last executing test programs:

1.213705839s ago: executing program 1 (id=1098):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={<r1=>0x0, @local, @empty}, &(0x7f0000000600)=0xc)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r4=>r1, 0x29, 0x7, 0xfc, 0x6, 0x5c, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x700, 0x1, 0x4}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1, 0x7f, 0x6, 0xb08, r0, 0x7, '\x00', r4, r2, 0x1, 0x3, 0x3, 0x7}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004001)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0x2, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x3}]}}}]}, 0x44}}, 0x0)
r12 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r12, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
sendmsg$kcm(r12, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804)
socket$isdn(0x22, 0x3, 0x3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

1.164415163s ago: executing program 2 (id=1100):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e"], 0x24}, 0x1, 0x700000000000000, 0x0, 0x240480d4}, 0x4040)

1.163643067s ago: executing program 1 (id=1101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0xe722e18}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
socket$alg(0x26, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) (async)
ioctl$SIOCSIFMTU(r4, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x80010, r0, 0x0)
unshare(0x0) (async)
unshare(0x0)
shutdown(r1, 0x1)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000013c00000c0004802c204e"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

954.564642ms ago: executing program 1 (id=1103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002ec0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1d}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}]}, 0x24}}, 0x2000c8c0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d80)=ANY=[@ANYBLOB="1c0000001e008d307b357a2a7f26a8f8f0f52a03000000000000000a000000c9f8bc966e14cbc560d6d33b6b3a60e865154dafe4bb73b42cf6d7256492990b332ffed82d4934545e36228adcacc0904965e6ef3ee89a19f2e4463977ee566e36207f0cef4ef547c460bf7af33150fb95e94ceefb09ef0da580639a99cad837df1403b463ff1952b2fe99abe00839", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x4004804) (rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 32)
write$bt_hci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async, rerun: 32)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$inet6(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
listen(0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000002b40)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=""/95, 0x5f}, 0x6}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f0000002a00)=""/191, 0xbf}], 0x5, &(0x7f00000002c0)=""/50, 0x32}, 0x1}], 0x2, 0x10000, &(0x7f00000007c0)={0x77359400}) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x4000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0xc1f8}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xb}], 0x6, 0x40010020, 0x0)

949.065685ms ago: executing program 1 (id=1105):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
r2 = socket$packet(0x11, 0x6, 0x300)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r3, @ANYBLOB="fdc05a2ee9eed8adadddd47e892e95a1567340119cac6a7fe20418dfccb1"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r6}]}}}]}, 0x3c}}, 0x0)

864.290051ms ago: executing program 1 (id=1107):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00feff10000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@updpolicy={0x108, 0x19, 0x1, 0x1, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x108}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0)

862.142335ms ago: executing program 1 (id=1108):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x1c7}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x2, 0x8001, 0x2, 0xe, 0x7, 0x7, 0x3, r7}, 0x20)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010011a80100005800400058008000000000000000800038030000180050006000000000014000500714ad9d2547de97cbbf6efb226f19bf90d0002003a288e5e0cf0b09ff50af2f86000078014000400293a02149f3b75a670d88021e58f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f98496750000180140005e103d09e38e88d9c6ca517ae284c9a2c00a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020033797a746e6c30000800010000000000130002006272696467655f736c6170655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c5bda9b29b70030be1dc49cfdc72308dfb5cee0da40215cbe8cd8617a43274da32508c83926555281ba59091591988d4652b29a55530fb1abfd532f5216690365480232e8ed715c65"], 0x270}, 0x1, 0x0, 0x0, 0xc084}, 0x400)

404.73881ms ago: executing program 0 (id=1113):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESOCT=r1, @ANYRESDEC], 0x68}, 0x1, 0x0, 0x0, 0x88c0}, 0x4008014) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket(0x27, 0x1, 0x4)
getpeername$packet(r5, 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$netlink(0x10, 0x3, 0x6) (async)
socket$key(0xf, 0x3, 0x2) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x21, 0x8, 0x200004a}, 0x2c) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) (async)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

404.243462ms ago: executing program 0 (id=1114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007b0140000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000e40)={0x0, 0x3a, &(0x7f0000000080)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xeb25e056bf86d041}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x2, 0x7, 0x6, 0x2, 0x0, 0x4}}, {0x0, 0x2, [0x8, 0xad]}}, {{0x0, 0x1, {0x7, 0xb, 0xf, 0xbc03, 0x1, 0x2, 0x1ad}}}]}]}, 0x38}}, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {0x0, 0x3}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x4c}}, 0x0) (async, rerun: 64)
r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x80, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf25120000000800080000040000080006000000000008000800ff0f000008000900040000001800018014000200627269646765300000000000000000000800090009000000200001800800030002000000140002006772657461703000000000000000000008000600000080ff140001800800030006000000080003000100000037b04b5d85180f68d4f6b4392a0d732d034ef762ed4930ef03a2967d0bfcffa7562d4fb182f08090aefe28594d46ab5608ccb64e2e22ffeb8bbfcff3a8107778379a3624ed4ee5e79296d56954702a0acf38b27ecb01fd704514610936f6a54364703de7a6a5d5d5"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x5da4f2c7d5a4f5b9}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0xe0, 0x464, 0x20, 0x70bd28, 0x25dfdbfe, "00c66db1797019116361bc21624d6c3497d151a08f68496271f4ef75e27d842edc94283017a15553683ae01cd608c77e29cbacf86b99d4dd4bd133e9bf038d70bd3f63d0cb92380a6e8a75d3afd9585aef9871523854588bbffe08c5a92bcc0e3fe9bc46fb08df4925e853bf9c7d772beeb4fa45a0c57a6ddc1dd0ca3438b23bd2a3cb88fbe42d6075b251733caabc7880072fc4eea81192872d847ea2ec35ba8bb1694ed17b73ba649760df64a23385a43da04f97f9b1e48162ccf419bf6f18f68f68d8d43882c9104fbe44a87acd5f", ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async, rerun: 64)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) (async, rerun: 64)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @fwd={0xa}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x6}}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000008c0)=""/124, 0x63, 0x7c, 0x0, 0x7fffffff}, 0x28) (async, rerun: 32)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000c000000020000000f000008000000080300000000000000000000ef241b042584ea59c00c54ee458ee1f38fc18d3ae5ed0fbd6c91660e7ac1026c67ed54ce0274fe8d52f58a8ba02993644bd3d197e9043aae4565006abdc1b57a1c207c0478427f7957171afedc6e781f523ced3e33b1b407ff6f331aac242ff52a105da9be67916997d7081b337518cd5570ad078c66936f043d18b32e414a75b74eae5c35f0b79375fa7e248904667ed9f53b8430e76c6f0b61ac934b9b0f11bfff6daf53bbb723f3755c8b4d0a02040390218368a230919a265144b8a10883068116bb116365fe87"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) (rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, <r13=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async, rerun: 64)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x8, r7}, 0x18) (rerun: 64)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x20, r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000095bebf0000000000090000081811000020c0d3fc7b18e49edd", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f8ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xd, &(0x7f0000000800)=""/13, 0x40f00, 0x3, '\x00', r4, @fallback=0x4, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x4, 0x9, 0x0, 0x3}, 0x10, r13, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)=[r14, r15], &(0x7f0000000b40)=[{0x2, 0x5, 0x2}, {0x5, 0x3, 0x10, 0x3}, {0x2, 0x3, 0x2}, {0x5, 0x3, 0x8}, {0x5, 0x1, 0xe, 0x5}, {0x5, 0x5, 0x4, 0xc}, {0x1, 0x4, 0x10, 0xc}, {0x2, 0x5, 0x3, 0x7eba198d2ed4323d}], 0x10, 0x10001}, 0x94) (async)
getsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, 0x0, &(0x7f0000000140)) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080)

294.613089ms ago: executing program 2 (id=1115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d07300fe8000000000000000000000000000aaff0200000000fffffffffffffff50001"], 0xffe)

288.287879ms ago: executing program 0 (id=1116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x5, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40048}, 0x20008008)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000002, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/4102, 0x1006}, {&(0x7f0000000740)=""/83, 0x53}, {0x0, 0x60}], 0x3}}], 0x1, 0x40010122, 0x0)
write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0)

181.331661ms ago: executing program 2 (id=1117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="ebe3a0e9796cf51647e299f4e376fdbaf9ffffffffffffff5e81f4a7f71c1926aae1efd7e07f0000003d5cfe6cb55b5bb9849e6098bb06000000", 0x3a}, {&(0x7f00000002c0)="016e530b0e63ae", 0x7}], 0x2, 0x0, 0x0, 0x40005}], 0x1, 0x4008084)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d03c00fe8000000000000000000000000000aaff0200000007ffffff00000000000001"], 0xffe)

104.563401ms ago: executing program 0 (id=1118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d07300fe8000000000000000000000000000aaff02000000f5ffffff00000000000001"], 0xffe)

60.371476ms ago: executing program 2 (id=1119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000027000c0002800500110001"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

59.425495ms ago: executing program 2 (id=1120):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x200, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x2e1c}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfffffffffffffffe}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x12}, {0xc, 0x90, 0x7fff}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@ipv4_newroute={0x34, 0x18, 0x1, 0x80000002, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3}, [@RTA_TABLE={0x0, 0xf, 0x9}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0xfffffffffffffe4e}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000000400000010"], 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10}, &(0x7f0000000180), &(0x7f00000002c0)=r11}, 0x20)
sendmsg$TIPC_NL_LINK_SET(r3, 0x0, 0x48054)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newtfilter={0x1ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x4}, {}, {0x1c, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x17c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x178, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fad}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x56f125da}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x72}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xed}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6a}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x1ac}}, 0x24000000)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)

