last executing test programs:

15.761989185s ago: executing program 0 (id=288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

15.662568596s ago: executing program 0 (id=289):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'tunl0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000100)={0x18, 0x4000000, {0x4, @empty, 'pimreg1\x00'}})
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="80fd0600f240", 0x6}, {&(0x7f00000001c0)="93225b4eaaa4c8baa6b9da844b61aec05e5cb91e582f92839c0deba02f995369b5f7fdccf350f6e12439bfd0aebef211eb036e5cccab2804651c460f12bd28c42ce1a6678b9aeec439d408d3accbdfb060a48340780733cfc33244a30f80f73c190254f865a92fd1dbd8a0faa862f0a5c78f557e190f4d3a3e9f50dde942e190af378b750eb66ec5f6e047445545ce806ab7498ca673aeffa02dbf2ef3d72f81a5a7d22f8bb4f08ac94263601cee0e142839b486359b719ff6fa080512544efd063fc017b4e23ef7120ef54963cf78be6976c0f328629dda5349369e97606898af6a", 0xe2}, {&(0x7f00000002c0)="c27ea8bceb3e617e1370e45d3768db6303f83e1d71979c5be0cfa1c4abf0520e65098067bb45366d7bfb8ddcef1440c72428bdcf63f55280b6e1c44fd2b9d6644d1857819b65dca2e0d41f5d1c1c6e7961e609a40fde2e9cf5b91589b8cf68abd9f1da065c12c63a735081b3319c78aa572cc8a7d435282a2ed3f9c6d0d7e8eee00ecb764d2f8e851881c5f787d8717e4b4d22256016f91d4bbbbddcf4e008bc251c9fd38ad1dced30e5f93d168a63f815c98e35ef581c1a2b981e4d061c4006347a23358d4b79cdf618db46ef5539b8b361c0a023509ab3e596761a54575a42537e1d67edc794b525590eb3aadc", 0xee}], 0x3, 0x0, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x50)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=<r5=>0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000005c0)=r5)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0xfffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107e7db0ad0099287c6efe5d1ed00bf1f1710000000004"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7b}, 0x94)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x8, 0xfff, 0xffffffff, 0x81, 0x300}, &(0x7f0000000100)=0x98)

15.660588007s ago: executing program 0 (id=291):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x41)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0e800000ffffffffffffaaaaaaaa0000000004907800000000000000000000000076001490786f841fcaf955070000007a519d15cf08626641def5c468f097754b81899ee22f4c4241c64f044372f54d6855a9d97342ab1e15f1434c9fc91a3d54250e06a851ee6175332cbb82db769f56d716869a96b45a35b00dc1bcd486814d92d63a0a24406ebdfc274748"], 0x3a)

14.682761822s ago: executing program 0 (id=302):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', <r1=>0x0, 0x8, 0x700, 0x2, 0x2, {{0x8, 0x4, 0x2, 0x2c, 0x20, 0x64, 0x5e, 0x4, 0x0, 0x0, @multicast1, @multicast1, {[@generic={0x83, 0xc, "a9a79d72ee353b7ff884"}]}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0xff07, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xac78715d546b4c5d, 0x1b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x33, &(0x7f0000000200)=""/51, 0x41100, 0x4, '\x00', r1, @fallback=0x18, r3, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x3, 0xc}, 0x10, 0x0, r0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0x0, 0x2}, {0x5, 0x1, 0x4, 0x1}], 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)

13.821130638s ago: executing program 0 (id=311):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000003, @remote, 0xfffffffe}, 0x1c) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x8002, @remote, 0x7}, 0x1c) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860001009500000000000000ed71f0dac30ea270e783e1c47c3df879861b7ff286c7ae38c3fb7f9a70751e76b3cd662e580f2b88c82f64c719fc441a4d2873c0e0ed95dd2eb3096775cd8235fcc8b242b5fe8cc9748c6d5bb0050e5f6dfb120fd9bd674b1df875f0cc850674d21639cb7ae78c8cb5efe13d31c6c8a2638e19bde544af4607dfcae97bfcd866138ba0ed64e709b1b4d5ea0f1b0d1234c1ac19c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "6d26732ed2d9c4e0", "8d06d1bbecdecc37e403294fdb8382d0", "e5c5ee43", "10c30e35a6d5dd9a"}, 0x28) (async, rerun: 32)
close(r2)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x1, 0x4000000, 0x3, 0x80000}, 0x14) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x880) (async)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b18e00212ba0d8105040a601100fe0f040b067c73a1bc0009001e000500000000000400150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x9e68, 0x6, 0x5}, 0x28) (async, rerun: 32)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

13.751892448s ago: executing program 0 (id=314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48)
r1 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'})
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async)
socket$inet(0x2, 0x3, 0x6) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$inet(0x2, 0x3, 0x6) (async)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) (async)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

1.060832934s ago: executing program 1 (id=496):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1.05721368s ago: executing program 1 (id=499):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

