last executing test programs:

3.38805539s ago: executing program 2 (id=3674):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
unshare(0x28000600)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private1, 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0xe0, 0x40, 0x0, r5, r6}, {0x2, 0x32, 0xa, 0x2, 0x10000, 0x4, 0x1, 0x1}, {0x9, 0x1, 0x7, 0x40}, 0x7f, 0x6e6bbc, 0x0, 0x0, 0x2, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x3507, 0x5, 0x1, 0x9, 0x7, 0x10, 0x2}}, 0xe8)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20)

2.879729646s ago: executing program 1 (id=3679):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x48) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)=ANY=[@ANYBLOB="6400000b48309000acbe03a0a26d344bb81ca6a457a8b043df0e129a83bd20c4ac5ecc98d8f368b4b1c13f568ecc3834ff08ca3d8ea19864dddf6650b6bdf32054b8273983a3", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001000400910004000f00080026006c09000008000c006400000008000d0008000000"], 0x64}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000300"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x56c222cb}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa38}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0xc001) (async, rerun: 32)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe8000000000000000000000000000aae0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fe8000000000000000000000000000aae0000002000000000000000000000000fe880000000000000000000000080001200100000000000000000000000000022b010000043500000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000330100000000000002000a00"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4041) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r8)
r9 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x400, 0x1, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0xfd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast}}}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r11, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r10, 0x8b2a, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x448, 0x20a, 0x278, 0x448, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0xe}, 0x0, 0x220, 0x288, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x2, 0x5, 0xd3, 0x8, 0xb01, 0x1988}}, @common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e24, 0x4e23], [0x0, 0x0, 0x684, 0x8, 0x8000, 0x1, 0x1, 0x80, 0x8, 0x10001, 0xd, 0xd979, 0x8, 0x3, 0xcb, 0x8, 0x2040, 0x8, 0x2, 0x8, 0xafa, 0x8, 0x9, 0x2, 0x2, 0x8, 0x3ff, 0x2, 0xe7b, 0x8, 0x9, 0x80000001, 0x3, 0x4e41, 0x8, 0x8, 0x2, 0x1000, 0x6, 0x200, 0x3, 0x7f, 0x7, 0x6, 0x0, 0x2, 0x4, 0x7, 0x8000, 0x9, 0x6, 0x9, 0x7, 0xb, 0x565, 0x8001, 0x4, 0x6, 0xc72, 0x81, 0xffff, 0x3ff, 0x6, 0x7fff], 0x4, [{0x9, 0x3, 0x6}, {0xa0, 0x40, 0xe}, {0x8, 0xff, 0x5}, {0x5, 0x1, 0x10}], 0x4, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)

2.567631774s ago: executing program 1 (id=3682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100), 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000200)={0x11, 0x2, r5, 0x1, 0x7, 0x6, @local}, 0x14)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x3, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0004aa0186fc731388485cc44d578aa0a7b1a151908db3e9ece053a7c5830d814f38b61fe26e83abd17064282a1456a0d9e8f6677830dd7da0279e114246bc6fcdac7b88059997d201ddd0af597beb3d46c46494d1f37d998c9774c1c64a3d"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00005c00028008000500", @ANYRES32=r2, @ANYBLOB="44961f0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00005c00028008000500", @ANYRES32=r2, @ANYBLOB="44961f0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

2.392566992s ago: executing program 4 (id=3684):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x0, 0xff, 0x5, 0x6, 0x7}, 0xe)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r3=>0x0})
connect$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x1, {0x1, 0x0, 0x2}}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000008000500000000000800040000000014080006"], 0x2c}}, 0x0)
close(0x3)

2.308060266s ago: executing program 2 (id=3685):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x208)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x9}, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180), 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x150, 0x700, 0x248, 0x278, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [], 'vlan0\x00', 'caif0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)

2.307804907s ago: executing program 1 (id=3686):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xa0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000006, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

2.160906393s ago: executing program 4 (id=3688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x44, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.099420333s ago: executing program 1 (id=3689):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x7fff, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="25b917"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
epoll_create1(0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = socket$kcm(0x2, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e03, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r6, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b27a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f456c2636f2109003c6489f752b8dd0aaef83fa5e17e1b0044f2873220cbe865ff799d4f5afa9037decb37ac73620ae6ba2efedc470b2d37e4c89caccc3ac0f85906cc8e4b1bc237c766c6df649d4fc4a4fe65724daa6998a60bd3152c02920a988d8e9879647daca1badfc2ee11b87e0ac861f94274f23966f5a8ecef57b5980a0252dc542460bc9b387a575a5bf6da076bec2b8155c41b312f5c99d09cee3a974f8de3b5e4ccad8fca02f3c8545da6f26a1f92976ac3df6d136110150beea5b72cb5a904794ebc2c4fd0074b41da56c0d1cde44254dfa746b0ae58c97ecc1e1c7c370a2a163ed15fa5fe80875e7fec427059d53f937f5c3dfb5ea06cce88bfcf2bd2626b42c38264a376e7f4092bc3da7d90ef2dd4b8ad61ad7e6b920430aa8b80e0c589bedcdd323de374f23981633fd0000000000000000", 0x20f}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb18670", 0x13}], 0x2}}], 0x1, 0x4000000)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x26e1, 0x0)

2.095884667s ago: executing program 2 (id=3690):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x24020400)
ppoll(&(0x7f00000002c0)=[{r1, 0x2088}], 0x1, 0x0, 0x0, 0x0)

2.016203116s ago: executing program 4 (id=3692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0, 0x4, 0xf7, 0x3, 0x8, 0x48, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc7, 0x10, 0xfffffff6, 0x5}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
write$nci(r4, 0x0, 0x6f)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x37, 0x0, 0x1, 0xda13, 0x10000, @value=r4}, 0x28)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7fff, '\x00', 0x0, r0, 0x2, 0x3, 0x2}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xdb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xb, 0x8, 0x1, 0x18, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x5f, &(0x7f0000000140)=""/95, 0x41100, 0x14, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x3, 0x8509}, 0x10, 0x1303c, r4, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x40, 0x0, 0x66}})
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0xf7, 0x3, 0x8, 0x48, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc7, 0x10, 0xfffffff6, 0x5}}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
close(r4) (async)
write$nci(r4, 0x0, 0x6f) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x37, 0x0, 0x1, 0xda13, 0x10000, @value=r4}, 0x28) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7fff, '\x00', 0x0, r0, 0x2, 0x3, 0x2}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xdb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xb, 0x8, 0x1, 0x18, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x5f, &(0x7f0000000140)=""/95, 0x41100, 0x14, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x3, 0x8509}, 0x10, 0x1303c, r4, 0x0, &(0x7f0000000480)=[r5, r6]}, 0x94) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x40, 0x0, 0x66}}) (async)

1.847995646s ago: executing program 4 (id=3695):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.707781608s ago: executing program 4 (id=3698):
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}, 0x1, 0x1000000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r1, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
vmsplice(r5, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf)
splice(r1, 0x0, r5, 0x0, 0xc, 0x4)
write(r0, 0x0, 0x0)

1.669080149s ago: executing program 0 (id=3699):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) (async, rerun: 32)
socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x1a, &(0x7f0000000440)=0x827f, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r8, 0x0) (async)
recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000a40)=""/111, 0x6f}, {&(0x7f0000000ac0)=""/242, 0xf2}], 0x4}, 0xfff}, {{&(0x7f0000000c00)=@isdn, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/189, 0xbd}], 0x2, &(0x7f0000000dc0)=""/46, 0x2e}, 0x3}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/71, 0x47}, {&(0x7f0000002b00)=""/221, 0xdd}, {&(0x7f0000002c00)=""/42, 0x2a}, {&(0x7f0000002c40)=""/232, 0xe8}], 0x4, &(0x7f0000002d80)=""/212, 0xd4}, 0xa}, {{&(0x7f0000002e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f00)=""/157, 0x9d}, {&(0x7f0000002fc0)=""/144, 0x90}, {&(0x7f0000003080)=""/99, 0x63}, {&(0x7f0000003100)=""/54, 0x36}, {&(0x7f0000003140)=""/159, 0x9f}], 0x5}, 0x5}, {{&(0x7f0000003280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003300)=""/171, 0xab}, {&(0x7f00000033c0)=""/12, 0xc}], 0x2, &(0x7f0000003440)=""/124, 0x7c}, 0x80000000}], 0x6, 0x40012060, &(0x7f0000003680)) (async)
recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async)
listen(r8, 0x5)
sendmsg$sock(r8, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async, rerun: 32)
sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 32)
ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x80000000)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000006b34cdf6418a800000000000009", @ANYRES32=r1, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000400"/28], 0x50) (async)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000200)=0x4) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r12}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x7, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x2, 0x7, 0xa, 0x80}, @call={0x85, 0x0, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x1, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00', 0x80, 0xef, &(0x7f0000000500)=""/239, 0x41100, 0x6, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x800003, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r10, r1], &(0x7f00000007c0)=[{0x2, 0x2, 0x10, 0x6}], 0x10, 0x8}, 0x94)

1.545675127s ago: executing program 0 (id=3701):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190000082bbd6000fedbdf250a103060fc03fe0100020000080017003d3e0000"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4c084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

1.427085319s ago: executing program 0 (id=3702):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000520001b9a9"], 0x20}}, 0x0)
unshare(0x2020400)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r5, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r7, @ANYBLOB="d5c65fc702e84c9d2f060673428c178cc6e1d2200fcbfe64e1a72f9ff43c72aa58d0eb2a2ac2e0d72d2c0c647f3728265436ea4e949a7f827a6815ca1edd8c27b9728834"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x20, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x15}, [@nested={0xc, 0x138, 0x0, 0x1, [@nested={0x8, 0xef, 0x0, 0x1, [@nested={0x4, 0xec}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)
bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}, 0x1}, 0x18)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000003640)={&(0x7f0000003600)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="2c1a11f520564b1db0e1b187b367e0296cf278c4552a84d24cc183302cc748fa0a776c4dafd0be7c124ac453941c9cf88b731c1a145f504555f9130c017fcca36e439ce1b6ec7ebd1fdc641a881ccbba54a8ad12e853a7dfaad70383f74a5aa30ffc0052d1b75b85c09d9767683519eb82582be20767b29adcb42cec5d80b686279647bd164afb66cade3a6fb67c3964d128239e02b533", 0x97}], 0x3, 0x3ff, 0x0, 0x3, 0x9, 0x8, 0x6, 0x1})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000b0104000000000000000003000007080002400000000408000340000000000600010040000000cc0bb8e89fa82455b0001c208d00cff5f25e66db72669ef01ace4dd2c35efff37886050a9dba96d54045b943ad91eb727ee3913fb1b9714c60ae58354ed64040f97026e587b2e2070816422f9065c54d418d7a6043426ba8726735dbbdad5645057882a4f0bb432b4b892f49d4"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
syz_emit_ethernet(0x1d6, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000009e0000005b060000aa410000a5400000", @ANYRES32=r11, @ANYBLOB="020001000005000400fdff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000200"/28], 0x50)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002400), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)={0x24, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000894)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2)

