last executing test programs:

1.052383311s ago: executing program 2 (id=282):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

979.312303ms ago: executing program 2 (id=285):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x6a040000)
unshare(0x30500)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12000)
pread64(r1, 0x0, 0x0, 0x3ff)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
ioctl$SIOCSIFHWADDR(r3, 0x8b26, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0)

878.49112ms ago: executing program 0 (id=288):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x6, 0x81, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7f66, 0x80, 0x6, 0x46}})

742.825421ms ago: executing program 0 (id=290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044810}, 0x20044002)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0)

701.236096ms ago: executing program 2 (id=291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffc, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

633.185537ms ago: executing program 2 (id=292):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

605.121252ms ago: executing program 1 (id=293):
unshare(0x400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)

571.815757ms ago: executing program 0 (id=294):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
shutdown(r0, 0x1)

459.286286ms ago: executing program 1 (id=295):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
unshare(0x22020600)
r6 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}})

458.35066ms ago: executing program 0 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0)

458.10325ms ago: executing program 2 (id=297):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000008400000000000000070003000900040020000000000000008400000002000000d1bd05000000000006000000", @ANYRES32, @ANYBLOB="200000000000000087000000080000000000000000000700000000000000000118000000000000008400000006"], 0xe0, 0x20008090}, 0x840)

372.474262ms ago: executing program 0 (id=298):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x7, 0xfffffffe, 0xf})

372.190122ms ago: executing program 2 (id=299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x142ac1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}})
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r4=>0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r4, 0x4, 0x7, 0x4, 0x2, "bb2338bcf5c7e6c3bacb08a5810524477ec9dd08e2700260065d4da56753303e503cbbbad03b1927c4f150ef7a704c1f66001ec10cfb6c03ed8e253509af85", 0x40000000b}, 0x60)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000280))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x0)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

271.649694ms ago: executing program 0 (id=300):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30)

138.724059ms ago: executing program 1 (id=301):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700000000000000000000008500000013000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

62.161647ms ago: executing program 1 (id=302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

245.485µs ago: executing program 1 (id=303):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4)

