last executing test programs:

1.274234957s ago: executing program 2 (id=741):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0xa, 0x24}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0xa, 0x24}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000001be, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000001be, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback, 0xc, 0x1, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, <r5=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value, @void, @void, r5}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x15, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) (async)
getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))

844.520847ms ago: executing program 1 (id=756):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0)

700.58868ms ago: executing program 1 (id=757):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x3], 0xfffc}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf20}, 0x94) (async)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001007369740024000280050009000000000008000200e0000002060008000000000005000a"], 0x50}}, 0x0)

699.184556ms ago: executing program 1 (id=758):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xfff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2f2}}], 0x1, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x12003, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x43}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24000000)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0)

628.726556ms ago: executing program 1 (id=759):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @private, @local}, &(0x7f0000000040)=0xc)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @private2={0xfc, 0x2, '\x00', 0x81}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c5a, 0x400, 0x9, 0x300, 0x1, 0x20, r1})
r2 = socket$inet_sctp(0x2, 0x4, 0x84) (async)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@routing={0x89, 0x4, 0x1, 0x1, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x43}]}, 0x28)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x80000000, @loopback, 0x630}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, @in={0x2, 0x4e23, @multicast1}], 0x48) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xb, 0xa2, &(0x7f0000000300)=""/162, 0x41100, 0x5, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0xec, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x4, 0x0, 0xc}, {0x5, 0x3, 0x2, 0x1}, {0x0, 0x5, 0xe, 0x8}, {0x5, 0x1, 0xd, 0x7}, {0x5, 0x5, 0xe, 0xa}, {0x0, 0x2, 0x7}], 0x10, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000001c0)='xprtrdma_post_recv\x00', r4, 0x0, 0x2}, 0x18)
r5 = accept4(r3, 0x0, &(0x7f00000005c0), 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', <r6=>r1, 0x29, 0x1, 0x1, 0x5, 0x0, @local, @loopback, 0x40, 0x10, 0x6, 0x80}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000006c0)={<r7=>0x0, 0x8, 0x3, 0x1})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000ac0)={r7, 0x9, 0x0, 0x1}) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'})
setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000f00), 0x4)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f80), r5) (async)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000fc0)={@broadcast, @private, <r11=>0x0}, &(0x7f0000001000)=0xc)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000001140)={&(0x7f0000000f40), 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xc0, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc080}, 0x40) (async)
bind$bt_hci(r3, &(0x7f0000001180)={0x1f, 0x4, 0x2}, 0x6) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), r5)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4488808}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1fc, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd1, 0xa8, @random="4715ab4bde26d47a12184672c34458cedbf4aaf53687f8c6f96001c7d0c410452b4d42e48c43a1ce2d0a155ce564dca19daf461e23d19eeab159ebbb8af45c125e1d9f300c52a1800f7afa22f4594fe577defe857abba07a0211a75734531e608c751c4971aa74c7cec13600d41b4c9a82f0311653b1f4f3fb1c2b3409241e2dbe86922b6c708924dc4471a2b8e58d82791d86e4b42ca7f1637308585780b4cbf6433bac9df24dba2f87da738e877007cf6842303b4fc98ea14022bec91c099a26a8f462d62c7b96142e6743d5"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xad, 0xa8, @random="7d043eba498382cd973d128313de6bd9588d60899f40ab9b6af1de0d81cbdd07eb8b758acf93d041370c4bb58f3ff86724f6841549375070f404384fc0b998ed82e551ec7d6734d592fb9d1912844df1466d9ed35229bd602ee1cfba22f3a98adaf6ceee8c8d096fff6f5db196b33cb0a802cda00310e751172bef2d59a3bf487911f6dd16506d4b48a3d29d75556e42dcbfaab6fad8b554ce131d1e1ba10cd2149a8d360f46495cde"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x41}, 0x2)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r5)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x64, r13, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x22000040}, 0x4000011) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001640)={'vcan0\x00', <r14=>0x0})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001680)={0x0, <r15=>0x0}, &(0x7f00000016c0)=0xc)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001700)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e23, 0x1a2, 0x4e20, 0x7, 0xa, 0xa0, 0x0, 0x88, r14, r15}, {0xffffffffffffff42, 0x2, 0x1, 0xdd, 0x7, 0xc, 0x100000000, 0x8}, {0xffff, 0x6, 0x7, 0x8000000}, 0x37, 0x6e6bb2, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0x32}, 0x0, @in6=@mcast2, 0x3507, 0x3, 0x1, 0x2, 0x8000, 0x8001, 0x2}}, 0xe8) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000001840)={'sit0\x00', &(0x7f0000001800)={@private1, @empty, 0x17, 0x1f}})

568.800118ms ago: executing program 1 (id=760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/54, 0x36}, 0x4fb}], 0x1, 0x12020, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x5cb362efa994e0bc}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x0)

507.685814ms ago: executing program 1 (id=762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e0000004b79b9499775bd986361cfd5bc3cf2c633e035033d6999b5c7ef02"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180027800b0001006772657461e8b431000002800400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000060001a8030000a80050008000600000005000800f900000014000700fc0100000000000000000000000000000500080006000000040007002800028024000180080010000500000008000d007c779a3808000800c3060000080016000400000008000500", @ANYRES32=r9, @ANYBLOB="00002000df28fe13"], 0x90}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000250077b2c5d4994c0f66f7010000000000000000000adb4344f3bd2c92c889b199ac85d849f7c1830094645001988493a635bc91f663de21bbacc7651b00388bf8cc"], 0x1c}}, 0x200000c0)
r11 = socket$inet6(0xa, 0x2, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000036b4d4e400000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0xffffffffffffff88}}, 0x28000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0xfffffdfd)
r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x4004743c, &(0x7f00000002c0))
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r11, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x9e2}], 0x1, 0x1832b, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4)

378.127318ms ago: executing program 2 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2f6730f0540c36f77f4b012fad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5853ee6fda4f293d3f9fa1e52f"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "15b5b5cd8675944d7d6c9dc1dd"}, @NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40080}, 0x44000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x70}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800)
syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @multicast, @void, {@generic={0x88be, "cb8d51eb138b6d7d1c5815330b2cbaf6c65742a551aeac074249f6ae15c08419a834ecfa"}}}, &(0x7f0000000380)={0x1, 0x3, [0x79e, 0x3ce, 0x535, 0xcd4]})
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)=0x1ff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20800)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x210, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x60041001}, 0x4080)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0)
write$tun(r6, &(0x7f0000000780)={@void, @val={0x2, 0x80, 0x3, 0x7, 0x477, 0xf3}, @mpls={[{0x9}, {0x4}, {0x4, 0x0, 0x1}, {0xca4e}], @ipv6=@udp={0x0, 0x6, "e0629d", 0x208, 0x11, 0x1, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@hopopts={0x0, 0x1b, '\x00', [@generic={0x7, 0xd1, "47eab5488bf43d4fc6a0e9724d7732071ae94770da2d93f0b75d192c59e22a30f5cf93bdf18d47f77d4693c0881d20cd205d9f80cc827b9df9949779ea0c8fe529e2fd57cef2ebd4104726d5c625384dbb168c93b909fe24c8ffebec0d76b7bcb50e1883b54926ccc14aad847ac8a308d0007bb187e5fb7c8bb9a784eaae6adbeb43950e4a0e5a6f18395b92bd16ac5bb932a7d14eb4aadd10f40aa9b768b534576211457cbe8191ff92ed6031f0a476b18e0a7596d6067bdab12f55a31b50938c42bd54e205a38c71cdf15eb52c4b5026"}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x986}]}, @srh={0x2b, 0xe, 0x4, 0x7, 0x0, 0x50, 0x3, [@local, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2]}, @fragment={0x62, 0x0, 0x7, 0x1, 0x0, 0xc, 0x67}, @srh={0x87, 0x2, 0x4, 0x1, 0xa3, 0x30, 0x7, [@private2]}], {0x4e23, 0x4e20, 0x88, 0x0, @opaque="d3478cec9292b31e194223b165a8a2d4eea9d84272a9cd4d444ffe72c9e2318ba39d3516bcf6448029ddd964fe3c9ff75b5941070a3a1a8d5075a833045f8b971e371a608055bc0daf75f4065c86207724163e9ce7c5fd88796426777b3ef613d55a3b06d7b07a4040d30184d2cf7fdc4f191f26b553b823023703645108dab2"}}}}}, 0x24a)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff01, 0x5f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x84)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl1\x00', <r9=>0x0, 0x29, 0x5c, 0x9, 0xffff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x40, 0x5, 0xc6}})
sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={&(0x7f0000000c40), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3e0b81c2cbd34165, 0xffff}, {0xfff2, 0x3}, {0xffff, 0xfff1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0xc00)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000f80)={0x388, 0x37, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@generic="55f8060692", @typed={0x8, 0x9, 0x0, 0x0, @fd=r6}, @nested={0x54, 0xc2, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @u32=0x7}, @generic="180b91b969b0bcd46ce8a99462ae667ef756f21d8dede8a228ff42565e25bd9634047f1473ea757c80e11973e4f3d0ca36f75f4f6a9ac9d8e14cdd4afd511f0a8f5dfeaf", @nested={0x4, 0x1a}]}, @generic="1c385e705c0e7fe15377f777edea993935486b4669254a489d42e1f8ae94003874a64b0dc1fc6eeeb7de0a4b55ae257802b4fbe4751e4009d4c51656e592a28d44b821b1e81ddcff66655140180b439ca414c7865a9ac82d4c4535bbea776bff4d6d89", @generic="01e1a86fa21b7ee09698ac0791b585126f8af8df769296af7c7261efbbc8b6e367ea4be1a2b7d9734de6936e3f22098353668e333e62214467f2a4ac3eabd72f52ce4597d31d591b7eacb2c66353ed1c81a0c71ecf07bb11aba3e203807cc064ef0af17e469901554fac6aa060fd5412aa6767c442503c302215e24781c416f11509bf7d01a5be0666f828dcf29f1a979de7559791e7289efa61277114ef3be7eff3948d319e511d3a9f22e186fab3", @typed={0x8, 0x2b, 0x0, 0x0, @str=' \\-\x00'}, @nested={0x198, 0x81, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @u32=0xd8}, @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@loopback}, @typed={0x7f, 0x87, 0x0, 0x0, @binary="877f9a5d582d9a517f415004e2856b693b1b17a380d0548cf02e6c821251b6c3acc95bcb9506879fa9fa593adeacf036d3fb6ba22bc3f73aebf2126b31a75d954f66e6127f701940599745b19751dd639b96364c62e712caf62ae56b5d38e1df840c15e054098a23cd190d87e8b2cedfcddcc6b9e710f710a964da"}, @generic="e16c9473dd08036559e5c91a6955a50966bdb54e79df5e9b67456987af1b906d28c1f590c54ddca9f2b9576312e44681d7e57c52a1fb0b28f4433ac88c0a83aff9f5cd2bd300269ef86bdab8dfd4b8a0fa75f1629acaf9947036f8ad271bb074dd6cd1d69908b5be2a60ef8ae9f455f9020ada800bf1af76f2e4fb50d20b516fbadedc43ef9e3b2100bd36bcb070f9e5accae2fa9b0f92001442897989d0782a378a055b5fdb9fe29f54e485c74d9a39ca0964a05a1dde843b9de77f97cda21ff0d86b0891153753f635af10466ee4efea2f145ec5a6d52bd00245fe04db75254b9718f5d18a2d49d6c17d1864ca9664977b9fd9337f1cb9"]}, @nested={0xc, 0x4f, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @uid=r10}]}, @generic="97ba9d5d3a67926006e6c7ef6dd0e8940d7e44f0a569ed08d8c1a45d34ef155163ce1b81bdff6198ce910f7eb0df9b70b89bd62e218919baca0b7b53266e2af0de5d24c117fcfde391e0f1fd6f0d3c8f00942d84"]}, 0x388}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4008001}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x38dd1bbf4804fceb}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001500)=@req3={0x7, 0xb743, 0x5, 0x1, 0x6, 0x7, 0x7}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000001540)=""/4096, &(0x7f0000002540)=0x1000)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)={0x220, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7003a430}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "5ffd318dcaa257e8a375725dc6a71480fdf40180039348056da717db29cfcfc28d11b1cb9cbac7a95596e89babf72428c37e36656484dd8d2ced78e4e53ff937f064a4b601bb6c16f89a452ece71ce1d341fae1209cd9f4a6b1cd9f5c19028df9e8afcea4a5eee3150056ceb635648f85d25ac3e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ID={0x81, 0x3, "4812bc7f28c6b690a81475615deccc643af044cde69010288d1ae97ac4cb1b528c7e46b5c44b7898ae72bce909d06cf4529008daa504147c9e977750066cbf34dc65f0f3a07b52b4c9378f1185ed4f5cf7f1d15bb4a4ccab8380c54a5126d7a9d52ad18d50f287b59212031a1fda88272c7c8a5a078c113787d10605f9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

376.466562ms ago: executing program 0 (id=767):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r3=>0x0, 0x7800, 0x40, 0x7ff, 0xf0, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x68, 0x0, 0x6, 0x2b, 0x0, @private=0xa010100, @remote, {[@generic={0xd3, 0xa, "e715c180fe9142cb"}, @generic={0x88, 0xa, "fcdcaf14ff4e68bd"}, @end]}}}}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r4, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYRES8=r4, @ANYRES32=r6, @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r8=>0x0, 0x80, 0x1, 0x9, 0x5, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x1, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xcd, 0x1, 0xa, [{@private=0xa010100, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x36, 0x2, [{0x6, 0xe, "c46b9171fb88b19209a8c5a8"}, {0x5, 0xd, "cae027be6dcb845b83d84e"}, {0x1, 0x9, "7d7b2c19c1918a"}, {0x6, 0xc, "86c01a2f0a1742d9c7c6"}]}, @noop, @noop, @noop, @noop, @rr={0x7, 0x7, 0xb1, [@multicast2]}, @lsrr={0x83, 0x1b, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty, @multicast2, @multicast2, @rand_addr=0x64010102]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x64, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8000}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x64}}, 0x4810)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ip6gre0\x00')
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x125, 0x200]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40800)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x400000}]}}}]}, 0x44}}, 0x0)

374.587919ms ago: executing program 2 (id=768):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000600)='sample\x00', 0x7)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b104}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32], 0x138)
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="010000001e00060000084d74f9345ca1", 0x10)
close(r5)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400000000000000}]}, 0x24}}, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc)

