last executing test programs:

738.461097ms ago: executing program 1 (id=366):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='$', 0x1}, {0x0}], 0x2}, 0x40014)

738.102725ms ago: executing program 1 (id=367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

593.647863ms ago: executing program 1 (id=370):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x12a)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b", 0x2c}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080)

474.631044ms ago: executing program 1 (id=375):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)

463.005723ms ago: executing program 1 (id=378):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0)

393.46089ms ago: executing program 1 (id=382):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)

246.020232ms ago: executing program 2 (id=391):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)

243.377924ms ago: executing program 2 (id=393):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)

179.393387ms ago: executing program 0 (id=394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x33, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07, 0x0, 0x240000c0}, 0x2000000)

178.97421ms ago: executing program 2 (id=395):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0)=0x35, 0x4)

178.787756ms ago: executing program 0 (id=396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000007060500000000000000002f07000007050001000700000009"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)

119.663154ms ago: executing program 0 (id=397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)

119.488824ms ago: executing program 2 (id=398):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
unshare(0x22020600)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "04e213967fedfd93", '4\x00', "3c32a968", "a01ea39e10f01298"}, 0x28)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

29.644979ms ago: executing program 0 (id=399):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x60, 0x0, 0x0)

29.292111ms ago: executing program 2 (id=400):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

29.152581ms ago: executing program 0 (id=401):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.514064ms ago: executing program 2 (id=402):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

