last executing test programs:

4m20.78473798s ago: executing program 4 (id=5656):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00005400"/88, 0x58)

4m20.351756517s ago: executing program 4 (id=5660):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xfc0, &(0x7f0000000700)={@random="05c38c886b60", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0xf8a, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x1000, "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"}}}}}}, 0x0) (async)
syz_emit_ethernet(0xfc0, &(0x7f0000000700)={@random="05c38c886b60", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0xf8a, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x1000, "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"}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
unshare(0x24020400)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

4m19.106092186s ago: executing program 4 (id=5663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008d010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000082000000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x1f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

4m18.43306692s ago: executing program 4 (id=5668):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r0=>0x0}) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0xcaa}, 0x1c) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64)
listen(r3, 0xfffffffc) (rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x3ffe, 0x0, 0x0, @fd}, @nested={0x4, 0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40004}, 0x0)

4m15.030095883s ago: executing program 4 (id=5672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}}, 0x11)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r4 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14)
sendto$inet6(r4, &(0x7f00000003c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000400)={0xa, 0xfffd, 0xc9, @loopback={0xffffffffffff80fe}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000560000022dbd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x2008c800}, 0x0)

4m13.946573903s ago: executing program 4 (id=5676):
r0 = socket$inet6(0xa, 0x802, 0x0)
shutdown(r0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x3000}], 0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000a1400b6331100010000000000000200000000000adc777cdff4c0a7659d36b328bcd32c14d81c62acf6bc08dd5043b86c08bf601837a655e3e3ce2ea5234e"], 0x28}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, "01"}], 0x28}, 0x0)
shutdown(r2, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000005000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r6 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@default, @bcast, @remote, @bcast, @null, @rose, @default, @default]}, &(0x7f0000000180)=0x80, 0x80000)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000001c0)=0xa, 0x4)
setsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f00000004c0)="16d761daf247fab04694d75af84b99f54090cf2fa38fc34d1f5ff74d2e24363ea693c5c521392c8e712e4295e9e9f9c97f75add40aec69efc8cb2ee146389b6fc3fa4529d830b84c8923c2b13c4b182b4ff1b764098b9737b7779e61f5b4f98b1381ccb62d5c805b718003bd7f1fdbbce97368126d2f895a0f7c8a09e6e0eb42bba35e6bdb23231715b9f992dd139e863bd245d7f7345ebf21a3ba6ff3a780c535a8762dde58ea77848baf8ca86b66e8a764ca335b54264b60544fe0528c5f9a66ac0943fde682b7d96b228c", 0xcc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffeffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m58.654916212s ago: executing program 32 (id=5676):
r0 = socket$inet6(0xa, 0x802, 0x0)
shutdown(r0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x3000}], 0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000a1400b6331100010000000000000200000000000adc777cdff4c0a7659d36b328bcd32c14d81c62acf6bc08dd5043b86c08bf601837a655e3e3ce2ea5234e"], 0x28}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, "01"}], 0x28}, 0x0)
shutdown(r2, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000005000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r6 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@default, @bcast, @remote, @bcast, @null, @rose, @default, @default]}, &(0x7f0000000180)=0x80, 0x80000)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000001c0)=0xa, 0x4)
setsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f00000004c0)="16d761daf247fab04694d75af84b99f54090cf2fa38fc34d1f5ff74d2e24363ea693c5c521392c8e712e4295e9e9f9c97f75add40aec69efc8cb2ee146389b6fc3fa4529d830b84c8923c2b13c4b182b4ff1b764098b9737b7779e61f5b4f98b1381ccb62d5c805b718003bd7f1fdbbce97368126d2f895a0f7c8a09e6e0eb42bba35e6bdb23231715b9f992dd139e863bd245d7f7345ebf21a3ba6ff3a780c535a8762dde58ea77848baf8ca86b66e8a764ca335b54264b60544fe0528c5f9a66ac0943fde682b7d96b228c", 0xcc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffeffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.685061643s ago: executing program 2 (id=6343):
syz_emit_ethernet(0x1e, &(0x7f0000000080)={@remote, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@llc={0x4, {@snap={0x0, 0xab, "1f", '\x00', 0xa00}}}}}, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x17, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xac4c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

13.976999281s ago: executing program 2 (id=6345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pim6reg0\x00', 0xffffc73e})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2800}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x78, r5, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "1c24b7f99df3bc0a16"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "00840f61d77eb8b9c1ca6c4c5e"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11.645794678s ago: executing program 2 (id=6349):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000006c00"/88, 0x58)

10.98576796s ago: executing program 2 (id=6352):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

10.567230086s ago: executing program 2 (id=6353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x42, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4)

10.006872957s ago: executing program 2 (id=6355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc46)
sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={<r7=>r5})
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="153f05a34716c0394a"], 0x5c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002010300000000000000000002000000100001800c00028005050000000000000c001980080001008c"], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4)

4.678824658s ago: executing program 0 (id=6382):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x5e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid() (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0xe0, &(0x7f0000000780)=ANY=[@ANYBLOB="ffff04000000abaaaaaaaabb81000000a10004f84a0b568b665664666c3820c155f52a2f951db500fd89aef49b783904719e7d2ad20d50286060f7fad9589c94ce53f7901834ca3b96ca06eaf2c40b072f8bd1e49ed4f63392ab4ebfade9d93640a90f1e2ebdcdaf591f567231cfc76d842177442ca1f0cc1420b9c0ae5f096ab9719edbc0d0d4cd7ec15603d1071520f3b0d6f0b2eadf9c593a18a973e0b6185abdab03c2699b4b04eef5628341dfee4d8370de3a294cd0b01cf1fe91d404b218e9060000000000000062c66e70d04a3f00"/224], 0x0) (rerun: 32)
ppoll(&(0x7f0000000040)=[{r2, 0x5c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x8) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) (async, rerun: 64)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r8, 0x1}, 0x20) (async)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xfdcacbc144355cf1, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
getsockname$packet(r11, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9680, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}}, &(0x7f00000003c0)=0x84) (async)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x4804)

4.304573981s ago: executing program 3 (id=6385):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x3, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xc4, 0x7, 0x2, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x8, 0x7fff}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x104, r2, 0x302, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xf0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2f295f5419f4a1a4}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6691}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aba2ee639ca3801243544f181829274e17106e53ab2f468753ac014d92b1b920"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "09b6bb1c908d26fdff2dac11094d8f7a"}]}]}, 0x104}}, 0x4000)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=0x10)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200", @ANYRES32=r7], 0x1c}}, 0x840)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ']'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6gre0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0xc, r0}, {0x1, 0x5, 0x7, 0x8, 0x1, 0x8, 0x7fffffff, 0x5}, {0x9, 0x6, 0x2, 0x8000}, 0xa6b, 0x6e6bba, 0x2, 0x1, 0x4}, {{@in=@multicast1, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3503, 0x2, 0x2, 0x10, 0x7, 0x3, 0x1}}, 0xe8) (async)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0xc, r0}, {0x1, 0x5, 0x7, 0x8, 0x1, 0x8, 0x7fffffff, 0x5}, {0x9, 0x6, 0x2, 0x8000}, 0xa6b, 0x6e6bba, 0x2, 0x1, 0x4}, {{@in=@multicast1, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3503, 0x2, 0x2, 0x10, 0x7, 0x3, 0x1}}, 0xe8)

4.074975743s ago: executing program 0 (id=6386):
r0 = socket$inet6(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{<r2=>r1, &(0x7f0000000000)='B\x00', 0x145080, &(0x7f0000000040)={@align=0x1, {0x3, 0x8, 0xfff}}, 0x1, 0x0, &(0x7f00000000c0)=0x3}, 0x4, &(0x7f0000000540)=[{0x1, 0x2b, &(0x7f0000000100)='-\x00', &(0x7f0000000a00)="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", 0x187}, {0x2, 0x200009, 0x0, &(0x7f0000000380)="560e7e9a75729db3e61a5fdec27a83b3228645805d5462fddbd8cd394ba8b3c0ac846b25ae0df5d76006dbb6eb45442ec3147241f83eb7dc41e2bf5822c42149b690d31f95751c12b1ae726ecdac08f8fb6e2d723111398ee7f415e5e346506c2f55e20fb7e8b8bd27ecbbd26522a5e33169478feed0017af9d63616df8eab52d1c306b9c0cf28e5359918cbf3405761d00c9076ee36d53e739690f9a42f8440763a960a7a1afac48e5f0ad0cb27041e306779f451ea", 0xb6, 0x10}, {0x3, 0xc, &(0x7f0000000440)='](\x16(\x00', &(0x7f0000000480)="27c2d6489606958e6d5490517092b852106e6f0998dff1d4d3c30ce9c49deaf3c9a8e409583fdc89", 0x28}, {0x2, 0x8000, &(0x7f00000004c0)='$}/][(\'{-@\'@\x00', 0x0}]})
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000007c0)={<r3=>0x0, 0x6c, "152b49713ebe8f3985f0c64bd3cfdabc486fad40021abbd36487afbed9cfb20c2af2dc5115f3549ce5992f697cb9875361503083fa4db2f2eaafb1907b3fdd540cb617fc1d5b6c9947fb94a413071cc0d3ac54dbf7d4dfa08e42d86934fd7421c54e0bc52112237982cf0039"}, &(0x7f0000000880)=0x74)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000008c0)={r3, 0xffffffff}, &(0x7f0000000900)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0)
socket(0x15, 0x5, 0x0) (async)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) (async)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES32=<r8=>r4, @ANYRES32=r7, @ANYBLOB="f5b16bb6c7b4695e851b829bb045d60c499b9f6cb60d8737d9fb99e16116a9913e4d8e10b853aeaaa7f2cb70f8638c5a2cdb679e0d16d18bfe3eb7abd2a2b5fec54421265008aa14140cdc08e8ac1c283c55da94c0b566d169668edd6214f983509d19d4b1751166c802c7bb3446433af9fc9e4e9bf2b1907164d0a9df7f2eaa7a363530b9a6468411fce955024203f09143e0bb4d0b1542a67cd8d10169731e342834fb4853ec8e846a18986d82b1a40ee6936c31e0277b5dce8afd040a90e52c731372918b9caeacca190dd00b6fa51ca70e06c8394ab9732330734d6d9b83c1a5", @ANYBLOB="324d0b872b121973c17d6140b14e381bd98413c04a7c7219248f56d1e5e742dc5948486de724ccc153f39c198e623786d5f5b58fc99f6dd23887d0f3d9dcae23bc390ca8a66e251c1353566b306215b3a141db1ca48e4718f3a288a658987e4554daffbc7b1256e65e1e4795f907626d477218c3073a6b10d505acee290e585f87794687f0ab981188a10436a489ed9ddb1540ed118f3bc452b160aff9d11bb18cb2946ca3353faa9fd1874c58599628f73bb9fc81ffaad028f75ce533aebb30e16c64b19ff50129bf", @ANYRESHEX=r1], 0x0, 0xffffffff}, 0x94)
sendmsg$nl_route(r2, 0x0, 0xc000) (async)
sendmsg$nl_route(r2, 0x0, 0xc000)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[], 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[], 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r7, @ANYRES8=r8, @ANYRESHEX, @ANYBLOB="126a", @ANYRES16, @ANYBLOB="744ed2aa50da28aff91bbcdfb9b3366abaed35732b15c2e45aaca066b2e090e6f6b33f05d15bc64742df5b67e57999ec38c6da9a79097e37c5cb9ed0f18863b0653f59acf2243a75fcc5320c6402cc48e267839f15cfda7066e87235ec4f65006df716bdb6318d30c8be34b8096530bb5b4d834736694518343faeb8cbffd073dfbffd41c1486bedf185d2d0fe2d53b1c86b6e51c806a9f44d"], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x210002, 0x0)
close(r10) (async)
close(r10)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

3.570124924s ago: executing program 3 (id=6389):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x41, 0x107, 0x70bd2d, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x414180, &(0x7f0000000080)={@align=0x8a, {0x3ff, 0x5, 0x5, 0xf}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f00000001c0)=0x81})
socket$kcm(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x405, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.242037244s ago: executing program 5 (id=6390):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000bf030000000000002500000006000000be91000000000000b5020000020000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r6, <r7=>0xffffffffffffffff}, 0x0, &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9d}, @generic={0x7, 0x2, 0x6, 0x3ff, 0x101}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xb8, &(0x7f0000000340)=""/184, 0x41000, 0xe, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x92, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r5, r7, r8], &(0x7f0000000580)=[{0x5, 0x3, 0xf}, {0x0, 0x5, 0xb, 0xb}, {0x3, 0x3, 0x8, 0xb}], 0x10, 0xfffffffa}, 0x94)

2.843023666s ago: executing program 0 (id=6391):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f00000008c0)={&(0x7f0000000100)=0x7fff, 0x2, &(0x7f0000000580)=[{}, {}, {}, {}], &(0x7f0000000880)})
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="6544050000000000140012800b0001006261746164760000040002800a000100000000c16f39ef995a7951f987a19cf6120000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x26000000)

2.789922249s ago: executing program 1 (id=6392):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x6, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c)

2.710675876s ago: executing program 5 (id=6393):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000850)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})

2.438543627s ago: executing program 3 (id=6394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x3d, 0x6, 0x9, 0xfffff5cc}, {0x4, 0x2, 0xc, 0xfed4}, {0x4, 0x2, 0x2, 0xff}, {0x7, 0x9, 0x82, 0xffffffac}, {0x5, 0xd0, 0x80, 0x6}, {0x6, 0x4, 0xe, 0x9}, {0x9, 0xee, 0x9, 0x3ef}, {0xf83e, 0x1, 0x3, 0x401}]}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000008c0)="b807205a802705b68713e580cf36", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a400000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.270976837s ago: executing program 1 (id=6395):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010004b0400000040000000007a000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0600270000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048040)

2.126586503s ago: executing program 0 (id=6396):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611285000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2.066645487s ago: executing program 5 (id=6397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, {0x0, 0x4, 0x0, 0x800a78a}, 0xfffffffe, 0x6e6bc0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0xb}}, 0xe8)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbca}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)

2.045919852s ago: executing program 3 (id=6398):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$inet(0x2, 0x3, 0x1)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r3, @ANYBLOB="01980000020800001800128008010100677265000c00028008000700ac141429"], 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="a400000010003904020000000000000000000000104fb97fcbd883228b223993b291e37eb3e417b9bb6c39266c3e368e5cf2dd40b33b2bbeb38eb192646e62380a8a05d005b9f69bc46a90796293ce4969f7d71afe9f8973527f5725784aca870ceac2d30854427a1312f7c80a7f6590af460db0c5607e289594353155644a61995e1d2610396f9746c58410e21b", @ANYRES32=r3, @ANYBLOB="401000000041040030001280080001006772650024000280080007000a010100060003001700000006000f0003000000060010004e2000001400140076657468305f746f5f68737200000000140014007465616d300000000000000000000000040022000400140008000400060000001c0024004a2efc13a954582352ff335733c8f6c051d03a72055613be"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000000000000886e000000890b040a0101027f00000100000000001c000000000000000000000008", @ANYRES8=r0, @ANYRES64=r3], 0xfffffffffffffd3b}, 0xfffe)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0xfffff000)
r6 = socket$inet(0x2, 0x4000000000000001, 0x3)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
socket$inet(0x2, 0x3, 0x1) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r3, @ANYBLOB="01980000020800001800128008010100677265000c00028008000700ac141429"], 0x38}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="a400000010003904020000000000000000000000104fb97fcbd883228b223993b291e37eb3e417b9bb6c39266c3e368e5cf2dd40b33b2bbeb38eb192646e62380a8a05d005b9f69bc46a90796293ce4969f7d71afe9f8973527f5725784aca870ceac2d30854427a1312f7c80a7f6590af460db0c5607e289594353155644a61995e1d2610396f9746c58410e21b", @ANYRES32=r3, @ANYBLOB="401000000041040030001280080001006772650024000280080007000a010100060003001700000006000f0003000000060010004e2000001400140076657468305f746f5f68737200000000140014007465616d300000000000000000000000040022000400140008000400060000001c0024004a2efc13a954582352ff335733c8f6c051d03a72055613be"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000000000000886e000000890b040a0101027f00000100000000001c000000000000000000000008", @ANYRES8=r0, @ANYRES64=r3], 0xfffffffffffffd3b}, 0xfffe) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0xfffff000) (async)
socket$inet(0x2, 0x4000000000000001, 0x3) (async)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) (async)

