last executing test programs:

12.839427491s ago: executing program 3 (id=2992):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27050200790214000600002fb96dbcf706e105000607000000000000ee162fd4b8bd4a31accb", 0x26}], 0x1}, 0x9cdc2384256f8178)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a9500d3400"], 0x48)

11.86520362s ago: executing program 3 (id=3006):
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}}, 0x20}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x90d0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x4)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300208}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x138, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1e9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdd5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private0, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6fe0}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcf}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x84}, 0x1)

11.627701931s ago: executing program 3 (id=3011):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r2 = epoll_create(0x4)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x90000000})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044)

11.516122185s ago: executing program 3 (id=3014):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xbaa53d8cc4a0bbf9}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x40000000000000}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa, 0x3}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, 0x0, 0x2004c090) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f00000002c0), 0x0}, 0x20)
r8 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
poll(&(0x7f0000000140)=[{r1, 0x200}, {r0, 0x342}, {r0, 0x8004}, {r4}, {r7, 0x81b8}, {r3, 0x4251}, {r5, 0x400}, {r8, 0x40}, {r0, 0x38}], 0x9, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)

11.127408682s ago: executing program 3 (id=3018):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
unshare(0x22020600) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve1\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1700"/15], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

3.085524932s ago: executing program 2 (id=3070):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=r1, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x22020400)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}})
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000180), 0x4)

3.081466806s ago: executing program 1 (id=3071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000430007012dbd7000fedbdf25047c000018001e8e14002200ff020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

2.858801087s ago: executing program 1 (id=3073):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), 0xffffffffffffffff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @empty}], 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000026c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf251900000008000300", @ANYRES32=r4, @ANYBLOB="050400dcc512ce24e64ce7e83141faffffff00000d4e"], 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0xc000)

2.508546001s ago: executing program 1 (id=3074):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000300)={0x33, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x2, 0x8, 0x68}, 0x2c) (fail_nth: 2)

2.29288708s ago: executing program 2 (id=3075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.202690882s ago: executing program 0 (id=3076):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7f, 0xa}}}}}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x1, 0x2, 0xe043, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x8000, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="ad43000000000000000002"], 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10502000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x12d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0xe4}}, 0x20004005)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e, 0x3c}, {0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.030720126s ago: executing program 4 (id=3077):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x4, 0x0, 0xb, 0x9, 0xd, 0xfffffffffffffffc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xaf, &(0x7f0000000080)=""/175, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x7, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000200)=[{0x4, 0x1, 0xb, 0x7}, {0x1, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x3, 0x5, 0x4}]}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x4, 0x1, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000004c0)={<r2=>0xffffffffffffffff})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r2, r0, 0x1c, 0x2018, 0x0, @value=r3, @void, @void, @void, r1}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000580)={0x0, 0x1, 0x2, 0x1})
r4 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000980)={0x0, 0x9, 0x7}, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FIOCLEX(r5, 0x5451)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}]}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8d0)
r7 = openat$cgroup_ro(r5, &(0x7f0000000b00)='io.stat\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000b40)=r2, 0x4)
sendmsg$xdp(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b80)="26e2bb24406f08884ef6a4b9d839f9e6755fa48b3ca49b1744106453a5ad6d0caf42cc8fce304acc5a25df93ad762c66b2ef74c1de6ae7575b1ca2259bdf65277dfa7c2df145559cef32d2b175f1201b3ccdcf3339f2b19d6b517fbbda3a6140eff368e52e5d668774620dc1be7578bf8913128b78686f03bb8c3a1e96b44359105e34b8ec", 0x85}], 0x1, 0x0, 0x0, 0x40090}, 0x8080)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000d00)={0x3, &(0x7f0000000cc0)=[{0x1, 0xf, 0x4, 0x6}, {0x1, 0x3, 0xf8, 0x2}, {0x8, 0xbf, 0x9, 0xffffffff}]}, 0x10)
r8 = accept4$packet(r7, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d80)=0x14, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000e00)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @random="b49b5e5ea2db"}, 0x14)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000e40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000f80)={<r11=>r10, &(0x7f0000000e80)='batadv_slave_0\x00', 0x402141, &(0x7f0000000ec0)={@align=0x6, {0x5, 0x593, 0xcc, 0x8}}, 0xcef, &(0x7f0000000f00), &(0x7f0000000f40)=0x6e7})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000000fc0)={'erspan0\x00', r9, 0x10, 0x10, 0x1ff, 0x300, {{0x22, 0x4, 0x3, 0x20, 0x88, 0x67, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @timestamp={0x44, 0x18, 0x81, 0x0, 0x6, [0x5, 0x6, 0x8000, 0x0, 0x80000001]}, @lsrr={0x83, 0x7, 0x61, [@remote]}, @ssrr={0x89, 0x13, 0xf8, [@local, @loopback, @multicast1, @remote]}, @timestamp={0x44, 0x20, 0xa1, 0x0, 0x1, [0x195, 0x1, 0x80, 0x4, 0xfffffffa, 0x80000000, 0x80]}, @timestamp={0x44, 0x20, 0xd7, 0x0, 0xc, [0xff, 0x0, 0xff, 0xfffffffa, 0x3, 0x7ff, 0x1]}]}}}}})
setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000010c0)='\x00', 0x1)
r12 = socket$igmp(0x2, 0x3, 0x2)
write(r12, &(0x7f0000001100)="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", 0x1000)
openat$cgroup_ro(r11, &(0x7f0000002100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$llc(r7, &(0x7f0000002140)=""/4096, 0x1000, 0x2, &(0x7f0000003140)={0x1a, 0x309, 0x5, 0x6, 0x6, 0x6, @local}, 0x10)

1.951383401s ago: executing program 0 (id=3078):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0))
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
readv(r3, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/121, 0x79}], 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000006c0)={{r2, &(0x7f0000000180)=':^\x00', 0x100000, &(0x7f0000000200)={@align=0xfffffffffffffffa, {0x1, 0x3, 0x3, 0x7fffffff}}, 0x3, &(0x7f0000000280), &(0x7f0000000480)}, {[0x8, 0x3, 0x7f, 0x1ff]}, 0x5, 0x90, &(0x7f0000000600)=""/144})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r5=>0x0})
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4)
sendmsg$sock(r6, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @mcast1, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x4040000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.781371182s ago: executing program 4 (id=3079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="6800000000000305000000170000000000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES16=r1], 0x68}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="63d392627c18aa00adf05d5e9eabde125357b35d33f4cabf1a465b2d0fd4e7466db07ecb9d3e48a6cf77f3c52ca88ed5ebd1ea2e3e406ed2142c614484e395bb7ab42a4fa395e1e8edcf709512ab3c4a"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r8}, 0x38)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000040), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000200010000001c000880040007881400078008000600"], 0x44}}, 0x0)
write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000ba177fbf"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x201, 0x5, {}, {}, {}, 0x1, @can={{}, 0x3, 0x4, 0x0, 0x0, "140400"}}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x30)

1.541325168s ago: executing program 2 (id=3080):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x20000084)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x0, 0x10001}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, &(0x7f0000000840), &(0x7f0000000940)='%pB    \x00'}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000100)=""/157, &(0x7f0000000040)=0x9d)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94)

1.467553466s ago: executing program 1 (id=3081):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xf1, 0x6, 0x48, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x708, 0x8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', <r4=>0x0, 0x2f, 0x9, 0xf1, 0x6, 0x48, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x708, 0x8}})
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='veth0_to_hsr\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='veth0_to_hsr\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000000c0)=0x1)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
tee(r6, r8, 0x2, 0x100000000000003)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x1c, 0x7, 0x70, @mcast1, @mcast2, 0x1, 0x7800, 0x8000, 0x4a00000}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', <r9=>0x0, 0x2f, 0x7, 0x1c, 0x7, 0x70, @mcast1, @mcast2, 0x1, 0x7800, 0x8000, 0x4a00000}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r10=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r10, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r12, 0x80010040)
setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x1, 0x8000, r6, 0x6, '\x00', r9, r7, 0x1, 0x1, 0x5, 0x3, @value=r8}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.376084499s ago: executing program 0 (id=3082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x20, r1, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b01f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

1.36421915s ago: executing program 2 (id=3083):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x68}, 0x40805)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70ad2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x3}, {0x3, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0xffffffffffffff92}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014814}, 0x80) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_getlink={0xd8, 0x12, 0x1, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x10809, 0x51020}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7612b}, @IFLA_MASTER={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x10}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff}, @IFLA_ADDRESS={0xa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xd7}, @IFLA_VFINFO_LIST={0x74, 0x16, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x675, 0x42e, 0x60000000}}, @IFLA_VF_IB_PORT_GUID={0x14}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x82d4, 0xa}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7c, 0xffb, 0x6}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xc74, 0xfffffe01, 0x8100}}]}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_EXT_MASK={0x8, 0x1d, 0x401}]}, 0xd8}}, 0x0)

1.115807824s ago: executing program 2 (id=3084):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x1, 0x101, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x9d}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x58}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0", 0xe8}], 0x1}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r6, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002940)={0x10, 0x1b, 0x200, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x4000000}, 0x8000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket(0x15, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001340)={<r12=>0x0, <r13=>0x0, <r14=>0x0}, &(0x7f0000001380)=0xc)
sendmmsg$unix(r10, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r11, r11]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x50, 0x40800}}], 0x1, 0x0)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
write$tun(r15, &(0x7f0000000340)=ANY=[@ANYBLOB="00001b627703040004000800f8ff0320001a060900030180c200000f3b0f8ebad7a24fb2a8aaaaaaaaaaaab593da75e8930488468a9e"], 0x36)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@empty, @empty, <r16=>0x0}, &(0x7f0000000440)=0xc)
ioctl$TUNSETIFINDEX(r15, 0x400454da, &(0x7f0000000480)=r16)
sendmsg$nl_xfrm(r7, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@updpolicy={0x10c, 0x19, 0x800, 0x70bd27, 0x25dfdbfe, {{@in=@broadcast, @in=@loopback, 0x4e20, 0x8, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x73, r9, r13}, {0x2, 0x4, 0x0, 0x9, 0xd, 0x7, 0x10001, 0x200}, {0x9, 0x100000000, 0x10000, 0x80000000}, 0xa, 0x6e6bb6, 0x1, 0x0, 0x2, 0x1}, [@iptfs_drop_time={0x8, 0x24, 0x8}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0x20000}}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e22, @in6=@mcast1}}, @offload={0xc, 0x1c, {r16, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, <r17=>0x0}, &(0x7f0000000800)=0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)="704e977cbcf5546a83831fe5ecb51589d14e4d0acd78e3030021d10a20db37aa6b32098495cd50e1777e8ffb5569d3dec159aff9c3d117773a2ffff9d401fa1e782c611504cd7fdb43d6f3867d198796c1229769c11daa466fa70a760eeb06baea364338e7fa801abab0ad54acf046bed5984b63c25c03badbde0aa1af952d0317bbcae26d2bae34e54c1c5367281e3204f9e5bd140c475ba201874e4d6093eba93aec749b6a1265c59389587768832ef47ac0df9b166714", 0xb8}, {&(0x7f0000000400)="8e28f5712d6113be1cd0a75a72aca2ab15e091a458c8c416370735d7eb13d21395b43777c2102f8687ee572c69fa3f947f44e53f1252a5a2fc99a95f5d9a967703fc84164cd10b1077c3fe78f32b81857b15be4ee4cef81455c1dde7f04920bbb5dbeec9067567ebe100e6e3186af73e3613d748543ddc08d05ff98475ee27a042a2d88ad129034d9d54167b27", 0x8d}, {&(0x7f00000005c0)="6a20cef0b69c23883635f604ce144ac77c3186000de1db9a27557686ad52d4a87181a5ff28c69238b6462755f9da0bf14588fb9c81685f70008d1f16e623f4d03c7560b569bcb4d105a01ba2790147b233f4a4bc24a709dab87da63c4ea0cba6461da324d918644bec40869862085c6b0b56377ee3e57a49833b754a1f7b3893e1f7d4ba77d3d64dd7f3c2a87eeff83210a14a54186a94570a9e46129d4f844c65fa62eb4028f484d8d76f6c0564100d53c6e8ee09fff97815556d1533dd26f3c4c7c7", 0xc3}, {&(0x7f00000006c0)="77734403626c854327a04be0a14a12bf4b29cf9110954b57b973c70b3a8ec115d72141ac3e55061824b07b92e51faf5ce28e58b37ae7a8e7d499d8eb65fcf26ebcd4be59424abb9671c2acb8e4866004349f442c8a6188513430b4314710d25b2fe6679f397a86cf24dec84cb84f6b5acf16cd839609cc786a0647ae5cd95eda175933d2a496501523eea43e707e2e951dcad5d21ff6e650f5cd2f4c7b3a7d463e729cd528edabf6aa42b432245e0f105b9c", 0xb2}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, r13, r17}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40001}, 0x80)

1.114742378s ago: executing program 0 (id=3085):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
close(r0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaff030000000000000800460000140000000000019078061414bbac1e00014404000008009078010106b1"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="e6", 0x1}], 0x1, 0x0, 0x0, 0x24044084}, 0x10044001) (async)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="e6", 0x1}], 0x1, 0x0, 0x0, 0x24044084}, 0x10044001)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x150, 0x9403, 0x0, 0x150, 0x2c0, 0x280, 0x3d8, 0x3d8, 0x280, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x11}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x80009, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x1, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0xf, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x150, 0x9403, 0x0, 0x150, 0x2c0, 0x280, 0x3d8, 0x3d8, 0x280, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x11}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x80009, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x1, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0xf, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2060)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000280)=0xc, 0x4)
listen(r6, 0xfffffffd) (async)
listen(r6, 0xfffffffd)
bind$unix(r0, &(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e) (async)
bind$unix(r0, &(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001240)=@get={0x1, &(0x7f0000001180)=""/186, 0xe0000000000000})
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c)

917.27879ms ago: executing program 1 (id=3086):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="09a0010006810000240012800b0001006272696467650000144dc9f6c60024000100000005001600000200000a0001"], 0x50}}, 0x20000000)

822.110671ms ago: executing program 0 (id=3087):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d", 0x29}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f573856b45b0caf9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffd0}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x841}, 0xa2beecc42c308c19)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe)
sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25047c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x14008084}, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5ec37000)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0)

727.216478ms ago: executing program 1 (id=3088):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603d", 0x1da}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x4, 0x0, &(0x7f0000000000)="63eced8e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002")
r4 = socket$inet6(0xa, 0x2, 0x4000039)
sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20004000, &(0x7f0000001100)={0x3f, 0x0, 0x0, @mcast2, 0x80}, 0x1c)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="24fff3cab5a9a310256647055547b7dd7b97623d85f382f8ae5537739c3fdea7d6bccdae0190b2e494841d8cea3a84d139d8fdc457b2b5884e6ea425793f519343c911a25a262c229d84b638d3999678e7ab7ecdf150f73e5b38b009b8d8130039261de1fff728720d9984f2e46346bff43177a0dba0dcf1438ddb05f65313f0fab2eb30722c509cac12e16bbca43ed4fb79db68c3e98023f4a8724b5f51e5bd9b3fecc46228e78a5624b698ed7ae5e672b4f59f57f3ecea04ceef17eae4885763619677cb009b9f6d93a13bf995d42f97", @ANYRESDEC=r5, @ANYRES16=r0, @ANYRES64=r2, @ANYRESHEX=r3], 0x7c}}, 0x88d4)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000040a010700000000000000000a00000a15caba22bb975080578edce7a6632fb92999f55535a510f813cf5985a277582e2506ea7f66fd3aa277f50ee3ec71281fcb356b0800130ffce262f503000000000000002591e3c871445e968b5793fd964de7640ec2cb8bca74666b9b225eb1001a993ab425ddb7b319961156bf22cf9f3fd6b55defd47f80bfbf422dd2cc556296a6403a986a61dc"], 0x14}, 0x1, 0x0, 0x0, 0x4042894}, 0x4024)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000030a0fdb00000000000000000a0020050900010073797a31000000000900030073797a300000000004ff030014000000110001"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
readv(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f20090027bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00'/12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4)
r9 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv(r9, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r9}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)

