e050c16ac13c"}, 0x38)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000002c0)) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r2, 0x4000, r2}, 0x18) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5193bb672b65593497c1a8060000001b00", '\x00\x00=*', "2ce2e050c16ac13c"}, 0x38) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) (async)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async)

280.242898ms ago: executing program 1 (id=633):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

218.579126ms ago: executing program 1 (id=634):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010022bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ce5b6d0c", @ANYRES32=r2, @ANYBLOB="1c005a801800018014000300810000023e1506000300090006000500"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xff1f}, [@NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8ba17c}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3209591f}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r12 = epoll_create1(0x0)
r13 = socket$rxrpc(0x21, 0x2, 0x2)
epoll_pwait(r12, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000200)={0xc0000005})
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0))
sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf251e6800080c0003800800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008044)
socket$isdn(0x22, 0x3, 0x4)

0s ago: executing program 1 (id=635):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x4800)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @random="9ace79625f13"}]}, 0x28}}, 0x4000800)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000001900)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYBLOB="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", @ANYBLOB="0600000000000000b702000014000000b7030000000000008500000005000000bca90000000000009500000000000000bf060000000000000008000004000000850000c94997769f0007000000b700000004000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={<r6=>r3})
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="ccb028105253b558513b28789d0690d2dc6b90734b3099ce226818b13010f682967d2bff2052c2f3c8c8c23859edfee1ada3bcee91248d", 0x37)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffff45, 0x0, 0x1, 0x2000000}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000060028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15560100ef0000002000128008000100677470001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10)
unshare(0x62040200)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401004631700001dcdf2508000100000000000900020073797a31"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r10, 0xe, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31697' (ED25519) to the list of known hosts.
syzkaller login: [   57.794359][ T5842] cgroup: Unknown subsys name 'net'
[   57.900131][ T5842] cgroup: Unknown subsys name 'cpuset'
[   57.906064][ T5842] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.830278][ T5842] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.947220][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.951075][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.955183][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.958261][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.962186][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.965625][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.969486][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.973465][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.977697][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.981803][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.984535][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.988570][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.989060][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.996490][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.002967][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.218224][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.323490][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.328057][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.331070][ T5856] bridge_slave_0: entered allmulticast mode
[   65.334620][ T5856] bridge_slave_0: entered promiscuous mode
[   65.340749][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.343493][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.346307][ T5856] bridge_slave_1: entered allmulticast mode
[   65.349068][ T5856] bridge_slave_1: entered promiscuous mode
[   65.395906][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.404781][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.470338][ T5856] team0: Port device team_slave_0 added
[   65.500524][ T5856] team0: Port device team_slave_1 added
[   65.558111][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.560353][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.569906][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.574343][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   65.590626][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.592764][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.602179][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.613988][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   65.699554][ T5856] hsr_slave_0: entered promiscuous mode
[   65.702005][ T5856] hsr_slave_1: entered promiscuous mode
[   65.739598][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.742043][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.744370][ T5857] bridge_slave_0: entered allmulticast mode
[   65.748114][ T5857] bridge_slave_0: entered promiscuous mode
[   65.751721][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.754399][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.757518][ T5857] bridge_slave_1: entered allmulticast mode
[   65.760408][ T5857] bridge_slave_1: entered promiscuous mode
[   65.800753][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.803275][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.807303][ T5863] bridge_slave_0: entered allmulticast mode
[   65.810396][ T5863] bridge_slave_0: entered promiscuous mode
[   65.814118][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.817476][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.820381][ T5863] bridge_slave_1: entered allmulticast mode
[   65.823391][ T5863] bridge_slave_1: entered promiscuous mode
[   65.836325][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.872756][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.878481][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.900773][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.922776][ T5857] team0: Port device team_slave_0 added
[   65.944946][ T5857] team0: Port device team_slave_1 added
[   65.978535][ T5863] team0: Port device team_slave_0 added
[   66.000432][ T5863] team0: Port device team_slave_1 added
[   66.010081][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.012455][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.021034][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.059999][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.062419][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.072351][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.081268][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.083905][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.093752][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.100199][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.102926][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.112464][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.227779][ T5857] hsr_slave_0: entered promiscuous mode
[   66.230751][ T5857] hsr_slave_1: entered promiscuous mode
[   66.233577][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   66.237521][ T5857] Cannot create hsr debugfs directory
[   66.259477][ T5863] hsr_slave_0: entered promiscuous mode
[   66.261915][ T5863] hsr_slave_1: entered promiscuous mode
[   66.264282][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   66.266557][ T5863] Cannot create hsr debugfs directory
[   66.400244][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.420662][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.444647][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.481668][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.603919][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.621156][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.650191][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.660871][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.714697][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.727109][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.734984][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.742499][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.794989][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.831193][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.849121][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.851787][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.867878][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.870131][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.919366][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.968846][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.990705][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.015170][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   67.033102][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   67.039037][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.041909][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.047693][ T5860] Bluetooth: hci2: command tx timeout
[   67.049866][ T5868] Bluetooth: hci1: command tx timeout
[   67.052137][ T5239] Bluetooth: hci0: command tx timeout
[   67.069475][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.072353][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.079461][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.081744][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.085071][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.087751][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.107492][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.161981][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.166830][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.210457][ T5856] veth0_vlan: entered promiscuous mode
[   67.217804][ T5856] veth1_vlan: entered promiscuous mode
[   67.240859][ T5856] veth0_macvtap: entered promiscuous mode
[   67.249682][ T5856] veth1_macvtap: entered promiscuous mode
[   67.281781][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.288426][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.301509][ T5719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.305237][ T5719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.329361][ T5719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.332185][ T5719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.397856][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.400346][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.443238][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.447178][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.458627][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.469909][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.486592][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.582395][ T5863] veth0_vlan: entered promiscuous mode
[   67.590185][ T5857] veth0_vlan: entered promiscuous mode
[   67.609457][ T5857] veth1_vlan: entered promiscuous mode
[   67.620558][ T5863] veth1_vlan: entered promiscuous mode
[   67.666330][ T5857] veth0_macvtap: entered promiscuous mode
[   67.673037][ T5863] veth0_macvtap: entered promiscuous mode
[   67.679771][ T5863] veth1_macvtap: entered promiscuous mode
[   67.693945][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.702215][ T5927] netlink: 'syz.0.4': attribute type 3 has an invalid length.
[   67.705299][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'.
[   67.712384][ T5857] veth1_macvtap: entered promiscuous mode
[   67.718896][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.735991][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.742220][ T5719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.749540][ T5719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.753178][ T5719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.761011][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.763539][ T5719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.789847][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.794037][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.810908][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.817572][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.903051][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.906981][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.958888][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.975404][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.063319][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.082075][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.192675][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.193265][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.198821][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.341331][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.344342][ T5934] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   68.481297][ T5938] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   68.483846][ T5938] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6'.
[   68.514191][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.533978][ T5940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.599794][ T5945] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8'.
[   68.679838][ T5950] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   68.699719][ T5950] Bluetooth: MGMT ver 1.23
[   68.705507][ T5950] bridge0: port 3(geneve2) entered blocking state
[   68.708041][ T5950] bridge0: port 3(geneve2) entered disabled state
[   68.710779][ T5950] geneve2: entered allmulticast mode
[   68.713967][ T5950] geneve2: entered promiscuous mode
[   68.720506][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.724648][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.730363][ T5950] bridge0: entered promiscuous mode
[   68.774898][ T5945] xfrm1: entered allmulticast mode
[   68.795126][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.961562][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.965007][ T5961] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET)
[   68.970281][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.062762][ T5957] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   69.067149][ T5957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.087993][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.091577][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.095090][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.116886][ T5860] Bluetooth: hci2: command tx timeout
[   69.119091][ T5860] Bluetooth: hci0: command tx timeout
[   69.121642][ T5860] Bluetooth: hci1: command tx timeout
[   69.149914][ T5968] netlink: 'syz.2.15': attribute type 21 has an invalid length.