374.052488ms ago: executing program 0 (id=769):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000090a01040000000000000000000020000900020073797a3100000000140000001000010000000000000000000084000a09eee832a7fa6f99d24f7160a1f1aa57209098ee3abcd0dab922175e0b6516b910d0e0dd588459babf5ad150f494326cf3c77a459873a401802a65535dc510cc167aa9d688d6ec4e68395fe220da6d03ab978a4e76ce546175cd2971dfb80cea00"/184], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x9}, 0xb, 0x0, 0x80008, 0x5, 0x8, 0x2, 0x9, 0xd, 0x9, 0x1, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008820}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r12 = socket(0x10, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRESDEC=r9], 0x44}, 0x1, 0x1000000}, 0x801) (async)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r13, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x2, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x8, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x18, 0x6, "024e381c5383233f847142704a01affad68f4886"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

290.327099ms ago: executing program 2 (id=770):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa0000000000000000000000007f0000010000000000000000000000000004000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe01000000000000000000000000e00000020000000000000000000000006c000000feffffff0200020000000000000000000000000000000000ac1414bb"], 0xec}, 0x1, 0x0, 0x0, 0x815}, 0x20000140)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

288.073628ms ago: executing program 0 (id=771):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000500000000000000cd850000080007000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x3}}], 0x1, 0x8000)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x28, {0x2, 0x4e22, @rand_addr=0x64010100}, 'bridge0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x88)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000700000000062bd2c2a7de3070048229e010f54cc6540c48a6652383d68546f414a47fa41913fef22843e06734f0cec78d0fc26f5fc363adf51cae30d8969272e0d1b8beedab2d65beadcb010aa3795506b17af0461556b5984f446fff3e42d0e376879259a0cb0873c0072265d528e64814dffa5fc24a09a081b910b9771ec4e164e20b867769f06f089a8d0b7a8a1837067d985f9e9a424f599fddab0439a9edf0eb8c3d367a3140b37d391b07d1167d1faf3cce217db4d7683a0a7c1e03b063705d4920171c2f843fd7368a57cd8b315e66993a50fdb062072d8347207ccb43988177807cb76d70737a95b34684703972bbe92f77bbcd2b9de0921b13a5c4a8afe2b62ed15542b4f83b7c1dbff7e002920ff5334d516a78196ee3dafd0da4b926906dbdc4b1fa7d71af2f9e906c3804a5a84510a8509a29035590a17844673f0dbda184da92c7936aca4129225ba5107083ee9a4d0f1d503511a1ee9c21c31213a1898d9da5d5d48c3378611f44bd556faf756a98787afb5f55be22b64120b6608b4c08c8ae7d4af32c71dcb7a4f17d8"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000140)=""/192, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000b00)={0x100, {{0x2, 0x4e22, @local}}, 0x0, 0x4, [{{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}]}, 0x290)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000280), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x2ec, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x1f8, 0xfc, 0x0, 0x1, [@nested={0x1e5, 0x40, 0x0, 0x1, [@generic="60df6956522d73b6e5f0cab8853fa5a0f5013b919321fa9afee2006a69489622a3afd2000f87136863bd82e28c84ebb676acd95bd5324ce6b21a1cab696feabdf7524ab216dbcdafb7a30ef0c2c72f00fbbbde084d51d7b91e5e41e187c4afbd184a364e26103e2949ba695e8f74361f2e6408b12c2f53b279154d407d9713607930b75565fd35546aaecb9a8ec43a6d27ffbfaf530d6431ce66122632157ac528f07587e3ae7e830163dbf33882acb9a954e0cc96c5c8acdae514c35461b447e0abf1091c8124c4d10aebf41c534c805ee64f4e3e47bdf9c67811621d1ba84c552b54b80117706bf4f6b1f4b12acb39", @generic="23ec6f5f6c866bf89c096694e090b62cf8b640cebc0d4cd767b54d10f7dd9a98a538338b07e3f9291c775f00d9af00b7084be2d88469231d98ec3a6f9cdd0c80c62243a2e6ef88e9ac53f6ed454f827ff9dae122c5c2fd26acde71d953156afe9b1ae07996416798cf10cf6c83785c11ea917876394ac31398ae7a92f47a5171033904ad87c2412330405e7b3f3f740c132bfb2e64ee19a6c41c92fa2b0d1bf8683463700238dfcb7c0f7d8d23baf63a5672f0963ffd1c14f3022e3ea4f615aaf000eb0f1a04c9da8e6b0424970eccc26f1922f745ef58ec6316f34c85fe9940945c5ddaaf500d09d6f56e545e4f7757a6"]}, @nested={0xc, 0x128, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @uid=0xee01}]}]}, @nested={0xd0, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="eaeaeeb322b8c4edf9c655863782370adf1a5130be11a50e6ec0db7e45784c38671996e6d7b17a72ba56fd139b883331a2307cffa6a2d6843b2be68b077bb541e2ebf291eafa686239327ec151c88e965f870c201e0fb6706284b3eda40b8c13751c4b2d7de0449d36a44d52808b4d6d11444423b0b42b15f2ec19d0e14678e2e07e0bc51034074ff17e58ce0e44011327a546d08e433e7d89df98ff88a749a9b59e3efe9bb7b2ec56ee2c64d0003f1558d46e286a03a12353fb177eee9f6cd4705a3d99"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r7}]}, 0x2ec}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

287.298814ms ago: executing program 2 (id=772):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfdfb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r5, 0x0, 0x8040)
close(r5)
getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2717, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40040844)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x49a400, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x307)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x401, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x460c5}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r10)

150.48164ms ago: executing program 0 (id=773):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32)
r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) (async)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a"], 0x184}}, 0x0) (async)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x1, 0x3) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x14) (rerun: 32)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x515, @mcast1, 0x9, 0x2}, 0x20)
syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20)

150.012255ms ago: executing program 2 (id=774):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x9}, 0x8)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189a42, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(r2)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000040)=0x10) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x9}, 0x8) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189a42, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) (async)
close(r2) (async)

765.244µs ago: executing program 0 (id=775):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128062726964676500000400028008001f000700004000000000"], 0x3c}}, 0x0)