0s ago: executing program 0 (id=403):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x52, 0xffffffffffffffff, &(0x7f00000003c0)=0x16)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4653' (ED25519) to the list of known hosts.
syzkaller login: [   48.686070][ T5813] cgroup: Unknown subsys name 'net'
[   48.815257][ T5813] cgroup: Unknown subsys name 'cpuset'
[   48.819972][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.225418][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.946084][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.021935][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   57.107288][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.110279][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.113622][ T5879] bridge_slave_0: entered allmulticast mode
[   57.116425][ T5879] bridge_slave_0: entered promiscuous mode
[   57.122356][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.124803][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.127246][ T5879] bridge_slave_1: entered allmulticast mode
[   57.130340][ T5879] bridge_slave_1: entered promiscuous mode
[   57.232424][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.237194][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.274274][ T5879] team0: Port device team_slave_0 added
[   57.280922][ T5879] team0: Port device team_slave_1 added
[   57.307699][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.310103][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.318525][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.323508][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.325814][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.334206][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.359105][ T5879] hsr_slave_0: entered promiscuous mode
[   57.362246][ T5879] hsr_slave_1: entered promiscuous mode
[   57.453426][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.459128][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.463857][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.468004][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.488258][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.490763][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.494275][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.496854][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.526540][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.537563][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.540947][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.550050][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   57.556558][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.558908][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.566071][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.568468][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.656106][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.683370][ T5879] veth0_vlan: entered promiscuous mode
[   57.688382][ T5879] veth1_vlan: entered promiscuous mode
[   57.704184][ T5879] veth0_macvtap: entered promiscuous mode
[   57.708231][ T5879] veth1_macvtap: entered promiscuous mode
[   57.717378][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.724543][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.732291][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.735843][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.739193][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.743695][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.273016][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.399894][ T5916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.406436][ T5916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.407920][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.422886][ T5916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.426757][ T5916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.432410][ T5916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.451461][ T5916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.454447][ T5916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.457551][ T5916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.461469][ T5916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.464180][ T5916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.489230][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.498508][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.502595][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.505407][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.508010][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.510489][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.564236][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.684436][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   58.752774][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   58.761381][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.763887][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.766308][ T5915] bridge_slave_0: entered allmulticast mode
[   58.769085][ T5915] bridge_slave_0: entered promiscuous mode
[   58.785586][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.788087][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.790472][ T5915] bridge_slave_1: entered allmulticast mode
[   58.793646][ T5915] bridge_slave_1: entered promiscuous mode
[   58.866465][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.874416][ T5920] chnl_net:caif_netlink_parms(): no params data found
[   58.879436][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.882001][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.884582][ T5918] bridge_slave_0: entered allmulticast mode
[   58.887683][ T5918] bridge_slave_0: entered promiscuous mode
[   58.896092][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.906743][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.909435][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.912737][ T5918] bridge_slave_1: entered allmulticast mode
[   58.915917][ T5918] bridge_slave_1: entered promiscuous mode
[   58.935014][ T5915] team0: Port device team_slave_0 added
[   58.957350][ T5915] team0: Port device team_slave_1 added
[   58.998739][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.006326][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.010060][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.012528][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.022586][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.046322][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.048681][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.057106][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.075945][ T5918] team0: Port device team_slave_0 added