1.754525799s ago: executing program 1 (id=6399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r2=>0x0})
syz_emit_ethernet(0x87, &(0x7f0000000780)={@random="cd1c43650b3c", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x51, 0x2f, 0xff, @mcast2, @private1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xfffe}, {"ffeac9e420fcfde5bc12a62f1ec2357d5e6968406cfe39e7cb84e6c5da84fe71990fe7890698b0d73ee667865d6dd0d7800fa2a3de55bbe9c20455e759"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) (async)
syz_emit_ethernet(0x87, &(0x7f0000000780)={@random="cd1c43650b3c", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x51, 0x2f, 0xff, @mcast2, @private1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xfffe}, {"ffeac9e420fcfde5bc12a62f1ec2357d5e6968406cfe39e7cb84e6c5da84fe71990fe7890698b0d73ee667865d6dd0d7800fa2a3de55bbe9c20455e759"}}}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) (async)

1.662371535s ago: executing program 0 (id=6400):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESHEX], 0x50)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0xf4f422d5faf08caa, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4004014)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000800)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="1a1900000000000024001e8009000100766c616e000000001400028006000100020000000600050088a80037470fe2d7e602a116023211da0000000000", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
sendmsg$nl_crypto(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@get={0x120, 0x13, 0x20, 0x70bd29, 0x25dfdbfc, {{'drbg_nopr_sha512\x00'}, '\x00', '\x00', 0x1000, 0x400}, [{0x8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xcfd7}, {0x8, 0x1, 0x1f37}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x44001}, 0x4028000)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
clock_gettime(0x0, &(0x7f00000000c0))
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020603000000000000400000000000000d000300686173683a6e65740000000005000400000004000900020073797a310000000005000500020000000500010006"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002a0080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="7961fdffffff000000007e0000000c0099006c910000140000006b2d73171b7219e6c969304872b51f9571718b99fbdf7624404046389e00f9b7d6501a8919a46707e21b878f2d9831a850a9616eab0bf8"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)

1.597264361s ago: executing program 5 (id=6401):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000005400"/88, 0x58)

1.045721664s ago: executing program 5 (id=6402):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x80087601, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x1)

1.031434657s ago: executing program 1 (id=6403):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x42, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4)

883.57125ms ago: executing program 3 (id=6404):
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

718.174321ms ago: executing program 0 (id=6405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x0, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000600)={'syz_tun\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff8, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0x2, 0xd, 0x1c4, 0x7, 0x2}}}}]}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xe, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000000206050007000000000000080a1000002400f27f08000940001700ff080006400000000708001240134000000e070500010006000000050005000a0000000500040000000000090002007379f47a3200000000120003006269746d08003a69702c6d61630000"], 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x34000c24)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmmsg$inet6(r11, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea21", 0x12a}], 0x5}}], 0x1, 0x40c0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x7ffffffe, 0x0}, &(0x7f0000000c80)=0x40)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r12, &(0x7f00000001c0), 0x12)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={<r13=>r12, &(0x7f0000000200)='lo\x00', 0x501040, &(0x7f00000003c0)={@align=0x2, {0xdb1, 0x5, 0x1, 0x7f}}, 0x8, &(0x7f0000000280), &(0x7f0000000300)=0x7fffffff})
bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r13}, 0x8)

709.208553ms ago: executing program 1 (id=6406):
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc)
r1 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={<r2=>0x0, <r3=>0x0})
select(0x40, &(0x7f0000000080)={0xc82c, 0xfffffffffffffffc, 0x4, 0x4, 0xdb, 0x3, 0x3, 0xfffffffffffffbff}, &(0x7f00000000c0)={0x6, 0x9650, 0x6, 0x200, 0x0, 0x6, 0x6, 0x2}, &(0x7f0000000500)={0x5, 0x7, 0x10, 0x7, 0x0, 0xe1b2, 0xac, 0x6}, &(0x7f0000000580)={r2, r3/1000+60000})
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

473.370032ms ago: executing program 1 (id=6407):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r0=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="060000000400000000100000890000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000084c3f292759e5d7791700000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001a81414aa0440870511862ff51427a20bc9c0b60090780000000045a60007006600810229100000000000e0000001"], 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001a81414aa0440870511862ff51427a20bc9c0b60090780000000045a60007006600810229100000000000e0000001"], 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38)
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x200, 0x4, 0x7, 0x4})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
getsockopt$inet6_buf(r6, 0x29, 0x15, 0x0, &(0x7f00000003c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x3) (async)
close(0x3)
socket(0x8, 0x800, 0xdf5)

340.233275ms ago: executing program 3 (id=6408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "e5a6856e919739b0d5ec195b8b138145fa3130b8b92b148bf5d9af433e8a932d858096616ae754ff3181153af16fdc91b985d8662c014a30733d42bbbc5e59d857"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
poll(&(0x7f0000000240)=[{r0, 0x86}], 0x1, 0x9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0)
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000040)=0xff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "e5a6856e919739b0d5ec195b8b138145fa3130b8b92b148bf5d9af433e8a932d858096616ae754ff3181153af16fdc91b985d8662c014a30733d42bbbc5e59d857"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async)
poll(&(0x7f0000000240)=[{r0, 0x86}], 0x1, 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) (async)
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000040)=0xff) (async)

0s ago: executing program 5 (id=6409):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1ff, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0xc3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10000}, @in={0x2, 0x4e24, @private=0xa010102}], 0x64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@exit]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)

kernel console output (not intermixed with test programs):