0s ago: executing program 0 (id=776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
pipe(&(0x7f0000000300))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
pipe(&(0x7f00000003c0))
socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10)
r3 = accept(0xffffffffffffffff, &(0x7f0000000280)=@nfc, &(0x7f0000000100)=0x80)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000803}, 0x48044)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x0, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYRES64=r5, @ANYRESDEC=r7], 0x7c}}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13493' (ED25519) to the list of known hosts.
syzkaller login: [   41.192970][ T5770] cgroup: Unknown subsys name 'net'
[   41.281996][ T5770] cgroup: Unknown subsys name 'cpuset'
[   41.286817][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.080723][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.755788][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.758642][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.761673][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.764507][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.766990][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.780893][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.784505][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.787588][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.791318][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.794724][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.800916][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.806775][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.819432][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.830200][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.833508][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.954856][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   47.076606][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.088770][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.092338][ T5842] bridge_slave_0: entered allmulticast mode
[   47.095688][ T5842] bridge_slave_0: entered promiscuous mode
[   47.101090][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.104012][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.106918][ T5842] bridge_slave_1: entered allmulticast mode
[   47.111310][ T5842] bridge_slave_1: entered promiscuous mode
[   47.122252][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   47.135712][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.143957][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.147077][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   47.208128][ T5842] team0: Port device team_slave_0 added
[   47.228913][ T5842] team0: Port device team_slave_1 added
[   47.273594][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.276405][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.286983][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.300598][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.303523][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.306418][ T5850] bridge_slave_0: entered allmulticast mode
[   47.309661][ T5850] bridge_slave_0: entered promiscuous mode
[   47.313454][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.316228][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.327242][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.332047][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.334955][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.337578][ T5846] bridge_slave_0: entered allmulticast mode
[   47.340282][ T5846] bridge_slave_0: entered promiscuous mode
[   47.343347][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.345695][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.348079][ T5850] bridge_slave_1: entered allmulticast mode
[   47.350990][ T5850] bridge_slave_1: entered promiscuous mode
[   47.357594][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.361323][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.364124][ T5846] bridge_slave_1: entered allmulticast mode
[   47.366592][ T5846] bridge_slave_1: entered promiscuous mode
[   47.385319][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.408461][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.413701][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.419746][ T5842] hsr_slave_0: entered promiscuous mode
[   47.421967][ T5842] hsr_slave_1: entered promiscuous mode
[   47.426587][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.457485][ T5850] team0: Port device team_slave_0 added
[   47.462280][ T5850] team0: Port device team_slave_1 added
[   47.471040][ T5846] team0: Port device team_slave_0 added
[   47.490818][ T5846] team0: Port device team_slave_1 added
[   47.493402][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.495885][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.505030][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.516913][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.519861][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.531097][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.553439][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.555702][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.564518][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.568986][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.571442][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.579753][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.615585][ T5850] hsr_slave_0: entered promiscuous mode
[   47.617770][ T5850] hsr_slave_1: entered promiscuous mode
[   47.620289][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   47.622090][ T5850] Cannot create hsr debugfs directory
[   47.658619][ T5846] hsr_slave_0: entered promiscuous mode
[   47.661900][ T5846] hsr_slave_1: entered promiscuous mode
[   47.663939][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   47.665835][ T5846] Cannot create hsr debugfs directory
[   47.729894][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.743191][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.755607][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.769754][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.804555][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.806848][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.809320][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.811608][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.830616][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.834729][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.839824][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.844288][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.872351][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.874806][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.877447][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.879721][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.893932][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.898806][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.907455][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.912275][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.928809][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.943301][  T188] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.946951][  T188] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.952556][  T188] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.956015][  T188] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.965451][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.976433][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.978662][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.982154][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.984436][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.998808][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.020783][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   48.029761][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.032319][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.038792][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.041567][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.072571][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.093864][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   48.101157][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.103573][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.115815][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.118000][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.155928][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.195511][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.203062][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.241249][ T5842] veth0_vlan: entered promiscuous mode
[   48.244554][ T5850] veth0_vlan: entered promiscuous mode
[   48.251115][ T5842] veth1_vlan: entered promiscuous mode
[   48.263166][ T5850] veth1_vlan: entered promiscuous mode
[   48.278488][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.287111][ T5842] veth0_macvtap: entered promiscuous mode
[   48.293065][ T5842] veth1_macvtap: entered promiscuous mode
[   48.300444][ T5850] veth0_macvtap: entered promiscuous mode
[   48.310790][ T5850] veth1_macvtap: entered promiscuous mode
[   48.320945][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.326914][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.338537][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.343284][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.347351][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.354199][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.357204][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.366663][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.371768][ T5846] veth0_vlan: entered promiscuous mode
[   48.385400][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.390651][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.394030][ T5846] veth1_vlan: entered promiscuous mode
[   48.396853][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.400903][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.457339][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.458271][ T5846] veth0_macvtap: entered promiscuous mode
[   48.460266][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.464909][ T5846] veth1_macvtap: entered promiscuous mode
[   48.485697][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.488267][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.491445][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.495705][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.498538][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.506716][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.526549][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.536564][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.540700][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.543997][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.544123][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.551530][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.561462][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.600269][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.602979][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.628567][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.638913][  T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.644967][  T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.645456][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.671200][ T5913] netlink: 'syz.0.1': attribute type 5 has an invalid length.
[   48.676322][ T5881] IPVS: starting estimator thread 0...
[   48.694940][ T5909] ieee802154 phy0 wpan0: encryption failed: -22
[   48.706111][ T5916] tipc: Started in network mode
[   48.707831][ T5916] tipc: Node identity 7211f1c06869, cluster identity 4711
[   48.714481][ T5916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.722370][ T5918] Zero length message leads to an empty skb
[   48.722768][ T5916] syzkaller0: entered promiscuous mode
[   48.726508][ T5916] syzkaller0: entered allmulticast mode
[   48.740772][ T5916] tipc: Resetting bearer <eth:syzkaller0>
[   48.744427][ T5915] tipc: Resetting bearer <eth:syzkaller0>
[   48.747959][ T5915] tipc: Disabling bearer <eth:syzkaller0>
[   48.769438][ T5914] IPVS: using max 93 ests per chain, 223200 per kthread
[   48.866616][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   48.870441][ T5849] Bluetooth: hci2: command tx timeout
[   48.873333][ T5844] Bluetooth: hci1: command tx timeout
[   48.875477][ T5844] Bluetooth: hci0: command tx timeout
[   48.878690][ T5920] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5'.
[   48.982511][ T5924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'.
[   48.991275][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   49.010150][ T5924] hsr_slave_1 (unregistering): left promiscuous mode
[   49.503698][ T5931] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.588532][ T5938] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   49.772425][ T5942] pimreg: entered allmulticast mode
[   49.778100][ T5942] pimreg: left allmulticast mode
[   49.839221][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'.
[   49.842683][ T5943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12'.
[   49.860470][ T5943] bond1: entered promiscuous mode
[   49.862582][ T5943] bond1: entered allmulticast mode
[   49.864987][ T5943] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.895400][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.906965][ T5946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.233411][ T5953] team0: entered promiscuous mode
[   50.235193][ T5953] team_slave_0: entered promiscuous mode
[   50.237453][ T5953] team_slave_1: entered promiscuous mode
[   50.240472][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   50.247139][ T5953] team0 (unregistering): left promiscuous mode
[   50.251222][ T5953] team_slave_0: left promiscuous mode
[   50.253401][ T5953] team_slave_1: left promiscuous mode
[   50.258761][ T5953] team0 (unregistering): Port device team_slave_0 removed
[   50.263919][ T5953] team0 (unregistering): Port device team_slave_1 removed
[   50.416135][ T5958] netlink: 'syz.1.15': attribute type 39 has an invalid length.
[   50.949261][ T5844] Bluetooth: hci1: command tx timeout
[   50.949301][ T5849] Bluetooth: hci0: command tx timeout
[   50.951487][ T5848] Bluetooth: hci2: command tx timeout
[   51.534043][ T5946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.922496][ T5965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.926335][ T5964] tipc: Resetting bearer <eth:syzkaller0>
[   51.974391][ T5964] tipc: Disabling bearer <eth:syzkaller0>
[   51.992136][ T5946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.049472][ T5946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.133663][ T5973] netlink: 'syz.2.19': attribute type 1 has an invalid length.
[   52.150869][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.155850][ T5737] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.164901][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.176288][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.190553][ T5980] netlink: 'syz.1.21': attribute type 9 has an invalid length.
[   52.193960][ T5980] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   52.235289][ T5985] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.302538][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.305050][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.325333][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.351998][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.356994][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.413565][ T5985] : entered promiscuous mode
[   52.417302][ T5737] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.422555][ T5737] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.431583][ T5737] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.434913][ T5737] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.528636][ T6011] netlink: 'syz.2.29': attribute type 5 has an invalid length.
[   52.624192][ T6030] ip6tnl2: entered promiscuous mode
[   52.626994][ T6030] ip6tnl2: entered allmulticast mode
[   52.630740][ T6030] team0: Device ip6tnl2 is of different type
[   52.922669][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   52.924945][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.927458][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.930090][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.932832][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.935815][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.938936][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.942025][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.944534][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.947018][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.949584][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.952199][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.955181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.957718][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.960388][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.962928][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.965433][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.967924][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.970612][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.973494][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.976600][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.979642][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.982377][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.985413][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.988561][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.991734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   52.994930][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   52.998015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   53.029493][ T5848] Bluetooth: hci1: command tx timeout