3.973339ms ago: executing program 0 (id=1121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003d00005ab9339af1b2e4c6cc695570cf000e0001006e657464657673696d0000000f0002006e657464657673696d300000a0fd820000000000"], 0x3c}}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r6, @ANYBLOB="2e00c7000201730605037a020f020402042000040802e80604040805090000050607040601017ecd4163b8fccf090000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00'}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000000c002b8028000100", @ANYRES32, @ANYBLOB="1400030076657468305f746f5f62617461647600"], 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fedbdf253f00000008000300", @ANYRES32=r12, @ANYBLOB="1c005e80080006000300000008000500560300000000000000020000"], 0x38}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fedbdf25880000000c009900000000002d000000529a6fa10dadae249fcb3d4a49dee6675075c6e3cfa1c64c41064d4fb6374efee2b2b9358b44c793ea2e3d3d8d5021ee1d152150457bf85ac0b1495e41c7d37dee7fbd22d53604058b926fa33585562134ac60f1dd4f7c605aec4575b2929595074ada472a637dcb00"/143], 0x20}, 0x1, 0x0, 0x0, 0x8815}, 0x24004000)

329.902µs ago: executing program 0 (id=1122):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r6, 0x0, 0x4004)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2, &(0x7f00000003c0)=""/50, 0x32}, 0x140)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

