last executing test programs:

1.539170785s ago: executing program 1 (id=985):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x200, 0x80000, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x2c, r3, 0x13, 0x0, 0x25dfdbfd, {0x8}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}}, 0x4000010) (async)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x2c, r3, 0x13, 0x0, 0x25dfdbfd, {0x8}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}}, 0x4000010)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80)

1.481154048s ago: executing program 1 (id=986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9", 0x5d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6e2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)="1111", 0x6, 0x0, 0x43db}, 0x50)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000140)={0x2a, 0x1, 0x3fff}, 0xc)

1.479442649s ago: executing program 1 (id=987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x4000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

608.420453ms ago: executing program 1 (id=992):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040)="669b8383d271c3a85615130e5e2874bde49fce0386870a5f9eb4d9a47a01a7271167b3a655c4c45626768eb07e885fd6d3e29d1b5821267a3f5a0db236da59726c03fce47b6cda6d95415af94e8bc193b003179425cbb6fe02d3a54cff5fe66598c247d56a8dae0c0d0b4f65f6fba62a4617e7f7da5557468c1a78a427e3b8dfd3ca7387a8a38c64891cdd5272911b5defe4bfeadae3314c8a15f428755b6e977a3e4fc95638ea82d26835cc2a51a60c842de71786dbe16df39c0e26c0b72747b057ca365875ee8b97a7d686841d26d236fdc168d7", &(0x7f0000000140)=""/45}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r1=>0x0, 0x29, 0x1, 0x2, 0xfffffffc, 0x14, @private1, @empty, 0x20, 0xb6ecf12ac89cef99, 0x5, 0xc6}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r1, r2, 0x1, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r4, 0x6, 0x8}, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0xf801, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x2}, 0xe)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000480)={0x7e})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', <r9=>r5, 0x80, 0x80, 0x8, 0x1, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x4, "398f"}, @rr={0x7, 0x13, 0xc6, [@empty, @multicast2, @loopback, @loopback]}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x80)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'gretap0\x00', r9, 0x1, 0x8, 0x9, 0x6, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@generic={0x94, 0xb, "f8ff67e30caa3e3dd5"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0xb, [{@local, 0x9}]}, @ssrr={0x89, 0xf, 0xc2, [@remote, @remote, @local]}]}}}}})
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000000880))
write(r6, &(0x7f00000008c0), 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000940)={'xfrm0\x00', @multicast})
r13 = accept(r6, &(0x7f0000000980)=@nfc, &(0x7f0000000a00)=0x80)
r14 = gettid()
r15 = socket$pppl2tp(0x18, 0x1, 0x1)
r16 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000bc0)={0x0, <r17=>0x0}, &(0x7f0000000c00)=0xc)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, <r18=>0x0}, &(0x7f0000000c80)=0xc)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000cc0)=<r19=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8)
sendmsg$unix(r13, &(0x7f0000001040)={&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="8343e57eba5ea282b9b9be6c336181f52b458325d9e474587273b4af893f4e7cd8b0659745821fbaeb8a2225ff7b71178b5b2b34525554ad8b292125bf280c90507cf8a081f9838d5182f70155e94b8c7b1778a77b3e81bc028671c41596c2eb0d2575df65a3a460ae9221b038783f87c36e5b071d4073ab5d834575ce0cfb97e60e1cfc6213a0b83c7b28f47b152cc5", 0x90}], 0x1, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x30, 0x1, 0x1, [r3, r12, r12, r3, r10, r6, r15, r16]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xb0, 0x20000000}, 0x20040001)

551.144272ms ago: executing program 1 (id=996):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'veth1_to_bond\x00', @random="faff61000600"})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, 0x0, 0x44)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008080)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1}, 0x3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6)

550.164615ms ago: executing program 2 (id=998):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000002000000014"], 0x34}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r0, 0x1, 0x80000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x2a}]}]}, 0x28}}, 0x4c010)

498.083301ms ago: executing program 1 (id=999):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x404c081)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0x900}], 0x2, 0x6)
socketpair(0x26, 0xa, 0x1, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000000000000b0000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="e9b732a94d55a3f224d9c7e52e89bcd9ee23dbefa271905032a175618a446306b6a8963c2ff3cf19699d937086329ed38bef594145371c69fb5eb44c2a9b818652ddbe9ab6d1ac99c98792df6a383f6856ddcbc6d79f03273c08e1165d663b8ebfaef078ad7f8d303c7d1523a25ce015c88386c440b87f6760a9603202a7f840ae7d876a7d6ed3534054f9617acd42d8ca4b5fc2ea8a"], 0x20}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000017c0))
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x7f, 0x6e, &(0x7f0000000240)="83481edb834923d812172472d4efe95bd7ea742ee26ea7ec62483514a667a99c997d72e68b03b54b09d62e14d5a41a534d5004c9b36804bed8fcf772c16744f3a923d9245cc684d988bd43cc40d0eb64e9d35b79d4621cea34ab4ef09762ce8a06e86cec8cef2549698ff70cc05fcb0b5965facc0ad48e5ca57a92f4e1acbb", &(0x7f0000000180)=""/110, 0x7, 0x0, 0xd5, 0x0, &(0x7f0000000300)="022d480e280e42061ffb367c0ce761743fcc0664dd6fa51fb47aadf8ab69c3be243814d799d35fcacac04ca9b819c454dfeed636b1a526d5389d2498e8641162ab6b0f5ac8339f7587d45903129b52fbe2ebdb20ad02507294a3d4f26df2cbc9d7d2717ad8e45e6663539489473fd60afcb8736ddedbf7c9ffd31e01edc48fdb08fd20103e117fabfaaec511a31b18ffd06309027a5838df9e352f0cf8e15afd8454af9e38699a04ed432e8913d6fd22f4bdb8f3ee88ab49e67dc134ed0a20f520b8da934cea2166c56cd7a3fe79df9e930e3dd2c8", &(0x7f0000000500), 0x1}, 0x50)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'pimreg0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x2006, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2000, 0x1}, 0xe)
connect$bt_l2cap(r8, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)

495.008595ms ago: executing program 2 (id=1001):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
sendmsg$nl_generic(r2, 0x0, 0x801)
sendmsg$netlink(r1, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x200, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff, 0x2}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @random="4f03ceac207e"}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f00000000c0)={0x0, 0x295840c6, [0x7f, 0x8, 0x2800000, 0x6, 0x0, 0x5]})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x40)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000001}}}, 0x3a)

494.385281ms ago: executing program 0 (id=1002):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0, 0x4, r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b00000000000084"], 0xfe61}}], 0x2, 0xc88c4)
socket$kcm(0xa, 0x3, 0x87)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r8)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r9, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
write$tun(r3, &(0x7f00000001c0)={@val={0x0, 0x884c}, @val={0x0, 0x1, 0x1, 0xfff, 0x3ff, 0x7fff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @multicast, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x42)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)

340.736469ms ago: executing program 0 (id=1003):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r0, 0x0, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async)
close(0x4) (async)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)

340.547656ms ago: executing program 0 (id=1004):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010)

340.338046ms ago: executing program 0 (id=1005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000008000000000ea86951fcb0000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1e, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018280000", @ANYRES32, @ANYBLOB="0000ffff02000000bf91000000000000b7020000000000008541050085000000b7800000000000009510000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000086034973e02e72f4d0b8d698ac7c938a62fe7079a641a327c180e99387cffd47c04a1de30438450d2e67c"], 0xfdef)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000240)={r11}, &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200)

150.210368ms ago: executing program 2 (id=1006):
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000b00)=[{&(0x7f0000000180)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="bee04e795ed726ee5e495f558c79b4df3e8282f8e15b5fa83f445781d16fc631538e83f078d340ef5574bdb2ad97084f32b132a614a11d8dfd2d1ed1b715d836b011be3a9e3b02afb21657362ec75a99d5f8900d56fb081e3e8dd7c4214e51f7655b0c97da8d3684a916", 0x6a}, {&(0x7f0000000280)='SRK\v', 0x4}, {&(0x7f00000002c0)="feccdf3e5a2a0531a06d373b477fd0b0d7e5bc6db84ebba1289ecbffa242275d6d711d60895bc62c1f017e38f02c0b0e43d2ba9c68276fa1cf5587dfee8cf085a3e8eafd17103d6d0b6261b22344721abd21af38aba0d51fcd0ff68c7abd91a33a024d2eadb1fece7e012d1c57945b52fdd558ec1c1b1b81e35a8817f5088d4aef3401044171444b66d41d2a40e70f2d3178ca6763c035400e38f4a18593f1014aed1c99e360df1e8b1acee8fd065ef45646022e65dfd4c13c559837f42b898636e4abc13d7d378d4d2aecc885e5", 0xce}, {&(0x7f00000003c0)="9e21b0a793bcdd0d47b79f6f277501a7bbec0e1bc6c58be4371515c4554644907150f411ef35b07023b3a2b316698e6d40f74aa84b664c8c7028f39a6d745e0365f21f1f27266e44a28d579a8d0d5ff35703d154b4", 0x55}, {&(0x7f00000004c0)="c5043e7010bdb0d35bf27a2839811e098c6eedc7081e4d6387ec57fada9ad325b092e862829042eee215edee1bba544ecf2204bbc0ea94af4ebfab5fd50d640451016aa353a1e9a8dc1c85b2e406452ac0ce4ab861dfc43b08ef2a3f2215a172c4a554c80200c8edde6ed6ae20b1fedb74ff2ddd96c64a759d78b02d96fd755dc60354e6ba082905648ae57b5d9212dd22ff3fd2a67ddc060252c4dd810e3a59064b923add25f8f63e8dcc3cc0782193672e853f7f0f740b", 0xb8}], 0x5, 0x0, 0x0, 0x40484dd}, {&(0x7f0000000440)=@in6={0xa, 0x4e22, 0xf, @private1, 0x1}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000600)="d83e6958c7ab9bf506b6e7abeb99b2125eda36001d14acdc7a3108fffd", 0x1d}, {&(0x7f0000000640)="83d349d49ff8da9a0b956ded0d9e2678fc9d6349508f0fcd206f18f44d5ac1850b69848b70c27a6bbc78fa1b773502cf50a3accab00e5bc63da5e079102547a9f9be77c4702296f5a55751aec4e4f7f9a394e1b887a4b1d8dc86", 0x5a}, {&(0x7f00000006c0)="bd603c26237150b0836b25d5235103b5ca8554537d12785e432b529237967a2c11130a3e57d32df87ab15fee6fdff903f295e11e419bc727152df842ce3e810cdef5b1926e6d4ead41ecd569756ec6167f9f0e92370971bfebc1f5678cac3899a76cd381145af63aa36ea21e7f6f0d2aad5cb86f4932babc3cc50d6e6dcaf6f24b3ed05d454045926a2620d19a", 0x8d}, {&(0x7f0000000780)="05253bbd4865df5a6f678804227cad37cfd0c728222f7d45ae85", 0x1a}, {&(0x7f00000007c0)="213db06ec620fd36eab2630d39d1e4b3e1d33a9a0f4e6b960bd7a754f401ec3f963e6391fd4fdda5f692eb63197d3d102d65062ffa070ec1b46a7a846a4e4165df62971ab1b596c1c69511d3a9824c9f32eb81e9948ae2061671fb7586c6c5caa1a040db8c8240e1e35ce560d22bd134f95e68ba1b86bef6d1b362062048d8451b9cc056d1e255f7b8b2f2", 0x8b}, {&(0x7f0000000880)="892e92f59a75b63a36e6439b9015f39bcef0eef07fe752f5de7004339923de6486970b6b3c7346a36379f2129bc44f4cdae3ea3f4a76c96c1253bbd7d241a6c166fc007e4883b4a84aa92658b3b27b53d9ab2d421786b36c569dc54fb99d6b39cf636ff47034f6d7b13d0606b3323e10d35d9d98ff3c67e71cc1687da5e49e9f8d09f49244d0a61b272e6df093c5ba691fa319dfe71e2fcfa90f64205fa675e7f0", 0xa1}, {&(0x7f0000000940)="1ce7afd68e47febe3d8659203425bc18feb84259e245c2d17e2660e47f4965dc0504753589e096668eeb6db518ba8c3f8aa8629127454f67010b43a736debfeefb026197ebc46d541f5fcb8fa4cc5070946b8a6c2a6bc082c1bdcc5deeb8be2cc108ffcba0ccbb29d5882a28f9dbdc56d9926f5acf179fcb3f41edcf21b4dd7caddf23791950c1b5b70448b388d79b", 0x8f}], 0x7, &(0x7f0000000a80)=[@init={0x18, 0x84, 0x0, {0x7b4, 0x0, 0x9, 0x2}}, @init={0x18, 0x84, 0x0, {0xa1, 0xbf16, 0x6, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}}, @authinfo={0x18}], 0x80}], 0x2, 0x400c000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48020000", @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRES64=r4], 0x248}}, 0x8040)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {0x0, 0xfffffffffffffffe, 0x0, 0x4000000000000000}, {0x1}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha256-neon)\x00'}}}, @algo_crypt={0x48, 0x2, {{'salsa20-generic\x00'}}}]}, 0x180}}, 0x0)
r6 = epoll_create(0x2)
r7 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000340)="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", 0x0, 0x0, 0x0}, 0x38)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x80000000})