1.261084283s ago: executing program 3 (id=3704):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0x1220, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x11f0, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x7f}, @TCA_FLOWER_ACT={0x11dc, 0x3, [@m_xt={0x110c, 0x16, 0x0, 0x0, {{0x7}, {0x10a4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0x81, 'mangle\x00', 0x2, 0x1, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x41, 0x6, "78866286737a81039197d6fb6c1ac9c358996a074b63f67f5eae97d0f9424f08ee03106aab509d6ea2d75eaec61c08c672b1d2f74f417b172b8c5af1fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x1d, 0x6, "0511c177ca4e49c6cc85c6ec8e5bbc7c1d23c7af179b8aad4f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x18, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffbffffffe, 0x101, 0xc}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1220}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)

1.163168636s ago: executing program 0 (id=3705):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb36}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

1.161447869s ago: executing program 3 (id=3706):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x883ab}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004041)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x18}, 0xc4)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000200)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x28}, 0x400c000)
r3 = accept(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f00000001c0)=0x80)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3)

1.088101462s ago: executing program 2 (id=3707):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000001000000850000007a000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000085000000a50000009500"/32], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.081918508s ago: executing program 1 (id=3708):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3c, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
unshare(0x20000400)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES8], 0x38}}, 0x6004000)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)

1.02700228s ago: executing program 0 (id=3709):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000020c0), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="002bb7000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000010000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

982.203519ms ago: executing program 2 (id=3710):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0)
sendfile(r0, r1, 0x0, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8adece486d0d7"], 0x38}}, 0x40004)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
shutdown(r8, 0x1)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r9, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0x2f, 0x1b59, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x24)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000)=0x4a3, 0x4)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

909.575306ms ago: executing program 3 (id=3711):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008900)={0x1a8, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xa9, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0x10a0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x12e, 0x6d, 0x0, 0x1, [@generic="64c4f39e5a8bf7075598bed7433f839921ccb03fb134a3b196876b70baae84163118d077a7e0c1765cd03b31b27bfb1b8d8138c1c584d2066b2debf8b0b310db4b1aef425b66f463d2f23ee796064df7fac114a0d9ca2097d33b1dfb5369ea375274b26a37efe91391b87c5a763ba6a10ca54e642ffee3da1555dbe57943a68eee57a34b919b1ebf67bf4f9a67ac2082d00133deee8390a60bd3d9d48ce63c9ec71edb076c4aaf095b37", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4}, @nested={0x78, 0x68, 0x0, 0x1, [@nested={0x74, 0x2, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @nested={0x4, 0x1f}, @typed={0x8, 0xea, 0x0, 0x0, @pid}, @nested={0x4, 0x10a}, @nested={0x4, 0xd3}, @nested={0x4, 0xae}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x2}, @generic="98d9df92e2d1adc79df9e724e9210b063c89ebe1d2ab4d8b0cd633d86b86689c4ba533e3b3e83bd19762b476a0f06e5c2a11223b8d9582eb51d37d4587d01fbf04fcb230"]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800900010069706970000000001400028008000300ac1414aa080001000111"], 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

886.784687ms ago: executing program 1 (id=3712):
socket$nl_generic(0x10, 0x3, 0x10)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000041e94800ffff0700040000f20000000036778dd221fa576eed074236c9faed28641a4ca6796165c2"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r9=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r8, &(0x7f00000006c0)={0x1d, r9}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r10 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(r10, 0xffffffffffffffff, 0x44)
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@srh={0x6}, @routing]}}}}}}}, 0x0)
write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r12, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r12, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x1}}], 0x1, 0x20008000)

836.127249ms ago: executing program 3 (id=3713):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async)
sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x4, 0x700000000000000}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010002000000000000000000000adc000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c940009800800014000000006880002800c0001800800014000000003040001800400018024000180080001400000000608000140000000ff08000140000000020800014000b300012c00018008000140764f15e208000140000000000800014000000007080001400000000008000140000000091c000180080001400000002808000140000000cb0800014000000001040001800900010073797a3000000000140000001000010000000000000000000000000a"], 0x104}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@RTM_GETMDB={0x18, 0x56, 0xb9152050e94e2bdf, 0x70bd27, 0x25dfdbfb, {0x7, r10}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x4c0c4) (async, rerun: 32)
r12 = socket$inet6(0xa, 0x1, 0x14786a46) (rerun: 32)
getsockopt$IP_SET_OP_VERSION(r12, 0x1, 0x53, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

767.927948ms ago: executing program 0 (id=3714):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x6f}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={<r6=>r4, &(0x7f00000005c0)='GPL\x00', 0x100, &(0x7f0000000600)={@align=0xfffffffffffffffa, {0x7, 0x42, 0x10}}, 0x40, &(0x7f0000000640), &(0x7f0000000680)=0x1})
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20008010)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, 0x19, r6, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2fc50, r4, 0x0, &(0x7f0000000800)=[r2, r2, r9, r2, r2, r2, r2], 0x0, 0x10, 0xfffffffe}, 0x94)

733.594475ms ago: executing program 4 (id=3715):
recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

645.660265ms ago: executing program 3 (id=3716):
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24b, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000020000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c0003800640"], 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)

423.396371ms ago: executing program 3 (id=3717):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r0=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="060000000d00"/20, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x3e, &(0x7f00000008c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300050000000019078ac1e0001ac1414aa04f18f780000000045a60007006600810229100000000000e0000001f82fbe77e421b4b79169e9530266141c302528999bd3f379a5852ec271ccaf0fb026d367023fe3f977960d556804a716c24b385ae0d0fef80369248167daf01c2200"/147], 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38)
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000003c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket(0x8, 0x800, 0xdf5)

0s ago: executing program 2 (id=3718):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x30, 0x0, 0x1, [@nested={0x48, 0xb6, 0x0, 0x1, [@nested={0x44, 0x161, 0x0, 0x1, [@nested={0x3e, 0xbc, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="225cd32d1b2b70227b2bd39e12a5e5b5dc6eae34601b6bf5fd1e555845ad6621f07d158e83217ab31ba02a9d6b1e2d1d7e0b657a2d4b"]}]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0x4, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x2000080}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
close(0x3)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
sendmsg$inet_sctp(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xffffff7f}}], 0x20, 0x4048800}, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff01}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x54}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f00000000c0))
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