726.20266ms ago: executing program 4 (id=3089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000080))
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

609.255781ms ago: executing program 3 (id=3022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r3], 0x40}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
close(r0)

553.504373ms ago: executing program 4 (id=3090):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000571e25304f9d3046a551d23438243e14ee78e4ea302b1b5834f3ac26de8ca60dcf55454c49a6869f78153aafacbd1d398ee302d161a4ddf67ba7868fbe22c21e7a558fba54e97877247f8bc2301c427c1964d624c1371579ed99b5f972c5cdd7b5de3690b4784224e544a03670edd021999e52b03d013a0abfc66548e4b958e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ppoll(&(0x7f0000000080)=[{r1, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0) (async)
ppoll(&(0x7f0000000080)=[{r1, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010900000000ffdbdf2502180000ffce6bffff00000208000100ac141400"], 0x24}}, 0x0)

450.23981ms ago: executing program 0 (id=3092):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r0 = socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r3 = socket(0x29, 0x3, 0xfffffffd)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071192e00000000008510000002000000850000003600000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r4=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r3, &(0x7f00000006c0)={0x1d, r4}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1a"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)}}], 0x1, 0x20008000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x28}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

412.238731ms ago: executing program 4 (id=3093):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffff000000000000ffffff1f1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000090000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

224.320616ms ago: executing program 4 (id=3094):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x2a, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100ffffffff00000002018157000c0003000500000000000000100007800c00018008000100d9cdfe8bc09a0bed688bf76123131bd7343356c8fb37cc54d50c07bcf1b0805dfe880cee4d0874b100635f7132a125e4ca0a68220a7d08f25312d3c07d5fe213f26bb0a8accc40942339257a144109e3203401dfba50ebacd66b8a1f60c40fd881ff28d3da84c1c992313b32ec3eb74192491a6ccc7f6a9ccba2ba21be33973b4e200b0f703e4828f88d91e508", @ANYRES32=r4, @ANYBLOB="0c0002000500000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4)
r5 = socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001040)={0x41, 0x1, 0x3}, 0x10)
getsockname$l2tp(r5, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x8000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$alg(0x26, 0x5, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, 0x0, 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r8], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
r13 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r14=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000040)={r14, 0x2}, &(0x7f00000002c0)=0x8)
r15 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)

0s ago: executing program 2 (id=3095):
socket(0x2d, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x7}, 0x20000000}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c669c2700000000000000000", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