951.437057ms ago: executing program 1 (id=500):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80002, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
read$alg(r0, &(0x7f00000003c0)=""/55, 0x37)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1c, "79d595fa773e78e7df8bfb38b5f646cc3a957d04227fa96a0080b2a2"}, &(0x7f00000004c0)=0xfc99)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0)
ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)=0x3)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000800)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43)
bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000305001000000000020800000000", @ANYRES32=0x0, @ANYBLOB="95830400000200001c0012800b0001006d616373656300000c0002800500090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x802, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x458, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x42c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x2fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfa, 0x1, "3247266d7d5498ab8c71146507b4bff954e083faa8e9a7dee5bd1b31e485c4df97682a3a88741aa811d634d784a5fb259eac7dd811d18276c26d61d5339905663c29a02007311a59a836766fa110896d1672dcc0d1de15302ab2b39eec8c92e740e964a4693ea5725c73f92cec3b52cdf37d846fff2dc7c76195b7325bd9d041c8b48e2ed46296a9ea7325de960b6cf8e07969e9648336936f8fdadb7cf1016cfddb3cc0ec7ce4ac76710ae8e859748d1fd90c74310c7dd3c9eca784cce50f579505b735e2b0840960db6119205378b26489c0daa2692fa15105e9dfd2e7fa6551ed1ae7fe1450b7592978d73a4dbc37294688921d0e"}, @NFTA_DATA_VALUE={0xba, 0x1, "7a0ed11347a2396d9bd39fb1e96bbc4b5137406912e6bc3bc3e3a51d83b8450e59f15c4e8d0da12fccd381639152b16470efd52fa483defd0833d7ac4760c7c164e32de6fbadf925beeaec0ec8d6d07de417c5900fb26a223da1f70022d335a1471608b7eb4538b5bd6c940af7ab1281260921346938091c191343f8c1c29030e4ac4e3110feffcc762a0f5802a8da82c906790b72b9ed097099c311f1b5d2a422d649bf62927c2459339523210dd502a2a12b39a0d9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "493db68e7ba0c1a925a6340089a320b2fa5e88a5feb47c1e3a0b0ef8d7351fe776d54d847237393c5606105d986f3fe09e654a79c812ddf607eae9b99d9373929033bb54cef69914d6e0d1ecde8dd7119ef9a0d1c6647d0e1ccf6cb63413d9f43b8af36c47682573b4ab4360313f524e036f63c0d6d5acc28e34896b23057d3e7a6ff7b253486fed22746bc54505ffb5b474e9134bb0ea297578a0f6a10f3d4dd3ecfb3512f43f836f6987277293ecbc598e4c61c95bba03fe7fcd4839"}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "fa10c625ffb70f256dd0eb4a1f00ee913cd4f6b85dc7d9ca01cf22fe481c7b45926f03a5052de8914acf68c335c2aa577081c979b98e9833891cf0922d9a5b12d04ac9f1ccbd5862e4ef573cb7f6b97ca3c310bc85990f7210ba00ce567a7420de9370e2cb1bf2d03db846922db2559d6a399e0cb41fc9dbcc79774ee6dc1a8d3c7c917bc568e003b495b7fdf804c6cd99d8b395fb8a0868a897e16225e15f7b689f351696338b153f7c"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x508}}, 0x20008844)

951.002811ms ago: executing program 2 (id=501):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000008, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100000077e6b13a52cdd184e6951295725fa119909ca16bbb05f7a8a4463a787d24d2017cb3d33daf21c7d31d4f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES64=r2, @ANYRESOCT=r7, @ANYBLOB="38a79311701742c1f78a40b6210268b07520f6ba1aef"], 0x128}, 0x20000010)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x7f, <r12=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r12, 0xd8b8, 0x8}, 0xc)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg(r13, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x40002100)

692.735236ms ago: executing program 1 (id=502):
r0 = socket(0xa, 0x3, 0x3a) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf253800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x221}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2400000}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xdc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0x2)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

622.762614ms ago: executing program 1 (id=503):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

565.66966ms ago: executing program 1 (id=504):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r2=>0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(r3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r5, 0x100}, &(0x7f00000000c0)=0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r8, &(0x7f0000000a40)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000090"], 0x0, 0x26}, 0x20)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$sock_int(r10, 0x1, 0x22, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)

82.313987ms ago: executing program 2 (id=505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18dfff0000002577c6002000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a00"], 0x18}}, 0x20004000)
r2 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000001056b542eb3c20e2ace482091fe8fbc545cd93649e7c4d4de82898510ed96650f443d68f7924335a613f8e666a77a6f4c01b957e12deba69181a08e767980f37e3cb1b85c94ed6bfad6e97598d3b0c57faa494a628b9f2"]}, 0x15f)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x1, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x5, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x68a0, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0xb, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x2, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0x10000, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)

81.944887ms ago: executing program 2 (id=506):
unshare(0x8040480)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x891a, 0x0)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x2)

2.750458ms ago: executing program 2 (id=507):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e)
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

2.077598ms ago: executing program 2 (id=508):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))