tes in process `syz.3.2156'.
[  276.008207][T14560] ip_tables: iptables: counters copy to user failed while replacing table
[  276.102285][T14560] batadv0: entered promiscuous mode
[  276.117081][T14560] macvtap1: entered promiscuous mode
[  276.135210][T14560] macvtap1: entered allmulticast mode
[  276.148927][T14560] batadv0: entered allmulticast mode
[  276.170493][T14560] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  276.211462][T14560] batadv0: left allmulticast mode
[  276.223525][T14560] batadv0: left promiscuous mode
[  276.332518][T14568] netlink: 'syz.0.2160': attribute type 2 has an invalid length.
[  276.352136][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'.
[  276.536732][  T200] IPVS: starting estimator thread 0...
[  276.558565][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'.
[  276.605610][T14586] IPVS: ip_vs_add_dest(): server weight less than zero
[  276.626511][T14586] netlink: 'syz.2.2162': attribute type 21 has an invalid length.
[  276.647830][T14584] IPVS: using max 35 ests per chain, 84000 per kthread
[  276.668831][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2162'.
[  276.803649][T14593] 8021q: VLANs not supported on tunl0
[  276.988539][T14605] syzkaller0: entered promiscuous mode
[  276.995127][T14605] syzkaller0: entered allmulticast mode
[  277.180343][T14608] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  277.197275][T14608] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  277.208915][T14608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  277.395621][T14618] syzkaller0: entered promiscuous mode
[  277.419044][T14618] syzkaller0: entered allmulticast mode
[  277.458851][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  277.542544][T14623] tipc: Cannot configure node identity twice
[  277.794370][T14634] ip_tables: iptables: counters copy to user failed while replacing table
[  277.829386][T14634] syzkaller1: entered promiscuous mode
[  277.853332][T14634] syzkaller1: entered allmulticast mode
[  278.024975][T14639] batadv_slave_0: Caught tx_queue_len zero misconfig
[  278.660294][T14652] netlink: 'syz.4.2186': attribute type 2 has an invalid length.
[  280.865264][T14645] netlink: 'syz.1.2185': attribute type 210 has an invalid length.
[  281.063420][T14675] wg2 speed is unknown, defaulting to 1000
[  281.084217][T14675] wg2 speed is unknown, defaulting to 1000
[  281.115511][T14675] wg2 speed is unknown, defaulting to 1000
[  281.122950][T14678] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  281.142222][T14678] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  281.156319][T14675] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  281.207601][T14675] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  281.229374][T14675] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  281.230610][T14678] batadv0: entered promiscuous mode
[  281.250818][T14684] __nla_validate_parse: 3 callbacks suppressed
[  281.250835][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'.
[  281.266573][T14670] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2191'.
[  281.279423][T14678] macvtap1: entered promiscuous mode
[  281.298407][T14678] macvtap1: entered allmulticast mode
[  281.314309][T14678] batadv0: entered allmulticast mode
[  281.330192][T14678] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  281.352701][T14675] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  281.387488][T14678] batadv0: left allmulticast mode
[  281.398931][T14678] batadv0: left promiscuous mode
[  282.450199][T14675] wg2 speed is unknown, defaulting to 1000
[  282.460727][T14675] wg2 speed is unknown, defaulting to 1000
[  282.468387][T14675] wg2 speed is unknown, defaulting to 1000
[  282.483638][T14675] wg2 speed is unknown, defaulting to 1000
[  282.495008][T14675] wg2 speed is unknown, defaulting to 1000
[  282.701600][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'.
[  283.137364][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'.
[  283.328061][T14728] tun0: tun_chr_ioctl cmd 1074025675
[  283.349683][T14728] tun0: persist enabled
[  283.457008][T14738] syzkaller0: entered promiscuous mode
[  283.472356][T14738] syzkaller0: entered allmulticast mode
[  283.504449][T14746] ip6gre3: entered promiscuous mode
[  283.511060][T14746] ip6gre3: entered allmulticast mode
[  283.518436][T14738] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.530276][  T169] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  283.538491][  T169] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  283.558902][ T5344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  283.637172][T14751] x_tables: duplicate underflow at hook 3
[  283.743018][T14761] netlink: 'syz.4.2218': attribute type 1 has an invalid length.
[  283.770242][   T48] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  283.787022][T14761] bond7: entered promiscuous mode
[  283.808413][T14761] 8021q: adding VLAN 0 to HW filter on device bond7
[  283.809573][T14759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  283.832988][   T48] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  283.842973][T14759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  283.936047][T14770] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  283.973789][T14771] 
: renamed from dummy0
[  284.096424][T14770] bond6: option mode: invalid value (7)
[  284.105809][T14782] netlink: 'syz.4.2223': attribute type 16 has an invalid length.
[  284.119461][T14770] bond6 (unregistering): Released all slaves
[  284.122664][T14782] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2223'.
[  284.173570][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'.
[  284.266606][T14774] netlink: 774 bytes leftover after parsing attributes in process `syz.1.2221'.
[  284.286180][T14774] netlink: 'syz.1.2221': attribute type 1 has an invalid length.
[  284.338817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.349084][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.690462][T14806] bond6 (unregistering): Released all slaves
[  285.387771][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.395986][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.419760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.169438][T14808] ipvlan2: entered promiscuous mode
[  287.176227][T14808] bridge0: port 5(ipvlan2) entered blocking state
[  287.183347][T14808] bridge0: port 5(ipvlan2) entered disabled state
[  287.190187][T14808] ipvlan2: entered allmulticast mode
[  287.195559][T14808] bridge0: entered allmulticast mode
[  287.203813][T14808] ipvlan2: left allmulticast mode
[  287.208932][T14808] bridge0: left allmulticast mode
[  287.286173][T14821] smc: net device lo applied user defined pnetid SYZ2
[  287.298833][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  287.458730][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.466968][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.614295][T14834] xfrm0 speed is unknown, defaulting to 1000
[  287.814801][T14858] IPVS: set_ctl: invalid protocol: 128 255.255.255.255:20001
[  287.893648][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'.
[  288.103033][T14868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2248'.
[  288.236752][T14874] syzkaller0: entered promiscuous mode
[  288.247727][T14874] syzkaller0: entered allmulticast mode
[  288.316138][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'.
[  288.498760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.622960][T14834] netdevsim0 speed is unknown, defaulting to 1000
[  288.633495][T14834] wg2 speed is unknown, defaulting to 1000
[  288.864658][T14904] xt_TPROXY: Can be used only with -p tcp or -p udp
[  289.211871][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'.
[  289.222343][T14924] x_tables: duplicate underflow at hook 2
[  289.327410][ T5624] block nbd4: Receive control failed (result -107)
[  289.426670][T14929] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2265'.
[  289.477310][T14929] NCSI netlink: No device for ifindex 566712438
[  289.540603][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.548884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.763076][T14947] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  289.803169][T14947] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2270'.
[  289.874633][T14952] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.922639][T14955] netlink: 'syz.1.2273': attribute type 32 has an invalid length.
[  289.980969][T14957] syzkaller0: entered promiscuous mode
[  290.006904][T14957] syzkaller0: entered allmulticast mode
[  290.156710][T14964] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1468627498/1468627500
[  290.283060][T14973] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2277'.
[  290.578722][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.586982][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.747176][T15000] netlink: 'syz.2.2281': attribute type 12 has an invalid length.
[  291.001679][T15001] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  291.041057][T14999] tipc: Resetting bearer <eth:syzkaller0>
[  291.135951][T14999] tipc: Disabling bearer <eth:syzkaller0>
[  291.202410][T15021] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  291.771687][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'.
[  291.814284][T15057] veth1_to_bond: entered allmulticast mode
[  291.898158][T15052] xfrm0 speed is unknown, defaulting to 1000
[  292.063541][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'.
[  292.170668][T15073] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  292.404097][T15084] bridge0: entered allmulticast mode
[  292.555680][T15090] syzkaller0: left promiscuous mode
[  292.580790][T15090] syzkaller0: left allmulticast mode
[  292.751628][T15095] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2308'.
[  292.822247][T15095] netlink: 'syz.1.2308': attribute type 2 has an invalid length.
[  292.854606][T15095] netlink: 'syz.1.2308': attribute type 2 has an invalid length.
[  293.002517][T15099] hsr0: entered promiscuous mode
[  293.070827][T15076] hsr0: left promiscuous mode
[  293.128454][T15052] netdevsim0 speed is unknown, defaulting to 1000
[  293.176684][T15052] wg2 speed is unknown, defaulting to 1000
[  293.616528][T15129] wg2 speed is unknown, defaulting to 1000
[  294.329934][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  294.342337][ T5732] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  294.449274][T15165] __nla_validate_parse: 1 callbacks suppressed
[  294.449292][T15165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2326'.
[  294.703907][ T5732] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  294.917805][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'.
[  294.962269][T15197] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2335'.
[  295.059359][ T7206] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  295.095948][T15197] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.137083][T15197] 8021q: adding VLAN 0 to HW filter on device team0
[  295.232744][T15197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.378907][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  295.387288][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  295.457625][T15197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.517352][T15211] "syz.4.2335" (15211) uses obsolete ecb(arc4) skcipher
[  295.568129][T15197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.616937][T15197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  295.681261][T15197] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  295.826743][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.834018][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.892308][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.899541][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.931108][T12680] xfrm0 speed is unknown, defaulting to 1000
[  295.949999][T12680] syz0: Port: 1 Link ACTIVE
[  296.029611][   T48] xfrm0 speed is unknown, defaulting to 1000
[  296.043690][T15253] syzkaller0: entered promiscuous mode
[  296.071660][T15260] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  296.072292][T15253] syzkaller0: entered allmulticast mode
[  296.152953][T15260] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  296.376061][T15271] bridge0: left promiscuous mode
[  296.429424][T15271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.482739][T15271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.493098][T15271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.512871][T15271] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  296.545542][T15273] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  296.560543][T15288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.573198][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.580433][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.611430][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.620140][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.649958][T15286] lo: entered promiscuous mode
[  296.655471][T15286] tunl0: entered promiscuous mode
[  296.661496][T15286] gre0: entered promiscuous mode
[  296.667130][T15286] gretap0: entered promiscuous mode
[  296.675015][T15286] erspan0: entered promiscuous mode
[  296.684531][T15286] ip_vti0: entered promiscuous mode
[  296.707971][T15286] ip6_vti0: entered promiscuous mode
[  296.721212][T15295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2353'.
[  296.723807][T15286] sit0: entered promiscuous mode
[  296.739664][T15286] ip6tnl0: entered promiscuous mode
[  296.768142][T15286] ip6gre0: entered promiscuous mode
[  296.779559][T15286] syz_tun: entered promiscuous mode
[  296.797763][T15286] ip6gretap0: entered promiscuous mode
[  296.815307][T15286] vcan0: entered promiscuous mode
[  296.833921][T15286] .`: entered promiscuous mode
[  296.845966][T15286] 
: entered promiscuous mode
[  296.857328][T15286] nlmon0: entered promiscuous mode
[  296.869911][T15286] vxcan0: entered promiscuous mode
[  296.883521][T15286] vxcan1: entered promiscuous mode
[  296.896185][T15286] veth0: entered promiscuous mode
[  296.909747][T15286] veth1: entered promiscuous mode
[  296.933521][T15286] wg0: entered promiscuous mode
[  296.943762][T15286] wg1: entered promiscuous mode
[  296.952292][T15286] wg2: entered promiscuous mode
[  296.957701][T15286] veth0_to_bridge: entered promiscuous mode
[  296.974339][T15286] bridge_slave_0: entered promiscuous mode
[  296.983302][T15286] veth1_to_bridge: entered promiscuous mode
[  296.999293][T15286] bridge_slave_1: entered promiscuous mode
[  297.009948][T15286] veth0_to_bond: entered promiscuous mode
[  297.016256][T15286] bond_slave_0: entered promiscuous mode
[  297.022662][T15286] veth1_to_bond: entered promiscuous mode
[  297.040769][T15286] bond_slave_1: entered promiscuous mode
[  297.054854][T15286] veth0_to_team: entered promiscuous mode
[  297.070109][T15286] team_slave_0: entered promiscuous mode
[  297.096244][T15286] veth1_to_team: entered promiscuous mode
[  297.115174][T15286] team_slave_1: entered promiscuous mode
[  297.130407][T15286] veth0_to_batadv: entered promiscuous mode
[  297.157956][T15286] batadv_slave_0: entered promiscuous mode