evice registration error -23
[  310.689264][T12390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1550'.
[  310.970775][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'.
[  311.112595][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'.
[  311.112624][T12416] openvswitch: netlink: Flow key attribute not present in set flow.
[  312.030605][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'.
[  312.046157][T12443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1565'.
[  312.797823][T12443] hsr_slave_1 (unregistering): left promiscuous mode
[  313.543940][T12503] FAULT_INJECTION: forcing a failure.
[  313.543940][T12503] name failslab, interval 1, probability 0, space 0, times 0
[  313.543977][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.2.1580 Not tainted syzkaller #0 PREEMPT(full) 
[  313.543999][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.544011][T12503] Call Trace:
[  313.544019][T12503]  <TASK>
[  313.544033][T12503]  dump_stack_lvl+0xe8/0x150
[  313.544068][T12503]  should_fail_ex+0x410/0x560
[  313.544093][T12503]  ? __alloc_skb+0x1db/0x7a0
[  313.544116][T12503]  should_failslab+0xa8/0x100
[  313.544142][T12503]  ? __alloc_skb+0x1db/0x7a0
[  313.544161][T12503]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  313.544189][T12503]  ? __alloc_skb+0x18d/0x7a0
[  313.544214][T12503]  ? __alloc_skb+0x1db/0x7a0
[  313.544242][T12503]  __alloc_skb+0x1db/0x7a0
[  313.544270][T12503]  netlink_ack+0x136/0xb30
[  313.544306][T12503]  ? __kmalloc_cache_noprof+0x14d/0x600
[  313.544325][T12503]  ? nfnetlink_rcv+0x1021/0x28c0
[  313.544356][T12503]  nfnetlink_rcv+0x260c/0x28c0
[  313.544412][T12503]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  313.544451][T12503]  ? ref_tracker_free+0x689/0x830
[  313.544496][T12503]  ? skb_clone+0x246/0x3a0
[  313.544523][T12503]  ? __netlink_deliver_tap+0x811/0x860
[  313.544557][T12503]  ? netlink_deliver_tap+0x2e/0x1b0
[  313.544582][T12503]  ? netlink_deliver_tap+0x2e/0x1b0
[  313.544611][T12503]  netlink_unicast+0x7bd/0x940
[  313.544650][T12503]  netlink_sendmsg+0x813/0xb40
[  313.544696][T12503]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.544734][T12503]  ? apparmor_socket_sendmsg+0x98/0x360
[  313.544756][T12503]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.544780][T12503]  sock_sendmsg_nosec+0x13a/0x180
[  313.544804][T12503]  ____sys_sendmsg+0x54e/0x850
[  313.544835][T12503]  ? __pfx_____sys_sendmsg+0x10/0x10
[  313.544868][T12503]  ? import_iovec+0x73/0xa0
[  313.544896][T12503]  ___sys_sendmsg+0x2a5/0x360
[  313.544919][T12503]  ? __lock_acquire+0x747/0x2de0
[  313.544946][T12503]  ? __pfx____sys_sendmsg+0x10/0x10
[  313.545009][T12503]  ? __fget_files+0x2a/0x420
[  313.545035][T12503]  ? __fget_files+0x3a2/0x420
[  313.545073][T12503]  __x64_sys_sendmsg+0x1b1/0x290
[  313.545100][T12503]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  313.545146][T12503]  do_syscall_64+0x166/0x520
[  313.545167][T12503]  ? trace_irq_disable+0x3b/0x140
[  313.545187][T12503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.545207][T12503]  ? clear_bhb_loop+0x70/0xc0
[  313.545233][T12503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.545253][T12503] RIP: 0033:0x7f00f099e159
[  313.545273][T12503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.545289][T12503] RSP: 002b:00007f00f18e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  313.545313][T12503] RAX: ffffffffffffffda RBX: 00007f00f0c25fa0 RCX: 00007f00f099e159
[  313.545327][T12503] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003
[  313.545340][T12503] RBP: 00007f00f18e4090 R08: 0000000000000000 R09: 0000000000000000
[  313.545352][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.545364][T12503] R13: 00007f00f0c26038 R14: 00007f00f0c25fa0 R15: 00007ffd3fc466f8
[  313.545396][T12503]  </TASK>
[  313.903726][T12510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'.
[  313.903747][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'.
[  313.903758][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'.
[  313.904251][T12510] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1582'.
[  314.052411][T12514] netlink: 'syz.0.1583': attribute type 3 has an invalid length.
[  314.124313][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'.
[  314.365550][T12535] netlink: Invalid conntrack timeout
[  314.366247][T12535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.572009][T12541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.572853][T12541] syzkaller0: entered promiscuous mode
[  314.572875][T12541] syzkaller0: entered allmulticast mode
[  314.684044][T12545] sch_tbf: burst 255 is lower than device ip6gretap0 mtu (1448) !
[  314.883717][T12556] FAULT_INJECTION: forcing a failure.
[  314.883717][T12556] name failslab, interval 1, probability 0, space 0, times 0
[  314.883754][T12556] CPU: 1 UID: 0 PID: 12556 Comm: syz.0.1592 Not tainted syzkaller #0 PREEMPT(full) 
[  314.883778][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  314.883791][T12556] Call Trace:
[  314.883800][T12556]  <TASK>
[  314.883809][T12556]  dump_stack_lvl+0xe8/0x150
[  314.883844][T12556]  should_fail_ex+0x410/0x560
[  314.883871][T12556]  ? __alloc_skb+0x1db/0x7a0
[  314.883894][T12556]  should_failslab+0xa8/0x100
[  314.883919][T12556]  ? __alloc_skb+0x1db/0x7a0
[  314.883940][T12556]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  314.883970][T12556]  ? __alloc_skb+0x18d/0x7a0
[  314.883993][T12556]  ? __alloc_skb+0x1db/0x7a0
[  314.884022][T12556]  __alloc_skb+0x1db/0x7a0
[  314.884049][T12556]  netlink_ack+0x136/0xb30
[  314.884085][T12556]  ? __kmalloc_cache_noprof+0x14d/0x600
[  314.884104][T12556]  ? nfnetlink_rcv+0x1021/0x28c0
[  314.884140][T12556]  nfnetlink_rcv+0x260c/0x28c0
[  314.884204][T12556]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  314.884248][T12556]  ? ref_tracker_free+0x689/0x830
[  314.884298][T12556]  ? skb_clone+0x246/0x3a0
[  314.884327][T12556]  ? __netlink_deliver_tap+0x811/0x860
[  314.884366][T12556]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.884394][T12556]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.884430][T12556]  netlink_unicast+0x7bd/0x940
[  314.884469][T12556]  netlink_sendmsg+0x813/0xb40
[  314.884511][T12556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.884558][T12556]  ? apparmor_socket_sendmsg+0x98/0x360
[  314.884583][T12556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.884611][T12556]  sock_sendmsg_nosec+0x13a/0x180
[  314.884635][T12556]  ____sys_sendmsg+0x54e/0x850
[  314.884668][T12556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.884703][T12556]  ? import_iovec+0x73/0xa0
[  314.884732][T12556]  ___sys_sendmsg+0x2a5/0x360
[  314.884757][T12556]  ? __lock_acquire+0x747/0x2de0
[  314.884783][T12556]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.884850][T12556]  ? __fget_files+0x2a/0x420
[  314.884876][T12556]  ? __fget_files+0x3a2/0x420
[  314.884914][T12556]  __x64_sys_sendmsg+0x1b1/0x290
[  314.884944][T12556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  314.884995][T12556]  do_syscall_64+0x166/0x520
[  314.885017][T12556]  ? trace_irq_disable+0x3b/0x140
[  314.885034][T12556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.885050][T12556]  ? clear_bhb_loop+0x70/0xc0
[  314.885075][T12556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.885095][T12556] RIP: 0033:0x7f671ed9e159
[  314.885115][T12556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.885131][T12556] RSP: 002b:00007f671cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.885154][T12556] RAX: ffffffffffffffda RBX: 00007f671f025fa0 RCX: 00007f671ed9e159
[  314.885169][T12556] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003
[  314.885182][T12556] RBP: 00007f671cff6090 R08: 0000000000000000 R09: 0000000000000000
[  314.885194][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  314.885207][T12556] R13: 00007f671f026038 R14: 00007f671f025fa0 R15: 00007fff242c4668
[  314.885240][T12556]  </TASK>
[  315.146624][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1594'.
[  315.146658][T12561] netlink: 'syz.3.1594': attribute type 8 has an invalid length.
[  315.146671][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1594'.
[  315.384724][T12541] tipc: Resetting bearer <eth:syzkaller0>
[  315.495539][T12541] tipc: Disabling bearer <eth:syzkaller0>
[  315.543311][T12566] veth0_to_bond: entered allmulticast mode
[  315.702174][T12583] xt_CT: You must specify a L4 protocol and not use inversions on it
[  316.099917][T12589] FAULT_INJECTION: forcing a failure.
[  316.099917][T12589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.099954][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.2.1604 Not tainted syzkaller #0 PREEMPT(full) 
[  316.099977][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  316.099990][T12589] Call Trace:
[  316.099998][T12589]  <TASK>
[  316.100012][T12589]  dump_stack_lvl+0xe8/0x150
[  316.100047][T12589]  should_fail_ex+0x410/0x560
[  316.100074][T12589]  _copy_to_user+0x31/0xb0
[  316.100101][T12589]  simple_read_from_buffer+0xe1/0x170
[  316.100135][T12589]  proc_fail_nth_read+0x1bb/0x230
[  316.100165][T12589]  ? common_file_perm+0x20e/0x2b0
[  316.100193][T12589]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  316.100228][T12589]  ? rw_verify_area+0x24a/0x4c0
[  316.100260][T12589]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  316.100290][T12589]  vfs_read+0x213/0xa80
[  316.100324][T12589]  ? __pfx___mutex_lock+0x10/0x10
[  316.100349][T12589]  ? __pfx_vfs_read+0x10/0x10
[  316.100376][T12589]  ? __fget_files+0x2a/0x420
[  316.100408][T12589]  ? __fget_files+0x3a2/0x420
[  316.100434][T12589]  ? __fget_files+0x2a/0x420
[  316.100472][T12589]  ksys_read+0x150/0x270
[  316.100504][T12589]  ? __pfx_ksys_read+0x10/0x10
[  316.100547][T12589]  do_syscall_64+0x166/0x520
[  316.100571][T12589]  ? trace_irq_disable+0x3b/0x140
[  316.100591][T12589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.100612][T12589]  ? clear_bhb_loop+0x70/0xc0
[  316.100648][T12589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.100668][T12589] RIP: 0033:0x7f00f095e98e
[  316.100688][T12589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  316.100706][T12589] RSP: 002b:00007f00f18e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  316.100729][T12589] RAX: ffffffffffffffda RBX: 00007f00f18e46c0 RCX: 00007f00f095e98e
[  316.100744][T12589] RDX: 000000000000000f RSI: 00007f00f18e40a0 RDI: 0000000000000004
[  316.100757][T12589] RBP: 00007f00f18e4090 R08: 0000000000000000 R09: 0000000000000000
[  316.100770][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  316.100783][T12589] R13: 00007f00f0c26038 R14: 00007f00f0c25fa0 R15: 00007ffd3fc466f8
[  316.100818][T12589]  </TASK>
[  316.265358][T12593] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  317.129770][T12611] netlink: 'syz.2.1609': attribute type 1 has an invalid length.
[  317.192337][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1609'.
[  317.289140][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  318.829559][T12593] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  318.839044][T12597] erspan1: entered allmulticast mode
[  318.851626][T12605] syz.1.1605 (12605) used obsolete PPPIOCDETACH ioctl
[  318.870325][T12610] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  318.899848][T12616] netlink: 'syz.0.1610': attribute type 1 has an invalid length.
[  319.078489][T12616] 8021q: adding VLAN 0 to HW filter on device bond3
[  319.128974][T12618] bond3: (slave gretap2): making interface the new active one
[  319.130268][T12618] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  319.294052][T12623] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  319.295504][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1614'.
[  319.295539][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'.
[  319.349447][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'.
[  319.407132][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'.
[  319.428844][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'.
[  319.492231][T12637] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.492419][T12637] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.499533][T12637] bridge_slave_0: entered allmulticast mode
[  319.554553][T12637] bridge_slave_0: entered promiscuous mode
[  319.557942][T12637] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.558053][T12637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.593133][T12640] netlink: 'syz.4.1618': attribute type 2 has an invalid length.
[  319.618934][T12640] “: entered promiscuous mode
[  319.740517][T12642] netlink: 'syz.2.1619': attribute type 46 has an invalid length.
[  319.870286][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'.
[  319.959296][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'.
[  320.339050][T12647] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1620'.
[  320.418533][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'.
[  320.846157][T12703] syzkaller0: entered promiscuous mode
[  320.846181][T12703] syzkaller0: entered allmulticast mode
[  321.360189][T12725] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  321.602981][T12730] syzkaller0: entered promiscuous mode
[  321.603008][T12730] syzkaller0: entered allmulticast mode
[  322.233177][T12764] netlink: 'syz.3.1647': attribute type 1 has an invalid length.
[  322.372010][T12772] netlink: 'syz.3.1647': attribute type 1 has an invalid length.
[  323.587049][T12792] netlink: 'syz.0.1650': attribute type 1 has an invalid length.
[  323.587073][T12792] netlink: 'syz.0.1650': attribute type 3 has an invalid length.
[  323.587085][T12792] __nla_validate_parse: 2 callbacks suppressed
[  323.587096][T12792] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1650'.
[  324.652088][T12764] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  324.713406][T12772] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  324.818162][T12798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1652'.
[  324.818723][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'.
[  324.841707][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'.
[  325.727392][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.729899][T12857] netlink: 'syz.2.1659': attribute type 10 has an invalid length.
[  326.488564][T12877] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  326.504391][T12881] Cannot find del_set index 4 as target
[  326.599666][T12881] bridge_slave_1 (unregistering): left allmulticast mode
[  326.599694][T12881] bridge_slave_1 (unregistering): left promiscuous mode
[  326.599787][T12881] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.630743][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'.
[  326.696225][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'.
[  326.696250][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1667'.
[  327.202203][T12914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1673'.
[  327.216891][T12918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1673'.
[  327.268923][T12921] netlink: 'syz.0.1674': attribute type 10 has an invalid length.
[  327.269244][T12920] netlink: 'syz.0.1674': attribute type 10 has an invalid length.
[  327.291393][T12921] syz_tun: entered promiscuous mode
[  327.327592][T12922] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1674'.
[  327.357012][T12921] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  327.477799][T12924] netlink: 'syz.3.1675': attribute type 6 has an invalid length.
[  328.461517][T12957] lo speed is unknown, defaulting to 1000
[  329.106959][T12988] __nla_validate_parse: 2 callbacks suppressed
[  329.106981][T12988] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1692'.
[  329.403913][T12996] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  329.670533][T13006] ±’)”ėfl: renamed from lo (while UP)
[  330.169554][T13026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1703'.
[  330.221084][T13026] openvswitch: netlink: Multiple metadata blocks provided
[  330.303989][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1708'.
[  330.370203][T13038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  330.370225][T13038] IPv6: NLM_F_CREATE should be set when creating new route
[  330.389602][T13039] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  330.531871][T13046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1710'.
[  330.619474][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1711'.
[  330.857770][T13054] netlink: 'syz.4.1711': attribute type 10 has an invalid length.
[  330.857807][T13054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1711'.
[  330.869362][T13054] dummy0: entered promiscuous mode
[  330.913479][T13059] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  330.916807][T13059] syzkaller1: entered promiscuous mode
[  330.916830][T13059] syzkaller1: entered allmulticast mode
[  331.136549][T13068] bond0: (slave gretap0): Opening slave failed
[  331.854529][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'.
[  331.918902][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'.
[  331.925189][T13090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1723'.
[  331.963026][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'.
[  332.164587][T13107] x_tables: duplicate entry at hook 2
[  332.412322][T13114] A link change request failed with some changes committed already. Interface 
0
4±’)”ėfl may have been left with an inconsistent configuration, please check.
[  332.715246][T13124] netlink: 'syz.3.1732': attribute type 1 has an invalid length.
[  333.386731][T13134] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  333.964484][T13142] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  333.964525][T13142] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.425597][T13156] netlink: 'syz.0.1740': attribute type 62 has an invalid length.
[  334.449001][T13156] __nla_validate_parse: 3 callbacks suppressed
[  334.449024][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'.
[  335.334680][T13195] ip_tables: iptables: counters copy to user failed while replacing table
[  335.338829][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'.
[  335.696065][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1749'.
[  335.696092][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1749'.
[  335.698151][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  335.698169][   T30] audit: type=1800 audit(1790063904.004:73): pid=13214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1749" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1712 res=0 errno=0
[  335.719567][T13217] netlink: 'syz.1.1753': attribute type 21 has an invalid length.
[  335.724058][T13219] netlink: 'syz.1.1753': attribute type 21 has an invalid length.
[  335.731918][T13220] netlink: Invalid conntrack timeout
[  335.731950][T13220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.076258][   T30] audit: type=1804 audit(1790063904.384:74): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1755" name="/newroot/339/memory.events" dev="tmpfs" ino=1776 res=1 errno=0
[  336.076426][   T30] audit: type=1800 audit(1790063904.384:75): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1755" name="memory.events" dev="tmpfs" ino=1776 res=0 errno=0
[  336.275091][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  336.626398][T13245] bond6: option mode: invalid value (7)
[  336.656136][T13245] bond6 (unregistering): Released all slaves
[  336.740345][T13266] sctp: [Deprecated]: syz.0.1762 (pid 13266) Use of int in max_burst socket option.
[  336.740345][T13266] Use struct sctp_assoc_value instead
[  337.074271][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'.
[  337.114295][T13284] netlink: 'syz.3.1766': attribute type 11 has an invalid length.
[  337.376114][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'.
[  337.378451][T13300] x_tables: duplicate underflow at hook 1
[  338.003733][T13315] netlink: 'syz.4.1774': attribute type 1 has an invalid length.
[  338.056851][T13315] bond3: entered promiscuous mode
[  338.058857][T13315] 8021q: adding VLAN 0 to HW filter on device bond3
[  338.250205][T13316] 8021q: adding VLAN 0 to HW filter on device bond3
[  338.250589][T13316] bond3: (slave gre3): The slave device specified does not support setting the MAC address
[  338.264109][T13316] bond3: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  338.274446][T13316] bond3: (slave gre3): making interface the new active one
[  338.274469][T13316] gre3: entered promiscuous mode
[  338.295975][T13316] bond3: (slave gre3): Enslaving as an active interface with an up link
[  338.719377][T13320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1774'.
[  338.719405][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'.
[  338.719442][T13320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1774'.
[  338.736662][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'.
[  338.761390][T13343] sch_tbf: burst 65537 is lower than device lo mtu (11337746) !
[  338.815191][T13320] bond3 (unregistering): (slave gre3): Releasing backup interface
[  338.815768][T13320] gre3: left promiscuous mode
[  338.846024][T13320] bond3 (unregistering): Released all slaves
[  339.024832][T13351] sch_tbf: burst 65537 is lower than device lo mtu (11337746) !
[  339.251045][T13361] netlink: 'syz.3.1782': attribute type 5 has an invalid length.
[  339.279586][T13361] netlink: 'syz.3.1782': attribute type 1 has an invalid length.
[  339.480249][T13364] tipc: Resetting bearer <eth:team0>