[   53.029651][ T5849] Bluetooth: hci2: command tx timeout
[   53.033375][ T5844] Bluetooth: hci0: command tx timeout
[   53.108639][ T6057] bridge1: entered promiscuous mode
[   53.114058][ T6062] netlink: 'syz.2.41': attribute type 9 has an invalid length.
[   53.116856][ T6057] bridge1: entered allmulticast mode
[   53.203545][ T6076] netlink: 'syz.2.44': attribute type 5 has an invalid length.
[   53.420282][ T6095] pimreg3: entered allmulticast mode
[   53.648219][ T6114] __nla_validate_parse: 25 callbacks suppressed
[   53.648233][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'.
[   53.674412][ T6114] netlink: 'syz.1.51': attribute type 6 has an invalid length.
[   53.702375][ T6117] vti0: entered promiscuous mode
[   53.766699][ T6125] bridge_slave_0: left allmulticast mode
[   53.768492][ T6125] bridge_slave_0: left promiscuous mode
[   53.771320][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.775609][ T6125] bridge_slave_1: left allmulticast mode
[   53.777442][ T6125] bridge_slave_1: left promiscuous mode
[   53.779746][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.784239][ T6125] bond0: (slave bond_slave_0): Releasing backup interface
[   53.788280][ T6125] bond0: (slave bond_slave_1): Releasing backup interface
[   53.796378][ T6125] team0: Port device team_slave_0 removed
[   53.801651][ T6125] team0: Port device team_slave_1 removed
[   53.803787][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.806534][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.812356][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.814721][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.825692][ T6125] syz.1.54 (6125) used greatest stack depth: 20080 bytes left
[   53.866972][ T6129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'.
[   53.873012][ T6129] netlink: 224 bytes leftover after parsing attributes in process `syz.1.55'.
[   53.899982][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[   53.904171][ T6134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   53.904202][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'.
[   53.913363][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'.
[   53.915570][ T6134] xfrm1: entered promiscuous mode
[   53.918257][ T6134] xfrm1: entered allmulticast mode
[   53.985480][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   54.032237][ T6146] pim6reg1: entered promiscuous mode
[   54.034273][ T6146] pim6reg1: entered allmulticast mode
[   54.490448][ T6165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   54.495013][ T6165] sctp: [Deprecated]: syz.0.64 (pid 6165) Use of int in max_burst socket option deprecated.
[   54.495013][ T6165] Use struct sctp_assoc_value instead
[   54.502084][ T6165] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   54.505752][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'.
[   54.645742][ T6177] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   54.673121][ T6177] bond2 (unregistering): Released all slaves
[   54.832955][ T6187] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   54.857148][ T6187] 8021q: adding VLAN 0 to HW filter on device team0
[   54.861619][ T6187] bond0: (slave team0): Enslaving as an active interface with an up link
[   54.871322][ T6191] vlan2: entered allmulticast mode
[   54.873010][ T6191] bond0: entered allmulticast mode
[   54.966206][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   55.035927][ T6206] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   55.041927][ T6208] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[   55.050724][ T6206] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.109637][ T5849] Bluetooth: hci2: command tx timeout
[   55.110013][ T5848] Bluetooth: hci1: command tx timeout
[   55.111702][ T5844] Bluetooth: hci0: command tx timeout
[   55.129852][ T6206] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.132169][ T6206] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[   55.136250][ T6206] bond2: (slave vcan0): Error -95 calling set_mac_address
[   55.167248][ T6215] bond0: (slave team0): Releasing backup interface
[   55.172566][ T6215] bridge_slave_0: left allmulticast mode
[   55.174435][ T6215] bridge_slave_0: left promiscuous mode
[   55.176453][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.180896][ T6215] bridge_slave_1: left allmulticast mode
[   55.182914][ T6215] bridge_slave_1: left promiscuous mode
[   55.184780][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.191585][ T6215] bond0: (slave bond_slave_0): Releasing backup interface
[   55.195576][ T6215] bond0: (slave bond_slave_1): Releasing backup interface
[   55.202183][ T6215] team0: Port device team_slave_0 removed
[   55.206099][ T6215] team0: Port device team_slave_1 removed
[   55.208385][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.212036][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.216637][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.219829][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.228532][ T6212] tipc: Started in network mode
[   55.230993][ T6212] tipc: Node identity 867fad512c6d, cluster identity 4711
[   55.234125][ T6212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.263725][ T6216] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   55.273549][ T6206] syzkaller0: entered promiscuous mode
[   55.275391][ T6206] syzkaller0: entered allmulticast mode
[   55.283042][ T6206] tipc: Resetting bearer <eth:syzkaller0>
[   55.291582][ T6206] gretap1: entered promiscuous mode
[   55.335828][ T6205] tipc: Resetting bearer <eth:syzkaller0>
[   55.338920][ T6205] tipc: Disabling bearer <eth:syzkaller0>
[   55.346269][ T6220] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   55.348691][ T6220] macsec1: entered promiscuous mode
[   55.352676][ T6220] macsec1: entered allmulticast mode
[   55.354483][ T6220] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   55.388264][ T6224] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   55.405346][ T6224] 8021q: adding VLAN 0 to HW filter on device bond3
[   55.416184][ T6224] bond3: (slave wlan0): Enslaving as an active interface with a down link
[   55.427181][ T6224] vlan3: entered allmulticast mode
[   55.428844][ T6224] veth1: entered allmulticast mode
[   55.432290][ T6224] veth1: entered promiscuous mode
[   55.434535][ T6224] veth1: left promiscuous mode
[   55.437119][ T6224] bond3: (slave vlan3): making interface the new active one
[   55.439604][ T6224] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   55.445718][ T6224] veth1: entered promiscuous mode
[   55.447763][ T6224] vlan3: entered promiscuous mode
[   55.450129][ T6224] bond3: (slave vlan3): Enslaving as an active interface with an up link
[   55.836948][ T6238] netlink: 'syz.2.84': attribute type 11 has an invalid length.
[   55.853643][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   56.006593][ T6244] netlink: 'syz.2.86': attribute type 2 has an invalid length.
[   56.358485][ T6251] pimreg: entered allmulticast mode
[   56.361764][ T6251] pimreg: left allmulticast mode
[   56.387258][ T6253] vlan2: entered allmulticast mode
[   56.393327][ T6253] hsr0: entered allmulticast mode
[   56.395479][ T6253] hsr_slave_0: entered allmulticast mode
[   56.397823][ T6253] hsr_slave_1: entered allmulticast mode
[   56.430635][ T6251] bond4: entered promiscuous mode
[   56.432769][ T6251] bond4: entered allmulticast mode
[   56.434668][ T6251] 8021q: adding VLAN 0 to HW filter on device bond4
[   56.464870][ T6256] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   56.578998][ T6268] netlink: 'syz.0.95': attribute type 4 has an invalid length.
[   56.884524][ T6298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   56.898400][ T6299] vlan2: entered promiscuous mode
[   56.901802][ T6299] bond0: entered promiscuous mode
[   56.903861][ T6299] bond_slave_0: entered promiscuous mode
[   56.906324][ T6299] bond_slave_1: entered promiscuous mode
[   56.923149][ T6298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   56.964378][ T6301] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.012005][ T6301] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.042566][ T6301] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.101562][ T6301] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.159589][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.167900][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.174812][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.181853][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.234019][ T6318] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   57.250709][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.292067][ T6321] netlink: 'syz.0.109': attribute type 20 has an invalid length.
[   57.303916][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.314594][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.318591][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.327467][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.420029][ T6338] bridge0: port 1(vlan2) entered blocking state
[   57.422377][ T6338] bridge0: port 1(vlan2) entered disabled state
[   57.424553][ T6338] vlan2: entered allmulticast mode
[   57.426166][ T6338] bridge0: entered allmulticast mode
[   57.428680][ T6338] vlan2: left allmulticast mode
[   57.431520][ T6338] bridge0: left allmulticast mode
[   57.575915][ T6345] syz_tun: entered promiscuous mode
[   57.738874][ T6355] tipc: Started in network mode
[   57.743136][ T6355] tipc: Node identity 62806e2985f7, cluster identity 4711
[   57.746296][ T6355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.789337][ T6355] tipc: Resetting bearer <eth:syzkaller0>
[   57.794114][ T6354] tipc: Disabling bearer <eth:syzkaller0>
[   58.014004][ T6378] gretap1: entered promiscuous mode
[   58.160173][ T6383] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   58.218410][ T6388] bond2: (slave geneve2): making interface the new active one
[   58.221889][ T6388] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   58.224871][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   58.231772][ T6388] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.249329][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   58.253485][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   58.260853][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   58.405221][ T6393] vlan2: entered promiscuous mode
[   58.451916][ T5846] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   58.455230][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   58.455242][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.455248][ T5846] Call Trace:
[   58.455264][ T5846]  <TASK>
[   58.455269][ T5846]  dump_stack_lvl+0x189/0x250
[   58.455286][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.455295][ T5846]  ? __pfx__printk+0x10/0x10
[   58.455307][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455318][ T5846]  dump_header+0xd3/0x480
[   58.455329][ T5846]  oom_kill_process+0x387/0x920
[   58.455339][ T5846]  out_of_memory+0xf09/0x12a0
[   58.455347][ T5846]  ? mem_cgroup_iter+0x3b/0x460
[   58.455356][ T5846]  ? __pfx_out_of_memory+0x10/0x10
[   58.455364][ T5846]  mem_cgroup_out_of_memory+0x145/0x240
[   58.455373][ T5846]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   58.455382][ T5846]  ? _raw_spin_unlock+0x28/0x50
[   58.455392][ T5846]  ? memcg1_oom_prepare+0x37f/0x450
[   58.455403][ T5846]  try_charge_memcg+0xdff/0x1290
[   58.455415][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455424][ T5846]  ? __pfx_try_charge_memcg+0x10/0x10
[   58.455433][ T5846]  ? rcu_needs_cpu+0xa1/0xb0
[   58.455439][ T5846]  ? xa_load+0x60/0x210
[   58.455448][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455455][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455462][ T5846]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   58.455472][ T5846]  charge_memcg+0x9f/0x180
[   58.455481][ T5846]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   58.455490][ T5846]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   58.455500][ T5846]  __read_swap_cache_async+0x28c/0x510
[   58.455512][ T5846]  swap_cluster_readahead+0x4cf/0x5f0
[   58.455520][ T5846]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   58.455529][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455535][ T5846]  ? filemap_get_entry+0xad/0x2f0
[   58.455543][ T5846]  ? get_vma_policy+0x27c/0x3c0
[   58.455556][ T5846]  swapin_readahead+0x17d/0xb50
[   58.455563][ T5846]  ? __pfx_filemap_get_entry+0x10/0x10
[   58.455571][ T5846]  ? get_swap_device_info+0x1c/0x2b0
[   58.455578][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455584][ T5846]  ? __pfx_swapin_readahead+0x10/0x10
[   58.455592][ T5846]  ? __filemap_get_folio+0x9a6/0xaf0
[   58.455600][ T5846]  ? swap_cache_get_folio+0xae/0x3b0
[   58.455608][ T5846]  do_swap_page+0x525/0x5ac0
[   58.455618][ T5846]  ? filemap_map_pages+0x1374/0x1740
[   58.455628][ T5846]  ? ___pte_offset_map+0x29/0x250
[   58.455639][ T5846]  ? lock_acquire+0x5f/0x360
[   58.455651][ T5846]  ? do_swap_page+0x184/0x5ac0
[   58.455658][ T5846]  ? __pfx_do_swap_page+0x10/0x10
[   58.455666][ T5846]  ? __pfx_filemap_map_pages+0x10/0x10
[   58.455673][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455680][ T5846]  ? __pfx_default_wake_function+0x10/0x10
[   58.455692][ T5846]  ? ___pte_offset_map+0x45/0x250
[   58.455700][ T5846]  ? ___pte_offset_map+0x1cf/0x250
[   58.455709][ T5846]  ? pte_offset_map_rw_nolock+0xea/0x160
[   58.455719][ T5846]  __handle_mm_fault+0xe55/0x5440
[   58.455730][ T5846]  ? __pfx___handle_mm_fault+0x10/0x10
[   58.455739][ T5846]  ? lock_release+0x4b/0x3e0
[   58.455751][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455757][ T5846]  ? lock_vma_under_rcu+0xdf/0x3d0
[   58.455767][ T5846]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   58.455778][ T5846]  handle_mm_fault+0x40a/0x8e0
[   58.455789][ T5846]  do_user_addr_fault+0xa81/0x1390
[   58.455802][ T5846]  ? rcu_is_watching+0x15/0xb0
[   58.455809][ T5846]  ? trace_page_fault_user+0x84/0x1e0
[   58.455819][ T5846]  exc_page_fault+0x76/0xf0
[   58.455831][ T5846]  asm_exc_page_fault+0x26/0x30
[   58.455838][ T5846] RIP: 0033:0x7fb0ecc65bf7
[   58.455848][ T5846] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a8 fb e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 fa e8 00 48 01 d1 39 7c 24
[   58.455855][ T5846] RSP: 002b:00007ffe0ada8930 EFLAGS: 00010206
[   58.455863][ T5846] RAX: 0000001b31c24000 RBX: 000000000000006d RCX: 000000000000e290
[   58.455868][ T5846] RDX: 0000000004b3b0d4 RSI: 00007ffe0ada89c0 RDI: 000000000000001d
[   58.455873][ T5846] RBP: 00007ffe0ada896c R08: 0000000011efb73e R09: 7fffffffffffffff
[   58.455878][ T5846] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[   58.455883][ T5846] R13: 00000000000927c0 R14: 000000000000e075 R15: 00007ffe0ada89c0
[   58.455891][ T5846]  </TASK>
[   58.455895][ T5846] memory: usage 307200kB, limit 307200kB, failcnt 378
[   58.599195][ T5846] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[   58.601646][ T5846] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[   58.603919][ T5846] Memory cgroup stats for /syz1:
[   58.603976][ T5846] cache 0
[   58.606468][ T5846] rss 0
[   58.607420][ T5846] rss_huge 0
[   58.608498][ T5846] shmem 0
[   58.609925][ T5846] mapped_file 0
[   58.611006][ T5846] dirty 0
[   58.612057][ T5846] writeback 0
[   58.613117][ T5846] workingset_refault_anon 71
[   58.614625][ T5846] workingset_refault_file 1
[   58.616461][ T5846] swap 176128
[   58.617672][ T5846] swapcached 36864
[   58.619003][ T5846] pgpgin 2236
[   58.620265][ T5846] pgpgout 2227
[   58.621337][ T5846] pgfault 8224
[   58.622433][ T5846] pgmajfault 58
[   58.623538][ T5846] inactive_anon 0
[   58.624779][ T5846] active_anon 36864
[   58.626010][ T5846] inactive_file 0
[   58.627192][ T5846] active_file 0
[   58.628298][ T5846] unevictable 0
[   58.629637][ T5846] hierarchical_memory_limit 314572800
[   58.631330][ T5846] hierarchical_memsw_limit 9223372036854771712
[   58.633395][ T5846] total_cache 0
[   58.634564][ T5846] total_rss 0
[   58.635815][ T5846] total_rss_huge 0
[   58.637116][ T5846] total_shmem 0
[   58.638213][ T5846] total_mapped_file 0
[   58.639754][ T5846] total_dirty 0
[   58.640863][ T5846] total_writeback 0
[   58.642112][ T5846] total_workingset_refault_anon 71
[   58.643779][ T5846] total_workingset_refault_file 1
[   58.645344][ T5846] total_swap 176128
[   58.646535][ T5846] total_swapcached 36864
[   58.647928][ T5846] total_pgpgin 2236
[   58.649439][ T5846] total_pgpgout 2227
[   58.651003][ T5846] total_pgfault 8224
[   58.652578][ T5846] total_pgmajfault 58
[   58.654092][ T5846] total_inactive_anon 0
[   58.655593][ T5846] total_active_anon 36864
[   58.657173][ T5846] total_inactive_file 0
[   58.658829][ T5846] total_active_file 0
[   58.660604][ T5846] total_unevictable 0
[   58.662233][ T5846] anon_cost 0
[   58.663575][ T5846] file_cost 0
[   58.664941][ T5846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.114,pid=6341,uid=0
[   58.670946][ T5846] Memory cgroup out of memory: Killed process 6341 (syz.1.114) total-vm:101952kB, anon-rss:1116kB, file-rss:23396kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   58.790524][ T6402] vlan0: entered promiscuous mode
[   58.794003][ T6402] batadv0: entered promiscuous mode
[   58.830639][ T6404] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   58.836971][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   58.837309][ T6404] 8021q: adding VLAN 0 to HW filter on device bond3
[   58.850693][ T6404] veth3: entered promiscuous mode
[   58.854200][ T6404] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   58.857685][ T6404] __nla_validate_parse: 24 callbacks suppressed
[   58.857696][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[   58.915748][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'.
[   58.943528][ T6412] bridge2: port 1(veth3) entered blocking state
[   58.945830][ T6412] bridge2: port 1(veth3) entered disabled state
[   58.948173][ T6412] veth3: entered allmulticast mode
[   58.950478][ T5907] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   58.956561][ T6412] veth3: entered promiscuous mode