99.9729ms ago: executing program 0 (id=1007):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0100000000000000000000000000e33eb00b2678628a59b6d2960c000600010000000100000018"], 0x38}}, 0x0) (async)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, r5, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

90.538513ms ago: executing program 0 (id=1008):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x25dfdbfc, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf25190000004c0001801400020076657468305f746f5f68737200000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000001400020073797a6b616c6c657230000000000000440001800800030000000000140002006272696467655f736c6176655f3100000800030002000000140002006e69637666300000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="480001801400020065727370616e300000000000000000001400020064756d6d7930000000000000000000001400020064766d7270300000000000000000000008000300034760dbbe00018008000100", @ANYRES32=r5, @ANYBLOB="1400020067656e65766531000000000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
bind$netlink(r11, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0xa0, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10809}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_VF_PORTS={0x54, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x23}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "93ab620f4964558827d3aab3c3f24cd2"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "010d61a6d7996778cce7a057eea3ad75"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a0feff13f0ffa5ff7afad66789b41fd"}]}]}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0xa0}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r14, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x68, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x890)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

87.686981ms ago: executing program 2 (id=1009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008004a00c31b7661b5c5c5a331d5ff0323c4e07f2feb15a3c4e8c345066a59c8bad8a40e41bfdf1b05fa456f2dd03f568b0200000000000000ad01e96740ce116a754be156140311db6c280ef066929e63d09817a17d0a9e16d35902aa417e2fa1cab14e", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0}) (async)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) (rerun: 32)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="48001d8044000100240001006d6f6478000000000000faffffffffffffff0000000000000000000000020000050003000500000011000400746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