[   69.176985][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.186171][ T5961] netlink: 'syz.1.14': attribute type 4 has an invalid length.
[   69.244981][ T5968] bridge0: port 3(syz_tun) entered blocking state
[   69.255795][ T5968] bridge0: port 3(syz_tun) entered disabled state
[   69.257994][ T5968] syz_tun: entered allmulticast mode
[   69.264604][ T5968] syz_tun: entered promiscuous mode
[   69.268777][ T5975] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   69.273822][ T5968] bridge0: port 3(syz_tun) entered blocking state
[   69.276273][ T5968] bridge0: port 3(syz_tun) entered forwarding state
[   69.279991][ T5975] netlink: 'syz.0.17': attribute type 2 has an invalid length.
[   69.295244][ T5975] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   69.371194][ T5975] bond1: entered promiscuous mode
[   69.373265][ T5975] bond1: entered allmulticast mode
[   69.376029][ T5975] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.445695][ T5975] bond1 (unregistering): Released all slaves
[   69.538719][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.578306][ T5989] bridge0: left promiscuous mode
[   69.590397][ T5989] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   69.789502][ T6004] netlink: 3 bytes leftover after parsing attributes in process `syz.0.25'.
[   69.799835][ T6004] batadv1: entered promiscuous mode
[   69.801889][ T6004] batadv1: entered allmulticast mode
[   69.916747][ T6009] Zero length message leads to an empty skb
[   70.102038][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   70.106217][ T6013] bridge_slave_1: left allmulticast mode
[   70.108550][ T6013] bridge_slave_1: left promiscuous mode
[   70.110999][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.118551][ T6013] bridge_slave_0: left allmulticast mode
[   70.120874][ T6013] bridge_slave_0: left promiscuous mode
[   70.123840][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.289274][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.300187][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.405268][ T5879] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.408989][ T5879] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.412431][ T5879] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.418721][ T5879] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.526564][ T6027] tipc: Started in network mode
[   70.528596][ T6027] tipc: Node identity 9a80d8793de2, cluster identity 4711
[   70.531540][ T6027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.535106][ T6027] syzkaller0: entered promiscuous mode
[   70.537515][ T6027] syzkaller0: entered allmulticast mode
[   70.554559][ T6027] tipc: Resetting bearer <eth:syzkaller0>
[   70.560974][ T6026] tipc: Resetting bearer <eth:syzkaller0>
[   70.570523][ T6026] tipc: Disabling bearer <eth:syzkaller0>
[   70.794383][ T6042] IPv6: sit1: Disabled Multicast RS
[   70.800602][ T6042] sit1: entered allmulticast mode
[   71.040090][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.042664][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.195722][ T5860] Bluetooth: hci0: command tx timeout
[   71.198001][ T5860] Bluetooth: hci2: command tx timeout
[   71.198185][ T5239] Bluetooth: hci1: command tx timeout
[   71.358585][ T6060] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   71.492219][ T6069] veth1_vlan: left promiscuous mode
[   71.540496][ T6076] bond0: entered promiscuous mode
[   71.542183][ T6076] bond_slave_0: entered promiscuous mode
[   71.544184][ T6076] bond_slave_1: entered promiscuous mode
[   71.547091][ T6076] bridge0: entered promiscuous mode
[   71.765027][ T6078] vlan2: entered allmulticast mode
[   71.767738][ T6078] veth1: entered allmulticast mode
[   72.070765][ T6104] bond1: entered promiscuous mode
[   72.072732][ T6104] bond1: entered allmulticast mode
[   72.075026][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.086552][ T6107] vlan3: entered promiscuous mode
[   72.090022][ T6107] vlan3: entered allmulticast mode
[   72.091852][ T6107] hsr_slave_1: entered allmulticast mode
[   72.364708][ T6116] geneve2: left allmulticast mode
[   72.368886][ T6116] geneve2: left promiscuous mode
[   72.370807][ T6116] bridge0: port 3(geneve2) entered disabled state
[   72.378392][ T6116] bridge_slave_1: left allmulticast mode
[   72.380719][ T6116] bridge_slave_1: left promiscuous mode
[   72.384250][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.394764][ T6116] bridge_slave_0: left allmulticast mode
[   72.399344][ T6116] bridge_slave_0: left promiscuous mode
[   72.402061][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.442947][ T6116] bond0: (slave bridge0): Releasing backup interface
[   72.449245][ T6116] bridge0 (unregistering): left promiscuous mode
[   72.624273][ T6124] gtp0: entered promiscuous mode
[   73.186593][ T6153] __nla_validate_parse: 10 callbacks suppressed
[   73.186608][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'.
[   73.278601][ T5239] Bluetooth: hci2: command tx timeout
[   73.279753][ T5868] Bluetooth: hci1: command tx timeout
[   73.283634][ T5860] Bluetooth: hci0: command tx timeout
[   73.298817][ T6156] pim6reg1: entered promiscuous mode
[   73.300552][ T6156] pim6reg1: entered allmulticast mode
[   73.514580][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   73.522407][  T885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.528416][  T885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.611727][ T6166] validate_nla: 7 callbacks suppressed
[   73.611758][ T6166] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   73.719696][ T6166] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   73.731809][ T6168] gretap1: entered promiscuous mode
[   73.739516][ T5879] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   73.744973][ T6166] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.808069][ T6166] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   73.812243][ T6166] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[   73.817987][ T6166] bond2 (unregistering): Released all slaves
[   74.140391][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'.
[   74.261072][ T6188] geneve3: entered promiscuous mode
[   74.323757][ T6191] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   74.341867][ T6191] gretap1: entered allmulticast mode
[   74.375041][ T6193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.77'.
[   74.430816][ T6195] batadv_slave_1: entered promiscuous mode
[   74.437781][ T6195] netlink: 112 bytes leftover after parsing attributes in process `syz.0.78'.
[   74.502342][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   74.557493][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'.
[   74.784935][ T6200] batadv_slave_1 (unregistering): left promiscuous mode
[   74.789001][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.923363][ T6215] netlink: 'syz.2.82': attribute type 10 has an invalid length.
[   74.929084][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'.
[   74.933126][ T6215] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   74.955787][ T6215] netlink: 'syz.2.82': attribute type 10 has an invalid length.
[   74.969560][ T6215] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.093346][ T6226] warning: `syz.0.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.129952][ T6228] team0: Device ipip0 is of different type
[   75.269999][ T6236] netlink: 'syz.2.87': attribute type 1 has an invalid length.
[   75.272949][ T6236] netlink: 224 bytes leftover after parsing attributes in process `syz.2.87'.
[   75.606051][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   75.787177][ T6281] netlink: 'syz.2.98': attribute type 8 has an invalid length.
[   75.793277][ T6281] bond0: entered promiscuous mode
[   75.805580][ T6281] bond_slave_0: entered promiscuous mode
[   75.808062][ T6281] bond_slave_1: entered promiscuous mode
[   75.810010][ T6281] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   75.823741][ T6281] veth1_to_bridge: entered promiscuous mode
[   75.827057][ T6281] ip6gretap0: entered promiscuous mode
[   75.832658][ T6281] hsr1: entered promiscuous mode
[   76.051772][ T6297] netlink: 'syz.1.100': attribute type 13 has an invalid length.
[   76.054203][ T6297] netlink: 'syz.1.100': attribute type 11 has an invalid length.