[   58.969383][ T6412] bridge2: port 2(veth0_to_bond) entered blocking state
[   58.973934][ T6412] bridge2: port 2(veth0_to_bond) entered disabled state
[   58.985384][ T6412] veth0_to_bond: entered allmulticast mode
[   58.997223][ T6412] veth0_to_bond: entered promiscuous mode
[   59.016591][ T6412] vlan0: entered allmulticast mode
[   59.018197][ T6412] veth1: entered allmulticast mode
[   59.020511][ T6412] bridge2: port 3(vlan0) entered blocking state
[   59.023106][ T6412] bridge2: port 3(vlan0) entered disabled state
[   59.026559][ T6412] vlan0: entered promiscuous mode
[   59.031437][ T6412] veth1: entered promiscuous mode
[   59.037911][ T6418] vlan2: entered allmulticast mode
[   59.040974][ T6418] bond0: entered allmulticast mode
[   59.111269][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'.
[   59.116578][ T6422] IPVS: length: 49 != 24
[   59.128281][ T6424] pim6reg9: entered allmulticast mode
[   59.378777][ T6445] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[   59.382653][ T6445] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[   59.391315][ T6445] bond6: (slave vcan0): making interface the new active one
[   59.394762][ T6445] bond6: (slave vcan0): Enslaving as an active interface with an up link
[   59.408044][ T6445] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[   59.414666][ T6445] bond6: (slave vcan1): Enslaving as a backup interface with an up link
[   59.490129][ T6453] delete_channel: no stack
[   59.569608][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'.
[   59.573526][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'.
[   59.649685][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'.
[   59.677314][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'.
[   60.007760][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[   60.035161][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[   60.154416][ T6484] : entered promiscuous mode
[   60.236594][ T6490] netlink: 256 bytes leftover after parsing attributes in process `syz.2.157'.
[   60.267175][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.269904][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.272840][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.317392][ T6490] infiniband syz0: set down
[   60.318961][  T793] wlan1 speed is unknown, defaulting to 1000
[   60.319863][ T6490] infiniband syz0: added wlan1
[   60.344019][ T6490] RDS/IB: syz0: added
[   60.345497][ T6490] smc: adding ib device syz0 with port count 1
[   60.347576][ T6490] smc:    ib device syz0 port 1 has pnetid 
[   60.349770][    T9] wlan1 speed is unknown, defaulting to 1000
[   60.352198][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.402213][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.455376][ T6490] wlan1 speed is unknown, defaulting to 1000
[   60.555272][ T6497] validate_nla: 16 callbacks suppressed
[   60.555307][ T6497] netlink: 'syz.1.159': attribute type 3 has an invalid length.
[   60.563178][ T6497] netlink: 'syz.1.159': attribute type 3 has an invalid length.
[   60.652368][ T6500] netlink: 'syz.1.160': attribute type 10 has an invalid length.
[   60.657270][ T6500] batman_adv: batadv0: Adding interface: virt_wifi0
[   60.658821][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ab50800: rx timeout, send abort
[   60.660326][ T6500] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.673590][ T6500] batman_adv: batadv0: Interface activated: virt_wifi0
[   60.686457][ T6500] macsec1: entered promiscuous mode
[   60.688607][ T6500] macsec1: entered allmulticast mode
[   61.163094][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ab50800: abort rx timeout. Force session deactivation
[   61.240597][ T6511] macsec1: entered promiscuous mode
[   61.242442][ T6511] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   61.244766][ T6511] macsec1: entered allmulticast mode
[   61.246516][ T6511] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   61.324700][ T6534] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   61.393628][ T6545] 8021q: adding VLAN 0 to HW filter on device bond3
[   61.397091][ T6545] bond3: entered promiscuous mode
[   61.399470][ T6545] bond0: (slave bond3): Enslaving as an active interface with an up link
[   61.521212][ T5844] Bluetooth: hci2: command tx timeout
[   61.746894][ T6582] sctp: [Deprecated]: syz.0.182 (pid 6582) Use of int in maxseg socket option.
[   61.746894][ T6582] Use struct sctp_assoc_value instead
[   61.790590][ T6584] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   61.863606][ T6584] batadv_slave_0: entered promiscuous mode
[   62.267375][ T6600] wlan1 speed is unknown, defaulting to 1000
[   62.332551][ T1272] cfg80211: failed to load regulatory.db
[   62.723346][ T6632] syz_tun: entered allmulticast mode
[   62.734279][ T6632] dvmrp8: entered allmulticast mode
[   62.751481][ T6631] syz_tun: left allmulticast mode
[   62.753639][ T6631] dvmrp8: left allmulticast mode
[   62.838054][ T6640] 8021q: adding VLAN 0 to HW filter on device bond4
[   62.848455][ T6639] macvlan2: entered promiscuous mode
[   62.857955][ T6639] macvlan2: entered allmulticast mode
[   62.860323][ T6639] bond4: entered promiscuous mode
[   62.862187][ T6639] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.865424][ T6639] bond4: left promiscuous mode
[   63.498502][ T6677] syzkaller0: entered allmulticast mode
[   63.502462][ T6677] syzkaller0 (unregistering): left allmulticast mode
[   63.653972][ T6681] gretap1: entered promiscuous mode
[   63.656381][ T6681] gretap1: entered allmulticast mode
[   63.817107][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.819710][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.822157][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.824643][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.827084][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.829746][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.832642][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.835078][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.837427][ T6702] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.982800][ T6718] bond6: option mode: unable to set because the bond device has slaves
[   63.997652][ T6718] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   64.001193][ T6718] batman_adv: batadv0: Removing interface: virt_wifi0
[   64.007101][ T6718] bond3: (slave wlan0): Releasing active interface
[   64.009650][ T6718] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   64.018919][ T6718] bond3: (slave vlan3): Releasing active interface
[   64.022736][ T6718] vlan3: left promiscuous mode
[   64.025776][ T6718] veth1: left promiscuous mode
[   64.031401][ T6718] bond6: (slave vcan0): Releasing backup interface
[   64.033800][ T6718] bond6: (slave vcan1): making interface the new active one
[   64.040168][ T6718] bond6: (slave vcan1): Releasing backup interface
[   64.631545][ T6728] bond3: (slave ip6gretap1): Removing an active aggregator
[   64.634414][ T6728] bond3: (slave ip6gretap1): Releasing backup interface
[   64.636655][ T6728] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 96:fe:ea:72:9a:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   64.644192][ T6728] bond3: (slave veth3): Releasing backup interface
[   64.651687][ T6728] netlink: 'syz.0.217': attribute type 10 has an invalid length.
[   64.692345][ T6728] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.695541][ T6728] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   64.783956][ T6736] __nla_validate_parse: 33 callbacks suppressed
[   64.783969][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'.
[   64.788897][ T6736] netlink: 'syz.1.219': attribute type 7 has an invalid length.
[   64.792417][ T6736] netlink: 'syz.1.219': attribute type 8 has an invalid length.
[   64.795165][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'.
[   64.828421][ T6734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'.
[   64.833782][ T6739] pim6reg1: entered promiscuous mode
[   64.835414][ T6739] pim6reg1: entered allmulticast mode
[   64.903087][ T6743] netlink: 182 bytes leftover after parsing attributes in process `syz.1.222'.
[   64.906387][ T6743] netlink: 228 bytes leftover after parsing attributes in process `syz.1.222'.
[   64.960224][ T6746] wlan1 speed is unknown, defaulting to 1000
[   65.043290][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'.
[   65.200801][ T6762] netlink: 'syz.1.229': attribute type 58 has an invalid length.
[   65.202840][ T6761] wlan1 speed is unknown, defaulting to 1000
[   65.203483][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.229'.
[   65.328714][ T6769] 8021q: adding VLAN 0 to HW filter on device bond6
[   65.401309][ T6777] netlink: 'syz.1.232': attribute type 2 has an invalid length.
[   65.404252][ T6777] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.232'.
[   65.421579][ T6777] netlink: 18 bytes leftover after parsing attributes in process `syz.1.232'.
[   65.425081][ T6761] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   65.425214][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.487528][ T6781] vlan3: entered promiscuous mode
[   65.490250][ T6781] bond0: entered promiscuous mode
[   65.501184][ T6785] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[   65.552206][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[   65.596010][ T6790] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   65.610880][ T6792] netlink: 'syz.0.237': attribute type 10 has an invalid length.
[   65.618673][ T6792] bridge0: entered promiscuous mode
[   65.626798][ T6792] bridge0: entered allmulticast mode
[   65.663294][ T6802] netlink: 'syz.0.239': attribute type 2 has an invalid length.
[   65.714000][ T6806] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   65.768891][ T6813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   65.813422][ T6813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   65.864248][ T6813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   65.960515][ T6813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   66.032027][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   66.040438][ T5737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   66.046966][ T5737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   66.055279][ T5737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   66.091487][ T6821] netlink: 'syz.2.245': attribute type 1 has an invalid length.
[   66.117121][ T6821] 8021q: adding VLAN 0 to HW filter on device bond4
[   66.142672][ T6821] bond4: (slave geneve3): making interface the new active one
[   66.149808][ T6821] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   66.153493][ T5873] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   66.156898][ T5873] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   66.179606][ T5873] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   66.182883][ T5873] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   66.385960][ T6849] syz_tun: refused to change device tx_queue_len
[   66.431064][ T6854] batadv1: entered promiscuous mode
[   66.438178][ T6854] batadv1: entered allmulticast mode
[   66.513896][ T6859] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   66.612955][ T6864] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   66.628595][ T6864] 8021q: adding VLAN 0 to HW filter on device bond5
[   66.638208][ T6864] 8021q: adding VLAN 0 to HW filter on device bond5
[   66.641734][ T6864] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[   66.647131][ T6864] bond5: (slave vcan1): Error -95 calling set_mac_address
[   66.822000][ T6868] vlan4: entered promiscuous mode
[   66.824185][ T6868] bond5: entered promiscuous mode
[   66.826744][ T5907] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.832682][ T5907] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.842452][ T5907] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.852086][ T5907] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.887566][ T6873] batman_adv: batadv0: Adding interface: dummy0
[   66.891752][ T6873] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.901223][ T6873] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   66.913630][ T6873] batman_adv: batadv0: Adding interface: ip6gretap2
[   66.917839][ T6873] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.928363][ T6873] batman_adv: batadv0: Interface activated: ip6gretap2
[   67.018739][ T6881] wlan1 speed is unknown, defaulting to 1000
[   67.437950][ T6896] pimreg: entered allmulticast mode
[   67.494193][ T6898] netlink: 'syz.0.265': attribute type 83 has an invalid length.
[   67.504596][ T6898] wlan1 speed is unknown, defaulting to 1000
[   68.290650][ T6917] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   68.304442][ T6917] 8021q: adding VLAN 0 to HW filter on device bond6
[   68.320354][ T6917] ipvlan2: entered allmulticast mode
[   68.322557][ T6917] bond6: entered allmulticast mode
[   68.333605][ T6917] bond6: (slave gretap2): making interface the new active one
[   68.336755][ T6917] gretap2: entered allmulticast mode
[   68.339929][ T6917] bond6: (slave gretap2): Enslaving as an active interface with an up link
[   68.726472][ T6955] dvmrp0: entered allmulticast mode
[   69.487782][ T6961] veth0_to_bridge: entered promiscuous mode
[   69.491750][ T6961] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[   69.516006][ T6961] gretap2: entered allmulticast mode
[   69.520427][ T6961] bond5: (slave gretap2): making interface the new active one
[   69.524997][ T6961] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   69.528707][ T6960] veth0_to_bridge: left promiscuous mode
[   69.533454][ T6961] syz.2.283 (6961) used greatest stack depth: 19888 bytes left
[   69.582091][ T6967] bridge_slave_0: left allmulticast mode
[   69.583934][ T6967] bridge_slave_0: left promiscuous mode
[   69.586247][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.596612][ T6967] bridge_slave_1: left allmulticast mode
[   69.598548][ T6967] bridge_slave_1: left promiscuous mode
[   69.604323][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.611340][ T6967] veth0_to_bond: left allmulticast mode
[   69.614177][ T6967] veth0_to_bond: left promiscuous mode
[   69.616539][ T6967] bridge2: port 2(veth0_to_bond) entered disabled state
[   69.623427][ T6967] bond0: (slave bond_slave_0): Releasing backup interface
[   69.627070][ T6967] bond_slave_0: left promiscuous mode
[   69.631522][ T6967] bond0: (slave bond_slave_1): Releasing backup interface
[   69.635857][ T6967] bond_slave_1: left promiscuous mode
[   69.638963][ T6967] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.644247][ T6967] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.649395][ T6967] bond2: (slave geneve2): Releasing active interface
[   69.654808][ T6967] veth3: left allmulticast mode
[   69.656834][ T6967] veth3: left promiscuous mode
[   69.658933][ T6967] bridge2: port 1(veth3) entered disabled state
[   69.663782][ T6967] vlan0: left promiscuous mode
[   69.665305][ T6967] veth1: left promiscuous mode
[   69.667506][ T6967] bridge2: port 3(vlan0) entered disabled state
[   69.672301][ T6967] bond0: (slave bond3): Releasing backup interface
[   69.674586][ T6967] bond3: left promiscuous mode
[   69.677298][ T6967] bond4: (slave geneve3): Releasing active interface
[   69.681544][ T6967] bond5: (slave gretap2): Releasing active interface
[   69.687311][ T5907] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   69.693918][ T5907] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   69.697059][ T5907] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   69.700567][ T5907] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   69.719847][ T6969] pim6reg1: entered promiscuous mode
[   69.721605][ T6969] pim6reg1: entered allmulticast mode
[   69.724501][ T5907] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   69.729488][ T5907] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   69.732448][ T5907] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   69.736338][ T5907] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   69.792411][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.796940][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.842029][ T6969] 8021q: adding VLAN 0 to HW filter on device bond7
[   69.846220][ T6969] team0: Port device bond7 added
[   69.858728][ T6989] wlan1 speed is unknown, defaulting to 1000
[   69.913639][ T6992] __nla_validate_parse: 28 callbacks suppressed
[   69.913653][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'.
[   69.952565][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.292'.
[   69.970884][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   70.014649][ T6997] bond6: (slave gretap2): Releasing active interface
[   70.017499][ T6997] gretap2: left allmulticast mode
[   70.041406][ T6997] team0: Port device bond7 removed
[   70.077617][ T7002] netlink: 108 bytes leftover after parsing attributes in process `syz.1.294'.
[   70.092302][ T7002] netlink: 108 bytes leftover after parsing attributes in process `syz.1.294'.
[   70.095092][ T7002] netlink: 84 bytes leftover after parsing attributes in process `syz.1.294'.
[   70.123907][ T7002] net_ratelimit: 45 callbacks suppressed
[   70.123929][ T7002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.242390][ T7014] netlink: 'syz.1.296': attribute type 11 has an invalid length.
[   70.284720][ T7016] netlink: 128 bytes leftover after parsing attributes in process `syz.1.298'.
[   70.305475][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[   70.312148][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'.
[   70.316007][ T7016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.320089][ T7016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   71.046826][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[   71.166787][ T7022] bridge2: entered allmulticast mode
[   71.192090][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.199237][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.265294][ T7030] wlan1 speed is unknown, defaulting to 1000
[   71.284600][ T7033] ip6tnl3: entered promiscuous mode
[   71.289663][ T7033] ip6tnl3: entered allmulticast mode