498.885µs ago: executing program 2 (id=1010):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
unshare(0x6020400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0x1, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800"], 0x68}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 2 (id=1011):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x4e)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={'lo\x00', {0x2, 0x4e23, @rand_addr=0x64010100}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc043}, 0x2810)
unshare(0x26020480)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x48000)
sendto$inet(r5, &(0x7f0000000400)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c9a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5c3dd53", 0x8a, 0x8c5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="01002abd7000fddbdf250f00000008002c000400000008000300", @ANYRES32=r7, @ANYBLOB="05002d007c00ff000000000000000000"], 0x34}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040)
splice(r5, 0x0, r4, 0x0, 0x8a, 0xa)
recvmmsg(r2, &(0x7f0000004f00), 0xfffffffffffffea5, 0x20, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0x11, 0x0, &(0x7f0000002340))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00faeb07825e0614d599d79a000000000000f35407f6d3eb3faf3cee0100"], 0x38}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23685' (ED25519) to the list of known hosts.
syzkaller login: [   40.669870][ T5831] cgroup: Unknown subsys name 'net'
[   40.767813][ T5831] cgroup: Unknown subsys name 'cpuset'
[   40.772032][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.918858][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.429820][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.432313][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.434963][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.435212][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.438311][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.440534][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.442676][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.448392][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.456872][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.459926][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.480340][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.483444][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.486359][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.489339][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.493969][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.542170][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   44.626680][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.629523][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.632160][ T5844] bridge_slave_0: entered allmulticast mode
[   44.635319][ T5844] bridge_slave_0: entered promiscuous mode
[   44.644296][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   44.648687][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.651202][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.653856][ T5844] bridge_slave_1: entered allmulticast mode
[   44.656812][ T5844] bridge_slave_1: entered promiscuous mode
[   44.687714][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.697438][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.715307][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   44.734602][ T5844] team0: Port device team_slave_0 added
[   44.737917][ T5844] team0: Port device team_slave_1 added
[   44.741392][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.744513][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.747647][ T5845] bridge_slave_0: entered allmulticast mode
[   44.750693][ T5845] bridge_slave_0: entered promiscuous mode
[   44.773757][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.777371][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.780426][ T5845] bridge_slave_1: entered allmulticast mode
[   44.783631][ T5845] bridge_slave_1: entered promiscuous mode
[   44.787370][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.790207][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.801000][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.813573][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.816176][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.825663][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.839080][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.851100][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.881731][ T5844] hsr_slave_0: entered promiscuous mode
[   44.884602][ T5844] hsr_slave_1: entered promiscuous mode
[   44.888058][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.890420][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.893016][ T5853] bridge_slave_0: entered allmulticast mode
[   44.895360][ T5853] bridge_slave_0: entered promiscuous mode
[   44.898844][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.901271][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.903922][ T5853] bridge_slave_1: entered allmulticast mode
[   44.906595][ T5853] bridge_slave_1: entered promiscuous mode
[   44.909226][ T5845] team0: Port device team_slave_0 added
[   44.911837][ T5845] team0: Port device team_slave_1 added
[   44.945993][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.949129][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.951338][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.960264][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.966108][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.969871][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.972183][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.981302][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.004857][ T5853] team0: Port device team_slave_0 added
[   45.010033][ T5853] team0: Port device team_slave_1 added
[   45.034390][ T5845] hsr_slave_0: entered promiscuous mode
[   45.037202][ T5845] hsr_slave_1: entered promiscuous mode
[   45.039230][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   45.041114][ T5845] Cannot create hsr debugfs directory
[   45.043257][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.047213][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.058011][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.063170][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.066668][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.077276][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.114603][ T5853] hsr_slave_0: entered promiscuous mode
[   45.117708][ T5853] hsr_slave_1: entered promiscuous mode
[   45.120441][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   45.122920][ T5853] Cannot create hsr debugfs directory
[   45.137866][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.141254][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.159248][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.162511][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.191311][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.193685][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.196203][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.198468][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.222533][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.226217][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.236948][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.245478][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.273096][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.275670][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.278253][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.280829][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.294211][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.297735][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.302112][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.306791][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.310200][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.317291][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.319747][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.323266][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.326462][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.335274][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   45.343920][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.346229][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.352987][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.355300][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.378361][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.394148][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   45.400821][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.403173][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.408459][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.411329][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.443848][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.450196][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.460687][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   45.467883][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.470165][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.472854][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.475228][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.499679][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.506134][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.516891][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.534939][ T5844] veth0_vlan: entered promiscuous mode
[   45.542391][ T5844] veth1_vlan: entered promiscuous mode
[   45.549941][ T5845] veth0_vlan: entered promiscuous mode
[   45.558240][ T5845] veth1_vlan: entered promiscuous mode
[   45.563560][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.571883][ T5844] veth0_macvtap: entered promiscuous mode
[   45.578646][ T5844] veth1_macvtap: entered promiscuous mode
[   45.588804][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.593298][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.602597][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.607618][ T5845] veth0_macvtap: entered promiscuous mode
[   45.611797][ T5845] veth1_macvtap: entered promiscuous mode
[   45.614345][ T5853] veth0_vlan: entered promiscuous mode
[   45.617386][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.620872][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.627401][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.635910][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.639644][ T5853] veth1_vlan: entered promiscuous mode
[   45.648364][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.658134][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.661582][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.671078][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.674153][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.678446][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.681820][ T5853] veth0_macvtap: entered promiscuous mode
[   45.684072][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.690559][ T5853] veth1_macvtap: entered promiscuous mode
[   45.709245][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.710391][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.713969][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.728171][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.730961][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.733532][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.746104][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.747662][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.754724][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.759067][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.761626][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.767713][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.772587][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.809861][ T5914] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   45.822148][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.825295][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.839931][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.845711][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.884512][ T5922] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   45.895402][ T5926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'.
[   45.900133][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.920474][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   45.925923][ T5930] Zero length message leads to an empty skb
[   45.926485][ T5932] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   45.930837][ T5932] team0: Device ipvlan2 is already an upper device of the team interface
[   46.049495][ T5939] syz.1.10 (5939) used greatest stack depth: 18896 bytes left
[   46.071607][ T5949] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.12'.
[   46.198994][ T5957] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   46.229435][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'.
[   46.232785][ T5960] netlink: 560 bytes leftover after parsing attributes in process `syz.1.18'.
[   46.237654][ T5961] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   46.240918][ T5960] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   46.332985][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'.
[   46.430262][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   46.435777][ T5981] Bluetooth: MGMT ver 1.23
[   46.443531][ T5981] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   46.447509][ T5981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.23'.
[   46.452120][ T5983] netlink: 'syz.1.26': attribute type 2 has an invalid length.
[   46.479990][ T5983] xt_socket: unknown flags 0xd0
[   46.482270][ T5983] veth0_to_team: entered promiscuous mode
[   46.484213][ T5983] veth0_to_team: entered allmulticast mode
[   46.486323][   T55] Bluetooth: hci0: command tx timeout
[   46.486355][ T5237] Bluetooth: hci1: command tx timeout
[   46.495348][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'.
[   46.520140][ T5987] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   46.525475][ T5987] gretap1: entered allmulticast mode
[   46.553911][ T5872] tipc: Subscription rejected, illegal request
[   46.566152][ T5237] Bluetooth: hci2: command tx timeout
[   46.710438][ T5996] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   46.713207][ T5996] netlink: 144 bytes leftover after parsing attributes in process `syz.1.30'.
[   46.717357][ T5996] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   46.752560][ T5998] netlink: 'syz.1.31': attribute type 4 has an invalid length.
[   46.810874][ T6012] netlink: 'syz.2.34': attribute type 10 has an invalid length.
[   46.825177][ T6013] netlink: 'syz.2.34': attribute type 10 has an invalid length.
[   46.829549][ T6012] 8021q: adding VLAN 0 to HW filter on device team0
[   46.840777][ T6012] bond0: (slave team0): Enslaving as an active interface with an up link
[   46.846560][ T6013] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   46.880464][ T6012] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.992893][ T6038] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   47.005478][ T6038] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   47.165242][ T6061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   47.353243][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.403151][ T6096] bond0: (slave wlan1): Opening slave failed
[   47.449107][ T6101] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   47.453659][ T6101] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   47.625327][ T6101] IPv6: addrconf: prefix option has invalid lifetime
[   47.740709][ T6117] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   47.743856][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   47.747549][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   47.750866][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   47.754329][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   47.806476][ T6125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.809837][ T6125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   47.858708][ T6126] geneve3: entered promiscuous mode
[   47.860645][ T6126] geneve3: entered allmulticast mode
[   47.863379][   T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[   47.866762][   T12] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[   47.869794][   T12] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[   48.273711][ T6140] netlink: zone id is out of range
[   48.274903][ T6141] netlink: zone id is out of range
[   48.275424][ T6140] netlink: zone id is out of range
[   48.277729][ T6141] netlink: zone id is out of range
[   48.280896][ T6140] netlink: zone id is out of range
[   48.283543][ T6141] netlink: zone id is out of range