0s ago: executing program 2 (id=509):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/110, 0x6e}, {&(0x7f0000003900)=""/217, 0xd9}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000003600)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/87, 0x57}, 0x7}], 0x5, 0x40002000, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60016' (ED25519) to the list of known hosts.
syzkaller login: [   48.421954][ T5781] cgroup: Unknown subsys name 'net'
[   48.531981][ T5781] cgroup: Unknown subsys name 'cpuset'
[   48.537318][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.052150][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.787197][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.791577][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.794694][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.798569][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.802176][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.805538][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.809400][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.820325][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.823307][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.827549][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.828028][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.833117][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.837132][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.857470][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.863910][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.078550][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   54.213827][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   54.266820][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.270351][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.274042][ T5807] bridge_slave_0: entered allmulticast mode
[   54.278341][ T5807] bridge_slave_0: entered promiscuous mode
[   54.301191][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   54.315172][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.319301][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.322358][ T5807] bridge_slave_1: entered allmulticast mode
[   54.326161][ T5807] bridge_slave_1: entered promiscuous mode
[   54.419151][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.445490][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.449959][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.453022][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.456242][ T5812] bridge_slave_0: entered allmulticast mode
[   54.460946][ T5812] bridge_slave_0: entered promiscuous mode
[   54.491014][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.494039][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.497735][ T5812] bridge_slave_1: entered allmulticast mode
[   54.501537][ T5812] bridge_slave_1: entered promiscuous mode
[   54.555803][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.560100][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.563095][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.565821][ T5811] bridge_slave_0: entered allmulticast mode
[   54.569378][ T5811] bridge_slave_0: entered promiscuous mode
[   54.574981][ T5807] team0: Port device team_slave_0 added
[   54.581854][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.585978][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.588937][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.591477][ T5811] bridge_slave_1: entered allmulticast mode
[   54.594648][ T5811] bridge_slave_1: entered promiscuous mode
[   54.600385][ T5807] team0: Port device team_slave_1 added
[   54.647586][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.660828][ T5812] team0: Port device team_slave_0 added
[   54.664432][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.675110][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.677795][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.687041][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.700072][ T5812] team0: Port device team_slave_1 added
[   54.702583][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.705101][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.714588][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.721143][ T5811] team0: Port device team_slave_0 added
[   54.747413][ T5811] team0: Port device team_slave_1 added
[   54.777892][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.780868][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.792036][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.813014][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.815440][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.825525][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.830002][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.832171][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.843454][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.851529][ T5807] hsr_slave_0: entered promiscuous mode
[   54.854078][ T5807] hsr_slave_1: entered promiscuous mode
[   54.865670][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.868483][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.878702][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.938218][ T5811] hsr_slave_0: entered promiscuous mode
[   54.940619][ T5811] hsr_slave_1: entered promiscuous mode
[   54.942742][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.945403][ T5811] Cannot create hsr debugfs directory
[   54.977187][ T5812] hsr_slave_0: entered promiscuous mode
[   54.980261][ T5812] hsr_slave_1: entered promiscuous mode
[   54.983157][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.986208][ T5812] Cannot create hsr debugfs directory
[   55.185573][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.198940][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.230022][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.243694][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.272091][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.279141][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.298161][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.310024][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.358375][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.365453][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.375825][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.391709][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.464235][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.491441][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   55.505015][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.508271][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.526082][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.528536][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.554548][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.586205][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   55.596186][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.612067][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.614734][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.630896][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.634025][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.672649][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   55.713838][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.717044][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.738357][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.740753][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.775302][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.779455][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.826124][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.909675][ T5816] Bluetooth: hci1: command tx timeout