0s ago: executing program 2 (id=1123):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000fe10000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@updpolicy={0x108, 0x19, 0x1, 0x1, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x108}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19657' (ED25519) to the list of known hosts.
syzkaller login: [   48.506800][ T5780] cgroup: Unknown subsys name 'net'
[   48.656072][ T5780] cgroup: Unknown subsys name 'cpuset'
[   48.662919][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.955247][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.718228][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.722551][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.725245][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.728001][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.733210][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.740597][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.744454][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.747737][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.760867][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.764155][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.802178][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.805320][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.808175][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.811327][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.814246][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.105630][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.163736][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   56.173369][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   56.285532][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.289134][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.292392][ T5848] bridge_slave_0: entered allmulticast mode
[   56.295104][ T5848] bridge_slave_0: entered promiscuous mode
[   56.325937][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.328790][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.332534][ T5848] bridge_slave_1: entered allmulticast mode
[   56.336319][ T5848] bridge_slave_1: entered promiscuous mode
[   56.390984][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.409194][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.412848][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.415868][ T5852] bridge_slave_0: entered allmulticast mode
[   56.419684][ T5852] bridge_slave_0: entered promiscuous mode
[   56.441773][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.453909][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.456587][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.459439][ T5852] bridge_slave_1: entered allmulticast mode
[   56.463416][ T5852] bridge_slave_1: entered promiscuous mode
[   56.487873][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.492015][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.495011][ T5856] bridge_slave_0: entered allmulticast mode
[   56.498338][ T5856] bridge_slave_0: entered promiscuous mode
[   56.502797][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.505811][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.509406][ T5856] bridge_slave_1: entered allmulticast mode
[   56.513883][ T5856] bridge_slave_1: entered promiscuous mode
[   56.561411][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.566111][ T5848] team0: Port device team_slave_0 added
[   56.570071][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.576953][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.582152][ T5848] team0: Port device team_slave_1 added
[   56.597062][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.625902][ T5852] team0: Port device team_slave_0 added
[   56.630753][ T5852] team0: Port device team_slave_1 added
[   56.681574][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.683868][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.693022][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.698095][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.702467][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.712239][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.718606][ T5856] team0: Port device team_slave_0 added
[   56.722132][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.724800][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.734040][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.739090][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.741818][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.752587][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.758376][ T5856] team0: Port device team_slave_1 added
[   56.818797][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.822821][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.832492][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.856416][ T5848] hsr_slave_0: entered promiscuous mode
[   56.859786][ T5848] hsr_slave_1: entered promiscuous mode
[   56.866372][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.869030][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.879374][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.932670][ T5852] hsr_slave_0: entered promiscuous mode
[   56.935835][ T5852] hsr_slave_1: entered promiscuous mode
[   56.938766][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.941235][ T5852] Cannot create hsr debugfs directory
[   56.979190][ T5856] hsr_slave_0: entered promiscuous mode
[   56.981905][ T5856] hsr_slave_1: entered promiscuous mode
[   56.984421][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   56.986467][ T5856] Cannot create hsr debugfs directory
[   57.306468][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.317934][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.332775][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.346558][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.379854][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.401489][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.409161][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.433185][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.476830][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.484602][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.493845][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.502700][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.648898][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.684738][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   57.706343][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.713597][  T542] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.716555][  T542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.735978][  T542] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.738805][  T542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.760352][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   57.774837][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.776580][ T5237] Bluetooth: hci0: command tx timeout
[   57.786597][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.791257][  T542] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.793747][  T542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.814615][  T542] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.816741][  T542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.823186][  T542] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.825386][  T542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.838600][  T542] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.841021][  T542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.850845][ T5850] Bluetooth: hci1: command tx timeout
[   57.853574][ T5237] Bluetooth: hci2: command tx timeout
[   57.905937][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.973703][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.116718][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.148965][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.198952][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.217398][ T5852] veth0_vlan: entered promiscuous mode
[   58.239564][ T5856] veth0_vlan: entered promiscuous mode
[   58.249464][ T5852] veth1_vlan: entered promiscuous mode
[   58.274478][ T5856] veth1_vlan: entered promiscuous mode
[   58.278674][ T5848] veth0_vlan: entered promiscuous mode
[   58.292906][ T5848] veth1_vlan: entered promiscuous mode
[   58.331386][ T5852] veth0_macvtap: entered promiscuous mode
[   58.339763][ T5852] veth1_macvtap: entered promiscuous mode
[   58.345025][ T5848] veth0_macvtap: entered promiscuous mode
[   58.358362][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.368927][ T5848] veth1_macvtap: entered promiscuous mode
[   58.380283][ T5856] veth0_macvtap: entered promiscuous mode
[   58.387840][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.398089][ T5856] veth1_macvtap: entered promiscuous mode
[   58.409104][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.414585][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.419075][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.429783][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.434802][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.442060][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.473671][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.476655][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.488044][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.493341][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.499017][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.529802][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.563141][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.584705][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.592639][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.600694][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.603244][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.608587][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.656455][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.664321][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.705411][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.708448][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.741413][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.744451][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.782466][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.789903][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.794070][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.844238][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.870777][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.035035][ T5922] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.114750][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.123917][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.126654][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.129338][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.152384][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.155405][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.161029][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.166531][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.169348][ T5925] netlink: 'syz.2.5': attribute type 29 has an invalid length.
[   59.344547][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.364252][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   59.366892][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   59.462650][ T5933] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   59.469020][ T5933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.850737][ T5237] Bluetooth: hci0: command tx timeout
[   59.922179][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.926837][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.935616][ T5237] Bluetooth: hci2: command tx timeout
[   59.939236][ T5237] Bluetooth: hci1: command tx timeout
[   59.969154][ T5945] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   59.974687][ T5945] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   60.065605][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.107927][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.118582][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.138334][ T5949] gretap1: entered promiscuous mode
[   60.431262][ T5968] bridge0: entered promiscuous mode
[   60.459785][ T5968] vlan2: entered promiscuous mode
[   60.481941][ T5968] bridge0: port 3(vlan2) entered blocking state
[   60.484279][ T5968] bridge0: port 3(vlan2) entered disabled state
[   60.492133][ T5968] vlan2: entered allmulticast mode
[   60.494261][ T5968] bridge0: entered allmulticast mode
[   60.522554][ T5968] vlan2: left allmulticast mode
[   60.525210][ T5968] bridge0: left allmulticast mode
[   60.678665][ T5978] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   60.746227][ T5983] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET)
[   60.749108][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'.
[   61.041261][ T6000] bridge0: entered promiscuous mode
[   61.043436][ T6000] vlan2: entered promiscuous mode
[   61.046043][ T6000] bridge0: port 3(vlan2) entered blocking state
[   61.048364][ T6000] bridge0: port 3(vlan2) entered disabled state
[   61.052219][ T6000] vlan2: entered allmulticast mode
[   61.054965][ T6000] bridge0: entered allmulticast mode
[   61.058565][ T6000] vlan2: left allmulticast mode
[   61.060738][ T6000] bridge0: left allmulticast mode
[   61.279641][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   61.355991][ T6009] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   61.360158][ T6009] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   61.416987][ T6011] vlan2: entered promiscuous mode
[   61.419182][ T6011] bond0: entered promiscuous mode
[   61.423972][ T6011] bond_slave_0: entered promiscuous mode
[   61.426554][ T6011] bond_slave_1: entered promiscuous mode
[   61.429188][ T6011] vlan2: entered allmulticast mode
[   61.431921][ T6011] bond0: entered allmulticast mode
[   61.434130][ T6011] bond_slave_0: entered allmulticast mode
[   61.436525][ T6011] bond_slave_1: entered allmulticast mode
[   61.508895][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.542024][ T6013] bond1: entered promiscuous mode
[   61.544122][ T6013] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.637831][ T6013] bond1 (unregistering): Released all slaves
[   61.694007][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   61.727499][ T6029] tipc: Started in network mode
[   61.729193][ T6029] tipc: Node identity 06326c7b1515, cluster identity 4711
[   61.733573][ T6029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.737043][ T6031] syzkaller0: entered promiscuous mode
[   61.739202][ T6031] syzkaller0: entered allmulticast mode
[   61.773088][ T6030] tipc: Resetting bearer <eth:syzkaller0>
[   61.930984][ T5850] Bluetooth: hci0: command tx timeout
[   61.980667][ T6051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.40'.
[   62.010981][ T5850] Bluetooth: hci1: command tx timeout
[   62.013382][ T5237] Bluetooth: hci2: command tx timeout
[   62.081519][ T6056] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   62.226130][ T6059] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.610256][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.614419][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.699229][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.709543][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.751557][   T47] tipc: Node number set to 321350779
[   62.865896][ T6071] tipc: Resetting bearer <eth:syzkaller0>
[   62.872929][ T5746] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.894420][ T5746] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.897935][ T5746] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.912396][ T5746] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.078393][ T6089] Zero length message leads to an empty skb
[   63.208548][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.011855][ T5850] Bluetooth: hci0: command tx timeout
[   64.091385][ T5850] Bluetooth: hci2: command tx timeout
[   64.101254][ T5850] Bluetooth: hci1: command tx timeout
[   64.219011][ T6176] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   64.245512][ T6176] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   65.052735][ T6210] validate_nla: 17 callbacks suppressed
[   65.052763][ T6210] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   65.059898][ T6210] __nla_validate_parse: 7 callbacks suppressed
[   65.059908][ T6210] netlink: 236 bytes leftover after parsing attributes in process `syz.1.62'.
[   65.070611][ T6210] NCSI netlink: No device for ifindex 813332851
[   65.160759][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'.
[   65.237470][ T6219] netlink: zone id is out of range
[   65.269180][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   65.269774][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   65.409626][ T6233] vlan2: entered promiscuous mode
[   65.411568][ T6233] bridge0: entered promiscuous mode
[   66.124839][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'.
[   66.152239][ T6237] netlink: 'syz.2.72': attribute type 7 has an invalid length.