[   48.565706][   T55] Bluetooth: hci0: command tx timeout
[   48.567918][ T5237] Bluetooth: hci1: command tx timeout
[   48.645743][ T5237] Bluetooth: hci2: command tx timeout
[   49.210970][ T6125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.215324][ T6125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   49.219916][ T6125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   49.287382][ T6125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.290864][ T6125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   49.294955][ T6125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   49.326092][ T6125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.330411][ T6125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   49.334721][ T6125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   49.401365][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   49.404728][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   49.408473][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[   49.414100][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   49.416898][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   49.419857][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[   49.425368][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   49.428772][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   49.432246][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[   49.439941][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   49.442711][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   49.445409][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[   49.519571][ T6184] syzkaller0: entered promiscuous mode
[   49.522505][ T6184] syzkaller0: entered allmulticast mode
[   49.528664][ T6183] tipc: Started in network mode
[   49.530779][ T6183] tipc: Node identity daa92ef02db5, cluster identity 4711
[   49.533848][ T6183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.544599][ T6183] tipc: Resetting bearer <eth:syzkaller0>
[   49.550976][ T6183] tipc: Disabling bearer <eth:syzkaller0>
[   49.914201][ T6210] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.194864][ T5991] IPVS: starting estimator thread 0...
[   50.269419][ T6258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.287446][ T6251] IPVS: using max 125 ests per chain, 300000 per kthread
[   50.329429][ T6258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.359556][ T6258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.409814][ T6258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.462029][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.467708][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.472981][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.478874][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.611498][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.615932][ T6284] bridge_slave_1 (unregistering): left allmulticast mode
[   50.618333][ T6284] bridge_slave_1 (unregistering): left promiscuous mode
[   50.620565][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.645678][ T5237] Bluetooth: hci1: command tx timeout
[   50.656048][ T5237] Bluetooth: hci0: command tx timeout
[   50.725757][ T5237] Bluetooth: hci2: command tx timeout
[   50.762245][ T6291] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.807581][ T6291] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.867200][ T6291] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.907641][ T6291] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.131611][ T6293] validate_nla: 18 callbacks suppressed
[   51.131621][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.137081][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.139593][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.142166][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.144633][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.147547][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.150063][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.152522][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.155090][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.158803][ T6293] netlink: 'syz.2.109': attribute type 29 has an invalid length.
[   51.188131][ T6294] __nla_validate_parse: 28 callbacks suppressed
[   51.188140][ T6294] netlink: 116 bytes leftover after parsing attributes in process `syz.2.109'.
[   51.984466][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   51.988217][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.2.110'.
[   51.991839][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   51.995425][ T6296] netlink: 348 bytes leftover after parsing attributes in process `syz.2.110'.
[   52.000203][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   52.007794][ T6296] net_ratelimit: 28 callbacks suppressed
[   52.007804][ T6296] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   52.055033][ T6303] bond0: (slave wlan1): Opening slave failed
[   52.086244][ T6305] netlink: 19 bytes leftover after parsing attributes in process `syz.2.113'.
[   52.174285][ T6308] netlink: 27 bytes leftover after parsing attributes in process `syz.2.114'.
[   52.175838][ T6309] netlink: 27 bytes leftover after parsing attributes in process `syz.2.114'.
[   52.267274][ T6316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.397919][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'.
[   52.470825][ T6333] team0: Port device geneve0 added
[   52.588631][ T6342] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   52.671158][ T6355] team0: No ports can be present during mode change
[   52.726246][ T5237] Bluetooth: hci1: command tx timeout
[   52.726270][   T55] Bluetooth: hci0: command tx timeout
[   52.806358][   T55] Bluetooth: hci2: command tx timeout
[   53.095446][ T6390] bond0: (slave wlan1): Opening slave failed
[   53.297414][ T6408] 8021q: adding VLAN 0 to HW filter on device team0
[   53.300278][ T6408] bond0: (slave team0): Enslaving as an active interface with an up link
[   53.306902][ T6409] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   53.353028][ T6411] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   53.528844][ T6425] openvswitch: netlink: Key type 16144 is out of range max 32
[   53.587746][ T6430] openvswitch: netlink: Flow actions attr not present in new flow.
[   53.629239][ T6433] Illegal XDP return value 4294967262 on prog  (id 51) dev N/A, expect packet loss!
[   53.976710][ T6439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.032010][ T6439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.055134][ T6445] veth0_to_bond: entered allmulticast mode
[   54.064103][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.072505][ T6439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.091458][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.101296][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.104664][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.112445][ T6439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.157590][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.165363][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.175043][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.180909][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.284551][ T6477] bond0: Error: Cannot enslave bond to itself.
[   54.316909][ T6479] chnl_net:caif_netlink_parms(): no params data found
[   54.353501][ T6484] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   54.550750][ T6502] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   54.601053][ T6509] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   54.603841][ T6509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.745335][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.751013][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.755306][ T6524] bond0 (unregistering): (slave team0): Releasing backup interface
[   54.760012][ T6524] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[   54.763420][ T6524] bond0 (unregistering): Released all slaves
[   54.836968][ T6527] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   54.874596][ T6531] block nbd0: Unsupported socket: shutdown callout must be supported.
[   55.197967][ T6579] tipc: New replicast peer: 255.255.255.255
[   55.200199][ T6579] tipc: Enabled bearer <udp:syz2>, priority 10
[   55.366151][ T5872] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   55.490477][ T6615] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.498673][ T6615] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.501398][ T6615] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   55.507354][ T6615] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   55.548712][ T6616] veth5: entered promiscuous mode
[   55.551371][ T6616] bond2: (slave veth5): Enslaving as an active interface with a down link
[   55.559832][ T6625] veth7: entered promiscuous mode
[   55.562650][ T6625] bond2: (slave veth7): Enslaving as an active interface with a down link
[   55.603969][ T6633] netlink: 'syz.1.214': attribute type 11 has an invalid length.
[   55.890815][ T6658] k*]: entered promiscuous mode
[   55.998494][ T6673] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   56.147844][ T6684] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   56.234586][ T6688] validate_nla: 37 callbacks suppressed
[   56.234598][ T6688] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   56.242371][ T6688] sctp: [Deprecated]: syz.1.232 (pid 6688) Use of struct sctp_assoc_value in delayed_ack socket option.
[   56.242371][ T6688] Use struct sctp_sack_info instead
[   56.269982][ T6690] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   56.316632][  T792] tipc: Node number set to 4145819376
[   56.327194][ T6690] bond0: (slave gretap0): Opening slave failed
[   56.442861][ T6699] __nla_validate_parse: 53 callbacks suppressed
[   56.442875][ T6699] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.235'.
[   56.524190][  T793] cfg80211: failed to load regulatory.db
[   56.530821][ T6706] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   56.533539][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.237'.
[   56.589326][ T6708] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.640351][ T6712] IPVS: length: 163 != 187531613888
[   56.660538][ T6708] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.667716][ T6714] pimreg: entered allmulticast mode
[   56.671304][ T6714] pimreg: left allmulticast mode
[   56.688016][ T6708] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.734572][ T6714] bond3: entered promiscuous mode
[   56.737342][ T6714] bond3: entered allmulticast mode
[   56.739750][ T6714] 8021q: adding VLAN 0 to HW filter on device bond3
[   56.758131][ T6708] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.268286][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   57.273827][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   57.319686][ T6737] team0: Device sit1 is of different type
[   57.397971][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   57.792576][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.802077][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.815681][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.819235][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.872352][ T6770] netlink: 'syz.2.258': attribute type 7 has an invalid length.
[   57.875782][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   57.920318][ T6770] bridge1: port 1(bond4) entered blocking state
[   57.923086][ T6770] bridge1: port 1(bond4) entered disabled state
[   57.929424][ T6770] bond4: entered allmulticast mode
[   57.944388][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   57.954001][ T6770] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.967097][ T6770] bond0: (slave rose0): Enslaving as an active interface with an up link
[   57.991504][ T6783] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   57.997361][ T6783] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   58.007215][ T6783] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.058860][ T6789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'.
[   58.073476][ T6796] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[   58.078272][ T6796] netlink: 'syz.2.264': attribute type 4 has an invalid length.
[   58.081319][ T6796] netlink: 188 bytes leftover after parsing attributes in process `syz.2.264'.
[   58.087772][ T6791] netlink: 'syz.1.263': attribute type 10 has an invalid length.
[   58.107343][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'.
[   58.137076][ T6791] team0: Port device geneve0 added
[   58.189812][ T6809] netlink: 'syz.1.267': attribute type 9 has an invalid length.
[   58.340882][ T6826] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.384704][ T6826] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.417342][ T6826] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.458221][ T6826] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.247001][ T6850] syzkaller1: entered promiscuous mode
[   59.251385][ T6850] syzkaller1: entered allmulticast mode
[   59.254608][ T6853] IPVS: Error connecting to the multicast addr
[   59.287327][ T6860] netlink: 'syz.1.280': attribute type 4 has an invalid length.
[   59.924861][ T6909] netlink: 'syz.2.291': attribute type 11 has an invalid length.
[   59.947007][ T6905] NCSI netlink: No device for ifindex 813332851
[   60.088851][ T6925] 8021q: adding VLAN 0 to HW filter on device bond6
[   60.091769][ T6925] bond5: (slave bond6): making interface the new active one
[   60.094425][ T6925] bond5: (slave bond6): Enslaving as an active interface with an up link
[   60.105413][ T6925] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[   60.128853][ T6930] xt_HMARK: proto mask must be zero with L3 mode
[   61.110299][ T6944] NCSI netlink: No device for ifindex 0
[   61.571867][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.577830][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.582872][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.588827][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.610023][ T6947] __nla_validate_parse: 15 callbacks suppressed
[   61.610032][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   61.669579][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   61.672522][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[   61.691153][ T6954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.303'.
[   61.717477][ T6956] vxcan1: entered allmulticast mode
[   61.720823][ T6957] vxcan1: left allmulticast mode
[   61.726265][ T6957] raw_sendmsg: syz.0.304 forgot to set AF_INET. Fix it!
[   61.801105][ T6961] net_ratelimit: 5 callbacks suppressed
[   61.801119][ T6961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.958562][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'.
[   61.983224][ T6965] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.010268][ T6965] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.059287][ T6965] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.109706][ T6965] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.180921][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.188418][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.195519][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.203306][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.465096][ T6976] bond0: (slave syz_tun): Releasing backup interface
[   62.470824][ T6976] bond0: (slave team0): Releasing backup interface
[   62.477145][ T6976] bridge_slave_0: left allmulticast mode
[   62.479334][ T6976] bridge_slave_0: left promiscuous mode
[   62.481457][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.485295][ T6976] bridge_slave_1: left allmulticast mode
[   62.488093][ T6976] bridge_slave_1: left promiscuous mode
[   62.490103][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.494995][ T6976] bond0: (slave bond_slave_0): Releasing backup interface
[   62.499918][ T6976] bond0: (slave bond_slave_1): Releasing backup interface
[   62.506994][ T6976] team0: Port device team_slave_0 removed
[   62.511862][ T6976] team0: Port device team_slave_1 removed
[   62.514203][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.518086][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.522146][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.524804][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.531213][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'.
[   62.533070][ T6976] team0: Port device geneve0 removed
[   62.538066][ T6976] bond2: (slave veth5): Releasing active interface
[   62.542366][ T6976] bond2: (slave veth7): Releasing active interface
[   62.546650][ T6976] bond4: left allmulticast mode
[   62.548620][ T6976] bridge1: port 1(bond4) entered disabled state
[   62.554007][ T6976] bond5: (slave bond6): Releasing backup interface
[   62.559438][ T6976] bond5: (slave bond6): the permanent HWaddr of slave - fe:21:26:ae:7c:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   62.566449][ T6976] bond5: (slave gretap1): making interface the new active one