0s ago: executing program 1 (id=304):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52802' (ED25519) to the list of known hosts.
syzkaller login: [   56.645199][ T5819] cgroup: Unknown subsys name 'net'
[   56.774203][ T5819] cgroup: Unknown subsys name 'cpuset'
[   56.781694][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.692159][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.590219][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.147473][ T5905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.151516][ T5905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.154487][ T5905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.157549][ T5905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.160691][ T5905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.364848][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.369910][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.374500][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.380015][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.383791][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.435504][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.441343][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.444530][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.448009][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.451828][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.621513][ T5904] chnl_net:caif_netlink_parms(): no params data found
[   70.776743][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.780795][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.783770][ T5904] bridge_slave_0: entered allmulticast mode
[   70.787699][ T5904] bridge_slave_0: entered promiscuous mode
[   70.822325][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.825387][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.828313][ T5904] bridge_slave_1: entered allmulticast mode
[   70.833577][ T5904] bridge_slave_1: entered promiscuous mode
[   70.900961][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.926858][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.930803][ T5909] chnl_net:caif_netlink_parms(): no params data found
[   70.978225][ T5912] chnl_net:caif_netlink_parms(): no params data found
[   70.986346][ T5904] team0: Port device team_slave_0 added
[   71.012287][ T5904] team0: Port device team_slave_1 added
[   71.084888][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.087362][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.095930][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.115791][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.118321][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.127165][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.142884][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.145463][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.148042][ T5909] bridge_slave_0: entered allmulticast mode
[   71.153130][ T5909] bridge_slave_0: entered promiscuous mode
[   71.156999][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.160574][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.163355][ T5909] bridge_slave_1: entered allmulticast mode
[   71.167125][ T5909] bridge_slave_1: entered promiscuous mode
[   71.250250][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.252795][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.255392][ T5912] bridge_slave_0: entered allmulticast mode
[   71.260387][ T5912] bridge_slave_0: entered promiscuous mode
[   71.265230][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.267990][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.271790][ T5912] bridge_slave_1: entered allmulticast mode
[   71.274600][ T5912] bridge_slave_1: entered promiscuous mode
[   71.280327][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.288160][ T5904] hsr_slave_0: entered promiscuous mode
[   71.291349][ T5904] hsr_slave_1: entered promiscuous mode
[   71.304525][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.307081][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.334456][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.360506][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.382269][ T5909] team0: Port device team_slave_0 added
[   71.386935][ T5909] team0: Port device team_slave_1 added
[   71.405253][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.483837][ T5912] team0: Port device team_slave_0 added
[   71.486787][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.490068][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.501325][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.515216][ T5912] team0: Port device team_slave_1 added
[   71.518362][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.522824][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.532763][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.618274][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.621107][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.632013][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.653130][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.655771][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.665193][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.690288][ T5909] hsr_slave_0: entered promiscuous mode
[   71.693496][ T5909] hsr_slave_1: entered promiscuous mode
[   71.696403][ T5909] debugfs: 'hsr0' already exists in 'hsr'
[   71.699768][ T5909] Cannot create hsr debugfs directory
[   71.771499][ T5912] hsr_slave_0: entered promiscuous mode
[   71.774303][ T5912] hsr_slave_1: entered promiscuous mode
[   71.777690][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[   71.781100][ T5912] Cannot create hsr debugfs directory
[   71.892861][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.920594][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.935527][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.951208][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.078235][ T5909] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.091698][ T5909] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.104056][ T5909] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.135531][ T5909] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.182957][   T55] Bluetooth: hci0: command tx timeout
[   72.203046][ T5912] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.216992][ T5912] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.230321][ T5912] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.236648][ T5912] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.262611][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.317437][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[   72.330663][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.333733][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.357358][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.360325][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.400702][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.419626][   T55] Bluetooth: hci1: command tx timeout
[   72.441496][ T5904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.448247][ T5909] 8021q: adding VLAN 0 to HW filter on device team0
[   72.470035][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.473081][ T4610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.495194][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.498203][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.503518][   T55] Bluetooth: hci2: command tx timeout