[  339.483927][T13364] tipc: Resetting bearer <eth:team0>
[  339.595860][ T5719] lo speed is unknown, defaulting to 1000
[  339.597095][T13375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.134472][T13399] __nla_validate_parse: 1 callbacks suppressed
[  340.134496][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  340.295469][T13405] netlink: 'syz.2.1797': attribute type 8 has an invalid length.
[  340.299008][T13408] netlink: 'syz.2.1797': attribute type 8 has an invalid length.
[  340.707916][T13431] syzkaller0: entered promiscuous mode
[  340.707942][T13431] syzkaller0: entered allmulticast mode
[  340.809507][T13443] x_tables: duplicate underflow at hook 1
[  341.157489][T13446] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  341.159559][T13446] bond2 (unregistering): Released all slaves
[  341.285493][T13460] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  341.302781][T13460] bond2 (unregistering): Released all slaves
[  341.541093][T13471] netlink: 'syz.4.1809': attribute type 1 has an invalid length.
[  341.641090][T13471] bond3: entered promiscuous mode
[  341.641510][T13471] bond3: entered allmulticast mode
[  341.641950][T13471] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.653749][T13477] erspan1: entered allmulticast mode
[  341.662340][T13477] bond3: (slave erspan1): making interface the new active one
[  341.662365][T13477] erspan1: entered promiscuous mode
[  341.669261][T13477] bond3: (slave erspan1): Enslaving as an active interface with an up link
[  341.737730][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'.
[  341.770213][T13476] x_tables: ip_tables: icmp match: only valid for protocol 1
[  341.829244][T13485] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.1812'.
[  342.166641][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'.
[  342.167025][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'.
[  342.169221][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'.
[  342.175324][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'.
[  342.413071][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1817'.
[  342.436034][T13515] x_tables: duplicate entry at hook 2
[  342.763547][T13531] tipc: Enabled bearer <eth:vlan0>, priority 30
[  342.951850][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'.
[  343.065470][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.065522][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.065557][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.065590][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.139741][T13551] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  343.227385][T13554] geneve2: entered promiscuous mode
[  344.004618][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1833'.
[  344.059760][T13588] netlink: 'syz.0.1833': attribute type 10 has an invalid length.
[  344.106455][    T9] tipc: Node number set to 3349069908
[  344.107862][T13583] syzkaller0: entered promiscuous mode
[  344.107877][T13583] syzkaller0: entered allmulticast mode
[  344.126448][T13586] netlink: 'syz.0.1833': attribute type 10 has an invalid length.
[  344.284419][T13589] lo speed is unknown, defaulting to 1000
[  344.478583][T13595] gre1: entered promiscuous mode
[  344.693897][T13621] netlink: 'syz.1.1842': attribute type 1 has an invalid length.
[  344.696954][T13612] bond4: entered promiscuous mode
[  344.696979][T13612] bond4: entered allmulticast mode
[  344.700853][T13612] 8021q: adding VLAN 0 to HW filter on device bond4
[  344.986823][T13630] ip_tables: iptables: counters copy to user failed while replacing table
[  345.153788][T13636] __nla_validate_parse: 6 callbacks suppressed
[  345.153811][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  345.153835][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  345.218417][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'.
[  345.722843][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'.
[  345.722871][T13655] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1849'.
[  346.319493][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'.
[  346.555918][T13688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1855'.
[  346.809081][T13697] netlink: 'syz.2.1859': attribute type 1 has an invalid length.
[  346.888692][T13706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  346.909728][T13705] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  347.260991][T13713] bond1: entered allmulticast mode
[  347.261016][T13713] bridge3: entered allmulticast mode
[  347.288068][T13713] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  347.448576][T13710] can: request_module (can-proto-0) failed.
[  347.490395][T13741] tipc: Started in network mode
[  347.490427][T13741] tipc: Node identity 5ea43215d33e, cluster identity 4711
[  347.490594][T13741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.669045][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1864'.
[  347.692468][T13719] syzkaller0: entered promiscuous mode
[  347.692495][T13719] syzkaller0: entered allmulticast mode
[  347.694625][T13719] tipc: Resetting bearer <eth:syzkaller0>
[  347.994864][ T6655] tipc: Resetting bearer <eth:syzkaller0>
[  348.022553][T13717] tipc: Resetting bearer <eth:syzkaller0>
[  348.276530][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'.
[  348.364339][T13763] netlink: zone id is out of range
[  348.364809][T13763] netlink: zone id is out of range
[  348.364839][T13763] netlink: zone id is out of range
[  348.364847][T13763] netlink: zone id is out of range
[  348.364855][T13763] netlink: zone id is out of range
[  348.365164][T13763] netlink: zone id is out of range
[  348.365173][T13763] netlink: zone id is out of range
[  350.087069][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'.
[  350.656879][T13717] tipc: Disabling bearer <eth:syzkaller0>
[  350.711049][ T5719] tipc: Node number set to 2375692821
[  350.782199][T10347] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.782548][T10354] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.808540][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'.
[  350.822409][T10354] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.822455][T10354] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.928131][T13785] vlan2: entered promiscuous mode
[  350.928154][T13785] bridge0: entered promiscuous mode
[  350.940795][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1875'.
[  351.144806][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'.
[  351.338000][T13805] syzkaller1: entered promiscuous mode
[  351.338028][T13805] syzkaller1: entered allmulticast mode
[  351.371245][T13807] netlink: 'syz.1.1883': attribute type 21 has an invalid length.
[  351.371337][T13807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1883'.
[  352.218262][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1886'.
[  352.394838][T13832] bond0: (slave gretap0): Opening slave failed
[  352.556224][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  352.556249][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  352.560556][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1891'.
[  353.175541][T13858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'.
[  353.614135][T13882] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1907'.
[  353.739223][T13888] syzkaller0: entered promiscuous mode
[  353.739246][T13888] syzkaller0: entered allmulticast mode
[  353.741117][T13887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.745803][T13885] netlink: 'syz.2.1908': attribute type 1 has an invalid length.
[  353.748758][T13885] gretap0: entered promiscuous mode
[  353.946856][T13888] tipc: Resetting bearer <eth:syzkaller0>
[  353.998296][T13899] netlink: 'syz.3.1913': attribute type 5 has an invalid length.
[  354.000455][T13888] tipc: Disabling bearer <eth:syzkaller0>
[  354.140852][T13901] bond6: option lp_interval: invalid value (0)
[  354.140873][T13901] bond6: option lp_interval: allowed values 1 - 2147483647
[  354.163832][T13901] bond6 (unregistering): Released all slaves
[  355.012073][T13950] netlink: 'syz.0.1925': attribute type 4 has an invalid length.
[  355.169871][T13957] netlink: 'syz.3.1927': attribute type 6 has an invalid length.
[  355.381407][T13969] ieee802154 phy1 wpan1: encryption failed: -22
[  355.903685][T13984] 8021q: adding VLAN 0 to HW filter on device bond6
[  355.904448][T13990] syz_tun: entered allmulticast mode
[  356.176483][T14004] net_ratelimit: 4 callbacks suppressed
[  356.176568][T14004] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  356.616760][T14022] IPVS: set_ctl: invalid protocol: 43 172.20.20.11:19999
[  356.737934][T14028] SET target dimension over the limit!
[  356.761757][T14028] __nla_validate_parse: 6 callbacks suppressed
[  356.761806][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'.
[  356.765198][T14028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1946'.
[  356.765221][T14028] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  356.915091][T14031] tipc: New replicast peer: 127.0.0.1
[  356.918283][T14031] tipc: Enabled bearer <udp:syz0>, priority 10
[  357.245903][T14011] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  357.248887][T14045] Bluetooth: hci0: unsupported parameter 5134
[  357.248908][T14045] Bluetooth: hci0: unsupported parameter 8192
[  357.248921][T14045] Bluetooth: hci0: unsupported parameter 5134
[  357.248934][T14045] Bluetooth: hci0: unsupported parameter 8192
[  357.687170][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'.
[  357.687198][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1955'.
[  357.687472][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'.
[  357.687489][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1955'.
[  357.997229][T14071] x_tables: duplicate underflow at hook 2
[  358.000664][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'.
[  358.004320][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'.
[  358.004343][T14071] netlink: 'syz.0.1961': attribute type 2 has an invalid length.
[  358.007229][T14071] netlink: 'syz.0.1961': attribute type 30 has an invalid length.
[  358.239455][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'.
[  358.290559][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'.
[  358.483454][ T5634] Bluetooth: hci2: command 0x0406 tx timeout
[  358.820488][T14116] netlink: 'syz.3.1967': attribute type 8 has an invalid length.
[  359.744744][T14158] 8021q: VLANs not supported on ip6tnl0
[  360.097685][T14168] netlink: 'syz.0.1977': attribute type 2 has an invalid length.
[  360.420431][T14181] dvmrp0: entered allmulticast mode
[  360.546214][T14181] dvmrp1: entered allmulticast mode
[  360.694122][T14185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  360.756301][T14185] netlink: 'syz.1.1981': attribute type 4 has an invalid length.
[  360.993155][T14199] tipc: Enabled bearer <udp:syz2>, priority 10
[  361.096431][T14202] netlink: ct_mark mask cannot be 0
[  361.096466][T14202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.194516][ T5280] veth1_vlan: left promiscuous mode
[  361.749806][T14236] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  361.817346][T14211] __nla_validate_parse: 19 callbacks suppressed
[  361.817370][T14211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'.
[  361.817422][T14211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'.
[  361.856290][T14220] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [sy]
[  361.939371][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'.
[  361.939444][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'.
[  362.192518][T14247] sctp: [Deprecated]: syz.3.1997 (pid 14247) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.192518][T14247] Use struct sctp_sack_info instead
[  362.297368][T14254] geneve0: entered promiscuous mode
[  362.639002][T14251] geneve0: left promiscuous mode
[  362.885773][T14277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2002'.
[  362.887328][T14277] openvswitch: netlink: EtherType 2 is less than min 600
[  363.175276][T14293] netlink: 'syz.0.2007': attribute type 21 has an invalid length.
[  363.175301][T14293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2007'.
[  363.175354][T14293] netlink: 'syz.0.2007': attribute type 4 has an invalid length.
[  363.175368][T14293] netlink: 'syz.0.2007': attribute type 5 has an invalid length.
[  363.175379][T14293] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2007'.
[  363.198329][T14294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2007'.
[  363.255166][T14297] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  363.475468][T14310] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2011'.
[  363.479067][T14311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2011'.
[  363.961814][T14330] syzkaller0: entered promiscuous mode
[  363.961841][T14330] syzkaller0: entered allmulticast mode
[  365.996547][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  365.996816][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.008613][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.008848][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.009052][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.009288][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.011693][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.011905][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.014600][T14402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.287222][T14407] syzkaller1: entered promiscuous mode
[  366.287249][T14407] syzkaller1: entered allmulticast mode
[  366.532785][T14414] netlink: 'syz.0.2037': attribute type 30 has an invalid length.
[  366.983704][T14429] gre2: entered promiscuous mode
[  367.989157][T14464] __nla_validate_parse: 2 callbacks suppressed
[  367.989183][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'.
[  368.140964][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  368.556051][T14482] atomic_op ffff88802b28e1e0 conn xmit_atomic 0000000000000000
[  368.564495][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'.
[  369.083585][T14503] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  369.366702][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[  369.470303][T14518] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  369.492711][T14518] bond5 (unregistering): Released all slaves
[  369.558228][T14520] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2064'.
[  369.634698][T14523] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  369.922503][T14537] netlink: 'syz.0.2069': attribute type 1 has an invalid length.
[  370.061556][T14537] bond5: entered promiscuous mode
[  370.061631][T14537] bond5: entered allmulticast mode
[  370.062092][T14537] 8021q: adding VLAN 0 to HW filter on device bond5
[  370.063812][T14543] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2069'.
[  370.085894][T14538] erspan1: entered allmulticast mode
[  370.102381][T14538] bond5: (slave erspan1): making interface the new active one
[  370.102406][T14538] erspan1: entered promiscuous mode
[  370.115270][T14538] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  370.155198][T14517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2064'.
[  370.224879][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'.
[  370.295442][T14556] ip_vti0: entered allmulticast mode
[  370.460529][T14558] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  371.013609][T14581] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2078'.
[  371.416816][T14594] nbd: must specify a device to reconfigure
[  371.569087][T14588] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.621421][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.621460][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.621499][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.621523][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.621555][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.621580][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.003054][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  374.166580][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  374.577667][T14680] ieee802154 phy1 wpan1: encryption failed: -22
[  374.608896][T14688] netlink: 'syz.2.2101': attribute type 1 has an invalid length.
[  374.704631][T14699] xt_REDIRECT: bad MAP_IPS.
[  374.796930][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'.
[  374.841842][T14688] 8021q: adding VLAN 0 to HW filter on device bond2
[  374.894061][T14707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2103'.
[  374.929075][T14704] bond2: (slave geneve3): making interface the new active one
[  374.955338][T14704] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  375.176777][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2104'.
[  375.409548][T14724] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  375.580077][T14739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2109'.
[  375.580108][T14739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2109'.
[  375.690769][T14751] net_ratelimit: 24 callbacks suppressed
[  375.690792][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.691048][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.696069][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.696290][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.696502][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.696720][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.696926][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.697131][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.697335][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.697549][T14751] openvswitch: netlink: Missing key (keys=40, expected=100)
[  375.735206][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'.
[  376.100603][T14770] Bluetooth: MGMT ver 1.23
[  376.362057][T14782] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2120'.
[  376.416337][T14782] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  376.441843][ T5634] block nbd3: Receive control failed (result -32)
[  376.841857][T14811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2125'.
[  377.308682][T14831] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.308713][T14831] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.534966][T14831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.534994][T14831] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.803526][ T5634] block nbd4: Receive control failed (result -107)
[  377.910322][T14849] netlink: 'syz.3.2135': attribute type 1 has an invalid length.
[  377.959216][T14849] bond9: entered promiscuous mode
[  377.961342][T14849] 8021q: adding VLAN 0 to HW filter on device bond9
[  378.365325][T14881] netlink: 'syz.1.2141': attribute type 12 has an invalid length.
[  378.737663][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  378.802678][T14908] bridge_slave_1: left allmulticast mode
[  378.802708][T14908] bridge_slave_1: left promiscuous mode
[  378.802932][T14908] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.852539][T14908] bond0: (slave bond_slave_0): Releasing backup interface
[  378.903599][T14908] bond0: (slave bond_slave_1): Releasing backup interface
[  378.939600][T14908] team0: Port device team_slave_0 removed
[  378.952978][T14908] team0: Port device team_slave_1 removed
[  379.052612][T14914] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  379.471435][T14942] xt_hashlimit: size too large, truncated to 1048576
[  379.492414][T14943] xt_hl: Unknown Hop Limit match mode: 4
[  379.639548][T14952] __nla_validate_parse: 17 callbacks suppressed
[  379.639573][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  379.855723][T14963] syzkaller0: entered promiscuous mode
[  379.855749][T14963] syzkaller0: entered allmulticast mode
[  379.942354][T14963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2156'.
[  380.080861][T14975] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2161'.
[  380.080890][T14975] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2161'.
[  380.506735][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'.
[  380.735322][T15004] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2167'.
[  381.777943][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2177'.
[  381.935357][T15053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2180'.
[  381.935382][T15053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2180'.
[  381.935396][T15053] netlink: 8908 bytes leftover after parsing attributes in process `syz.1.2180'.
[  382.442933][ T6658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.443138][ T6658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.505190][T15079] syzkaller0: entered promiscuous mode
[  382.505214][T15079] syzkaller0: entered allmulticast mode
[  382.533257][T15079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.648024][T15086] tipc: Resetting bearer <eth:syzkaller0>
[  382.679465][T15088] ±’)”ėfl: entered allmulticast mode
[  382.749553][T15094] syzkaller0: entered promiscuous mode
[  382.749571][T15094] syzkaller0: entered allmulticast mode
[  382.828642][T15087] ±’)”ėfl: left allmulticast mode
[  383.156853][T15098] tipc: Resetting bearer <eth:vlan0>
[  383.391450][T15098] bond1: left allmulticast mode
[  383.391478][T15098] bridge3: left allmulticast mode
[  383.687318][T15077] tipc: Resetting bearer <eth:syzkaller0>
[  383.755195][T15077] tipc: Disabling bearer <eth:syzkaller0>