[  297.196591][T15286] veth1_to_batadv: entered promiscuous mode
[  297.216705][T15286] batadv_slave_1: entered promiscuous mode
[  297.240251][T15286] xfrm0: entered promiscuous mode
[  297.245832][T15286] veth0_to_hsr: entered promiscuous mode
[  297.254168][T15286] veth1_to_hsr: entered promiscuous mode
[  297.737383][T15333] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2367'.
[  297.750734][T15333] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2367'.
[  297.763039][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'.
[  298.079955][T15355] netlink: 'syz.0.2374': attribute type 1 has an invalid length.
[  298.134190][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  298.176735][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  298.217248][T15352] bond12: entered allmulticast mode
[  298.235337][T15360] ip_tables: iptables: counters copy to user failed while replacing table
[  298.370374][T15355] 8021q: adding VLAN 0 to HW filter on device bond6
[  298.647301][T15381] netlink: 'syz.0.2382': attribute type 12 has an invalid length.
[  298.661562][T15372] ip_tables: iptables: counters copy to user failed while replacing table
[  298.859831][T15388] netlink: 'syz.0.2382': attribute type 1 has an invalid length.
[  298.892048][T15388] lo: left promiscuous mode
[  298.989919][T15388] tunl0: left promiscuous mode
[  299.064335][T15388] gre0: left promiscuous mode
[  299.103530][T15388] gretap0: left promiscuous mode
[  299.124962][T15388] erspan0: left promiscuous mode
[  299.142058][T15388] ip_vti0: left promiscuous mode
[  299.148460][T15388] ip6_vti0: left promiscuous mode
[  299.155579][T15388] sit0: left promiscuous mode
[  299.162709][T15388] ip6tnl0: left promiscuous mode
[  299.171879][T15388] ip6gre0: left promiscuous mode
[  299.178266][T15388] syz_tun: left promiscuous mode
[  299.185348][T15388] ip6gretap0: left promiscuous mode
[  299.196658][T15388] vcan0: left promiscuous mode
[  299.202775][T15412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2386'.
[  299.231603][T15388] .`: left promiscuous mode
[  299.240767][T15388] 8021q: adding VLAN 0 to HW filter on device .`
[  299.258385][T15388] 
: left promiscuous mode
[  299.266953][T15388] nlmon0: left promiscuous mode
[  299.280889][T15388] vxcan0: left promiscuous mode
[  299.288377][T15388] vxcan1: left promiscuous mode
[  299.295253][T15388] veth0: left promiscuous mode
[  299.307214][T15388] veth1: left promiscuous mode
[  299.316556][T15388] wg0: left promiscuous mode
[  299.370805][T15388] wg1: left promiscuous mode
[  299.378218][T15388] wg2: left promiscuous mode
[  299.389607][T15388] veth0_to_bridge: left promiscuous mode
[  299.402259][T15388] bridge_slave_0: left promiscuous mode
[  299.409490][T15388] veth1_to_bridge: left promiscuous mode
[  299.416808][T15388] bridge_slave_1: left promiscuous mode
[  299.423973][T15388] veth0_to_bond: left promiscuous mode
[  299.431401][T15388] bond_slave_0: left promiscuous mode
[  299.437809][T15388] veth1_to_bond: left promiscuous mode
[  299.445376][T15388] bond_slave_1: left promiscuous mode
[  299.453092][T15388] veth0_to_team: left promiscuous mode
[  299.481722][T15388] team_slave_0: left promiscuous mode
[  299.492571][T15388] veth1_to_team: left promiscuous mode
[  299.499808][T15388] team_slave_1: left promiscuous mode
[  299.506141][T15388] veth0_to_batadv: left promiscuous mode
[  299.513484][T15388] batadv_slave_0: left promiscuous mode
[  299.520741][T15388] veth1_to_batadv: left promiscuous mode
[  299.528059][T15388] batadv_slave_1: left promiscuous mode
[  299.535214][T15388] xfrm0: left promiscuous mode
[  299.542592][T15388] veth0_to_hsr: left promiscuous mode
[  299.552212][T15388] veth1_to_hsr: left promiscuous mode
[  299.560372][T15388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  299.571020][T15388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.586587][T15388] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  299.705672][T15402] tipc: Enabling of bearer <eth:vxcan1> rejected, max 3 bearers permitted
[  299.715332][T15413] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  299.724301][T15410] netlink: 'syz.3.2385': attribute type 1 has an invalid length.
[  299.726259][T15413] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  299.755832][T15410] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2385'.
[  299.809495][   T29] wg2 speed is unknown, defaulting to 1000
[  299.833359][   T29] syz2: Port: 1 Link ACTIVE
[  299.955530][T15420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.044678][T15426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2390'.
[  300.056760][T15428] netlink: 'syz.3.2391': attribute type 2 has an invalid length.
[  300.072019][T15426] netlink: 'syz.2.2390': attribute type 1 has an invalid length.
[  300.095787][T15426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.103195][T15426] IPv6: NLM_F_CREATE should be set when creating new route
[  300.248970][T15442] syzkaller0: entered promiscuous mode
[  300.281600][T15442] syzkaller0: entered allmulticast mode
[  300.535894][T15455] x_tables: duplicate underflow at hook 2
[  300.975132][T15489] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  301.260358][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2411'.
[  301.276020][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'.
[  301.293465][T15507] ipvlan0: entered allmulticast mode
[  301.301758][T15507] syz_tun: entered allmulticast mode
[  301.466432][T15511] xfrm0 speed is unknown, defaulting to 1000
[  301.808024][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'.
[  301.893834][T15537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2417'.
[  302.277429][T15555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2422'.
[  302.391754][T15564] ip_tables: iptables: counters copy to user failed while replacing table
[  302.519452][T15511] netdevsim0 speed is unknown, defaulting to 1000
[  302.566614][T15570] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  302.577369][T15568] bond2 (unregistering): Released all slaves
[  302.637384][T15511] wg2 speed is unknown, defaulting to 1000
[  302.837662][T15584] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  303.011391][T15576] dummy0: left promiscuous mode
[  303.754867][T15576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  303.772659][T15576] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  303.992727][T12680] netdevsim0 speed is unknown, defaulting to 1000
[  304.147730][T15622] sctp: [Deprecated]: syz.0.2438 (pid 15622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.147730][T15622] Use struct sctp_sack_info instead
[  304.474309][T15633] netlink: 'syz.0.2440': attribute type 2 has an invalid length.
[  304.683613][T15633] 
: entered promiscuous mode
[  304.723851][T15636] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.557648][T15662] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  305.596404][T15664] tunl0: left promiscuous mode
[  305.633335][T15664] team0: left promiscuous mode
[  305.665877][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'.
[  305.676766][T15664] team_slave_0: left promiscuous mode
[  305.721930][T15664] team_slave_1: left promiscuous mode
[  305.786705][T15664] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  305.839590][T15675] syz_tun: entered allmulticast mode
[  305.895342][T15678] dvmrp8: entered allmulticast mode
[  305.921764][T15669] syz_tun: left allmulticast mode
[  306.385992][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'.
[  306.582804][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'.
[  306.677130][T15713] netlink: 'syz.4.2460': attribute type 1 has an invalid length.
[  306.800944][T15713] 8021q: adding VLAN 0 to HW filter on device bond8
[  307.201801][T15749] vlan5: entered promiscuous mode
[  307.233783][T15749] macvlan0: entered promiscuous mode
[  307.342102][T15751] vlan5: entered promiscuous mode
[  307.430854][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2471'.
[  307.525026][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'.
[  307.773090][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2473'.
[  307.956307][T15794] netlink: 'syz.0.2478': attribute type 1 has an invalid length.
[  308.422309][T15816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.434974][T15816] syzkaller0: entered promiscuous mode
[  308.447640][T15816] syzkaller0: entered allmulticast mode
[  308.474463][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'.
[  308.506042][T15816] openvswitch: netlink: Flow actions attr not present in new flow.
[  308.584204][T15830] ip6tnl0: entered allmulticast mode
[  308.959432][T15800] tipc: Resetting bearer <eth:syzkaller0>
[  309.011447][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.081566][T15800] tipc: Disabling bearer <eth:syzkaller0>
[  309.174334][T15852] veth1_to_hsr: entered promiscuous mode
[  309.200879][T15852] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2493'.
[  309.218848][T15852] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  309.893262][T15881] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  310.100328][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  310.233035][T15900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.250151][T15899] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2506'.
[  310.367323][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2507'.
[  310.438839][T15902] veth13: entered allmulticast mode
[  310.636373][T15915] gretap0: entered promiscuous mode
[  310.657986][T15915] vlan5: entered promiscuous mode
[  310.796393][T15921] __nla_validate_parse: 1 callbacks suppressed
[  310.796410][T15921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2512'.
[  310.933576][T15928] Bluetooth: hci0: Opcode 0x080f failed: -22
[  311.414753][T15939] netlink: 'syz.4.2519': attribute type 1 has an invalid length.
[  311.562697][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'.
[  311.680782][T15941] bond9: (slave veth0_to_bond): making interface the new active one
[  311.722972][T15941] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  311.754194][T15956] netlink: 'syz.0.2524': attribute type 9 has an invalid length.
[  311.768137][T15944] 8021q: adding VLAN 0 to HW filter on device bond9
[  311.802890][T15949] netlink: 'syz.0.2524': attribute type 8 has an invalid length.
[  311.895151][T15964] netlink: 'syz.1.2523': attribute type 30 has an invalid length.
[  312.001535][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.023827][T15958] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  312.039134][T15958] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  312.047144][T15958] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.057599][T15958] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.082558][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.101606][T15960] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  312.119214][T15960] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  312.127280][T15960] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.169979][T15960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2523'.
[  312.417267][T15952] bridge0: port 4(syz_tun) entered disabled state
[  312.443698][T15952] bridge0: port 3(batadv1) entered disabled state
[  312.450451][T15952] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.458500][T15952] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.549557][T15952] team0: left allmulticast mode
[  312.572392][T15952] team_slave_0: left allmulticast mode
[  312.586562][T15952] team_slave_1: left allmulticast mode
[  312.876760][T15952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.904494][T15952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.042325][T15952] macvlan0: left promiscuous mode
[  313.172942][T16036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2531'.
[  313.237942][T16040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2531'.
[  313.514324][T15952] veth5: left promiscuous mode
[  313.627333][T15952] veth1_vlan: left promiscuous mode
[  313.639190][T15952] vlan0: left promiscuous mode
[  313.644120][T15952] bridge0: left promiscuous mode
[  313.709369][T15952] gretap2: left promiscuous mode
[  313.725467][T15952] ip6gre2: left promiscuous mode
[  313.730867][T15952] ip6gre2: left allmulticast mode
[  313.738409][T15952] bond6: left promiscuous mode
[  313.744127][T15952] bond6: left allmulticast mode
[  313.767996][T15952] ip6gre3: left promiscuous mode
[  313.773208][T15952] ip6gre3: left allmulticast mode
[  313.865341][ T3331] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.084825][T16054] bridge0: port 1(netdevsim0) entered blocking state
[  314.105254][T16054] bridge0: port 1(netdevsim0) entered disabled state
[  314.131980][T16054] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  314.175176][T16054] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  314.210813][T15995] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.292093][ T3273] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.328391][T16061] syzkaller0: entered promiscuous mode
[  314.344305][T16061] syzkaller0: entered allmulticast mode
[  314.397818][T16065] unsupported nlmsg_type 40
[  314.608947][ T3273] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.283648][T16121] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.721631][T16152] block nbd5: server does not support multiple connections per device.
[  315.774539][T16152] block nbd5: shutting down sockets
[  315.816538][T16165] __nla_validate_parse: 7 callbacks suppressed
[  315.816555][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'.
[  316.185170][T16187] vlan0: entered promiscuous mode
[  316.212960][T16187] bridge0: entered promiscuous mode
[  316.243504][T16189] bond0: (slave veth1_to_bond): Device is not bonding slave
[  316.259102][T16189] bond0: option active_slave: invalid value (veth1_to_bond)
[  316.397006][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'.
[  316.413592][T16200] xfrm0: entered allmulticast mode
[  316.419695][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'.
[  316.432832][T16200] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  316.461978][T16200] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  317.138911][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  317.164023][T16217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2569'.
[  317.322742][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2571'.
[  317.625189][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'.
[  317.717624][T16244] netlink: 'syz.1.2576': attribute type 10 has an invalid length.
[  317.738006][T16244] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2576'.
[  317.759202][T16244] bond0: entered promiscuous mode
[  317.772092][T16244] bond_slave_0: entered promiscuous mode
[  317.781783][T16244] bond_slave_1: entered promiscuous mode
[  317.796373][T16244] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.811328][T16244] bridge0: port 5(bond0) entered blocking state
[  317.821248][T16244] bridge0: port 5(bond0) entered disabled state
[  317.827741][T16244] bond0: entered allmulticast mode
[  317.847620][T16244] bond_slave_0: entered allmulticast mode
[  317.898087][T16244] bond_slave_1: entered allmulticast mode