[   55.910959][ T5810] Bluetooth: hci2: command tx timeout
[   55.914448][ T5819] Bluetooth: hci0: command tx timeout
[   55.928616][ T5807] veth0_vlan: entered promiscuous mode
[   55.944589][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.965011][ T5807] veth1_vlan: entered promiscuous mode
[   55.984397][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.015880][ T5807] veth0_macvtap: entered promiscuous mode
[   56.029374][ T5812] veth0_vlan: entered promiscuous mode
[   56.033095][ T5807] veth1_macvtap: entered promiscuous mode
[   56.051606][ T5812] veth1_vlan: entered promiscuous mode
[   56.064270][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.071816][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.082835][ T5811] veth0_vlan: entered promiscuous mode
[   56.087126][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.090524][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.094234][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.100878][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.112806][ T5811] veth1_vlan: entered promiscuous mode
[   56.180707][ T5812] veth0_macvtap: entered promiscuous mode
[   56.204079][ T5812] veth1_macvtap: entered promiscuous mode
[   56.211119][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.215749][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.232132][ T5811] veth0_macvtap: entered promiscuous mode
[   56.247792][ T5811] veth1_macvtap: entered promiscuous mode
[   56.260891][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.263965][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.267753][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.277573][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.283346][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.299432][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.302420][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.305310][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.310132][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.318098][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.334270][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.345948][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.351063][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.354541][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.359120][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.424878][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.427983][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.466304][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.469528][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.514181][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.517698][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.560835][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.563471][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.568920][ T5881] Zero length message leads to an empty skb
[   56.578241][ T5884] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   56.653422][ T5886] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   56.689129][ T5886] veth0_vlan: left promiscuous mode
[   56.698009][ T5886] veth0_vlan: entered promiscuous mode
[   56.701854][ T5886] team0: Device veth0_vlan failed to register rx_handler
[   56.742162][ T5886] syz.2.3 (5886) used greatest stack depth: 20376 bytes left
[   56.908260][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   56.911753][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.000201][ T5916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.011132][ T5918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.014158][ T5916] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16'.
[   57.421333][ T5941] netlink: 'syz.2.23': attribute type 10 has an invalid length.
[   57.462815][ T5943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.518974][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.522576][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.943952][ T5969] Bluetooth: MGMT ver 1.23
[   57.987141][ T5819] Bluetooth: hci0: command tx timeout
[   57.989706][ T5810] Bluetooth: hci1: command tx timeout
[   57.989842][ T5816] Bluetooth: hci2: command tx timeout
[   58.014715][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.36'.
[   58.028017][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.36'.
[   58.035180][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   58.126681][ T5984] xfrm1: entered promiscuous mode
[   58.131406][ T5984] xfrm1: entered allmulticast mode
[   58.371169][ T6006] netlink: 'syz.2.43': attribute type 1 has an invalid length.
[   58.379845][ T6007] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   58.404566][ T6009] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   58.423457][ T6011] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[   58.755122][ T6035] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.759633][ T6035] x_tables: duplicate underflow at hook 3
[   58.947587][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.055515][ T6050] netlink: 'syz.0.56': attribute type 15 has an invalid length.
[   59.236977][ T6062] syz.0.58 uses obsolete (PF_INET,SOCK_PACKET)
[   59.265594][ T6062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.316827][ T6062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.365228][ T6062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.410562][ T6062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.505475][ T6062] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.525283][ T6062] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.535519][ T6062] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.544823][ T6062] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.809711][ T6076] syzkaller1: entered promiscuous mode
[   59.811809][ T6076] syzkaller1: entered allmulticast mode
[   59.821090][ T6076] bridge_slave_0: left allmulticast mode
[   59.823040][ T6076] bridge_slave_0: left promiscuous mode
[   59.825553][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.836193][ T6076] bridge_slave_1: left allmulticast mode
[   59.838923][ T6076] bridge_slave_1: left promiscuous mode
[   59.841056][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.851574][ T6076] bond0: (slave bond_slave_0): Releasing backup interface
[   59.860044][ T6076] bond0: (slave bond_slave_1): Releasing backup interface
[   59.874864][ T6076] team0: Port device team_slave_0 removed
[   59.883679][ T6076] team0: Port device team_slave_1 removed
[   59.887482][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.890154][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.893821][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.897756][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.067732][   T54] Bluetooth: hci1: command tx timeout
[   60.070252][ T5810] Bluetooth: hci0: command tx timeout
[   60.072595][ T5819] Bluetooth: hci2: command tx timeout
[   60.251733][ T6088] netlink: 'syz.1.70': attribute type 3 has an invalid length.
[   60.787721][ T5816] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   61.424879][ T6111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.475339][ T6111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.534848][ T6111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.593514][ T6111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.672734][ T6111] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.684434][ T6111] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.695434][ T6111] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.708894][ T6111] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.959897][ T6114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   62.146653][ T5816] Bluetooth: hci2: command tx timeout