[   66.163971][ T6237] : entered promiscuous mode
[   66.168355][ T6241] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   66.220125][ T6243] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.75'.
[   66.376186][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'.
[   66.644541][ T6280] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[   66.685092][ T6286] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   66.687759][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.727239][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'.
[   66.753213][ T6286] bond1: (slave geneve2): making interface the new active one
[   66.756520][ T6286] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   66.759389][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   66.773134][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   66.776608][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   66.791306][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   66.796012][ T6291] Bluetooth: MGMT ver 1.23
[   66.907098][ T6295] batadv_slave_1: entered promiscuous mode
[   67.050924][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.404359][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   67.409073][    C1] vcan0: j1939_session_tx_dat: 0xffff888114529c00: queue data error: -100
[   67.412382][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   67.414844][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   67.417436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.420033][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.423113][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.425826][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.428591][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.431385][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.434319][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.436787][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.439436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.442273][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.445159][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.448159][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.451129][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.454036][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.456749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.459320][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.462243][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.464961][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.467688][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.470259][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.472808][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.475348][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.477920][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.480567][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.483577][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.486092][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.489167][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.491983][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.494609][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.497059][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.499849][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.502834][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.506260][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.509256][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.512453][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.515491][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.518692][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.521771][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.524774][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.527713][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.530476][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.533065][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.535984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.538416][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.541195][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.543991][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.547030][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.549776][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.552315][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.555213][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.558206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.560659][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.563228][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.565872][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.568443][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.571244][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.574077][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.576550][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.579319][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.581945][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.584449][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.586803][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.589209][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.591861][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.594507][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.596990][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.599479][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.602062][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.605011][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.607624][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.610871][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.613340][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.615889][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.618445][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.621212][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.623992][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.626775][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.629387][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.632359][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.634820][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.637704][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.640633][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.643579][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.646497][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.649779][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.652802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.655954][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.658925][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.662186][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.665143][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.668206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.671351][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.674414][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.677327][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.680325][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.683345][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.686515][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.689553][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.692840][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.695836][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.698894][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.701946][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.704997][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.707953][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.711158][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.714080][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.717061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.720058][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.723101][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.725433][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.728005][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.731053][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.734141][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.737251][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.740477][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.743568][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.746392][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.748812][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.751440][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.754016][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.756798][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.759813][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.763087][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.766211][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.769301][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.772414][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.775828][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.778841][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.781994][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.784967][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.787864][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.790700][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.793822][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.796945][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.800041][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.803194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.806305][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.809383][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.812607][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.815616][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.818326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.820754][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.823151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.826132][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.829026][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.832184][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.835326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.838358][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.841303][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.843787][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.846565][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.848926][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.851495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.853992][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.857063][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.860124][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.863035][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.866090][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.868782][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.871573][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.874737][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.877502][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.880737][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.883803][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.886947][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.889982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.893206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.896222][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.899405][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.902530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.905387][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.908400][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.911650][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.914722][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.917960][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.921116][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.924285][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.927327][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.930619][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.933641][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.936610][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.939044][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.941682][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.944326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.947483][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.950647][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.953383][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.955693][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.958042][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.960315][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.963400][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.966384][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.969414][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.971994][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.974535][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.977002][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.979628][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.982125][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.984732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.987251][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.989952][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.992736][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   67.995678][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   67.998947][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   68.002052][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   68.005165][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   68.031202][ T6294] batadv_slave_1: left promiscuous mode
[   68.108353][  T793] IPVS: starting estimator thread 0...
[   68.188897][ T6333] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.222068][ T6328] IPVS: using max 64 ests per chain, 153600 per kthread
[   68.308269][ T6340] netlink: 'syz.0.101': attribute type 2 has an invalid length.
[   68.416044][ T6348] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   68.447799][ T6350] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.104'.
[   68.455322][ T6350] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   68.623072][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.626592][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.721397][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.736783][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.869023][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.874743][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.878610][ T5878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.882651][ T5878] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.886624][ T5878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.890275][ T5878] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.909226][ T5878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.917935][ T5878] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   69.036813][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.046708][ T6384] tipc: Started in network mode
[   69.048483][ T6384] tipc: Node identity 4ee0c714aad9, cluster identity 4711
[   69.052576][ T6384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.058057][ T6387] tipc: Resetting bearer <eth:syzkaller0>
[   69.084050][ T6386] tipc: Disabling bearer <eth:syzkaller0>
[   69.128257][ T6393] netlink: 'syz.1.115': attribute type 4 has an invalid length.
[   69.185290][ T6393] netlink: 'syz.1.115': attribute type 4 has an invalid length.
[   69.252823][ T6402] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[   69.295648][ T6405] vlan3: entered promiscuous mode
[   70.414841][ T5850] Bluetooth: hci0: command tx timeout
[   70.550971][ T6433] vlan2: entered promiscuous mode
[   70.615165][ T6434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.715268][ T6445] netlink: 'syz.0.134': attribute type 5 has an invalid length.
[   70.785534][ T6451] __nla_validate_parse: 1 callbacks suppressed
[   70.785545][ T6451] netlink: 140 bytes leftover after parsing attributes in process `syz.1.137'.
[   70.799466][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.803183][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.808504][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.813926][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.816942][ T6453] netlink: 5 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.829203][ T6453] netlink: 'syz.0.136': attribute type 16 has an invalid length.
[   70.834427][ T6453] netlink: 'syz.0.136': attribute type 17 has an invalid length.
[   70.834700][ T6455] vlan2: entered promiscuous mode