.677650][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  888.787723][T17514] bond6: (slave bridge6): failed to get link speed/duplex
[  888.897179][T17514] bond6: (slave bridge6): failed to get link speed/duplex
[  889.003987][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  889.408084][T29390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5479'.
[  889.509751][T29395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  889.626978][T29392] netlink: 'syz.2.5480': attribute type 3 has an invalid length.
[  889.840654][T29402] netlink: 'syz.4.5482': attribute type 2 has an invalid length.
[  889.840682][T29402] netlink: 'syz.4.5482': attribute type 8 has an invalid length.
[  890.520544][T29428] FAULT_INJECTION: forcing a failure.
[  890.520544][T29428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  890.521601][T29428] CPU: 0 UID: 0 PID: 29428 Comm: syz.0.5488 Not tainted syzkaller #0 PREEMPT(full) 
[  890.521630][T29428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  890.521645][T29428] Call Trace:
[  890.521657][T29428]  <TASK>
[  890.521668][T29428]  dump_stack_lvl+0xe8/0x150
[  890.521712][T29428]  should_fail_ex+0x410/0x560
[  890.521747][T29428]  _copy_from_user+0x2d/0xb0
[  890.521780][T29428]  __sys_bind+0x1c6/0x410
[  890.521811][T29428]  ? __pfx___sys_bind+0x10/0x10
[  890.521852][T29428]  ? __pfx_ksys_write+0x10/0x10
[  890.521899][T29428]  __x64_sys_bind+0x7a/0x90
[  890.521927][T29428]  do_syscall_64+0x166/0x520
[  890.521957][T29428]  ? trace_irq_disable+0x3b/0x140
[  890.521981][T29428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.522005][T29428]  ? clear_bhb_loop+0x70/0xc0
[  890.522035][T29428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.522059][T29428] RIP: 0033:0x7f570879e159
[  890.522081][T29428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  890.522102][T29428] RSP: 002b:00007f57069f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  890.522128][T29428] RAX: ffffffffffffffda RBX: 00007f5708a25fa0 RCX: 00007f570879e159
[  890.522146][T29428] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003
[  890.522162][T29428] RBP: 00007f57069f6090 R08: 0000000000000000 R09: 0000000000000000
[  890.522177][T29428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.522191][T29428] R13: 00007f5708a26038 R14: 00007f5708a25fa0 R15: 00007fffb7d9c888
[  890.522229][T29428]  </TASK>
[  890.716126][T29424] __nla_validate_parse: 2 callbacks suppressed
[  890.716188][T29424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5487'.
[  891.799975][T29435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5491'.
[  891.800042][T29435] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  893.025852][T29430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'.
[  893.163269][ T9993] net_ratelimit: 25 callbacks suppressed
[  893.163296][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  893.418896][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  893.420981][T29456] syzkaller0: entered promiscuous mode
[  893.421005][T29456] syzkaller0: entered allmulticast mode
[  893.530239][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  893.954793][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  894.285436][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  894.393251][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  894.534107][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  894.643830][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  894.753617][T16620] bond6: (slave bridge6): failed to get link speed/duplex
[  894.864451][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  895.499992][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5501'.
[  895.519724][T29485] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5500'.
[  895.595258][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5500'.
[  895.719074][T29482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5500'.
[  897.900079][T29521] ieee802154 phy1 wpan1: encryption failed: -22
[  898.246565][T17512] net_ratelimit: 19 callbacks suppressed
[  898.246593][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  898.353447][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  898.463722][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  898.573825][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  898.619852][T29522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5511'.
[  898.646811][T29533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5513'.
[  899.335769][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  900.044591][T17514] bond6: (slave bridge6): failed to get link speed/duplex
[  900.153295][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  900.263220][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  900.373999][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  900.534653][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  901.096697][T29555] netlink: 'syz.3.5517': attribute type 2 has an invalid length.
[  901.096726][T29555] netlink: 'syz.3.5517': attribute type 1 has an invalid length.
[  901.096741][T29555] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5517'.
[  901.941167][T29561] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5520'.
[  902.099006][T29563] syzkaller1: entered promiscuous mode
[  902.099032][T29563] syzkaller1: entered allmulticast mode
[  902.370466][T29563] ip6gretap1: entered allmulticast mode
[  902.388451][T29563] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  902.407919][T29563] batman_adv: batadv0: Adding interface: ip6gretap1
[  902.407942][T29563] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  902.408288][T29563] batman_adv: batadv0: Interface activated: ip6gretap1
[  902.752267][T29575] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0
[  902.961769][T29578] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5524'.
[  903.000482][T29578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  903.180362][T29587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'.
[  903.364840][T16622] net_ratelimit: 20 callbacks suppressed
[  903.364868][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  903.370035][T29578] macsec0: entered promiscuous mode
[  903.449813][T29587] veth1_macvtap: left promiscuous mode
[  903.655010][T29589] openvswitch: netlink: Multiple metadata blocks provided
[  903.664027][T29589] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5525'.
[  903.726157][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'.
[  903.855404][T29588] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.855571][T29588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.855991][T29588] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.856129][T29588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  904.189098][T29588] veth0_macvtap: left promiscuous mode
[  904.211610][T29588] veth0_macvtap: entered promiscuous mode
[  904.528670][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805252e400: rx timeout, send abort
[  904.660484][T29588] 8021q: adding VLAN 0 to HW filter on device bond1
[  904.800588][T29588] 8021q: adding VLAN 0 to HW filter on device bond0
[  904.866102][T29585] netlink: 'syz.2.5525': attribute type 3 has an invalid length.
[  904.866449][T29585] netlink: 'syz.2.5525': attribute type 3 has an invalid length.
[  905.028731][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805252e400: abort rx timeout. Force session deactivation
[  905.029323][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888037b1bc00: rx timeout, send abort
[  905.277510][T17528] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  905.392203][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  905.415043][T17526] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  905.415572][T17526] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  905.496970][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  905.529371][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888037b1bc00: abort rx timeout. Force session deactivation
[  905.733638][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  905.842788][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  905.953589][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  906.063326][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  906.179656][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  906.285793][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  906.558265][T29619] netlink: 'syz.3.5535': attribute type 4 has an invalid length.
[  906.639099][T29619] netlink: 'syz.3.5535': attribute type 4 has an invalid length.
[  906.820805][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'.
[  908.547249][T29656] bridge3: the hash_elasticity option has been deprecated and is always 16
[  908.569449][ T1368] net_ratelimit: 12 callbacks suppressed
[  908.569474][ T1368] bond6: (slave bridge6): failed to get link speed/duplex
[  908.687987][ T6334] bond6: (slave bridge6): failed to get link speed/duplex
[  908.732257][T29676] ±ÿ: entered allmulticast mode
[  908.793520][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  908.808628][T29674] ±ÿ: left allmulticast mode
[  908.904418][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  909.015612][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  909.122967][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  909.127029][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  909.233561][ T1368] bond6: (slave bridge6): failed to get link speed/duplex
[  909.281966][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5548'.
[  909.282013][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5548'.
[  909.282743][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  909.607139][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  909.612561][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  909.713302][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  909.824935][ T6334] bond6: (slave bridge6): failed to get link speed/duplex
[  909.902229][T29694] netlink: 'syz.3.5551': attribute type 54 has an invalid length.
[  910.176022][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5552'.
[  910.700333][T29708] netlink: 'syz.4.5554': attribute type 2 has an invalid length.
[  910.700362][T29708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5554'.
[  910.784846][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5554'.
[  910.857550][T29706] vlan2: entered allmulticast mode
[  910.857585][T29706] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  910.860834][T29706] bridge0: port 3(vlan2) entered blocking state
[  910.860956][T29706] bridge0: port 3(vlan2) entered disabled state
[  910.947449][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  910.973841][T29706] vlan2: entered promiscuous mode
[  910.973873][T29706] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  911.031532][T29711] netlink: 'syz.3.5556': attribute type 21 has an invalid length.
[  911.042059][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  911.042188][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  911.042309][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  911.077759][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  911.900438][T29736] netlink: 'syz.1.5561': attribute type 1 has an invalid length.
[  912.356983][T29736] 8021q: adding VLAN 0 to HW filter on device bond6
[  913.624481][T17526] net_ratelimit: 21 callbacks suppressed
[  913.624505][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  913.750428][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  913.853595][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  913.963590][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  914.073337][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  914.102908][T29767] syzkaller0: left promiscuous mode
[  914.103111][T29767] syzkaller0: left allmulticast mode
[  914.183534][T16620] bond6: (slave bridge6): failed to get link speed/duplex
[  914.292891][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  914.431300][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  914.533568][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  914.645116][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  916.101098][T29795] bond10: entered promiscuous mode
[  916.375344][T29809] netlink: 'syz.3.5576': attribute type 8 has an invalid length.
[  916.763362][T29813] v: renamed from ip_vti0
[  916.806686][T29813] v: entered allmulticast mode
[  916.862145][T29813] netlink: 'syz.0.5578': attribute type 4 has an invalid length.
[  916.862173][T29813] __nla_validate_parse: 31 callbacks suppressed
[  916.862189][T29813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5578'.
[  916.962928][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  916.963274][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  917.199517][T29822] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5582'.
[  917.673940][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5583'.
[  917.938269][T29836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5583'.
[  918.548371][T29852] bond0: left allmulticast mode
[  918.548909][T29852] bond0: left promiscuous mode
[  918.549237][T29852] bridge0: port 1(bond0) entered disabled state
[  918.882603][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  919.136113][T29852] net_ratelimit: 28 callbacks suppressed
[  919.136142][T29852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  919.166282][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  919.272613][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  919.383889][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  919.493199][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  919.604253][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  919.716242][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  919.824707][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  919.933215][T12296] bond6: (slave bridge6): failed to get link speed/duplex
[  919.992005][T29869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5591'.
[  919.992069][T29869] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  920.549688][T29887] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  921.792217][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5596'.
[  921.792247][T29912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5596'.
[  921.991112][T17512] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  921.991320][T17512] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  921.991362][T17512] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  921.991402][T17512] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  923.478152][T29933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5604'.
[  923.506792][T29935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5603'.
[  923.997552][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5603'.
[  924.117004][T29940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5603'.
[  924.153456][T17528] net_ratelimit: 33 callbacks suppressed
[  924.153481][T17528] bond6: (slave bridge6): failed to get link speed/duplex
[  924.263732][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  924.373597][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  924.487680][ T1368] bond6: (slave bridge6): failed to get link speed/duplex
[  924.593596][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  924.712180][ T6334] bond6: (slave bridge6): failed to get link speed/duplex
[  924.853414][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  924.964787][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  925.074620][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  925.159741][T29963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5607'.
[  925.183665][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  926.093446][T29990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5616'.
[  926.100302][T29990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5616'.
[  926.100345][T29990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5616'.
[  927.181891][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5623'.
[  927.649442][T30017] veth11: entered allmulticast mode
[  927.697848][T30017] bond7: (slave veth11): Enslaving as an active interface with an up link
[  927.775548][T30028] syzkaller0: left promiscuous mode
[  927.775579][T30028] syzkaller0: left allmulticast mode
[  927.858835][T30051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5627'.
[  928.606389][T30063] netlink: 'syz.1.5629': attribute type 11 has an invalid length.
[  928.606414][T30063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5629'.
[  929.253631][ T9993] net_ratelimit: 25 callbacks suppressed
[  929.253658][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  929.364496][ T9993] bond6: (slave bridge6): failed to get link speed/duplex
[  929.551894][T30071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5631'.
[  929.611434][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  929.712591][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  930.054055][ T6334] bond6: (slave bridge6): failed to get link speed/duplex
[  930.167345][T16620] bond6: (slave bridge6): failed to get link speed/duplex
[  930.273940][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  930.606441][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  930.714681][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  930.768920][T30091] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5636'.
[  930.824830][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  931.689607][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  931.706756][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  932.322760][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  932.323005][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  934.027556][T30162] vxcan0: entered allmulticast mode
[  934.263960][T17517] net_ratelimit: 30 callbacks suppressed
[  934.263986][T17517] bond6: (slave bridge6): failed to get link speed/duplex
[  934.372587][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  934.486062][T30113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.486100][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  934.601979][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  934.720391][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  934.823937][T17513] bond6: (slave bridge6): failed to get link speed/duplex
[  934.934276][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  935.053769][T17512] bond6: (slave bridge6): failed to get link speed/duplex
[  935.163698][T16622] bond6: (slave bridge6): failed to get link speed/duplex
[  935.263887][T30178] bond11: option arp_validate: invalid value (8192)
[  935.288395][T30178] bond11 (unregistering): Released all slaves
[  935.348244][T17526] bond6: (slave bridge6): failed to get link speed/duplex
[  936.275206][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5655'.
[  936.443779][T30199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5661'.
[  937.329459][T30216] syzkaller0: entered promiscuous mode
[  937.329487][T30216] syzkaller0: entered allmulticast mode
[  937.427681][T30219] Bluetooth: hci0: unsupported parameter 5135
[  937.427707][T30219] Bluetooth: hci0: unsupported parameter 8192
[  937.427723][T30219] Bluetooth: hci0: unsupported parameter 5135
[  937.427738][T30219] Bluetooth: hci0: unsupported parameter 8192
[  937.456353][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  937.567099][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5665'.
[  937.587065][T30227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  939.380422][T30240] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5670'.
[  940.410764][T30215] tipc: Resetting bearer <eth:syzkaller0>
[  940.559423][T30215] tipc: Disabling bearer <eth:syzkaller0>
[  940.803652][T23598] tipc: Node number set to 1230029301
[  940.854516][T30238] wg2 speed is unknown, defaulting to 1000
[  941.316020][T30263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5674'.
[  944.913774][T30305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5677'.
[  945.807161][T30310] syzkaller0: entered promiscuous mode
[  945.807371][T30310] syzkaller0: entered allmulticast mode
[  945.837331][T30310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  946.050660][T30310] tipc: Resetting bearer <eth:syzkaller0>
[  946.420204][T30308] tipc: Resetting bearer <eth:syzkaller0>
[  946.595337][T30308] tipc: Disabling bearer <eth:syzkaller0>
[  946.930879][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'.
[  946.930905][T30328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5687'.
[  947.380981][T30337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5691'.
[  947.468059][T30341] netlink: 'syz.3.5690': attribute type 1 has an invalid length.
[  947.754420][T30340] sctp: [Deprecated]: syz.1.5688 (pid 30340) Use of struct sctp_assoc_value in delayed_ack socket option.
[  947.754420][T30340] Use struct sctp_sack_info instead
[  947.787701][T30338] sctp: [Deprecated]: syz.1.5688 (pid 30338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  947.787701][T30338] Use struct sctp_sack_info instead
[  948.065357][T30341] 8021q: adding VLAN 0 to HW filter on device bond9
[  948.851739][T30344] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  949.627503][T30370] syzkaller1: entered promiscuous mode
[  949.627529][T30370] syzkaller1: entered allmulticast mode
[  949.977073][T30380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5697'.
[  949.977117][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'.
[  951.664197][T30393] syzkaller1: entered promiscuous mode
[  951.664407][T30393] syzkaller1: entered allmulticast mode
[  952.172578][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  952.721497][T30422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5706'.
[  952.897416][T30424] netlink: 'syz.2.5707': attribute type 1 has an invalid length.
[  953.046162][T30424] ovs-dp0: entered promiscuous mode
[  953.061551][T30425] openvswitch: ovs-dp0: Dropping previously announced user features