[   62.146995][ T5819] Bluetooth: hci0: command 0x0419 tx timeout
[   62.148691][ T5816] Bluetooth: hci1: command tx timeout
[   62.496871][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.500099][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.574481][ T6128] __nla_validate_parse: 6 callbacks suppressed
[   62.574497][ T6128] netlink: 248 bytes leftover after parsing attributes in process `syz.1.81'.
[   62.609965][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.623090][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.670227][ T6117] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.673253][ T6117] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.676276][ T6117] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.681468][ T6117] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.010821][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'.
[   63.014321][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.85'.
[   63.037108][ T6142] syzkaller0: entered promiscuous mode
[   63.039099][ T6142] syzkaller0: entered allmulticast mode
[   64.120644][ T5877] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   64.162656][ T6169] netlink: 592 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.226741][ T5816] Bluetooth: hci0: command 0x0419 tx timeout
[   64.286642][ T6179] Illegal XDP return value 4294967262 on prog  (id 93) dev N/A, expect packet loss!
[   64.301335][ T6179] openvswitch: netlink: Actions may not be safe on all matching packets
[   64.821021][ T6211] xt_limit: Overflow, try lower: 0/0
[   64.884218][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.889571][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.894927][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.898414][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.902609][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.905955][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.910230][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.913854][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.918141][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.921307][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.925465][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.929150][ T6213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.932943][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   64.936613][ T6213] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   65.117691][ T6225] netlink: 'syz.0.106': attribute type 5 has an invalid length.
[   65.272624][ T6240] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   65.310052][ T6244] gretap1: entered promiscuous mode
[   65.568786][ T6264] tipc: Enabling <ib:lo> not permitted
[   65.571523][ T6264] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   65.624095][ T6267] tls_set_device_offload_rx: netdev not found
[   65.633877][ T6269] bridge_slave_0: left allmulticast mode
[   65.636421][ T6269] bridge_slave_0: left promiscuous mode
[   65.639815][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.645406][ T6269] bridge_slave_1: left allmulticast mode
[   65.649674][ T6269] bridge_slave_1: left promiscuous mode
[   65.652195][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.660863][ T6269] bond0: (slave bond_slave_0): Releasing backup interface
[   65.667241][ T6269] bond0: (slave bond_slave_1): Releasing backup interface
[   65.674600][ T6269] team0: Port device team_slave_0 removed
[   65.682485][ T6269] team0: Port device team_slave_1 removed
[   65.687296][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.692008][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.216319][ T6313] syz.2.133 (6313) used greatest stack depth: 19736 bytes left
[   66.292555][ T6321] netlink: 'syz.1.137': attribute type 5 has an invalid length.
[   66.314674][ T6318] batman_adv: batadv0: Adding interface: virt_wifi0
[   66.324518][ T6318] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   66.343167][ T6318] batman_adv: batadv0: Interface activated: virt_wifi0
[   66.632087][ T6326] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.862190][ T6361] vlan2: entered allmulticast mode
[   66.866688][ T6361] bridge_slave_0: entered allmulticast mode
[   67.672040][ T6392] __nla_validate_parse: 11 callbacks suppressed
[   67.672064][ T6392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.159'.
[   67.680281][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   67.862577][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.865803][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.870096][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.874320][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.877848][ T6399] netlink: 21 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.962524][ T6410] netlink: 248 bytes leftover after parsing attributes in process `syz.1.165'.
[   68.110957][ T6419] 8021q: adding VLAN 0 to HW filter on device team0
[   68.122895][ T6419] bond0: (slave team0): Enslaving as an active interface with an up link
[   68.723001][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[   68.752121][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   68.850271][ T6479] ieee802154 phy0 wpan0: encryption failed: -22
[   68.857326][ T6479] lo speed is unknown, defaulting to 1000
[   68.861119][ T6479] lo speed is unknown, defaulting to 1000
[   68.863910][ T6479] lo speed is unknown, defaulting to 1000
[   68.934710][ T3127] IPVS: starting estimator thread 0...
[   69.034474][ T6484] IPVS: using max 79 ests per chain, 189600 per kthread
[   69.113202][ T6479] infiniband syz0: set active
[   69.115315][ T6479] infiniband syz0: added lo
[   69.123456][   T24] lo speed is unknown, defaulting to 1000
[   69.141550][ T6479] RDS/IB: syz0: added
[   69.143332][ T6479] smc: adding ib device syz0 with port count 1
[   69.145804][ T6479] smc:    ib device syz0 port 1 has pnetid 
[   69.156666][ T6479] lo speed is unknown, defaulting to 1000
[   69.224203][ T2220] lo speed is unknown, defaulting to 1000
[   69.291073][ T6479] lo speed is unknown, defaulting to 1000
[   69.297939][ T6511] syzkaller1: entered promiscuous mode
[   69.303268][ T6511] syzkaller1: entered allmulticast mode
[   69.426263][ T6479] lo speed is unknown, defaulting to 1000
[   70.024833][ T6562] validate_nla: 5 callbacks suppressed
[   70.024850][ T6562] netlink: 'syz.1.204': attribute type 5 has an invalid length.
[   70.182334][ T6566] syz.1.206: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   70.196664][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.1.206 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   70.196679][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.196685][ T6566] Call Trace:
[   70.196690][ T6566]  <TASK>
[   70.196693][ T6566]  dump_stack_lvl+0x189/0x250
[   70.196714][ T6566]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.196732][ T6566]  ? __pfx__printk+0x10/0x10
[   70.196741][ T6566]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.196751][ T6566]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.196781][ T6566]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   70.196792][ T6566]  warn_alloc+0x214/0x310
[   70.196803][ T6566]  ? stack_depot_save_flags+0x429/0x900
[   70.196833][ T6566]  ? __pfx_warn_alloc+0x10/0x10
[   70.196843][ T6566]  ? kasan_save_track+0x4f/0x80
[   70.196856][ T6566]  ? xskq_create+0x56/0x170
[   70.196868][ T6566]  ? xsk_init_queue+0xb0/0x110
[   70.196878][ T6566]  ? xsk_setsockopt+0x43f/0x710
[   70.196886][ T6566]  ? do_sock_setsockopt+0x25a/0x3e0
[   70.196895][ T6566]  ? __x64_sys_setsockopt+0x18b/0x220