[   71.053617][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.055910][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.172133][ T6462] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   71.176380][ T6462] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   71.803390][ T6480] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   71.845462][ T6483] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   71.849552][ T6483] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   71.880021][ T6484] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   71.957015][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.959696][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.969621][ T6488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.219246][ T6499] netlink: 19 bytes leftover after parsing attributes in process `syz.2.153'.
[   72.537745][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'.
[   72.545711][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'.
[   72.670653][   T33] audit: type=1800 audit(1757359803.907:2): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.156" name="cgroup.controllers" dev="tmpfs" ino=317 res=0 errno=0
[   72.767372][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   72.772938][ T6516] bridge_slave_0: left allmulticast mode
[   72.774912][ T6516] bridge_slave_0: left promiscuous mode
[   72.777024][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.783467][ T6516] bridge_slave_1: left allmulticast mode
[   72.785978][ T6516] bridge_slave_1: left promiscuous mode
[   72.788466][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.798082][ T6516] bond0: (slave bond_slave_0): Releasing backup interface
[   72.802982][ T6516] bond_slave_0: left promiscuous mode
[   72.805492][ T6516] bond_slave_0: left allmulticast mode
[   72.809443][ T6516] bond0: (slave bond_slave_1): Releasing backup interface
[   72.814268][ T6516] bond_slave_1: left promiscuous mode
[   72.816871][ T6516] bond_slave_1: left allmulticast mode
[   72.821909][ T6516] team0: Port device team_slave_0 removed
[   72.827285][ T6516] team0: Port device team_slave_1 removed
[   72.829926][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.834295][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.838936][ T6516] bond1: (slave geneve2): Releasing active interface
[   72.850710][ T6515] vlan2: entered allmulticast mode
[   72.852931][ T6515] bridge0: entered allmulticast mode
[   72.883633][ T6516] netlink: 'syz.0.158': attribute type 10 has an invalid length.
[   72.887218][ T6516] bond0: (slave wlan1): refused to change device type
[   72.900308][ T6517] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   72.992479][ T6520] netlink: 'syz.1.160': attribute type 7 has an invalid length.
[   72.996123][ T6520] netlink: 'syz.1.160': attribute type 8 has an invalid length.
[   74.719584][ T6576] pimreg: entered allmulticast mode
[   74.919749][ T6589] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.925487][ T6589] bond0: (slave bond1): Enslaving as an active interface with an up link
[   74.941069][ T6592] tipc: Started in network mode
[   74.946359][ T6592] tipc: Node identity 4a8ccd832b3e, cluster identity 4711
[   74.949837][ T6592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.982910][ T6592] syzkaller0: entered promiscuous mode
[   74.985286][ T6592] syzkaller0: entered allmulticast mode
[   74.994181][ T6592] tipc: Resetting bearer <eth:syzkaller0>
[   74.998742][ T6591] tipc: Resetting bearer <eth:syzkaller0>
[   75.014726][ T6591] tipc: Disabling bearer <eth:syzkaller0>
[   75.129353][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   75.221786][   T10] cfg80211: failed to load regulatory.db
[   75.370125][ T6618] macvtap0: entered promiscuous mode
[   75.374237][ T6618] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   75.381397][ T6618] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[   75.473384][ T6622] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   75.477693][ T6622] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   75.956300][ T6641] __nla_validate_parse: 14 callbacks suppressed
[   75.956318][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   76.066990][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   76.232538][ T6662] netlink: 'syz.1.202': attribute type 1 has an invalid length.
[   76.233074][ T6654] vcan0: entered allmulticast mode
[   76.277414][ T6662] bond3: entered promiscuous mode
[   76.279431][ T6662] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.290577][ T6662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.298282][ T6662] batadv1: entered promiscuous mode
[   76.301950][ T6662] batadv1: entered allmulticast mode
[   76.305714][ T6662] 8021q: adding VLAN 0 to HW filter on device batadv1
[   76.312678][ T6662] bond3: (slave batadv1): making interface the new active one
[   76.315911][ T6662] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   76.324832][ T6667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.334603][ T6670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.337830][ T6670] syzkaller0: entered promiscuous mode
[   76.339948][ T6670] syzkaller0: entered allmulticast mode
[   76.344072][ T6667] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   76.346623][ T6667] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   76.365246][ T6670] tipc: Resetting bearer <eth:syzkaller0>
[   76.370152][ T6667] tipc: Resetting bearer <eth:syzkaller0>
[   76.374199][ T6669] tipc: Resetting bearer <eth:syzkaller0>
[   76.388910][ T6669] tipc: Disabling bearer <eth:syzkaller0>
[   76.466315][ T6662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.536359][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'.
[   76.647681][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'.
[   76.791994][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   76.967250][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.163382][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'.
[   77.350678][   T10] tipc: Node number set to 3828991764
[   77.598138][ T6757] netlink: 104 bytes leftover after parsing attributes in process `syz.1.230'.
[   77.603676][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'.
[   77.685412][ T6762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.715979][ T6762] tipc: Disabling bearer <eth:syzkaller0>
[   77.767776][ T6770] netlink: 'syz.0.234': attribute type 1 has an invalid length.
[   77.800758][ T6770] bond2: entered promiscuous mode
[   77.803241][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.825309][ T6770] bond2: (slave bridge4): making interface the new active one
[   77.827711][ T6770] bridge4: entered promiscuous mode
[   77.830067][ T6770] bond2: (slave bridge4): Enslaving as an active interface with an up link
[   78.285820][ T6816] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   78.314549][ T6816] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.374984][ T6826] netlink: 'syz.2.252': attribute type 5 has an invalid length.
[   78.621549][ T6831] netlink: 'syz.0.253': attribute type 12 has an invalid length.
[   78.624610][ T6831] netlink: 'syz.0.253': attribute type 11 has an invalid length.
[   79.217190][ T6858] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[   79.275777][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.279010][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.293219][ T6863] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   79.305107][ T6860] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.309939][ T6860] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   79.448670][ T6869] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   79.467165][ T6869] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.483104][ T6869] bond3: (slave ip6gretap1): making interface the new active one
[   79.486771][ T6869] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   79.504206][ T6869] veth3: entered promiscuous mode
[   79.508282][ T6869] bond3: (slave veth3): Enslaving as an active interface with a down link
[   79.514974][ T6869] erspan0: entered allmulticast mode
[   79.522802][ T6869] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   80.315029][ T6912] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   80.318132][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.357228][ T6915] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   80.581110][ T6921] bond3: (slave erspan0): Releasing active interface
[   80.583791][ T6921] ip6gretap1: entered promiscuous mode
[   80.597452][ T6921] bridge_slave_0: left allmulticast mode
[   80.599793][ T6921] bridge_slave_0: left promiscuous mode
[   80.604250][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.622329][ T6921] bridge_slave_1: left allmulticast mode
[   80.624806][ T6921] bridge_slave_1: left promiscuous mode
[   80.628931][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.642853][ T6921] bond0: (slave bond_slave_0): Releasing backup interface
[   80.649989][ T6921] bond0: (slave bond_slave_1): Releasing backup interface
[   80.664360][ T6921] team0: Port device team_slave_0 removed
[   80.675599][ T6921] team0: Port device team_slave_1 removed
[   80.678674][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.682346][ T6921] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.686661][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.689036][ T6921] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.704580][ T6921] bond0: (slave bond1): Releasing backup interface
[   80.717476][ T6921] bond3: (slave ip6gretap1): Releasing active interface
[   80.720100][ T6921] bond3: (slave ip6gretap1): the permanent HWaddr of slave - a2:b9:cd:94:46:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   80.730858][ T6921] ip6gretap1: left promiscuous mode
[   80.737164][ T6921] bond3: (slave veth3): Releasing active interface
[   80.876464][ T6936] netlink: 'syz.1.281': attribute type 27 has an invalid length.
[   81.002618][ T6950] netlink: 'syz.1.285': attribute type 2 has an invalid length.
[   81.031587][ T6954] __nla_validate_parse: 25 callbacks suppressed
[   81.031600][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'.
[   81.293719][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   81.386781][ T6972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'.
[   81.389642][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'.
[   81.551281][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[   81.575533][ T6989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.622753][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   81.673159][ T7000] vcan0: entered allmulticast mode
[   81.750166][ T7007] validate_nla: 2 callbacks suppressed
[   81.750182][ T7007] netlink: 'syz.0.302': attribute type 8 has an invalid length.
[   82.015724][ T7022] netlink: 'syz.1.308': attribute type 5 has an invalid length.
[   82.100744][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'.
[   82.104017][ T7024] netlink: 92 bytes leftover after parsing attributes in process `syz.1.309'.
[   82.249574][ T7034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.311'.
[   82.285847][ T7039] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.314'.
[   82.321627][ T7042] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.414464][ T7046] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.716391][ T7052] vcan0: entered allmulticast mode
[   82.795668][ T7054] netlink: 'syz.0.320': attribute type 5 has an invalid length.
[   82.882993][ T7060] netlink: 'syz.0.322': attribute type 30 has an invalid length.
[   82.899247][ T5878] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.904752][ T5878] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.907762][ T5878] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.912148][ T5878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.046202][ T7067] netlink: 'syz.1.325': attribute type 3 has an invalid length.
[   83.559668][ T7112] netlink: 'syz.2.337': attribute type 5 has an invalid length.
[   83.663598][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.682840][ T7110] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.692953][ T7110] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.616303][ T7135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   84.645144][ T7135] IPVS: Error connecting to the multicast addr
[   85.387346][    C0] Illegal XDP return value 16128 on prog  (id 80) dev lo, expect packet loss!
[   85.411104][ T7164] netlink: 'syz.2.351': attribute type 1 has an invalid length.
[   85.517710][ T7177] netlink: 'syz.2.354': attribute type 1 has an invalid length.
[   85.520996][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.699106][ T7180] netlink: 'syz.2.355': attribute type 13 has an invalid length.
[   85.702330][ T7180] netlink: 'syz.2.355': attribute type 17 has an invalid length.
[   85.721793][ T7180] erspan0: left allmulticast mode
[   85.784360][ T7180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.882742][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.917935][ T7196] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.952475][ T7196] bond4: (slave gretap2): making interface the new active one
[   85.958609][ T7196] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   85.992469][ T7196] syz.1.359 (7196) used greatest stack depth: 18312 bytes left
[   86.184320][ T7210] __nla_validate_parse: 15 callbacks suppressed
[   86.184337][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[   86.278122][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'.
[   86.285309][ T7216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'.
[   86.398138][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'.
[   86.583206][ T7229] netlink: 128 bytes leftover after parsing attributes in process `syz.2.367'.
[   86.597546][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.607345][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.608147][ T7229] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.617628][ T7229] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.137670][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[   87.140662][ T7235] openvswitch: netlink: Missing key (keys=40, expected=100)
[   87.475705][ T7249] validate_nla: 1 callbacks suppressed
[   87.475716][ T7249] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[   87.480858][ T7251] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[   87.488609][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'.
[   87.503686][ T7251] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.528818][ T7249] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.666898][ T7273] vlan2: entered promiscuous mode
[   87.750602][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'.
[   87.753858][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'.
[   87.755088][ T7284] netlink: 'syz.2.380': attribute type 5 has an invalid length.
[   87.787793][ T7289] netlink: 'syz.0.382': attribute type 21 has an invalid length.
[   87.792201][ T7289] netlink: 156 bytes leftover after parsing attributes in process `syz.0.382'.
[   87.932937][ T5878] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.936111][ T5878] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.948772][ T5878] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.963396][ T5878] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.429422][ T7335] vlan3: entered promiscuous mode
[   88.432699][ T7335] bridge0: port 1(vlan3) entered blocking state
[   88.435207][ T7335] bridge0: port 1(vlan3) entered disabled state
[   88.438328][ T7335] vlan3: entered allmulticast mode
[   88.440154][ T7335] bridge0: entered allmulticast mode
[   88.447764][ T7335] vlan3: left allmulticast mode
[   88.449950][ T7335] bridge0: left allmulticast mode
[   88.976574][ T7386] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.098595][ T7394] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[   89.110457][ T7394] netlink: 'syz.0.397': attribute type 2 has an invalid length.
[   89.170295][ T7399] netlink: 'syz.2.400': attribute type 2 has an invalid length.
[   89.288144][ T7414] netlink: 'syz.1.404': attribute type 5 has an invalid length.
[   89.421856][ T7424] netlink: 'syz.2.407': attribute type 6 has an invalid length.
[   89.425269][ T7425] netlink: 'syz.2.407': attribute type 6 has an invalid length.
[   89.622651][ T7437] 8021q: VLANs not supported on ipvlan1
[   89.644129][ T7437] macsec1: entered promiscuous mode
[   89.646336][ T7437] macsec1: entered allmulticast mode
[   89.649275][ T5878] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.668987][ T5878] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.675928][ T5878] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.679704][ T7439] tap0: tun_chr_ioctl cmd 1074812118
[   89.683903][ T5878] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.058037][ T7461] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.510794][ T7490] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.526786][ T7490] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.529434][ T7490] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.535310][ T7490] bond5: (slave vxcan3): Error -95 calling set_mac_address
[   90.598488][ T7492] bond5: (slave bridge3): Enslaving as an active interface with a down link
[   90.986983][ T7512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.018518][ T7521] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.064740][ T7512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.192865][ T7537] __nla_validate_parse: 33 callbacks suppressed