[  383.842190][ T6657] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.842228][ T6657] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.842918][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.842947][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.842981][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.843005][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  383.843038][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.843062][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.047730][T15125] smbdirect: ib_dev[sy] removed
[  384.260277][T15134] netlink: 'syz.0.2202': attribute type 8 has an invalid length.
[  384.396292][T15140] veth1_to_bond: entered allmulticast mode
[  384.412487][T15142] veth1_to_bond: entered promiscuous mode
[  384.549823][T15140] veth1_to_bond (unregistering): left allmulticast mode
[  384.549871][T15140] veth1_to_bond (unregistering): left promiscuous mode
[  384.741346][T15160] __nla_validate_parse: 6 callbacks suppressed
[  384.741369][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'.
[  384.803499][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'.
[  384.971695][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'.
[  385.055020][T15175] bond0: (slave bond_slave_1): Releasing backup interface
[  385.365019][T15200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2217'.
[  385.365065][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'.
[  385.461737][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2218'.
[  385.463064][T15202] netlink: 'syz.4.2217': attribute type 10 has an invalid length.
[  385.463167][T15202] tipc: Resetting bearer <eth:team0>
[  385.464954][T15200] netlink: 'syz.4.2217': attribute type 10 has an invalid length.
[  385.465218][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'.
[  385.465285][T15206] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  385.465299][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2218'.
[  385.495497][T15202] tipc: Disabling bearer <eth:team0>
[  385.609571][T15214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'.
[  385.825652][T15215] veth1_vlan: entered promiscuous mode
[  385.825743][T15215] macvlan0: entered promiscuous mode
[  386.474865][T15243] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2225'.
[  386.542325][T15245] net_ratelimit: 11 callbacks suppressed
[  386.542351][T15245] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  386.666280][T15252] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  386.760929][T15252] veth7: entered allmulticast mode
[  386.771872][T15252] bond3: (slave veth7): Enslaving as an active interface with a down link
[  386.828209][T15252] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  386.860235][T15252] macvlan2: entered promiscuous mode
[  386.860262][T15252] macvlan2: entered allmulticast mode
[  386.867234][T15252] bond3: entered promiscuous mode
[  386.874674][T15252] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  386.896343][T15252] bond3: left promiscuous mode
[  387.076021][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033313000: rx timeout, send abort
[  387.112265][T15272] netlink: 'syz.4.2228': attribute type 3 has an invalid length.
[  387.112290][T15272] netlink: 'syz.4.2228': attribute type 1 has an invalid length.
[  387.112305][T15272] NCSI netlink: No device for ifindex 0
[  387.218592][T15275] netlink: 'syz.3.2231': attribute type 2 has an invalid length.
[  387.274438][T15275] netlink: 'syz.3.2231': attribute type 2 has an invalid length.
[  387.576227][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033310000: rx timeout, send abort
[  387.577417][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033313000: abort rx timeout. Force session deactivation
[  388.076286][    C0] vcan0: j1939_tp_rxtimer: 0xffff888033310000: abort rx timeout. Force session deactivation
[  388.604195][T15322] dummy0: entered allmulticast mode
[  388.608310][T15322] block nbd5: shutting down sockets
[  388.867438][T15338] netlink: 'syz.4.2251': attribute type 3 has an invalid length.
[  388.949556][T15346] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  389.594225][T15377] xt_l2tp: wrong L2TP version: 0
[  390.161822][T15399] validate_nla: 1 callbacks suppressed
[  390.161903][T15399] netlink: 'syz.2.2264': attribute type 1 has an invalid length.
[  390.412873][T15418] xt_policy: output policy not valid in PREROUTING and INPUT
[  390.858307][T15433] tipc: Resetting bearer <eth:vlan0>
[  391.011014][T15456] __nla_validate_parse: 9 callbacks suppressed
[  391.011039][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'.
[  391.047911][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'.
[  391.069199][T15456] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  391.210872][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'.
[  391.356671][T15461] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  391.376818][T15461] bond7 (unregistering): Released all slaves
[  391.478037][T15470] netlink: 'syz.2.2281': attribute type 10 has an invalid length.
[  391.478676][T15470] netlink: 'syz.2.2281': attribute type 10 has an invalid length.
[  391.480963][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  391.484850][T15472] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2280'.
[  391.484869][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2280'.
[  391.490999][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'.
[  391.526661][T15470] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  391.547739][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'.
[  391.709589][T15472] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  392.292598][T15498] x_tables: duplicate underflow at hook 2
[  392.306201][T15498] ip_tables: iptables: counters copy to user failed while replacing table
[  392.442593][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'.
[  392.534296][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'.
[  392.565495][T15508] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2290'.
[  393.257710][T15521] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  393.355377][T15521] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  394.112698][T15521]  vda: unable to read partition table
[  394.414036][T15545] netlink: 'syz.2.2301': attribute type 9 has an invalid length.
[  394.612097][T15553] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  395.137829][T15577] netlink: 'syz.0.2308': attribute type 1 has an invalid length.
[  395.137857][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.046292][T15609] vti0: entered promiscuous mode
[  397.576073][T15553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  397.874179][T15625] bond7: option packets_per_slave: invalid value (18446744073709551615)
[  397.874209][T15625] bond7: option packets_per_slave: allowed values 0 - 65535
[  397.876056][T15625] bond7 (unregistering): Released all slaves
[  397.946021][T15631] batadv_slave_0: entered promiscuous mode
[  398.212424][T15657] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  398.715925][T15631] batadv_slave_0: left promiscuous mode
[  398.744426][T15680] __nla_validate_parse: 5 callbacks suppressed
[  398.744446][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'.
[  398.830298][T15680] syzkaller1: entered promiscuous mode
[  398.830325][T15680] syzkaller1: entered allmulticast mode
[  399.253260][T15698] syzkaller0: entered promiscuous mode
[  399.253286][T15698] syzkaller0: entered allmulticast mode
[  399.363317][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2341'.
[  399.363361][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'.
[  399.365822][T15702] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.2341'.
[  424.161573][ T5719] page_pool_release_retry() stalled pool shutdown: id 98, 1 inflight 60 sec
[  437.700509][T15723] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2348'.
[  437.700539][T15723] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2348'.
[  438.106266][T15739] netlink: 'syz.4.2351': attribute type 25 has an invalid length.
[  438.147998][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'.
[  438.401650][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'.
[  438.627427][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'.
[  438.753035][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  438.754732][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'.
[  439.103297][T15785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'.
[  439.637045][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'.
[  439.637456][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'.
[  439.663814][T15816] netlink: 'syz.3.2369': attribute type 1 has an invalid length.
[  440.174908][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  440.426264][T15846] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  440.528532][T15850] netlink: 'syz.3.2379': attribute type 4 has an invalid length.
[  440.815309][T15857] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  441.253767][T15878] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[  441.258786][T15885] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[  441.506912][   T30] audit: type=1804 audit(1790064009.814:76): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2390" name="/newroot/477/cgroup.controllers" dev="tmpfs" ino=2477 res=1 errno=0
[  441.506976][   T30] audit: type=1800 audit(1790064009.814:77): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2390" name="cgroup.controllers" dev="tmpfs" ino=2477 res=0 errno=0
[  442.080405][T15914] netlink: 'syz.4.2396': attribute type 1 has an invalid length.
[  442.555540][T15929] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  443.146557][T15943] netlink: 'syz.0.2405': attribute type 11 has an invalid length.
[  443.279869][T15949] SET target dimension over the limit!
[  443.469216][T15957] sctp: [Deprecated]: syz.0.2410 (pid 15957) Use of int in max_burst socket option deprecated.
[  443.469216][T15957] Use struct sctp_assoc_value instead
[  443.814820][T15964] __nla_validate_parse: 13 callbacks suppressed
[  443.814845][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2411'.
[  444.307781][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'.
[  444.336429][T15982] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  444.656059][T15997] xt_hashlimit: size too large, truncated to 1048576
[  444.656084][T15997] xt_hashlimit: max too large, truncated to 1048576
[  444.831987][T16005] openvswitch: netlink: Missing key (keys=40, expected=100)
[  444.832618][T16005] x_tables: duplicate underflow at hook 1
[  445.040807][T16010] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  445.042566][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'.
[  445.070738][T16014] syzkaller1: entered promiscuous mode
[  445.070765][T16014] syzkaller1: entered allmulticast mode
[  446.033907][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'.
[  446.034413][T16046] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2436'.
[  446.063571][T16041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2434'.
[  446.074462][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2438'.
[  446.266790][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2440'.
[  446.345902][T16063] netlink: 'syz.2.2442': attribute type 1 has an invalid length.
[  446.388388][T16063] bond4: entered promiscuous mode
[  446.388470][T16063] bond4: entered allmulticast mode
[  446.388852][T16063] 8021q: adding VLAN 0 to HW filter on device bond4
[  446.475659][T16066] netlink: 'syz.4.2439': attribute type 1 has an invalid length.
[  446.935436][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.935461][T16102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2451'.
[  446.935681][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.935696][T16102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2451'.
[  446.935918][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.937557][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.937770][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.937972][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.984633][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  446.984977][T16102] netlink: 'syz.0.2451': attribute type 32 has an invalid length.
[  447.908731][T16143] macvlan0: entered promiscuous mode
[  448.059763][T16157] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  448.116139][T16160] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  448.138246][T16160] bond7 (unregistering): Released all slaves
[  448.320498][T16167] pim6reg: entered allmulticast mode
[  448.375398][T16167] pim6reg: left allmulticast mode
[  448.439864][T16172] batman_adv: batadv0: Interface deactivated: veth0_virt_wifi
[  448.439894][T16172] batman_adv: batadv0: Removing interface: veth0_virt_wifi
[  448.443966][T16172] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  448.443992][T16172] batman_adv: batadv0: Removing interface: ip6gretap1
[  448.722128][ T5621] Bluetooth: hci4: command 0x0405 tx timeout
[  448.868893][T16192] __nla_validate_parse: 34 callbacks suppressed
[  448.868917][T16192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2470'.
[  448.913467][T16190] ip6erspan0: entered allmulticast mode
[  449.488204][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'.
[  449.518340][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'.
[  449.532974][ T6660] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  449.533022][ T6660] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  449.533056][ T6660] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  449.533089][ T6660] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  449.601914][ T6660] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  449.601962][ T6660] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  449.601996][ T6660] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  449.602028][ T6660] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  449.741304][T16219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  449.785121][T16219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  449.809846][T16219] vlan0: entered promiscuous mode
[  449.809870][T16219] geneve0: entered promiscuous mode
[  449.911274][T16221] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  450.231901][ T5634] block nbd5: Receive control failed (result -32)
[  450.743670][T16263] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  451.449806][T16293] validate_nla: 28 callbacks suppressed
[  451.449822][T16293] netlink: 'syz.4.2493': attribute type 8 has an invalid length.
[  451.472538][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'.
[  453.860891][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2498'.
[  453.877909][T16293] veth7: entered allmulticast mode
[  453.881022][T16309] dvmrp0: left allmulticast mode
[  453.892463][T16309] dvmrp1: left allmulticast mode
[  454.121048][T16321] netlink: 'syz.2.2502': attribute type 16 has an invalid length.
[  454.121279][T16321] netlink: 'syz.2.2502': attribute type 17 has an invalid length.
[  454.172784][T16321] gretap0: left promiscuous mode
[  454.238859][T16321] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.287871][T16321] bridge_slave_0: entered promiscuous mode
[  454.320766][T16321] veth0_vlan: left promiscuous mode
[  454.328090][T16321] veth0_vlan: entered promiscuous mode
[  454.329370][T16321] tipc: Resetting bearer <eth:vlan0>
[  454.344916][T16321] macvlan0: left promiscuous mode
[  454.362620][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.365118][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.367662][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.369920][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2500'.
[  454.410615][T16321] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  454.536468][T16321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2502'.
[  454.550516][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.551680][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.587409][T16321] xt_bpf: check failed: parse error
[  454.631636][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.631978][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.719304][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'.
[  454.719360][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'.
[  454.784974][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'.
[  454.785005][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'.
[  454.896431][T16360] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  454.905391][T16360] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  455.520213][T16381] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  455.656324][T16390] netlink: 'syz.4.2520': attribute type 1 has an invalid length.
[  455.737203][T16390] 8021q: adding VLAN 0 to HW filter on device bond4
[  455.798030][T16407] ip_tables: iptables: counters copy to user failed while replacing table
[  456.279584][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.279929][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280111][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280267][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280438][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280628][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280751][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.280912][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.287913][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.288129][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.288334][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.288546][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.294080][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.299419][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.299699][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.299906][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.300120][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.300387][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.300591][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.314788][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.315151][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.315457][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.315661][T16427] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  456.545639][T16428] syzkaller0: entered promiscuous mode
[  456.545665][T16428] syzkaller0: entered allmulticast mode
[  456.904939][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2531'.
[  459.695318][T16463] pimreg: entered allmulticast mode
[  459.756909][T16470] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2536'.
[  459.779819][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2536'.
[  459.790926][T16463] pimreg: left allmulticast mode
[  459.925377][T16474] ip_tables: iptables: counters copy to user failed while replacing table
[  461.365193][T16522] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2551'.
[  461.665478][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2552'.
[  461.665521][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2552'.
[  461.744491][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2552'.
[  461.744530][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2552'.
[  462.596413][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'.
[  462.606786][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'.
[  462.801631][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'.
[  462.802055][T16565] 8021q: VLANs not supported on ip_vti0
[  463.015557][T16577] netlink: 'syz.4.2565': attribute type 1 has an invalid length.
[  463.169070][T16583] gretap1: entered allmulticast mode
[  463.192768][T16583] bond5: (slave gretap1): making interface the new active one
[  463.194880][T16583] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  501.603487][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  502.628044][T16602] netlink: 'syz.1.2570': attribute type 9 has an invalid length.
[  502.641445][T16600] __nla_validate_parse: 2 callbacks suppressed
[  502.641470][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'.
[  502.645023][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'.
[  502.645510][T16598] tc_dump_action: action bad kind
[  502.646377][T16603] netlink: 271 bytes leftover after parsing attributes in process `syz.3.2572'.
[  502.653827][T16603] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2572'.
[  502.703107][T16598] tap0: tun_chr_ioctl cmd 1074025677
[  502.703234][T16598] tap0: linktype set to 804
[  502.767968][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2569'.
[  502.941542][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'.
[  502.948522][T16610] openvswitch: netlink: Flow actions attr not present in new flow.
[  503.009573][T16629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'.
[  503.276240][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'.
[  503.603575][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'.
[  503.816947][T16672] netlink: 'syz.4.2588': attribute type 4 has an invalid length.
[  503.818035][T16669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2590'.
[  503.822564][T16671] veth1_to_batadv: entered promiscuous mode
[  503.824686][T16671] veth1_to_batadv: left promiscuous mode
[  503.930873][T16677] netlink: 'syz.4.2588': attribute type 4 has an invalid length.
[  503.999594][T16677] netlink: 'syz.4.2588': attribute type 4 has an invalid length.