[   72.518229][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.560628][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[   72.580315][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.583353][ T4610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.602047][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.604929][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.662995][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.771545][ T5904] veth0_vlan: entered promiscuous mode
[   72.791375][ T5904] veth1_vlan: entered promiscuous mode
[   72.862489][ T5904] veth0_macvtap: entered promiscuous mode
[   72.871026][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.878050][ T5904] veth1_macvtap: entered promiscuous mode
[   72.930309][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.938315][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.952420][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.977971][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.985115][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.006281][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.011144][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.015027][ T5909] veth0_vlan: entered promiscuous mode
[   73.080990][ T5909] veth1_vlan: entered promiscuous mode
[   73.099170][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.112402][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.155855][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.159460][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.167688][ T5912] veth0_vlan: entered promiscuous mode
[   73.192265][ T5909] veth0_macvtap: entered promiscuous mode
[   73.202984][ T5912] veth1_vlan: entered promiscuous mode
[   73.225948][ T5912] veth0_macvtap: entered promiscuous mode
[   73.233858][ T5912] veth1_macvtap: entered promiscuous mode
[   73.241984][ T5909] veth1_macvtap: entered promiscuous mode
[   73.293247][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.318313][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.331940][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.339995][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.357784][ T5931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.368250][ T5931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.398995][ T5931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.433967][ T5931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.446593][ T5931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.493752][ T5931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.509112][ T5931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.533411][ T5931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.573156][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.584011][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.634337][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.637338][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.700134][ T5979] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   73.713129][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.720841][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.752646][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.755844][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.976745][ T5988] netlink: 256 bytes leftover after parsing attributes in process `syz.2.28'.
[   74.042128][ T5992] netlink: 'syz.2.30': attribute type 30 has an invalid length.
[   74.046116][ T5992] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   74.069445][ T5992] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   74.259271][   T55] Bluetooth: hci0: command tx timeout
[   74.288045][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   74.469418][ T6011] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   74.500346][   T55] Bluetooth: hci1: command tx timeout
[   74.579424][   T55] Bluetooth: hci2: command tx timeout
[   74.964649][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   75.443893][ T6052] ieee802154 phy0 wpan0: encryption failed: -22
[   75.516176][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   75.537251][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   75.556317][ T6056] macvlan2: entered promiscuous mode
[   76.339113][   T55] Bluetooth: hci0: command tx timeout
[   76.578989][   T55] Bluetooth: hci1: command tx timeout
[   76.658969][   T55] Bluetooth: hci2: command tx timeout
[   76.687689][ T6119] netlink: 104 bytes leftover after parsing attributes in process `syz.0.90'.
[   76.822637][ T6124] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   77.462250][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   77.623793][ T6174] netlink: 1 bytes leftover after parsing attributes in process `syz.2.110'.
[   77.699726][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'.
[   77.748178][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'.
[   78.075016][ T6197] tipc: Started in network mode
[   78.082588][ T6197] tipc: Node identity 9e9cd11d1e14, cluster identity 4711
[   78.085925][ T6197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.112837][ T6195] syzkaller0: entered promiscuous mode
[   78.121618][ T6195] syzkaller0: entered allmulticast mode
[   78.170787][ T6195] tipc: Resetting bearer <eth:syzkaller0>
[   78.177146][ T6193] tipc: Resetting bearer <eth:syzkaller0>
[   78.186852][ T6193] tipc: Disabling bearer <eth:syzkaller0>
[   78.419451][   T55] Bluetooth: hci0: command tx timeout
[   78.635213][ T6219] Bluetooth: MGMT ver 1.23
[   78.659460][   T55] Bluetooth: hci1: command tx timeout
[   78.739002][   T55] Bluetooth: hci2: command tx timeout
[   79.103695][ T6233] netlink: 104 bytes leftover after parsing attributes in process `syz.2.133'.
[   79.331287][ T6245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.339274][ T6245] syzkaller0: entered promiscuous mode
[   79.341521][ T6245] syzkaller0: entered allmulticast mode
[   79.370783][ T6245] tipc: Resetting bearer <eth:syzkaller0>
[   79.375446][ T6244] tipc: Resetting bearer <eth:syzkaller0>
[   79.397602][ T6244] tipc: Disabling bearer <eth:syzkaller0>
[   80.004644][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'.
[   80.127328][ T6271] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   80.273110][ T6279] Illegal XDP return value 4294967294 on prog  (id 19) dev N/A, expect packet loss!
[   80.864429][ T6288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.474778][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'.
[   81.814585][    T9] IPVS: starting estimator thread 0...
[   81.892915][ T6342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.899355][ T6339] IPVS: using max 50 ests per chain, 120000 per kthread
[   82.573277][ T6370] netlink: 'syz.2.187': attribute type 6 has an invalid length.
[   83.113062][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.200'.
[   83.263092][ T6407] netlink: 'syz.2.205': attribute type 4 has an invalid length.
[   83.452372][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   83.456108][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   83.462390][ T6416] netlink: 'syz.0.208': attribute type 19 has an invalid length.
[   84.325716][ T6476] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   84.362354][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.384510][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[   84.494916][ T6476] bond1 (unregistering): Released all slaves
[   84.659314][   T55] Bluetooth: hci2: command tx timeout
[   84.969225][ T6493] openvswitch: netlink: Missing valid actions attribute.
[   84.977652][ T6493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.289938][ T6498] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   85.526429][ T6512] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.244'.
[   85.741691][ T6522] tipc: Started in network mode
[   85.743711][ T6522] tipc: Node identity d240c7aacf53, cluster identity 4711