[   91.192877][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'.
[   91.228362][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'.
[   92.092042][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'.
[   92.108991][ T7584] batman_adv: batadv0: Adding interface: ip6gretap2
[   92.114188][ T7584] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.125599][ T7584] batman_adv: batadv0: Interface activated: ip6gretap2
[   92.193023][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[   92.313622][ T7594] bond6: (slave ip6gretap3): Enslaving as a backup interface with an up link
[   92.323882][ T5746] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.324854][ T7594] 8021q: adding VLAN 0 to HW filter on device bond6
[   92.350732][ T7594] veth7: entered promiscuous mode
[   92.356278][ T7594] bond6: (slave veth7): Enslaving as a backup interface with a down link
[   92.367442][ T7598] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.468'.
[   92.389666][ T7598] bond4: entered promiscuous mode
[   92.392202][ T7598] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.441011][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.588194][ T7607] siw: device registration error -23
[   92.608135][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'.
[   92.608182][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'.
[   93.100128][ T7642] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   93.106166][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[   93.135810][ T7645] validate_nla: 36 callbacks suppressed
[   93.135821][ T7645] netlink: 'syz.1.482': attribute type 25 has an invalid length.
[   93.141295][ T7645] netlink: 'syz.1.482': attribute type 7 has an invalid length.
[   93.152937][ T7645] bridge5: entered promiscuous mode
[   93.154869][ T7645] bridge5: entered allmulticast mode
[   93.217523][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[   93.226990][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'.
[   93.366626][ T7664] netlink: 'syz.2.487': attribute type 4 has an invalid length.
[   93.896662][ T7703] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.977369][ T7703] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.056548][ T7703] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.107470][ T7703] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.216429][ T7230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.227415][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.251285][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.266611][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.502319][ T7726] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   94.505621][ T7726] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   94.767002][ T7744] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   94.784331][ T7744] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   95.669291][ T7780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.944413][ T7787] openvswitch: netlink: IP tunnel dst address not specified
[   96.076687][ T7792] netlink: 'syz.1.523': attribute type 10 has an invalid length.
[   96.086303][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.091227][ T7792] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   96.098297][ T7789] netlink: 'syz.1.523': attribute type 10 has an invalid length.
[   96.329470][ T7795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.363881][ T7795] netlink: 'syz.1.524': attribute type 5 has an invalid length.
[   96.503527][ T7807] bond0: (slave batadv0): Releasing backup interface
[   96.511829][ T7807] bridge_slave_0: left allmulticast mode
[   96.513751][ T7807] bridge_slave_0: left promiscuous mode
[   96.515738][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.520267][ T7807] bridge_slave_1: left allmulticast mode
[   96.522856][ T7807] bridge_slave_1: left promiscuous mode
[   96.525184][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.532006][ T7807] bond0: (slave bond_slave_0): Releasing backup interface
[   96.535955][ T7807] bond0: (slave bond_slave_1): Releasing backup interface
[   96.544754][ T7807] team0: Port device team_slave_0 removed
[   96.554045][ T7807] team0: Port device team_slave_1 removed
[   96.556836][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.581293][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.589404][ T7807] bond3: (slave batadv1): Releasing active interface
[   96.602621][ T7807] bond4: (slave gretap2): Releasing active interface
[   96.615664][ T7815] netlink: 'syz.1.527': attribute type 10 has an invalid length.
[   96.622322][ T7807] bond5: (slave bridge3): Releasing active interface
[   96.647381][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.656987][ T7815] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.895970][ T7835] __nla_validate_parse: 8 callbacks suppressed
[   96.895982][ T7835] netlink: 56 bytes leftover after parsing attributes in process `syz.2.536'.
[   96.935899][ T7839] netlink: 52 bytes leftover after parsing attributes in process `syz.2.538'.
[   97.027728][ T7837] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.097674][ T7837] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.147990][ T7837] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.198564][ T7837] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.224301][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'.
[   97.228381][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'.
[   97.235503][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[   97.239548][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[   97.280763][ T5746] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.312219][ T7230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.338105][ T7230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.350222][ T7230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.508491][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   97.513606][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   97.557045][ T7881] bond2: (slave bridge4): Releasing backup interface
[   97.560244][ T7881] bridge4: left promiscuous mode
[   97.564230][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[   97.574685][ T7881] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   97.577670][ T7881] batman_adv: batadv0: Removing interface: ip6gretap2
[   97.607811][ T7881] netlink: 'syz.0.549': attribute type 10 has an invalid length.
[   97.611538][ T7881] bond0: (slave wlan1): refused to change device type
[   97.678708][ T7887] Bluetooth: MGMT ver 1.23
[   97.747993][ T7889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.752315][ T7889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.912951][ T7889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.917140][ T7889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.981756][ T7889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.985935][ T7889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.049936][ T7889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.055010][ T7889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.120092][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.123816][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.134247][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.137194][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.148885][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.152413][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.163467][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.166579][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.599131][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[   98.652979][ T7930] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   98.656990][ T7930] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   99.182148][ T7960] bond0: (slave wlan1): Releasing backup interface
[   99.346714][ T7965] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   99.353117][ T7965] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   99.732143][ T7988] netlink: 'syz.0.586': attribute type 18 has an invalid length.
[   99.735329][ T7988] netlink: 'syz.0.586': attribute type 18 has an invalid length.
[  100.103126][ T8014] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.107248][ T8014] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.206864][ T8016] trusted_key: syz.1.592 sent an empty control message without MSG_MORE.
[  100.352317][ T8018] netlink: 'syz.0.593': attribute type 10 has an invalid length.
[  100.435850][ T8029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.461705][ T8029] syzkaller0: entered promiscuous mode
[  100.463640][ T8029] syzkaller0: entered allmulticast mode
[  100.472740][ T8029] tipc: Resetting bearer <eth:syzkaller0>
[  100.478563][ T8028] tipc: Resetting bearer <eth:syzkaller0>
[  101.470592][ T2306] tipc: Node number set to 1639107971
[  101.733966][ T8028] tipc: Disabling bearer <eth:syzkaller0>
[  101.955002][ T8048] __nla_validate_parse: 16 callbacks suppressed
[  101.955019][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  102.135842][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'.
[  102.207364][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'.
[  102.385115][ T8068] netlink: 'syz.0.605': attribute type 10 has an invalid length.
[  102.388001][ T8068] bond0: (slave wlan1): refused to change device type
[  102.928964][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.614'.
[  102.932331][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[  102.944010][ T8095] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  102.998153][ T8101] batadv_slave_1: entered promiscuous mode
[  103.013421][ T8101] syzkaller1: entered promiscuous mode
[  103.015712][ T8101] syzkaller1: entered allmulticast mode
[  103.121580][ T8100] batadv_slave_1: left promiscuous mode
[  103.152314][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'.
[  103.165744][ T8105] netlink: 'syz.2.619': attribute type 29 has an invalid length.
[  103.214228][ T8107] netlink: 'syz.1.620': attribute type 4 has an invalid length.
[  103.217603][ T8107] netlink: 'syz.1.620': attribute type 4 has an invalid length.
[  103.218278][ T8111] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.622'.
[  103.225170][ T8111] netlink: zone id is out of range
[  103.227233][ T8111] netlink: get zone limit has 8 unknown bytes
[  103.355465][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'.
[  103.382493][ T8125] netlink: 128 bytes leftover after parsing attributes in process `syz.0.627'.
[  103.402001][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.404866][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.423382][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.627'.
[  103.436771][ T8125] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.440115][ T8125] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.653686][ T8141] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[  103.959746][ T8158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.986524][ T8158] syzkaller0: mtu less than device minimum
[  104.260995][ T8182] netlink: 'syz.0.644': attribute type 11 has an invalid length.
[  104.335578][ T8184] sctp: [Deprecated]: syz.1.645 (pid 8184) Use of int in maxseg socket option.
[  104.335578][ T8184] Use struct sctp_assoc_value instead
[  104.367022][ T8193] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[  104.376214][ T8193] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  104.560103][ T5850] Bluetooth: hci2: link tx timeout
[  104.569264][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.008451][ T8241] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[  105.056998][ T8241] bond6: entered promiscuous mode
[  105.059499][ T8241] 8021q: adding VLAN 0 to HW filter on device bond6
[  105.428227][ T8265] netlink: 'syz.1.663': attribute type 4 has an invalid length.
[  105.493310][ T8265] netlink: 'syz.1.663': attribute type 4 has an invalid length.
[  105.703433][ T8242] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  105.705751][ T8242] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  105.747724][ T8242] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  105.755693][ T8242] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  106.544500][   T10] IPVS: starting estimator thread 0...
[  106.545792][ T8321] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  106.630690][ T8322] IPVS: using max 57 ests per chain, 136800 per kthread
[  106.650752][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  106.662779][ T8242] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  106.668210][ T8242] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  106.748217][ T8331] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  106.996635][ T8345] veth6: entered allmulticast mode
[  107.034621][ T8347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.045167][ T8349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.050941][ T8347] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  107.055017][ T8347] syzkaller0: mtu less than device minimum
[  107.131148][ T8360] !: renamed from dummy0
[  107.137669][ T8356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.142636][ T8356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.146451][ T8356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.149777][ T8356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.346996][ T8383] __nla_validate_parse: 15 callbacks suppressed
[  107.347011][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'.
[  107.378738][ T8385] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.431882][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'.
[  107.455297][ T8385] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.511081][ T8385] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.572807][ T8385] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.691253][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.699458][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.703504][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.707106][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.844109][ T8404] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[  107.848490][ T8404] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[  107.904615][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'.
[  107.925768][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'.
[  107.934313][ T8411] vcan0: entered allmulticast mode
[  107.964915][ T8412] netlink: 9 bytes leftover after parsing attributes in process `syz.1.702'.
[  107.968633][ T8412] ..0: renamed from hsr0
[  107.975915][ T8412] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.980163][ T8412] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.984787][ T8412] ..0: entered allmulticast mode
[  107.986608][ T8412] hsr_slave_0: entered allmulticast mode
[  107.988551][ T8412] hsr_slave_1: entered allmulticast mode
[  107.993029][ T8412] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  108.056455][ T8414] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  108.059908][ T8414] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  108.183813][ T8421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.706'.
[  108.366001][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'.
[  108.401086][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  108.416167][ T8437] vcan0: entered allmulticast mode
[  108.429185][ T8439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.524280][ T8439] syzkaller0: entered promiscuous mode
[  108.526699][ T8439] syzkaller0: entered allmulticast mode
[  108.539682][ T8440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  109.808310][ T8439] tipc: Resetting bearer <eth:syzkaller0>
[  109.820727][ T8467] batadv_slave_1: entered promiscuous mode
[  109.834059][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[  109.847685][ T8442] tipc: Disabling bearer <eth:syzkaller0>
[  109.857435][ T8469] batadv_slave_1: left promiscuous mode
[  109.920732][ T8476] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  109.965092][ T8476] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.970348][ T8476] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  109.984131][ T8479] netlink: 'syz.1.722': attribute type 5 has an invalid length.
[  110.013476][ T8482] gretap1: entered promiscuous mode
[  110.018538][ T8482] bond5: (slave gretap1): making interface the new active one
[  110.023571][ T8482] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  110.123124][ T8490] netlink: 'syz.1.726': attribute type 1 has an invalid length.
[  110.143362][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[  110.151833][ T8490] bond7: entered promiscuous mode
[  110.153945][ T8490] 8021q: adding VLAN 0 to HW filter on device bond7
[  110.157040][ T8493] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  110.162795][ T8490] netlink: 3 bytes leftover after parsing attributes in process `syz.1.726'.
[  110.174588][ T8490] batadv2: entered promiscuous mode
[  110.176566][ T8490] batadv2: entered allmulticast mode
[  110.180111][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv2
[  110.185109][ T8490] bond7: (slave batadv2): making interface the new active one
[  110.188983][ T8490] bond7: (slave batadv2): Enslaving as an active interface with an up link
[  110.364359][ T8508] delete_channel: no stack