[  953.092202][T30431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5709'.
[  953.092238][T30431] netlink: 'syz.0.5709': attribute type 26 has an invalid length.
[  953.092256][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5709'.
[  953.177453][T30430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5708'.
[  953.692154][T30440] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004
[  953.719716][T30443] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004
[  953.751654][T30440] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5712'.
[  953.857917][T30440] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5712'.
[  953.857968][T30440] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5712'.
[  953.859998][T30440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5712'.
[  954.645769][T30456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5716'.
[  955.930210][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5722'.
[  955.952015][T30475] syzkaller0: entered promiscuous mode
[  955.952043][T30475] syzkaller0: entered allmulticast mode
[  956.071517][T30475] netlink: 'syz.1.5722': attribute type 8 has an invalid length.
[  956.199055][T30474] net_ratelimit: 13 callbacks suppressed
[  956.199085][T30474] netlink: Failed to add GPL helper -22
[  956.199144][T30474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  956.603859][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.604297][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.605360][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.608339][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.636753][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.637143][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.708309][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  956.708770][T30486] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  957.502321][T30492] bond11: option all_slaves_active: invalid value (255)
[  957.689173][T30492] bond11 (unregistering): Released all slaves
[  958.253304][T28715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  958.268088][T28715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  958.300006][T28715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  958.319428][T28715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  958.346818][T28715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  958.871129][T30512] __nla_validate_parse: 2 callbacks suppressed
[  958.871169][T30512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5728'.
[  959.054012][T30514] netlink: 'syz.1.5728': attribute type 30 has an invalid length.
[  960.404667][T28715] Bluetooth: hci1: command tx timeout
[  960.625935][T30539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'.
[  960.625969][T30539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'.
[  961.139377][T30559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5736'.
[  961.408800][T30496] wg2 speed is unknown, defaulting to 1000
[  962.267880][T30576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5740'.
[  962.404280][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  962.491186][T28715] Bluetooth: hci1: command tx timeout
[  962.604823][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5740'.
[  962.702139][T30576] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.071570][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'.
[  963.148717][T30576] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.581491][T30576] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.117696][T30576] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.323405][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  964.563361][T28715] Bluetooth: hci1: command tx timeout
[  965.292235][T17512] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.734083][T30496] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.734619][T30496] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.735024][T30496] bridge_slave_0: entered allmulticast mode
[  965.737863][T30496] bridge_slave_0: entered promiscuous mode
[  966.039640][T30576] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.053604][T30619] Cannot find del_set index 3 as target
[  966.461983][T30496] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.462105][T30496] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.462286][T30496] bridge_slave_1: entered allmulticast mode
[  966.499856][T30496] bridge_slave_1: entered promiscuous mode
[  966.653848][T28715] Bluetooth: hci1: command tx timeout
[  966.887517][T30496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  966.892058][T30496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  967.015810][T30496] team0: Port device team_slave_0 added
[  967.019992][T30496] team0: Port device team_slave_1 added
[  967.104390][T30496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  967.104413][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.104446][T30496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  967.107299][T30496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  967.107317][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.107351][T30496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  967.785598][T30496] hsr_slave_0: entered promiscuous mode
[  967.805455][T30496] hsr_slave_1: entered promiscuous mode
[  968.945450][T30662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5755'.
[  970.020383][T30679] ip6gretap1: entered allmulticast mode
[  970.723249][T30689] netlink: 'syz.2.5759': attribute type 21 has an invalid length.
[  971.567077][T30496] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  971.618648][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  971.620783][T30496] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  971.652296][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  971.668149][T30496] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  971.687809][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  971.690029][T30496] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  971.720053][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  972.585389][T30718] netlink: 'syz.2.5764': attribute type 11 has an invalid length.
[  972.655836][T30720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5764'.
[  972.698284][T30721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5765'.
[  972.698325][T30721] netlink: 'syz.0.5765': attribute type 21 has an invalid length.
[  972.827114][T30719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5765'.
[  972.827148][T30719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5765'.
[  972.867236][T30496] 8021q: adding VLAN 0 to HW filter on device bond0
[  973.117648][T30723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5766'.
[  973.214272][T30724] net_ratelimit: 11 callbacks suppressed
[  973.214296][T30724] openvswitch: netlink: ct_state flags 806d0004 unsupported
[  973.398581][T30496] 8021q: adding VLAN 0 to HW filter on device team0
[  973.461294][T16620] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.461398][T16620] bridge0: port 1(bridge_slave_0) entered forwarding state
[  973.560842][T17513] bridge0: port 2(bridge_slave_1) entered blocking state
[  973.560983][T17513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  974.707727][T30749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5770'.
[  974.770515][T30751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5773'.
[  975.202547][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  975.417277][T30759] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  975.417326][T30759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  975.454127][T30761] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5775'.
[  975.456132][T30759] netlink: 'syz.3.5775': attribute type 10 has an invalid length.
[  975.456153][T30759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5775'.
[  975.456202][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5775'.
[  976.543769][T30782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5776'.
[  977.345337][T30796] netlink: 'syz.1.5780': attribute type 4 has an invalid length.
[  977.345366][T30796] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5780'.
[  977.386851][T30796] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  977.974950][T30496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  978.038652][T30811] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  980.533731][T30496] veth0_vlan: entered promiscuous mode
[  980.568282][T30496] veth1_vlan: entered promiscuous mode
[  980.856869][T30496] veth0_macvtap: entered promiscuous mode
[  980.896282][T30496] veth1_macvtap: entered promiscuous mode
[  981.101475][T30496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  981.184746][T30496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  981.233774][T17526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  981.265618][T17526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  981.265677][T17526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  981.265721][T17526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.249319][T17513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.249347][T17513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.907632][T16623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.907658][T16623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.522901][T28715] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  984.398700][T30876] netlink: 'syz.2.5797': attribute type 2 has an invalid length.
[  984.465771][T30876] : entered promiscuous mode
[  984.468668][T30877] tipc: New replicast peer: 127.0.0.1
[  984.487093][T30877] tipc: Enabled bearer <udp:syz2>, priority 10
[  984.603132][T20369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  984.610864][T20369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  984.630378][T20369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  984.658987][T20369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  984.666510][T20369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  986.724677][T28715] Bluetooth: hci4: command tx timeout
[  987.016462][T30911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5805'.
[  987.282969][T30922] netlink: 'syz.2.5807': attribute type 10 has an invalid length.
[  987.282996][T30922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5807'.
[  988.349023][T30939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5810'.
[  988.439203][T30943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5810'.
[  988.804522][T20369] Bluetooth: hci4: command tx timeout
[  988.921790][T30881] wg2 speed is unknown, defaulting to 1000
[  989.798245][T17512] batadv1: left allmulticast mode
[  989.798281][T17512] batadv1: left promiscuous mode
[  989.798561][T17512] bridge0: port 4(batadv1) entered disabled state
[  990.207828][T17512] pim6reg: left allmulticast mode
[  990.288936][T17512] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  990.333502][T30966] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5815'.
[  990.878429][T30979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5816'.
[  990.884694][T20369] Bluetooth: hci4: command tx timeout
[  990.978929][T17512] batman_adv: batadv0: Removing interface: ip6gretap1
[  991.600474][T30990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5818'.
[  992.941425][T17512] bond9 (unregistering): (slave gretap1): Releasing backup interface
[  992.962939][T20369] Bluetooth: hci4: command tx timeout
[  993.146653][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  993.186658][T17512] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  993.186690][T17512] bridge2 (unregistering): left promiscuous mode
[  993.397775][T17512] bond0 (unregistering): Released all slaves
[  993.459091][T17512] bond1 (unregistering): (slave veth3): Releasing active interface
[  993.460056][T17512] bond1 (unregistering): Released all slaves
[  993.520928][T17512] bond2 (unregistering): (slave veth7): Releasing backup interface
[  993.522080][T17512] bond2 (unregistering): Released all slaves
[  993.577105][T17512] bond3 (unregistering): Released all slaves
[  993.610704][T17512] bond4 (unregistering): (slave batadv2): Releasing active interface
[  993.611797][T17512] bond4 (unregistering): Released all slaves
[  993.649504][T17512] bond5 (unregistering): Released all slaves
[  993.689338][T17512] bond6 (unregistering): Released all slaves
[  993.715314][T17512] bond7 (unregistering): Released all slaves
[  993.761412][T17512] bond8 (unregistering): (slave veth11): Releasing active interface
[  993.795790][T17512] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface
[  993.797792][T17512] bond8 (unregistering): Released all slaves
[  993.835707][T17512] bond9 (unregistering): Released all slaves
[  994.115130][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5
[  994.607113][T17512] ovs-s!: left promiscuous mode
[  995.234028][T31008] ip_vti0: entered allmulticast mode
[  995.408360][T17512] tipc: Left network mode
[  995.571064][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5822'.
[  998.379073][T30881] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.379195][T30881] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.379403][T30881] bridge_slave_0: entered allmulticast mode
[  998.419257][T30881] bridge_slave_0: entered promiscuous mode
[  998.468000][T30881] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.468122][T30881] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.468314][T30881] bridge_slave_1: entered allmulticast mode
[  998.509526][T30881] bridge_slave_1: entered promiscuous mode
[  999.036140][T31072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5831'.
[  999.166985][T30881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.217093][T30881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.676057][T30881] team0: Port device team_slave_0 added
[  999.827589][T31079] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  999.963995][T30881] team0: Port device team_slave_1 added
[ 1000.111915][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1000.113349][T31081] 8021q: VLANs not supported on ipvlan1
[ 1000.483871][T30881] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1000.483893][T30881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.483926][T30881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.571702][T30881] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.571723][T30881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.571754][T30881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.488275][T30881] hsr_slave_0: entered promiscuous mode
[ 1001.509429][T30881] hsr_slave_1: entered promiscuous mode
[ 1001.510287][T30881] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.510310][T30881] Cannot create hsr debugfs directory
[ 1002.065516][T31109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5838'.
[ 1002.427279][T31105] macsec2: entered promiscuous mode
[ 1002.515061][T31125] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1003.317534][T31136] xt_hashlimit: overflow, rate too high: 0
[ 1003.736950][T17512] hsr_slave_0: left promiscuous mode
[ 1006.061345][T31156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5846'.
[ 1006.090814][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1006.620939][T31181] No such timeout policy "syz1"
[ 1006.669262][T31181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5854'.
[ 1006.890272][T31189] No such timeout policy "syz1"
[ 1006.945690][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5854'.
[ 1007.068126][T31197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5855'.
[ 1007.346601][T31204] netlink: 'syz.2.5855': attribute type 8 has an invalid length.
[ 1007.346628][T31204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5855'.
[ 1007.886820][T31203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5855'.
[ 1007.974202][T17512] IPVS: stop unused estimator thread 0...
[ 1007.977886][T31204] veth1_to_team: entered promiscuous mode
[ 1008.030408][T31204] gretap0: entered promiscuous mode
[ 1008.089399][T31204] veth1_to_team: left promiscuous mode
[ 1008.160847][T31204] gretap0: left promiscuous mode
[ 1011.002171][T31251] tipc: Started in network mode
[ 1011.002216][T31251] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1011.137884][T31251] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1011.170543][T31251] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1011.171502][T31253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'.
[ 1011.205300][T31262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5863'.
[ 1012.631589][T30646] tipc: Node number set to 1
[ 1013.361750][T31308] netlink: 'syz.2.5872': attribute type 1 has an invalid length.
[ 1013.586441][T31308] bond5: entered promiscuous mode
[ 1013.586931][T31308] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1013.761252][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5872'.
[ 1013.804573][T30881] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1013.908889][T30881] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1013.909995][T30881] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1014.065542][T30881] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1014.294157][T31311] bond5: (slave bridge6): making interface the new active one
[ 1014.294188][T31311] bridge6: entered promiscuous mode
[ 1014.299085][T31311] bond5: (slave bridge6): Enslaving as an active interface with an up link
[ 1014.299555][T30881] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1014.358666][T30881] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1014.381982][T30881] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1014.505745][T30881] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1015.721419][T31348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5878'.
[ 1016.176943][T30881] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1016.359686][T30881] 8021q: adding VLAN 0 to HW filter on device team0
[ 1016.453791][T16623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.453911][T16623] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1016.605413][T17512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.605534][T17512] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1017.445469][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'.
[ 1017.708351][T31375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5883'.
[ 1017.919557][T31380] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5882'.
[ 1019.241052][T31401] tap0: tun_chr_ioctl cmd 1074025692
[ 1020.816979][T31430] syz.0.5890: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1020.817156][T31430] CPU: 0 UID: 0 PID: 31430 Comm: syz.0.5890 Not tainted syzkaller #0 PREEMPT(full) 
[ 1020.817184][T31430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1020.817201][T31430] Call Trace:
[ 1020.817211][T31430]  <TASK>
[ 1020.817223][T31430]  dump_stack_lvl+0xe8/0x150
[ 1020.817265][T31430]  warn_alloc+0x24d/0x270
[ 1020.817291][T31430]  ? kasan_save_track+0x4f/0x80
[ 1020.817317][T31430]  ? kasan_save_track+0x3e/0x80
[ 1020.817355][T31430]  ? __pfx_warn_alloc+0x10/0x10
[ 1020.817377][T31430]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1020.817410][T31430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.817460][T31430]  __vmalloc_node_range_noprof+0x127/0x1540
[ 1020.817525][T31430]  ? rcu_is_watching+0x16/0xb0
[ 1020.817561][T31430]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1020.817598][T31430]  ? __kmalloc_cache_noprof+0x321/0x600
[ 1020.817624][T31430]  ? __kmalloc_cache_noprof+0x14d/0x600
[ 1020.817647][T31430]  ? xskq_create+0x56/0x220
[ 1020.817682][T31430]  xskq_create+0x148/0x220
[ 1020.817710][T31430]  ? xsk_init_queue+0x8a/0xe0
[ 1020.817740][T31430]  xsk_init_queue+0x8a/0xe0
[ 1020.817770][T31430]  xsk_setsockopt+0x52a/0x960
[ 1020.817800][T31430]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1020.817826][T31430]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1020.817870][T31430]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1020.817901][T31430]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1020.817929][T31430]  do_sock_setsockopt+0x17c/0x1b0
[ 1020.817971][T31430]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1020.818010][T31430]  do_syscall_64+0x166/0x520
[ 1020.818040][T31430]  ? trace_irq_disable+0x3b/0x140
[ 1020.818066][T31430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.818091][T31430]  ? clear_bhb_loop+0x70/0xc0
[ 1020.818121][T31430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.818146][T31430] RIP: 0033:0x7f570879e159
[ 1020.818169][T31430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1020.818190][T31430] RSP: 002b:00007f57069d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1020.818215][T31430] RAX: ffffffffffffffda RBX: 00007f5708a26090 RCX: 00007f570879e159
[ 1020.818234][T31430] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1020.818250][T31430] RBP: 00007f570883506b R08: 0000000000000004 R09: 0000000000000000
[ 1020.818265][T31430] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1020.818282][T31430] R13: 00007f5708a26128 R14: 00007f5708a26090 R15: 00007fffb7d9c888
[ 1020.818323][T31430]  </TASK>
[ 1020.860451][T31430] Mem-Info:
[ 1020.860504][T31430] active_anon:5831 inactive_anon:7 isolated_anon:0
[ 1020.860504][T31430]  active_file:18 inactive_file:43731 isolated_file:0
[ 1020.860504][T31430]  unevictable:0 dirty:127 writeback:0
[ 1020.860504][T31430]  slab_reclaimable:13230 slab_unreclaimable:135229
[ 1020.860504][T31430]  mapped:29745 shmem:533 pagetables:1730
[ 1020.860504][T31430]  sec_pagetables:0 bounce:0
[ 1020.860504][T31430]  kernel_misc_reclaimable:0
[ 1020.860504][T31430]  free:1261478 free_pcp:10219 free_cma:0
[ 1020.860636][T31430] Node 0 active_anon:23324kB inactive_anon:28kB active_file:72kB inactive_file:174728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118980kB dirty:508kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16592kB pagetables:6812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1020.860806][T31430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1020.860975][T31430] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1020.861158][T31430] lowmem_reserve[]: 0 2487 2487 2487 2487