[   76.323622][ T6302] gretap0: entered promiscuous mode
[   76.334592][ T6315] tipc: Started in network mode
[   76.343502][ T6315] tipc: Node identity 9a23e9e9a1fa, cluster identity 4711
[   76.346870][ T6315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.349748][ T6314] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.356605][ T6315] tipc: Resetting bearer <eth:syzkaller0>
[   76.360418][ T6314] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.369560][ T6314] syzkaller0: entered promiscuous mode
[   76.371679][ T6314] syzkaller0: entered allmulticast mode
[   76.402680][ T6320] bridge4: entered allmulticast mode
[   76.405634][ T6313] tipc: Resetting bearer <eth:syzkaller0>
[   76.414127][ T6313] tipc: Disabling bearer <eth:syzkaller0>
[   76.636597][ T6334] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   76.778882][ T6334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.784339][ T6334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.788952][ T6334] bond0 (unregistering): Released all slaves
[   76.959026][ T6358] netlink: 'syz.0.115': attribute type 1 has an invalid length.
[   76.979851][ T6358] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.060999][ T6358] bond3 (unregistering): Released all slaves
[   77.134130][ T6366] tipc: Can't bind to reserved service type 0
[   77.424332][ T6386] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   77.442041][ T6386] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.493159][ T6386] bond1: (slave veth3): Enslaving as an active interface with a down link
[   77.524821][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv1
[   77.530011][ T6386] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   77.718970][  T885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.721920][  T885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.852076][ T6417] gretap0: refused to change device tx_queue_len
[   77.854950][ T6417] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   77.896508][ T6419] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.013847][ T6428] vlan0: entered promiscuous mode
[   78.068143][ T6431] dummy0: entered promiscuous mode
[   78.070261][ T6431] macvtap1: entered promiscuous mode
[   78.072284][ T6431] macvtap1: entered allmulticast mode
[   78.074376][ T6431] dummy0: entered allmulticast mode
[   78.098071][ T6431] dummy0: left allmulticast mode
[   78.101445][ T6431] dummy0: left promiscuous mode
[   78.152343][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.161053][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.163929][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.177157][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.198996][ T6436] __nla_validate_parse: 21 callbacks suppressed
[   78.199010][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   78.362047][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'.
[   78.422348][ T6451] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   78.432543][ T6451] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   78.438296][ T6451] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   78.564706][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'.
[   78.589462][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.628180][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.670192][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.678696][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.681817][ T6464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.684571][ T6464] netlink: 540 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.688911][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.755741][ T6468] tipc: Started in network mode
[   78.757589][ T6468] tipc: Node identity 080211000001, cluster identity 4711
[   78.760413][ T6468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.763958][ T6468] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   78.767086][ T6468] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   78.821563][ T6468] tipc: Resetting bearer <eth:syzkaller0>
[   78.888378][ T6478] vxlan1: entered promiscuous mode
[   78.889999][ T6478] vxlan1: entered allmulticast mode
[   78.953738][ T6484] validate_nla: 3 callbacks suppressed
[   78.953750][ T6484] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   78.986877][ T6484] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.000574][ T6487] netlink: 'syz.1.157': attribute type 30 has an invalid length.
[   79.104583][ T6484] bond2: (slave gretap1): making interface the new active one
[   79.109227][ T6484] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   79.158552][ T5879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.161789][ T5879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.179465][ T5879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.207659][ T5879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.247552][ T6502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.269725][ T6502] batadv_slave_1: entered promiscuous mode
[   79.334646][ T6511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.349397][ T6509] vxcan2: entered allmulticast mode
[   79.360089][ T6502] syzkaller0: MTU too low for tipc bearer
[   79.362771][ T6502] tipc: Disabling bearer <eth:syzkaller0>
[   79.373128][ T6500] batadv_slave_1: left promiscuous mode
[   79.798218][   T24] tipc: Node number set to 134418688
[   79.928543][ T6548] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   80.992499][ T6548] x9: renamed from bridge_slave_0
[   81.097735][ T6561] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   81.117481][ T6561] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[   81.120766][ T6561] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   81.131246][ T6561] bond0: (slave vcan1): making interface the new active one
[   81.134948][ T6561] bond0: (slave vcan1): Enslaving as an active interface with an up link
[   81.143403][ T6566] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   81.170292][ T6561] bond0: (slave vcan2): The slave device specified does not support setting the MAC address
[   81.186818][ T6561] bond0: (slave vcan2): Enslaving as a backup interface with an up link
[   81.321847][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.392715][ T6577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.400657][ T6577] syzkaller0: entered promiscuous mode
[   81.403400][ T6577] syzkaller0: entered allmulticast mode
[   81.431747][ T6577] tipc: Resetting bearer <eth:syzkaller0>
[   81.442161][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[   81.459702][ T6575] tipc: Disabling bearer <eth:syzkaller0>
[   81.581718][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.585155][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.598070][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.612469][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.698904][ T6599] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   82.086562][ T6616] netlink: 'syz.2.187': attribute type 12 has an invalid length.
[   82.239984][ T6634] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.431005][ T6643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.434417][ T6643] syzkaller0: entered promiscuous mode
[   82.436711][ T6643] syzkaller0: entered allmulticast mode
[   82.451219][ T6642] tipc: Resetting bearer <eth:syzkaller0>
[   82.470404][ T6642] tipc: Disabling bearer <eth:syzkaller0>
[   82.569456][ T6647] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   82.607566][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.765221][ T6655] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   82.867123][ T6671] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   83.126529][ T6690] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   83.422600][ T6700] gre1: entered promiscuous mode
[   83.424293][ T6700] gre1: entered allmulticast mode
[   83.499927][ T6712] pim6reg1: entered promiscuous mode
[   83.508985][ T6712] pim6reg1: entered allmulticast mode
[   83.601060][ T6725] __nla_validate_parse: 25 callbacks suppressed
[   83.601098][ T6725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'.
[   83.652957][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   83.666919][ T6728] netlink: 56 bytes leftover after parsing attributes in process `syz.1.205'.
[   83.703752][ T6733] netlink: 1 bytes leftover after parsing attributes in process `syz.1.206'.
[   83.707776][ T6733] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   83.714045][ T6733] erspan0: entered allmulticast mode
[   83.789502][ T6736] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   83.887323][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'.
[   83.903909][ T6746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.464662][ T6780] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   84.483336][ T6780] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.491214][ T6780] bond2: (slave wlan0): Enslaving as an active interface with a down link
[   84.499750][ T6780] vlan0: entered allmulticast mode
[   84.501411][ T6780] veth1: entered allmulticast mode
[   84.503404][ T6780] bond2: (slave vlan0): Opening slave failed
[   84.600348][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.606019][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.611162][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.617652][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.624375][ T6791] erspan0: left allmulticast mode
[   84.626951][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   84.645101][ T6791] 8021q: adding VLAN 0 to HW filter on device team0
[   84.653225][ T6791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.755624][ T6803] geneve2: entered promiscuous mode
[   84.757716][ T6803] geneve2: entered allmulticast mode
[   84.761450][ T5879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.764615][ T5879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.776357][ T5879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.781772][ T5879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.874162][ T6807] bpq0: entered promiscuous mode
[   85.002734][ T6824] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   85.018881][ T6824] bridge0: port 3(syz_tun) entered disabled state
[   85.022586][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.026350][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.114874][ T6828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.118283][ T6828] IPv6: NLM_F_CREATE should be set when creating new route
[   85.121508][ T6828] IPv6: NLM_F_CREATE should be set when creating new route
[   85.128959][ T6828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.175751][ T6829] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.181024][ T6829] bond4: (slave bond5): Enslaving as an active interface with an up link
[   85.190774][ T6829] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.248596][ T6837] syz_tun: entered allmulticast mode
[   85.257493][ T6834] veth0: entered promiscuous mode
[   85.266846][ T6837] dvmrp8: entered allmulticast mode
[   85.308473][ T6836] syz_tun: left allmulticast mode
[   85.310846][ T6836] dvmrp8: left allmulticast mode
[   85.396399][ T6834] veth0: left promiscuous mode
[   85.485014][ T6851] ip6tnl3: entered promiscuous mode
[   85.509477][ T6851] team0: Port device team_slave_0 removed
[   85.527653][ T6853] netlink: 'syz.2.223': attribute type 33 has an invalid length.