[   70.196902][ T6566]  ? do_syscall_64+0xfa/0x3b0
[   70.196910][ T6566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.196923][ T6566]  __vmalloc_node_range_noprof+0x125/0x12f0
[   70.196943][ T6566]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   70.196954][ T6566]  ? __kasan_kmalloc+0x93/0xb0
[   70.196962][ T6566]  vmalloc_user_noprof+0xad/0xf0
[   70.196972][ T6566]  ? xskq_create+0xbf/0x170
[   70.196984][ T6566]  xskq_create+0xbf/0x170
[   70.196995][ T6566]  xsk_init_queue+0xb0/0x110
[   70.197006][ T6566]  xsk_setsockopt+0x43f/0x710
[   70.197017][ T6566]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.197025][ T6566]  ? __lock_acquire+0xab9/0xd20
[   70.197045][ T6566]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   70.197058][ T6566]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.197068][ T6566]  do_sock_setsockopt+0x25a/0x3e0
[   70.197078][ T6566]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   70.197090][ T6566]  ? __fget_files+0x2a/0x420
[   70.197105][ T6566]  __x64_sys_setsockopt+0x18b/0x220
[   70.197118][ T6566]  do_syscall_64+0xfa/0x3b0
[   70.197124][ T6566]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.197137][ T6566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.197145][ T6566]  ? exc_page_fault+0x9f/0xf0
[   70.197156][ T6566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.197165][ T6566] RIP: 0033:0x7ff34298e929
[   70.197174][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.197180][ T6566] RSP: 002b:00007ff343755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.197189][ T6566] RAX: ffffffffffffffda RBX: 00007ff342bb5fa0 RCX: 00007ff34298e929
[   70.197194][ T6566] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   70.197198][ T6566] RBP: 00007ff342a10b39 R08: 0000000000000004 R09: 0000000000000000
[   70.197203][ T6566] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.197207][ T6566] R13: 0000000000000000 R14: 00007ff342bb5fa0 R15: 00007ffeab3f5558
[   70.197219][ T6566]  </TASK>
[   70.197238][ T6566] Mem-Info:
[   70.308714][ T6566] active_anon:5111 inactive_anon:0 isolated_anon:0
[   70.308714][ T6566]  active_file:869 inactive_file:38206 isolated_file:0
[   70.308714][ T6566]  unevictable:1768 dirty:1420 writeback:0
[   70.308714][ T6566]  slab_reclaimable:9194 slab_unreclaimable:54639
[   70.308714][ T6566]  mapped:18253 shmem:2445 pagetables:1013
[   70.308714][ T6566]  sec_pagetables:0 bounce:0
[   70.308714][ T6566]  kernel_misc_reclaimable:0
[   70.308714][ T6566]  free:300514 free_pcp:16551 free_cma:0
[   70.324882][ T6566] Node 0 active_anon:12152kB inactive_anon:0kB active_file:2384kB inactive_file:9560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47044kB dirty:5532kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7500kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.351542][ T6566] Node 1 active_anon:8140kB inactive_anon:0kB active_file:1092kB inactive_file:143264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25968kB dirty:148kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4028kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.363238][ T6566] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.373194][ T6566] lowmem_reserve[]: 0 815 815 815 815
[   70.380076][ T6566] Node 0 DMA32 free:404880kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12128kB inactive_anon:0kB active_file:2384kB inactive_file:9560kB unevictable:3536kB writepending:5532kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:27632kB local_pcp:10012kB free_cma:0kB
[   70.392171][ T6566] lowmem_reserve[]: 0 0 0 0 0
[   70.393755][ T6566] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.404390][ T6566] lowmem_reserve[]: 0 0 854 854 854
[   70.407533][ T6566] Node 1 Normal free:322816kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8076kB inactive_anon:0kB active_file:1092kB inactive_file:143264kB unevictable:3536kB writepending:148kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40008kB local_pcp:21068kB free_cma:0kB
[   70.421859][ T6566] lowmem_reserve[]: 0 0 0 0 0
[   70.426426][ T6566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.431690][ T6566] Node 0 DMA32: 166*4kB (M) 445*8kB (UME) 111*16kB (UME) 403*32kB (UME) 198*64kB (UME) 68*128kB (UME) 26*256kB (UM) 17*512kB (UME) 7*1024kB (UME) 3*2048kB (UM) 82*4096kB (M) = 404816kB
[   70.443657][ T6566] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   70.451089][ T6566] Node 1 Normal: 234*4kB (UME) 47*8kB (ME) 94*16kB (UME) 96*32kB (UME) 62*64kB (UM) 35*128kB (UM) 15*256kB (UME) 9*512kB (UME) 5*1024kB (M) 4*2048kB (UM) 70*4096kB (M) = 322816kB
[   70.459246][ T6566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.462343][ T6566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.465354][ T6566] 41522 total pagecache pages
[   70.467562][ T6566] 0 pages in swap cache
[   70.469256][ T6566] Free swap  = 124996kB
[   70.470890][ T6566] Total swap = 124996kB
[   70.472293][ T6566] 786301 pages RAM
[   70.473529][ T6566] 0 pages HighMem/MovableOnly
[   70.475054][ T6566] 240368 pages reserved
[   70.476380][ T6566] 0 pages cma reserved
[   70.590493][ T6591] netlink: 'syz.0.212': attribute type 2 has an invalid length.
[   70.742651][ T6596] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received
[   70.779338][ T6600] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   70.872382][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.874596][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.980667][ T6575] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   71.392698][ T6628] lo speed is unknown, defaulting to 1000
[   72.303532][ T6663] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.307239][ T6663] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.311384][ T6663] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.314857][ T6663] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.355069][   T10] lo speed is unknown, defaulting to 1000
[   72.358993][   T10] syz0: Port: 1 Link DOWN
[   72.452643][ T6681] bond0: (slave team0): Releasing backup interface
[   72.472265][ T6681] team0 (unregistering): Port device team_slave_0 removed
[   72.482464][ T6681] team0 (unregistering): Port device team_slave_1 removed
[   72.508937][   T10] lo speed is unknown, defaulting to 1000
[   72.617225][ T6689] lo speed is unknown, defaulting to 1000
[   72.754736][ T6696] vti0: entered promiscuous mode
[   73.091324][ T6708] __nla_validate_parse: 24 callbacks suppressed
[   73.091336][ T6708] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.246'.
[   73.337461][ T6716] x_tables: duplicate underflow at hook 2
[   73.352405][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   73.477633][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'.
[   73.581434][ T6747] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[   73.664653][ T6749] netlink: 'syz.1.259': attribute type 39 has an invalid length.
[   73.734747][ T6759] Cannot find del_set index 286 as target
[   73.822418][ T6769] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.264'.
[   73.829124][ T6770] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.264'.
[   73.835675][ T6769] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   73.841073][ T6770] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   73.844923][ T6769] openvswitch: netlink: Duplicate key (type 0).
[   73.848408][ T6770] openvswitch: netlink: Duplicate key (type 0).
[   73.943245][ T6775] lo speed is unknown, defaulting to 1000
[   74.211192][ T6797] netlink: 'syz.0.270': attribute type 4 has an invalid length.
[   74.289198][ T6803] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   74.292120][ T6804] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   74.311653][ T6803] netlink: 'syz.0.272': attribute type 30 has an invalid length.