[   62.571064][ T6976] bond5: (slave gretap1): Releasing backup interface
[   62.576082][  T792] syz2: Port: 1 Link DOWN
[   62.609686][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.663311][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   62.888144][ T6988] validate_nla: 3 callbacks suppressed
[   62.888158][ T6988] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   62.893609][ T6988] netlink: 'syz.1.314': attribute type 2 has an invalid length.
[   62.898698][ T6988] netlink: 'syz.1.314': attribute type 8 has an invalid length.
[   62.903056][ T6988] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.314'.
[   63.020192][ T6990] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   63.023567][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.029250][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.247228][ T6995] netlink: 'syz.1.317': attribute type 2 has an invalid length.
[   63.267071][ T6995] 8021q: adding VLAN 0 to HW filter on device team0
[   63.271706][ T6995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.303423][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   63.310910][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[   63.321681][ T7004] IPv6: sit1: Disabled Multicast RS
[   63.330462][ T7004] syzkaller1: entered promiscuous mode
[   63.332355][ T7004] syzkaller1: entered allmulticast mode
[   63.391054][ T7008] Bluetooth: MGMT ver 1.23
[   63.599779][ T7020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.183976][ T7030] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[   64.187888][ T7030] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[   64.221736][ T7035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.227993][ T5313] IPVS: starting estimator thread 0...
[   64.230164][ T7035] tipc: Failed to remove unknown binding: 66,1,1/4145819376:2026717466/2026717468
[   64.315730][ T7037] IPVS: using max 139 ests per chain, 333600 per kthread
[   65.057092][ T7034] tipc: Failed to remove unknown binding: 66,1,1/4145819376:2026717466/2026717468
[   65.061450][ T7034] tipc: Failed to remove unknown binding: 66,1,1/4145819376:2026717466/2026717468
[   65.083691][ T7055] netlink: 'syz.2.332': attribute type 15 has an invalid length.
[   65.089490][ T7055] : entered promiscuous mode
[   65.554154][ T7094] netlink: 'syz.0.341': attribute type 2 has an invalid length.
[   65.560414][ T7094] k*]: entered promiscuous mode
[   65.570611][ T7094] veth0_to_team: entered promiscuous mode
[   65.573791][ T7094] veth0_to_team: entered allmulticast mode
[   65.643482][ T7103] netlink: 'syz.1.343': attribute type 10 has an invalid length.
[   65.651939][ T7103] team0: Port device dummy0 added
[   65.654808][ T7105] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   65.660548][ T7105] team0: Failed to send options change via netlink (err -105)
[   65.663413][ T7105] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   65.669031][ T7105] team0: Port device dummy0 removed
[   65.673163][ T7106] IPv6: sit1: Disabled Multicast RS
[   65.676423][ T7106] sit1: entered allmulticast mode
[   65.679643][ T7106] tipc: Started in network mode
[   65.681609][ T7106] tipc: Node identity 080211000001, cluster identity 4711
[   65.684179][ T7106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.687130][ T7106] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   65.689933][ T7106] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   65.695246][ T7106] tipc: Resetting bearer <eth:syzkaller0>
[   65.915302][ T7116] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   65.925058][ T7116] bridge_slave_0: left allmulticast mode
[   65.928013][ T7116] bridge_slave_0: left promiscuous mode
[   65.929959][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.933164][ T7116] bridge_slave_1: left allmulticast mode
[   65.935030][ T7116] bridge_slave_1: left promiscuous mode
[   65.937570][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.942550][ T7116] bond0: (slave bond_slave_0): Releasing backup interface
[   65.949644][ T7116] bond0: (slave bond_slave_1): Releasing backup interface
[   65.954785][ T7116] team0: Port device team_slave_0 removed
[   65.959910][ T7116] team0: Port device team_slave_1 removed
[   65.962630][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.965780][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.969496][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.972449][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.984188][ T7117] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   65.991831][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.001537][ T7117] bond0: (slave wlan1): Opening slave failed
[   66.026552][ T7116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.030540][ T7116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   66.038776][ T7124] 8021q: adding VLAN 0 to HW filter on device bond7
[   66.045251][ T7124] 8021q: adding VLAN 0 to HW filter on device bond7
[   66.048307][ T7124] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[   66.052478][ T7124] bond7: (slave vcan1): Error -95 calling set_mac_address
[   66.091102][ T7124] gretap2: entered promiscuous mode
[   66.094054][ T7124] bond7: (slave gretap2): making interface the new active one
[   66.097330][ T7124] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   66.104745][ T7124] macvlan2: entered promiscuous mode
[   66.107470][ T7124] macvlan2: entered allmulticast mode
[   66.110027][ T7124] bond7: entered promiscuous mode
[   66.112447][ T7124] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.117201][ T7124] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[   66.122130][ T7124] bond7: left promiscuous mode
[   66.186347][ T7127] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   66.277714][ T7132] tipc: Started in network mode
[   66.279833][ T7132] tipc: Node identity ac14140f, cluster identity 4711
[   66.282644][ T7132] tipc: New replicast peer: 255.255.255.255
[   66.285259][ T7132] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.530553][ T7147] bond7: (slave gretap2): Releasing active interface
[   66.536790][ T7149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.658870][ T7153] __nla_validate_parse: 19 callbacks suppressed
[   66.658880][ T7153] netlink: 228 bytes leftover after parsing attributes in process `syz.1.361'.
[   66.664554][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[   66.670944][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'.
[   66.695684][ T5908] tipc: Node number set to 134418688
[   66.799244][ T7166] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   66.817820][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'.
[   66.821309][ T7163] netlink: 216 bytes leftover after parsing attributes in process `syz.0.364'.
[   66.846878][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'.
[   66.853161][ T7168] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   66.856043][ T7168] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   66.900999][ T7175] netlink: 19 bytes leftover after parsing attributes in process `syz.0.367'.
[   66.979501][ T7178] nbd: nbd0 already in use
[   67.026653][ T7182] nbd: device at index 0 is going down
[   67.048985][ T7184] netlink: 248 bytes leftover after parsing attributes in process `syz.0.371'.
[   67.093587][ T7188] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   67.177706][ T7198] netlink: 528 bytes leftover after parsing attributes in process `syz.1.375'.
[   67.194506][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'.
[   67.231800][ T7206] : entered promiscuous mode
[   67.258291][ T7211] syzkaller1: entered promiscuous mode
[   67.260418][ T7211] syzkaller1: entered allmulticast mode
[   67.274018][ T7218] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   67.276470][ T5908] tipc: Node number set to 2886997007
[   67.282622][ T7218] bridge_slave_0: left allmulticast mode
[   67.284708][ T7218] bridge_slave_0: left promiscuous mode
[   67.287350][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.292094][ T7218] team0: Port device team_slave_0 removed
[   67.298119][ T7218] team0: Port device team_slave_1 removed
[   67.300449][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.303095][ T7218] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.311217][ T7218] team0: Port device geneve0 removed
[   67.316597][ T7218] bond1: (slave geneve2): Releasing backup interface
[   67.321575][ T5872] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   67.324342][ T5872] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   67.331220][ T7218] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   67.333566][ T5872] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   67.341001][ T7218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   67.344155][ T7218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   67.347202][ T5872] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   67.373263][ T7220] IPVS: Scheduler module ip_vs_sip not found
[   67.400624][ T7236] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   67.561333][ T7278] sctp: [Deprecated]: syz.0.394 (pid 7278) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.561333][ T7278] Use struct sctp_sack_info instead
[   67.591896][ T7289] IPVS: Error connecting to the multicast addr
[   67.644071][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.284025][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.672004][ T7350] syzkaller1: entered promiscuous mode
[   68.673899][ T7350] syzkaller1: entered allmulticast mode
[   68.719656][ T7355] validate_nla: 7 callbacks suppressed
[   68.719670][ T7355] netlink: 'syz.1.415': attribute type 13 has an invalid length.
[   68.725396][ T7355] netlink: 'syz.1.415': attribute type 17 has an invalid length.
[   68.769617][ T7355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.952399][ T7376] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   68.970432][ T7377] netlink: 'syz.0.422': attribute type 10 has an invalid length.
[   68.973494][ T7377] bond0: (slave wlan1): Opening slave failed
[   68.978911][ T7377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   68.983006][ T7377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   69.047981][ T7382] netlink: 'syz.1.423': attribute type 2 has an invalid length.
[   69.052697][ T7382] : entered promiscuous mode
[   69.139873][ T7390] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003
[   69.362611][ T7421] netlink: 'syz.1.431': attribute type 1 has an invalid length.
[   69.365282][ T7421] NCSI netlink: No device for ifindex 0
[   69.667565][ T7455] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[   69.670158][ T7455] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[   69.896102][ T7461] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[   69.898947][ T7461] nbd: error processing sock list
[   69.900889][ T7461] block nbd1: shutting down sockets
[   69.930963][ T7479] netlink: 'syz.0.447': attribute type 2 has an invalid length.
[   69.986690][ T7495] netlink: 'syz.1.446': attribute type 13 has an invalid length.
[   70.002128][ T7495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.102397][ T7513] netlink: get zone limit has 8 unknown bytes
[   70.208663][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.303450][ T7536] bond1: (slave bridge2): making interface the new active one
[   70.310702][ T7536] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   70.746540][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.835726][ T7595] openvswitch: netlink: Message has 54 unknown bytes.
[   71.029720][ T7611] syz_tun: entered promiscuous mode
[   71.032405][ T7611] gretap0: entered promiscuous mode
[   71.037480][ T7611] syz_tun: left promiscuous mode
[   71.040046][ T7611] gretap0: left promiscuous mode
[   71.068433][ T7613] IPVS: Scheduler module ip_vs_ not found
[   71.212995][ T7623] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   71.217972][ T7623] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   71.349948][ T7639] team0: entered promiscuous mode
[   71.376104][ T7643] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   71.480461][ T7659] 8021q: adding VLAN 0 to HW filter on device team0
[   71.514883][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.517626][ T7660] team0: left promiscuous mode
[   71.519904][ T7660] 8021q: adding VLAN 0 to HW filter on device team0
[   71.708336][ T7666] 8021q: adding VLAN 0 to HW filter on device bond8
[   71.715699][ T7666] bond8: (slave gretap3): making interface the new active one
[   71.718736][ T7666] bond8: (slave gretap3): Enslaving as an active interface with an up link
[   71.912188][ T5874] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   72.012285][ T7691] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   72.027981][ T7692] team0: Mode changed to "activebackup"
[   72.129558][ T7706] __nla_validate_parse: 77 callbacks suppressed
[   72.129573][ T7706] netlink: 256 bytes leftover after parsing attributes in process `syz.1.499'.
[   72.153287][ T7707] netlink: 224 bytes leftover after parsing attributes in process `syz.2.500'.
[   72.179199][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[   72.210181][ T7716] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.502'.
[   72.253027][ T7719] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   72.258825][ T7719] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   72.423029][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'.
[   72.427864][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'.
[   72.466098][ T7741] Unsupported ieee802154 address type: 0
[   72.483620][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'.
[   72.983342][ T7751] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.987273][ T7751] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   73.018562][ T7751] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.021919][ T7751] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   73.070262][ T7755] bond1: (slave bridge2): Releasing active interface
[   73.088326][ T7751] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.092277][ T7751] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   73.127752][ T7751] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.131389][ T7751] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   73.184412][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   73.187352][ T5872] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   73.191943][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   73.195071][ T5872] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   73.200534][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   73.203185][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   73.208493][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   73.211119][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   73.232994][ T7758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.517'.
[   73.325489][ T7768] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[   73.357800][ T7773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.360377][ T7773] syzkaller0: entered promiscuous mode
[   73.362501][ T7773] syzkaller0: entered allmulticast mode
[   73.366129][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[   73.369644][ T7778] net_ratelimit: 4 callbacks suppressed
[   73.369653][ T7778] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   73.374362][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.376109][ T7773] tipc: Resetting bearer <eth:syzkaller0>
[   73.380188][ T7772] tipc: Resetting bearer <eth:syzkaller0>
[   73.385148][ T7772] tipc: Disabling bearer <eth:syzkaller0>
[   73.924997][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[   75.199507][ T7844] validate_nla: 17 callbacks suppressed
[   75.199517][ T7844] netlink: 'syz.2.540': attribute type 10 has an invalid length.
[   75.355723][ T7855] nbd2: detected capacity change from 0 to 63
[   75.378865][ T7855] block nbd2: NBD_DISCONNECT
[   75.380988][ T7855] block nbd2: Disconnected due to user request.
[   75.383653][ T7855] block nbd2: shutting down sockets
[   75.388597][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.392062][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.395299][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.398515][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   75.401351][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.404692][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   75.407330][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.410229][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   75.412710][ T5849] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.415700][ T5849] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.418215][ T5849] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.421664][ T5849] Buffer I/O error on dev nbd2, logical block 1, async page read
[   75.424224][ T5849] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.427162][ T5849] Buffer I/O error on dev nbd2, logical block 2, async page read