[   85.783222][ T6877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.796500][ T6877] syzkaller0: entered allmulticast mode
[   85.804789][ T6877] syzkaller0 (unregistering): left allmulticast mode
[   86.264063][ T6908] batadv1: entered promiscuous mode
[   86.277982][ T6908] batadv1: entered allmulticast mode
[   86.327507][ T6920] netlink: 'syz.0.239': attribute type 29 has an invalid length.
[   86.332303][ T6920] netlink: 'syz.0.239': attribute type 29 has an invalid length.
[   86.343191][ T6920] netlink: 'syz.0.239': attribute type 4 has an invalid length.
[   86.401101][   T47] cfg80211: failed to load regulatory.db
[   86.431164][ T6923] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   86.441348][ T6930] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.562403][ T6945] geneve3: entered promiscuous mode
[   86.622676][ T6952] netlink: 'syz.1.250': attribute type 4 has an invalid length.
[   86.631708][ T6952] netlink: 'syz.1.250': attribute type 4 has an invalid length.
[   86.650394][ T6954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.708154][ T6954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.734869][ T6117] IPVS: starting estimator thread 0...
[   86.790450][ T6954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.825675][ T6964] IPVS: using max 40 ests per chain, 96000 per kthread
[   86.921374][ T6954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.048639][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.067461][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.084916][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.100325][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.110703][ T6975] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   87.159355][ T6975] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.170581][ T6977] bond3: (slave ip6gretap1): making interface the new active one
[   87.177091][ T6977] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   87.210635][ T6975] veth3: entered promiscuous mode
[   87.214806][ T6975] bond3: (slave veth3): Enslaving as an active interface with a down link
[   87.221247][ T6975] erspan0: entered allmulticast mode
[   87.232174][ T6975] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   87.421501][ T6993] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[   87.477540][   T33] audit: type=1800 audit(1758888176.926:2): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.257" name="memory.events" dev="tmpfs" ino=416 res=0 errno=0
[   87.512397][ T6993] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.567788][ T6995] bond6: (slave veth5): Enslaving as an active interface with a down link
[   87.578553][ T6993] gretap2: entered promiscuous mode
[   87.584146][ T6993] bond6: (slave gretap2): making interface the new active one
[   87.592074][ T6993] bond6: (slave gretap2): Enslaving as an active interface with an up link
[   87.671565][ T6998] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   87.732517][ T6998] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.793696][ T7008] 8021q: VLANs not supported on lo
[   88.038339][ T7036] bridge5: entered promiscuous mode
[   88.233503][ T7046] bond4: entered promiscuous mode
[   88.252952][ T7046] bond4: entered allmulticast mode
[   88.256237][ T7046] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.333410][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.742234][ T7077] __nla_validate_parse: 85 callbacks suppressed
[   88.742246][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'.
[   89.229150][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[   89.232598][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[   89.441085][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'.
[   89.558924][ T7107] bond0: (slave vlan2): Opening slave failed
[   89.677920][ T7114] geneve3: entered promiscuous mode
[   89.678310][ T7117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.291'.
[   89.681027][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.687160][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.692174][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.696113][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.706132][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'.
[   89.794360][ T7124] validate_nla: 2 callbacks suppressed
[   89.794374][ T7124] netlink: 'syz.1.293': attribute type 13 has an invalid length.
[   89.811734][ T7124] netlink: 'syz.1.293': attribute type 17 has an invalid length.
[   89.811827][ T7129] netlink: 'syz.1.293': attribute type 13 has an invalid length.
[   89.821008][ T7129] netlink: 'syz.1.293': attribute type 17 has an invalid length.
[   89.825981][ T7124] erspan0: left allmulticast mode
[   89.873352][ T7124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.883648][ T7129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.921212][ T7136] netlink: 80 bytes leftover after parsing attributes in process `syz.1.295'.
[   89.967512][ T7137] netlink: 228 bytes leftover after parsing attributes in process `syz.0.294'.
[   89.975175][ T7141] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   89.983580][ T7141] bond3: (slave erspan0): Releasing active interface
[   89.986275][ T7141] ip6gretap1: entered promiscuous mode
[   89.993865][ T7141] team0: Port device team_slave_0 removed
[   89.999340][ T7141] team0: Port device team_slave_1 removed
[   90.001897][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.004743][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.009314][ T7141] bond2: (slave wlan0): Releasing active interface
[   90.021318][ T7141] bond0: (slave vcan1): Releasing backup interface
[   90.023718][ T7141] bond0: (slave vcan2): making interface the new active one
[   90.029413][ T7141] bond0: (slave vcan2): Releasing backup interface
[   90.037970][ T7141] bond3: (slave ip6gretap1): Releasing active interface
[   90.040659][ T7141] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 62:1a:f9:c0:64:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   90.047512][ T7141] ip6gretap1: left promiscuous mode
[   90.052653][ T7141] bond3: (slave veth3): Releasing active interface
[   90.077327][ T7141] netlink: 'syz.1.296': attribute type 10 has an invalid length.
[   90.082538][ T7141] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   90.144130][ T7142] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.149609][ T7142] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.837949][ T7152] netlink: 'syz.1.299': attribute type 11 has an invalid length.
[   90.840850][ T7152] netlink: 140 bytes leftover after parsing attributes in process `syz.1.299'.
[   90.857922][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'.
[   91.065168][ T7165] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   91.069926][ T7165] netlink: 'syz.1.302': attribute type 2 has an invalid length.
[   91.077077][ T7165] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   91.115801][ T5868] Bluetooth: hci2: command 0x0405 tx timeout
[   91.319828][ T7182] netlink: 'syz.2.306': attribute type 10 has an invalid length.
[   91.343289][ T7182] team0: Device dummy0 failed to register rx_handler
[   91.350254][ T7184] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   91.769923][ T7192] IPv6: sit2: Disabled Multicast RS
[   91.773035][ T7192] sit2: entered allmulticast mode
[   92.028833][ T7201] !: renamed from dummy0
[   92.152681][ T7210] dvmrp8: entered allmulticast mode
[   92.254769][ T7214] vlan1: entered promiscuous mode
[   92.259459][ T7214] vlan1: entered allmulticast mode
[   92.262439][ T7214] hsr_slave_1: entered allmulticast mode
[   92.383373][ T7219] team0: Port device geneve1 added
[   92.472454][ T7224] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.779593][ T7253] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[   92.783893][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.789029][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.792349][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.814967][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.645987][ T7269] syz_tun: entered allmulticast mode
[   93.701998][ T7268] syz_tun: left allmulticast mode
[   93.804890][ T7275] bond0: left promiscuous mode
[   93.807947][ T7275] bond_slave_0: left promiscuous mode
[   93.810485][ T7275] bond_slave_1: left promiscuous mode
[   93.813347][ T7275] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   93.818555][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.822912][ T7275] 8021q: adding VLAN 0 to HW filter on device team0
[   93.829176][ T7275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.841955][ T7280] xfrm0: entered promiscuous mode
[   93.844273][ T7280] xfrm0: entered allmulticast mode
[   93.859378][ T7281] geneve4: entered promiscuous mode
[   93.976781][ T7285] team0: Refused to change device type
[   94.074472][ T7291] __nla_validate_parse: 15 callbacks suppressed
[   94.074483][ T7291] netlink: 72 bytes leftover after parsing attributes in process `syz.1.336'.