[   59.092992][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.095381][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.097837][ T5920] bridge_slave_0: entered allmulticast mode
[   59.100501][ T5920] bridge_slave_0: entered promiscuous mode
[   59.105319][ T5918] team0: Port device team_slave_1 added
[   59.123531][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.125878][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.128232][ T5920] bridge_slave_1: entered allmulticast mode
[   59.132304][ T5920] bridge_slave_1: entered promiscuous mode
[   59.177505][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.180727][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.183231][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.191680][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.198610][ T5915] hsr_slave_0: entered promiscuous mode
[   59.200972][ T5915] hsr_slave_1: entered promiscuous mode
[   59.203952][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   59.205788][ T5915] Cannot create hsr debugfs directory
[   59.210317][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.215703][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.218547][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.229209][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.272910][ T5920] team0: Port device team_slave_0 added
[   59.302429][ T5920] team0: Port device team_slave_1 added
[   59.307666][ T5918] hsr_slave_0: entered promiscuous mode
[   59.310527][ T5918] hsr_slave_1: entered promiscuous mode
[   59.316532][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[   59.318867][ T5918] Cannot create hsr debugfs directory
[   59.354455][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.356640][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.364994][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.369958][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.372286][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.380188][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.477517][ T5920] hsr_slave_0: entered promiscuous mode
[   59.479847][ T5920] hsr_slave_1: entered promiscuous mode
[   59.482381][ T5920] debugfs: 'hsr0' already exists in 'hsr'
[   59.484242][ T5920] Cannot create hsr debugfs directory
[   59.594262][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.606996][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.613606][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.628919][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.686151][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.700794][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   59.708016][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.710540][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.720499][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.722916][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.824522][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.858589][ T5915] veth0_vlan: entered promiscuous mode
[   59.864770][ T5915] veth1_vlan: entered promiscuous mode
[   59.885411][ T5915] veth0_macvtap: entered promiscuous mode
[   59.889558][ T5915] veth1_macvtap: entered promiscuous mode
[   59.899023][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.906618][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.915338][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.920376][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.925202][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.933574][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.969226][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.976596][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.994819][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.997319][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.027280][ T5954] netlink: 'syz.1.25': attribute type 11 has an invalid length.
[   60.454974][ T5991] C: renamed from team_slave_0 (while UP)
[   60.458618][ T5991] netlink: 'syz.1.39': attribute type 2 has an invalid length.
[   60.461174][ T5991] netlink: 116 bytes leftover after parsing attributes in process `syz.1.39'.
[   60.464242][ T5991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   60.472319][   T54] Bluetooth: hci0: command tx timeout
[   60.551936][   T54] Bluetooth: hci2: command tx timeout
[   60.554557][   T54] Bluetooth: hci1: command tx timeout
[   61.443950][   T12] bridge_slave_1: left allmulticast mode
[   61.446560][   T12] bridge_slave_1: left promiscuous mode
[   61.449010][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.460019][   T12] bridge_slave_0: left allmulticast mode
[   61.463718][   T12] bridge_slave_0: left promiscuous mode
[   61.465861][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.493669][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'.
[   61.652014][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.656965][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.660604][   T12] bond0 (unregistering): Released all slaves
[   61.686622][ T6006] Zero length message leads to an empty skb
[   61.785619][   T12] hsr_slave_0: left promiscuous mode
[   61.787922][   T12] hsr_slave_1: left promiscuous mode
[   61.790642][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.796519][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.800295][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.803193][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.817715][   T12] veth1_macvtap: left promiscuous mode
[   61.819709][   T12] veth0_macvtap: left promiscuous mode
[   61.822077][   T12] veth1_vlan: left promiscuous mode
[   61.823985][   T12] veth0_vlan: left promiscuous mode
[   62.039839][   T12] team0 (unregistering): Port device team_slave_1 removed
[   62.058286][   T12] team0 (unregistering): Port device team_slave_0 removed
[   62.410242][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.447604][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.455913][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.460178][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.511833][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.548153][ T5920] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.551463][ T5916] Bluetooth: hci0: command tx timeout
[   62.554397][ T5920] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.572691][ T5920] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.577872][ T5920] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.632714][ T5916] Bluetooth: hci1: command tx timeout
[   62.634565][ T5916] Bluetooth: hci2: command tx timeout