[  110.371933][ T8505] netlink: 'syz.2.730': attribute type 21 has an invalid length.
[  110.375090][ T8504] ip6tnl0: Master is either lo or non-ether device
[  111.250040][ T8514] netlink: 'syz.1.734': attribute type 10 has an invalid length.
[  111.259833][ T8514] team0: Port device dummy0 added
[  111.264492][ T8514] netlink: 'syz.1.734': attribute type 10 has an invalid length.
[  111.277733][ T8514] team0: Port device dummy0 removed
[  111.300901][ T8514] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.323238][ T8516] netlink: 'syz.2.735': attribute type 58 has an invalid length.
[  111.512799][ T8533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.536723][ T8533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.539876][ T8533] syzkaller0: entered promiscuous mode
[  111.543411][ T8533] syzkaller0: entered allmulticast mode
[  111.556697][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  111.563217][ T8530] tipc: Resetting bearer <eth:syzkaller0>
[  111.588625][ T8530] tipc: Disabling bearer <eth:syzkaller0>
[  111.705770][ T8544] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  112.166382][ T8572] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  112.459783][ T8583] __nla_validate_parse: 4 callbacks suppressed
[  112.459794][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  112.466504][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  112.640001][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'.
[  112.697992][ T8602] netlink: 'syz.0.761': attribute type 29 has an invalid length.
[  112.728242][ T8602] netlink: 'syz.0.761': attribute type 29 has an invalid length.
[  112.731532][ T8602] openvswitch: netlink: Key type 29 is not supported
[  112.787765][ T8606] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000
[  113.022576][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'.
[  113.028253][ T8615] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  113.032102][ T8615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.765'.
[  113.169976][ T8621] netlink: 'syz.2.767': attribute type 1 has an invalid length.
[  113.204816][ T8621] 8021q: adding VLAN 0 to HW filter on device bond7
[  113.251170][ T8621] bond0: (slave wlan1): Releasing backup interface
[  113.264633][ T8621] bond6: (slave ip6gretap3): Removing an active aggregator
[  113.268495][ T8621] bond6: (slave ip6gretap3): Releasing backup interface
[  113.271747][ T8621] bond6: (slave ip6gretap3): the permanent HWaddr of slave - 6a:e1:34:ef:05:9e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  113.284756][ T8621] bond6: (slave veth7): Releasing backup interface
[  113.302402][ T5876] syz1: Port: 1 Link DOWN
[  113.394782][ T8629] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  113.487364][ T8634] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[  113.516592][ T8634] 8021q: adding VLAN 0 to HW filter on device bond8
[  113.530091][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'.
[  113.764527][ T8645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.774'.
[  113.768135][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'.
[  113.774703][ T8650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.778409][ T8650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.806948][ T8652] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  113.813134][ T8652] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  113.931884][ T8668] bond8: (slave geneve2): making interface the new active one
[  113.936340][ T8668] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  113.939890][ T7230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  113.944788][ T7230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  113.947925][ T7230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  113.952889][ T7230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  114.076547][ T8681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.085193][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'.
[  114.128920][ T8681] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.785'.
[  114.175606][ T8683] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  114.179614][ T8683] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  114.377471][ T8692] atomic_op ffff88810b118198 conn xmit_atomic 0000000000000000
[  114.738820][ T8721] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  114.744963][ T8721] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  114.928736][ T8732] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  114.939554][ T8733] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  114.968985][ T8736] bridge12: entered allmulticast mode
[  115.034031][ T8751] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  115.037374][ T8751] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  115.209743][ T8763] validate_nla: 2 callbacks suppressed
[  115.209753][ T8763] netlink: 'syz.2.813': attribute type 1 has an invalid length.
[  115.288554][ T8767] vcan0: entered allmulticast mode
[  115.453515][ T5850] Bluetooth: hci0: command tx timeout
[  115.638020][ T8810] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  115.662200][ T8813] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  115.666236][ T8813] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  115.675981][ T8813] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  116.005794][ T8839] netlink: 'syz.2.838': attribute type 4 has an invalid length.
[  116.009856][ T8840] netlink: 'syz.2.838': attribute type 4 has an invalid length.
[  116.015814][ T8842] netlink: 'syz.0.841': attribute type 10 has an invalid length.
[  116.023454][ T8842] team0: Port device 0! added
[  116.026945][ T8842] netlink: 'syz.0.841': attribute type 10 has an invalid length.
[  116.048815][ T8842] team0: Port device 0! removed
[  116.056395][ T8842] !: entered promiscuous mode
[  116.058631][ T8842] !: entered allmulticast mode
[  116.064371][ T8842] bond0: (slave 0!): Enslaving as an active interface with an up link
[  116.208972][ T8858] ieee802154 phy0 wpan0: encryption failed: -22
[  116.982444][ T8862] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  117.010129][ T8864] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  117.078128][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.164638][ T8872] infiniband : RDMA CMA: cma_listen_on_dev, error -98
[  117.488937][ T8885] netlink: 'syz.2.854': attribute type 1 has an invalid length.
[  118.056370][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[  118.172153][ T5877] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.175767][ T5877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.179841][ T5877] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.187598][ T5877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.204616][ T5877] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.208170][ T5877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.212949][ T5877] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.216717][ T5877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.217097][ T8901] __nla_validate_parse: 33 callbacks suppressed
[  118.217111][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.859'.
[  118.323667][ T8909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.861'.
[  118.395603][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  118.506170][ T8927] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  118.552001][ T8927] 8021q: adding VLAN 0 to HW filter on device bond6
[  118.584791][ T8933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.591115][ T8933] netlink: 468 bytes leftover after parsing attributes in process `syz.1.865'.
[  118.789560][ T8948] netlink: 'syz.1.868': attribute type 4 has an invalid length.
[  118.795626][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'.
[  118.798890][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'.
[  118.810603][ T8948] geneve3: entered promiscuous mode
[  118.812571][ T8948] geneve3: entered allmulticast mode
[  118.815847][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.819678][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.831466][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.836678][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.865758][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'.
[  119.084295][ T8961] vlan2: left promiscuous mode
[  119.087178][ T8961] bond0: left promiscuous mode
[  119.092678][ T8961] !: left promiscuous mode
[  119.094360][ T8961] vlan2: left allmulticast mode
[  119.096171][ T8961] bond0: left allmulticast mode
[  119.108388][ T8961] !: left allmulticast mode
[  119.140249][ T8961] bond2: left promiscuous mode
[  119.183622][ T8961] bond4: left promiscuous mode
[  119.194201][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'.
[  119.206543][ T8961] gretap1: left promiscuous mode
[  119.211952][ T8961] bridge12: left allmulticast mode
[  119.229717][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.239333][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.265475][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.280733][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.289722][ T8971] netlink: 84 bytes leftover after parsing attributes in process `syz.0.877'.
[  119.296436][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  119.451626][ T8983] 8021q: adding VLAN 0 to HW filter on device bond9
[  119.473590][ T8984] bond9: (slave veth9): Enslaving as an active interface with a down link
[  119.575063][ T8996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.489820][ T9022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.494108][ T9022] syzkaller0: entered promiscuous mode
[  120.496023][ T9022] syzkaller0: entered allmulticast mode
[  120.557273][ T9021] tipc: Resetting bearer <eth:syzkaller0>
[  120.574406][ T9021] tipc: Disabling bearer <eth:syzkaller0>
[  121.294290][ T9036] validate_nla: 2 callbacks suppressed
[  121.294306][ T9036] netlink: 'syz.1.897': attribute type 1 has an invalid length.
[  121.368898][ T9043] netlink: 'syz.2.898': attribute type 13 has an invalid length.
[  121.374290][ T9043] netlink: 'syz.2.898': attribute type 17 has an invalid length.
[  121.387594][ T9043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.465332][ T9048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.466200][ T9047] netlink: 'syz.1.899': attribute type 1 has an invalid length.
[  122.379695][ T9084] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[  122.417252][ T9084] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.435504][ T9084] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.438032][ T9084] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address
[  122.445711][ T9084] bond10: (slave vxcan5): Error -95 calling set_mac_address
[  122.499813][ T9093] veth11: entered promiscuous mode
[  122.505806][ T9093] bond10: (slave veth11): Enslaving as an active interface with a down link
[  122.619128][ T9100] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  122.746903][ T9095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.862039][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.867427][ T9162] __nla_validate_parse: 15 callbacks suppressed
[  123.867446][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'.
[  123.994818][ T9165] netlink: 256 bytes leftover after parsing attributes in process `syz.1.933'.
[  124.863968][ T9192] netlink: 176 bytes leftover after parsing attributes in process `syz.0.942'.
[  125.133185][ T9202] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  125.136694][ T9202] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  125.337624][ T9212] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20000
[  125.485284][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'.
[  125.540162][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  125.540983][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  125.592217][ T9216] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.673834][ T9224] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  125.677773][ T9224] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  125.910007][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  125.930081][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  126.149685][ T9247] syzkaller0: entered promiscuous mode
[  126.151889][ T9247] syzkaller0: entered allmulticast mode
[  126.246425][ T9255] netlink: 'syz.1.961': attribute type 16 has an invalid length.
[  126.249368][ T9255] netlink: 'syz.1.961': attribute type 17 has an invalid length.
[  126.271514][ T9255] tipc: Resetting bearer <eth:syzkaller0>
[  126.303434][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.312776][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.319307][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'.
[  126.331874][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.336084][ T9255] IPv6: NLM_F_REPLACE set, but no existing node found!
[  126.336327][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'.
[  126.350948][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.461372][ T9277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.468743][ T9277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  126.645502][ T9291] netlink: 'syz.2.971': attribute type 4 has an invalid length.
[  126.650198][ T9282] netlink: 'syz.0.970': attribute type 3 has an invalid length.
[  126.763966][ T9294] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  126.768235][ T9299] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  126.769802][ T9294] openvswitch: netlink: Key type 6928 is out of range max 32
[  126.775673][ T9299] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  127.068460][ T9327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.081773][ T9330] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[  127.084871][ T9330] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  127.588128][ T7230] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.591852][ T7230] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.595219][ T7230] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.598515][ T7230] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.602587][ T7230] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.606885][ T7230] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.610268][ T7230] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.614215][ T7230] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.821583][ T9352] netlink: 'syz.1.987': attribute type 1 has an invalid length.
[  127.866408][ T9352] 8021q: adding VLAN 0 to HW filter on device bond11
[  128.054190][ T9372] openvswitch: netlink: IPv6 tunnel dst address is zero
[  128.342202][ T7230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.349893][ T7230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.355880][ T7230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.358497][ T7230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.404190][ T9390] netlink: 'syz.1.999': attribute type 4 has an invalid length.
[  128.915482][ T9410] netlink: 'syz.1.1004': attribute type 1 has an invalid length.
[  128.922981][ T9410] __nla_validate_parse: 22 callbacks suppressed
[  128.929536][ T9410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1004'.
[  128.952804][ T9410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1004'.
[  129.978073][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  130.226081][ T9434] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1012'.
[  130.338205][ T9434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.355372][ T9434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.844820][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  130.866382][ T9446] vcan0: entered allmulticast mode
[  131.048094][ T9457] netlink: 'syz.2.1018': attribute type 1 has an invalid length.
[  131.051835][ T9457] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1018'.
[  131.056336][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  131.102998][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'.
[  131.106103][ T9461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1020'.
[  131.176020][ T9466] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  131.195039][ T9466] 8021q: adding VLAN 0 to HW filter on device bond9
[  131.207604][ T9466] bond9: (slave geneve4): making interface the new active one
[  131.211705][ T9466] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  131.216547][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.219880][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.227228][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.236575][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.268030][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'.
[  131.354909][ T9482] tap0: tun_chr_ioctl cmd 1074025680
[  131.358633][ T9482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.363784][ T9482] block nbd0: Unsupported socket: shutdown callout must be supported.
[  131.392927][ T9482] D: renamed from syzkaller0
[  131.395516][ T9482] tipc: Disabling bearer <eth:syzkaller0>
[  131.576163][ T9485] netlink: 'syz.0.1027': attribute type 16 has an invalid length.
[  131.586733][ T7230] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.589638][ T7230] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.594218][ T7230] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.594670][ T9485] IPv6: NLM_F_REPLACE set, but no existing node found!