[ 1020.861275][T31430] Node 0 DMA32 free:1091404kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23324kB inactive_anon:28kB active_file:72kB inactive_file:174728kB unevictable:0kB writepending:508kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:40876kB local_pcp:20512kB free_cma:0kB
[ 1020.879726][T31430] lowmem_reserve[]: 0 0 0 0 0
[ 1020.879855][T31430] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1020.880021][T31430] lowmem_reserve[]: 0 0 0 0 0
[ 1020.965792][T31430] Node 1 Normal free:3939148kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1020.965975][T31430] lowmem_reserve[]: 0 0 0 0 0
[ 1020.966091][T31430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1020.966462][T31430] Node 0 DMA32: 883*4kB (UME) 1732*8kB (UM) 1160*16kB (UM) 285*32kB (UME) 275*64kB (UME) 531*128kB (UME) 373*256kB (U) 246*512kB (UM) 172*1024kB (UM) 15*2048kB (UME) 130*4096kB (UM) = 1091404kB
[ 1020.966924][T31430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1020.967035][T31430] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 9*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (UM) = 3939148kB
[ 1020.967489][T31430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1020.967603][T31430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1020.967663][T31430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1020.967714][T31430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1020.967819][T31430] 44278 total pagecache pages
[ 1020.967851][T31430] 0 pages in swap cache
[ 1020.967872][T31430] Free swap  = 124996kB
[ 1020.967902][T31430] Total swap = 124996kB
[ 1020.967925][T31430] 2097051 pages RAM
[ 1020.967946][T31430] 0 pages HighMem/MovableOnly
[ 1020.967968][T31430] 428725 pages reserved
[ 1020.967998][T31430] 0 pages cma reserved
[ 1021.802087][T31430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5890'.
[ 1022.367578][T31426] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[ 1022.428267][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5890'.
[ 1022.428297][T31430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5890'.
[ 1022.596404][T31447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5894'.
[ 1022.862216][T30881] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.090862][T31457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5895'.
[ 1023.821551][T31457] bridge0: entered promiscuous mode
[ 1024.329684][T31480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5899'.
[ 1024.500935][T31484] netlink: 'syz.0.5900': attribute type 11 has an invalid length.
[ 1024.682227][T31490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5900'.
[ 1024.781632][T31491] netlink: 'syz.1.5901': attribute type 8 has an invalid length.
[ 1024.781658][T31491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5901'.
[ 1025.405467][T31488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1025.456484][T31488] veth1_vlan: left promiscuous mode
[ 1025.549478][T31488] veth1_vlan: entered promiscuous mode
[ 1025.597507][T31488] veth1_macvtap: left promiscuous mode
[ 1025.598439][T31488] veth0_macvtap: left promiscuous mode
[ 1025.599301][T31488] veth0_macvtap: entered promiscuous mode
[ 1025.600213][T31488] veth1_macvtap: entered promiscuous mode
[ 1025.825793][T31488] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1026.114013][T31488] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1026.158790][T31488] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1026.297258][T31488] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1026.328000][T31488] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.369269][T31488] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1026.386482][T31488] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1026.389053][T31488] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1026.390443][T31488] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1026.419420][T31488] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1026.487647][T31488] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode
[ 1026.507229][T31488] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1026.511255][T30881] veth0_vlan: entered promiscuous mode
[ 1027.777778][T30881] veth1_vlan: entered promiscuous mode
[ 1028.195747][ T1368] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1028.730997][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5910'.
[ 1028.787351][T30881] veth0_macvtap: entered promiscuous mode
[ 1028.925652][T31551] openvswitch: netlink: Unknown key attributes 1
[ 1028.964276][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1028.964713][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1029.308803][T30881] veth1_macvtap: entered promiscuous mode
[ 1030.216942][T31568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5914'.
[ 1030.576760][T31559] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.577424][T31559] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.226054][T31559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1031.261458][T31559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1031.890930][T31552] syzkaller1: entered promiscuous mode
[ 1031.890959][T31552] syzkaller1: entered allmulticast mode
[ 1032.134651][T12296] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.134729][T12296] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.134778][T12296] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.134825][T12296] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.563798][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1032.750442][T31596] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5915'.
[ 1033.056684][T31566] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.057523][T31566] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.781831][T31566] tipc: Resetting bearer <eth:syzkaller0>
[ 1035.334770][T31594] netlink: 9160 bytes leftover after parsing attributes in process `syz.5.5915'.
[ 1035.651935][T31602] veth0_to_bond: entered promiscuous mode
[ 1035.651965][T31602] veth0_to_bond: entered allmulticast mode
[ 1035.825403][T30881] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1035.920842][T30881] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1036.028769][T16623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.028947][T16623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.029261][T16623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.029303][T16623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.620688][T31624] netlink: 964 bytes leftover after parsing attributes in process `syz.2.5919'.
[ 1038.639339][T31631] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[ 1039.533686][T17520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1039.533713][T17520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1040.119431][T31643] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1040.369619][T31651] syzkaller0: left promiscuous mode
[ 1040.370139][T31651] ip6gre1: left promiscuous mode
[ 1040.420934][T31651] ip6gre2: left promiscuous mode
[ 1040.460989][T31651] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1040.536820][T31651] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1040.970793][T17520] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex
[ 1041.245736][T17520] bond5: (slave veth9): making interface the new active one
[ 1041.250481][T17520] bond5: active interface up!
[ 1041.316912][T12296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1041.316940][T12296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1041.460468][T31671] Cannot find set identified by id 0 to match
[ 1041.678329][T31673] xt_TCPMSS: Only works on TCP SYN packets
[ 1041.762982][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1041.795372][T31680] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1042.230705][T31679] wg2 speed is unknown, defaulting to 1000
[ 1043.677274][T31715] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5935'.
[ 1044.494838][T31736] af_packet: packet size is too long (1305543466 > 2016)
[ 1044.947085][T31747] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5940'.
[ 1044.947116][T31747] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1044.947508][T31747] block nbd0: shutting down sockets
[ 1045.276487][T31744] wg2 speed is unknown, defaulting to 1000
[ 1046.775231][T31777] lo: entered promiscuous mode
[ 1046.812035][T31777] tunl0: entered promiscuous mode
[ 1046.849910][T31777] gre0: entered promiscuous mode
[ 1046.894270][T31744] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5940'.
[ 1046.894401][T31744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5940'.
[ 1048.181018][T31777] erspan0: entered promiscuous mode
[ 1048.279148][T31777] ip_vti0: entered promiscuous mode
[ 1048.506838][T31777] ip6_vti0: entered promiscuous mode
[ 1048.626456][T31777] sit0: entered promiscuous mode
[ 1048.873579][T31777] ip6tnl0: entered promiscuous mode
[ 1048.878141][T31777] ip6gre0: entered promiscuous mode
[ 1048.995985][T31777] syz_tun: entered promiscuous mode
[ 1049.095375][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'.
[ 1049.095420][T31814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5954'.
[ 1049.307744][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'.
[ 1049.307787][T31814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5954'.
[ 1049.457541][T31777] bond0: entered promiscuous mode
[ 1049.691726][T31777] dummy0: entered promiscuous mode
[ 1050.080156][T31777] nlmon0: entered promiscuous mode
[ 1050.145739][T31777] batadv0: entered promiscuous mode
[ 1050.293336][T31777] veth0: entered promiscuous mode
[ 1050.411673][T31777] veth1: entered promiscuous mode
[ 1050.553771][T31777] wg0: entered promiscuous mode
[ 1050.557249][T31777] wg1: entered promiscuous mode
[ 1050.571784][T31777] wg2: entered promiscuous mode
[ 1050.629296][T31777] veth0_to_bridge: entered promiscuous mode
[ 1050.665290][T31777] bridge_slave_0: entered promiscuous mode
[ 1050.707449][T31777] veth1_to_bridge: entered promiscuous mode
[ 1050.740136][T31777] bridge_slave_1: entered promiscuous mode
[ 1050.788659][T31777] veth1_to_bond: entered promiscuous mode
[ 1050.864921][T31777] bond_slave_1: entered promiscuous mode
[ 1050.981783][T31777] veth0_to_team: entered promiscuous mode
[ 1051.141855][T31777] team_slave_0: entered promiscuous mode
[ 1051.191603][T31777] veth1_to_team: entered promiscuous mode
[ 1051.276565][T31777] team_slave_1: entered promiscuous mode
[ 1051.380890][T31777] veth0_to_batadv: entered promiscuous mode
[ 1051.458253][T31777] batadv_slave_0: entered promiscuous mode
[ 1051.509947][T31777] veth1_to_batadv: entered promiscuous mode
[ 1051.601722][T31777] batadv_slave_1: entered promiscuous mode
[ 1051.670833][T31777] xfrm0: entered promiscuous mode
[ 1051.743737][T31777] veth0_to_hsr: entered promiscuous mode
[ 1051.900427][T31777] hsr0: entered promiscuous mode
[ 1051.951167][T31777] veth1_virt_wifi: entered promiscuous mode
[ 1052.017891][T31777] veth0_virt_wifi: entered promiscuous mode
[ 1052.324914][T31777] vlan0: entered promiscuous mode
[ 1052.440680][T31777] vlan1: entered promiscuous mode
[ 1052.573103][T31777] macvlan0: entered promiscuous mode
[ 1052.591623][T31777] macvlan1: entered promiscuous mode
[ 1052.607982][T31777] ipvlan0: entered promiscuous mode
[ 1052.628549][T31777] ipvlan1: entered promiscuous mode
[ 1052.657213][T31777] veth1_macvtap: entered promiscuous mode
[ 1052.700713][T31777] macvtap0: entered promiscuous mode
[ 1052.725741][T31777] geneve0: entered promiscuous mode
[ 1052.729802][T31777] geneve1: entered promiscuous mode
[ 1052.748716][T31777] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1052.795011][T31777] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[ 1053.007447][T31777] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[ 1053.176569][T31777] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[ 1053.271410][T31777] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[ 1053.356536][T31777] veth2: entered promiscuous mode
[ 1053.400339][T31777] veth3: entered promiscuous mode
[ 1053.491115][T31777] bond1: entered promiscuous mode
[ 1053.491143][T31777] bridge0: entered promiscuous mode
[ 1053.587169][T31777] gretap1: entered promiscuous mode
[ 1053.615460][T31777] ip6tnl1: entered promiscuous mode
[ 1053.777872][T31777] batman_adv: batadv0: Interface deactivated: macvtap1
[ 1053.780589][T31777] macvtap1: entered promiscuous mode
[ 1053.874123][T31777] veth4: entered promiscuous mode
[ 1053.935754][T31777] veth5: entered promiscuous mode
[ 1054.223777][T31777] erspan1: entered promiscuous mode
[ 1054.280564][T31777] bond2: entered promiscuous mode
[ 1054.393675][T31777] erspan2: entered promiscuous mode
[ 1054.460918][T31777] mac80211_hwsim hwsim55 wlan2: entered promiscuous mode
[ 1054.501276][T31777] syztnl0: entered promiscuous mode
[ 1054.569209][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.584669][T31777] macsec1: entered promiscuous mode
[ 1054.612840][T31777] macvlan2: entered promiscuous mode
[ 1054.715902][T31777] macvlan3: entered promiscuous mode
[ 1054.755250][T31777] mac80211_hwsim hwsim60 wlan3: entered promiscuous mode
[ 1054.758283][T31777] vcan1: entered promiscuous mode
[ 1054.761217][T31777] batman_adv: batadv0: Interface deactivated: ip6gretap1
[ 1054.798678][T31777] ip6gretap1: entered promiscuous mode
[ 1054.920623][T31777] bond3: entered promiscuous mode
[ 1055.015841][T31777] bond4: entered promiscuous mode
[ 1055.136453][T31777] batadv0.4: entered promiscuous mode
[ 1055.140705][T31777] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1055.141205][T31777] syzkaller0: entered promiscuous mode
[ 1055.165689][T31777] ip6gre1: entered promiscuous mode
[ 1055.168193][T31777] veth6: entered promiscuous mode
[ 1055.170851][T31777] veth7: entered promiscuous mode
[ 1055.260773][T31777] ip6gre2: entered promiscuous mode
[ 1055.476928][T31777] sit1: entered promiscuous mode
[ 1055.639531][T31777] dummy1: entered promiscuous mode
[ 1055.686556][T31777] bond5: entered promiscuous mode
[ 1055.686584][T31777] veth9: entered promiscuous mode
[ 1055.707909][T31777] veth8: entered promiscuous mode
[ 1055.722258][T31777] batadv1: entered promiscuous mode
[ 1055.900044][T31777] ip6gre3: entered promiscuous mode
[ 1056.235552][T31777] bridge0.257: entered promiscuous mode
[ 1056.278701][T31777] bond6: entered promiscuous mode
[ 1056.309850][T31777] ip6gretap2: entered promiscuous mode
[ 1056.367790][T31777] vxlan0: entered promiscuous mode
[ 1056.470247][T31777] bond7: entered promiscuous mode
[ 1056.470276][T31777] veth11: entered promiscuous mode
[ 1056.528800][T31777] veth10: entered promiscuous mode
[ 1056.595360][T31777] bridge1: entered promiscuous mode
[ 1056.633305][T17514] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1056.633348][T17514] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.678342][T17514] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1056.678384][T17514] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.733406][T17514] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1056.733448][T17514] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.000129][T31812] kthread_run failed with err -4
[ 1057.055209][ T9993] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.055251][ T9993] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.501960][T31883] sctp: [Deprecated]: syz.2.5957 (pid 31883) Use of int in maxseg socket option.
[ 1057.501960][T31883] Use struct sctp_assoc_value instead
[ 1057.637805][T31883] netlink: 'syz.2.5957': attribute type 39 has an invalid length.
[ 1057.691887][T31886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5958'.
[ 1057.759315][T31890] xt_hashlimit: size too large, truncated to 1048576
[ 1057.811689][T31896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5957'.
[ 1058.030104][T31892] syzkaller0: entered promiscuous mode
[ 1058.030129][T31892] syzkaller0: entered allmulticast mode
[ 1058.138409][T31892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1058.141576][T31892] syzkaller0: mtu less than device minimum
[ 1058.460004][T31900] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1058.540077][T31902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5963'.
[ 1058.789473][T31907] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003
[ 1059.009969][T31911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5964'.
[ 1059.683538][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1059.735578][T31918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5968'.
[ 1059.792039][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5967'.
[ 1059.859010][T31921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5967'.
[ 1060.690722][T31932] syzkaller0: left promiscuous mode
[ 1060.690927][T31932] syzkaller0: left allmulticast mode
[ 1060.696258][T31932] batman_adv: batadv0: Interface activated: syzkaller0
[ 1060.813749][T31934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5975'.
[ 1060.925772][T31934] ip6gretap1: entered allmulticast mode
[ 1060.927631][T31934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[ 1060.928336][T31934] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1060.928351][T31934] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1060.928386][T31934] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1061.101780][T31937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5973'.
[ 1062.115204][T31953] wg2 speed is unknown, defaulting to 1000
[ 1062.233877][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'.
[ 1063.087429][T31981] __nla_validate_parse: 1 callbacks suppressed
[ 1063.087487][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5984'.
[ 1063.191636][T31983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5984'.
[ 1063.867749][T31991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5986'.
[ 1064.105647][T31995] syzkaller1: entered promiscuous mode
[ 1064.105675][T31995] syzkaller1: entered allmulticast mode
[ 1064.285086][T32000] netlink: 'syz.3.5990': attribute type 3 has an invalid length.
[ 1064.596147][T31995] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1064.599090][T31995] 8021q: adding VLAN 0 to HW filter on device team0
[ 1064.767328][T32008] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5992'.
[ 1064.818616][T31995] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1065.478439][T31995] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1065.497091][T31995] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1065.557601][T31995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1065.654202][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5994'.
[ 1069.551546][T12296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1069.551679][T12296] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1069.577057][T12296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1069.577195][T12296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1071.254291][T32073] netlink: 'syz.5.6002': attribute type 1 has an invalid length.
[ 1071.720989][T32088] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[ 1071.721028][T32088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1071.758785][T32089] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[ 1071.758825][T32089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1071.855555][T32073] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1072.288668][T32099] netlink: 'syz.3.6009': attribute type 21 has an invalid length.
[ 1072.288698][T32099] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6009'.
[ 1072.288795][T32099] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6009'.
[ 1072.601049][T32099] ip6gre1: entered promiscuous mode
[ 1072.601076][T32099] ip6gre1: entered allmulticast mode
[ 1073.158918][T32110] syzkaller0: left promiscuous mode
[ 1073.159138][T32110] syzkaller0: left allmulticast mode
[ 1073.736451][T32074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1074.595181][T32135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1074.647936][T32130] wg2 speed is unknown, defaulting to 1000
[ 1074.738459][T32136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6018'.
[ 1074.875268][T32138] netlink: 'syz.5.6018': attribute type 10 has an invalid length.
[ 1075.246180][T32138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.247058][T32138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.515473][T32138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1076.515630][T32138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1076.515983][T32138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.516155][T32138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1076.554030][T32138] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1078.625212][T32168] netlink: 'syz.5.6023': attribute type 4 has an invalid length.
[ 1078.625248][T32168] netlink: 'syz.5.6023': attribute type 3 has an invalid length.
[ 1078.660322][T32170] netlink: 'syz.5.6023': attribute type 4 has an invalid length.
[ 1078.660347][T32170] netlink: 'syz.5.6023': attribute type 3 has an invalid length.
[ 1078.661056][T32160] wg2 speed is unknown, defaulting to 1000
[ 1079.117583][T32195] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.6026'.
[ 1079.400432][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6030'.
[ 1080.197003][T32198] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6029'.
[ 1080.934643][T32210] wg2 speed is unknown, defaulting to 1000
[ 1081.305092][T32220] No such timeout policy "s"
[ 1081.305114][T32220] netlink: Failed to associated timeout policy 's'
[ 1082.403982][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'.
[ 1082.404023][T32237] netlink: 'syz.1.6041': attribute type 20 has an invalid length.
[ 1082.404039][T32237] netlink: 'syz.1.6041': attribute type 21 has an invalid length.
[ 1082.556043][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6040'.
[ 1082.679932][T32240] siw: device registration error -23
[ 1082.744944][T32245] siw: device registration error -23
[ 1082.750928][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6043'.
[ 1082.750956][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6043'.