[   94.080954][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.088726][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.098870][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.101748][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.113658][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.338'.
[   94.117975][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.117988][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.118518][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.118526][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   94.304308][ T7306] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   94.321451][ T7306] bridge0: port 3(syz_tun) entered disabled state
[   94.333369][ T7306] bridge_slave_0: left allmulticast mode
[   94.337728][ T7306] bridge_slave_0: left promiscuous mode
[   94.339741][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.343943][ T7306] bridge_slave_1: left allmulticast mode
[   94.348032][ T7306] bridge_slave_1: left promiscuous mode
[   94.349899][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.359359][ T7306] bond0: (slave bond_slave_0): Releasing backup interface
[   94.362180][ T7306] bond_slave_0: left promiscuous mode
[   94.368535][ T7306] bond0: (slave bond_slave_1): Releasing backup interface
[   94.371421][ T7306] bond_slave_1: left promiscuous mode
[   94.380427][ T7306] team0: Port device team_slave_0 removed
[   94.393685][ T7306] team0: Port device team_slave_1 removed
[   94.401682][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.410652][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.416684][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.419691][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.429908][ T7306] bond0: (slave wlan1): Releasing backup interface
[   94.435114][ T7306] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   94.441029][ T7306] bond1: (slave veth3): Releasing active interface
[   94.450885][ T7306] bond2: (slave gretap1): Releasing active interface
[   94.458115][ T7306] bond6: (slave veth5): Releasing active interface
[   94.461041][ T7306] bond6: (slave veth5): the permanent HWaddr of slave - 76:c9:30:98:06:44 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   94.472528][ T7306] bond6: (slave gretap2): Releasing active interface
[   94.616812][ T7317] xfrm0: left promiscuous mode
[   94.618951][ T7317] xfrm0: left allmulticast mode
[   94.643927][ T7317] bond1: left promiscuous mode
[   94.646549][ T7317] bond1: left allmulticast mode
[   94.648960][ T7317] gtp0: left promiscuous mode
[   94.656819][ T7317] bridge4: left allmulticast mode
[   94.669134][ T7317] tipc: Resetting bearer <eth:syzkaller0>
[   94.683083][ T7317] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   94.687507][ T7317] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   94.692268][ T7317] vxlan1: left promiscuous mode
[   94.694367][ T7317] vxlan1: left allmulticast mode
[   94.698694][ T7317] gre1: left promiscuous mode
[   94.700502][ T7317] gre1: left allmulticast mode
[   94.716352][ T7317] ip6tnl3: left promiscuous mode
[   94.726227][ T7317] geneve3: left promiscuous mode
[   94.781279][ T7318] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   94.793099][ T7318] geneve2: left promiscuous mode
[   94.794708][ T7318] geneve2: left allmulticast mode
[   94.803011][ T7318] geneve3: left promiscuous mode
[   94.812252][ T7318] veth3: left promiscuous mode
[   94.814948][ T7318] bond4: left promiscuous mode
[   94.820386][ T7318] bond4: left allmulticast mode
[   94.840861][ T5890] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.844788][ T5890] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.851559][ T5890] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.854836][ T5890] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.864701][ T3633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.866085][ T5890] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.869463][ T3633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.872808][ T5890] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.891219][ T5890] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.897350][ T5890] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.901172][ T5890] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.908369][ T5890] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.912589][ T5890] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.921933][ T5890] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.943877][ T7332] !: renamed from dummy0
[   95.250597][ T7356] validate_nla: 13 callbacks suppressed
[   95.250608][ T7356] netlink: 'syz.2.354': attribute type 7 has an invalid length.
[   95.254761][ T7356] netlink: 'syz.2.354': attribute type 8 has an invalid length.
[   95.292542][ T7352] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   95.305505][ T7352] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   95.350676][ T7365] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   95.384384][ T7368] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   95.387142][ T7368] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   95.389553][ T7368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   95.406498][ T7365] 8021q: adding VLAN 0 to HW filter on device bond8
[   95.512786][ T7365] bond8 (unregistering): Released all slaves
[   95.830000][ T7385] dvmrp0: entered allmulticast mode
[   95.943562][   T33] audit: type=1800 audit(1758888185.386:3): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.364" name="memory.events" dev="tmpfs" ino=591 res=0 errno=0
[   96.042769][ T7396] bond0: entered promiscuous mode
[   96.052338][ T7396] bond_slave_0: entered promiscuous mode
[   96.055253][ T7396] bond_slave_1: entered promiscuous mode
[   96.061272][ T7396] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   96.066520][ T7396] bond0: left promiscuous mode
[   96.068550][ T7396] bond_slave_0: left promiscuous mode
[   96.071011][ T7396] bond_slave_1: left promiscuous mode
[   96.073395][ T7396] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   96.255843][ T7405] netlink: 'syz.1.368': attribute type 13 has an invalid length.
[   96.259118][ T7405] netlink: 'syz.1.368': attribute type 17 has an invalid length.
[   96.293863][ T7405] 8021q: adding VLAN 0 to HW filter on device team0
[   96.301026][ T7405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.539650][ T7420] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[   96.539815][ T5965] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   96.557714][ T7420] bond5: entered promiscuous mode
[   96.559528][ T7420] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.575759][ T7420] bond5: (slave bridge1): making interface the new active one
[   96.580457][ T7420] bridge1: entered promiscuous mode
[   96.583128][ T7420] bond5: (slave bridge1): Enslaving as an active interface with an up link
[   97.377395][ T7445] gretap1: entered promiscuous mode
[   97.377624][ T7449] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[   97.425305][ T7449] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[   97.433816][ T7449] bond6: (slave vxcan5): Error -95 calling set_mac_address
[   97.442259][ T7445] netlink: 'syz.0.375': attribute type 10 has an invalid length.
[   97.457882][ T7445] veth1_vlan: entered allmulticast mode
[   97.461422][ T7445] team0: Device veth1_vlan failed to register rx_handler
[   97.489946][ T7455] bond6: (slave bridge2): Enslaving as an active interface with a down link
[   98.559925][ T7463] tipc: Resetting bearer <eth:syzkaller0>
[   98.736273][ T7476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.740300][ T7476] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   98.744723][ T7476] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   98.888826][ T7501] pim6reg: entered allmulticast mode
[   98.896838][ T7501] pim6reg: left allmulticast mode
[   98.962305][ T7507] bridge5: entered promiscuous mode
[   98.964024][ T7507] bridge5: entered allmulticast mode
[   99.027018][ T7513] : entered promiscuous mode
[   99.129172][ T7521] __nla_validate_parse: 17 callbacks suppressed
[   99.129187][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'.
[   99.182925][ T7526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.284038][ T7534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.396'.
[   99.299660][ T7535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.303112][ T7536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.326163][ T7536] syzkaller0: mtu less than device minimum
[   99.334030][ T7535] syzkaller0: mtu less than device minimum
[   99.400244][ T7547] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.403522][ T7547] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.472551][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'.
[   99.480796][ T7550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.401'.
[   99.496486][ T7550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.401'.