[   71.294099][ T7033] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[   71.414880][ T7039] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   71.477445][ T7046] 8021q: adding VLAN 0 to HW filter on device bond8
[   71.489241][ T7048] bond8: option mode: unable to set because the bond device is up
[   71.812282][ T7055] netlink: 'syz.0.308': attribute type 11 has an invalid length.
[   72.132993][ T7057] bridge3: entered allmulticast mode
[   72.154200][ T1272] IPVS: starting estimator thread 0...
[   72.249258][ T7058] IPVS: using max 92 ests per chain, 220800 per kthread
[   72.432632][ T7062] netlink: 'syz.1.311': attribute type 2 has an invalid length.
[   72.443421][ T7062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.447119][ T7062] syzkaller0: entered promiscuous mode
[   72.451118][ T7062] syzkaller0: entered allmulticast mode
[   72.456947][ T7062] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.461908][ T7061] tipc: Resetting bearer <eth:syzkaller0>
[   72.466360][ T7061] tipc: Disabling bearer <eth:syzkaller0>
[   72.593849][ T7068] batman_adv: batadv0: Removing interface: dummy0
[   72.598395][ T7068] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   72.603667][ T7068] batman_adv: batadv0: Removing interface: ip6gretap2
[   72.898422][ T7082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.903788][ T7082] syzkaller0: entered promiscuous mode
[   72.907199][ T7080] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[   72.910135][ T7082] syzkaller0: entered allmulticast mode
[   72.953355][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[   72.957007][ T7081] tipc: Disabling bearer <eth:syzkaller0>
[   73.067635][ T7091] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   73.103469][ T7091] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[   73.107338][ T7091] bond7: (slave vxcan3): Error -95 calling set_mac_address
[   73.156755][ T7098] gretap1: entered promiscuous mode
[   73.162507][ T7098] bond7: (slave gretap1): making interface the new active one
[   73.165954][ T7098] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   73.220718][ T7102] syz_tun: entered allmulticast mode
[   73.232902][ T7102] dvmrp8: entered allmulticast mode
[   73.245910][ T7102] syz_tun: left allmulticast mode
[   73.248140][ T7102] dvmrp8: left allmulticast mode
[   73.349941][ T7111] IPVS: set_ctl: invalid protocol: 115 172.20.20.10:20004
[   73.353221][ T7111] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[   73.420871][ T7116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.437170][ T7117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.652795][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.656135][ T7143] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.863829][ T7161] netlink: 'syz.1.336': attribute type 1 has an invalid length.
[   73.940127][ T7170] netlink: 'syz.1.339': attribute type 1 has an invalid length.
[   73.948960][ T7171] Bluetooth: MGMT ver 1.23
[   73.957760][ T7170] 8021q: adding VLAN 0 to HW filter on device bond8
[   73.971064][ T7170] bond8: (slave veth7): Enslaving as an active interface with a down link
[   73.983786][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv1
[   73.986871][ T7170] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   74.034968][ T7175] .70: renamed from hsr0
[   74.038815][ T7175] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.043372][ T7175] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.047492][ T7175] .70: entered allmulticast mode
[   74.052144][ T7175] hsr_slave_0: entered allmulticast mode
[   74.054550][ T7175] hsr_slave_1: entered allmulticast mode
[   74.058119][ T7175] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   74.112387][ T7178] Driver unsupported XDP return value 0 on prog  (id 84) dev N/A, expect packet loss!
[   74.245757][ T7182] macvlan2: entered allmulticast mode
[   74.247438][ T7182] veth1_vlan: entered allmulticast mode
[   74.257311][ T7182] veth1_vlan: left allmulticast mode
[   74.353043][ T7190] bridge4: entered allmulticast mode
[   74.452178][ T7202] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   74.462754][ T7202] netlink: 'syz.2.349': attribute type 2 has an invalid length.
[   74.466004][ T7202] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   74.496955][ T7202] 8021q: adding VLAN 0 to HW filter on device bond8
[   74.505114][ T7204] xfrm1: entered promiscuous mode
[   74.506785][ T7204] xfrm1: entered allmulticast mode
[   74.514585][ T7202] ipvlan2: entered allmulticast mode
[   74.516779][ T7202] bond8: entered allmulticast mode
[   74.522018][ T7207] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[   74.534836][ T7207] 8021q: adding VLAN 0 to HW filter on device bond9
[   74.542342][ T7207] bond9: (slave geneve2): making interface the new active one
[   74.545460][ T7207] bond9: (slave geneve2): Enslaving as an active interface with an up link
[   74.556956][ T7207] syz.1.351 (7207) used greatest stack depth: 18992 bytes left
[   74.565675][ T7202] bond8: (slave gretap3): making interface the new active one
[   74.571823][ T7202] gretap3: entered allmulticast mode
[   74.575290][ T7202] bond8: (slave gretap3): Enslaving as an active interface with an up link
[   74.578031][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.581705][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.587893][ T7210] netlink: 'syz.0.352': attribute type 11 has an invalid length.
[   74.591229][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.594401][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.598089][ T7212] syzkaller0: entered promiscuous mode
[   74.600809][ T7212] syzkaller0: entered allmulticast mode
[   74.807388][ T7231] bridge0: port 1(erspan0) entered blocking state
[   74.810236][ T7231] bridge0: port 1(erspan0) entered disabled state
[   74.812963][ T7231] erspan0: entered allmulticast mode
[   74.815799][ T7231] erspan0: entered promiscuous mode
[   74.820882][ T7231] erspan0: left allmulticast mode
[   74.822893][ T7231] erspan0: left promiscuous mode
[   74.825359][ T7231] bridge0: port 1(erspan0) entered disabled state
[   75.114474][ T7251] tap0: tun_chr_ioctl cmd 1074025677
[   75.117265][ T7251] tap0: linktype set to 270
[   75.219097][ T7253] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   75.225959][ T7253] __nla_validate_parse: 30 callbacks suppressed
[   75.226010][ T7253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.364'.
[   75.296747][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   75.304323][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[   75.347485][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[   75.350906][ T7261] chnl_net:caif_netlink_parms(): no params data found
[   75.398866][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'.
[   75.442859][ T7268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.446099][ T7267] syzkaller0: entered promiscuous mode
[   75.448314][ T7267] syzkaller0: entered allmulticast mode
[   75.465623][ T7267] tipc: Resetting bearer <eth:syzkaller0>
[   75.477045][ T7266] tipc: Resetting bearer <eth:syzkaller0>
[   75.480334][ T7266] tipc: Disabling bearer <eth:syzkaller0>
[   75.488225][ T7270] tipc: Enabling of bearer <h:syzkaller0> rejected, media not registered
[   75.554757][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'.
[   75.558202][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'.
[   75.565028][ T7276] netlink: 38 bytes leftover after parsing attributes in process `syz.1.372'.
[   75.576578][ T7270] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   75.647968][ T7284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.652153][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'.
[   75.655608][ T7284] syzkaller0: entered promiscuous mode
[   75.657492][ T7284] syzkaller0: entered allmulticast mode
[   75.661710][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'.
[   75.672710][ T7284] tipc: Resetting bearer <eth:syzkaller0>
[   75.701815][ T7293] tipc: Resetting bearer <eth:syzkaller0>
[   75.711602][ T7293] tipc: Disabling bearer <eth:syzkaller0>
[   75.814490][ T7314] IPv6: sit3: Disabled Multicast RS
[   75.818788][ T7314] sit3: entered allmulticast mode
[   75.839486][ T7316] macsec2: entered promiscuous mode
[   75.937944][ T7325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.038759][ T7330] 8021q: adding VLAN 0 to HW filter on device bond9
[   76.054663][ T7330] 8021q: adding VLAN 0 to HW filter on device bond9
[   76.058788][ T7330] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[   76.064498][ T7330] bond9: (slave vcan1): Error -95 calling set_mac_address
[   76.219998][ T7338] syzkaller1: entered promiscuous mode
[   76.222287][ T7338] syzkaller1: entered allmulticast mode
[   76.327943][ T7344] 8021q: adding VLAN 0 to HW filter on device bond10
[   76.340194][ T7344] bond10: (slave gretap4): making interface the new active one
[   76.344273][ T7344] bond10: (slave gretap4): Enslaving as an active interface with an up link
[   76.355918][ T7344] macsec2: entered promiscuous mode
[   76.420123][ T7350] lo speed is unknown, defaulting to 1000
[   76.422754][ T7350] lo speed is unknown, defaulting to 1000
[   76.425351][ T7350] lo speed is unknown, defaulting to 1000
[   76.431519][ T7350] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.438233][ T7350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.455106][ T7350] lo speed is unknown, defaulting to 1000
[   76.458515][ T7350] lo speed is unknown, defaulting to 1000
[   76.462006][ T7350] lo speed is unknown, defaulting to 1000
[   76.468923][ T7350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.476412][ T7350] veth0_to_bridge: entered promiscuous mode
[   76.478991][ T7350] veth0_to_bridge: entered allmulticast mode
[   76.486449][ T7349] tipc: Disabling bearer <eth:syzkaller0>
[   76.670201][ T7360] batadv1: entered promiscuous mode
[   76.672498][ T7360] batadv1: entered allmulticast mode
[   76.746428][ T7365] 8021q: adding VLAN 0 to HW filter on device bond10
[   76.763975][ T7365] bond10: (slave bridge5): making interface the new active one
[   76.768312][ T7365] bond10: (slave bridge5): Enslaving as an active interface with an up link
[   76.784899][ T7365] bond10: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   76.924687][ T7380] 8021q: adding VLAN 0 to HW filter on device bond11
[   76.934011][ T7383] bond11: (slave batadv1): Opening slave failed
[   77.172674][ T7417] tipc: Cannot configure node identity twice
[   77.177982][ T7418] tipc: Cannot configure node identity twice
[   77.985740][ T7465] validate_nla: 9 callbacks suppressed
[   77.985751][ T7465] netlink: 'syz.1.409': attribute type 1 has an invalid length.
[   77.996323][ T7465] 8021q: adding VLAN 0 to HW filter on device bond10
[   78.006989][ T7465] 8021q: adding VLAN 0 to HW filter on device bond10
[   78.011148][ T7465] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[   78.016459][ T7465] bond10: (slave vxcan1): Error -95 calling set_mac_address
[   78.098458][ T7471] IPVS: length: 49 != 24
[   78.138734][ T7474] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[   78.152171][ T7474] 8021q: adding VLAN 0 to HW filter on device bond8
[   78.155180][ T7474] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[   78.161052][ T7474] bond8: (slave vcan1): Error -95 calling set_mac_address
[   78.205588][ T7474] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[   78.210594][ T7474] bond8: (slave vcan1): Error -95 calling set_mac_address
[   78.254758][ T7482] 8021q: adding VLAN 0 to HW filter on device bond8
[   78.361479][ T7489] netlink: 'syz.0.417': attribute type 30 has an invalid length.
[   78.410349][ T7489] netlink: 'syz.0.417': attribute type 30 has an invalid length.
[   78.485068][ T7492] xfrm0: entered allmulticast mode
[   78.512808][ T7494] syzkaller1: entered promiscuous mode
[   78.515024][ T7494] syzkaller1: entered allmulticast mode
[   78.780633][ T7504] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   78.793066][ T7504] 8021q: adding VLAN 0 to HW filter on device bond12
[   78.803567][ T7504] bond12: (slave ip6gretap2): making interface the new active one
[   78.807681][ T7504] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link
[   78.814104][ T7504] netlink: 'syz.0.422': attribute type 20 has an invalid length.
[   78.817382][ T7504] netlink: 'syz.0.422': attribute type 20 has an invalid length.
[   78.830274][ T7504] veth7: entered promiscuous mode
[   78.873356][ T7504] erspan0: entered allmulticast mode
[   79.072811][ T7515] wlan1 speed is unknown, defaulting to 1000
[   79.144584][ T7515] lo speed is unknown, defaulting to 1000
[   79.203840][  T793] lo speed is unknown, defaulting to 1000
[   79.291628][ T7532] wlan1 speed is unknown, defaulting to 1000
[   79.344692][ T7532] lo speed is unknown, defaulting to 1000
[   79.353844][ T7534] wlan1 speed is unknown, defaulting to 1000
[   79.362986][ T7539] dvmrp0: left allmulticast mode
[   79.375521][ T7539] pimreg: left allmulticast mode
[   79.423565][ T7542] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001
[   79.483150][ T7537] syzkaller0: entered promiscuous mode
[   79.484899][ T7537] syzkaller0: entered allmulticast mode
[   79.504008][ T7551] netlink: 'syz.0.437': attribute type 58 has an invalid length.
[   79.561128][ T7537] macsec2: entered promiscuous mode
[   79.568088][ T7534] lo speed is unknown, defaulting to 1000
[   79.667034][ T7557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.681551][ T7559] hsr_slave_1 (unregistering): left promiscuous mode
[   79.689392][ T7557] syzkaller0: entered promiscuous mode
[   79.691618][ T7557] syzkaller0: entered allmulticast mode
[   79.697899][ T7557] tipc: Resetting bearer <eth:syzkaller0>
[   79.700482][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.703369][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.706845][ T7556] tipc: Resetting bearer <eth:syzkaller0>
[   79.716393][ T7556] tipc: Disabling bearer <eth:syzkaller0>
[   79.888333][ T7571] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   79.921677][ T7573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.930299][ T7573] syzkaller0: entered promiscuous mode
[   79.932068][ T7573] syzkaller0: entered allmulticast mode
[   79.948261][ T7573] tipc: Resetting bearer <eth:syzkaller0>
[   79.953537][ T7572] tipc: Resetting bearer <eth:syzkaller0>
[   79.962319][ T7572] tipc: Disabling bearer <eth:syzkaller0>
[   80.076345][ T7584] macvlan1: entered promiscuous mode
[   80.082922][ T7584] ipvlan0: entered promiscuous mode
[   80.092635][ T7584] ipvlan0: left promiscuous mode
[   80.095180][ T7584] macvlan1: left promiscuous mode
[   80.110365][ T7585] macvlan1: entered promiscuous mode
[   80.114052][ T7585] ipvlan0: entered promiscuous mode
[   80.116992][ T7585] ipvlan0: left promiscuous mode
[   80.122725][ T7585] macvlan1: left promiscuous mode
[   80.163053][ T7586] wlan1 speed is unknown, defaulting to 1000
[   80.265288][ T7586] lo speed is unknown, defaulting to 1000
[   80.308878][ T7599] __nla_validate_parse: 36 callbacks suppressed
[   80.308894][ T7599] netlink: 1 bytes leftover after parsing attributes in process `syz.0.450'.
[   80.363011][ T7605] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   80.378386][ T7605] 8021q: adding VLAN 0 to HW filter on device bond11
[   80.412540][ T7610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   80.436075][ T7605] bond11: (slave veth7): Enslaving as an active interface with a down link
[   80.450426][ T7615] tc_dump_action: action bad kind
[   80.460079][ T7605] gretap5: entered promiscuous mode
[   80.463942][ T7605] bond11: (slave gretap5): making interface the new active one
[   80.467433][ T7605] bond11: (slave gretap5): Enslaving as an active interface with an up link
[   80.470937][ T7608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.476147][ T7608] syzkaller0: entered promiscuous mode
[   80.477902][ T7608] syzkaller0: entered allmulticast mode
[   80.481666][ T7605] netlink: 44 bytes leftover after parsing attributes in process `syz.2.451'.
[   80.486362][ T7607] tipc: Resetting bearer <eth:syzkaller0>
[   80.504895][ T7607] tipc: Disabling bearer <eth:syzkaller0>
[   80.521307][ T7617] syzkaller1: entered promiscuous mode
[   80.526251][ T7617] syzkaller1: entered allmulticast mode
[   80.593190][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'.
[   80.652816][ T7634] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[   80.690612][ T7634] 8021q: adding VLAN 0 to HW filter on device bond11
[   80.728280][ T7635] wlan1 speed is unknown, defaulting to 1000
[   80.798135][ T7635] lo speed is unknown, defaulting to 1000
[   80.912680][ T7649] vti2: entered promiscuous mode
[   80.914376][ T7649] vti2: entered allmulticast mode
[   80.954188][ T7651] vlan0: entered allmulticast mode
[   80.955904][ T7651] bridge_slave_0: entered allmulticast mode
[   81.388494][ T7658] veth0: entered promiscuous mode
[   81.388531][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.412845][ T7659] veth0 (unregistering): left promiscuous mode
[   81.468206][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.471511][ T7661] IPv6: NLM_F_CREATE should be set when creating new route
[   81.478771][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.483385][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.487200][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.496273][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.501679][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.506509][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.566813][ T7666] bond8: option mode: unable to set because the bond device is up
[   81.574270][ T7663] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.579349][ T7663] bond12: (slave vxcan3): Error -95 calling set_mac_address
[   81.622776][ T7664] macvlan2: entered promiscuous mode
[   81.624626][ T7664] macvlan2: entered allmulticast mode
[   81.626639][ T7664] bond12: (slave macvlan2): Error -98 calling set_mac_address
[   81.635456][ T7667] macvlan2: entered promiscuous mode
[   81.637294][ T7667] macvlan2: entered allmulticast mode
[   81.640914][ T7667] bond12: (slave macvlan2): Error -98 calling set_mac_address
[   81.844649][ T7677] gtp1: entered promiscuous mode
[   81.846507][ T7677] gtp1: entered allmulticast mode