[   74.397959][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'.
[   74.444132][ T6816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.479352][ T6818] netlink: 304 bytes leftover after parsing attributes in process `syz.2.276'.
[   74.564090][ T6826] netlink: 'syz.1.280': attribute type 28 has an invalid length.
[   74.610155][ T6831] dummy0: mtu less than device minimum
[   74.811698][ T6844] openvswitch: netlink: Message has 4 unknown bytes.
[   74.887943][ T6852] ksmbd: Unknown IPC event: 3, ignore.
[   75.174338][ T6873] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   75.195718][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.218625][ T6873] bond2: (slave veth3): Enslaving as an active interface with a down link
[   75.230811][ T6873] vlan2: entered allmulticast mode
[   75.233153][ T6873] bond2: entered allmulticast mode
[   75.236668][ T6873] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   75.445274][ T6884] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   76.504992][ T6912] netlink: 'syz.2.306': attribute type 2 has an invalid length.
[   76.521200][ T6912] : entered promiscuous mode
[   76.560356][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[   76.710833][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'.
[   76.714309][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'.
[   77.248607][ T6963] gretap0: entered promiscuous mode
[   77.251374][ T6963] gretap0: left promiscuous mode
[   77.290265][ T6965] netlink: 'syz.2.323': attribute type 10 has an invalid length.
[   77.341107][ T6967] netlink: 'syz.2.324': attribute type 23 has an invalid length.
[   78.087806][ T6980] bridge2: entered allmulticast mode
[   78.538170][ T6996] __nla_validate_parse: 4 callbacks suppressed
[   78.538188][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   78.544569][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.332'.
[   78.934379][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   78.955261][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   78.964442][ T7014] netlink: 15 bytes leftover after parsing attributes in process `syz.2.337'.
[   79.167448][ T7024] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   79.183297][ T7029] macsec0: entered promiscuous mode
[   79.274661][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[   79.282996][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[   79.449214][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.453451][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.603571][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'.
[   79.649364][ T7073] netlink: 'syz.2.356': attribute type 11 has an invalid length.
[   80.485144][ T7103] netlink: 'syz.1.366': attribute type 9 has an invalid length.
[   80.490355][ T7103] netlink: 'syz.1.366': attribute type 6 has an invalid length.
[   80.492787][ T7103] netlink: 'syz.1.366': attribute type 7 has an invalid length.
[   80.495234][ T7103] netlink: 'syz.1.366': attribute type 8 has an invalid length.
[   80.630736][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.633466][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.704670][ T7113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.742726][ T7122] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   80.747401][ T7122] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   81.118321][ T1268] cfg80211: failed to load regulatory.db
[   81.656405][ T7148] netlink: 'syz.2.381': attribute type 2 has an invalid length.
[   81.869534][ T7162] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   82.353107][ T7188] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.358615][ T7188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.362222][ T7188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.365656][ T7188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.662629][ T7215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.675018][ T7210] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.744188][ T7210] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.810851][ T7210] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.863187][ T7210] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.915014][ T7210] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.924297][ T7210] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.930388][ T7227] netlink: 'syz.2.405': attribute type 4 has an invalid length.
[   82.933790][ T7210] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.941868][ T7210] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.031122][ T7235] veth0_to_bond: entered allmulticast mode
[   83.911750][ T7284] __nla_validate_parse: 18 callbacks suppressed
[   83.911786][ T7284] netlink: 1404 bytes leftover after parsing attributes in process `syz.1.421'.
[   84.022545][ T7291] netlink: 'syz.1.424': attribute type 10 has an invalid length.
[   84.028880][ T7291] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.087289][ T7295] lo speed is unknown, defaulting to 1000
[   84.130179][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'.
[   84.133491][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'.
[   84.148459][ T7298] geneve3: entered allmulticast mode
[   84.170821][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'.
[   84.814581][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[   84.817625][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[   84.820598][ T7327] netlink: 'syz.1.435': attribute type 15 has an invalid length.
[   85.151064][ T7350] netlink: 'syz.2.440': attribute type 11 has an invalid length.
[   85.154325][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.440'.
[   85.185054][ T7355] netlink: 'syz.1.442': attribute type 5 has an invalid length.
[   85.241655][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[   85.356847][ T5816] Bluetooth: hci1: command 0x0405 tx timeout
[   85.513513][ T7383] lo speed is unknown, defaulting to 1000
[   85.518336][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'.
[   85.815574][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'.
[   85.859825][ T7400] netlink: 'syz.1.455': attribute type 5 has an invalid length.
[   86.015081][ T7415] lo speed is unknown, defaulting to 1000
[   86.337547][ T7418] netlink: 'syz.2.460': attribute type 4 has an invalid length.
[   86.876325][ T7466] veth0_to_bridge: entered promiscuous mode
[   87.705017][ T7465] veth0_to_bridge: left promiscuous mode
[   87.861430][ T7511] veth0: entered promiscuous mode
[   87.879355][ T7514] veth0: left promiscuous mode
[   88.021303][ T7525] netlink: 'syz.1.478': attribute type 5 has an invalid length.
[   88.134630][ T7531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.269279][ T7543] xt_hashlimit: max too large, truncated to 1048576
[   88.272480][ T7543] Cannot find add_set index 3 as target
[   89.383891][ T7598] __nla_validate_parse: 9 callbacks suppressed
[   89.383907][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'.
[   89.504921][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   89.512294][ T7607] netlink: 'syz.1.495': attribute type 11 has an invalid length.
[   89.515646][ T7607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.495'.
[   89.654191][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'.
[   89.667257][ T7622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.498'.
[   89.722004][ T7628] lo speed is unknown, defaulting to 1000
[   89.964701][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'.
[   90.155138][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'.