[   85.746710][ T6522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.757257][ T6522] syzkaller0: entered promiscuous mode
[   85.759797][ T6522] syzkaller0: entered allmulticast mode
[   85.912912][ T6523] tipc: Resetting bearer <eth:syzkaller0>
[   85.921603][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   85.937598][ T6521] tipc: Disabling bearer <eth:syzkaller0>
[   86.322576][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.261'.
[   86.632081][ T6568] ipvlan2: entered promiscuous mode
[   86.670751][  T793] cfg80211: failed to load regulatory.db
[   86.742512][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   86.855941][ T6578] syzkaller1: entered promiscuous mode
[   86.858096][ T6578] syzkaller1: entered allmulticast mode
[   86.918827][ T6582] netlink: 1 bytes leftover after parsing attributes in process `syz.0.276'.
[   86.958854][ T6582] tipc: Cannot configure node identity twice
[   87.237855][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'.
[   87.334819][  T793] IPVS: starting estimator thread 0...
[   87.418859][ T6610] IPVS: using max 41 ests per chain, 98400 per kthread
[   87.497479][ T6614] bridge1: entered allmulticast mode
[   87.721579][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   87.794754][ T6638] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.794974][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.822966][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.848768][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.851443][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.856361][   T13] bond0: now running without any active interface!
[   87.946386][ T6642] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   88.077720][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.182337][ T6657] netlink: 'syz.1.304': attribute type 3 has an invalid length.
[   88.193085][ T6657] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.304'.
Connection to localhost closed by remote host.
[   89.290674][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.400559][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.506656][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.656685][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.841399][   T12] bridge_slave_1: left allmulticast mode
[   89.843468][   T12] bridge_slave_1: left promiscuous mode
[   89.846707][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.852486][   T12] bridge_slave_0: left allmulticast mode
[   89.854401][   T12] bridge_slave_0: left promiscuous mode
[   89.856588][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.206514][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.212772][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.217602][   T12] bond0 (unregistering): Released all slaves
[   90.226780][   T12] bond1 (unregistering): Released all slaves
[   90.309313][   T12] tipc: Left network mode
[   90.484325][   T12] hsr_slave_0: left promiscuous mode
[   90.487081][   T12] hsr_slave_1: left promiscuous mode
[   90.491192][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.494245][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.498068][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.504336][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.524854][   T12] veth1_macvtap: left promiscuous mode
[   90.526858][   T12] veth0_macvtap: left promiscuous mode
[   90.528609][   T12] veth1_vlan: left promiscuous mode
[   90.530929][   T12] veth0_vlan: left promiscuous mode
[   90.795553][   T12] team0 (unregistering): Port device team_slave_1 removed
[   90.815590][   T12] team0 (unregistering): Port device team_slave_0 removed
[   91.321775][   T12] IPVS: stop unused estimator thread 0...
[   91.440024][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.507384][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.589475][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.654571][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.751560][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.821648][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.894538][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.955018][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.069600][   T12] bridge_slave_1: left allmulticast mode
[   92.071927][   T12] bridge_slave_1: left promiscuous mode
[   92.074295][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.081109][   T12] bridge_slave_0: left allmulticast mode
[   92.083432][   T12] bridge_slave_0: left promiscuous mode
[   92.085889][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.095299][   T12] bridge_slave_1: left allmulticast mode
[   92.097662][   T12] bridge_slave_1: left promiscuous mode
[   92.101474][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.107582][   T12] bridge_slave_0: left allmulticast mode
[   92.110488][   T12] bridge_slave_0: left promiscuous mode
[   92.112918][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.560122][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.565873][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.571318][   T12] bond0 (unregistering): Released all slaves
[   92.908600][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.914521][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.919618][   T12] bond0 (unregistering): Released all slaves
[   93.041797][   T12] tipc: Left network mode
[   93.057814][   T12] IPVS: stopping backup sync thread 6498 ...
[   93.377488][   T12] hsr_slave_0: left promiscuous mode
[   93.380587][   T12] hsr_slave_1: left promiscuous mode
[   93.383402][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.386409][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.390461][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.393338][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.400528][   T12] hsr_slave_0: left promiscuous mode
[   93.403782][   T12] hsr_slave_1: left promiscuous mode
[   93.407031][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.412737][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.416473][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.419964][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.447275][   T12] veth1_macvtap: left promiscuous mode
[   93.455338][   T12] veth0_macvtap: left promiscuous mode
[   93.457878][   T12] veth1_vlan: left promiscuous mode
[   93.461060][   T12] veth0_vlan: left promiscuous mode
[   93.464707][   T12] veth1_macvtap: left promiscuous mode
[   93.466965][   T12] veth0_macvtap: left promiscuous mode
[   93.469642][   T12] veth1_vlan: left promiscuous mode
[   93.471901][   T12] veth0_vlan: left promiscuous mode
[   94.006936][   T12] team0 (unregistering): Port device team_slave_1 removed
[   94.043528][   T12] team0 (unregistering): Port device team_slave_0 removed
[   94.777357][   T12] team0 (unregistering): Port device team_slave_1 removed
[   94.808071][   T12] team0 (unregistering): Port device team_slave_0 removed
[   95.742928][   T12] IPVS: stop unused estimator thread 0...
[  100.698168][ T5590] sched: DL replenish lagged too much

VM DIAGNOSIS:
02:47:04  Registers:
info registers vcpu 0

CPU#0
RAX=6b1af76940969c00 RBX=ffffffff819683c8 RCX=6b1af76940969c00 RDX=0000000000000001
RSI=ffffffff8d9b8e63 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f10598f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000038d4f670 0000000000000008 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e8ade4c5cdb54200 RBX=ffffffff819683c8 RCX=e8ade4c5cdb54200 RDX=0000000000000001
RSI=ffffffff8d9b8e63 RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38730 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe7e275ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