[  318.364075][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'.
[  318.665764][T16288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2588'.
[  318.873918][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'.
[  319.126713][T16315] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.183806][T16315] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  319.220584][T16315] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  319.276460][T16315] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  319.349395][T16326] veth1_to_hsr: left promiscuous mode
[  319.374056][T16326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  319.399189][T16315] tipc: Resetting bearer <eth:syzkaller0>
[  320.774749][T16375] xfrm0 speed is unknown, defaulting to 1000
[  320.984294][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2621'.
[  321.359879][T16401] netlink: 'syz.0.2624': attribute type 29 has an invalid length.
[  321.393504][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'.
[  321.802332][T16375] netdevsim0 speed is unknown, defaulting to 1000
[  321.844318][T16375] wg2 speed is unknown, defaulting to 1000
[  322.009729][T16425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'.
[  322.229544][T16438] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2633'.
[  322.249810][T16439] netlink: 'syz.3.2632': attribute type 2 has an invalid length.
[  322.328020][T16439] netlink: 1188 bytes leftover after parsing attributes in process `syz.3.2632'.
[  322.548063][T16446] netlink: 'syz.1.2636': attribute type 33 has an invalid length.
[  322.603756][T16446] netlink: 'syz.1.2636': attribute type 39 has an invalid length.
[  322.969885][   T30] audit: type=1800 audit(1786778112.018:6): pid=16444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2635" name="memory.events" dev="tmpfs" ino=2750 res=0 errno=0
[  323.207641][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'.
[  323.259494][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'.
[  323.559418][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'.
[  323.580645][T16473] netlink: 'syz.2.2644': attribute type 2 has an invalid length.
[  323.738491][T16477] xfrm0 speed is unknown, defaulting to 1000
[  324.300343][   T30] audit: type=1804 audit(1786778113.358:7): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2652" name="/newroot/518/cgroup.controllers" dev="tmpfs" ino=2673 res=1 errno=0
[  324.384771][   T30] audit: type=1800 audit(1786778113.358:8): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2652" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0
[  324.385514][T16503] netlink: 'syz.4.2653': attribute type 21 has an invalid length.
[  324.455313][T16505] syzkaller0: entered promiscuous mode
[  324.474458][T16505] syzkaller0: entered allmulticast mode
[  324.482705][T16503] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2653'.
[  324.552814][T16503] netlink: 'syz.4.2653': attribute type 5 has an invalid length.
[  324.563551][T16503] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2653'.
[  324.588952][T16477] netdevsim0 speed is unknown, defaulting to 1000
[  324.604146][T16477] wg2 speed is unknown, defaulting to 1000
[  325.017485][T16513] syzkaller0: entered promiscuous mode
[  325.066553][T16513] syzkaller0: entered allmulticast mode
[  325.597284][T16542] vlan2: entered promiscuous mode
[  325.868226][T15991] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[  325.898772][T15991] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[  325.979820][T15991] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 16388 - 0
[  325.999583][T16565] __nla_validate_parse: 7 callbacks suppressed
[  325.999601][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'.
[  326.029446][ T3379] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 16388 - 0
[  326.058006][ T3379] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[  326.078909][ T3379] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 16388 - 0
[  326.111192][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2671'.
[  326.128776][ T3331] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[  326.152132][ T3331] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 16388 - 0
[  326.190393][T16570] bridge0: port 5(veth0) entered blocking state
[  326.219315][T16570] bridge0: port 5(veth0) entered disabled state
[  326.223100][T16574] netlink: 'syz.0.2673': attribute type 1 has an invalid length.
[  326.225972][T16570] veth0: entered allmulticast mode
[  326.233795][T16574] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.2673'.
[  326.242402][T16570] veth0: entered promiscuous mode
[  326.252760][T16574] netlink: 'syz.0.2673': attribute type 1 has an invalid length.
[  326.254596][T16570] bridge0: port 5(veth0) entered blocking state
[  326.262669][T16574] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.2673'.
[  326.267737][T16570] bridge0: port 5(veth0) entered forwarding state
[  329.106631][T16596] bridge5: entered promiscuous mode
[  329.123648][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2679'.
[  329.227122][T16607] xfrm0 speed is unknown, defaulting to 1000
[  330.215521][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'.
[  330.653825][T16607] netdevsim0 speed is unknown, defaulting to 1000
[  330.692759][T16607] wg2 speed is unknown, defaulting to 1000
[  330.704369][T16681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2697'.
[  330.720813][T16680] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  330.793246][T16684] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  330.968124][T16680] syzkaller0: entered promiscuous mode
[  330.989500][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'.
[  330.993989][T16680] syzkaller0: entered allmulticast mode
[  331.094598][T16695] netlink: 'syz.4.2700': attribute type 1 has an invalid length.
[  331.238163][T16701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2703'.
[  331.346036][T16695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2700'.
[  331.654196][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2704'.
[  334.269186][T16728] xt_ipcomp: unknown flags 1D
[  334.308787][T16728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'.
[  334.586252][T16744] pim6reg0: tun_chr_ioctl cmd 1074812118
[  334.610781][T16746] ip6tnl0: left allmulticast mode
[  334.811247][T16757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2724'.
[  334.848138][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2723'.
[  334.995302][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'.
[  335.018840][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2727'.
[  335.056655][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2727'.
[  335.492071][T16787] bridge_slave_0: default FDB implementation only supports local addresses
[  335.531235][T16786] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2737'.
[  335.916104][T16815] bridge6: entered allmulticast mode
[  335.996921][T16817] xt_hashlimit: size too large, truncated to 1048576
[  336.230982][T16823] netlink: 'syz.2.2746': attribute type 1 has an invalid length.
[  336.398730][T16827] netlink: 'syz.1.2748': attribute type 1 has an invalid length.
[  336.422206][T16823] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.653221][T16841] ip_tables: iptables: counters copy to user failed while replacing table
[  337.045741][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.092603][T16865] __nla_validate_parse: 2 callbacks suppressed
[  337.092621][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'.
[  337.158086][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.321238][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'.
[  337.878132][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2768'.
[  337.952180][T16914] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  337.987811][T16914] bond9 (unregistering): Released all slaves
[  338.265696][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2775'.
[  338.839961][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'.
[  338.924578][T16970] netlink: 'syz.4.2784': attribute type 4 has an invalid length.
[  338.953315][T16970] netlink: 'syz.4.2784': attribute type 3 has an invalid length.
[  339.093543][T16978] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  339.689127][T17009] bridge0: port 6(syz_tun) entered blocking state
[  339.701021][T17009] bridge0: port 6(syz_tun) entered disabled state
[  339.723666][T17009] syz_tun: entered promiscuous mode
[  339.735231][T17009] bridge0: port 6(syz_tun) entered blocking state
[  339.741892][T17009] bridge0: port 6(syz_tun) entered forwarding state
[  339.807552][T17008] xfrm0 speed is unknown, defaulting to 1000
[  339.943530][T17017] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  339.962689][T17019] netlink: 'syz.1.2800': attribute type 1 has an invalid length.
[  339.974451][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'.
[  340.092238][T17019] 8021q: adding VLAN 0 to HW filter on device bond9
[  340.150162][T17030] netlink: 'syz.1.2800': attribute type 21 has an invalid length.
[  340.376743][T17042] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2796'.
[  340.389926][T17030] netlink: 'syz.1.2800': attribute type 6 has an invalid length.
[  340.410425][T17030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2800'.
[  340.578083][T17043] syzkaller1: entered promiscuous mode
[  340.589330][T17043] syzkaller1: entered allmulticast mode
[  340.691073][T17050] syzkaller0: entered promiscuous mode
[  340.696570][T17050] syzkaller0: entered allmulticast mode
[  340.727852][T17008] netdevsim0 speed is unknown, defaulting to 1000
[  341.768909][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'.
[  343.280696][T17008] wg2 speed is unknown, defaulting to 1000
[  343.326343][T17079] ip6gre1: entered promiscuous mode
[  343.358759][T17079] ip6gre1: entered allmulticast mode
[  343.424064][T17084] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  343.442580][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2816'.
[  343.617077][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2817'.
[  343.665996][T17087] siw: device registration error -23
[  344.075699][T15979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  344.098354][T15979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  344.110869][T12688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  344.312819][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2823'.
[  344.440379][T17124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2823'.
[  344.447720][T17117] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.612767][T17117] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.623332][T17136] netlink: 'syz.2.2828': attribute type 3 has an invalid length.
[  344.818859][ T5802] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  344.867146][T17117] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.013634][T17117] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.059223][ T5802] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  345.246628][T17149] tunl0: entered promiscuous mode
[  345.263753][T17149] netlink: 'syz.3.2832': attribute type 4 has an invalid length.
[  345.284261][T17149] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2832'.
[  345.323105][T17161] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  345.357831][T17161] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  345.395773][T17161] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  345.571836][T17172] veth14: entered allmulticast mode
[  345.689678][ T3273] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.722288][ T3273] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.805736][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.959017][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  346.075135][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'.
[  346.430002][T17213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.474851][T17213] syzkaller0: entered promiscuous mode
[  346.492705][T17213] syzkaller0: entered allmulticast mode
[  346.510352][T17213] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2851'.
[  346.525004][T17213] syzkaller0: mtu less than device minimum
[  346.608905][T17189] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  346.620281][T17220] netlink: 'syz.2.2854': attribute type 34 has an invalid length.
[  346.630836][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'.
[  346.750915][T17233] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2857'.
[  346.761916][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'.
[  346.891268][T17236] netlink: 'syz.4.2857': attribute type 2 has an invalid length.
[  346.945563][T17233] netlink: 'syz.4.2857': attribute type 2 has an invalid length.
[  347.155503][T17247] netlink: 'syz.4.2860': attribute type 1 has an invalid length.
[  347.171182][T17247] netlink: 'syz.4.2860': attribute type 2 has an invalid length.
[  347.441856][T17267] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534
[  347.463168][T17269] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534
[  347.524947][T17267] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  347.778972][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  348.045283][T17299] x_tables: duplicate underflow at hook 1
[  348.134044][T17305] batman_adv: batadv0: Adding interface: veth1_to_batadv
[  348.163145][T17305] batman_adv: batadv0: The MTU of interface veth1_to_batadv is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  348.247893][T17305] batman_adv: batadv0: Not using interface veth1_to_batadv (retrying later): interface not active
[  348.497107][T17321] IPVS: Unknown mcast interface: vcan0
[  348.858034][T17335] xt_CT: You must specify a L4 protocol and not use inversions on it
[  348.974677][T17342] xfrm0 speed is unknown, defaulting to 1000
[  348.988271][T17338] __nla_validate_parse: 5 callbacks suppressed
[  348.988290][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2887'.
[  349.663603][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'.
[  349.736140][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.755277][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.766187][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.777173][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.785750][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  349.817009][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.826473][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.834986][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.855322][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.868883][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  349.966632][T17342] netdevsim0 speed is unknown, defaulting to 1000
[  350.032762][T17342] wg2 speed is unknown, defaulting to 1000
[  350.170146][T17364] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2894'.
[  350.222775][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'.
[  350.754994][T16017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  350.815289][T16017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 16388 - 0
[  350.866240][T16017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.116580][T17398] xt_CT: No such helper "snmp_trap"
[  351.216385][T17402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2902'.