[ 1083.905189][T32259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6048'.
[ 1084.046016][T17522] IPVS: starting estimator thread 0...
[ 1084.052217][T32260] can: request_module (can-proto-0) failed.
[ 1084.133308][T32270] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1084.532215][T32281] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6054'.
[ 1084.532264][T32281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6054'.
[ 1085.109351][T32289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6057'.
[ 1085.655289][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6059'.
[ 1085.709776][T32294] netlink: 'syz.1.6058': attribute type 49 has an invalid length.
[ 1085.859186][   T31] audit: type=1804 audit(1790811131.659:58): pid=32299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6059" name="/newroot/570/cgroup.controllers" dev="tmpfs" ino=2940 res=1 errno=0
[ 1085.859328][   T31] audit: type=1800 audit(1790811131.659:59): pid=32299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6059" name="cgroup.controllers" dev="tmpfs" ino=2940 res=0 errno=0
[ 1085.924244][T20369] block nbd0: Receive control failed (result -32)
[ 1086.238663][T32304] pimreg9: entered allmulticast mode
[ 1087.278449][T32316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6065'.
[ 1087.587359][T32319] syzkaller1: entered promiscuous mode
[ 1087.587394][T32319] syzkaller1: entered allmulticast mode
[ 1087.967417][T32328] Bluetooth: hci0: unsupported parameter 5135
[ 1087.967446][T32328] Bluetooth: hci0: invalid length 1, exp 2 for type 24
[ 1087.972156][T32328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6069'.
[ 1088.015065][T32328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6069'.
[ 1088.085425][T32328] Bluetooth: hci0: unsupported parameter 5135
[ 1088.085453][T32328] Bluetooth: hci0: invalid length 1, exp 2 for type 24
[ 1088.166932][T32335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6069'.
[ 1088.194774][T32336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6069'.
[ 1088.481392][T32338] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1089.239889][T32348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6072'.
[ 1089.487187][T32345] xt_CT: No such helper "snmp_trap"
[ 1089.996619][T32362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6077'.
[ 1090.038141][T32362] netlink: 'syz.2.6077': attribute type 21 has an invalid length.
[ 1090.038171][T32362] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6077'.
[ 1090.038230][T32362] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6077'.
[ 1090.130806][T32372] netlink: 'syz.3.6076': attribute type 1 has an invalid length.
[ 1090.591992][T32372] bond1: entered promiscuous mode
[ 1090.603382][T32372] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1090.673657][T32371] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1090.786326][T32384] netlink: 'syz.1.6080': attribute type 3 has an invalid length.
[ 1090.806704][T32379] vlan2: entered allmulticast mode
[ 1090.806728][T32379] bond1: entered allmulticast mode
[ 1091.119825][T32387] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6081'.
[ 1091.153162][T32382] bond1: (slave bridge1): making interface the new active one
[ 1091.153192][T32382] bridge1: entered promiscuous mode
[ 1091.153452][T32382] bridge1: entered allmulticast mode
[ 1091.188810][T32382] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1091.476438][T32388] 8021q: VLANs not supported on xfrm0
[ 1091.933855][T32392] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6083'.
[ 1091.941347][T32392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6083'.
[ 1092.483977][T20369] Bluetooth: hci1: command 0x0406 tx timeout
[ 1092.729710][T32414] ip_tables: iptables: counters copy to user failed while replacing table
[ 1092.952108][T32420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1094.201202][T32450] syzkaller0: entered promiscuous mode
[ 1094.201231][T32450] syzkaller0: entered allmulticast mode
[ 1094.882748][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1095.380097][T32465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'.
[ 1095.411775][T20369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1095.432584][T20369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1095.436099][T20369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1095.466422][T20369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1095.468774][T20369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1096.180754][T32472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6105'.
[ 1097.435453][T32495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6110'.
[ 1097.523750][T28715] Bluetooth: hci5: command tx timeout
[ 1097.550864][T32501] bond2: entered promiscuous mode
[ 1097.550892][T32501] bond2: entered allmulticast mode
[ 1099.013554][T32523] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6116'.
[ 1099.114388][T32525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6118'.
[ 1099.539974][T32466] wg2 speed is unknown, defaulting to 1000
[ 1099.608016][T28715] Bluetooth: hci5: command tx timeout
[ 1100.045410][T32548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6120'.
[ 1100.124109][T32544] pim6reg: entered allmulticast mode
[ 1100.127326][T32538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'.
[ 1100.191259][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'.
[ 1100.209776][T32549] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1100.209906][T32549] syzkaller1: linktype set to 823
[ 1100.290985][T32538] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6119'.
[ 1100.634367][T32537] pim6reg: left allmulticast mode
[ 1101.684344][T28715] Bluetooth: hci5: command tx timeout
[ 1101.801575][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6131'.
[ 1102.090087][T32587] hsr_slave_1 (unregistering): left promiscuous mode
[ 1102.939546][T32466] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.940734][T32466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.940929][T32466] bridge_slave_0: entered allmulticast mode
[ 1103.000340][T32466] bridge_slave_0: entered promiscuous mode
[ 1103.047224][T32466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1103.047445][T32466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.047673][T32466] bridge_slave_1: entered allmulticast mode
[ 1103.049838][T32466] bridge_slave_1: entered promiscuous mode
[ 1103.477069][T32466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.541524][T32466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1103.742048][T32621] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6136'.
[ 1103.756175][T32466] team0: Port device team_slave_0 added
[ 1103.763753][T28715] Bluetooth: hci5: command tx timeout
[ 1103.820761][T32466] team0: Port device team_slave_1 added
[ 1103.887470][T32466] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1103.887490][T32466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1103.887525][T32466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1103.889604][T32466] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1103.889618][T32466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1103.889652][T32466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1104.851105][T32466] hsr_slave_0: entered promiscuous mode
[ 1104.864839][T32466] hsr_slave_1: entered promiscuous mode
[ 1104.867348][T32466] debugfs: 'hsr0' already exists in 'hsr'
[ 1104.867374][T32466] Cannot create hsr debugfs directory
[ 1105.157209][T32639] netlink: 'syz.3.6141': attribute type 1 has an invalid length.
[ 1105.320724][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6145'.
[ 1105.420870][T32639] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1105.457065][T32642] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1105.721129][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'.
[ 1105.842141][T32662] netlink: 'syz.5.6147': attribute type 2 has an invalid length.
[ 1106.188206][T32663] bond2: (slave syz_tun): Removing an active aggregator
[ 1106.195905][   T60] bond2: Warning: Found an uninitialized port
[ 1106.248394][T32663] bond2: (slave syz_tun): Releasing backup interface
[ 1106.334853][T32663] bridge_slave_0: left allmulticast mode
[ 1106.334964][T32663] bridge_slave_0: left promiscuous mode
[ 1106.335287][T32663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.555886][T32663] bridge_slave_1: left allmulticast mode
[ 1106.555919][T32663] bridge_slave_1: left promiscuous mode
[ 1106.556210][T32663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.720180][T32663] bond0: (slave bond_slave_0): Releasing backup interface
[ 1106.907613][T32663] bond0: (slave bond_slave_1): Releasing backup interface
[ 1106.930230][T32676] ip_tables: iptables: counters copy to user failed while replacing table
[ 1107.081469][T32663] team0: Port device team_slave_0 removed
[ 1107.120781][T32676] --map-set only usable from mangle table
[ 1107.159515][T32663] team0: Port device team_slave_1 removed
[ 1107.176052][T32663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1107.176081][T32663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.218213][T32663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1107.218241][T32663] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1107.299687][T32688] openvswitch: netlink: Tunnel attr 166 out of range max 16
[ 1107.329238][T32663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1107.844553][T28715] Bluetooth: hci4: command 0x0406 tx timeout
[ 1108.536182][T32666] team0: Mode changed to "broadcast"
[ 1108.589033][T32672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6146'.
[ 1110.153939][T32725] pim6reg: entered allmulticast mode
[ 1110.187096][T32727] ±ÿ: entered promiscuous mode
[ 1110.187300][T32727] tunl0: entered promiscuous mode
[ 1110.187523][T32727] gre0: entered promiscuous mode
[ 1110.187658][T32727] gretap0: entered promiscuous mode
[ 1110.187787][T32727] erspan0: entered promiscuous mode
[ 1110.187932][T32727] ip_vti0: entered promiscuous mode
[ 1110.188099][T32727] ip6_vti0: entered promiscuous mode
[ 1110.188226][T32727] sit0: entered promiscuous mode
[ 1110.188356][T32727] ip6tnl0: entered promiscuous mode
[ 1110.188483][T32727] ip6gre0: entered promiscuous mode
[ 1110.188615][T32727] ip6gretap0: entered promiscuous mode
[ 1110.246926][T32727] vcan0: entered promiscuous mode
[ 1110.247524][T32727] team0: entered promiscuous mode
[ 1110.247567][T32727] team_slave_1: entered promiscuous mode
[ 1110.248592][T32727] nlmon0: entered promiscuous mode
[ 1110.248990][T32727] vxcan0: entered promiscuous mode
[ 1110.269495][T32727] vxcan1: entered promiscuous mode
[ 1110.334833][T32727] veth0: entered promiscuous mode
[ 1110.336264][T32727] veth1: entered promiscuous mode
[ 1110.341274][T32727] wg0: entered promiscuous mode
[ 1110.341467][T32727] wg2: entered promiscuous mode
[ 1110.341762][T32727] veth0_to_bridge: entered promiscuous mode
[ 1110.342066][T32727] veth1_to_bridge: entered promiscuous mode
[ 1110.503576][T32727] veth0_to_bond: entered promiscuous mode
[ 1110.504539][T32727] bond_slave_0: entered promiscuous mode
[ 1110.505633][T32727] veth1_to_bond: entered promiscuous mode
[ 1110.506697][T32727] bond_slave_1: entered promiscuous mode
[ 1110.507782][T32727] veth1_to_team: entered promiscuous mode
[ 1110.509778][T32727] veth0_to_batadv: entered promiscuous mode
[ 1110.510869][T32727] batadv_slave_0: entered promiscuous mode
[ 1110.511949][T32727] xfrm0: entered promiscuous mode
[ 1110.559387][T32727] veth0_to_hsr: entered promiscuous mode
[ 1110.561295][T32727] hsr0: entered promiscuous mode
[ 1110.562111][T32727] veth1_virt_wifi: entered promiscuous mode
[ 1110.580310][T32727] veth0_virt_wifi: entered promiscuous mode
[ 1110.581419][T32727] virt_wifi0: entered promiscuous mode
[ 1110.597116][T32727] macvtap0: entered promiscuous mode
[ 1110.598250][T32727] macsec0: entered promiscuous mode
[ 1110.599296][T32727] geneve0: entered promiscuous mode
[ 1110.600380][T32727] geneve1: entered promiscuous mode
[ 1110.601450][T32727] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode
[ 1110.638271][T32727] mac80211_hwsim hwsim46 wlan2: entered promiscuous mode
[ 1110.660964][T32727] mac80211_hwsim hwsim50 wlan3: entered promiscuous mode
[ 1110.661261][T32727] veth2: entered promiscuous mode
[ 1110.661431][T32727] veth3: entered promiscuous mode
[ 1110.661622][T32727] geneve2: entered promiscuous mode
[ 1110.661829][T32727] gre1: entered promiscuous mode
[ 1110.661968][T32727] mac80211_hwsim hwsim56 wlan4: entered promiscuous mode
[ 1110.662133][T32727] ip6tnl1: entered promiscuous mode
[ 1110.778190][T32727] bond1: entered promiscuous mode
[ 1110.778383][T32727] gretap2: entered promiscuous mode
[ 1110.778522][T32727] bridge1: entered promiscuous mode
[ 1110.778671][T32727] mac80211_hwsim hwsim59 wlan5: entered promiscuous mode
[ 1110.778840][T32727] mac80211_hwsim hwsim63 wlan6: entered promiscuous mode
[ 1110.779015][T32727] bond2: entered promiscuous mode
[ 1110.779274][T32727] bridge2: entered promiscuous mode
[ 1110.779412][T32727] syztnl0: entered promiscuous mode
[ 1110.779678][T32727] : entered promiscuous mode
[ 1110.779818][T32727] vxlan0: entered promiscuous mode
[ 1110.853497][T32727] bridge3: entered promiscuous mode
[ 1110.853670][T32727] syzkaller0.0001: entered promiscuous mode
[ 1110.854005][T32727] 7: entered promiscuous mode
[ 1110.854145][T32727] bond0: entered promiscuous mode
[ 1110.854282][T32727] bridge4: entered promiscuous mode
[ 1110.854421][T32727] gre2: entered promiscuous mode
[ 1110.854553][T32727] gre3: entered promiscuous mode
[ 1110.854677][T32727] ip6tnl2: entered promiscuous mode
[ 1110.854804][T32727] bond4: entered promiscuous mode
[ 1110.854945][T32727] vxlan1: entered promiscuous mode
[ 1110.855076][T32727] gre4: entered promiscuous mode
[ 1110.855248][T32727] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode
[ 1110.855413][T32727] sit1: entered promiscuous mode
[ 1110.855543][T32727] ip6tnl3: entered promiscuous mode
[ 1110.855669][T32727] macsec1: entered promiscuous mode
[ 1110.855802][T32727] mac80211_hwsim hwsim82 wlan7: entered promiscuous mode
[ 1110.855969][T32727] erspan1: entered promiscuous mode
[ 1110.856250][T32727] ip6gretap1: entered promiscuous mode
[ 1110.856384][T32727] ip6gre2: entered promiscuous mode
[ 1110.856655][T32727] bridge5: entered promiscuous mode
[ 1110.856935][T32727] bridge7: entered promiscuous mode
[ 1110.857074][T32727] mac80211_hwsim hwsim88 wlan8: entered promiscuous mode
[ 1110.857233][T32727] bond6: entered promiscuous mode
[ 1110.857366][T32727] bridge8: entered promiscuous mode
[ 1110.857507][T32727] bridge9: entered promiscuous mode
[ 1111.066112][T32727] bridge10: entered promiscuous mode
[ 1111.104742][T32727] macvlan0: entered promiscuous mode
[ 1111.855017][T32740] openvswitch: netlink: IP tunnel dst address not specified
[ 1111.917931][T32742] netlink: 'syz.1.6160': attribute type 5 has an invalid length.
[ 1112.070599][T32742] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.6160'.
[ 1112.070775][T32742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6160'.
[ 1112.070798][T32742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6160'.
[ 1112.157750][T32751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6162'.
[ 1112.211388][T32751] geneve2: entered promiscuous mode
[ 1113.637609][  T309] netlink: 'syz.2.6166': attribute type 1 has an invalid length.
[ 1113.637637][  T309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6166'.
[ 1114.701048][  T324] netlink: 'syz.1.6173': attribute type 1 has an invalid length.
[ 1114.950832][  T324] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1115.092009][  T326] bond8: (slave gretap2): making interface the new active one
[ 1115.178643][  T326] bond8: (slave gretap2): Enslaving as an active interface with an up link
[ 1115.615249][  T333] sch_tbf: burst 0 is lower than device lo mtu (1296) !
[ 1116.010629][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.599979][  T343] lo: entered allmulticast mode
[ 1116.600279][  T343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6176'.
[ 1116.600299][  T343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1117.055576][T32466] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1117.093215][T32466] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1117.095951][T32466] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1117.131516][T32466] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1117.228078][  T352] netlink: 'syz.2.6179': attribute type 4 has an invalid length.
[ 1117.228361][T32466] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1117.247994][  T352] Bluetooth: hci0: unsupported parameter 5135
[ 1117.248020][  T352] Bluetooth: hci0: unsupported parameter 8192
[ 1117.248040][  T352] Bluetooth: hci0: unsupported parameter 5135
[ 1117.248054][  T352] Bluetooth: hci0: unsupported parameter 8192
[ 1117.280321][T32466] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1117.311545][T32466] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1117.377873][  T357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'.
[ 1117.391829][T32466] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1118.596874][  T388] netlink: ct family unspecified
[ 1118.596915][  T388] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1118.811154][  T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6185'.
[ 1118.811319][  T388] netlink: 'syz.3.6184': attribute type 1 has an invalid length.
[ 1118.862196][T32466] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1118.919708][  T391] netlink: 'syz.1.6183': attribute type 4 has an invalid length.
[ 1118.919735][  T391] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6183'.
[ 1119.021622][  T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6183'.
[ 1119.074605][  T391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6183'.
[ 1119.170521][  T388] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1119.341236][  T393] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1119.370361][  T397] syzkaller1: entered promiscuous mode
[ 1119.370390][  T397] syzkaller1: entered allmulticast mode
[ 1119.459860][  T399] bond3: entered promiscuous mode
[ 1119.459893][  T399] bond3: entered allmulticast mode
[ 1119.907206][ T6334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1119.915245][T17513] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1119.915450][T17513] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1119.915498][T17513] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1120.094003][T32466] 8021q: adding VLAN 0 to HW filter on device team0
[ 1120.125513][T17519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1120.125653][T17519] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1120.205939][T16620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1120.206062][T16620] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1120.280228][  T412] netlink: 'syz.3.6187': attribute type 1 has an invalid length.
[ 1120.764867][  T418] netlink: 'syz.2.6188': attribute type 2 has an invalid length.
[ 1120.868424][T17512] IPVS: starting estimator thread 0...
[ 1120.955075][  T424] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1120.963083][  T423] syzkaller1: entered promiscuous mode
[ 1120.963214][  T423] syzkaller1: entered allmulticast mode
[ 1122.907024][  T465] No such timeout policy "syz1"
[ 1123.760506][  T476] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6197'.
[ 1123.760598][  T476] netlink: 'syz.2.6197': attribute type 9 has an invalid length.
[ 1123.760617][  T476] netlink: 'syz.2.6197': attribute type 1 has an invalid length.
[ 1123.969675][  T476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6197'.
[ 1124.175503][  T484] netlink: 'syz.3.6200': attribute type 1 has an invalid length.
[ 1124.351248][  T484] bond4: entered promiscuous mode
[ 1124.361947][  T484] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1125.738003][  T509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'.
[ 1125.834641][  T512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6204'.
[ 1125.861834][T32466] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1125.991615][  T516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'.
[ 1126.130703][  T520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6204'.
[ 1126.204136][  T531] netlink: 'syz.3.6200': attribute type 1 has an invalid length.
[ 1126.600841][  T490] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1126.601345][  T490] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address
[ 1126.601367][  T490] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[ 1126.661737][  T490] bond4: (slave ip6gre2): making interface the new active one
[ 1126.661765][  T490] ip6gre2: entered promiscuous mode
[ 1126.694594][  T490] bond4: (slave ip6gre2): Enslaving as an active interface with an up link
[ 1126.966926][T32466] veth0_vlan: entered promiscuous mode
[ 1127.175503][T32466] veth1_vlan: entered promiscuous mode
[ 1127.407961][T32466] veth0_macvtap: entered promiscuous mode
[ 1127.522987][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1127.531134][T32466] veth1_macvtap: entered promiscuous mode
[ 1127.599112][  T548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6208'.
[ 1127.809937][T32466] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1127.896907][T32466] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1128.133455][T17517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.134521][T17517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.134571][T17517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.269542][  T554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6210'.
[ 1128.326971][  T558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6210'.
[ 1128.397248][T17512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.944512][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.944536][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.338993][  T567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6213'.
[ 1129.433761][  T567] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6213'.