[  503.999770][T16677] netlink: 'syz.4.2588': attribute type 4 has an invalid length.
[  504.008065][T16677] netlink: 'syz.4.2588': attribute type 4 has an invalid length.
[  504.627323][T16699] netlink: 'syz.2.2594': attribute type 1 has an invalid length.
[  504.674793][ T5634] Bluetooth: hci4: link tx timeout
[  504.679275][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  504.805546][T16699] bond5: (slave geneve4): Opening slave failed
[  504.962916][T16721] x_tables: duplicate entry at hook 1
[  505.094259][T16705] 8021q: adding VLAN 0 to HW filter on device bond5
[  505.305149][T16714] tipc: Resetting bearer <eth:vlan0>
[  505.372140][T16704] lo: entered promiscuous mode
[  505.372325][T16704] tunl0: entered promiscuous mode
[  505.372494][T16704] gre0: entered promiscuous mode
[  505.372643][T16704] gretap0: entered promiscuous mode
[  505.372801][T16704] erspan0: entered promiscuous mode
[  505.372928][T16704] ip_vti0: entered promiscuous mode
[  505.373101][T16704] ip6_vti0: entered promiscuous mode
[  505.374897][T16704] sit0: entered promiscuous mode
[  505.375038][T16704] ip6tnl0: entered promiscuous mode
[  505.375173][T16704] ip6gre0: entered promiscuous mode
[  505.376996][T16704] ip6gretap0: entered promiscuous mode
[  505.377141][T16704] bridge0: entered promiscuous mode
[  505.377276][T16704] bond0: entered promiscuous mode
[  505.377291][T16704] bond_slave_0: entered promiscuous mode
[  505.377492][T16704] team0: entered promiscuous mode
[  505.377506][T16704] team_slave_0: entered promiscuous mode
[  505.378251][T16704] team_slave_1: entered promiscuous mode
[  505.380539][T16704] dummy0: entered promiscuous mode
[  505.380716][T16704] nlmon0: entered promiscuous mode
[  505.380909][T16704] batadv0: entered promiscuous mode
[  505.431291][T16704] vxcan0: entered promiscuous mode
[  505.431490][T16704] vxcan1: entered promiscuous mode
[  505.431644][T16704] veth0: entered promiscuous mode
[  505.431940][T16704] veth1: entered promiscuous mode
[  505.432108][T16704] wg0: entered promiscuous mode
[  505.432252][T16704] wg1: entered promiscuous mode
[  505.432393][T16704] wg2: entered promiscuous mode
[  505.432562][T16704] veth0_to_bridge: entered promiscuous mode
[  505.432825][T16704] veth0_to_bond: entered promiscuous mode
[  505.433180][T16704] veth0_to_team: entered promiscuous mode
[  505.440673][T16704] veth1_to_team: entered promiscuous mode
[  505.450458][T16704] veth0_to_batadv: entered promiscuous mode
[  505.450632][T16704] batadv_slave_0: entered promiscuous mode
[  505.450809][T16704] veth1_to_batadv: entered promiscuous mode
[  505.450954][T16704] batadv_slave_1: entered promiscuous mode
[  505.468534][T16704] xfrm0: entered promiscuous mode
[  505.468754][T16704] veth0_to_hsr: entered promiscuous mode
[  505.469044][T16704] veth1_to_hsr: entered promiscuous mode
[  505.469319][T16704] hsr0: entered promiscuous mode
[  505.469466][T16704] geneve0: entered promiscuous mode
[  505.469622][T16704] geneve1: entered promiscuous mode
[  505.469775][T16704] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  505.469922][T16704] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  505.494974][T16704] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode
[  505.496029][T16704] syztnl2: entered promiscuous mode
[  505.496161][T16704] bridge1: entered promiscuous mode
[  505.497734][T16704] sit1: entered promiscuous mode
[  505.497860][T16704] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode
[  505.498005][T16704] bond1: entered promiscuous mode
[  505.498294][T16704] ip6tnl1: entered promiscuous mode
[  505.499647][T16704] bridge2: entered promiscuous mode
[  505.500253][T16704] ip6gre1: entered promiscuous mode
[  505.500377][T16704] netdevsim netdevsim1 eth0: entered promiscuous mode
[  505.500505][T16704] netdevsim netdevsim1 eth1: entered promiscuous mode
[  505.500634][T16704] netdevsim netdevsim1 eth2: entered promiscuous mode
[  505.501735][T16704] netdevsim netdevsim1 eth3: entered promiscuous mode
[  505.502244][T16704] bond2: entered promiscuous mode
[  505.502258][T16704] gretap1: entered promiscuous mode
[  505.502610][T16704] bond3: entered promiscuous mode
[  505.502728][T16704] mac80211_hwsim hwsim19 wlan4: entered promiscuous mode
[  505.506517][T16704] syztnl0: entered promiscuous mode
[  505.506659][T16704] ip6_vti1: entered promiscuous mode
[  505.506925][T16704] ip6tnl2: entered promiscuous mode
[  505.507040][T16704] veth2: entered promiscuous mode
[  505.507185][T16704] veth3: entered promiscuous mode
[  505.520757][T16704] bond5: entered promiscuous mode
[  505.520906][T16704] vlan0: entered promiscuous mode
[  505.524685][T16704] sit2: entered promiscuous mode
[  505.538501][T16704] erspan1: entered promiscuous mode
[  505.538800][T16704] bridge3: entered promiscuous mode
[  505.612541][T16704] vxlan0: entered promiscuous mode
[  505.642674][T16704] bond6: entered promiscuous mode
[  505.645189][T16704] gtp0: entered promiscuous mode
[  505.701615][T16704] bridge4: entered promiscuous mode
[  505.722000][T16704] bridge5: entered promiscuous mode
[  505.722183][T16704] ip6gretap1: entered promiscuous mode
[  505.722311][T16704] mac80211_hwsim hwsim29 wlan5: entered promiscuous mode
[  505.722460][T16704] bareudp0: entered promiscuous mode
[  505.727964][T16704] bridge6: entered promiscuous mode
[  505.768048][T16704] @: entered promiscuous mode
[  505.821439][ T6671] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0
[  505.821487][ T6671] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0
[  505.821519][ T6671] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0
[  505.821551][ T6671] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0
[  506.207371][T16750] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  506.727182][ T5634] Bluetooth: hci4: command 0x0405 tx timeout
[  507.149063][T16790] bond6: Invalid ad_actor_system MAC address.
[  507.149087][T16790] bond6: option ad_actor_system: invalid value (7)
[  507.225195][T16790] bond6 (unregistering): Released all slaves
[  507.497391][T16809] netlink: 'syz.0.2612': attribute type 322 has an invalid length.
[  507.994321][T16831] netlink: 'syz.1.2616': attribute type 1 has an invalid length.
[  507.994346][T16831] __nla_validate_parse: 12 callbacks suppressed
[  507.994359][T16831] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2616'.
[  508.529462][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  509.210690][T16883] netlink: 'syz.3.2628': attribute type 1 has an invalid length.
[  509.346173][T16883] 8021q: adding VLAN 0 to HW filter on device bond11
[  509.392168][T16885] 8021q: adding VLAN 0 to HW filter on device bond11
[  509.392601][T16885] bond11: (slave ipip0): The slave device specified does not support setting the MAC address
[  509.393378][T16885] bond11: (slave ipip0): Error -95 calling set_mac_address
[  509.966324][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'.
[  510.919647][T16955] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.006190][T16956] macsec1: entered promiscuous mode
[  511.783049][T16984] netlink: 'syz.3.2648': attribute type 1 has an invalid length.
[  511.783076][T16984] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2648'.
[  512.026322][T17008] netlink: 'syz.3.2655': attribute type 1 has an invalid length.
[  512.026365][T17008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.390600][T17016] ip_tables: iptables: counters copy to user failed while replacing table
[  512.521602][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'.
[  512.642097][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'.
[  513.649495][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'.
[  514.082990][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'.
[  514.110645][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'.
[  514.271299][T17096] team1: entered promiscuous mode
[  514.272346][T17096] team1: entered allmulticast mode
[  514.273170][T17096] 8021q: adding VLAN 0 to HW filter on device team1
[  514.449301][T17103] openvswitch: netlink: Missing key (keys=40, expected=100)
[  514.462453][T17103] syzkaller0: entered promiscuous mode
[  514.462478][T17103] syzkaller0: entered allmulticast mode
[  514.679395][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'.
[  514.679528][T17110] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  514.679557][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'.
[  514.933294][T17117] x_tables: duplicate underflow at hook 4
[  514.933717][   T30] audit: type=1804 audit(1790064083.244:78): pid=17114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2677" name="/newroot/505/memory.events" dev="tmpfs" ino=2610 res=1 errno=0
[  515.028991][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'.
[  515.074611][T17122] ip6t_rpfilter: unknown options
[  515.248728][T17130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2683'.
[  515.301560][T17130] bond_slave_0: entered promiscuous mode
[  515.307457][T17130] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  515.358023][T17134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.394798][T17138] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2684'.
[  515.395033][T17138] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2684'.
[  515.395164][T17138] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2684'.
[  515.809564][T17159] netlink: 'syz.3.2689': attribute type 1 has an invalid length.
[  516.105690][T17167] bond0: ARP target 0.0.0.2 is already present
[  516.105720][T17167] bond0: option arp_ip_target: invalid value (33554432)
[  516.185817][T17178] bond12: (slave bridge11): making interface the new active one
[  516.190071][T17178] bond12: (slave bridge11): Enslaving as an active interface with an up link
[  516.783197][T17196] xt_CT: You must specify a L4 protocol and not use inversions on it
[  517.262531][T17213] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  517.973637][T17247] ip_tables: iptables: counters copy to user failed while replacing table
[  518.031417][T17250] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  518.031521][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  518.031816][T17250] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  518.033463][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  518.710745][T17268] __nla_validate_parse: 47 callbacks suppressed
[  518.710771][T17268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'.
[  518.758936][T17268] vlan5: entered allmulticast mode
[  518.758961][T17268] bond0: entered allmulticast mode
[  518.758985][T17268] syz_tun: entered allmulticast mode
[  518.892712][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  519.135281][T17277] vlan0: entered promiscuous mode
[  519.310418][T17284] openvswitch: netlink: Actions may not be safe on all matching packets
[  519.343621][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  519.411574][T17284] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  519.471696][ T6658] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  519.688817][T17297] netlink: 'syz.4.2722': attribute type 3 has an invalid length.
[  519.689472][T17298] netlink: 'syz.4.2722': attribute type 3 has an invalid length.
[  519.787533][T17302] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  519.956484][T17317] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  520.011578][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'.
[  520.115675][T17321] x_tables: duplicate entry at hook 1
[  520.115937][T17321] x_tables: duplicate entry at hook 1
[  520.134763][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'.
[  520.136764][T17321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2729'.
[  520.347392][T17329] netlink: 'syz.4.2733': attribute type 9 has an invalid length.
[  520.485115][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.485432][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.678926][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2735'.
[  520.831036][T17353] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2735'.
[  520.861705][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.929196][T17355] netlink: 9160 bytes leftover after parsing attributes in process `syz.2.2738'.
[  520.948268][T17361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2736'.
[  521.290871][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'.
[  521.366158][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'.
[  521.912583][T17390] 8021q: adding VLAN 0 to HW filter on device bond7
[  521.962150][T17396] 8021q: adding VLAN 0 to HW filter on device batadv1
[  521.970630][T17396] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  522.190235][T17396] bond7 (unregistering): (slave batadv1): Releasing backup interface
[  522.222058][T17396] bond7 (unregistering): Released all slaves
[  522.424794][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  522.429222][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  522.431453][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  522.461365][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  522.462830][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  522.758778][T17409] syzkaller1: tun_chr_ioctl cmd 2147767506
[  523.483441][T17435] 8021q: adding VLAN 0 to HW filter on device team0
[  523.746676][T17435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  523.784706][T17435] veth0_vlan: left promiscuous mode
[  523.799028][T17435] veth0_vlan: entered promiscuous mode
[  523.812029][T17435] macvlan0: left promiscuous mode
[  523.857579][T17435] veth0_macvtap: left promiscuous mode
[  523.860771][T17435] veth0_macvtap: entered promiscuous mode
[  523.898339][T17435] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  523.909776][T17435] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.929480][T17435] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.969332][T17435] bond1: left promiscuous mode
[  523.969742][T17435] 8021q: adding VLAN 0 to HW filter on device bond1
[  524.011460][T17435] bond2: left promiscuous mode
[  524.011951][T17435] 8021q: adding VLAN 0 to HW filter on device bond2
[  524.113338][T17435] bond3: left promiscuous mode
[  524.113764][T17435] 8021q: adding VLAN 0 to HW filter on device bond3
[  524.119115][T17435] 8021q: adding VLAN 0 to HW filter on device bond4
[  524.147334][T17435] 8021q: adding VLAN 0 to HW filter on device bond5
[  524.180734][T17435] 8021q: adding VLAN 0 to HW filter on device bond6
[  524.190481][T17435] bond6: entered allmulticast mode
[  524.190503][T17435] bridge4: entered allmulticast mode
[  524.206653][T17435] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  524.222080][T17435] bridge4: entered promiscuous mode
[  524.222142][T17460] __nla_validate_parse: 2 callbacks suppressed
[  524.222161][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2763'.
[  524.266275][T17435] 8021q: adding VLAN 0 to HW filter on device bond7
[  524.272969][T17435] geneve2: left promiscuous mode
[  524.275069][T17435] 8021q: adding VLAN 0 to HW filter on device bond8
[  524.320503][T17435] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  524.368182][ T5619] bond0: (slave syz_tun): Releasing backup interface
[  524.370296][ T5619] syz_tun (unregistering): left allmulticast mode
[  524.481326][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.511881][T10347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  524.511916][T10347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.511951][T17467] §: renamed from sit0 (while UP)
[  524.519925][T17468] netlink: 'syz.3.2765': attribute type 2 has an invalid length.
[  524.561751][ T6671] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  524.561788][ T6671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.562311][ T5634] Bluetooth: hci5: command tx timeout
[  524.601964][ T6657] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  524.602264][ T6657] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  524.602423][ T6657] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  524.603045][ T6657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.607924][ T6657] ip6_tunnel: L xmit: Local address not yet configured!
[  524.662381][ T5828] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  525.164533][T17485] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  525.166512][T17485] bond7 (unregistering): Released all slaves
[  525.231323][ T5828] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  525.681634][ T5828] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  525.754724][T17513] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2775'.
[  525.755111][T17513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2775'.
[  525.807494][T17410] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.807634][T17410] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.807716][T17410] bridge_slave_0: entered allmulticast mode
[  525.808976][T17410] bridge_slave_0: entered promiscuous mode
[  525.813342][T17410] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.813508][T17410] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.813938][T17410] bridge_slave_1: entered allmulticast mode
[  525.815817][T17410] bridge_slave_1: entered promiscuous mode
[  525.878306][T17410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.885137][T17410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.998829][T17410] team0: Port device team_slave_0 added
[  526.019829][T17410] team0: Port device team_slave_1 added
[  526.105219][T17410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.105238][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.105258][T17410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.110138][T17410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.110151][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.110166][T17410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.229936][T17410] hsr_slave_0: entered promiscuous mode
[  526.234365][T17410] hsr_slave_1: entered promiscuous mode
[  526.235186][T17410] debugfs: 'hsr0' already exists in 'hsr'
[  526.235204][T17410] Cannot create hsr debugfs directory
[  526.546284][T17410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.546324][T17410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.578693][T17535] netlink: 'syz.3.2779': attribute type 10 has an invalid length.
[  526.636959][T17537] netlink: 'syz.3.2779': attribute type 10 has an invalid length.
[  526.642744][ T5634] Bluetooth: hci5: command tx timeout
[  526.656022][T17535] bond0: (slave netdevsim1): Releasing backup interface
[  526.672207][T17535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  526.677100][T17535] team0: Port device netdevsim1 added
[  526.695312][T17539] x_tables: duplicate underflow at hook 2
[  526.698895][T17539] IPVS: set_ctl: invalid protocol: 2 172.20.20.23:20001
[  526.699070][T17537] team0: Port device netdevsim1 removed
[  526.709586][T17537] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  526.713382][T17537] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  526.756586][T17410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.756613][T17410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.835338][T17410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.835366][T17410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.908954][T17410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.908980][T17410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.023695][T17493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  528.066210][T17410] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  528.086015][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  528.088600][T17410] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  528.112144][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  528.131160][T17410] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  528.151539][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  528.153282][T17410] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  528.179406][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  528.288560][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'.
[  528.300081][T17551] x_tables: ip_tables: osf match: only valid for protocol 6
[  528.322852][T17549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2784'.
[  528.329572][T17549] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  528.384620][T17554] netlink: 'syz.1.2783': attribute type 10 has an invalid length.
[  528.384726][T17555] netlink: 'syz.1.2783': attribute type 10 has an invalid length.
[  528.388024][T17554] dummy0: left promiscuous mode
[  528.399804][T17554] dummy0: entered promiscuous mode
[  528.405161][T17554] team0: Port device dummy0 added
[  528.434374][T17558] netlink: 'syz.4.2784': attribute type 2 has an invalid length.
[  528.478094][T17558] 
: entered promiscuous mode
[  528.607196][T17410] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.664964][T17410] 8021q: adding VLAN 0 to HW filter on device team0
[  528.673869][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.673998][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.690505][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.690611][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.721500][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  528.721531][ T5634] Bluetooth: hci5: command tx timeout
[  528.767130][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'.
[  528.802125][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  529.290108][T17591] xt_IDLETIMER: label is empty or not nul-terminated