[  131.597436][ T7230] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.299772][ T9500] batadv_slave_1: entered promiscuous mode
[  132.306372][ T9499] batadv_slave_1: left promiscuous mode
[  132.454430][ T9510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.496437][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.498580][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.520714][ T9517] vcan0: entered allmulticast mode
[  132.622719][ T9524] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.711980][ T9529] validate_nla: 1 callbacks suppressed
[  132.712021][ T9529] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  132.819593][ T9537] netlink: 'syz.0.1047': attribute type 1 has an invalid length.
[  132.864198][ T9541] netlink: zone id is out of range
[  132.870526][ T9541] netlink: zone id is out of range
[  132.875720][ T9541] netlink: zone id is out of range
[  132.877371][ T9541] netlink: zone id is out of range
[  132.879102][ T9541] netlink: zone id is out of range
[  132.885061][ T9541] netlink: zone id is out of range
[  132.887338][ T9541] netlink: zone id is out of range
[  132.889429][ T9541] netlink: zone id is out of range
[  132.891876][ T9541] netlink: zone id is out of range
[  132.904470][ T9541] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20003
[  132.959199][ T9552] syz.1.1053 uses old SIOCAX25GETINFO
[  132.985449][ T9555] macsec1: entered promiscuous mode
[  132.987429][ T9555] macsec0: entered promiscuous mode
[  132.989274][ T9555] macsec1: entered allmulticast mode
[  132.996488][ T9555] macsec0: entered allmulticast mode
[  133.091466][ T9569] netlink: 'syz.2.1060': attribute type 8 has an invalid length.
[  133.098251][ T9569] bond0: entered promiscuous mode
[  133.102312][ T9569] bond0: left promiscuous mode
[  133.266165][ T9582] bond9: (slave geneve4): Releasing active interface
[  133.284279][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.288036][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.294253][ T9582] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.297765][ T9582] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.300564][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.303079][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.323306][ T9587] netlink: 'syz.1.1066': attribute type 2 has an invalid length.
[  134.114796][ T9606] __nla_validate_parse: 10 callbacks suppressed
[  134.114811][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'.
[  134.161454][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  134.165513][ T9610] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1074'.
[  134.175064][ T9610] batadv1: entered promiscuous mode
[  134.177262][ T9610] batadv1: entered allmulticast mode
[  134.414147][ T9627] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[  134.417163][ T9627] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1080'.
[  134.422635][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  134.445447][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'.
[  134.451549][ T9629] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1081'.
[  134.579188][ T9637] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  134.585717][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'.
[  134.596752][ T9637] veth10: entered promiscuous mode
[  134.615700][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1084'.
[  149.531337][ T9644] can: request_module (can-proto-0) failed.
[  149.534285][ T9644] net_ratelimit: 12 callbacks suppressed
[  149.534316][ T9644] openvswitch: netlink: IP tunnel dst address not specified
[  149.563445][ T9644] can: request_module (can-proto-0) failed.
[  149.586615][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'.
[  149.588792][ T9644] can: request_module (can-proto-0) failed.
[  149.613249][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  149.679074][ T9659] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  149.685007][ T9659] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1092'.
[  149.687968][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[  149.764803][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  149.766140][ T9669] netlink: 'syz.2.1096': attribute type 74 has an invalid length.
[  149.789931][ T9666] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.1094'.
[  149.871044][ T9677] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  149.903175][ T9676] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  149.906189][ T9676] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  150.145500][ T9700] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  150.196080][ T9704] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1106'.
[  150.199893][ T9704] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1106'.
[  150.438757][ T9713] 8021q: adding VLAN 0 to HW filter on device bond7
[  150.444780][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1111'.
[  150.451121][ T9713] bond0: (slave 0!): Releasing backup interface
[  150.456766][ T9713] bond5: (slave gretap1): Releasing active interface
[  150.508229][ T9716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.512600][ T9716] syzkaller0: entered promiscuous mode
[  150.514788][ T9716] syzkaller0: entered allmulticast mode
[  150.535579][ T9716] tipc: Resetting bearer <eth:syzkaller0>
[  150.539231][ T9715] tipc: Resetting bearer <eth:syzkaller0>
[  150.552416][ T9715] tipc: Disabling bearer <eth:syzkaller0>
[  150.989882][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.045845][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'.
[  151.084377][ T9750] netlink: 'syz.0.1122': attribute type 1 has an invalid length.
[  151.106393][ T9750] 8021q: adding VLAN 0 to HW filter on device bond8
[  151.113290][ T9750] ==================================================================
[  151.116243][ T9750] BUG: KASAN: use-after-free in xfrm_state_find+0x2cf2/0x5400
[  151.118580][ T9750] Read of size 1 at addr ffff88802764c7b0 by task syz.0.1122/9750
[  151.122274][ T9750] 
[  151.123295][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.0.1122 Not tainted syzkaller #0 PREEMPT(full) 
[  151.123318][ T9750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.123328][ T9750] Call Trace:
[  151.123334][ T9750]  <TASK>
[  151.123342][ T9750]  dump_stack_lvl+0x189/0x250
[  151.123373][ T9750]  ? __kasan_check_byte+0x12/0x40
[  151.123395][ T9750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.123411][ T9750]  ? lock_release+0x4b/0x3e0
[  151.123433][ T9750]  ? __virt_addr_valid+0x4a5/0x5c0
[  151.123452][ T9750]  print_report+0xca/0x240
[  151.123465][ T9750]  ? xfrm_state_find+0x2cf2/0x5400
[  151.123482][ T9750]  kasan_report+0x118/0x150
[  151.123502][ T9750]  ? xfrm_state_find+0x2cf2/0x5400
[  151.123522][ T9750]  xfrm_state_find+0x2cf2/0x5400
[  151.123539][ T9750]  ? __lock_acquire+0xab9/0xd20
[  151.123565][ T9750]  ? xfrm_state_find+0x1da/0x5400
[  151.123583][ T9750]  ? __pfx_xfrm_state_find+0x10/0x10
[  151.123606][ T9750]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  151.123635][ T9750]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  151.123658][ T9750]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  151.123680][ T9750]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  151.123703][ T9750]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  151.123736][ T9750]  ? xfrm_expand_policies+0x41f/0x6a0
[  151.123758][ T9750]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  151.123782][ T9750]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  151.123804][ T9750]  ? __lock_acquire+0xab9/0xd20
[  151.123825][ T9750]  xfrm_lookup_route+0x3c/0x1c0
[  151.123846][ T9750]  __ip4_datagram_connect+0x9a5/0x1270
[  151.123873][ T9750]  udp_connect+0x33/0x1f0
[  151.123890][ T9750]  __sys_connect+0x316/0x440
[  151.123907][ T9750]  ? __pfx___sys_connect+0x10/0x10
[  151.123926][ T9750]  ? rcu_is_watching+0x15/0xb0
[  151.123943][ T9750]  __x64_sys_connect+0x7a/0x90
[  151.123958][ T9750]  do_syscall_64+0xfa/0x3b0
[  151.123975][ T9750]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.123990][ T9750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.124003][ T9750]  ? exc_page_fault+0x9f/0xf0
[  151.124018][ T9750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.124033][ T9750] RIP: 0033:0x7f578178ebe9
[  151.124047][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.124059][ T9750] RSP: 002b:00007f57825e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  151.124075][ T9750] RAX: ffffffffffffffda RBX: 00007f57819c5fa0 RCX: 00007f578178ebe9
[  151.124086][ T9750] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000006
[  151.124095][ T9750] RBP: 00007f5781811e19 R08: 0000000000000000 R09: 0000000000000000
[  151.124104][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.124113][ T9750] R13: 00007f57819c6038 R14: 00007f57819c5fa0 R15: 00007ffdfdf30418
[  151.124129][ T9750]  </TASK>
[  151.124134][ T9750] 
[  151.234368][ T9750] The buggy address belongs to the physical page:
[  151.236897][ T9750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802764db00 pfn:0x2764c
[  151.240863][ T9750] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  151.243606][ T9750] page_type: f0(buddy)
[  151.245228][ T9750] raw: 00fff00000000000 ffffea00007b9e08 ffffea0000995b08 0000000000000000
[  151.248511][ T9750] raw: ffff88802764db00 0000000000000002 00000000f0000000 0000000000000000
[  151.251799][ T9750] page dumped because: kasan: bad access detected
[  151.254310][ T9750] page_owner tracks the page as freed
[  151.256376][ T9750] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6096, tgid 6090 (syz.2.52), ts 63971694691, free_ts 114744314483
[  151.263722][ T9750]  post_alloc_hook+0x240/0x2a0
[  151.265621][ T9750]  get_page_from_freelist+0x21e4/0x22c0
[  151.267752][ T9750]  __alloc_frozen_pages_noprof+0x181/0x370
[  151.270029][ T9750]  alloc_pages_mpol+0x232/0x4a0
[  151.271941][ T9750]  allocate_slab+0x8a/0x370
[  151.273768][ T9750]  ___slab_alloc+0xbeb/0x1420
[  151.275583][ T9750]  kmem_cache_alloc_noprof+0x283/0x3c0
[  151.277681][ T9750]  xfrm_state_alloc+0x24/0x2f0
[  151.279613][ T9750]  xfrm_add_acquire+0xf7/0xb20
[  151.281470][ T9750]  xfrm_user_rcv_msg+0x7a3/0xab0
[  151.283446][ T9750]  netlink_rcv_skb+0x208/0x470
[  151.285391][ T9750]  xfrm_netlink_rcv+0x79/0x90
[  151.287233][ T9750]  netlink_unicast+0x82f/0x9e0
[  151.289129][ T9750]  netlink_sendmsg+0x805/0xb30
[  151.291061][ T9750]  __sock_sendmsg+0x21c/0x270
[  151.292926][ T9750]  ____sys_sendmsg+0x505/0x830
[  151.294792][ T9750] page last free pid 8719 tgid 8715 stack trace:
[  151.297318][ T9750]  __free_frozen_pages+0xbc4/0xd30
[  151.299341][ T9750]  __slab_free+0x303/0x3c0
[  151.301126][ T9750]  qlist_free_all+0x97/0x140
[  151.303016][ T9750]  kasan_quarantine_reduce+0x148/0x160
[  151.305178][ T9750]  __kasan_slab_alloc+0x22/0x80
[  151.307167][ T9750]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  151.309485][ T9750]  sock_alloc_inode+0x28/0xc0
[  151.311323][ T9750]  alloc_inode+0x6a/0x1b0
[  151.313053][ T9750]  __sock_create+0x12d/0x9f0
[  151.314873][ T9750]  __sys_socket+0xd7/0x1b0
[  151.316654][ T9750]  __x64_sys_socket+0x7a/0x90
[  151.318561][ T9750]  do_syscall_64+0xfa/0x3b0
[  151.320540][ T9750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.322965][ T9750] 
[  151.323977][ T9750] Memory state around the buggy address:
[  151.326300][ T9750]  ffff88802764c680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  151.329485][ T9750]  ffff88802764c700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  151.332579][ T9750] >ffff88802764c780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  151.335790][ T9750]                                      ^
[  151.337981][ T9750]  ffff88802764c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  151.341133][ T9750]  ffff88802764c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  151.344166][ T9750] ==================================================================
[  151.349932][ T9750] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  151.352526][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.0.1122 Not tainted syzkaller #0 PREEMPT(full) 
[  151.356290][ T9750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.359827][ T9750] Call Trace:
[  151.360912][ T9750]  <TASK>
[  151.361814][ T9750]  dump_stack_lvl+0x99/0x250
[  151.363479][ T9750]  ? __asan_memcpy+0x40/0x70
[  151.364960][ T9750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.366522][ T9750]  ? __pfx__printk+0x10/0x10
[  151.368025][ T9750]  vpanic+0x281/0x750
[  151.369563][ T9750]  ? preempt_schedule+0xae/0xc0
[  151.371353][ T9750]  ? __pfx_vpanic+0x10/0x10
[  151.372850][ T9750]  ? preempt_schedule_common+0x83/0xd0
[  151.374767][ T9750]  ? preempt_schedule+0xae/0xc0
[  151.376516][ T9750]  ? __pfx_preempt_schedule+0x10/0x10
[  151.378451][ T9750]  panic+0xb9/0xc0
[  151.379805][ T9750]  ? __pfx_panic+0x10/0x10
[  151.381222][ T9750]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  151.383348][ T9750]  ? xfrm_state_find+0x2cf2/0x5400
[  151.385265][ T9750]  check_panic_on_warn+0x89/0xb0
[  151.386918][ T9750]  ? xfrm_state_find+0x2cf2/0x5400
[  151.388760][ T9750]  end_report+0x78/0x160
[  151.390230][ T9750]  kasan_report+0x129/0x150
[  151.391631][ T9750]  ? xfrm_state_find+0x2cf2/0x5400
[  151.393292][ T9750]  xfrm_state_find+0x2cf2/0x5400
[  151.394788][ T9750]  ? __lock_acquire+0xab9/0xd20
[  151.396340][ T9750]  ? xfrm_state_find+0x1da/0x5400
[  151.398008][ T9750]  ? __pfx_xfrm_state_find+0x10/0x10
[  151.399585][ T9750]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  151.401830][ T9750]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  151.403946][ T9750]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  151.406046][ T9750]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  151.407869][ T9750]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  151.410123][ T9750]  ? xfrm_expand_policies+0x41f/0x6a0
[  151.412287][ T9750]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  151.414113][ T9750]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  151.415922][ T9750]  ? __lock_acquire+0xab9/0xd20
[  151.417748][ T9750]  xfrm_lookup_route+0x3c/0x1c0
[  151.419671][ T9750]  __ip4_datagram_connect+0x9a5/0x1270
[  151.421816][ T9750]  udp_connect+0x33/0x1f0
[  151.423540][ T9750]  __sys_connect+0x316/0x440
[  151.425411][ T9750]  ? __pfx___sys_connect+0x10/0x10
[  151.427410][ T9750]  ? rcu_is_watching+0x15/0xb0
[  151.429268][ T9750]  __x64_sys_connect+0x7a/0x90
[  151.431034][ T9750]  do_syscall_64+0xfa/0x3b0
[  151.432755][ T9750]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.434420][ T9750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.436569][ T9750]  ? exc_page_fault+0x9f/0xf0
[  151.438035][ T9750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.440263][ T9750] RIP: 0033:0x7f578178ebe9
[  151.441933][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.449230][ T9750] RSP: 002b:00007f57825e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  151.452513][ T9750] RAX: ffffffffffffffda RBX: 00007f57819c5fa0 RCX: 00007f578178ebe9
[  151.455590][ T9750] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000006
[  151.458659][ T9750] RBP: 00007f5781811e19 R08: 0000000000000000 R09: 0000000000000000
[  151.461793][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.464901][ T9750] R13: 00007f57819c6038 R14: 00007f57819c5fa0 R15: 00007ffdfdf30418
[  151.468153][ T9750]  </TASK>
[  151.470138][ T9750] Kernel Offset: disabled
[  151.471882][ T9750] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:31:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000085984 RBX=ffff88804b032f98 RCX=eb1b8ade40639800 RDX=ffffc90000007801
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=dffffc0000000000 RSP=ffffc90000007650
R8 =ffffc90000007890 R9 =0000000000000000 R10=ffffc90000007858 R11=fffff52000000f0d
R12=ffffc900000078a0 R13=ffffffff8172c195 R14=ffffffff8dbe2d10 R15=dffffc0000000000
RIP=ffffffff81a66057 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558d4e5500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32b008 CR3=0000000038b10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f23b3997498 00007f23b3997470 XMM03=00007f23b39974a8 00007f23b39974a0
XMM04=00007f23b44fd100 00007f23b3997460 XMM05=00007f23b3997478 00007f23b39974c0
XMM06=00007f23b39974b8 00007f23b39974b0 XMM07=00007f23b39974a8 00007f23b39974a0
XMM08=0000000000000000 00007f23b3812ee7 XMM09=0000000000000000 00007f23b3812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000145c RDI=000000000000145d RBP=00000000000003f8 RSP=ffffc90007406e10
R8 =ffff88801f878237 R9 =1ffff11003f0f046 R10=dffffc0000000000 R11=ffffffff854f5590
R12=dffffc0000000000 R13=ffffffff99b02914 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f560c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57825e86c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001040 CR3=000000003b1f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5781997498 00007f5781997470 XMM03=00007f57819974a8 00007f57819974a0
XMM04=00007f57824fd100 00007f5781997460 XMM05=00007f5781997478 00007f57819974c0
XMM06=00007f57819974b8 00007f57819974b0 XMM07=00007f57819974a8 00007f57819974a0
XMM08=0000000000000000 00007f5781812ee7 XMM09=0000000000000000 00007f5781812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