[   82.425080][ T7723] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.432496][ T7723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.477685][ T7723] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.483841][ T7740] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   82.487157][ T7740] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   82.493952][ T7723] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.536611][ T7723] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.561594][ T7723] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.614422][ T7723] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.618313][ T7723] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.703447][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.706583][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.716727][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.720252][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.730534][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.734234][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.744915][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.748240][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.757811][ T7761] dummy0: entered allmulticast mode
[   82.765308][ T7761] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   82.839572][ T7767] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[   82.853467][ T7767] veth0_to_batadv: entered promiscuous mode
[   82.856457][ T7767] veth0_to_batadv: left promiscuous mode
[   82.959252][  T793] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96
[   83.581211][ T7825] syzkaller0: entered promiscuous mode
[   83.583345][ T7825] syzkaller0: entered allmulticast mode
[   83.586617][ T7823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.591847][ T7827] bond0: Device is already in use.
[   83.626146][ T7823] tipc: Resetting bearer <eth:syzkaller0>
[   83.632910][ T7823] tipc: Disabling bearer <eth:syzkaller0>
[   83.704168][ T7841] bond0: entered promiscuous mode
[   83.706297][ T7841] dummy0: entered promiscuous mode
[   83.709795][ T7841] batadv0: entered promiscuous mode
[   83.712791][ T7841] bond0: left promiscuous mode
[   83.714790][ T7841] dummy0: left promiscuous mode
[   83.717200][ T7841] batadv0: left promiscuous mode
[   83.804778][ T7853] wlan1 speed is unknown, defaulting to 1000
[   83.885436][ T7857] validate_nla: 4 callbacks suppressed
[   83.885455][ T7857] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[   83.904317][ T7853] lo speed is unknown, defaulting to 1000
[   83.922402][ T7857] 8021q: adding VLAN 0 to HW filter on device bond12
[   83.937563][ T7857] 8021q: adding VLAN 0 to HW filter on device bond12
[   83.940771][ T7857] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[   83.945528][ T7857] bond12: (slave vxcan1): Error -95 calling set_mac_address
[   83.988444][ T7861] veth9: entered promiscuous mode
[   83.994488][ T7853] syzkaller0: entered promiscuous mode
[   83.996422][ T7853] syzkaller0: entered allmulticast mode
[   84.286261][ T7875] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[   84.306915][ T7875] bond13: entered promiscuous mode
[   84.308552][ T7875] bond13: entered allmulticast mode
[   84.311887][ T7875] 8021q: adding VLAN 0 to HW filter on device bond13
[   84.397170][ T7875] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[   84.401084][ T7875] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   84.454647][   T24] lo speed is unknown, defaulting to 1000
[   84.456615][   T24] syz2: Port: 1 Link DOWN
[   84.540640][ T7899] veth0: entered promiscuous mode
[   84.543525][ T7901] veth0 (unregistering): left promiscuous mode
[   84.652494][ T7912] bond0: (slave dummy0): Releasing backup interface
[   84.656713][ T7912] dummy0: left allmulticast mode
[   84.663321][ T7912] bond7: (slave gretap1): Releasing active interface
[   84.671425][ T7912] bond8: (slave veth7): Releasing active interface
[   84.676685][ T7912] bond9: (slave geneve2): Releasing active interface
[   84.685722][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.693851][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.699400][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.713152][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.777616][ T7920] wlan1 speed is unknown, defaulting to 1000
[   84.844584][ T7920] lo speed is unknown, defaulting to 1000
[   85.632723][ T7925] wlan1 speed is unknown, defaulting to 1000
[   85.678934][ T7925] lo speed is unknown, defaulting to 1000
[   85.681381][ T7927] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[   85.691181][ T7927] geneve3: entered allmulticast mode
[   85.695446][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.698851][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.704530][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.707605][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.750141][ T7931] __nla_validate_parse: 47 callbacks suppressed
[   85.750154][ T7931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.534'.
[   85.861970][ T7938] netlink: 'syz.1.536': attribute type 1 has an invalid length.
[   85.876989][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.537'.
[   85.898818][ T7940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.537'.
[   85.903649][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.537'.
[   85.907314][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.537'.
[   85.943014][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   85.996334][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'.
[   86.026821][ T7950] IPv6: sit3: Disabled Multicast RS
[   86.029743][ T7950] sit3: entered allmulticast mode
[   86.068046][ T7960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   86.097503][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'.
[   86.158759][ T7975] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   86.186573][ T7978] netlink: 108 bytes leftover after parsing attributes in process `syz.2.549'.
[   86.224027][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[   86.259147][ T7986] 8021q: adding VLAN 0 to HW filter on device bond13
[   86.262865][ T7986] bond13: entered allmulticast mode
[   86.265061][ T7986] bond0: (slave bond13): Enslaving as an active interface with an up link
[   86.382199][ T7995] netlink: 'syz.1.553': attribute type 83 has an invalid length.
[   86.397102][ T7995] wlan1 speed is unknown, defaulting to 1000
[   86.507003][ T7995] lo speed is unknown, defaulting to 1000
[   86.605142][ T8007] 8021q: adding VLAN 0 to HW filter on device bond14
[   86.712460][   T28] smc: removing ib device syz0
[   87.052155][ T8021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.071600][ T8021] syzkaller0: entered promiscuous mode
[   87.073858][ T8021] syzkaller0: entered allmulticast mode
[   87.083746][ T8021] tipc: Resetting bearer <eth:syzkaller0>
[   87.088030][ T8020] tipc: Resetting bearer <eth:syzkaller0>
[   87.093803][ T8020] tipc: Disabling bearer <eth:syzkaller0>
[   87.316071][ T8024] lo speed is unknown, defaulting to 1000
[   87.460804][ T8032] netlink: 'syz.0.566': attribute type 1 has an invalid length.
[   87.476546][ T8032] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[   87.660191][ T8038] netlink: 'syz.1.567': attribute type 10 has an invalid length.
[   87.678863][ T8038] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.686743][ T8038] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.598684][ T8067] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[   90.717890][ T8082] netlink: 'syz.2.579': attribute type 29 has an invalid length.
[   90.744286][ T8082] vti2: entered promiscuous mode
[   90.749471][ T8082] vti2: entered allmulticast mode
[   90.773283][ T8088] netlink: 'syz.0.583': attribute type 1 has an invalid length.
[   90.790262][ T8088] 8021q: adding VLAN 0 to HW filter on device bond13
[   90.794823][ T8088] __nla_validate_parse: 9 callbacks suppressed
[   90.794834][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'.
[   90.809553][ T8088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.818101][ T8088] macvlan3: entered promiscuous mode
[   90.820761][ T8088] macvlan3: entered allmulticast mode
[   90.823518][ T8088] bond13: entered promiscuous mode
[   90.826017][ T8088] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   90.828878][ T8088] bond13: left promiscuous mode
[   90.921459][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.961490][ T8098] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   91.098436][ T8103] netlink: 48 bytes leftover after parsing attributes in process `syz.0.588'.
[   91.141735][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[   91.163973][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'.
[   91.308298][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'.
[   91.312310][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'.
[   91.510295][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'.
[   91.513822][ T8119] netlink: 188 bytes leftover after parsing attributes in process `syz.2.594'.
[   91.517936][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[   91.670970][ T8127] lo speed is unknown, defaulting to 1000
[   91.802065][ T8130] syzkaller0: entered promiscuous mode
[   91.803781][ T8130] syzkaller0: entered allmulticast mode
[   91.997556][ T8137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.001329][ T8137] syzkaller0: entered promiscuous mode
[   92.003682][ T8137] syzkaller0: entered allmulticast mode
[   92.013908][ T8138] tipc: Resetting bearer <eth:syzkaller0>
[   92.041389][ T8137] tipc: Resetting bearer <eth:syzkaller0>
[   92.046509][ T8137] tipc: Disabling bearer <eth:syzkaller0>
[   92.151460][ T8142] 8021q: adding VLAN 0 to HW filter on device bond15
[   92.154311][ T8142] bond15: entered promiscuous mode
[   92.156502][ T8142] bond0: (slave bond15): Enslaving as an active interface with an up link
[   92.202877][ T8149] unsupported nlmsg_type 40
[   92.344970][ T8164] syz_tun: entered allmulticast mode
[   92.352033][ T8164] dvmrp1: entered allmulticast mode
[   92.355339][ T8163] syz_tun: left allmulticast mode
[   92.376584][ T8168] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   92.380893][ T8168] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   92.441124][ T8172] erspan0: left allmulticast mode
[   92.447370][ T8172] 8021q: adding VLAN 0 to HW filter on device team0
[   92.453546][ T8172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.176866][ T8208] netlink: 'syz.0.619': attribute type 12 has an invalid length.
[   93.219482][ T8212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.287382][ T8217] IPv6: sit2: Disabled Multicast RS
[   93.395547][ T8226] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   93.606409][ T8247] netlink: 'syz.0.629': attribute type 1 has an invalid length.
[   94.308299][ T8260] netlink: 'syz.1.633': attribute type 10 has an invalid length.
[   94.533597][ T8287] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[   94.560150][ T8287] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.565309][ T8287] bond16: (slave vxcan3): Error -95 calling set_mac_address
[   94.642180][ T8312] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[   94.642180][ T8311] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[   94.652579][ T8311] bond14: entered promiscuous mode
[   94.655022][ T8311] 8021q: adding VLAN 0 to HW filter on device bond14
[   94.667937][ T8315] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[   94.673744][ T8311] 8021q: adding VLAN 0 to HW filter on device bond14
[   94.683448][ T8311] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address
[   94.686990][ T8311] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   94.696821][ T8311] bond14: (slave wireguard0): making interface the new active one
[   94.699867][ T8311] wireguard0: entered promiscuous mode
[   94.702847][ T8311] bond14: (slave wireguard0): Enslaving as an active interface with an up link
[   94.708726][ T8312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.711241][ T8312] IPv6: NLM_F_CREATE should be set when creating new route
[   94.713579][ T8312] IPv6: NLM_F_CREATE should be set when creating new route
[   94.716701][ T8316] 8021q: adding VLAN 0 to HW filter on device bond14
[   94.719731][ T8311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.720133][ T8316] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[   94.722764][ T8311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.727254][ T8316] bond14: (slave vcan0): Error -95 calling set_mac_address
[   94.732685][ T8312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.755253][ T8312] bond14: (slave wireguard1): The slave device specified does not support setting the MAC address
[   94.762194][ T8312] bond14: (slave wireguard1): Enslaving as a backup interface with an up link
[   94.771097][ T8311] bond14: (slave wireguard2): The slave device specified does not support setting the MAC address
[   94.776644][ T8311] bond14: (slave wireguard2): Enslaving as a backup interface with an up link
[   94.822710][ T8326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.825310][ T8326] syzkaller0: entered promiscuous mode
[   94.827100][ T8326] syzkaller0: entered allmulticast mode
[   94.834447][ T8326] tipc: Resetting bearer <eth:syzkaller0>
[   94.838607][ T8325] tipc: Resetting bearer <eth:syzkaller0>
[   94.844862][ T8325] tipc: Disabling bearer <eth:syzkaller0>
[   94.852153][ T8328] dummy0: entered promiscuous mode
[   94.854662][ T8328] dummy0: left promiscuous mode
[   94.876444][ T8330] lo speed is unknown, defaulting to 1000
[   94.911783][ T8332] lo speed is unknown, defaulting to 1000
[   94.958902][ T8348] netlink: 'syz.1.650': attribute type 1 has an invalid length.
[   95.034489][ T8356] pim6reg1: entered promiscuous mode
[   95.036538][ T8356] pim6reg1: entered allmulticast mode
[   95.214418][ T8372] syz_tun: entered allmulticast mode
[   95.219608][ T8372] dvmrp8: entered allmulticast mode
[   95.222299][ T8372] syz_tun: left allmulticast mode
[   95.224223][ T8372] dvmrp8: left allmulticast mode
[   95.238752][ T8374] bridge8: entered promiscuous mode
[   95.241248][ T8374] macsec2: entered promiscuous mode
[   95.243301][ T8374] macsec2: entered allmulticast mode
[   95.245147][ T8374] bridge8: entered allmulticast mode
[   95.248391][ T8374] bridge8: port 1(macsec2) entered blocking state
[   95.253652][ T8374] bridge8: port 1(macsec2) entered disabled state
[   95.256804][ T8374] bridge8: left allmulticast mode
[   95.258651][ T8374] bridge8: left promiscuous mode
[   95.333658][ T8387] sctp: [Deprecated]: syz.2.661 (pid 8387) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.333658][ T8387] Use struct sctp_sack_info instead
[   95.343707][ T8388] 8021q: adding VLAN 0 to HW filter on device bond15
[   95.363105][ T8388] veth7: entered promiscuous mode
[   95.367405][ T8388] bond15: (slave veth7): Enslaving as an active interface with a down link
[   95.377310][ T8388] erspan0: entered allmulticast mode
[   95.384318][ T8388] bond15: (slave erspan0): making interface the new active one
[   95.388134][ T8388] erspan0: entered promiscuous mode
[   95.390566][ T8388] bond15: (slave erspan0): Enslaving as an active interface with an up link
[   95.634722][ T8416] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613)
[   95.812995][ T8426] bridge0: port 1(batadv1) entered blocking state
[   95.815680][ T8426] bridge0: port 1(batadv1) entered disabled state
[   95.818389][ T8426] batadv1: entered allmulticast mode
[   95.823988][ T8426] batadv1: entered promiscuous mode
[   95.881566][ T8428] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   95.984245][ T8434] validate_nla: 4 callbacks suppressed
[   95.984262][ T8434] netlink: 'syz.1.671': attribute type 9 has an invalid length.
[   96.037965][ T8436] __nla_validate_parse: 25 callbacks suppressed
[   96.037983][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[   96.050646][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[   96.054779][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[   96.058372][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[   96.093716][ T8438] lo speed is unknown, defaulting to 1000
[   96.163932][ T8445] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[   96.166549][ T8445] netlink: 'syz.1.675': attribute type 2 has an invalid length.
[   96.170214][ T8445] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.675'.
[   96.174432][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[   96.180739][ T8445] netlink: 52 bytes leftover after parsing attributes in process `syz.1.675'.
[   96.184772][ T8445] netlink: 300 bytes leftover after parsing attributes in process `syz.1.675'.
[   96.243435][ T8448] lo speed is unknown, defaulting to 1000
[   96.319184][ T6930] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   96.322960][ T6930] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   96.547368][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'.
[   96.552567][ T8464] netlink: 'syz.2.680': attribute type 7 has an invalid length.
[   96.555033][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'.
[   96.591072][ T8469] netlink: 'syz.0.681': attribute type 21 has an invalid length.
[   96.600459][ T8469] ipvlan3: entered promiscuous mode
[   96.607903][ T8469] bridge0: port 2(ipvlan3) entered blocking state
[   96.614532][ T8469] bridge0: port 2(ipvlan3) entered disabled state
[   96.617224][ T8469] ipvlan3: entered allmulticast mode
[   96.621808][ T8469] gretap0: entered allmulticast mode
[   96.626052][ T8471] trusted_key: syz.1.682 sent an empty control message without MSG_MORE.
[   96.632376][ T8469] ipvlan3: left allmulticast mode
[   96.634141][ T8469] gretap0: left allmulticast mode
[   96.801429][ T8490] netlink: 'syz.2.689': attribute type 11 has an invalid length.
[   96.804265][ T8490] netlink: 'syz.2.689': attribute type 4 has an invalid length.
[   96.808775][ T8490] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   96.853317][ T8493] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[   96.893343][ T8496] lo speed is unknown, defaulting to 1000
[   97.026916][ T8496] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   97.032913][ T8496] syzkaller0: entered promiscuous mode