[  351.271326][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'.
[  351.330382][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'.
[  351.386317][T16017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  351.418098][T16017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 16388 - 0
[  351.452833][T16017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.538418][T17356] xfrm0 speed is unknown, defaulting to 1000
[  351.568212][T16017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  351.593221][T16017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 16388 - 0
[  351.619832][T16017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.698009][T17432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2908'.
[  351.784381][T16017] bridge0: port 1(netdevsim0) entered disabled state
[  351.940533][ T5624] Bluetooth: hci5: command tx timeout
[  351.962335][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2911'.
[  351.963417][T16017] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  352.010128][T16017] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  352.023239][T16017] bridge0: port 1(netdevsim0) entered disabled state
[  352.058495][T16017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  352.071070][T16017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 16388 - 0
[  352.083022][T16017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.117713][ T5802] netdevsim0 speed is unknown, defaulting to 1000
[  352.125739][T17356] netdevsim0 speed is unknown, defaulting to 1000
[  352.138831][ T5802] syz1: Port: 1 Link DOWN
[  352.159990][T17356] wg2 speed is unknown, defaulting to 1000
[  352.208030][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'.
[  352.380839][T15992] smbdirect: ib_dev[syz1] removed
[  352.655213][   T30] audit: type=1107 audit(1786778141.708:9): pid=17463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  352.699144][T17472] nbd: socks must be embedded in a SOCK_ITEM attr
[  353.200576][T17485] can: request_module (can-proto-0) failed.
[  353.677338][T17507] syzkaller0: left promiscuous mode
[  353.699371][T17507] syzkaller0: left allmulticast mode
[  353.745801][T17512] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  354.018956][ T5624] Bluetooth: hci5: command tx timeout
[  354.731197][T16017] bond4 (unregistering): (slave bridge1): Releasing active interface
[  354.783568][T16017] bond1 (unregistering): Released all slaves
[  354.797946][T16017] bond2 (unregistering): Released all slaves
[  354.813742][T16017] bond3 (unregistering): Released all slaves
[  354.836788][T16017] bond4 (unregistering): Released all slaves
[  354.850534][T16017] bond5 (unregistering): Released all slaves
[  354.867975][T16017] bond6 (unregistering): Released all slaves
[  354.886677][T16017] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface
[  354.898871][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  354.910170][T16017] veth0_to_bond: left promiscuous mode
[  354.917346][T16017] veth0_to_bond: left allmulticast mode
[  354.926446][T16017] bond7 (unregistering): Released all slaves
[  354.941447][T16017] bond8 (unregistering): Released all slaves
[  354.954785][T16017] bond0 (unregistering): Released all slaves
[  354.973370][T16017] bond9 (unregistering): Released all slaves
[  354.994060][T16017] bond10 (unregistering): Released all slaves
[  355.010218][T16017] bond11 (unregistering): Released all slaves
[  355.031225][T16017] bond12 (unregistering): Released all slaves
[  355.063964][T16017] bond13 (unregistering): Released all slaves
[  355.095289][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  355.119951][T17551] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  355.289912][T17356] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.331597][T17356] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.360879][T17356] bridge_slave_0: entered allmulticast mode
[  355.396094][T17356] bridge_slave_0: entered promiscuous mode
[  355.497329][T16017] D†'|o: left promiscuous mode
[  355.834921][T17356] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.854294][T17356] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.866856][T17356] bridge_slave_1: entered allmulticast mode
[  355.876097][T17356] bridge_slave_1: entered promiscuous mode
[  355.926664][T17581] __nla_validate_parse: 4 callbacks suppressed
[  355.926683][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'.
[  356.054672][T16017] tipc: Disabling bearer <eth:syzkaller0>
[  356.096282][T16017] tipc: Left network mode
[  356.101299][ T5624] Bluetooth: hci5: command tx timeout
[  356.121774][T17592] netlink: 'syz.0.2943': attribute type 10 has an invalid length.
[  356.143502][T17356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.159541][T17356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.202387][T17356] team0: Port device team_slave_0 added
[  356.261317][T17592] syz_tun: entered promiscuous mode
[  356.353441][T17592] .`: (slave syz_tun): Enslaving as an active interface with an up link
[  356.409648][T17356] team0: Port device team_slave_1 added
[  356.812744][T17356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.834769][T17613] netlink: 'syz.0.2947': attribute type 4 has an invalid length.
[  356.849682][T17356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.915124][T17356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.003891][T17356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.030962][T17356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.110000][T17356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.307264][T17634] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  357.325391][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'.
[  357.365612][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2954'.
[  357.369283][T17640] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[  357.399618][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2953'.
[  357.415523][T17640] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2954'.
[  357.520108][T17634] 8021q: adding VLAN 0 to HW filter on device bond7
[  357.647756][T17636] bond7: entered promiscuous mode
[  357.674057][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  357.706121][T17356] hsr_slave_0: entered promiscuous mode
[  357.713435][T17356] hsr_slave_1: entered promiscuous mode
[  357.840579][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'.
[  358.095380][T17667] geneve0: entered promiscuous mode
[  358.104261][T17667] geneve0: left promiscuous mode
[  358.178841][ T5624] Bluetooth: hci5: command tx timeout
[  358.537399][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2963'.
[  358.875660][T17701] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003
[  358.993895][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2965'.
[  359.035469][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2965'.
[  359.057622][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2965'.
[  359.893841][T16017] hsr_slave_0: left promiscuous mode
[  359.904382][T16017] hsr_slave_1: left promiscuous mode
[  359.957623][T16017] veth1_macvtap: left promiscuous mode
[  359.966463][T16017] veth0_macvtap: left promiscuous mode
[  360.372619][T17756] ip6t_REJECT: ECHOREPLY is not supported
[  360.516833][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  360.736452][T17764] dvmrp8: left allmulticast mode
[  361.125533][T17780] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  361.581234][T16017] IPVS: stop unused estimator thread 0...
[  361.774216][T17808] __nla_validate_parse: 4 callbacks suppressed
[  361.774234][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2989'.
[  361.910474][T17810] netlink: 'syz.1.2990': attribute type 3 has an invalid length.
[  362.032681][T17820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2993'.
[  362.061786][   T30] audit: type=1804 audit(1786778151.118:10): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2992" name="/newroot/575/memory.events" dev="tmpfs" ino=2966 res=1 errno=0
[  362.351492][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory
[  362.596867][T17356] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  362.636464][T17356] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  362.659451][T17835] syzkaller0: entered promiscuous mode
[  362.671134][T17835] syzkaller0: entered allmulticast mode
[  362.680966][T17356] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  362.739401][T17356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  362.868339][T17356] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  362.898371][T17356] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  362.925285][T17356] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  362.925614][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3001'.
[  362.950747][T17356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  363.187958][T17356] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.270108][T17356] 8021q: adding VLAN 0 to HW filter on device team0
[  363.326913][T16017] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.334136][T16017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.428570][T16017] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.435876][T16017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.537490][T17894] netlink: 'syz.1.3006': attribute type 12 has an invalid length.
[  363.816171][T17911] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  364.037656][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3012'.
[  364.062304][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'.
[  364.229696][T17935] netlink: 'syz.2.3011': attribute type 1 has an invalid length.
[  364.292248][T17932] netlink: Failed to add GPL helper -22
[  364.337035][T17932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.367607][T17943] netlink: 'syz.1.3016': attribute type 1 has an invalid length.
[  364.372980][T17928] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3011'.
[  364.712045][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  364.767500][T17943] 8021q: adding VLAN 0 to HW filter on device bond10
[  364.793777][T17963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3018'.
[  365.224289][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  365.349757][T12688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  365.355767][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  365.478258][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3024'.
[  365.847750][T12688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  365.890694][T17356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.106408][T17356] veth0_vlan: entered promiscuous mode
[  366.275132][T17356] veth1_vlan: entered promiscuous mode
[  366.328485][T18034] tipc: Invalid UDP bearer configuration
[  366.328537][T18034] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  366.424539][T17356] veth0_macvtap: entered promiscuous mode
[  366.473633][T17356] veth1_macvtap: entered promiscuous mode
[  366.559354][T17356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.601648][T17356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.709785][ T3379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.753544][ T3379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.861405][T18060] __nla_validate_parse: 2 callbacks suppressed
[  366.861422][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  366.877647][T18059] xt_hashlimit: size too large, truncated to 1048576
[  366.944927][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3040'.
[  367.033869][T18060] erspan0: entered promiscuous mode
[  367.090317][T18065] –: renamed from wg2 (while UP)
[  367.122716][T15986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.312581][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.358209][T18074] netlink: 'syz.1.3041': attribute type 1 has an invalid length.
[  367.463485][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.495356][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.605357][T16005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.659402][T16005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.856487][T18092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3044'.
[  368.087327][T18097] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  368.179239][ T5625] Bluetooth: hci5: command 0x0405 tx timeout
[  368.288108][T18109] team0: No ports can be present during mode change
[  368.979051][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  369.059081][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.085396][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.095337][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.103389][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.111366][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.816383][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3056'.
[  369.857272][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3056'.
[  370.294584][T18129] xfrm0 speed is unknown, defaulting to 1000
[  370.378473][T18193] ip6t_rpfilter: unknown options
[  370.479152][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'.
[  370.936528][T18212] bond8: option ad_select: invalid value (34)
[  370.950024][T18212] bond8 (unregistering): Released all slaves
[  370.957034][T18222] can: request_module (can-proto-0) failed.
[  370.979053][T18220] can: request_module (can-proto-0) failed.
[  371.208395][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3070'.
[  371.219551][ T5624] Bluetooth: hci2: command tx timeout
[  371.232463][T18129] – speed is unknown, defaulting to 1000
[  372.289928][T18271] bridge0: port 6(syz_tun) entered disabled state
[  372.315098][T18271] bridge0: port 5(veth0) entered disabled state
[  372.321832][T18271] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.329390][T18271] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.509868][T18271] veth1_to_bond: left allmulticast mode
[  372.563367][T18271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.589217][T18271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.674566][T18271] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  372.686316][T18271] tipc: Resetting bearer <eth:syzkaller0>
[  372.708326][T18271] bond7: left promiscuous mode
[  372.747544][T18271] ip6gre1: left promiscuous mode
[  372.759479][T18271] ip6gre1: left allmulticast mode
[  372.794925][T18285] bond0: option arp_validate: invalid value (55553)
[  372.804699][T16016] bond0: (slave bond_slave_0): interface is now down
[  372.824545][ T5716] xfrm0 speed is unknown, defaulting to 1000
[  372.850798][T16016] bond0: (slave bond_slave_1): interface is now down
[  372.865443][ T5716] syz0: Port: 1 Link DOWN
[  372.900675][ T5716] xfrm0 speed is unknown, defaulting to 1000
[  372.964139][T16016] bond0: now running without any active interface!
[  373.089234][T18293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3082'.
[  373.213982][T18297] ip_tables: iptables: counters copy to user failed while replacing table
[  373.299052][ T5624] Bluetooth: hci2: command tx timeout
[  373.304573][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'.