[   75.429998][ T5849] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.433144][ T5849] Buffer I/O error on dev nbd2, logical block 3, async page read
[   75.436050][ T5849] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.438960][ T5849] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.441484][ T5849] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   75.444931][ T5849] Buffer I/O error on dev nbd2, logical block 1, async page read
[   75.449356][ T5849] ldm_validate_partition_table(): Disk read failed.
[   75.452948][ T5849] Dev nbd2: unable to read RDB block 0
[   75.456665][ T5849]  nbd2: unable to read partition table
[   75.461883][ T5849] ldm_validate_partition_table(): Disk read failed.
[   75.465396][ T5849] Dev nbd2: unable to read RDB block 0
[   75.468588][ T5849]  nbd2: unable to read partition table
[   75.611163][ T7874] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   75.876558][ T7888] netlink: 'syz.0.553': attribute type 1 has an invalid length.
[   76.431827][ T7910] netlink: 'syz.0.560': attribute type 1 has an invalid length.
[   76.432031][ T7911] netlink: 'syz.0.560': attribute type 1 has an invalid length.
[   76.444607][ T7909] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   76.450038][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   76.450521][ T7909] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.460804][ T7909] veth9: entered promiscuous mode
[   76.463316][ T7909] bond2: (slave veth9): Enslaving as a backup interface with a down link
[   76.470867][ T7910] veth11: entered promiscuous mode
[   76.473699][ T7910] bond2: (slave veth11): Enslaving as a backup interface with a down link
[   76.482825][ T7909] bond2: (slave ip6gretap1): Removing an active aggregator
[   76.485412][ T7909] bond2: (slave ip6gretap1): Releasing backup interface
[   76.489266][ T7909] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 52:2f:7a:d4:e6:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   76.496688][ T7909] bond2: (slave veth9): Releasing backup interface
[   76.499937][ T7909] bond2: (slave veth11): Releasing backup interface
[   76.545728][ T7916] _Z`Ԁ@: entered promiscuous mode
[   77.092407][ T7943] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.147233][ T7943] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.187633][ T7943] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.227853][ T7943] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.275983][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.282332][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.287447][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.292644][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.373507][ T7954] __nla_validate_parse: 17 callbacks suppressed
[   77.373517][ T7954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.574'.
[   77.387851][ T7954] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   77.431352][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[   77.434161][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[   77.500234][ T7969] netlink: 'syz.1.580': attribute type 1 has an invalid length.
[   77.502866][ T7969] netlink: 'syz.1.580': attribute type 4 has an invalid length.
[   77.505409][ T7969] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.580'.
[   77.631080][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'.
[   77.858375][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803aefb400: rx timeout, send abort
[   77.861849][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803aef9800: rx timeout, send abort
[   77.865309][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803aefb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   77.871110][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803aef9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   78.319048][ T7993] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   78.341649][ T7997] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   78.346207][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.2.587 Not tainted syzkaller #0 PREEMPT(full) 
[   78.346218][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.346222][ T7997] Call Trace:
[   78.346225][ T7997]  <TASK>
[   78.346228][ T7997]  dump_stack_lvl+0x189/0x250
[   78.346241][ T7997]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.346249][ T7997]  ? __pfx__printk+0x10/0x10
[   78.346257][ T7997]  ? kernfs_root+0x1c/0x230
[   78.346265][ T7997]  ? kernfs_path_from_node+0x2f/0x290
[   78.346272][ T7997]  ? kernfs_path_from_node+0x250/0x290
[   78.346279][ T7997]  ? kernfs_path_from_node+0x2f/0x290
[   78.346286][ T7997]  sysfs_warn_dup+0x8e/0xa0
[   78.346294][ T7997]  sysfs_do_create_link_sd+0xc0/0x110
[   78.346301][ T7997]  device_add_class_symlinks+0x1cf/0x240
[   78.346309][ T7997]  device_add+0x475/0xb50
[   78.346316][ T7997]  wiphy_register+0x1ba6/0x28d0
[   78.346328][ T7997]  ? __pfx_wiphy_register+0x10/0x10
[   78.346337][ T7997]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   78.346345][ T7997]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   78.346352][ T7997]  ieee80211_register_hw+0x3425/0x4080
[   78.346363][ T7997]  ? ieee80211_register_hw+0x1461/0x4080
[   78.346371][ T7997]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   78.346378][ T7997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   78.346389][ T7997]  ? __hrtimer_setup+0x187/0x210
[   78.346395][ T7997]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   78.346406][ T7997]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   78.346418][ T7997]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   78.346425][ T7997]  ? trace_kmalloc+0x1f/0xd0
[   78.346434][ T7997]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   78.346443][ T7997]  ? kstrndup+0xbf/0x160
[   78.346452][ T7997]  hwsim_new_radio_nl+0xea4/0x1b10
[   78.346460][ T7997]  ? __pfx___nla_validate_parse+0x10/0x10
[   78.346472][ T7997]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   78.346482][ T7997]  ? __nla_parse+0x40/0x60
[   78.346492][ T7997]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   78.346502][ T7997]  genl_family_rcv_msg_doit+0x215/0x300
[   78.346511][ T7997]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   78.346520][ T7997]  ? bpf_lsm_capable+0x9/0x20
[   78.346529][ T7997]  ? security_capable+0x7e/0x2e0
[   78.346540][ T7997]  genl_rcv_msg+0x60e/0x790
[   78.346548][ T7997]  ? __pfx_genl_rcv_msg+0x10/0x10
[   78.346555][ T7997]  ? __kasan_slab_alloc+0x6c/0x80
[   78.346564][ T7997]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   78.346572][ T7997]  ? __netlink_lookup+0xbd/0x810
[   78.346577][ T7997]  ? rcu_is_watching+0x15/0xb0
[   78.346585][ T7997]  netlink_rcv_skb+0x208/0x470
[   78.346613][ T7997]  ? __pfx_genl_rcv_msg+0x10/0x10
[   78.346620][ T7997]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   78.346631][ T7997]  ? lock_release+0x4b/0x3e0
[   78.346644][ T7997]  ? down_read+0x1ad/0x2e0
[   78.346652][ T7997]  genl_rcv+0x28/0x40
[   78.346662][ T7997]  netlink_unicast+0x82f/0x9e0
[   78.346673][ T7997]  ? __pfx_netlink_unicast+0x10/0x10
[   78.346681][ T7997]  ? netlink_sendmsg+0x642/0xb30
[   78.346690][ T7997]  ? skb_put+0x11b/0x210
[   78.346702][ T7997]  netlink_sendmsg+0x805/0xb30
[   78.346713][ T7997]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.346743][ T7997]  ? futex_unqueue+0x22/0x240
[   78.346752][ T7997]  ? aa_sock_msg_perm+0xf1/0x1d0
[   78.346758][ T7997]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   78.346766][ T7997]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.346775][ T7997]  __sock_sendmsg+0x21c/0x270
[   78.346784][ T7997]  ____sys_sendmsg+0x505/0x830
[   78.346792][ T7997]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.346800][ T7997]  ? import_iovec+0x74/0xa0
[   78.346808][ T7997]  ___sys_sendmsg+0x21f/0x2a0
[   78.346815][ T7997]  ? __pfx____sys_sendmsg+0x10/0x10
[   78.346823][ T7997]  ? futex_wait+0x285/0x360
[   78.346836][ T7997]  ? __fget_files+0x2a/0x420
[   78.346846][ T7997]  ? __fget_files+0x3a0/0x420
[   78.346857][ T7997]  __x64_sys_sendmsg+0x19b/0x260
[   78.346863][ T7997]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   78.346871][ T7997]  ? rcu_is_watching+0x15/0xb0
[   78.346878][ T7997]  ? rcu_is_watching+0x15/0xb0
[   78.346885][ T7997]  do_syscall_64+0xfa/0x3b0
[   78.346895][ T7997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.346901][ T7997]  ? exc_page_fault+0x9f/0xf0
[   78.346910][ T7997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.346916][ T7997] RIP: 0033:0x7fd35038ebe9
[   78.346923][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.346929][ T7997] RSP: 002b:00007fd34e5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.346938][ T7997] RAX: ffffffffffffffda RBX: 00007fd3505c6180 RCX: 00007fd35038ebe9
[   78.346943][ T7997] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   78.346947][ T7997] RBP: 00007fd350411e19 R08: 0000000000000000 R09: 0000000000000000
[   78.346952][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.346956][ T7997] R13: 00007fd3505c6218 R14: 00007fd3505c6180 R15: 00007ffc86bfe688
[   78.346963][ T7997]  </TASK>
[   78.559481][ T7999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.589'.
[   78.583964][ T8009] nftables ruleset with unbound set
[   78.589761][ T8009] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   78.609384][ T8011] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.591'.
[   78.641619][ T8013] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[   78.644146][ T8013] netlink: 'syz.1.592': attribute type 4 has an invalid length.
[   78.699517][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'.
[   78.734458][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'.
[   79.019365][ T8040] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   79.021810][ T8040] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   79.046445][ T8042] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.107033][ T8042] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.147565][ T8042] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.188037][ T8042] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.234115][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.239929][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.245899][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.251102][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.273480][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'.
[   79.310008][ T8044] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.347403][ T8044] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.387543][ T8044] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.427769][ T8044] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.510081][ T8048] netlink: 'syz.2.604': attribute type 9 has an invalid length.
[   79.534320][ T8051] nbd: must specify a size in bytes for the device
[   80.697885][ T8083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.731517][ T8085] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.735184][ T8085] validate_nla: 4 callbacks suppressed
[   80.735193][ T8085] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[   80.857099][ T8100] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.285333][ T8138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.454086][ T8151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.457313][ T8152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.543951][ T8174] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[   81.581584][ T8184] nbd: must specify at least one socket
[   81.590480][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.594302][ T8186] netlink: 'syz.2.639': attribute type 1 has an invalid length.
[   81.617555][ T8192] netlink: 'syz.2.642': attribute type 1 has an invalid length.
[   81.632224][ T8192] 8021q: adding VLAN 0 to HW filter on device bond9
[   81.730299][ T8192] veth0_to_bond: left allmulticast mode
[   81.813391][ T8192] veth5: left promiscuous mode
[   81.815279][ T8192] veth7: left promiscuous mode
[   81.817354][ T8192] bond3: left promiscuous mode
[   81.819114][ T8192] bond3: left allmulticast mode
[   81.822277][ T8192] gretap2: left promiscuous mode
[   81.831750][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.835919][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.838713][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.841922][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.861223][ T8211] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[   81.870861][ T8211] 8021q: adding VLAN 0 to HW filter on device bond10
[   81.908355][ T8212] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[   82.029650][ T8217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   82.050380][ T8228] netlink: 'syz.2.648': attribute type 3 has an invalid length.
[   82.084542][ T8230] erspan0: entered promiscuous mode
[   82.088916][ T8230] erspan0: left promiscuous mode
[   82.131589][ T8230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.134876][ T8230] syzkaller0: entered promiscuous mode
[   82.137367][ T8230] syzkaller0: entered allmulticast mode
[   82.142034][ T8229] tipc: Resetting bearer <eth:syzkaller0>
[   82.146798][ T8229] tipc: Disabling bearer <eth:syzkaller0>
[   82.762937][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.768851][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.775154][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.781931][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.811540][ T8249] netlink: zone id is out of range
[   82.811559][ T8248] netlink: zone id is out of range
[   82.813270][ T8249] netlink: zone id is out of range
[   82.813286][ T8249] netlink: zone id is out of range
[   82.813288][ T8249] netlink: zone id is out of range
[   82.813333][ T8249] netlink: zone id is out of range
[   82.815259][ T8248] netlink: zone id is out of range
[   82.984120][ T8264] netlink: 'syz.2.658': attribute type 10 has an invalid length.
[   83.014430][ T8273] __nla_validate_parse: 21 callbacks suppressed
[   83.014440][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[   83.059749][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[   83.074599][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.663'.
[   83.131528][ T8281] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   83.158000][ T8291] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.161232][ T8291] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[   83.206366][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'.
[   83.209419][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'.
[   83.212300][ T8293] netlink: 'syz.0.667': attribute type 7 has an invalid length.
[   83.253590][ T8309] netlink: 'syz.0.670': attribute type 11 has an invalid length.
[   83.258223][ T8309] netlink: 9748 bytes leftover after parsing attributes in process `syz.0.670'.
[   83.294350][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'.
[   83.305325][ T8314] syzkaller1: entered promiscuous mode
[   83.310219][ T8314] syzkaller1: entered allmulticast mode
[   83.323945][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[   83.328161][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'.
[   83.331951][ T8313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.672'.
[   83.350347][ T8319] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   84.085518][ T8418] 8021q: adding VLAN 0 to HW filter on device team0
[   84.091326][ T8418] bond0: (slave team0): Enslaving as an active interface with an up link
[   84.123953][ T8421] tipc: Disabling bearer <udp:syz2>
[   84.157251][ T8423] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   84.194634][ T8431] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.200310][ T8431] bond3: (slave wlan0): Opening slave failed
[   84.229860][ T8440] _Z`Ԁ@S!: entered promiscuous mode
[   84.983183][ T8555] geneve3: entered promiscuous mode
[   84.985006][ T8555] geneve3: entered allmulticast mode
[   84.987770][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   84.991598][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   84.994428][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   84.998339][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   85.505210][ T8597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.520956][ T8597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.530144][ T8603] 8021q: adding VLAN 0 to HW filter on device bond11
[   85.536760][ T8604] bond11: (slave geneve4): making interface the new active one
[   85.539852][ T8604] bond11: (slave geneve4): Enslaving as an active interface with an up link