[ 1129.459797][  T567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6213'.
[ 1129.490986][  T567] ip6tnl0: entered allmulticast mode
[ 1129.506718][T17517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.506744][T17517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.216523][  T581] netlink: 'syz.2.6217': attribute type 2 has an invalid length.
[ 1130.216550][  T581] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6217'.
[ 1130.286419][  T591] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6217'.
[ 1130.316248][  T592] netlink: 'syz.2.6217': attribute type 2 has an invalid length.
[ 1130.316277][  T592] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6217'.
[ 1131.128561][  T608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1131.325269][  T617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6221'.
[ 1131.484375][T28715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1131.502086][T28715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1131.510890][T28715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1131.540255][T28715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1131.540985][T28715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1132.701896][  T632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6223'.
[ 1132.701925][  T632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6223'.
[ 1133.160579][  T637] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6225'.
[ 1133.764499][T20369] Bluetooth: hci2: command tx timeout
[ 1135.845105][T20369] Bluetooth: hci2: command tx timeout
[ 1136.187641][  T611] wg2 speed is unknown, defaulting to 1000
[ 1136.546052][  T698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6235'.
[ 1137.582221][  T707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6237'.
[ 1137.582250][  T707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6237'.
[ 1137.924506][T20369] Bluetooth: hci2: command tx timeout
[ 1138.288493][  T737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6243'.
[ 1138.782098][  T738] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1139.326028][  T611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.326176][  T611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.326606][  T611] bridge_slave_0: entered allmulticast mode
[ 1139.391523][  T611] bridge_slave_0: entered promiscuous mode
[ 1139.445794][  T611] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.464358][  T611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.464901][  T611] bridge_slave_1: entered allmulticast mode
[ 1139.518603][  T611] bridge_slave_1: entered promiscuous mode
[ 1139.916813][  T611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.967043][  T611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.004039][T20369] Bluetooth: hci2: command tx timeout
[ 1140.438377][  T611] team0: Port device team_slave_0 added
[ 1140.441662][  T611] team0: Port device team_slave_1 added
[ 1141.011365][  T780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6250'.
[ 1142.061896][  T792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'.
[ 1142.281226][T20369] block nbd8: Receive control failed (result -32)
[ 1142.469621][  T611] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1142.469642][  T611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1142.469674][  T611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1142.993539][  T806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'.
[ 1152.801160][  T792] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.916505][  T611] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.916529][  T611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.916564][  T611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1153.539275][  T611] hsr_slave_0: entered promiscuous mode
[ 1153.567026][  T611] hsr_slave_1: entered promiscuous mode
[ 1153.567975][  T611] debugfs: 'hsr0' already exists in 'hsr'
[ 1153.568000][  T611] Cannot create hsr debugfs directory
[ 1153.736651][  T845] Unsupported ieee802154 address type: 0
[ 1153.937934][  T849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6258'.
[ 1153.937965][  T849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6258'.
[ 1154.181938][  T853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6259'.
[ 1154.463306][  T839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'.
[ 1154.841841][  T869] ip_tables: iptables: counters copy to user failed while replacing table
[ 1155.022283][  T861] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1155.188980][  T861] veth1_vlan: left promiscuous mode
[ 1155.205608][  T861] veth0_vlan: left promiscuous mode
[ 1155.216931][  T861] veth0_vlan: entered promiscuous mode
[ 1155.243136][  T861] veth1_vlan: entered promiscuous mode
[ 1155.341083][  T861] veth1_macvtap: left promiscuous mode
[ 1155.362171][  T861] veth0_macvtap: left promiscuous mode
[ 1155.535513][  T861] veth0_macvtap: entered promiscuous mode
[ 1155.554653][  T861] veth1_macvtap: entered promiscuous mode
[ 1155.607055][  T861] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1155.608489][  T861] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1155.609815][  T861] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1155.611483][  T861] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1155.665307][  T861] erspan0: entered promiscuous mode
[ 1155.671924][  T861] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1155.854045][T17517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.854904][T17517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.854952][T17517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.868413][   T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.921130][   T60] ip6_tunnel: L xmit: Local address not yet configured!
[ 1157.288312][  T907] ip6gretap2: entered allmulticast mode
[ 1157.565083][  T925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1157.855467][  T929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6270'.
[ 1159.024637][  T611] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1160.178817][  T611] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1160.322652][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[ 1161.050662][  T611] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1161.436065][  T611] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1162.632030][T20369] Bluetooth: hci5: Malformed HCI Event
[ 1163.833403][T20369] block nbd9: Receive control failed (result -32)
[ 1164.701820][ T1025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1164.974955][  T611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1165.018375][  T611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1165.555705][  T611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1165.575045][  T611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1165.577804][  T611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1165.618119][  T611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1165.701345][ T1046] team0 (unregistering): Port device team_slave_1 removed
[ 1165.871210][ T1065] macsec1: entered promiscuous mode
[ 1165.908968][  T611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1165.972093][  T611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1166.164743][ T1085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6290'.
[ 1166.518683][T17527] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode
[ 1166.518776][T17527] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[ 1166.700082][T17527] team0: Port device netdevsim1 removed
[ 1166.812061][ T1102] tipc: Started in network mode
[ 1166.812084][ T1102] tipc: Node identity 1001001, cluster identity 4711
[ 1166.812097][ T1102] tipc: Node number set to 16781313
[ 1166.863951][ T1103] tipc: Enabled bearer <ib:syz_tun>, priority 10
[ 1166.927441][ T1116] ovs-s!: entered promiscuous mode
[ 1167.044039][T17522] wlan0: Trigger new scan to find an IBSS to join
[ 1167.129488][ T1118] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1167.203576][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1167.430403][T17527] vlan2 (unregistering): left promiscuous mode
[ 1167.430437][T17527] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[ 1167.432985][T17527] bridge0: port 3(vlan2) entered disabled state
[ 1167.621507][ T1135] netlink: 'syz.5.6299': attribute type 39 has an invalid length.
[ 1168.418270][ T1149] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6302'.
[ 1168.418299][ T1149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6302'.
[ 1168.418324][ T1149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'.
[ 1168.681013][ T1158] dummy0: mtu less than device minimum
[ 1168.721145][ T1159] bridge2: entered promiscuous mode
[ 1168.721212][ T1159] bridge2: entered allmulticast mode
[ 1168.751697][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1168.789227][  T611] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.097769][ T1168] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6307'.
[ 1169.307609][  T611] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.430666][T17527] team0: left allmulticast mode
[ 1169.430765][T17527] team0: left promiscuous mode
[ 1169.431163][T17527] bridge0: port 2(team0) entered disabled state
[ 1169.477377][T17527] bond0: left allmulticast mode
[ 1169.477411][T17527] bond0: left promiscuous mode
[ 1169.477661][T17527] bridge0: port 1(bond0) entered disabled state
[ 1169.762531][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[ 1169.824710][T17527] pim6reg: left allmulticast mode
[ 1169.827205][T17527] pimreg: left allmulticast mode
[ 1169.997545][ T1187] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 1170.029548][T17512] wlan0: Trigger new scan to find an IBSS to join
[ 1170.093997][ T1189] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1170.239082][ T1189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 1173.045035][T17512] wlan0: Trigger new scan to find an IBSS to join
[ 1174.175257][T17512] wlan0: Creating new IBSS network, BSSID f6:06:b4:22:a9:8d
[ 1174.178091][T17527] bond5 (unregistering): (slave gretap1): Removing an active aggregator
[ 1174.180697][T17527] bond5 (unregistering): (slave gretap1): Releasing backup interface
[ 1174.317277][T17527] bond7 (unregistering): (slave gretap2): Releasing backup interface
[ 1174.541004][T17527] bond6 (unregistering): (slave bridge6): Removing an active aggregator
[ 1174.541512][T17527] bond6 (unregistering): (slave bridge6): Releasing backup interface
[ 1174.541534][T17527] bond6 (unregistering): (slave bridge6): the permanent HWaddr of slave - 62:18:0f:aa:e1:46 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1174.541919][T17527] bridge6 (unregistering): left promiscuous mode
[ 1174.541944][T17527] bridge6 (unregistering): left allmulticast mode
[ 1174.617258][T17527] bond6 (unregistering): (slave bridge7): Releasing backup interface
[ 1174.617682][T17527] bridge7 (unregistering): left promiscuous mode
[ 1174.617707][T17527] bridge7 (unregistering): left allmulticast mode
[ 1174.656329][T17527] bond6 (unregistering): (slave bridge8): Releasing backup interface
[ 1174.656714][T17527] bridge8 (unregistering): left promiscuous mode
[ 1174.656739][T17527] bridge8 (unregistering): left allmulticast mode
[ 1174.691911][T17527] bond6 (unregistering): (slave bridge9): Releasing backup interface
[ 1174.707946][T17527] bridge9 (unregistering): left promiscuous mode
[ 1174.707978][T17527] bridge9 (unregistering): left allmulticast mode
[ 1174.737506][T17527] bond6 (unregistering): (slave bridge10): Releasing backup interface
[ 1174.737950][T17527] bridge10 (unregistering): left promiscuous mode
[ 1174.737974][T17527] bridge10 (unregistering): left allmulticast mode
[ 1174.776062][T17527] bond6 (unregistering): (slave bridge11): Releasing backup interface
[ 1174.776705][T17527] bridge11 (unregistering): left promiscuous mode
[ 1174.776733][T17527] bridge11 (unregistering): left allmulticast mode
[ 1174.868439][T17527] bond9 (unregistering): (slave bridge14): Releasing active interface
[ 1174.897018][T17527] team0: Port device bridge15 removed
[ 1174.971624][T17527] bond0 (unregistering): Released all slaves
[ 1174.988958][T17527] bond1 (unregistering): Released all slaves
[ 1175.017978][T17527] bond2 (unregistering): Released all slaves
[ 1175.048610][T17527] bond3 (unregistering): Released all slaves
[ 1175.079101][T17527] bond4 (unregistering): Released all slaves
[ 1175.106660][T17527] bond5 (unregistering): Released all slaves
[ 1175.135408][T17527] bond6 (unregistering): Released all slaves
[ 1175.164110][T17527] bond7 (unregistering): (slave bond8): Releasing backup interface
[ 1175.164929][T17527] bond7 (unregistering): Released all slaves
[ 1175.207093][T17527] bond8 (unregistering): Released all slaves
[ 1175.261028][T17527] bond9 (unregistering): Released all slaves
[ 1175.324596][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 1175.328083][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1175.635335][T17527] ovs-s!!: left promiscuous mode
[ 1175.749656][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.749766][ T9993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.795253][ T1221] IPVS: Error connecting to the multicast addr
[ 1175.795273][T17527] tipc: Disabling bearer <udp:syz2>
[ 1175.800418][T17527] tipc: Left network mode
[ 1175.844074][ T1221] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6315'.
[ 1175.879822][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.879955][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1176.597109][ T1241] FAULT_INJECTION: forcing a failure.
[ 1176.597109][ T1241] name failslab, interval 1, probability 0, space 0, times 0
[ 1176.597147][ T1241] CPU: 1 UID: 0 PID: 1241 Comm: syz.0.6321 Not tainted syzkaller #0 PREEMPT(full) 
[ 1176.597171][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1176.597186][ T1241] Call Trace:
[ 1176.597195][ T1241]  <TASK>
[ 1176.597205][ T1241]  dump_stack_lvl+0xe8/0x150
[ 1176.597244][ T1241]  should_fail_ex+0x410/0x560
[ 1176.597275][ T1241]  ? __alloc_skb+0x1db/0x7a0
[ 1176.597302][ T1241]  should_failslab+0xa8/0x100
[ 1176.597331][ T1241]  ? __alloc_skb+0x1db/0x7a0
[ 1176.597355][ T1241]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1176.597391][ T1241]  ? __alloc_skb+0x18d/0x7a0
[ 1176.597418][ T1241]  ? __alloc_skb+0x1db/0x7a0
[ 1176.597459][ T1241]  __alloc_skb+0x1db/0x7a0
[ 1176.597491][ T1241]  netlink_sendmsg+0x5d4/0xb40
[ 1176.597522][ T1241]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1176.597554][ T1241]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1176.597581][ T1241]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1176.597601][ T1241]  sock_sendmsg_nosec+0x14e/0x190
[ 1176.597626][ T1241]  ____sys_sendmsg+0x54e/0x850
[ 1176.597664][ T1241]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1176.597707][ T1241]  ? import_iovec+0x73/0xa0
[ 1176.597740][ T1241]  ___sys_sendmsg+0x2a5/0x360
[ 1176.597769][ T1241]  ? __lock_acquire+0x747/0x2de0
[ 1176.597799][ T1241]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1176.597870][ T1241]  ? __fget_files+0x2a/0x420
[ 1176.597901][ T1241]  ? __fget_files+0x3a2/0x420
[ 1176.597943][ T1241]  __x64_sys_sendmsg+0x1b1/0x290
[ 1176.597978][ T1241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1176.598032][ T1241]  do_syscall_64+0x166/0x520
[ 1176.598061][ T1241]  ? trace_irq_disable+0x3b/0x140
[ 1176.598082][ T1241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.598106][ T1241]  ? clear_bhb_loop+0x70/0xc0
[ 1176.598133][ T1241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.598157][ T1241] RIP: 0033:0x7f932439e159
[ 1176.598179][ T1241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1176.598198][ T1241] RSP: 002b:00007f93252b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1176.598221][ T1241] RAX: ffffffffffffffda RBX: 00007f9324625fa0 RCX: 00007f932439e159
[ 1176.598238][ T1241] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000007
[ 1176.598253][ T1241] RBP: 00007f93252b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1176.598267][ T1241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1176.598280][ T1241] R13: 00007f9324626038 R14: 00007f9324625fa0 R15: 00007fffac8763e8
[ 1176.598318][ T1241]  </TASK>
[ 1177.451188][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.812111][ T1272] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1178.599926][ T1285] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6326'.
[ 1178.599953][ T1285] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1178.600227][ T1285] block nbd10: shutting down sockets
[ 1179.016792][ T1298] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6330'.
[ 1179.189283][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1179.735874][  T611] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1179.766805][ T1271] Bluetooth: hci2: command 0x0405 tx timeout
[ 1180.477324][  T611] veth0_vlan: entered promiscuous mode
[ 1180.777931][  T611] veth1_vlan: entered promiscuous mode
[ 1181.262741][ T1359] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6340'.
[ 1181.332608][ T1352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6341'.
[ 1181.530504][ T1364] xt_hashlimit: size too large, truncated to 1048576
[ 1181.747821][ T1367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6344'.
[ 1181.772728][  T611] veth0_macvtap: entered promiscuous mode
[ 1181.884315][  T611] veth1_macvtap: entered promiscuous mode
[ 1182.259568][T17527] hsr_slave_0: left promiscuous mode
[ 1182.811625][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6347'.
[ 1182.980197][ T1396] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6347'.
[ 1183.349936][ T1398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6348'.
[ 1183.874715][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1183.976227][  T611] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1183.981089][  T611] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1184.153478][T17513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.153532][T17513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.153570][T17513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.153608][T17513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.436122][ T1408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6351'.
[ 1184.959131][T17527] IPVS: stop unused estimator thread 0...
[ 1185.318522][T12296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.318548][T12296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.794499][T12296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.794527][T12296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.159232][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6355'.
[ 1186.867075][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6360'.
[ 1187.042829][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[ 1187.160862][ T1453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6361'.
[ 1187.216678][ T1458] netlink: 'syz.0.6363': attribute type 1 has an invalid length.
[ 1187.277248][ T1271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1187.281842][ T1271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1187.301214][ T1271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1187.315143][ T1271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1187.330690][ T1271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1187.588462][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1187.682562][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1187.971208][ T1472] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode
[ 1188.108721][ T1472] mac80211_hwsim hwsim86 wlan0: left promiscuous mode
[ 1189.288969][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6372'.
[ 1189.443566][ T1271] Bluetooth: hci0: command tx timeout
[ 1189.545412][ T1509] netlink: 'syz.3.6372': attribute type 1 has an invalid length.
[ 1189.545438][ T1509] netlink: 'syz.3.6372': attribute type 7 has an invalid length.
[ 1189.545455][ T1509] netlink: 'syz.3.6372': attribute type 8 has an invalid length.
[ 1189.545470][ T1509] netlink: 'syz.3.6372': attribute type 1 has an invalid length.
[ 1189.545485][ T1509] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6372'.
[ 1189.545504][ T1509] NCSI netlink: No device for ifindex 2147549188
[ 1189.877069][ T1459] wg2 speed is unknown, defaulting to 1000
[ 1190.251754][ T1526] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1190.305444][ T1527] nbd10: detected capacity change from 0 to 63
[ 1190.407802][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6376'.
[ 1190.448530][ T1271] block nbd10: Receive control failed (result -104)
[ 1190.518245][ T1534] x_tables: duplicate underflow at hook 1
[ 1190.749215][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6378'.
[ 1191.051080][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'.
[ 1191.051118][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'.
[ 1191.052075][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'.
[ 1191.052104][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'.
[ 1191.510800][ T1563] digital: digital_start_poll: Unknown protocol
[ 1191.524376][ T1271] Bluetooth: hci0: command tx timeout
[ 1191.584833][ T1563] ip_tables: iptables: counters copy to user failed while replacing table
[ 1191.606015][ T1563] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1191.606277][ T1563] block nbd11: shutting down sockets
[ 1191.680836][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1191.680958][ T1459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1191.689689][ T1459] bridge_slave_0: entered allmulticast mode
[ 1191.780980][ T1459] bridge_slave_0: entered promiscuous mode
[ 1191.819176][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1191.819303][ T1459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1191.819481][ T1459] bridge_slave_1: entered allmulticast mode
[ 1191.858668][ T1459] bridge_slave_1: entered promiscuous mode
[ 1192.103498][ T1459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1192.131028][ T1459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1192.438945][ T1459] team0: Port device team_slave_0 added
[ 1192.476830][ T1459] team0: Port device team_slave_1 added