[   97.035158][ T8496] syzkaller0: entered allmulticast mode
[   97.042782][ T8496] macsec0: entered promiscuous mode
[   97.151832][ T8502] ip6erspan0: entered allmulticast mode
[   97.794589][ T8520] syz.0.701 (8520) used obsolete PPPIOCDETACH ioctl
[   97.797625][ T8520] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   97.802653][ T8520] IPv6: sit3: Disabled Multicast RS
[   97.887008][ T8530] smc: net device bond0 applied user defined pnetid SYZ2
[   97.934384][ T8530] smc: removing net device bond0 with user defined pnetid SYZ2
[   97.947511][ T8530] bond0 (unregistering): Released all slaves
[   97.998089][ T8535] syzkaller1: entered promiscuous mode
[   98.002192][ T8535] syzkaller1: entered allmulticast mode
[   98.052941][ T8537] dvmrp8: entered allmulticast mode
[   98.055695][ T8537] dvmrp8: left allmulticast mode
[   98.136423][ T8550] sctp: [Deprecated]: syz.1.711 (pid 8550) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.136423][ T8550] Use struct sctp_sack_info instead
[   98.167697][ T8550] macvlan0: entered promiscuous mode
[   98.170066][ T8550] macvlan0: entered allmulticast mode
[   98.173084][ T8550] bond15: (slave macvlan0): Opening slave failed
[   98.212302][ T8556] team0: entered promiscuous mode
[   98.240048][ T8556] team0 (unregistering): left promiscuous mode
[   98.384439][ T8569] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   98.433410][ T8577] netlink: 'syz.1.718': attribute type 4 has an invalid length.
[   98.438715][ T8577] netlink: 'syz.1.718': attribute type 4 has an invalid length.
[   98.781557][ T8605] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (48)
[   98.962832][ T8614] lo speed is unknown, defaulting to 1000
[   99.462776][ T8627] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[   99.487023][ T8627] 8021q: adding VLAN 0 to HW filter on device bond18
[   99.502359][ T8627] 8021q: adding VLAN 0 to HW filter on device bond18
[   99.504742][ T8627] bond18: (slave vcan0): The slave device specified does not support setting the MAC address
[   99.511483][ T8627] bond18: (slave vcan0): Error -95 calling set_mac_address
[   99.526067][ T8628] bridge6: entered promiscuous mode
[   99.527782][ T8628] macsec0: entered promiscuous mode
[   99.530117][ T8628] macsec0: entered allmulticast mode
[   99.532183][ T8628] bridge6: entered allmulticast mode
[   99.535622][ T8628] bridge6: port 1(macsec0) entered blocking state
[   99.537716][ T8628] bridge6: port 1(macsec0) entered disabled state
[   99.541932][ T8628] bridge6: left allmulticast mode
[   99.544091][ T8628] bridge6: left promiscuous mode
[   99.555333][ T8630] macvlan3: entered promiscuous mode
[   99.557119][ T8630] macvlan3: entered allmulticast mode
[   99.561850][ T8630] bond18: entered promiscuous mode
[   99.564110][ T8630] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   99.567505][ T8630] bond18: left promiscuous mode
[   99.677522][ T8637] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   99.683054][ T8637] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   99.686775][ T8637] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   99.736421][ T8639] veth0_to_bridge: entered promiscuous mode
[   99.738682][ T8639] veth0_to_bridge: entered allmulticast mode
[   99.914848][ T8664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.918862][ T8665] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   99.923129][ T8665] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   99.931124][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  100.006959][ T8676] smc: adding net device bond0 with user defined pnetid SYZ2
[  100.048711][ T8680] wireguard3: entered promiscuous mode
[  100.051947][ T8680] wireguard3: entered allmulticast mode
[  100.064751][ T8687] batadv1: entered promiscuous mode
[  100.067020][ T8687] batadv1: entered allmulticast mode
[  100.179638][ T8701] lo speed is unknown, defaulting to 1000
[  100.237156][ T8705] lo speed is unknown, defaulting to 1000
[  100.346193][ T8705] syzkaller0: entered promiscuous mode
[  100.348528][ T8705] syzkaller0: entered allmulticast mode
[  100.370159][ T8705] macsec0: entered promiscuous mode
[  100.663269][ T8740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.694138][ T8743] tipc: Cannot configure node identity twice
[  100.715788][ T8746] veth0_to_bridge: left promiscuous mode
[  100.720620][ T8746] macsec1: left promiscuous mode
[  100.724167][ T8746] gtp1: left promiscuous mode
[  100.726247][ T8746] bond13: left promiscuous mode
[  100.728352][ T8746] vti2: left promiscuous mode
[  100.758234][ T8746] pim6reg9: entered allmulticast mode
[  100.796782][ T8753] 8021q: adding VLAN 0 to HW filter on device bond20
[  100.846045][ T8758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  100.871788][ T8758] : renamed from bond0
[  100.919541][  T793] tipc: Node number set to 2853350737
[  100.957163][ T8769] dvmrp1: left allmulticast mode
[  101.073778][ T8775] __nla_validate_parse: 28 callbacks suppressed
[  101.073790][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'.
[  101.353475][ T8761] ==================================================================
[  101.356723][ T8761] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  101.359634][ T8761] Read of size 8 at addr ffff88801fb840a0 by task khidpd_15c25886/8761
[  101.363440][ T8761] 
[  101.364384][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  101.364428][ T8761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.364437][ T8761] Call Trace:
[  101.364444][ T8761]  <TASK>
[  101.364452][ T8761]  dump_stack_lvl+0x189/0x250
[  101.364474][ T8761]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.364489][ T8761]  ? lock_release+0x4b/0x3e0
[  101.364511][ T8761]  ? __virt_addr_valid+0x4a5/0x5c0
[  101.364530][ T8761]  print_report+0xca/0x240
[  101.364543][ T8761]  ? __mutex_lock+0x801/0x1350
[  101.364555][ T8761]  kasan_report+0x118/0x150
[  101.364574][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.364593][ T8761]  ? __mutex_lock+0x801/0x1350
[  101.364608][ T8761]  __mutex_lock+0x801/0x1350
[  101.364622][ T8761]  ? __mutex_lock+0x5bb/0x1350
[  101.364635][ T8761]  ? l2cap_unregister_user+0x6a/0x1b0
[  101.364655][ T8761]  ? __pfx___mutex_lock+0x10/0x10
[  101.364670][ T8761]  ? __pfx___timer_delete_sync+0x10/0x10
[  101.364687][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.364706][ T8761]  l2cap_unregister_user+0x6a/0x1b0
[  101.364724][ T8761]  hidp_session_thread+0x3c9/0x410
[  101.364744][ T8761]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.364760][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.364777][ T8761]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.364797][ T8761]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.364814][ T8761]  ? __kthread_parkme+0x7b/0x200
[  101.364830][ T8761]  ? __kthread_parkme+0x1a1/0x200
[  101.364846][ T8761]  kthread+0x711/0x8a0
[  101.364863][ T8761]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.364880][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.364896][ T8761]  ? rcu_is_watching+0x15/0xb0
[  101.364908][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.364924][ T8761]  ret_from_fork+0x3fc/0x770
[  101.364939][ T8761]  ? __pfx_ret_from_fork+0x10/0x10
[  101.364988][ T8761]  ? __switch_to_asm+0x39/0x70
[  101.365005][ T8761]  ? __switch_to_asm+0x33/0x70
[  101.365021][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.365036][ T8761]  ret_from_fork_asm+0x1a/0x30
[  101.365059][ T8761]  </TASK>
[  101.365065][ T8761] 
[  101.446312][ T8761] Allocated by task 5850:
[  101.448043][ T8761]  kasan_save_track+0x3e/0x80
[  101.449964][ T8761]  __kasan_kmalloc+0x93/0xb0
[  101.451827][ T8761]  __kmalloc_noprof+0x27a/0x4f0
[  101.453755][ T8761]  hci_alloc_dev_priv+0x28/0x2060
[  101.455775][ T8761]  vhci_create_device+0x120/0x6e0
[  101.457812][ T8761]  vhci_write+0x3ce/0x4a0
[  101.459329][ T8761]  vfs_write+0x5c9/0xb30
[  101.460611][ T8761]  ksys_write+0x145/0x250
[  101.462050][ T8761]  do_syscall_64+0xfa/0x3b0
[  101.463847][ T8761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.466159][ T8761] 
[  101.467107][ T8761] Freed by task 5850:
[  101.468708][ T8761]  kasan_save_track+0x3e/0x80
[  101.470246][ T8761]  kasan_save_free_info+0x46/0x50
[  101.471828][ T8761]  __kasan_slab_free+0x5b/0x80
[  101.473734][ T8761]  kfree+0x18e/0x440
[  101.475269][ T8761]  bt_host_release+0x82/0x90
[  101.476897][ T8761]  device_release+0x9c/0x1c0
[  101.478332][ T8761]  kobject_put+0x22b/0x480
[  101.479743][ T8761]  vhci_release+0x88/0xd0
[  101.481060][ T8761]  __fput+0x44c/0xa70
[  101.482436][ T8761]  task_work_run+0x1d4/0x260
[  101.483861][ T8761]  do_exit+0x6b5/0x2300
[  101.485134][ T8761]  do_group_exit+0x21c/0x2d0
[  101.486785][ T8761]  __x64_sys_exit_group+0x3f/0x40
[  101.488791][ T8761]  x64_sys_call+0x21f7/0x2200
[  101.490691][ T8761]  do_syscall_64+0xfa/0x3b0
[  101.492487][ T8761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.494781][ T8761] 
[  101.495733][ T8761] Last potentially related work creation:
[  101.497963][ T8761]  kasan_save_stack+0x3e/0x60
[  101.499825][ T8761]  kasan_record_aux_stack+0xbd/0xd0
[  101.501885][ T8761]  insert_work+0x3d/0x330
[  101.503614][ T8761]  __queue_work+0xcd2/0xfb0
[  101.505398][ T8761]  queue_work_on+0x181/0x270
[  101.507249][ T8761]  l2cap_start_connection+0x20e/0x310
[  101.509415][ T8761]  l2cap_chan_connect+0xa7f/0xe30
[  101.511465][ T8761]  l2cap_sock_connect+0x5c8/0x7a0
[  101.513450][ T8761]  __sys_connect+0x316/0x440
[  101.515293][ T8761]  __x64_sys_connect+0x7a/0x90
[  101.517211][ T8761]  do_syscall_64+0xfa/0x3b0
[  101.518849][ T8761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.520720][ T8761] 
[  101.521538][ T8761] Second to last potentially related work creation:
[  101.523813][ T8761]  kasan_save_stack+0x3e/0x60
[  101.525619][ T8761]  kasan_record_aux_stack+0xbd/0xd0
[  101.527564][ T8761]  insert_work+0x3d/0x330
[  101.529286][ T8761]  __queue_work+0xbaf/0xfb0
[  101.530808][ T8761]  queue_work_on+0x181/0x270
[  101.532489][ T8761]  process_scheduled_works+0xae1/0x17b0
[  101.534575][ T8761]  worker_thread+0x8a0/0xda0
[  101.536071][ T8761]  kthread+0x711/0x8a0
[  101.537403][ T8761]  ret_from_fork+0x3fc/0x770
[  101.538897][ T8761]  ret_from_fork_asm+0x1a/0x30
[  101.540464][ T8761] 
[  101.541234][ T8761] The buggy address belongs to the object at ffff88801fb84000
[  101.541234][ T8761]  which belongs to the cache kmalloc-8k of size 8192
[  101.546372][ T8761] The buggy address is located 160 bytes inside of
[  101.546372][ T8761]  freed 8192-byte region [ffff88801fb84000, ffff88801fb86000)
[  101.550655][ T8761] 
[  101.551507][ T8761] The buggy address belongs to the physical page:
[  101.554048][ T8761] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fb80
[  101.557535][ T8761] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  101.560813][ T8761] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  101.563877][ T8761] page_type: f5(slab)
[  101.565435][ T8761] raw: 00fff00000000040 ffff88801a442280 ffffea000444f200 0000000000000003
[  101.568516][ T8761] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  101.571335][ T8761] head: 00fff00000000040 ffff88801a442280 ffffea000444f200 0000000000000003
[  101.574412][ T8761] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  101.577466][ T8761] head: 00fff00000000003 ffffea00007ee001 00000000ffffffff 00000000ffffffff
[  101.580775][ T8761] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  101.584143][ T8761] page dumped because: kasan: bad access detected
[  101.586602][ T8761] page_owner tracks the page as allocated
[  101.588801][ T8761] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5668, tgid 5668 (init), ts 29457849180, free_ts 29423632024
[  101.596403][ T8761]  post_alloc_hook+0x240/0x2a0
[  101.598307][ T8761]  get_page_from_freelist+0x21e4/0x22c0
[  101.600461][ T8761]  __alloc_frozen_pages_noprof+0x181/0x370
[  101.602742][ T8761]  alloc_pages_mpol+0x232/0x4a0
[  101.604340][ T8761]  allocate_slab+0x8a/0x370
[  101.605721][ T8761]  ___slab_alloc+0xbeb/0x1410
[  101.607165][ T8761]  __kmalloc_cache_noprof+0x296/0x3d0
[  101.608791][ T8761]  tomoyo_init_log+0x111f/0x1f70
[  101.610281][ T8761]  tomoyo_supervisor+0x340/0x1480
[  101.611805][ T8761]  tomoyo_env_perm+0x149/0x1e0
[  101.613344][ T8761]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  101.615044][ T8761]  tomoyo_bprm_check_security+0x11c/0x180
[  101.616886][ T8761]  security_bprm_check+0x89/0x270
[  101.618671][ T8761]  bprm_execve+0x8ee/0x1450
[  101.620344][ T8761]  do_execveat_common+0x510/0x6a0
[  101.622052][ T8761]  __x64_sys_execve+0x94/0xb0
[  101.623555][ T8761] page last free pid 5664 tgid 5664 stack trace:
[  101.625803][ T8761]  __free_frozen_pages+0xbc4/0xd30
[  101.627359][ T8761]  __put_partials+0x156/0x1a0
[  101.629030][ T8761]  put_cpu_partial+0x17c/0x250
[  101.630622][ T8761]  __slab_free+0x2d5/0x3c0
[  101.632041][ T8761]  qlist_free_all+0x97/0x140
[  101.633483][ T8761]  kasan_quarantine_reduce+0x148/0x160
[  101.635158][ T8761]  __kasan_slab_alloc+0x22/0x80
[  101.636674][ T8761]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  101.638369][ T8761]  security_file_alloc+0x34/0x330
[  101.639947][ T8761]  init_file+0x93/0x2f0
[  101.641246][ T8761]  alloc_empty_file+0x6e/0x1d0
[  101.642727][ T8761]  path_openat+0x107/0x3830
[  101.644161][ T8761]  do_filp_open+0x1fa/0x410
[  101.645529][ T8761]  do_sys_openat2+0x121/0x1c0
[  101.647044][ T8761]  __x64_sys_openat+0x138/0x170
[  101.648596][ T8761]  do_syscall_64+0xfa/0x3b0
[  101.650427][ T8761] 
[  101.651408][ T8761] Memory state around the buggy address:
[  101.653721][ T8761]  ffff88801fb83f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  101.657147][ T8761]  ffff88801fb84000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.660388][ T8761] >ffff88801fb84080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.663637][ T8761]                                ^
[  101.665891][ T8761]  ffff88801fb84100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.668836][ T8761]  ffff88801fb84180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.671452][ T8761] ==================================================================
[  101.674864][ T8761] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  101.677393][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  101.680416][ T8761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.683585][ T8761] Call Trace:
[  101.684627][ T8761]  <TASK>
[  101.685539][ T8761]  dump_stack_lvl+0x99/0x250
[  101.686961][ T8761]  ? __asan_memcpy+0x40/0x70
[  101.688413][ T8761]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.690048][ T8761]  ? __pfx__printk+0x10/0x10
[  101.691621][ T8761]  vpanic+0x281/0x750
[  101.693208][ T8761]  ? __pfx_vpanic+0x10/0x10
[  101.694725][ T8761]  ? rcu_is_watching+0x15/0xb0
[  101.696285][ T8761]  panic+0xb9/0xc0
[  101.697511][ T8761]  ? __pfx_panic+0x10/0x10
[  101.699293][ T8761]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  101.701384][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.703264][ T8761]  ? __mutex_lock+0x801/0x1350
[  101.704767][ T8761]  check_panic_on_warn+0x89/0xb0
[  101.706331][ T8761]  ? __mutex_lock+0x801/0x1350
[  101.707880][ T8761]  end_report+0x78/0x160
[  101.709238][ T8761]  kasan_report+0x129/0x150
[  101.710653][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.712477][ T8761]  ? __mutex_lock+0x801/0x1350
[  101.714219][ T8761]  __mutex_lock+0x801/0x1350
[  101.715997][ T8761]  ? __mutex_lock+0x5bb/0x1350
[  101.717796][ T8761]  ? l2cap_unregister_user+0x6a/0x1b0
[  101.719989][ T8761]  ? __pfx___mutex_lock+0x10/0x10
[  101.722002][ T8761]  ? __pfx___timer_delete_sync+0x10/0x10
[  101.724263][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.726633][ T8761]  l2cap_unregister_user+0x6a/0x1b0
[  101.728672][ T8761]  hidp_session_thread+0x3c9/0x410
[  101.730676][ T8761]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.732972][ T8761]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.735348][ T8761]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.737884][ T8761]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.740414][ T8761]  ? __kthread_parkme+0x7b/0x200
[  101.742420][ T8761]  ? __kthread_parkme+0x1a1/0x200
[  101.744450][ T8761]  kthread+0x711/0x8a0
[  101.746106][ T8761]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.748386][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.750220][ T8761]  ? rcu_is_watching+0x15/0xb0
[  101.751940][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.753399][ T8761]  ret_from_fork+0x3fc/0x770
[  101.754886][ T8761]  ? __pfx_ret_from_fork+0x10/0x10
[  101.756494][ T8761]  ? __switch_to_asm+0x39/0x70
[  101.758061][ T8761]  ? __switch_to_asm+0x33/0x70
[  101.759555][ T8761]  ? __pfx_kthread+0x10/0x10
[  101.761015][ T8761]  ret_from_fork_asm+0x1a/0x30
[  101.762495][ T8761]  </TASK>
[  101.764016][ T8761] Kernel Offset: disabled
[  101.765378][ T8761] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:54:04  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000635d01 RBX=0000000000000010 RCX=ffffffff8172cd88 RDX=0000000000000001
RSI=0000000000000010 RDI=ffffc900031aeef8 RBP=0000000000000000 RSP=ffffc900031aedb8
R8 =ffffc900031aef07 R9 =1ffff92000635de0 R10=dffffc0000000000 R11=fffff52000635de1
R12=ffffc900031af6c0 R13=ffffc900031aeef8 R14=ffffc900031aeef8 R15=ffffc900031aeef0
RIP=ffffffff822319f2 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566255500 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f73f2b5e10 CR3=0000000108958000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=000055db7cfb0068 746f6f7465756c62 XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000021 0000000000326963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900073b7370
R8 =ffff888021218237 R9 =1ffff11004243046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8c8 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055db7d07baa0 CR3=00000001188be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000003301 00006b632f356c6c
XMM06=ff00000000ff0000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff000000000000 XMM09=0065736f70003374 6e6576652f357475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