[   85.542780][ T5874] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   85.545915][ T5874] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   85.548952][ T5874] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   85.557100][ T5874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   85.566351][ T8608] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.569984][ T8608] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.598333][ T8597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.603334][ T8608] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.606692][ T8608] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.638472][ T8597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.678034][ T8608] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.681608][ T8608] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.757568][ T8608] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.760876][ T8608] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.803122][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.806747][ T5874] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   85.812651][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.816262][ T5874] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   85.823328][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.826612][ T5874] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   85.834238][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.837238][ T5874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   86.199242][ T8635] net_ratelimit: 23 callbacks suppressed
[   86.199252][ T8635] openvswitch: netlink: Flow actions attr not present in new flow.
[   86.387210][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.395478][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.406495][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.412420][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.437901][ T8657] bond0 (unregistering): (slave team0): Releasing backup interface
[   86.443723][ T8657] bond0 (unregistering): Released all slaves
[   86.452253][ T8658] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   86.631900][ T8683] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   87.351854][ T8695] team0: Mode changed to "activebackup"
[   87.355016][ T8695] tipc: Enabling <ib:lo> not permitted
[   87.357193][ T8695] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   87.360330][ T8696] tipc: Enabling <ib:lo> not permitted
[   87.362528][ T8696] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   87.470026][ T8697] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   87.505502][ T8734] validate_nla: 21 callbacks suppressed
[   87.505514][ T8734] netlink: 'syz.1.772': attribute type 13 has an invalid length.
[   87.516429][ T8732] netlink: 'syz.0.771': attribute type 4 has an invalid length.
[   87.541906][ T8740] netlink: 'syz.0.775': attribute type 10 has an invalid length.
[   87.546625][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.549225][ T8740] bond0: (slave wlan1): Opening slave failed
[   87.915483][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.036347][ T8779] __nla_validate_parse: 37 callbacks suppressed
[   88.036358][ T8779] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.786'.
[   88.062076][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'.
[   88.120859][ T8784] netlink: 232 bytes leftover after parsing attributes in process `syz.2.788'.
[   88.124059][ T8785] netlink: 232 bytes leftover after parsing attributes in process `syz.2.788'.
[   88.162189][ T8789] netlink: 'syz.2.789': attribute type 1 has an invalid length.
[   88.192434][ T8789] bond0: (slave veth9): Enslaving as an active interface with a down link
[   88.199345][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'.
[   88.203738][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.298748][ T8811] netlink: 'syz.2.793': attribute type 3 has an invalid length.
[   88.307824][ T8811] netlink: 'syz.2.793': attribute type 1 has an invalid length.
[   88.310374][ T8811] netlink: 220 bytes leftover after parsing attributes in process `syz.2.793'.
[   88.403177][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.793'.
[   88.432863][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[   88.464288][ T8832] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   88.480151][ T8834] netlink: 'syz.1.797': attribute type 1 has an invalid length.
[   88.498327][ T8839] netlink: 165 bytes leftover after parsing attributes in process `syz.0.798'.
[   88.500001][ T8834] bond4: (slave gretap2): making interface the new active one
[   88.503999][ T8834] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   88.549139][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'.
[   88.601574][ T8864] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.604324][ T8864] bond0: (slave bond3): Enslaving as an active interface with an up link
[   88.651422][ T8876] netlink: 'syz.1.808': attribute type 3 has an invalid length.
[   88.655510][ T8876] syz_tun: entered allmulticast mode
[   88.670302][ T8872] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[   88.672971][ T8872] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[   88.695447][ T8878] : entered promiscuous mode
[   88.712796][ T8882] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   88.829220][ T8891] bond0: (slave bond3): Error -95 calling ndo_bpf
[   88.831421][ T8891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   89.394711][ T8905] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   89.445766][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[   89.484100][ T8875] syz_tun: left allmulticast mode
[   89.514141][ T8920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.522390][ T8917] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.551489][ T8931] openvswitch: netlink: Flow key attr not present in new flow.
[   89.570556][ T8917] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.580655][ T8934] siw: device registration error -23
[   89.582529][ T8933] siw: device registration error -23
[   89.604505][ T8939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.604813][ T8941] netlink: get zone limit has 8 unknown bytes
[   89.609205][ T8939] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   89.613376][ T8939] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   89.623996][ T8917] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.682648][ T8949] tipc: Resetting bearer <eth:syzkaller0>
[   89.685481][ T8949] openvswitch: netlink: Key type 251 is out of range max 32
[   89.691120][ T8917] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.733416][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.739494][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.747027][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.754076][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.513602][ T8984] bridge1: entered allmulticast mode
[   90.524508][ T8981] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   90.640867][ T9004] bond4: (slave gretap2): Releasing active interface
[   90.707670][ T9015] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.710911][ T9015] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.809075][ T9022] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.813678][ T9021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.817528][ T9021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   90.828141][ T9022] bond0: (slave bond3): Releasing backup interface
[   90.878254][ T9021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.882491][ T9021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   90.939095][ T9021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.943249][ T9021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   90.999022][ T9021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.003060][ T9021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   91.063230][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.066996][ T5874] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   91.072470][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.076420][ T5874] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   91.082473][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.086026][ T5874] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   91.092796][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.095479][ T5874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   91.142852][ T9027] : entered promiscuous mode
[   91.514387][ T9057] syzkaller0: entered promiscuous mode
[   91.516418][ T9057] syzkaller0: entered allmulticast mode
[   91.606512][ T9061] _Z`Ԁ@S: entered promiscuous mode
[   91.625218][ T9068] net_ratelimit: 3 callbacks suppressed
[   91.625228][ T9068] openvswitch: netlink: Key type 74 is out of range max 32
[   91.625236][ T9069] openvswitch: netlink: Key type 74 is out of range max 32
[   92.001274][ T9099] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   92.845100][ T9116] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   92.848403][ T9116] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   92.850960][ T9116] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   92.949496][ T9131] tipc: New replicast peer: 255.255.255.255
[   92.951991][ T9131] tipc: Enabled bearer <udp:syz2>, priority 26
[   92.997638][ T9136] openvswitch: netlink: Key type 29 is not supported
[   93.121764][ T9139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.126004][ T9139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.551927][ T9153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.556103][ T9154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.587533][ T9164] sctp: [Deprecated]: syz.1.886 (pid 9164) Use of int in max_burst socket option deprecated.
[   93.587533][ T9164] Use struct sctp_assoc_value instead
[   93.607773][ T9166] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   93.611950][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.1.887 Not tainted syzkaller #0 PREEMPT(full) 
[   93.611965][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.611972][ T9166] Call Trace:
[   93.611977][ T9166]  <TASK>
[   93.611982][ T9166]  dump_stack_lvl+0x189/0x250
[   93.611998][ T9166]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.612008][ T9166]  ? __pfx__printk+0x10/0x10
[   93.612017][ T9166]  ? kernfs_root+0x1c/0x230
[   93.612025][ T9166]  ? kernfs_path_from_node+0x2f/0x290
[   93.612032][ T9166]  ? kernfs_path_from_node+0x250/0x290
[   93.612039][ T9166]  ? kernfs_path_from_node+0x2f/0x290
[   93.612047][ T9166]  sysfs_warn_dup+0x8e/0xa0
[   93.612054][ T9166]  sysfs_do_create_link_sd+0xc0/0x110
[   93.612061][ T9166]  device_add_class_symlinks+0x1cf/0x240
[   93.612070][ T9166]  device_add+0x475/0xb50
[   93.612077][ T9166]  wiphy_register+0x1ba6/0x28d0
[   93.612090][ T9166]  ? __pfx_wiphy_register+0x10/0x10
[   93.612099][ T9166]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   93.612108][ T9166]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   93.612116][ T9166]  ieee80211_register_hw+0x3425/0x4080
[   93.612126][ T9166]  ? ieee80211_register_hw+0x1461/0x4080
[   93.612134][ T9166]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   93.612144][ T9166]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.612160][ T9166]  ? __hrtimer_setup+0x187/0x210
[   93.612171][ T9166]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   93.612184][ T9166]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   93.612205][ T9166]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   93.612218][ T9166]  ? trace_kmalloc+0x1f/0xd0
[   93.612229][ T9166]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   93.612241][ T9166]  ? kstrndup+0xbf/0x160
[   93.612254][ T9166]  hwsim_new_radio_nl+0xea4/0x1b10
[   93.612268][ T9166]  ? __pfx___nla_validate_parse+0x10/0x10
[   93.612287][ T9166]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.612303][ T9166]  ? __nla_parse+0x40/0x60
[   93.612326][ T9166]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   93.612341][ T9166]  genl_family_rcv_msg_doit+0x215/0x300
[   93.612355][ T9166]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   93.612365][ T9166]  ? bpf_lsm_capable+0x9/0x20
[   93.612374][ T9166]  ? security_capable+0x7e/0x2e0
[   93.612385][ T9166]  genl_rcv_msg+0x60e/0x790
[   93.612395][ T9166]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.612402][ T9166]  ? __kasan_slab_alloc+0x6c/0x80
[   93.612414][ T9166]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.612427][ T9166]  ? __netlink_lookup+0xbd/0x810
[   93.612436][ T9166]  ? rcu_is_watching+0x15/0xb0
[   93.612449][ T9166]  netlink_rcv_skb+0x208/0x470
[   93.612464][ T9166]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.612476][ T9166]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.612493][ T9166]  ? lock_release+0x4b/0x3e0
[   93.612510][ T9166]  ? down_read+0x1ad/0x2e0
[   93.612520][ T9166]  genl_rcv+0x28/0x40
[   93.612530][ T9166]  netlink_unicast+0x82f/0x9e0
[   93.612546][ T9166]  ? __pfx_netlink_unicast+0x10/0x10
[   93.612560][ T9166]  ? netlink_sendmsg+0x642/0xb30
[   93.612575][ T9166]  ? skb_put+0x11b/0x210
[   93.612609][ T9166]  netlink_sendmsg+0x805/0xb30
[   93.612639][ T9166]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.612649][ T9166]  ? futex_unqueue+0x22/0x240
[   93.612657][ T9166]  ? aa_sock_msg_perm+0xf1/0x1d0
[   93.612664][ T9166]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.612672][ T9166]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.612682][ T9166]  __sock_sendmsg+0x21c/0x270
[   93.612693][ T9166]  ____sys_sendmsg+0x505/0x830
[   93.612700][ T9166]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.612708][ T9166]  ? import_iovec+0x74/0xa0
[   93.612717][ T9166]  ___sys_sendmsg+0x21f/0x2a0
[   93.612725][ T9166]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.612733][ T9166]  ? futex_wait+0x285/0x360
[   93.612747][ T9166]  ? __fget_files+0x2a/0x420
[   93.612757][ T9166]  ? __fget_files+0x3a0/0x420
[   93.612768][ T9166]  __x64_sys_sendmsg+0x19b/0x260
[   93.612775][ T9166]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.612784][ T9166]  ? rcu_is_watching+0x15/0xb0
[   93.612791][ T9166]  do_syscall_64+0xfa/0x3b0
[   93.612801][ T9166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.612808][ T9166]  ? exc_page_fault+0x9f/0xf0
[   93.612817][ T9166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.612824][ T9166] RIP: 0033:0x7fe555f8ebe9
[   93.612831][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.612837][ T9166] RSP: 002b:00007fe556eb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.612846][ T9166] RAX: ffffffffffffffda RBX: 00007fe5561c5fa0 RCX: 00007fe555f8ebe9
[   93.612851][ T9166] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   93.612855][ T9166] RBP: 00007fe556011e19 R08: 0000000000000000 R09: 0000000000000000
[   93.612860][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.612864][ T9166] R13: 00007fe5561c6038 R14: 00007fe5561c5fa0 R15: 00007ffd256397e8
[   93.612872][ T9166]  </TASK>
[   93.875865][ T9183] __nla_validate_parse: 30 callbacks suppressed
[   93.875878][ T9183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.893'.
[   93.949831][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[   93.976056][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'.
[   93.979610][ T9188] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   94.081198][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[   94.081236][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[   94.109534][ T9220] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   94.112639][ T9220] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.713620][ T9236] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.908'.
[   94.802158][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'.
[   94.852591][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'.
[   94.890733][ T9264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.947309][ T9277] netlink: 44 bytes leftover after parsing attributes in process `syz.0.918'.
[   94.951961][ T9277] validate_nla: 12 callbacks suppressed
[   94.951968][ T9277] netlink: 'syz.0.918': attribute type 23 has an invalid length.
[   95.076791][ T9298] netlink: 'syz.0.924': attribute type 11 has an invalid length.
[   95.084737][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'.
[   95.088446][ T9295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.094100][ T9300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.116090][ T9303] can: request_module (can-proto-5) failed.
[   95.135484][ T9308] netlink: 'syz.1.928': attribute type 2 has an invalid length.
[   95.138736][ T9311] netlink: 'syz.1.928': attribute type 2 has an invalid length.
[   95.143678][ T9308] : entered promiscuous mode
[   95.148317][ T9312] netlink: 'syz.2.930': attribute type 7 has an invalid length.
[   95.151117][ T9312] netlink: 'syz.2.930': attribute type 8 has an invalid length.
[   95.153920][ T9312] netlink: 'syz.2.930': attribute type 15 has an invalid length.
[   95.159891][ T9312] netlink: 'syz.2.930': attribute type 1 has an invalid length.
[   95.175475][ T9317] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.241601][ T9331] netlink: 'syz.0.934': attribute type 4 has an invalid length.
[   95.244540][ T9331] team0: Mode changed to "broadcast"