[ 1192.546190][ T1600] __nla_validate_parse: 3 callbacks suppressed
[ 1192.546214][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6390'.
[ 1192.546235][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6390'.
[ 1192.959031][ T1459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1192.959052][ T1459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1192.959082][ T1459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1193.080522][ T1606] netlink: 'syz.1.6392': attribute type 1 has an invalid length.
[ 1193.080548][ T1606] nbd: error processing sock list
[ 1193.158800][ T1603] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1193.169589][ T1459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1193.169608][ T1459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1193.169639][ T1459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1193.180867][ T1607] 
: renamed from bond0 (while UP)
[ 1193.544731][ T1612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6395'.
[ 1193.603725][ T1271] Bluetooth: hci0: command tx timeout
[ 1193.688672][ T1459] hsr_slave_0: entered promiscuous mode
[ 1193.709133][ T1459] hsr_slave_1: entered promiscuous mode
[ 1193.723242][ T1459] debugfs: 'hsr0' already exists in 'hsr'
[ 1193.723298][ T1459] Cannot create hsr debugfs directory
[ 1193.858297][ T1620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6398'.
[ 1193.880701][ T1620] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6398'.
[ 1194.104919][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'.
[ 1194.184885][ T1634] netlink: 'syz.0.6400': attribute type 30 has an invalid length.
[ 1194.184914][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6400'.
[ 1194.364693][ T1638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'.
[ 1194.895394][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6402'.
[ 1195.040112][ T1656] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1195.329227][ T1662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6405'.
[ 1195.506980][ T1663] pim6reg1: entered promiscuous mode
[ 1195.507007][ T1663] pim6reg1: entered allmulticast mode
[ 1195.625821][ T1459] 
[ 1195.628228][ T1459] ======================================================
[ 1195.635272][ T1459] WARNING: possible circular locking dependency detected
[ 1195.642354][ T1459] syzkaller #0 Not tainted
[ 1195.646798][ T1459] ------------------------------------------------------
[ 1195.653839][ T1459] syz-executor/1459 is trying to acquire lock:
[ 1195.660025][ T1459] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600
[ 1195.669554][ T1459] 
[ 1195.669554][ T1459] but task is already holding lock:
[ 1195.676973][ T1459] ffffffff8f803500 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[ 1195.685904][ T1459] 
[ 1195.685904][ T1459] which lock already depends on the new lock.
[ 1195.685904][ T1459] 
[ 1195.696338][ T1459] 
[ 1195.696338][ T1459] the existing dependency chain (in reverse order) is:
[ 1195.705399][ T1459] 
[ 1195.705399][ T1459] -> #8 (gdp_mutex){+.+.}-{4:4}:
[ 1195.712555][ T1459]        __mutex_lock+0x19d/0x1550
[ 1195.717707][ T1459]        get_device_parent+0x16f/0x3a0
[ 1195.723228][ T1459]        device_add+0x2d4/0xb80
[ 1195.728108][ T1459]        device_create+0x269/0x300
[ 1195.733250][ T1459]        msr_device_create+0x33/0x50
[ 1195.738569][ T1459]        cpuhp_invoke_callback+0x434/0x810
[ 1195.744411][ T1459]        cpuhp_thread_fun+0x362/0x780
[ 1195.749828][ T1459]        smpboot_thread_fn+0x565/0xa70
[ 1195.755315][ T1459]        kthread+0x38b/0x480
[ 1195.759925][ T1459]        ret_from_fork+0x514/0xb70
[ 1195.765053][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1195.770386][ T1459] 
[ 1195.770386][ T1459] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[ 1195.777972][ T1459]        cpuhp_thread_fun+0x127/0x780
[ 1195.783393][ T1459]        smpboot_thread_fn+0x565/0xa70
[ 1195.788894][ T1459]        kthread+0x38b/0x480
[ 1195.793505][ T1459]        ret_from_fork+0x514/0xb70
[ 1195.798664][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1195.803985][ T1459] 
[ 1195.803985][ T1459] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[ 1195.811751][ T1459]        cpus_read_lock+0x42/0x160
[ 1195.816904][ T1459]        static_key_slow_inc+0x12/0x30
[ 1195.822387][ T1459]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[ 1195.828663][ T1459]        nbd_genl_foreach_sock+0x265/0x450
[ 1195.834503][ T1459]        nbd_genl_reconfigure+0xbbb/0x1040
[ 1195.840340][ T1459]        genl_family_rcv_msg_doit+0x233/0x340
[ 1195.846436][ T1459]        genl_rcv_msg+0x614/0x7a0
[ 1195.851485][ T1459]        netlink_rcv_skb+0x226/0x4a0
[ 1195.856791][ T1459]        genl_rcv+0x28/0x40
[ 1195.861315][ T1459]        netlink_unicast+0x7bd/0x940
[ 1195.866628][ T1459]        netlink_sendmsg+0x813/0xb40
[ 1195.871935][ T1459]        sock_sendmsg_nosec+0x14e/0x190
[ 1195.877504][ T1459]        ____sys_sendmsg+0x54e/0x850
[ 1195.882815][ T1459]        ___sys_sendmsg+0x2a5/0x360
[ 1195.888054][ T1459]        __x64_sys_sendmsg+0x1b1/0x290
[ 1195.893546][ T1459]        do_syscall_64+0x166/0x520
[ 1195.898710][ T1459]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.905161][ T1459] 
[ 1195.905161][ T1459] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1195.912852][ T1459]        __mutex_lock+0x19d/0x1550
[ 1195.917999][ T1459]        nbd_queue_rq+0x373/0xff0
[ 1195.923043][ T1459]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1195.929140][ T1459]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1195.936014][ T1459]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1195.942542][ T1459]        blk_mq_run_work_fn+0x16c/0x300
[ 1195.948121][ T1459]        process_scheduled_works+0xc3d/0x1630
[ 1195.954217][ T1459]        worker_thread+0xa47/0xfb0
[ 1195.959363][ T1459]        kthread+0x38b/0x480
[ 1195.963977][ T1459]        ret_from_fork+0x514/0xb70
[ 1195.969113][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1195.974431][ T1459] 
[ 1195.974431][ T1459] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1195.981660][ T1459]        __mutex_lock+0x19d/0x1550
[ 1195.986792][ T1459]        nbd_queue_rq+0xc1/0xff0
[ 1195.991749][ T1459]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1195.997849][ T1459]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1196.004730][ T1459]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1196.011264][ T1459]        blk_mq_run_work_fn+0x16c/0x300
[ 1196.016862][ T1459]        process_scheduled_works+0xc3d/0x1630
[ 1196.022959][ T1459]        worker_thread+0xa47/0xfb0
[ 1196.028104][ T1459]        kthread+0x38b/0x480
[ 1196.032712][ T1459]        ret_from_fork+0x514/0xb70
[ 1196.037849][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1196.043166][ T1459] 
[ 1196.043166][ T1459] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1196.050334][ T1459]        __synchronize_srcu+0xc9/0x2f0
[ 1196.055813][ T1459]        elevator_switch+0x1e8/0x7b0
[ 1196.061125][ T1459]        elevator_change+0x2fa/0x480
[ 1196.066434][ T1459]        elevator_set_default+0x375/0x440
[ 1196.072179][ T1459]        blk_register_queue+0x3f3/0x4e0
[ 1196.077747][ T1459]        __add_disk+0x6b8/0xdb0
[ 1196.082626][ T1459]        add_disk_fwnode+0x100/0x3a0
[ 1196.087953][ T1459]        nbd_dev_add+0x733/0xb60
[ 1196.092918][ T1459]        nbd_init+0x168/0x1f0
[ 1196.097629][ T1459]        do_one_initcall+0x250/0x870
[ 1196.102946][ T1459]        do_initcall_level+0x10a/0x1a0
[ 1196.108438][ T1459]        do_initcalls+0x59/0xa0
[ 1196.113315][ T1459]        kernel_init_freeable+0x29d/0x3e0
[ 1196.119076][ T1459]        kernel_init+0x22/0x1d0
[ 1196.124043][ T1459]        ret_from_fork+0x514/0xb70
[ 1196.129185][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1196.134591][ T1459] 
[ 1196.134591][ T1459] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1196.142446][ T1459]        __mutex_lock+0x19d/0x1550
[ 1196.147594][ T1459]        elevator_change+0x1af/0x480
[ 1196.152914][ T1459]        elevator_set_none+0xb5/0x140
[ 1196.158312][ T1459]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1196.164662][ T1459]        nbd_start_device+0x189/0xb30
[ 1196.170049][ T1459]        nbd_genl_connect+0x167d/0x1cd0
[ 1196.175611][ T1459]        genl_family_rcv_msg_doit+0x233/0x340
[ 1196.181702][ T1459]        genl_rcv_msg+0x614/0x7a0
[ 1196.186764][ T1459]        netlink_rcv_skb+0x226/0x4a0
[ 1196.192090][ T1459]        genl_rcv+0x28/0x40
[ 1196.196630][ T1459]        netlink_unicast+0x7bd/0x940
[ 1196.201955][ T1459]        netlink_sendmsg+0x813/0xb40
[ 1196.207260][ T1459]        sock_sendmsg_nosec+0x14e/0x190
[ 1196.212831][ T1459]        ____sys_sendmsg+0x54e/0x850
[ 1196.218148][ T1459]        ___sys_sendmsg+0x2a5/0x360
[ 1196.223378][ T1459]        __x64_sys_sendmsg+0x1b1/0x290
[ 1196.228871][ T1459]        do_syscall_64+0x166/0x520
[ 1196.234005][ T1459]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.240450][ T1459] 
[ 1196.240450][ T1459] -> #1 (&q->q_usage_counter(io)#56){++++}-{0:0}:
[ 1196.249080][ T1459]        blk_alloc_queue+0x544/0x690
[ 1196.254393][ T1459]        __blk_mq_alloc_disk+0x194/0x390
[ 1196.260064][ T1459]        nbd_dev_add+0x494/0xb60
[ 1196.265023][ T1459]        nbd_init+0x168/0x1f0
[ 1196.269747][ T1459]        do_one_initcall+0x250/0x870
[ 1196.275069][ T1459]        do_initcall_level+0x10a/0x1a0
[ 1196.280553][ T1459]        do_initcalls+0x59/0xa0
[ 1196.285425][ T1459]        kernel_init_freeable+0x29d/0x3e0
[ 1196.291182][ T1459]        kernel_init+0x22/0x1d0
[ 1196.296069][ T1459]        ret_from_fork+0x514/0xb70
[ 1196.301216][ T1459]        ret_from_fork_asm+0x1a/0x30
[ 1196.306536][ T1459] 
[ 1196.306536][ T1459] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1196.313790][ T1459]        __lock_acquire+0x164c/0x2de0
[ 1196.319200][ T1459]        lock_acquire+0x115/0x350
[ 1196.324248][ T1459]        fs_reclaim_acquire+0x71/0x100
[ 1196.329746][ T1459]        __kmalloc_cache_noprof+0x61/0x600
[ 1196.335578][ T1459]        get_device_parent+0x255/0x3a0
[ 1196.341072][ T1459]        device_add+0x2d4/0xb80
[ 1196.345953][ T1459]        netdev_register_kobject+0x197/0x350
[ 1196.351961][ T1459]        register_netdevice+0x1433/0x1eb0
[ 1196.357712][ T1459]        nsim_create+0xb25/0x1040
[ 1196.362759][ T1459]        __nsim_dev_port_add+0x7f8/0xcd0
[ 1196.368426][ T1459]        nsim_dev_port_add_all+0x37/0xf0
[ 1196.374084][ T1459]        nsim_drv_probe+0x8b0/0xbb0
[ 1196.379313][ T1459]        really_probe+0x254/0xae0
[ 1196.384363][ T1459]        __driver_probe_device+0x1e8/0x360
[ 1196.390190][ T1459]        driver_probe_device+0x4f/0x240
[ 1196.395762][ T1459]        __device_attach_driver+0x270/0x410
[ 1196.401699][ T1459]        bus_for_each_drv+0x258/0x2f0
[ 1196.407138][ T1459]        __device_attach+0x2c4/0x450
[ 1196.412454][ T1459]        device_initial_probe+0xa1/0xd0
[ 1196.418035][ T1459]        bus_probe_device+0x12a/0x220
[ 1196.423442][ T1459]        device_add+0x7d7/0xb80
[ 1196.428326][ T1459]        new_device_store+0x3a4/0x6c0
[ 1196.433721][ T1459]        kernfs_fop_write_iter+0x3a4/0x540
[ 1196.439562][ T1459]        vfs_write+0x612/0xba0
[ 1196.444374][ T1459]        ksys_write+0x150/0x270
[ 1196.449265][ T1459]        do_syscall_64+0x166/0x520
[ 1196.454423][ T1459]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.460889][ T1459] 
[ 1196.460889][ T1459] other info that might help us debug this:
[ 1196.460889][ T1459] 
[ 1196.471137][ T1459] Chain exists of:
[ 1196.471137][ T1459]   fs_reclaim --> cpuhp_state-up --> gdp_mutex
[ 1196.471137][ T1459] 
[ 1196.485235][ T1459]  Possible unsafe locking scenario:
[ 1196.485235][ T1459] 
[ 1196.492716][ T1459]        CPU0                    CPU1
[ 1196.498123][ T1459]        ----                    ----
[ 1196.503560][ T1459]   lock(gdp_mutex);
[ 1196.507548][ T1459]                                lock(cpuhp_state-up);
[ 1196.514475][ T1459]                                lock(gdp_mutex);
[ 1196.520977][ T1459]   lock(fs_reclaim);
[ 1196.525093][ T1459] 
[ 1196.525093][ T1459]  *** DEADLOCK ***
[ 1196.525093][ T1459] 
[ 1196.533281][ T1459] locks held by syz-executor/1459: 8, last CPU#1:
[ 1196.539739][ T1459]  #0: ffff888033c36460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 1196.548672][ T1459]  #1: ffff8880841f0c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 1196.558465][ T1459]  #2: ffff888029089f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[ 1196.568516][ T1459]  #3: ffffffff8facbd20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0
[ 1196.578904][ T1459]  #4: ffff88807a361128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1196.588160][ T1459]  #5: ffff88807a360258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0
[ 1196.598209][ T1459]  #6: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x7cd/0x1040
[ 1196.607202][ T1459]  #7: ffffffff8f803500 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[ 1196.616544][ T1459] 
[ 1196.616544][ T1459] stack backtrace:
[ 1196.622453][ T1459] CPU: 1 UID: 0 PID: 1459 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1196.631945][ T1459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1196.642028][ T1459] Call Trace:
[ 1196.645384][ T1459]  <TASK>
[ 1196.648377][ T1459]  dump_stack_lvl+0xe8/0x150
[ 1196.653019][ T1459]  print_circular_bug+0x2e2/0x300
[ 1196.658085][ T1459]  check_noncircular+0x12f/0x150
[ 1196.663061][ T1459]  __lock_acquire+0x164c/0x2de0
[ 1196.667946][ T1459]  ? lockdep_unlock+0x5c/0xd0
[ 1196.672642][ T1459]  ? __lock_acquire+0x1511/0x2de0
[ 1196.677700][ T1459]  lock_acquire+0x115/0x350
[ 1196.682234][ T1459]  ? __kmalloc_cache_noprof+0x61/0x600
[ 1196.687735][ T1459]  fs_reclaim_acquire+0x71/0x100
[ 1196.692798][ T1459]  ? __kmalloc_cache_noprof+0x61/0x600
[ 1196.698282][ T1459]  __kmalloc_cache_noprof+0x61/0x600
[ 1196.703601][ T1459]  ? get_device_parent+0x255/0x3a0
[ 1196.708755][ T1459]  ? get_device_parent+0x255/0x3a0
[ 1196.713910][ T1459]  get_device_parent+0x255/0x3a0
[ 1196.718890][ T1459]  device_add+0x2d4/0xb80
[ 1196.723247][ T1459]  netdev_register_kobject+0x197/0x350
[ 1196.728763][ T1459]  register_netdevice+0x1433/0x1eb0
[ 1196.734010][ T1459]  ? __pfx_register_netdevice+0x10/0x10
[ 1196.739595][ T1459]  ? dput+0x39/0x60
[ 1196.743434][ T1459]  ? __debugfs_create_file+0x34f/0x400
[ 1196.748938][ T1459]  ? debugfs_create_file_full+0x3f/0x60
[ 1196.754519][ T1459]  nsim_create+0xb25/0x1040
[ 1196.759053][ T1459]  __nsim_dev_port_add+0x7f8/0xcd0
[ 1196.764189][ T1459]  ? do_raw_spin_unlock+0xf5/0x200
[ 1196.769343][ T1459]  ? __pfx___nsim_dev_port_add+0x10/0x10
[ 1196.775005][ T1459]  ? __mod_timer+0xb53/0xed0
[ 1196.779624][ T1459]  ? queue_delayed_work_on+0x171/0x1e0
[ 1196.785113][ T1459]  nsim_dev_port_add_all+0x37/0xf0
[ 1196.790250][ T1459]  nsim_drv_probe+0x8b0/0xbb0
[ 1196.794957][ T1459]  ? __pfx_nsim_drv_probe+0x10/0x10
[ 1196.800192][ T1459]  ? kernfs_put+0x7b9/0x820
[ 1196.804750][ T1459]  ? sysfs_do_create_link_sd+0xe0/0x110
[ 1196.810327][ T1459]  ? driver_sysfs_add+0x1fe/0x210
[ 1196.815373][ T1459]  ? __pfx_nsim_bus_probe+0x10/0x10
[ 1196.820601][ T1459]  really_probe+0x254/0xae0
[ 1196.825133][ T1459]  __driver_probe_device+0x1e8/0x360
[ 1196.830440][ T1459]  driver_probe_device+0x4f/0x240
[ 1196.835499][ T1459]  __device_attach_driver+0x270/0x410
[ 1196.840900][ T1459]  bus_for_each_drv+0x258/0x2f0
[ 1196.845789][ T1459]  ? __pfx___device_attach_driver+0x10/0x10
[ 1196.851732][ T1459]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1196.857161][ T1459]  __device_attach+0x2c4/0x450
[ 1196.861960][ T1459]  ? __pfx___device_attach+0x10/0x10
[ 1196.867272][ T1459]  ? do_raw_spin_unlock+0xf5/0x200
[ 1196.872424][ T1459]  ? _raw_spin_unlock+0x28/0x50
[ 1196.877309][ T1459]  device_initial_probe+0xa1/0xd0
[ 1196.882368][ T1459]  bus_probe_device+0x12a/0x220
[ 1196.887259][ T1459]  device_add+0x7d7/0xb80
[ 1196.891612][ T1459]  new_device_store+0x3a4/0x6c0
[ 1196.896936][ T1459]  ? __pfx_new_device_store+0x10/0x10
[ 1196.902333][ T1459]  ? sysfs_file_kobj+0x1a/0x230
[ 1196.907227][ T1459]  ? sysfs_file_kobj+0x1e4/0x230
[ 1196.912196][ T1459]  ? sysfs_kf_write+0x166/0x260
[ 1196.917083][ T1459]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1196.922324][ T1459]  kernfs_fop_write_iter+0x3a4/0x540
[ 1196.927649][ T1459]  vfs_write+0x612/0xba0
[ 1196.931937][ T1459]  ? __pfx_vfs_write+0x10/0x10
[ 1196.936728][ T1459]  ? do_sys_openat2+0x14e/0x200
[ 1196.941608][ T1459]  ? kmem_cache_free+0x182/0x650
[ 1196.946601][ T1459]  ksys_write+0x150/0x270
[ 1196.950958][ T1459]  ? __pfx_ksys_write+0x10/0x10
[ 1196.955866][ T1459]  do_syscall_64+0x166/0x520
[ 1196.960483][ T1459]  ? trace_irq_disable+0x3b/0x140
[ 1196.965528][ T1459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.971646][ T1459]  ? clear_bhb_loop+0x70/0xc0
[ 1196.976363][ T1459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.982279][ T1459] RIP: 0033:0x7f927635e98e
[ 1196.986723][ T1459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1197.006382][ T1459] RSP: 002b:00007fff543b6878 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1197.014835][ T1459] RAX: ffffffffffffffda RBX: 0000555569fc8500 RCX: 00007f927635e98e
[ 1197.022876][ T1459] RDX: 0000000000000003 RSI: 00007fff543b6900 RDI: 0000000000000005
[ 1197.031493][ T1459] RBP: 00007f9276435912 R08: 0000000000000000 R09: 0000000000000000
[ 1197.039493][ T1459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1197.047495][ T1459] R13: 00007fff543b6900 R14: 00007f9277154620 R15: 0000000000000003
[ 1197.055508][ T1459]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1197.059415][ T1271] Bluetooth: hci0: command tx timeout
[ 1198.568073][ T1675] tipc: Disabling bearer <ib:syz_tun>
[ 1198.801383][T17513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1198.984964][T17513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.280883][T17513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.419849][T17513] bridge_slave_1: left allmulticast mode
[ 1199.419877][T17513] bridge_slave_1: left promiscuous mode
[ 1199.420052][T17513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.446493][T17513] bridge_slave_0: left allmulticast mode
[ 1199.446518][T17513] bridge_slave_0: left promiscuous mode
[ 1199.446696][T17513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1199.987987][T17513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1199.990208][T17513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1199.991421][T17513] bond0 (unregistering): Released all slaves
[ 1200.278224][T17513] hsr_slave_0: left promiscuous mode
[ 1200.278730][T17513] hsr_slave_1: left promiscuous mode
[ 1200.279319][T17513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1200.279338][T17513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1200.279936][T17513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1200.279986][T17513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1200.344154][T17513] veth1_macvtap: left promiscuous mode
[ 1200.344195][T17513] veth0_macvtap: left promiscuous mode
[ 1200.344267][T17513] veth1_vlan: left promiscuous mode
[ 1200.344359][T17513] veth0_vlan: left promiscuous mode
[ 1200.771767][T17513] team0 (unregistering): Port device team_slave_1 removed
[ 1200.790236][T17513] team0 (unregistering): Port device team_slave_0 removed
[ 1201.791703][T17513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.943290][T17513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.047727][T17513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.081662][T17513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.268615][T17513] bridge_slave_1: left allmulticast mode
[ 1202.268656][T17513] bridge_slave_1: left promiscuous mode
[ 1202.268847][T17513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1202.276901][T17513] bridge_slave_0: left allmulticast mode
[ 1202.276961][T17513] bridge_slave_0: left promiscuous mode
[ 1202.277381][T17513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1202.311716][T17513] pimreg9: left allmulticast mode
[ 1202.511665][T17513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1202.537541][T17513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1202.538656][T17513] bond0 (unregistering): Released all slaves
[ 1202.574861][T17513] bond4 (unregistering): (slave ip6gre2): Releasing backup interface
[ 1202.574892][T17513] ip6gre2 (unregistering): left promiscuous mode
[ 1202.687241][T17513] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 1202.687274][T17513] bridge1 (unregistering): left promiscuous mode
[ 1202.687294][T17513] bridge1 (unregistering): left allmulticast mode
[ 1202.720999][T17513] bond0 (unregistering): Released all slaves
[ 1202.736687][T17513] bond1 (unregistering): Released all slaves
[ 1202.766099][T17513] bond2 (unregistering): Released all slaves
[ 1202.788011][T17513] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1202.804618][T17513] bond3 (unregistering): Released all slaves
[ 1202.810762][T17513] bond4 (unregistering): Released all slaves
[ 1202.958235][T17513] tipc: Left network mode
[ 1203.217142][T17513] hsr_slave_0: left promiscuous mode
[ 1203.217936][T17513] hsr_slave_1: left promiscuous mode
[ 1203.218551][T17513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1203.219563][T17513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1203.250079][T17513] hsr_slave_0: left promiscuous mode
[ 1203.250793][T17513] hsr_slave_1: left promiscuous mode
[ 1203.285439][T17513] veth1_macvtap: left promiscuous mode
[ 1203.285473][T17513] veth0_macvtap: left promiscuous mode
[ 1203.285543][T17513] veth1_vlan: left promiscuous mode
[ 1203.285595][T17513] veth0_vlan: left promiscuous mode
[ 1203.495771][T17513] team0 (unregistering): Port device team_slave_1 removed
[ 1203.501541][T17513] team0 (unregistering): Port device team_slave_0 removed
[ 1203.895791][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1204.486314][T17513] IPVS: stop unused estimator thread 0...
[ 1204.645954][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1205.111418][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1205.607054][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8