[   99.560570][ T7558] IPv6: sit1: Disabled Multicast RS
[   99.568525][ T7558] sit1: entered allmulticast mode
[   99.617534][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.620535][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.628307][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.636738][ T7560] netlink: 540 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.654811][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.771102][ T7562] 8021q: adding VLAN 0 to HW filter on device team0
[   99.780682][ T7562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.920416][ T7562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.977695][ T7571] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  100.008193][ T7571] bond5: (slave bridge1): Releasing backup interface
[  100.017898][ T7571] bridge1: left promiscuous mode
[  100.035060][ T7571] bond6: (slave bridge2): Releasing active interface
[  100.111117][ T7576] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  100.329975][ T7590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.333255][ T7590] syzkaller0: entered promiscuous mode
[  100.335158][ T7590] syzkaller0: entered allmulticast mode
[  100.362096][ T7590] tipc: Resetting bearer <eth:syzkaller0>
[  100.366947][ T7589] tipc: Resetting bearer <eth:syzkaller0>
[  100.382046][ T7589] tipc: Disabling bearer <eth:syzkaller0>
[  100.478745][ T7594] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  100.721990][ T7594] tipc: Resetting bearer <eth:syzkaller0>
[  101.324792][ T7643] bond0: (slave vlan5): Opening slave failed
[  101.571936][ T7668] vti0: entered allmulticast mode
[  101.713111][ T7684] team0: Device ipip0 is of different type
[  101.752849][ T7688] validate_nla: 2 callbacks suppressed
[  101.752864][ T7688] netlink: 'syz.2.440': attribute type 1 has an invalid length.
[  101.767825][ T7690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.803014][ T7690] veth0_to_batadv: entered promiscuous mode
[  101.806508][ T7690] veth0_to_batadv: entered allmulticast mode
[  101.817747][ T7690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.822592][ T7690] tipc: Resetting bearer <eth:syzkaller0>
[  101.905291][ T7697] x9: renamed from bridge_slave_0 (while UP)
[  102.502639][ T7707] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  102.564879][ T7708] netlink: 'syz.1.444': attribute type 10 has an invalid length.
[  102.647510][ T7713] 8021q: adding VLAN 0 to HW filter on device bond7
[  102.657947][ T7713] macvlan2: entered promiscuous mode
[  102.660293][ T7713] macvlan2: entered allmulticast mode
[  102.675155][ T7713] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  102.735102][ T7726] vlan2: entered promiscuous mode
[  102.743104][ T7726] batadv0: entered promiscuous mode
[  102.928564][ T7735] netlink: 'syz.1.450': attribute type 58 has an invalid length.
[  103.012413][ T7739] netlink: 'syz.0.452': attribute type 3 has an invalid length.
[  103.202369][ T7754] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  103.209925][ T7762] syz.1.457: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.219638][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.1.457 Not tainted syzkaller #0 PREEMPT(full) 
[  103.219659][ T7762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.219668][ T7762] Call Trace:
[  103.219675][ T7762]  <TASK>
[  103.219682][ T7762]  dump_stack_lvl+0x189/0x250
[  103.219716][ T7762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.219731][ T7762]  ? __pfx__printk+0x10/0x10
[  103.219749][ T7762]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.219764][ T7762]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.219780][ T7762]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  103.219799][ T7762]  warn_alloc+0x214/0x310
[  103.219820][ T7762]  ? stack_depot_save_flags+0x40/0x860
[  103.219841][ T7762]  ? __pfx_warn_alloc+0x10/0x10
[  103.219863][ T7762]  ? kasan_save_track+0x4f/0x80
[  103.219880][ T7762]  ? xskq_create+0x56/0x170
[  103.219891][ T7762]  ? xsk_init_queue+0xb0/0x110
[  103.219900][ T7762]  ? xsk_setsockopt+0x4dc/0x8d0
[  103.219918][ T7762]  ? do_sock_setsockopt+0x17c/0x1b0
[  103.219932][ T7762]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  103.219944][ T7762]  ? do_syscall_64+0xfa/0x3b0
[  103.219958][ T7762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.219977][ T7762]  __vmalloc_node_range_noprof+0x125/0x12f0
[  103.220021][ T7762]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.220046][ T7762]  ? __kasan_kmalloc+0x93/0xb0
[  103.220066][ T7762]  vmalloc_user_noprof+0xad/0xf0
[  103.220084][ T7762]  ? xskq_create+0xbf/0x170
[  103.220095][ T7762]  xskq_create+0xbf/0x170
[  103.220107][ T7762]  xsk_init_queue+0xb0/0x110
[  103.220119][ T7762]  xsk_setsockopt+0x4dc/0x8d0
[  103.220175][ T7762]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.220192][ T7762]  ? __pfx_aa_sk_perm+0x10/0x10
[  103.220213][ T7762]  ? aa_sock_opt_perm+0xff/0x1b0
[  103.220226][ T7762]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  103.220238][ T7762]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.220257][ T7762]  do_sock_setsockopt+0x17c/0x1b0
[  103.220273][ T7762]  __x64_sys_setsockopt+0x13f/0x1b0
[  103.220294][ T7762]  do_syscall_64+0xfa/0x3b0
[  103.220322][ T7762]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.220336][ T7762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.220349][ T7762]  ? exc_page_fault+0x9f/0xf0
[  103.220363][ T7762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.220374][ T7762] RIP: 0033:0x7f8cf9b8ec29
[  103.220386][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.220396][ T7762] RSP: 002b:00007f8cfaa4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.220409][ T7762] RAX: ffffffffffffffda RBX: 00007f8cf9dd5fa0 RCX: 00007f8cf9b8ec29
[  103.220419][ T7762] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  103.220427][ T7762] RBP: 00007f8cf9c11e41 R08: 0000000000000004 R09: 0000000000000000
[  103.220435][ T7762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.220442][ T7762] R13: 00007f8cf9dd6038 R14: 00007f8cf9dd5fa0 R15: 00007ffe1bc891a8
[  103.220464][ T7762]  </TASK>
[  103.220470][ T7762] Mem-Info:
[  103.252314][ T7764] sctp: [Deprecated]: syz.0.458 (pid 7764) Use of int in max_burst socket option deprecated.
[  103.252314][ T7764] Use struct sctp_assoc_value instead
[  103.255318][ T7762] active_anon:4516 inactive_anon:0 isolated_anon:0
[  103.255318][ T7762]  active_file:1193 inactive_file:38254 isolated_file:0
[  103.255318][ T7762]  unevictable:1768 dirty:59 writeback:0
[  103.255318][ T7762]  slab_reclaimable:10166 slab_unreclaimable:90102
[  103.255318][ T7762]  mapped:17945 shmem:2447 pagetables:903
[  103.255318][ T7762]  sec_pagetables:0 bounce:0
[  103.255318][ T7762]  kernel_misc_reclaimable:0
[  103.255318][ T7762]  free:261220 free_pcp:20166 free_cma:0
[  103.361661][ T7762] Node 0 active_anon:10632kB inactive_anon:0kB active_file:4004kB inactive_file:23096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35136kB dirty:208kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4404kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.374925][ T7762] Node 1 active_anon:7432kB inactive_anon:0kB active_file:768kB inactive_file:129920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36644kB dirty:28kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7752kB pagetables:1416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.387645][ T7762] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.398553][ T7762] lowmem_reserve[]: 0 811 811 811 811
[  103.400983][ T7762] Node 0 DMA32 free:373292kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10632kB inactive_anon:0kB active_file:4004kB inactive_file:23096kB unevictable:3536kB writepending:208kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:41832kB local_pcp:15440kB free_cma:0kB
[  103.413504][ T7762] lowmem_reserve[]: 0 0 0 0 0
[  103.416979][ T7762] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  103.441945][ T7762] lowmem_reserve[]: 0 0 854 854 854
[  103.444712][ T7762] Node 1 Normal free:197736kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7432kB inactive_anon:0kB active_file:768kB inactive_file:129920kB unevictable:3536kB writepending:28kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38796kB local_pcp:23088kB free_cma:0kB
[  103.457533][ T7762] lowmem_reserve[]: 0 0 0 0 0
[  103.459447][ T7762] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.464369][ T7762] Node 0 DMA32: 835*4kB (UME) 632*8kB (UME) 236*16kB (UME) 95*32kB (UM) 38*64kB (UME) 21*128kB (UM) 9*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 83*4096kB (M) = 373356kB
[  103.471053][ T7772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.471674][ T7762] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  103.481014][ T7762] Node 1 Normal: 636*4kB (UM) 474*8kB (UME) 163*16kB (UME) 279*32kB (UME) 88*64kB (UM) 71*128kB (UME) 37*256kB (UM) 12*512kB (UM) 8*1024kB (UM) 5*2048kB (UME) 32*4096kB (M) = 197712kB
[  103.488724][ T7762] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.492521][ T7762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.496287][ T7762] 41894 total pagecache pages
[  103.498068][ T7762] 0 pages in swap cache
[  103.499691][ T7762] Free swap  = 124996kB
[  103.501346][ T7762] Total swap = 124996kB
[  103.502956][ T7762] 786301 pages RAM
[  103.505169][ T7762] 0 pages HighMem/MovableOnly
[  103.507057][ T7762] 241347 pages reserved
[  103.508704][ T7762] 0 pages cma reserved
[  103.561004][ T7774] pimreg: entered allmulticast mode
[  103.595787][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  103.621219][ T7779] tipc: New replicast peer: 255.255.255.255
[  103.624063][ T7779] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.714546][ T7783] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.861766][ T7795] vlan1: entered allmulticast mode
[  103.952511][ T7802] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[  103.978646][ T7802] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.994407][ T7802] veth5: entered promiscuous mode
[  104.001582][ T7802] bond7: (slave veth5): Enslaving as an active interface with a down link
[  104.006469][ T7802] erspan0: entered allmulticast mode
[  104.014037][ T7802] bond7: (slave erspan0): making interface the new active one
[  104.019187][ T7802] erspan0: entered promiscuous mode
[  104.021315][ T7802] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  104.164180][ T7810] geneve4: entered promiscuous mode
[  104.167764][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.170349][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.173930][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.177860][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.182545][ T7810] __nla_validate_parse: 18 callbacks suppressed
[  104.182554][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'.