[  529.357488][T17410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.484316][T17410] veth0_vlan: entered promiscuous mode
[  529.523190][T17410] veth1_vlan: entered promiscuous mode
[  529.650951][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'.
[  529.719075][T17410] veth0_macvtap: entered promiscuous mode
[  529.732724][T17609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2797'.
[  529.755195][T17410] veth1_macvtap: entered promiscuous mode
[  529.885561][T17619] bond6 (unregistering): Released all slaves
[  529.960937][T17410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.997482][T17410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.018216][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.018281][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.018315][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.044335][ T6655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.172480][ T6657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.172505][ T6657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.274069][ T6657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.274095][ T6657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.353843][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2801'.
[  530.429213][T17640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2801'.
[  530.802527][ T5634] Bluetooth: hci5: command tx timeout
[  530.951936][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2807'.
[  531.008026][T17674] netlink: 'syz.2.2806': attribute type 1 has an invalid length.
[  531.029642][T17669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2808'.
[  531.515047][T17692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  531.807237][T17703] netlink: 'syz.0.2815': attribute type 1 has an invalid length.
[  531.890754][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'.
[  531.975700][T17712] netlink: 'syz.4.2816': attribute type 8 has an invalid length.
[  531.975723][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'.
[  532.268815][T17725] hsr0: entered allmulticast mode
[  532.268840][T17725] hsr_slave_0: entered allmulticast mode
[  532.268858][T17725] hsr_slave_1: entered allmulticast mode
[  532.270657][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  532.337737][T17725] hsr0 (unregistering): left allmulticast mode
[  532.475793][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'.
[  532.961343][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.964590][T17757] vlan1: entered allmulticast mode
[  532.964616][T17757] bridge7: entered allmulticast mode
[  532.967113][T17757] bridge7: port 1(erspan0) entered blocking state
[  532.967683][T17757] bridge7: port 1(erspan0) entered disabled state
[  532.967939][T17757] erspan0: entered allmulticast mode
[  532.970708][T17759] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  534.967674][T17714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  535.434696][T17821] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000
[  535.817763][T17838] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  535.818212][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  535.818351][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  535.819831][T17838] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  535.821821][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  535.821938][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  536.275916][T17848] __nla_validate_parse: 1 callbacks suppressed
[  536.275940][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'.
[  536.275956][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2848'.
[  536.329936][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'.
[  536.329962][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2848'.
[  537.222071][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2856'.
[  537.258972][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2856'.
[  537.445681][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  537.649470][T17912] sctp: [Deprecated]: syz.3.2858 (pid 17912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  537.649470][T17912] Use struct sctp_sack_info instead
[  537.699888][T17920] sctp: [Deprecated]: syz.3.2858 (pid 17920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  537.699888][T17920] Use struct sctp_sack_info instead
[  537.929388][T17918] bond6 (unregistering): Released all slaves
[  538.044974][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'.
[  538.084051][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  538.556804][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'.
[  539.272626][T17985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2869'.
[  539.294670][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2869'.
[  539.449330][T17991] syzkaller0: entered promiscuous mode
[  539.449354][T17991] syzkaller0: entered allmulticast mode
[  539.761967][T18001] syzkaller0: entered promiscuous mode
[  539.761991][T18001] syzkaller0: entered allmulticast mode
[  540.076555][T18025] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  540.215574][T18025] xt_CT: No such helper "netbios-ns"
[  540.315744][T18033] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  540.338985][T18033] netlink: 'syz.4.2882': attribute type 5 has an invalid length.
[  540.339024][T18033] netlink: 'syz.4.2882': attribute type 15 has an invalid length.
[  540.343039][T18033] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000
[  540.375198][T18036] bridge0: port 3(erspan0) entered blocking state
[  540.375310][T18036] bridge0: port 3(erspan0) entered disabled state
[  540.375475][T18036] erspan0: entered allmulticast mode
[  540.403850][T18036] erspan0: entered promiscuous mode
[  540.405739][T18036] bridge0: port 3(erspan0) entered blocking state
[  540.405872][T18036] bridge0: port 3(erspan0) entered forwarding state
[  540.592369][T18051] netlink: 'syz.4.2887': attribute type 1 has an invalid length.
[  540.877590][T18044] vlan3: entered promiscuous mode
[  540.877613][T18044] gretap0: entered promiscuous mode
[  540.993482][T18073] netlink: 'syz.1.2891': attribute type 1 has an invalid length.
[  541.075415][T18075] ipvlan2: entered promiscuous mode
[  541.077683][T18075] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  541.077885][T18075] team0: Device ipvlan2 failed to register rx_handler
[  541.340876][T18083] syzkaller1: entered promiscuous mode
[  541.340904][T18083] syzkaller1: entered allmulticast mode
[  541.381728][T18091] __nla_validate_parse: 7 callbacks suppressed
[  541.381751][T18091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2896'.
[  541.444945][T18094] vxcan2: entered allmulticast mode
[  541.489701][T18098] xt_cgroup: path and classid specified
[  541.822568][T18105] debugfs: '1łą^!' already exists in 'ieee80211'
[  541.960847][T18116] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.2905'.
[  542.009347][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'.
[  542.009387][T18112] netlink: 'syz.3.2903': attribute type 10 has an invalid length.
[  542.009404][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'.
[  542.057332][T18112] geneve4: entered promiscuous mode
[  542.057363][T18112] geneve4: entered allmulticast mode
[  542.399024][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'.
[  542.416396][T18124] veth1_to_bond: entered allmulticast mode
[  542.420714][T18126] veth1_to_bond: entered promiscuous mode
[  542.483552][T18129] veth1_to_bond (unregistering): left allmulticast mode
[  542.483594][T18129] veth1_to_bond (unregistering): left promiscuous mode
[  542.529527][T18103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2900'.
[  542.553905][T18129] bond0: (slave bond_slave_1): Releasing backup interface
[  542.580420][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'.
[  542.742682][T18103] netlink: 'syz.4.2900': attribute type 15 has an invalid length.
[  542.742711][T18103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2900'.
[  543.558844][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'.
[  543.747950][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'.
[  543.749043][T18177] openvswitch: netlink: Flow key attr not present in new flow.
[  544.120126][T18199] syzkaller1: entered promiscuous mode
[  544.120152][T18199] syzkaller1: entered allmulticast mode
[  544.468995][T18206] netlink: Failed to add  helper -22
[  544.469059][T18206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.052088][T18236] Set syz1 is full, maxelem 2076 reached
[  545.196121][T18249] netlink: 'syz.4.2938': attribute type 1 has an invalid length.
[  545.196145][T18249] netlink: 'syz.4.2938': attribute type 7 has an invalid length.
[  545.196158][T18249] netlink: 'syz.4.2938': attribute type 8 has an invalid length.
[  545.196173][T18249] NCSI netlink: No device for ifindex 1073545264
[  545.353219][T18257] syzkaller1: entered promiscuous mode
[  545.353246][T18257] syzkaller1: entered allmulticast mode
[  546.645404][T18332] __nla_validate_parse: 11 callbacks suppressed
[  546.645429][T18332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2960'.
[  546.842914][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'.
[  547.107586][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'.
[  547.898453][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.898480][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.898945][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.898962][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.899360][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.899376][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'.
[  547.899765][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'.
[  548.655392][T18399] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  548.761287][T18401] ip_tables: iptables: counters copy to user failed while replacing table
[  548.879805][T18369] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  548.885794][T18371] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  548.889968][T18370] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  548.961315][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  551.337031][T18475] 8021q: adding VLAN 0 to HW filter on device bond1
[  551.339675][T18475] team0: Port device bond1 added
[  551.743633][T18498] __nla_validate_parse: 85 callbacks suppressed
[  551.743656][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'.
[  551.761468][T18500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'.
[  551.980290][T18514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3012'.
[  551.980319][T18514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3012'.
[  552.094163][T18518] syzkaller0: entered promiscuous mode
[  552.094189][T18518] syzkaller0: entered allmulticast mode
[  552.107018][T18518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.148048][T18513] tipc: Resetting bearer <eth:syzkaller0>
[  552.175949][T18525] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  552.176147][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  552.176431][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  552.186513][T18513] tipc: Disabling bearer <eth:syzkaller0>
[  552.278594][T18527] syzkaller0: entered promiscuous mode
[  552.278620][T18527] syzkaller0: entered allmulticast mode
[  552.375155][T18530] netlink: 'syz.3.3018': attribute type 1 has an invalid length.
[  552.503665][T18530] bond16: entered promiscuous mode
[  552.504325][T18530] 8021q: adding VLAN 0 to HW filter on device bond16
[  552.659942][T18544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3019'.
[  553.160832][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  553.180320][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  553.188505][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  553.198225][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  553.198963][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  553.254031][T18562] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3027'.
[  553.412219][T18567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'.
[  553.412265][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3027'.
[  553.641759][T18583] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.208731][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'.
[  554.210307][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'.
[  554.545665][T18607] ip_tables: iptables: counters copy to user failed while replacing table
[  555.282061][ T5634] Bluetooth: hci1: command tx timeout
[  555.362190][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  555.484552][T18558] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.484705][T18558] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.484848][T18558] bridge_slave_0: entered allmulticast mode
[  555.490641][T18558] bridge_slave_0: entered promiscuous mode
[  555.503604][T18558] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.503756][T18558] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.503900][T18558] bridge_slave_1: entered allmulticast mode
[  555.507613][T18558] bridge_slave_1: entered promiscuous mode
[  555.592170][T18558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.606514][T18558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.697927][T18635] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  555.698146][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  555.698458][    C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  555.795509][T18558] team0: Port device team_slave_0 added
[  555.815660][T18558] team0: Port device team_slave_1 added
[  555.979374][T18558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.979394][T18558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.979418][T18558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.017123][T18558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.017144][T18558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.017172][T18558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.300534][T18558] hsr_slave_0: entered promiscuous mode
[  556.309943][T18558] hsr_slave_1: entered promiscuous mode
[  556.643587][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  556.957160][T18558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  556.957200][T18558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.353538][T18558] bond0: (slave netdevsim1): Releasing backup interface
[  557.363152][ T5634] Bluetooth: hci1: command tx timeout
[  557.519526][T18558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.519562][T18558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.787716][T18717] __nla_validate_parse: 67 callbacks suppressed
[  557.787740][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'.
[  557.787769][T18717] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3054'.
[  557.888609][T18558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  557.888647][T18558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.398256][T18734] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  558.554081][T18738] IPVS: Unknown mcast interface: vcan0
[  558.578234][T18558] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  558.580980][T18738] netlink: 'syz.4.3058': attribute type 4 has an invalid length.
[  558.581004][T18738] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3058'.
[  558.614033][T18558] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  558.615108][T18558] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  558.632391][T18739] IPv6: addrconf: prefix option has invalid lifetime
[  558.632407][T18739] IPv6: addrconf: prefix option has invalid lifetime
[  558.656154][T18558] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  558.659228][T18558] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  558.679606][T18558] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  558.690001][T18738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  558.707171][T18558] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  558.726754][T18558] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  559.065407][T18764] netlink: 'syz.0.3061': attribute type 1 has an invalid length.
[  559.183201][T18764] bond2: entered promiscuous mode
[  559.183751][T18764] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.310112][T18558] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.433314][T18764] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.434629][T18764] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  559.434651][T18764] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  559.441757][ T5634] Bluetooth: hci1: command tx timeout
[  559.500347][T18764] bond2: (slave xfrm1): making interface the new active one
[  559.500373][T18764] xfrm1: entered promiscuous mode
[  559.518014][T18764] xfrm1: left promiscuous mode
[  559.615771][T18789] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3064'.
[  559.615828][T18789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.663502][T18782] netlink: 'syz.4.3062': attribute type 4 has an invalid length.
[  559.667997][T18558] 8021q: adding VLAN 0 to HW filter on device team0
[  559.698212][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.698308][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.712775][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.712882][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.849888][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3062'.
[  560.173284][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3068'.
[  560.173926][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'.
[  560.174097][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'.
[  560.184954][T18809] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  560.367163][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'.
[  560.603534][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603534][T18826] Use struct sctp_sack_info instead
[  560.603598][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603598][T18826] Use struct sctp_sack_info instead
[  560.603646][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603646][T18826] Use struct sctp_sack_info instead
[  560.603690][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603690][T18826] Use struct sctp_sack_info instead
[  560.603737][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603737][T18826] Use struct sctp_sack_info instead
[  560.603783][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603783][T18826] Use struct sctp_sack_info instead
[  560.603829][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603829][T18826] Use struct sctp_sack_info instead
[  560.603885][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603885][T18826] Use struct sctp_sack_info instead
[  560.603932][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603932][T18826] Use struct sctp_sack_info instead
[  560.603979][T18826] sctp: [Deprecated]: syz.0.3072 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.603979][T18826] Use struct sctp_sack_info instead
[  560.777246][T18831] netlink: 'syz.0.3072': attribute type 3 has an invalid length.
[  560.807392][T18839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3073'.
[  561.165524][T18558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.317725][T18558] veth0_vlan: entered promiscuous mode
[  561.363021][T18558] veth1_vlan: entered promiscuous mode
[  561.489708][T18850] tipc: Resetting bearer <eth:vlan0>
[  561.495724][T18850] tipc: Resetting bearer <eth:vlan0>
[  561.521540][ T5634] Bluetooth: hci1: command tx timeout
[  561.577113][T18850] bond1: left promiscuous mode
[  561.577139][T18850] bridge3: left promiscuous mode
[  561.579904][T18850] bond4: left promiscuous mode
[  561.610987][ T6660] tipc: Resetting bearer <eth:vlan0>
[  561.612842][T18858] FAULT_INJECTION: forcing a failure.
[  561.612842][T18858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.612873][T18858] CPU: 1 UID: 0 PID: 18858 Comm: syz.1.3074 Not tainted syzkaller #0 PREEMPT(full) 
[  561.612894][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  561.612905][T18858] Call Trace:
[  561.612941][T18858]  <TASK>
[  561.612997][T18858]  dump_stack_lvl+0xe8/0x150
[  561.613124][T18858]  should_fail_ex+0x410/0x560
[  561.613218][T18858]  _copy_from_user+0x2d/0xb0
[  561.613284][T18858]  smc_setsockopt+0x3c0/0xb00
[  561.613386][T18858]  ? __pfx_smc_setsockopt+0x10/0x10
[  561.613418][T18858]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  561.613468][T18858]  ? __pfx_smc_setsockopt+0x10/0x10
[  561.613488][T18858]  do_sock_setsockopt+0x17c/0x1b0
[  561.613576][T18858]  __x64_sys_setsockopt+0x13d/0x1b0
[  561.613604][T18858]  do_syscall_64+0x166/0x520
[  561.613657][T18858]  ? trace_irq_disable+0x3b/0x140
[  561.613692][T18858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.613727][T18858]  ? clear_bhb_loop+0x70/0xc0
[  561.613750][T18858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.613767][T18858] RIP: 0033:0x7f3050b9e159
[  561.613803][T18858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  561.613838][T18858] RSP: 002b:00007f3051a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  561.613879][T18858] RAX: ffffffffffffffda RBX: 00007f3050e26090 RCX: 00007f3050b9e159
[  561.613893][T18858] RDX: 000000000000048f RSI: 0000000000000000 RDI: 0000000000000003
[  561.613904][T18858] RBP: 00007f3051a85090 R08: 000000000000002c R09: 0000000000000000
[  561.613915][T18858] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  561.613926][T18858] R13: 00007f3050e26128 R14: 00007f3050e26090 R15: 00007ffd1007b4e8