[   95.272756][ T9336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.275305][ T9336] IPv6: NLM_F_CREATE should be set when creating new route
[   95.277654][ T9336] IPv6: NLM_F_CREATE should be set when creating new route
[   95.279947][ T9336] IPv6: NLM_F_CREATE should be set when creating new route
[   95.282315][ T9341] netlink: 'syz.0.936': attribute type 10 has an invalid length.
[   95.287528][ T9341] 8021q: adding VLAN 0 to HW filter on device team0
[   95.290876][ T9341] bond0: (slave team0): Enslaving as an active interface with an up link
[   95.294414][ T9336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.302051][ T9341] netlink: 'syz.0.936': attribute type 10 has an invalid length.
[   95.315162][ T9341] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   95.349430][ T9341] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.352944][ T9341] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[   95.411270][ T9363] pimreg: entered allmulticast mode
[   95.415356][ T9363] pimreg: left allmulticast mode
[   95.544913][ T9384] syzkaller1: entered promiscuous mode
[   95.547003][ T9384] syzkaller1: entered allmulticast mode
[   95.550035][ T9384] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   95.679598][ T9411] Unsupported ieee802154 address type: 0
[   95.723222][ T9418] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   95.775696][ T9428] netlink: ct family unspecified
[   95.777718][ T9428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.783284][ T9425] openvswitch: netlink: Message has 4 unknown bytes.
[   95.870826][ T9448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.879237][ T9445] 8021q: adding VLAN 0 to HW filter on device bond5
[   95.898456][ T9445] vlan2: entered allmulticast mode
[   95.900325][ T9445] veth1: entered allmulticast mode
[   96.177751][ T9493] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   96.196543][ T9498] tipc: New replicast peer: 255.255.255.255
[   96.202948][ T9498] tipc: Enabled bearer <udp:s>, priority 26
[   96.319489][ T9527] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   96.398016][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   96.410614][ T9536] gretap3: entered allmulticast mode
[   96.413810][ T9536] bond6: (slave gretap3): making interface the new active one
[   96.417059][ T9536] bond6: (slave gretap3): Enslaving as an active interface with an up link
[   97.193428][ T9549] bond0: (slave syz_tun): Releasing backup interface
[   97.199501][ T9549] bond0: (slave team0): Releasing backup interface
[   97.212448][ T9549] bond4: (slave macvlan2): Removing an active aggregator
[   97.216235][ T9549] bond4: (slave macvlan2): Releasing backup interface
[   97.318966][ T9580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.322341][ T9580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.361418][ T9588] syzkaller1: entered promiscuous mode
[   97.363287][ T9588] syzkaller1: entered allmulticast mode
[   97.369428][ T9580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.372865][ T9580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.439487][ T9580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.443437][ T9580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.483866][ T9600] syz_tun: entered allmulticast mode
[   97.489741][ T9600] dvmrp8: entered allmulticast mode
[   97.521532][ T9580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.526824][ T9580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.593825][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.597369][ T5874] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   97.603617][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.607626][ T5874] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   97.613899][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.617518][ T5874] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   97.623470][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.627264][ T5874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   97.632179][ T9599] syz_tun: left allmulticast mode
[   97.634582][ T9599] dvmrp8: left allmulticast mode
[   97.787850][ T9619] bond4: option mode: unable to set because the bond device is up
Connection to localhost closed by remote host.
[   98.310348][ T9449] ==================================================================
[   98.312974][ T9449] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[   98.315406][ T9449] Read of size 8 at addr ffff8881065180a0 by task khidpd_0b578002/9449
[   98.318705][ T9449] 
[   98.319600][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: khidpd_0b578002 Not tainted syzkaller #0 PREEMPT(full) 
[   98.319610][ T9449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.319614][ T9449] Call Trace:
[   98.319618][ T9449]  <TASK>
[   98.319621][ T9449]  dump_stack_lvl+0x189/0x250
[   98.319633][ T9449]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.319641][ T9449]  ? lock_release+0x4b/0x3e0
[   98.319652][ T9449]  ? __virt_addr_valid+0x4a5/0x5c0
[   98.319661][ T9449]  print_report+0xca/0x240
[   98.319668][ T9449]  ? __mutex_lock+0x801/0x1350
[   98.319678][ T9449]  kasan_report+0x118/0x150
[   98.319688][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.319697][ T9449]  ? __mutex_lock+0x801/0x1350
[   98.319707][ T9449]  __mutex_lock+0x801/0x1350
[   98.319717][ T9449]  ? __mutex_lock+0x5bb/0x1350
[   98.319727][ T9449]  ? l2cap_unregister_user+0x6a/0x1b0
[   98.319736][ T9449]  ? __pfx___mutex_lock+0x10/0x10
[   98.319747][ T9449]  ? __pfx___timer_delete_sync+0x10/0x10
[   98.319756][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.319765][ T9449]  l2cap_unregister_user+0x6a/0x1b0
[   98.319774][ T9449]  hidp_session_thread+0x3c9/0x410
[   98.319782][ T9449]  ? __pfx_hidp_session_thread+0x10/0x10
[   98.319790][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.319798][ T9449]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   98.319808][ T9449]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   98.319816][ T9449]  ? __kthread_parkme+0x7b/0x200
[   98.319823][ T9449]  ? __kthread_parkme+0x1a1/0x200
[   98.319831][ T9449]  kthread+0x711/0x8a0
[   98.319839][ T9449]  ? __pfx_hidp_session_thread+0x10/0x10
[   98.319847][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.319855][ T9449]  ? rcu_is_watching+0x15/0xb0
[   98.319862][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.319870][ T9449]  ret_from_fork+0x3fc/0x770
[   98.319878][ T9449]  ? __pfx_ret_from_fork+0x10/0x10
[   98.319885][ T9449]  ? __switch_to_asm+0x39/0x70
[   98.319893][ T9449]  ? __switch_to_asm+0x33/0x70
[   98.319901][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.319909][ T9449]  ret_from_fork_asm+0x1a/0x30
[   98.319920][ T9449]  </TASK>
[   98.319923][ T9449] 
[   98.393814][ T9449] Allocated by task 5853:
[   98.395594][ T9449]  kasan_save_track+0x3e/0x80
[   98.397523][ T9449]  __kasan_kmalloc+0x93/0xb0
[   98.399409][ T9449]  __kmalloc_noprof+0x27a/0x4f0
[   98.401317][ T9449]  hci_alloc_dev_priv+0x28/0x2060
[   98.403331][ T9449]  vhci_create_device+0x120/0x6e0
[   98.405336][ T9449]  vhci_write+0x3ce/0x4a0
[   98.407197][ T9449]  vfs_write+0x5c9/0xb30
[   98.408928][ T9449]  ksys_write+0x145/0x250
[   98.410675][ T9449]  do_syscall_64+0xfa/0x3b0
[   98.412496][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.414855][ T9449] 
[   98.415827][ T9449] Freed by task 9624:
[   98.417395][ T9449]  kasan_save_track+0x3e/0x80
[   98.419272][ T9449]  kasan_save_free_info+0x46/0x50
[   98.421300][ T9449]  __kasan_slab_free+0x5b/0x80
[   98.423264][ T9449]  kfree+0x18e/0x440
[   98.424812][ T9449]  bt_host_release+0x82/0x90
[   98.426672][ T9449]  device_release+0x9c/0x1c0
[   98.428510][ T9449]  kobject_put+0x22b/0x480
[   98.430340][ T9449]  vhci_release+0x88/0xd0
[   98.432016][ T9449]  __fput+0x44c/0xa70
[   98.433589][ T9449]  task_work_run+0x1d4/0x260
[   98.435248][ T9449]  do_exit+0x6b5/0x2300
[   98.436896][ T9449]  do_group_exit+0x21c/0x2d0
[   98.438722][ T9449]  get_signal+0x1286/0x1340
[   98.440523][ T9449]  arch_do_signal_or_restart+0x9a/0x750
[   98.442768][ T9449]  exit_to_user_mode_loop+0x75/0x110
[   98.444884][ T9449]  do_syscall_64+0x2bd/0x3b0
[   98.446758][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.449105][ T9449] 
[   98.450077][ T9449] Last potentially related work creation:
[   98.452343][ T9449]  kasan_save_stack+0x3e/0x60
[   98.454025][ T9449]  kasan_record_aux_stack+0xbd/0xd0
[   98.455733][ T9449]  insert_work+0x3d/0x330
[   98.457453][ T9449]  __queue_work+0xbaf/0xfb0
[   98.459257][ T9449]  queue_work_on+0x181/0x270
[   98.461088][ T9449]  hci_cmd_sync_submit+0x285/0x2b0
[   98.463128][ T9449]  process_scheduled_works+0xae1/0x17b0
[   98.465326][ T9449]  worker_thread+0x8a0/0xda0
[   98.467186][ T9449]  kthread+0x711/0x8a0
[   98.468846][ T9449]  ret_from_fork+0x3fc/0x770
[   98.470616][ T9449]  ret_from_fork_asm+0x1a/0x30
[   98.472477][ T9449] 
[   98.473441][ T9449] Second to last potentially related work creation:
[   98.475912][ T9449]  kasan_save_stack+0x3e/0x60
[   98.477753][ T9449]  kasan_record_aux_stack+0xbd/0xd0
[   98.479794][ T9449]  insert_work+0x3d/0x330
[   98.481532][ T9449]  __queue_work+0xbaf/0xfb0
[   98.483347][ T9449]  queue_work_on+0x181/0x270
[   98.485123][ T9449]  hci_abort_conn+0x1e4/0x330
[   98.486959][ T9449]  process_scheduled_works+0xae1/0x17b0
[   98.489127][ T9449]  worker_thread+0x8a0/0xda0
[   98.490923][ T9449]  kthread+0x711/0x8a0
[   98.492519][ T9449]  ret_from_fork+0x3fc/0x770
[   98.494439][ T9449]  ret_from_fork_asm+0x1a/0x30
[   98.496354][ T9449] 
[   98.497317][ T9449] The buggy address belongs to the object at ffff888106518000
[   98.497317][ T9449]  which belongs to the cache kmalloc-8k of size 8192
[   98.502733][ T9449] The buggy address is located 160 bytes inside of
[   98.502733][ T9449]  freed 8192-byte region [ffff888106518000, ffff88810651a000)
[   98.508200][ T9449] 
[   98.509203][ T9449] The buggy address belongs to the physical page:
[   98.511792][ T9449] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106518
[   98.515313][ T9449] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   98.518609][ T9449] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   98.521609][ T9449] page_type: f5(slab)
[   98.523200][ T9449] raw: 057ff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   98.526565][ T9449] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   98.529925][ T9449] head: 057ff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   98.533194][ T9449] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   98.536644][ T9449] head: 057ff00000000003 ffffea0004194601 00000000ffffffff 00000000ffffffff
[   98.540016][ T9449] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   98.543472][ T9449] page dumped because: kasan: bad access detected
[   98.546032][ T9449] page_owner tracks the page as allocated
[   98.548282][ T9449] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 44478157191, free_ts 44477258296
[   98.556477][ T9449]  post_alloc_hook+0x240/0x2a0
[   98.558416][ T9449]  get_page_from_freelist+0x21e4/0x22c0
[   98.560682][ T9449]  __alloc_frozen_pages_noprof+0x181/0x370
[   98.562988][ T9449]  alloc_pages_mpol+0x232/0x4a0
[   98.564912][ T9449]  allocate_slab+0x8a/0x370
[   98.566721][ T9449]  ___slab_alloc+0xbeb/0x1410
[   98.568569][ T9449]  __kmalloc_noprof+0x305/0x4f0
[   98.570509][ T9449]  hci_alloc_dev_priv+0x28/0x2060
[   98.572555][ T9449]  vhci_create_device+0x120/0x6e0
[   98.574453][ T9449]  vhci_write+0x3ce/0x4a0
[   98.576055][ T9449]  vfs_write+0x5c9/0xb30
[   98.577675][ T9449]  ksys_write+0x145/0x250
[   98.579226][ T9449]  do_syscall_64+0xfa/0x3b0
[   98.581026][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.582971][ T9449] page last free pid 5591 tgid 5591 stack trace:
[   98.585031][ T9449]  __free_frozen_pages+0xbc4/0xd30
[   98.586700][ T9449]  free_large_kmalloc+0x13a/0x1f0
[   98.588597][ T9449]  skb_release_data+0x62d/0x7c0
[   98.590455][ T9449]  consume_skb+0x9e/0xf0
[   98.591857][ T9449]  netlink_recvmsg+0x5b2/0xa30
[   98.593498][ T9449]  sock_recvmsg+0x22c/0x270
[   98.595033][ T9449]  ____sys_recvmsg+0x1c9/0x460
[   98.596661][ T9449]  ___sys_recvmsg+0x1b5/0x510
[   98.598314][ T9449]  __x64_sys_recvmsg+0x198/0x260
[   98.600068][ T9449]  do_syscall_64+0xfa/0x3b0
[   98.601625][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.603492][ T9449] 
[   98.604291][ T9449] Memory state around the buggy address:
[   98.606278][ T9449]  ffff888106517f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   98.609488][ T9449]  ffff888106518000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.612737][ T9449] >ffff888106518080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.615991][ T9449]                                ^
[   98.618076][ T9449]  ffff888106518100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.621422][ T9449]  ffff888106518180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.624803][ T9449] ==================================================================
[   98.628201][ T9449] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   98.630751][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: khidpd_0b578002 Not tainted syzkaller #0 PREEMPT(full) 
[   98.634291][ T9449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.637995][ T9449] Call Trace:
[   98.639264][ T9449]  <TASK>
[   98.640375][ T9449]  dump_stack_lvl+0x99/0x250
[   98.642096][ T9449]  ? __asan_memcpy+0x40/0x70
[   98.643749][ T9449]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.645651][ T9449]  ? __pfx__printk+0x10/0x10
[   98.647338][ T9449]  vpanic+0x281/0x750
[   98.648820][ T9449]  ? __pfx_vpanic+0x10/0x10
[   98.650612][ T9449]  ? rcu_is_watching+0x15/0xb0
[   98.652356][ T9449]  panic+0xb9/0xc0
[   98.653729][ T9449]  ? __pfx_panic+0x10/0x10
[   98.655458][ T9449]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   98.657682][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.659829][ T9449]  ? __mutex_lock+0x801/0x1350
[   98.661408][ T9449]  check_panic_on_warn+0x89/0xb0
[   98.663033][ T9449]  ? __mutex_lock+0x801/0x1350
[   98.664580][ T9449]  end_report+0x78/0x160
[   98.666232][ T9449]  kasan_report+0x129/0x150
[   98.668110][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.670437][ T9449]  ? __mutex_lock+0x801/0x1350
[   98.672030][ T9449]  __mutex_lock+0x801/0x1350
[   98.673562][ T9449]  ? __mutex_lock+0x5bb/0x1350
[   98.675403][ T9449]  ? l2cap_unregister_user+0x6a/0x1b0
[   98.677408][ T9449]  ? __pfx___mutex_lock+0x10/0x10
[   98.679317][ T9449]  ? __pfx___timer_delete_sync+0x10/0x10
[   98.681294][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.683618][ T9449]  l2cap_unregister_user+0x6a/0x1b0
[   98.685639][ T9449]  hidp_session_thread+0x3c9/0x410
[   98.687818][ T9449]  ? __pfx_hidp_session_thread+0x10/0x10
[   98.690150][ T9449]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.692650][ T9449]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   98.695185][ T9449]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   98.697751][ T9449]  ? __kthread_parkme+0x7b/0x200
[   98.699677][ T9449]  ? __kthread_parkme+0x1a1/0x200
[   98.701488][ T9449]  kthread+0x711/0x8a0
[   98.703227][ T9449]  ? __pfx_hidp_session_thread+0x10/0x10
[   98.705560][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.707459][ T9449]  ? rcu_is_watching+0x15/0xb0
[   98.709459][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.711403][ T9449]  ret_from_fork+0x3fc/0x770
[   98.713320][ T9449]  ? __pfx_ret_from_fork+0x10/0x10
[   98.715446][ T9449]  ? __switch_to_asm+0x39/0x70
[   98.717389][ T9449]  ? __switch_to_asm+0x33/0x70
[   98.719339][ T9449]  ? __pfx_kthread+0x10/0x10
[   98.721209][ T9449]  ret_from_fork_asm+0x1a/0x30
[   98.723202][ T9449]  </TASK>
[   98.725248][ T9449] Kernel Offset: disabled
[   98.727038][ T9449] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:23:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90009597370
R8 =ffff8881070d8237 R9 =1ffff11020e1b046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8f4 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002340 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000007273685f 6f745f3068746576
XMM02=0002001400000000 0000000000003079 XMM03=0000000000000000 00003070726d7664
XMM04=00010008800100be db60470300030008 XMM05=0000000000000000 00003070726d7664
XMM06=0002001400000000 0000000000003079 XMM07=6d6d756400020014 0000000000000000
XMM08=0000000000000000 00007fda59412ee7 XMM09=0000000000000000 00007fda59412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d93f5e000eb9df00 RBX=ffffffff819683b8 RCX=d93f5e000eb9df00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38430 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7993f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc45278e68 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000181 000000326e610077
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff000000ff00 XMM09=0000000000000181 000000366e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