[  104.362476][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'.
[  104.528833][ T7817] ipvlan0: entered promiscuous mode
[  104.663692][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[  104.703645][ T7833] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  104.710134][ T7833] netlink: 14 bytes leftover after parsing attributes in process `syz.1.476'.
[  104.786860][ T7841] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[  104.820533][ T7841] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  104.826362][ T7841] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  105.129711][ T7872] nbd2: detected capacity change from 0 to 63
[  105.133408][ T7861] block nbd2: NBD_DISCONNECT
[  105.138690][ T7861] block nbd2: Disconnected due to user request.
[  105.140806][ T7861] block nbd2: shutting down sockets
[  105.156608][ T7874] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  105.160106][ T7858] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  105.241593][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'.
[  105.244974][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'.
[  105.259867][ T7888] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[  105.276590][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'.
[  105.322479][ T7903] netlink: 'syz.2.486': attribute type 10 has an invalid length.
[  105.339570][ T7903] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  105.351690][ T7903] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  105.354338][ T7903] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.374756][ T7907] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  105.507345][ T7923] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  105.509760][ T7923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.492'.
[  105.520010][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'.
[  105.539228][ T7925] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[  105.548420][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'.
[  105.588146][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.592333][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.299497][ T7988] macsec1: entered promiscuous mode
[  106.305387][ T7988] macsec1: entered allmulticast mode
[  106.384195][ T7991] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  106.390996][ T5879] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.402115][ T7991] 8021q: adding VLAN 0 to HW filter on device bond9
[  106.501647][ T7991] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  106.505212][ T7991] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface
[  106.511196][ T7991] bond9 (unregistering): Released all slaves
[  106.624988][ T8007] 8021q: adding VLAN 0 to HW filter on device bond9
[  106.774727][ T8016] validate_nla: 5 callbacks suppressed
[  106.774738][ T8016] netlink: 'syz.1.519': attribute type 4 has an invalid length.
[  106.809507][ T8021] netlink: 'syz.0.521': attribute type 13 has an invalid length.
[  106.811972][ T8021] netlink: 'syz.0.521': attribute type 17 has an invalid length.
[  106.823337][ T8021] gretap0: refused to change device tx_queue_len
[  106.828494][ T8021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  106.888259][ T8027] pim6reg99999999: entered allmulticast mode
[  106.931715][ T8040] netlink: 'syz.1.525': attribute type 1 has an invalid length.
[  107.048196][ T8045] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  107.158935][ T8050] macvlan3: entered promiscuous mode
[  107.160617][ T8050] macvlan3: entered allmulticast mode
[  107.608189][ T8084] veth0_to_batadv: left promiscuous mode
[  107.610080][ T8084] veth0_to_batadv: left allmulticast mode
[  107.875206][ T8107] netlink: 'syz.0.546': attribute type 9 has an invalid length.
[  108.131543][ T8131] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  108.334685][ T8146] netlink: 'syz.1.557': attribute type 2 has an invalid length.
[  108.444134][ T8153] netlink: 'syz.1.557': attribute type 21 has an invalid length.
[  108.458044][ T8153] netlink: 'syz.1.557': attribute type 5 has an invalid length.
[  109.002254][ T8186] bond7: (slave erspan0): Releasing active interface
[  109.004656][ T8186] erspan0: left promiscuous mode
[  109.012751][ T8186] bond7: (slave veth5): Releasing active interface
[  109.038447][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.043221][ T8186] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  109.049659][ T8186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.053367][ T8186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.443135][ T8191] __nla_validate_parse: 44 callbacks suppressed
[  109.443147][ T8191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.570'.
[  109.457269][ T8191] bridge4: entered allmulticast mode
[  109.501650][ T8193] bond11: entered promiscuous mode
[  109.503222][ T8193] bond11: entered allmulticast mode
[  109.505033][ T8193] 8021q: adding VLAN 0 to HW filter on device bond11
[  109.584223][ T8193] bond11 (unregistering): Released all slaves
[  109.633806][ T8197] netlink: 3 bytes leftover after parsing attributes in process `syz.0.572'.
[  109.645841][ T8197] batadv1: entered promiscuous mode
[  109.647622][ T8197] batadv1: entered allmulticast mode
[  109.783900][ T8203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.573'.
[  109.884907][ T8213] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  110.000122][ T8213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.011665][ T8212] tipc: Disabling bearer <eth:syzkaller0>
[  110.036239][ T8219] vlan0: entered promiscuous mode
[  110.133274][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.174024][ T8228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'.
[  110.274394][ T8239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.281535][ T8239] tipc: Resetting bearer <eth:syzkaller0>
[  110.297358][ T8238] tipc: Disabling bearer <eth:syzkaller0>
[  110.330852][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  110.334025][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'.
[  110.352935][ T8246] bond8: entered promiscuous mode
[  110.357351][ T8246] 8021q: adding VLAN 0 to HW filter on device bond8
[  110.367841][ T8246] syzkaller1: entered promiscuous mode
[  110.369863][ T8246] syzkaller1: entered allmulticast mode
[  110.442208][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[  110.472438][ T8258] netlink: 248 bytes leftover after parsing attributes in process `syz.2.587'.
[  110.510647][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.587'.
[  110.560689][ T8262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.563099][ T8262] IPv6: NLM_F_CREATE should be set when creating new route
[  110.659245][ T8265] syzkaller0: entered promiscuous mode
[  110.661546][ T8265] syzkaller0: entered allmulticast mode
[  110.700700][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'.