[  373.670971][T18129] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.685029][T18129] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.717939][T18129] bridge_slave_0: entered allmulticast mode
[  373.741529][T18129] bridge_slave_0: entered promiscuous mode
[  373.771952][T18129] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.801486][T18129] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.833923][T18129] bridge_slave_1: entered allmulticast mode
[  373.863784][T18129] bridge_slave_1: entered promiscuous mode
[  374.218015][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.419509][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.622222][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'.
[  374.633845][T18129] team0: Port device team_slave_0 added
[  374.646688][T18129] team0: Port device team_slave_1 added
[  374.735829][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.752471][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.780538][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.793616][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.820470][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.897955][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.111545][T18129] hsr_slave_0: entered promiscuous mode
[  375.125586][T18129] hsr_slave_1: entered promiscuous mode
[  375.154216][T18129] debugfs: 'hsr0' already exists in 'hsr'
[  375.179209][T18129] Cannot create hsr debugfs directory
[  375.198919][T16019] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.227790][T16019] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.382187][ T5624] Bluetooth: hci2: command tx timeout
[  375.402389][T18371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.419325][T16019] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.435546][T16019] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.763014][T18406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3107'.
[  376.177492][T18418] netlink: 'syz.0.3110': attribute type 3 has an invalid length.
[  376.213364][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3110'.
[  376.469477][T18129] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  376.511751][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  376.548276][T18129] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  376.570977][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  376.587320][T18129] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  376.617077][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  376.626470][T18431] xfrm0 speed is unknown, defaulting to 1000
[  376.633227][T18129] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  376.656713][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  376.783669][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3116'.
[  376.847797][T18444] netlink: 'syz.1.3116': attribute type 1 has an invalid length.
[  376.938426][T18129] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.999356][T18129] 8021q: adding VLAN 0 to HW filter on device team0
[  377.023858][T16016] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.031113][T16016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.114017][T16016] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.121509][T16016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.371922][T18457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3121'.
[  377.387190][T18456] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  377.415691][T18431] – speed is unknown, defaulting to 1000
[  377.459068][ T5624] Bluetooth: hci2: command tx timeout
[  378.722188][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.927633][T18129] veth0_vlan: entered promiscuous mode
[  378.974964][T18511] syzkaller0: entered promiscuous mode
[  378.998990][T18511] syzkaller0: entered allmulticast mode
[  379.050211][T18129] veth1_vlan: entered promiscuous mode
[  379.245573][T18521] netlink: 'syz.0.3138': attribute type 13 has an invalid length.
[  379.317360][T18129] veth0_macvtap: entered promiscuous mode
[  379.373569][T18129] veth1_macvtap: entered promiscuous mode
[  379.422420][T18519] Cannot find add_set index 0 as target
[  379.479190][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.554466][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.672001][T18536] netlink: 'syz.1.3142': attribute type 3 has an invalid length.
[  379.683473][T18536] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  379.806311][T15986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.842953][T15986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.919443][T16019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.956243][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'.
[  379.981022][T16019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.993749][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3145'.
[  380.165167][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.193657][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.325183][T16019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.359681][T16019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.531834][T18567] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3150'.
[  381.105678][T18590] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  381.186625][T18590] bond10 (unregistering): Released all slaves
[  381.218409][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.233243][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.242367][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.256033][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.265413][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.388997][T18592] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3153'.
[  381.877173][ T5607] syz_tun (unregistering): left allmulticast mode
[  381.921636][ T5607] syz_tun (unregistering): left promiscuous mode
[  381.954312][ T5607] bridge0: port 4(syz_tun) entered disabled state
[  382.014600][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3157'.
[  382.034671][T18628] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.069512][T18628] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  382.289687][T18650] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  382.345635][T18650] tipc: New replicast peer: 0.0.0.0
[  382.406238][T18654] netlink: 'syz.2.3166': attribute type 8 has an invalid length.
[  382.455252][T18654] netlink: 'syz.2.3166': attribute type 9 has an invalid length.
[  382.549868][T18667] netlink: 'syz.4.3169': attribute type 2 has an invalid length.
[  382.568160][T18668] Bluetooth: MGMT ver 1.23
[  382.611012][T18668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3168'.
[  382.686399][T18668] ip6gre1: entered promiscuous mode
[  382.703897][T18668] ip6gre1: entered allmulticast mode
[  382.761953][T18598] xfrm0 speed is unknown, defaulting to 1000
[  382.822701][T18682] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3170'.
[  382.827322][T18679] netlink: 'syz.4.3170': attribute type 21 has an invalid length.
[  382.903277][T18679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3170'.
[  383.379432][ T5624] Bluetooth: hci0: command tx timeout
[  383.584591][T18718] netlink: 'syz.2.3179': attribute type 3 has an invalid length.
[  383.631054][T18718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3179'.
[  383.695219][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'.
[  383.811226][T18598] – speed is unknown, defaulting to 1000
[  383.954416][T18742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.965035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.001799][T18742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.018139][T16005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.048891][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.121810][T18742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.132277][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.332785][T18761] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  384.627685][T18761] bond10: entered promiscuous mode
[  384.636005][T18761] 8021q: adding VLAN 0 to HW filter on device bond10
[  384.666191][T18774] 8021q: adding VLAN 0 to HW filter on device bond10
[  384.677945][T18774] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address
[  384.714335][T18774] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  384.734478][T18774] bond10: (slave xfrm1): making interface the new active one
[  384.743899][T18774] xfrm1: entered promiscuous mode
[  384.752046][T18774] bond10: (slave xfrm1): Enslaving as an active interface with an up link
[  385.240098][T18806] netlink: 'syz.0.3196': attribute type 6 has an invalid length.
[  385.300823][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'.
[  385.397486][T18813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3199'.
[  385.461582][ T5624] Bluetooth: hci0: command tx timeout
[  385.625771][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.747802][T18833] bond11: ARP target 9.0.0.0 is already present
[  385.754661][T18833] bond11: option arp_ip_target: invalid value (9)
[  385.762961][T18833] bond11 (unregistering): Released all slaves
[  385.785832][T18598] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.793253][T18598] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.800745][T18598] bridge_slave_0: entered allmulticast mode
[  385.807926][T18598] bridge_slave_0: entered promiscuous mode
[  385.832613][T18598] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.851224][T18598] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.859362][T18598] bridge_slave_1: entered allmulticast mode
[  385.869268][T18598] bridge_slave_1: entered promiscuous mode
[  385.924119][T18837] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.968757][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.987066][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.043495][T18845] sock: sock_timestamping_bind_phc: sock not bind to device
[  386.052376][T18844] sock: sock_timestamping_bind_phc: sock not bind to device
[  386.094903][T18598] team0: Port device team_slave_0 added
[  386.104319][T18598] team0: Port device team_slave_1 added
[  386.126595][T18847] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  386.141400][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.148720][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.175345][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.191651][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.198818][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.225419][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.365208][T18598] hsr_slave_0: entered promiscuous mode
[  386.382763][T18598] hsr_slave_1: entered promiscuous mode
[  386.409577][T18598] debugfs: 'hsr0' already exists in 'hsr'
[  386.426381][T18598] Cannot create hsr debugfs directory
[  387.539041][ T5624] Bluetooth: hci0: command tx timeout
[  388.445752][T18816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.525279][T18863] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  388.690679][T18877] ip_tables: iptables: counters copy to user failed while replacing table
[  388.887039][T18877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.920743][    C1] vcan0: j1939_tp_rxtimer: 0xffff888067784c00: rx timeout, send abort
[  389.420880][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e3c1800: rx timeout, send abort
[  389.432370][    C1] vcan0: j1939_tp_rxtimer: 0xffff888067784c00: abort rx timeout. Force session deactivation
[  389.481990][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3213'.
[  389.619431][ T5624] Bluetooth: hci0: command tx timeout
[  389.769308][T18903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3217'.
[  389.929151][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e3c1800: abort rx timeout. Force session deactivation
[  390.361393][T18924] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  390.393102][T18926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3224'.
[  390.419716][T18924] netlink: 'syz.3.3223': attribute type 1 has an invalid length.
[  390.441533][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'.
[  390.456366][T18926] netlink: 'syz.0.3224': attribute type 1 has an invalid length.
[  390.496242][T18924] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.865545][T18926] 8021q: adding VLAN 0 to HW filter on device bond8
[  390.918968][T18934] bond8: (slave gretap0): making interface the new active one
[  390.930785][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'.
[  390.940509][T18934] bond8: (slave gretap0): Enslaving as an active interface with an up link
[  391.155336][T18598] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  391.207816][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  391.239855][T18967] gretap0: entered promiscuous mode
[  391.272599][T18598] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  391.400700][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  391.481271][T18598] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  391.523035][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  391.564826][T18598] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  391.616118][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  391.937259][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3232'.
[  391.994820][T18990] lo: entered allmulticast mode
[  392.065559][T18598] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.102471][T18988] lo: left allmulticast mode
[  392.167871][T18598] 8021q: adding VLAN 0 to HW filter on device team0
[  392.211985][T16017] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.219485][T16017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.336747][T16017] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.344033][T16017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.454133][T19013] syzkaller0: entered promiscuous mode
[  392.471283][T19009] netlink: 'syz.3.3235': attribute type 1 has an invalid length.
[  392.471873][T19013] syzkaller0: entered allmulticast mode
[  392.876816][T19025] xt_hashlimit: size too large, truncated to 1048576
[  392.914173][T19028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3238'.
[  393.605149][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.822972][T19043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3240'.
[  393.843425][T19043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3240'.
[  393.866315][T18598] veth0_vlan: entered promiscuous mode
[  393.926198][T18598] veth1_vlan: entered promiscuous mode
[  394.102877][T18598] veth0_macvtap: entered promiscuous mode
[  394.153281][T18598] veth1_macvtap: entered promiscuous mode
[  394.181779][T19058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3244'.
[  394.236024][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.292459][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.352452][T16022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.426270][T19064] netlink: 'syz.4.3246': attribute type 1 has an invalid length.
[  394.503854][T16022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.532660][T16022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.707568][T19072] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3248'.