[   62.684572][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.714468][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   62.747883][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.750652][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.767455][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.770214][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.819993][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.854145][ T5920] 8021q: adding VLAN 0 to HW filter on device team0
[   62.867234][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.869627][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.911291][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.914312][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.012212][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.050751][ T5918] veth0_vlan: entered promiscuous mode
[   63.064427][ T5918] veth1_vlan: entered promiscuous mode
[   63.090756][ T5918] veth0_macvtap: entered promiscuous mode
[   63.098689][ T5918] veth1_macvtap: entered promiscuous mode
[   63.109653][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.116749][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.132118][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.163221][ T5705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.167565][ T5705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.178091][ T5705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.188403][ T5705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.207003][ T5920] veth0_vlan: entered promiscuous mode
[   63.217499][ T5920] veth1_vlan: entered promiscuous mode
[   63.274069][ T5920] veth0_macvtap: entered promiscuous mode
[   63.278707][ T5920] veth1_macvtap: entered promiscuous mode
[   63.284586][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.288486][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.318690][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.322565][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.327232][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.343106][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.379288][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.389856][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.424080][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.436418][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.510404][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.516011][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.537620][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.540169][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.856146][ T6117] dummy0: entered promiscuous mode
[   63.858036][ T6117] vlan2: entered promiscuous mode
[   64.037676][ T6133] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET)
[   64.040211][ T6135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.84'.
[   64.129162][ T6141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'.
[   64.245444][ T6152] tipc: Started in network mode
[   64.250181][ T6152] tipc: Node identity d2bc637aa46f, cluster identity 4711
[   64.256449][ T6152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.262124][ T6152] syzkaller0: entered promiscuous mode
[   64.266467][ T6152] syzkaller0: entered allmulticast mode
[   64.296005][ T6152] tipc: Resetting bearer <eth:syzkaller0>
[   64.298841][ T6157] netlink: 'syz.1.94': attribute type 2 has an invalid length.
[   64.316418][ T6151] tipc: Resetting bearer <eth:syzkaller0>
[   64.337434][ T6151] tipc: Disabling bearer <eth:syzkaller0>
[   64.631667][   T54] Bluetooth: hci0: command tx timeout
[   64.711451][   T54] Bluetooth: hci2: command tx timeout
[   64.712593][ T5916] Bluetooth: hci1: command tx timeout
[   65.087721][ T6181] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[   65.149492][ T6187] netlink: 76 bytes leftover after parsing attributes in process `syz.1.108'.
[   65.334576][ T6055] IPVS: starting estimator thread 0...
[   65.453626][ T6205] IPVS: using max 78 ests per chain, 187200 per kthread
[   65.647794][ T6233] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   65.650436][ T6233] netlink: 184 bytes leftover after parsing attributes in process `syz.0.127'.
[   65.655218][ T6233] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   65.808911][ T6250] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   65.889033][ T6252] warning: `syz.1.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.973437][ T6257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.978141][ T6257] syzkaller0: entered promiscuous mode
[   65.983692][ T6257] syzkaller0: entered allmulticast mode
[   66.019867][ T6257] tipc: Resetting bearer <eth:syzkaller0>
[   66.026091][ T6255] tipc: Resetting bearer <eth:syzkaller0>
[   66.038818][ T6255] tipc: Disabling bearer <eth:syzkaller0>
[   66.058597][ T6265] netlink: 100 bytes leftover after parsing attributes in process `syz.1.140'.
[   66.062318][ T6265] netlink: 100 bytes leftover after parsing attributes in process `syz.1.140'.
[   66.125433][ T6274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.143'.
[   66.219996][ T6285] sock: sock_set_timeout: `syz.0.148' (pid 6285) tries to set negative timeout
[   66.367053][ T6301] netlink: 'syz.1.155': attribute type 11 has an invalid length.
[   66.369769][ T6301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.155'.
[   66.536897][ T6311] syzkaller0: entered promiscuous mode
[   66.538776][ T6311] syzkaller0: entered allmulticast mode
[   66.586921][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   66.711457][ T5916] Bluetooth: hci0: command tx timeout
[   66.791537][ T5916] Bluetooth: hci1: command tx timeout
[   66.793335][ T5916] Bluetooth: hci2: command tx timeout
[   66.819755][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'.
[   66.938433][ T6351] Illegal XDP return value 146109190 on prog  (id 28) dev syz_tun, expect packet loss!
[   66.994781][ T6355] tipc: Started in network mode
[   66.999921][ T6355] tipc: Node identity 7603ca044856, cluster identity 4711
[   67.005266][ T6355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.043350][ T6355] syzkaller0: entered promiscuous mode
[   67.046413][ T6355] syzkaller0: entered allmulticast mode
[   67.048862][ T6355] tipc: Resetting bearer <eth:syzkaller0>
[   67.052758][ T6354] tipc: Resetting bearer <eth:syzkaller0>
[   67.682476][ T6354] tipc: Disabling bearer <eth:syzkaller0>
[   67.688903][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   67.703393][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   68.300673][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   68.522886][ T6361] infiniband syz2: set active