[  111.206417][ T8308] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.300640][ T8318] vlan2: entered promiscuous mode
[  111.302983][ T8318] vlan2: entered allmulticast mode
[  111.304990][ T8318] hsr_slave_1: entered allmulticast mode
[  111.336272][ T8320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.340285][ T8320] syzkaller0: entered promiscuous mode
[  111.342577][ T8320] syzkaller0: entered allmulticast mode
[  111.358204][ T8320] tipc: Resetting bearer <eth:syzkaller0>
[  111.362575][ T8319] tipc: Resetting bearer <eth:syzkaller0>
[  111.380059][ T8319] tipc: Disabling bearer <eth:syzkaller0>
[  111.527771][ T8331] batman_adv: batadv0: Adding interface: macvtap2
[  111.529990][ T8331] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.545418][ T8331] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[  111.851381][ T8357] 8021q: adding VLAN 0 to HW filter on device bond12
[  112.071993][ T8374] bridge0: port 1(erspan0) entered blocking state
[  112.074718][ T8374] bridge0: port 1(erspan0) entered disabled state
[  112.080080][ T8374] erspan0: entered promiscuous mode
[  112.088431][ T8374] erspan0: left promiscuous mode
[  112.093683][ T8374] bridge0: port 1(erspan0) entered disabled state
[  112.157775][ T8387] geneve4: entered promiscuous mode
[  112.159545][ T8387] geneve4: entered allmulticast mode
[  112.162005][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.164802][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.168035][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.171464][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.394210][ T8398] bond0: (slave wlan1): Releasing backup interface
[  112.401466][ T8398] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  112.416095][ T8398] batman_adv: batadv0: Removing interface: macvtap2
[  112.662539][ T8412] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  112.680136][ T8412] validate_nla: 7 callbacks suppressed
[  112.680147][ T8412] netlink: 'syz.1.631': attribute type 10 has an invalid length.
[  112.684222][ T8412] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  112.775882][ T8419] erspan0: left allmulticast mode
[  112.788599][ T8419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.867369][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.051607][ T8392] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  113.054136][ T8392] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  113.062961][ T8392] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  113.065260][ T8392] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  113.080551][ T7700] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  113.084687][ T7700] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  113.088763][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  113.092649][ T7700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.096201][ T7700] RIP: 0010:klist_del+0x49/0x110
[  113.097884][ T7700] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 b4 b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b b4 b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74
[  113.104440][ T7700] RSP: 0018:ffffc90008f37768 EFLAGS: 00010202
[  113.106774][ T7700] RAX: 000000000000000b RBX: ffff88802e078860 RCX: ffff88802f59d640
[  113.109824][ T7700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  113.112515][ T7700] RBP: ffffc90008f37890 R08: ffff888031bd6693 R09: 1ffff1100637acd2
[  113.115211][ T7700] R10: dffffc0000000000 R11: ffffed100637acd3 R12: dffffc0000000000
[  113.118072][ T7700] R13: 1ffff11005c0f10c R14: 0000000000000000 R15: ffff88802fd5e750
[  113.120735][ T7700] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  113.124210][ T7700] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.126567][ T7700] CR2: 000000110c38b037 CR3: 000000002fb44000 CR4: 00000000000006f0
[  113.129179][ T7700] Call Trace:
[  113.130344][ T7700]  <TASK>
[  113.131397][ T7700]  device_del+0x280/0x8e0
[  113.132870][ T7700]  ? _raw_spin_unlock_irq+0x2e/0x50
[  113.134589][ T7700]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  113.136679][ T7700]  ? __pfx_device_del+0x10/0x10
[  113.138274][ T7700]  ? netdev_unregister_kobject+0x344/0x450
[  113.140180][ T7700]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  113.142383][ T7700]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  113.145223][ T7700]  ? rtnl_net_dev_lock+0x257/0x2f0
[  113.146930][ T7700]  unregister_netdevice_queue+0x33c/0x380
[  113.148956][ T7700]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  113.151306][ T7700]  ? rtnl_net_dev_lock+0x36/0x2f0
[  113.153170][ T7700]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  113.154898][ T7700]  unregister_netdev+0x1f/0x60
[  113.156716][ T7700]  bnep_session+0x294d/0x2b40
[  113.158363][ T7700]  ? rcu_is_watching+0x15/0xb0
[  113.159949][ T7700]  ? trace_sched_exit_tp+0x36/0x110
[  113.161663][ T7700]  ? __lock_acquire+0xab9/0xd20
[  113.163512][ T7700]  ? __pfx_bnep_session+0x10/0x10
[  113.165599][ T7700]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.167874][ T7700]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.170574][ T7700]  ? __pfx_woken_wake_function+0x10/0x10
[  113.172920][ T7700]  ? __kthread_parkme+0x7b/0x200
[  113.174990][ T7700]  ? __kthread_parkme+0x1a1/0x200
[  113.177101][ T7700]  kthread+0x711/0x8a0
[  113.178723][ T7700]  ? __pfx_bnep_session+0x10/0x10
[  113.180420][ T7700]  ? __pfx_kthread+0x10/0x10
[  113.181964][ T7700]  ? _raw_spin_unlock_irq+0x23/0x50
[  113.183662][ T7700]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.185393][ T7700]  ? __pfx_kthread+0x10/0x10
[  113.186916][ T7700]  ret_from_fork+0x439/0x7d0
[  113.188634][ T7700]  ? __pfx_ret_from_fork+0x10/0x10
[  113.190445][ T7700]  ? __switch_to_asm+0x39/0x70
[  113.192034][ T7700]  ? __switch_to_asm+0x33/0x70
[  113.193712][ T7700]  ? __pfx_kthread+0x10/0x10
[  113.195244][ T7700]  ret_from_fork_asm+0x1a/0x30
[  113.196883][ T7700]  </TASK>
[  113.198114][ T7700] Modules linked in:
[  113.200047][ T7700] ---[ end trace 0000000000000000 ]---
[  113.203205][ T7700] RIP: 0010:klist_del+0x49/0x110
[  113.205206][ T7700] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 b4 b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b b4 b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74
[  113.214781][ T7700] RSP: 0018:ffffc90008f37768 EFLAGS: 00010202
[  113.217162][ T7700] RAX: 000000000000000b RBX: ffff88802e078860 RCX: ffff88802f59d640
[  113.219772][ T7700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  113.222703][ T7700] RBP: ffffc90008f37890 R08: ffff888031bd6693 R09: 1ffff1100637acd2
[  113.225811][ T7700] R10: dffffc0000000000 R11: ffffed100637acd3 R12: dffffc0000000000
[  113.229116][ T7700] R13: 1ffff11005c0f10c R14: 0000000000000000 R15: ffff88802fd5e750
[  113.232250][ T7700] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  113.235224][ T7700] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.237769][ T7700] CR2: 000000110c38b037 CR3: 000000000df36000 CR4: 00000000000006f0
[  113.240743][ T7700] Kernel panic - not syncing: Fatal exception
[  113.243420][ T7700] Kernel Offset: disabled
[  113.244845][ T7700] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:03:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008f36f90
R8 =ffff888108998237 R9 =1ffff11021133046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b02908 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c38b037 CR3=000000002fb44000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0a060000004c0a00 0000000000000029
XMM02=0020000000020000 000000000000040b XMM03=74656b636f730001 000b8001001c8004
XMM04=0100110000001400 000000327a797300 XMM05=0200090000000030 7a7973000100090b
XMM06=0000004002000880 02363e77a9d8779d XMM07=000c000074656b63 6f730001000b8001
XMM08=baa55066e939ce1f 535d5f957fcd1a84 XMM09=0000000000000000 00007f1117c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1100385f001 RBX=ffffffff8f53a1b0 RCX=ffffffff819ce0f8 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f53a160 RBP=1ffffffff1ea742c RSP=ffffc900001076e0
R8 =ffffffff8f53a167 R9 =1ffffffff1ea742c R10=dffffc0000000000 R11=fffffbfff1ea742d
R12=ffffffff8f53a160 R13=ffffffff8f53a1b0 R14=dffffc0000000000 R15=ffff88802f59d640
RIP=ffffffff8223144d RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2f2742 CR3=000000002661c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