[   90.167257][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   90.756189][ T7675] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[   90.760422][ T7675] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[   90.764284][ T7675] CPU: 0 UID: 0 PID: 7675 Comm: syz.2.511 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   90.768270][ T7675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.772037][ T7675] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[   90.774914][ T7675] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[   90.781751][ T7675] RSP: 0018:ffffc90003bbf080 EFLAGS: 00010202
[   90.784198][ T7675] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[   90.786954][ T7675] RDX: ffffc90008fba000 RSI: 00000000000002d5 RDI: 0000000000000058
[   90.789738][ T7675] RBP: dffffc0000000000 R08: ffff88801fcc3980 R09: 0000000000000002
[   90.792610][ T7675] R10: 00000000ffffffff R11: ffffffff897ead10 R12: 0000000000000000
[   90.795974][ T7675] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88811257c800
[   90.798813][ T7675] FS:  00007fe5d0f4a6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   90.801846][ T7675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.804327][ T7675] CR2: 0000200000000240 CR3: 0000000025254000 CR4: 00000000000006f0
[   90.807275][ T7675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.810058][ T7675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   90.812937][ T7675] Call Trace:
[   90.814401][ T7675]  <TASK>
[   90.815694][ T7675]  drr_qlen_notify+0x2c/0xf0
[   90.817491][ T7675]  qdisc_tree_reduce_backlog+0x29c/0x480
[   90.819578][ T7675]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[   90.821601][ T7675]  codel_change+0x859/0xae0
[   90.823385][ T7675]  ? is_dynamic_key+0xd6/0x1c0
[   90.825156][ T7675]  ? qdisc_alloc+0x789/0xaa0
[   90.826726][ T7675]  ? qdisc_create+0x12c/0xea0
[   90.828442][ T7675]  ? rtnetlink_rcv_msg+0x77c/0xb70
[   90.830183][ T7675]  ? netlink_rcv_skb+0x208/0x470
[   90.831943][ T7675]  ? netlink_unicast+0x75b/0x8d0
[   90.833917][ T7675]  ? netlink_sendmsg+0x805/0xb30
[   90.836028][ T7675]  ? __sock_sendmsg+0x21c/0x270
[   90.837844][ T7675]  ? ____sys_sendmsg+0x505/0x830
[   90.839516][ T7675]  ? ___sys_sendmsg+0x21f/0x2a0
[   90.841125][ T7675]  ? __x64_sys_sendmsg+0x19b/0x260
[   90.842963][ T7675]  ? __pfx_codel_change+0x10/0x10
[   90.844907][ T7675]  codel_init+0x1f7/0x3e0
[   90.846501][ T7675]  ? __pfx_codel_init+0x10/0x10
[   90.848461][ T7675]  qdisc_create+0x7ac/0xea0
[   90.850183][ T7675]  tc_modify_qdisc+0x1426/0x2010
[   90.851996][ T7675]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   90.854173][ T7675]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   90.856353][ T7675]  rtnetlink_rcv_msg+0x77c/0xb70
[   90.858180][ T7675]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   90.860000][ T7675]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   90.862003][ T7675]  netlink_rcv_skb+0x208/0x470
[   90.863787][ T7675]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   90.865734][ T7675]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.867569][ T7675]  ? netlink_deliver_tap+0x2e/0x1b0
[   90.869788][ T7675]  ? netlink_deliver_tap+0x2e/0x1b0
[   90.871915][ T7675]  netlink_unicast+0x75b/0x8d0
[   90.873951][ T7675]  netlink_sendmsg+0x805/0xb30
[   90.875987][ T7675]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.878010][ T7675]  ? aa_sock_msg_perm+0x94/0x160
[   90.879865][ T7675]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.881778][ T7675]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.883796][ T7675]  __sock_sendmsg+0x21c/0x270
[   90.885271][ T7675]  ____sys_sendmsg+0x505/0x830
[   90.886784][ T7675]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.888527][ T7675]  ? import_iovec+0x74/0xa0
[   90.890037][ T7675]  ___sys_sendmsg+0x21f/0x2a0
[   90.891535][ T7675]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.893578][ T7675]  ? __fget_files+0x2a/0x420
[   90.895571][ T7675]  ? __fget_files+0x3a0/0x420
[   90.897369][ T7675]  __x64_sys_sendmsg+0x19b/0x260
[   90.899044][ T7675]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.900931][ T7675]  ? do_syscall_64+0xbe/0x3b0
[   90.902582][ T7675]  do_syscall_64+0xfa/0x3b0
[   90.904243][ T7675]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.906076][ T7675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.908165][ T7675]  ? exc_page_fault+0x9f/0xf0
[   90.909878][ T7675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.911904][ T7675] RIP: 0033:0x7fe5d018e929
[   90.913704][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.920929][ T7675] RSP: 002b:00007fe5d0f4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.923789][ T7675] RAX: ffffffffffffffda RBX: 00007fe5d03b5fa0 RCX: 00007fe5d018e929
[   90.926512][ T7675] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004
[   90.929260][ T7675] RBP: 00007fe5d0210b39 R08: 0000000000000000 R09: 0000000000000000
[   90.932015][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.935343][ T7675] R13: 0000000000000000 R14: 00007fe5d03b5fa0 R15: 00007ffee189ac38
[   90.938343][ T7675]  </TASK>
[   90.939501][ T7675] Modules linked in:
[   90.941084][ T7675] ---[ end trace 0000000000000000 ]---
[   90.943042][ T7675] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[   90.945336][ T7675] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[   90.951911][ T7675] RSP: 0018:ffffc90003bbf080 EFLAGS: 00010202
[   90.954435][ T7675] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[   90.957305][ T7675] RDX: ffffc90008fba000 RSI: 00000000000002d5 RDI: 0000000000000058
[   90.960021][ T7675] RBP: dffffc0000000000 R08: ffff88801fcc3980 R09: 0000000000000002
[   90.962828][ T7675] R10: 00000000ffffffff R11: ffffffff897ead10 R12: 0000000000000000
[   90.965557][ T7675] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88811257c800
[   90.968329][ T7675] FS:  00007fe5d0f4a6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   90.971280][ T7675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.973822][ T7675] CR2: 0000200000000240 CR3: 0000000025254000 CR4: 00000000000006f0
[   90.976803][ T7675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.979310][ T7675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   90.981901][ T7675] Kernel panic - not syncing: Fatal exception in interrupt
[   90.984860][ T7675] Kernel Offset: disabled
[   90.986225][ T7675] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:18:54  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f79 RDI=0000000000000f7a RBP=00000000000003f8 RSP=ffffc90003bbe8b0
R8 =ffff888020540237 R9 =1ffff110040a8046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f7 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5d0f4a6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000240 CR3=0000000025254000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe5d0384478 00007fe5d0384450 XMM03=00007fe5d0384488 00007fe5d0384480
XMM04=00007fe5d0eed100 00007fe5d0384440 XMM05=00007fe5d0384458 00007fe5d03844a0
XMM06=00007fe5d0384498 00007fe5d0384490 XMM07=00007fe5d0384488 00007fe5d0384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe5d0211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d023aa33eb0a7700 RBX=ffffffff81974d58 RCX=d023aa33eb0a7700 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10df0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f01dff8 CR3=00000001238b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=180000006e616c78 760001000a801200
XMM02=00007ff342b84478 00007ff342b84450 XMM03=00007ff342b84488 00007ff342b84480
XMM04=00007ff3436ed100 00007ff342b84440 XMM05=00007ff342b84458 00007ff342b844a0
XMM06=00007ff342b84498 00007ff342b84490 XMM07=00007ff342b84488 00007ff342b84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff342a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