[  561.613956][T18858]  </TASK>
[  561.905160][T18558] veth0_macvtap: entered promiscuous mode
[  561.955045][T18558] veth1_macvtap: entered promiscuous mode
[  562.075241][T18558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.156499][T18558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.501320][ T6665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.501626][ T6671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.501664][ T6671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.502636][ T6671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.524192][T18886] xt_addrtype: ipv6 does not support BROADCAST matching
[  562.528841][T18887] xt_addrtype: ipv6 does not support BROADCAST matching
[  562.596630][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.596655][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.717310][ T6665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.717334][ T6665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.810927][T18895] netlink: 'syz.4.3089': attribute type 2 has an invalid length.
[  562.838006][T18893] __nla_validate_parse: 4 callbacks suppressed
[  562.838031][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'.
[  562.877158][T18895] : entered promiscuous mode
[  563.136301][T18904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  563.200508][ T5634] block nbd6: Receive control failed (result -22)
[  563.215440][T18905] nbd6: detected capacity change from 0 to 32
[  563.224334][   T26] block nbd6: Dead connection, failed to find a fallback
[  563.224362][   T26] block nbd6: shutting down sockets
[  563.224437][   T26] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.224525][   T26] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.238475][   T26] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.238513][   T26] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.254513][   T26] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.254552][   T26] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.254682][   T26] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.254708][   T26] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.271430][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.271466][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.271626][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.271649][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.271816][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.271839][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.272017][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.272039][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.275274][T16604] ldm_validate_partition_table(): Disk read failed.
[  563.275404][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.275431][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.280421][  T335] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  563.280457][  T335] Buffer I/O error on dev nbd6, logical block 0, async page read
[  563.282246][T16604] Dev nbd6: unable to read RDB block 0
[  563.294263][T16604]  nbd6: unable to read partition table
[  563.436684][T16604] ldm_validate_partition_table(): Disk read failed.
[  563.440330][T16604] Dev nbd6: unable to read RDB block 0
[  563.448584][T16604]  nbd6: unable to read partition table
[  563.542143][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  563.564052][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  563.572474][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  563.579337][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  563.600187][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  563.615163][ T5634] 
[  563.618040][ T5634] ======================================================
[  563.625294][ T5634] WARNING: possible circular locking dependency detected
[  563.632485][ T5634] syzkaller #0 Not tainted
[  563.636944][ T5634] ------------------------------------------------------
[  563.644023][ T5634] kworker/u9:7/5634 is trying to acquire lock:
[  563.650496][ T5634] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  563.661066][ T5634] 
[  563.661066][ T5634] but task is already holding lock:
[  563.668812][ T5634] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  563.678221][ T5634] 
[  563.678221][ T5634] which lock already depends on the new lock.
[  563.678221][ T5634] 
[  563.688630][ T5634] 
[  563.688630][ T5634] the existing dependency chain (in reverse order) is:
[  563.697642][ T5634] 
[  563.697642][ T5634] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  563.705717][ T5634]        down_write+0x96/0x200
[  563.710645][ T5634]        kernfs_add_one+0x41/0x6f0
[  563.715826][ T5634]        kernfs_create_dir_ns+0x1a1/0x230
[  563.721755][ T5634]        internal_create_group+0x440/0x1180
[  563.727776][ T5634]        cpuhp_invoke_callback+0x434/0x810
[  563.733641][ T5634]        cpuhp_issue_call+0x3f0/0x750
[  563.739055][ T5634]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  563.745678][ T5634]        __cpuhp_setup_state+0x3f/0x60
[  563.751156][ T5634]        do_one_initcall+0x250/0x870
[  563.756452][ T5634]        do_initcall_level+0x10a/0x1a0
[  563.761985][ T5634]        do_initcalls+0x59/0xa0
[  563.766866][ T5634]        kernel_init_freeable+0x29d/0x3e0
[  563.772592][ T5634]        kernel_init+0x22/0x1d0
[  563.777456][ T5634]        ret_from_fork+0x514/0xb70
[  563.782595][ T5634]        ret_from_fork_asm+0x1a/0x30
[  563.787892][ T5634] 
[  563.787892][ T5634] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  563.795807][ T5634] 
[  563.795807][ T5634] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  563.803544][ T5634]        cpus_read_lock+0x42/0x160
[  563.808667][ T5634]        static_key_slow_inc+0x12/0x30
[  563.814129][ T5634]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  563.820554][ T5634]        nbd_genl_foreach_sock+0x265/0x450
[  563.826450][ T5634]        nbd_genl_reconfigure+0xbbb/0x1040
[  563.832257][ T5634]        genl_family_rcv_msg_doit+0x233/0x340
[  563.838413][ T5634]        genl_rcv_msg+0x614/0x7a0
[  563.843477][ T5634]        netlink_rcv_skb+0x226/0x4a0
[  563.848790][ T5634]        genl_rcv+0x28/0x40
[  563.853497][ T5634]        netlink_unicast+0x7bd/0x940
[  563.858900][ T5634]        netlink_sendmsg+0x813/0xb40
[  563.864232][ T5634]        sock_sendmsg_nosec+0x13a/0x180
[  563.869796][ T5634]        ____sys_sendmsg+0x54e/0x850
[  563.875089][ T5634]        ___sys_sendmsg+0x2a5/0x360
[  563.880296][ T5634]        __x64_sys_sendmsg+0x1b1/0x290
[  563.885762][ T5634]        do_syscall_64+0x166/0x520
[  563.891072][ T5634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.897867][ T5634] 
[  563.897867][ T5634] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  563.905531][ T5634]        __mutex_lock+0x19d/0x1550
[  563.910662][ T5634]        nbd_queue_rq+0x373/0xff0
[  563.915777][ T5634]        blk_mq_dispatch_rq_list+0x499/0x1990
[  563.921941][ T5634]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  563.928821][ T5634]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  563.935331][ T5634]        blk_mq_run_work_fn+0x16c/0x300
[  563.940883][ T5634]        process_scheduled_works+0xc3d/0x1630
[  563.946955][ T5634]        worker_thread+0xa47/0xfb0
[  563.952069][ T5634]        kthread+0x38b/0x480
[  563.956666][ T5634]        ret_from_fork+0x514/0xb70
[  563.961776][ T5634]        ret_from_fork_asm+0x1a/0x30
[  563.967421][ T5634] 
[  563.967421][ T5634] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  563.974644][ T5634]        __mutex_lock+0x19d/0x1550
[  563.979760][ T5634]        nbd_queue_rq+0xc1/0xff0
[  563.984696][ T5634]        blk_mq_dispatch_rq_list+0x499/0x1990
[  563.990774][ T5634]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  563.997728][ T5634]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  564.004239][ T5634]        blk_mq_run_work_fn+0x16c/0x300
[  564.009794][ T5634]        process_scheduled_works+0xc3d/0x1630
[  564.015884][ T5634]        worker_thread+0xa47/0xfb0
[  564.021003][ T5634]        kthread+0x38b/0x480
[  564.025603][ T5634]        ret_from_fork+0x514/0xb70
[  564.030720][ T5634]        ret_from_fork_asm+0x1a/0x30
[  564.036035][ T5634] 
[  564.036035][ T5634] -> #4 (set->srcu){.+.+}-{0:0}:
[  564.043288][ T5634]        __synchronize_srcu+0xc9/0x2f0
[  564.048823][ T5634]        elevator_switch+0x1e8/0x7b0
[  564.054172][ T5634]        elevator_change+0x2fa/0x480
[  564.059471][ T5634]        elevator_set_default+0x375/0x440
[  564.065312][ T5634]        blk_register_queue+0x3f3/0x4e0
[  564.070939][ T5634]        __add_disk+0x6b8/0xdb0
[  564.075805][ T5634]        add_disk_fwnode+0x100/0x3a0
[  564.081115][ T5634]        nbd_dev_add+0x733/0xb60
[  564.086078][ T5634]        nbd_init+0x168/0x1f0
[  564.090862][ T5634]        do_one_initcall+0x250/0x870
[  564.096166][ T5634]        do_initcall_level+0x10a/0x1a0
[  564.101657][ T5634]        do_initcalls+0x59/0xa0
[  564.106733][ T5634]        kernel_init_freeable+0x29d/0x3e0
[  564.112497][ T5634]        kernel_init+0x22/0x1d0
[  564.117370][ T5634]        ret_from_fork+0x514/0xb70
[  564.122570][ T5634]        ret_from_fork_asm+0x1a/0x30
[  564.128044][ T5634] 
[  564.128044][ T5634] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  564.135958][ T5634]        __mutex_lock+0x19d/0x1550
[  564.141087][ T5634]        elevator_change+0x1af/0x480
[  564.146376][ T5634]        elevator_set_none+0xb5/0x140
[  564.151752][ T5634]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  564.158101][ T5634]        nbd_start_device+0x189/0xb30
[  564.163474][ T5634]        nbd_genl_connect+0x167d/0x1cd0
[  564.169029][ T5634]        genl_family_rcv_msg_doit+0x233/0x340
[  564.175103][ T5634]        genl_rcv_msg+0x614/0x7a0
[  564.180225][ T5634]        netlink_rcv_skb+0x226/0x4a0
[  564.185513][ T5634]        genl_rcv+0x28/0x40
[  564.190019][ T5634]        netlink_unicast+0x7bd/0x940
[  564.195317][ T5634]        netlink_sendmsg+0x813/0xb40
[  564.200793][ T5634]        sock_sendmsg_nosec+0x13a/0x180
[  564.206547][ T5634]        ____sys_sendmsg+0x54e/0x850
[  564.211855][ T5634]        ___sys_sendmsg+0x2a5/0x360
[  564.217074][ T5634]        __x64_sys_sendmsg+0x1b1/0x290
[  564.222542][ T5634]        do_syscall_64+0x166/0x520
[  564.227669][ T5634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.234118][ T5634] 
[  564.234118][ T5634] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  564.242773][ T5634]        blk_alloc_queue+0x544/0x690
[  564.248073][ T5634]        __blk_mq_alloc_disk+0x194/0x390
[  564.253712][ T5634]        nbd_dev_add+0x494/0xb60
[  564.258650][ T5634]        nbd_init+0x168/0x1f0
[  564.263325][ T5634]        do_one_initcall+0x250/0x870
[  564.268619][ T5634]        do_initcall_level+0x10a/0x1a0
[  564.274105][ T5634]        do_initcalls+0x59/0xa0
[  564.278984][ T5634]        kernel_init_freeable+0x29d/0x3e0
[  564.284721][ T5634]        kernel_init+0x22/0x1d0
[  564.289588][ T5634]        ret_from_fork+0x514/0xb70
[  564.294707][ T5634]        ret_from_fork_asm+0x1a/0x30
[  564.300092][ T5634] 
[  564.300092][ T5634] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  564.307314][ T5634]        fs_reclaim_acquire+0x71/0x100
[  564.313538][ T5634]        kmem_cache_alloc_noprof+0x5f/0x600
[  564.319454][ T5634]        __kernfs_iattrs+0xdd/0x380
[  564.324685][ T5634]        kernfs_iop_setattr+0xe6/0x3f0
[  564.330167][ T5634]        notify_change+0xbba/0xea0
[  564.335308][ T5634]        do_truncate+0x1c2/0x250
[  564.340285][ T5634]        path_openat+0x15b5/0x1d60
[  564.345402][ T5634]        do_file_open+0x23e/0x4a0
[  564.350515][ T5634]        do_sys_openat2+0x115/0x200
[  564.355722][ T5634]        __x64_sys_openat+0x138/0x170
[  564.361099][ T5634]        do_syscall_64+0x166/0x520
[  564.366390][ T5634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.372815][ T5634] 
[  564.372815][ T5634] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  564.381340][ T5634]        __lock_acquire+0x164c/0x2de0
[  564.386826][ T5634]        lock_acquire+0x115/0x350
[  564.391851][ T5634]        down_write+0x96/0x200
[  564.396620][ T5634]        kernfs_link_sibling+0x4c7/0x5a0
[  564.402257][ T5634]        kernfs_add_one+0x2db/0x6f0
[  564.407469][ T5634]        kernfs_create_dir_ns+0x1a1/0x230
[  564.413188][ T5634]        sysfs_create_dir_ns+0x12f/0x2a0
[  564.418832][ T5634]        kobject_add_internal+0x622/0xcd0
[  564.424708][ T5634]        kobject_add+0x163/0x240
[  564.429740][ T5634]        device_add+0x3fa/0xb80
[  564.434721][ T5634]        hci_conn_add_sysfs+0xd5/0x210
[  564.440587][ T5634]        hci_conn_complete_evt+0x8a8/0x1350
[  564.446542][ T5634]        hci_event_packet+0x6cd/0xf10
[  564.451922][ T5634]        hci_rx_work+0x3ee/0x1020
[  564.456984][ T5634]        process_scheduled_works+0xc3d/0x1630
[  564.463495][ T5634]        worker_thread+0xa47/0xfb0
[  564.468611][ T5634]        kthread+0x38b/0x480
[  564.473327][ T5634]        ret_from_fork+0x514/0xb70
[  564.478457][ T5634]        ret_from_fork_asm+0x1a/0x30
[  564.483765][ T5634] 
[  564.483765][ T5634] other info that might help us debug this:
[  564.483765][ T5634] 
[  564.494090][ T5634] Chain exists of:
[  564.494090][ T5634]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  564.494090][ T5634] 
[  564.508978][ T5634]  Possible unsafe locking scenario:
[  564.508978][ T5634] 
[  564.516633][ T5634]        CPU0                    CPU1
[  564.522109][ T5634]        ----                    ----
[  564.527507][ T5634]   lock(&root->kernfs_rwsem);
[  564.532294][ T5634]                                lock(cpuhp_state_mutex);
[  564.539435][ T5634]                                lock(&root->kernfs_rwsem);
[  564.546747][ T5634]   lock(&root->kernfs_iattr_rwsem);
[  564.552060][ T5634] 
[  564.552060][ T5634]  *** DEADLOCK ***
[  564.552060][ T5634] 
[  564.560260][ T5634] locks held by kworker/u9:7/5634: 4, last CPU#1:
[  564.566943][ T5634]  #0: ffff888036b23140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  564.578055][ T5634]  #1: ffffc900045a7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  564.590074][ T5634]  #2: ffff8880786980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350
[  564.599916][ T5634]  #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  564.609755][ T5634] 
[  564.609755][ T5634] stack backtrace:
[  564.615656][ T5634] CPU: 1 UID: 0 PID: 5634 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[  564.625152][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  564.635241][ T5634] Workqueue: hci0 hci_rx_work
[  564.639946][ T5634] Call Trace:
[  564.643263][ T5634]  <TASK>
[  564.646234][ T5634]  dump_stack_lvl+0xe8/0x150
[  564.650866][ T5634]  print_circular_bug+0x2e2/0x300
[  564.655915][ T5634]  check_noncircular+0x12f/0x150
[  564.660870][ T5634]  __lock_acquire+0x164c/0x2de0
[  564.665814][ T5634]  ? __lock_acquire+0x747/0x2de0
[  564.670759][ T5634]  lock_acquire+0x115/0x350
[  564.675745][ T5634]  ? kernfs_link_sibling+0x4c7/0x5a0
[  564.681066][ T5634]  down_write+0x96/0x200
[  564.685336][ T5634]  ? kernfs_link_sibling+0x4c7/0x5a0
[  564.690630][ T5634]  ? __pfx_down_write+0x10/0x10
[  564.695489][ T5634]  ? kernfs_root+0x1c/0x230
[  564.699996][ T5634]  ? kernfs_root+0x1c/0x230
[  564.704502][ T5634]  ? kernfs_root+0x1c/0x230
[  564.709108][ T5634]  ? kernfs_root+0x1ea/0x230
[  564.713727][ T5634]  kernfs_link_sibling+0x4c7/0x5a0
[  564.718858][ T5634]  kernfs_add_one+0x2db/0x6f0
[  564.723590][ T5634]  kernfs_create_dir_ns+0x1a1/0x230
[  564.728815][ T5634]  sysfs_create_dir_ns+0x12f/0x2a0
[  564.734047][ T5634]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  564.739714][ T5634]  ? do_raw_spin_unlock+0xf5/0x200
[  564.744862][ T5634]  kobject_add_internal+0x622/0xcd0
[  564.750269][ T5634]  kobject_add+0x163/0x240
[  564.754727][ T5634]  ? __pfx_kobject_add+0x10/0x10
[  564.759728][ T5634]  ? get_device_parent+0x366/0x3a0
[  564.764881][ T5634]  device_add+0x3fa/0xb80
[  564.769225][ T5634]  hci_conn_add_sysfs+0xd5/0x210
[  564.774195][ T5634]  hci_conn_complete_evt+0x8a8/0x1350
[  564.779600][ T5634]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  564.785700][ T5634]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  564.791630][ T5634]  ? skb_pull_data+0xf0/0x200
[  564.796393][ T5634]  hci_event_packet+0x6cd/0xf10
[  564.801431][ T5634]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  564.807246][ T5634]  ? __pfx_hci_event_packet+0x10/0x10
[  564.812711][ T5634]  ? audit_filter_rules+0x4f70/0x5d10
[  564.818205][ T5634]  ? hci_send_to_monitor+0xe2/0x590
[  564.823605][ T5634]  hci_rx_work+0x3ee/0x1020
[  564.828118][ T5634]  ? process_scheduled_works+0x97a/0x1630
[  564.833947][ T5634]  process_scheduled_works+0xc3d/0x1630
[  564.839596][ T5634]  ? __pfx_process_scheduled_works+0x10/0x10
[  564.846117][ T5634]  ? assign_work+0x3cf/0x5d0
[  564.851093][ T5634]  worker_thread+0xa47/0xfb0
[  564.855740][ T5634]  ? __kthread_parkme+0x71/0x1f0
[  564.860693][ T5634]  kthread+0x38b/0x480
[  564.864961][ T5634]  ? __pfx_worker_thread+0x10/0x10
[  564.870085][ T5634]  ? __pfx_kthread+0x10/0x10
[  564.874686][ T5634]  ret_from_fork+0x514/0xb70
[  564.879380][ T5634]  ? __pfx_ret_from_fork+0x10/0x10
[  564.884520][ T5634]  ? __switch_to+0xc89/0x1420
[  564.889265][ T5634]  ? __pfx_kthread+0x10/0x10
[  564.893867][ T5634]  ret_from_fork_asm+0x1a/0x30
[  564.898654][ T5634]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  564.965136][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3094'.
[  565.553581][T18919] syz_tun (unregistering): left allmulticast mode
[  565.713583][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  565.713621][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.763968][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  565.763993][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.813988][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  565.814015][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.854416][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  565.854443][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.949883][   T13] dvmrp2: left allmulticast mode
[  566.036620][   T13] bond3 (unregistering): (slave erspan1): Releasing active interface
[  566.036647][   T13] erspan1 (unregistering): left promiscuous mode
[  566.038946][   T13] bond5 (unregistering): (slave gretap1): Releasing active interface
[  566.145072][   T13] bond0 (unregistering): Released all slaves
[  566.147075][   T13] bond1 (unregistering): Released all slaves
[  566.150486][   T13] bond2 (unregistering): (slave veth3): Releasing active interface
[  566.151731][   T13] bond2 (unregistering): Released all slaves
[  566.156750][   T13] bond3 (unregistering): Released all slaves
[  566.178944][   T13] bond4 (unregistering): Released all slaves
[  566.196889][   T13] bond5 (unregistering): Released all slaves
[  566.199870][   T13] bond6 (unregistering): Released all slaves
[  566.293324][   T13] “: left promiscuous mode
[  566.336141][   T13] 
: left promiscuous mode
[  566.380540][   T13] : left promiscuous mode
[  566.392738][   T13] tipc: Disabling bearer <udp:syz0>
[  566.392836][   T13] tipc: Left network mode
[  566.557752][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  566.816081][   T13] hsr_slave_0: left promiscuous mode
[  566.996529][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  567.145056][   T13] IPVS: stop unused estimator thread 0...
[  567.275441][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.327765][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.357574][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.359544][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  567.409970][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.503379][   T13] bridge_slave_1: left allmulticast mode
[  567.503406][   T13] bridge_slave_1: left promiscuous mode
[  567.503600][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.506706][   T13] bridge_slave_0: left allmulticast mode
[  567.506728][   T13] bridge_slave_0: left promiscuous mode
[  567.506878][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.637991][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.656001][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.657402][   T13] bond0 (unregistering): Released all slaves
[  567.733424][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4
[  567.880568][   T13] hsr_slave_0: left promiscuous mode
[  567.881308][   T13] hsr_slave_1: left promiscuous mode
[  567.881864][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.881879][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.887809][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.887831][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.902086][   T13] veth1_macvtap: left promiscuous mode
[  567.902114][   T13] veth0_macvtap: left promiscuous mode
[  567.902176][   T13] veth1_vlan: left promiscuous mode
[  567.902218][   T13] veth0_vlan: left promiscuous mode
[  568.088974][   T13] team0 (unregistering): Port device team_slave_1 removed
[  568.112352][   T13] team0 (unregistering): Port device team_slave_0 removed
[  568.186122][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5
[  568.479974][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6
[  568.723521][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7
[  568.950307][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8