[   68.524545][ T6361] infiniband syz2: added vxcan1
[   68.528255][   T60] vxcan1 speed is unknown, defaulting to 1000
[   68.534457][ T6361] syz2: rxe_create_cq: returned err = -12
[   68.536500][ T6361] infiniband syz2: Couldn't create ib_mad CQ
[   68.538538][ T6361] infiniband syz2: Couldn't open port 1
[   68.579883][ T6361] RDS/IB: syz2: added
[   68.585060][ T6361] smc: adding ib device syz2 with port count 1
[   68.592430][ T6361] smc:    ib device syz2 port 1 has pnetid 
[   68.595891][   T60] vxcan1 speed is unknown, defaulting to 1000
[   68.603512][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   68.738133][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   68.884977][ T6409] gretap1: entered promiscuous mode
[   68.887327][ T6409] gretap1: entered allmulticast mode
[   68.890737][ T6385] vxcan1 speed is unknown, defaulting to 1000
[   68.924413][ T6411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.203'.
[   69.018204][ T6361] vxcan1 speed is unknown, defaulting to 1000
[   69.228303][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   69.232337][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'.
[   69.235453][ T6428] tipc: Invalid UDP bearer configuration
[   69.235484][ T6428] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.327372][ T6436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.332065][ T6436] syzkaller0: MTU too low for tipc bearer
[   69.334086][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   69.455688][ T6442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.522644][ T6448] bond0: option ad_select: unable to set because the bond device is up
[   69.594748][ T6457] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[   69.601062][ T6457] NCSI netlink: No device for ifindex 0
[   69.619704][ T6454] vxcan1 speed is unknown, defaulting to 1000
[   70.014288][ T6484] netlink: 'syz.1.235': attribute type 10 has an invalid length.
[   70.055434][ T6484] team0: Port device dummy0 added
[   70.069557][ T6484] netlink: 'syz.1.235': attribute type 10 has an invalid length.
[   70.097937][ T6484] team0: Port device dummy0 removed
[   70.125282][ T6484] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.207439][ T6496] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.454275][ T6520] netlink: 'syz.0.250': attribute type 6 has an invalid length.
[   70.555374][ T6528] ip6erspan0: entered promiscuous mode
[   71.204312][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.206774][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.384803][ T6569] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   71.424730][ T6569] bond1: entered promiscuous mode
[   71.427974][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.457069][ T6571] bond1: (slave bridge1): making interface the new active one
[   71.459678][ T6571] bridge1: entered promiscuous mode
[   71.463624][ T6571] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   71.552977][ T6576] __nla_validate_parse: 6 callbacks suppressed
[   71.552993][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'.
[   71.802262][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.959021][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'.
[   72.218452][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'.
[   72.222023][ T6612] block nbd0: not configured, cannot reconfigure
[   72.243522][ T6614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.246335][ T6614] syzkaller0: entered promiscuous mode
[   72.248169][ T6614] syzkaller0: entered allmulticast mode
[   72.265739][ T6614] tipc: Resetting bearer <eth:syzkaller0>
[   72.269739][ T6613] tipc: Resetting bearer <eth:syzkaller0>
[   72.283160][ T6613] tipc: Disabling bearer <eth:syzkaller0>
[   72.375325][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   72.625492][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.700427][ T6658] pim6reg1: entered promiscuous mode
[   72.702712][ T6658] pim6reg1: entered allmulticast mode
[   72.789938][ T6662] gtp0: entered promiscuous mode
[   72.806183][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   73.558616][ T6679] syzkaller1: entered promiscuous mode
[   73.560517][ T6679] syzkaller1: entered allmulticast mode
[   73.845540][ T6693] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.857639][ T6693] bond_slave_0: entered promiscuous mode
[   73.859749][ T6693] bond_slave_1: entered promiscuous mode
[   73.863452][ T6693] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   73.868187][ T6693] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   74.797208][ T6776] tipc: Started in network mode
[   74.798998][ T6776] tipc: Node identity 160ddfd31cfc, cluster identity 4711
[   74.802865][ T6776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.805829][ T6776] syzkaller0: entered promiscuous mode
[   74.807671][ T6776] syzkaller0: entered allmulticast mode
[   74.818216][ T6776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   74.829703][ T6776] tipc: Resetting bearer <eth:syzkaller0>
[   74.836509][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[   74.845988][ T6775] tipc: Disabling bearer <eth:syzkaller0>
[   75.085987][ T6809] Bluetooth: MGMT ver 1.23
[   75.100183][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.307758][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   75.310826][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   75.315188][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
client_loop: send disconnect: Broken pipe
[   81.460598][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
16:33:28  Registers:
info registers vcpu 0

CPU#0
RAX=80c3a2defea55f00 RBX=ffffffff81968308 RCX=80c3a2defea55f00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e40bd90380 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0808800308800406 800306800407a003
XMM02=0303e01000069003 030012000000f00e XMM03=100007d003001000 07c00302100007b0
XMM04=0000000806060168 da00080007e00300 XMM05=0100100007800401 0000000806060168
XMM06=da00080007e00300 100007d003001000 XMM07=07c00302100007b0 0303e01000069003
XMM08=030012000000f00e 0808800308800406 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a027b79f0e4c0800 RBX=ffffffff81968308 RCX=a027b79f0e4c0800 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e40bd78b18 CR3=0000000029eea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0808800308800406 800306800407a003
XMM02=0303e01000069003 030012000000f00e XMM03=100007d003001000 07c00302100007b0
XMM04=0000000806060168 da00080007e00300 XMM05=0100100007800401 0000000806060168
XMM06=da00080007e00300 100007d003001000 XMM07=07c00302100007b0 0303e01000069003
XMM08=030012000000f00e 0808800308800406 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