[  394.718048][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.835067][T16022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.874927][T16022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.021540][T16019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.021552][T19074] tap0: tun_chr_ioctl cmd 1074025672
[  395.021570][T19074] tap0: ignored: set checksum disabled
[  395.045235][T16019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.194125][T19080] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  395.221948][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.230927][T19080] netlink: 'syz.0.3251': attribute type 7 has an invalid length.
[  395.254401][T19080] netlink: 'syz.0.3251': attribute type 8 has an invalid length.
[  395.367775][T19086] netlink: 'syz.3.3253': attribute type 10 has an invalid length.
[  395.392848][T19086] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3253'.
[  395.932666][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  395.949034][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  395.961729][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  395.976760][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  395.998795][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  396.158182][T19112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3260'.
[  396.203612][T19112] tc_dump_action: action bad kind
[  396.249485][T19115] netlink: 'syz.3.3261': attribute type 1 has an invalid length.
[  396.321943][ T5627] syz_tun (unregistering): left promiscuous mode
[  396.344275][ T5627] bridge0: port 6(syz_tun) entered disabled state
[  396.595331][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'.
[  396.642106][T19123] xt_TCPMSS: Only works on TCP SYN packets
[  396.764181][T19129] ipip0: entered promiscuous mode
[  396.796231][T19129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.867200][T19123] bridge_slave_1: left allmulticast mode
[  396.879687][T19123] bridge_slave_1: left promiscuous mode
[  396.893542][T19123] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.957097][T19123] bridge_slave_0: left allmulticast mode
[  396.989917][T19123] bridge_slave_0: left promiscuous mode
[  397.021580][T19123] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.114241][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'.
[  397.188162][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'.
[  397.264617][ T5624] block nbd7: Receive control failed (result -107)
[  397.285871][T19103] xfrm0 speed is unknown, defaulting to 1000
[  397.472433][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'.
[  397.494310][T19152] team0: entered promiscuous mode
[  397.508498][T19152] team_slave_0: entered promiscuous mode
[  397.526874][T19152] team_slave_1: entered promiscuous mode
[  397.539865][T19152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  398.030071][T19103] – speed is unknown, defaulting to 1000
[  398.099269][ T5624] Bluetooth: hci1: command tx timeout
[  398.419841][T19175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.571423][T19181] netlink: 'syz.3.3276': attribute type 1 has an invalid length.
[  398.802676][T19103] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.811812][T19103] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.819319][T19103] bridge_slave_0: entered allmulticast mode
[  398.827298][T19103] bridge_slave_0: entered promiscuous mode
[  398.840509][T19103] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.847958][T19103] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.855797][T19103] bridge_slave_1: entered allmulticast mode
[  398.864805][T19103] bridge_slave_1: entered promiscuous mode
[  398.914070][T19103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.927481][T19103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.973598][T19103] team0: Port device team_slave_0 added
[  398.982668][T19103] team0: Port device team_slave_1 added
[  399.024973][T19103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.032570][T19103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.062096][T19103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.075574][T19103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.084071][T19103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.111963][T19103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.214194][T19103] hsr_slave_0: entered promiscuous mode
[  399.221526][T19103] hsr_slave_1: entered promiscuous mode
[  399.228356][T19103] debugfs: 'hsr0' already exists in 'hsr'
[  399.249329][T19103] Cannot create hsr debugfs directory
[  399.416779][T19192] netlink: 'syz.3.3279': attribute type 5 has an invalid length.
[  399.431284][T19195] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[  399.441239][T19192] netlink: 'syz.3.3279': attribute type 9 has an invalid length.
[  399.460036][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'.
[  399.473195][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'.
[  399.591721][T19204] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:10000
[  399.655552][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3284'.
[  399.866526][T19212] xfrm0 speed is unknown, defaulting to 1000
[  400.047876][T19103] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  400.069084][T19103] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  400.083683][T19103] bridge0: port 3(netdevsim0) entered disabled state
[  400.139895][T19212] – speed is unknown, defaulting to 1000
[  400.179067][ T5624] Bluetooth: hci1: command tx timeout
[  400.452857][T19153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.651193][T19220] openvswitch: netlink: IPv4 tun info is not correct
[  400.684678][T19220] ±ÿ¡*ğA^�mƒ‰: renamed from lo (while UP)
[  401.060564][T19230] tipc: MTU too low for tipc bearer
[  401.086161][T19238] netlink: 'syz.2.3292': attribute type 9 has an invalid length.
[  401.147733][T19219] xfrm0 speed is unknown, defaulting to 1000
[  401.250792][T19103] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  401.274715][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  401.295552][T19103] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  401.323650][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  401.341620][T19103] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  401.364061][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  401.391869][T19103] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  401.432186][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  401.626454][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'.
[  401.852369][T19103] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.926712][T19103] 8021q: adding VLAN 0 to HW filter on device team0
[  401.970535][T19219] – speed is unknown, defaulting to 1000
[  401.986887][T16005] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.994165][T16005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.004345][T16005] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.011566][T16005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.279002][ T5624] Bluetooth: hci1: command tx timeout
[  402.636340][T19278] netlink: 'syz.1.3302': attribute type 1 has an invalid length.
[  402.701736][T19278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3302'.
[  402.746975][T19278] veth0_to_batadv: entered promiscuous mode
[  402.854738][   T30] audit: type=1804 audit(1786778191.908:11): pid=19287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3304" name="/newroot/69/cgroup.controllers" dev="tmpfs" ino=372 res=1 errno=0
[  402.900452][T19285] syzkaller1: entered promiscuous mode
[  402.916186][T19285] syzkaller1: entered allmulticast mode
[  402.924259][   T30] audit: type=1800 audit(1786778191.908:12): pid=19287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3304" name="cgroup.controllers" dev="tmpfs" ino=372 res=0 errno=0
[  403.425147][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'.
[  403.479039][T16022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.542166][T16022] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.558502][T16022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.589016][T16022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.849334][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3307'.
[  403.948134][T19103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.987097][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3307'.
[  404.064189][T19322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3309'.
[  404.338964][ T5624] Bluetooth: hci1: command tx timeout
[  404.531361][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'.
[  404.822278][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.022668][T19103] veth0_vlan: entered promiscuous mode
[  405.046841][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  405.070085][T19364] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  405.111537][T19364] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  405.126957][T19369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.137798][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.148435][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3314'.
[  405.161708][T15986] IPVS: starting estimator thread 0...
[  405.192693][T19364] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3313'.
[  405.245302][T19364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'.
[  405.269372][T19370] IPVS: using max 35 ests per chain, 84000 per kthread
[  405.289712][T19368] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  405.321145][T19368] bond2 (unregistering): Released all slaves
[  405.414411][T19103] veth1_vlan: entered promiscuous mode
[  405.578226][T19103] veth0_macvtap: entered promiscuous mode
[  405.602239][T19103] veth1_macvtap: entered promiscuous mode
[  405.686210][T19103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.725355][T19103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.759636][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.787129][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.818569][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.842401][T19392] openvswitch: netlink: Flow actions attr not present in new flow.
[  405.950597][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.090914][T16022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.122703][T16022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.331196][T19411] netlink: 'syz.3.3321': attribute type 1 has an invalid length.
[  406.682080][T19422] __nla_validate_parse: 3 callbacks suppressed
[  406.682098][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3322'.
[  407.627025][T15986] IPVS: starting estimator thread 0...
[  407.640254][T19425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.722347][T19426] IPVS: using max 39 ests per chain, 93600 per kthread
[  409.195720][T19411] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  409.210361][T19413] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3322'.
[  409.255138][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.270974][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.395688][T19430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3326'.
[  409.608314][T19434] xfrm0 speed is unknown, defaulting to 1000
[  409.645523][T19440] syzkaller1: entered allmulticast mode
[  409.670845][T19448] netlink: 'syz.4.3254': attribute type 1 has an invalid length.
[  409.706269][T19440] netlink: 'syz.2.3330': attribute type 4 has an invalid length.
[  409.791680][T19448] veth3: entered allmulticast mode
[  410.243353][T19464] bond0: Error: Cannot enslave bond to itself.
[  410.278340][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  410.299146][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  410.323563][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  410.336060][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  410.347021][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  410.492782][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'.
[  410.818318][T19434] – speed is unknown, defaulting to 1000
[  410.911671][ T5609] .`: (slave syz_tun): Releasing backup interface
[  410.950860][T19485] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  410.964131][T19484] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  410.991167][T19488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3341'.
[  411.269143][T19500] netlink: 'syz.2.3344': attribute type 4 has an invalid length.
[  411.540746][T19465] xfrm0 speed is unknown, defaulting to 1000
[  411.866626][T19465] – speed is unknown, defaulting to 1000
[  411.990250][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'.
[  412.277265][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3350'.
[  412.329955][T19525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3349'.
[  412.427444][ T5625] Bluetooth: hci4: command tx timeout
[  413.128533][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'.
[  413.149557][T19562] netlink: 'syz.1.3357': attribute type 12 has an invalid length.
[  413.188106][T19564] netlink: 'syz.4.3358': attribute type 12 has an invalid length.
[  413.234820][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3358'.
[  413.523023][T19465] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.547611][T19465] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.573973][T19465] bridge_slave_0: entered allmulticast mode
[  413.592596][T19465] bridge_slave_0: entered promiscuous mode
[  413.612089][T19465] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.636778][T19465] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.656457][T19465] bridge_slave_1: entered allmulticast mode
[  413.680763][T19465] bridge_slave_1: entered promiscuous mode
[  413.874013][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'.
[  413.955712][T19465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.987453][T19465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.100069][T19465] team0: Port device team_slave_0 added
[  414.143973][T19465] team0: Port device team_slave_1 added
[  414.155214][T19604] xt_CT: You must specify a L4 protocol and not use inversions on it
[  414.247941][T19465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.282752][T19465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.372594][T19465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.425132][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.434392][T19465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.467454][T19465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.506359][ T5625] Bluetooth: hci4: command tx timeout
[  414.576578][T19465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.778057][T19465] hsr_slave_0: entered promiscuous mode
[  414.793942][T19465] hsr_slave_1: entered promiscuous mode
[  414.813821][T19465] debugfs: 'hsr0' already exists in 'hsr'
[  414.826979][T19465] Cannot create hsr debugfs directory
[  414.868464][T19632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3374'.
[  414.897033][T19639] xfrm0 speed is unknown, defaulting to 1000
[  415.099379][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'.
[  415.117896][T19646] 8021q: VLANs not supported on sit0
[  415.508475][T19639] – speed is unknown, defaulting to 1000
[  415.655018][T19652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3378'.
[  415.866248][T19656] netlink: Failed to add GPL helper -22
[  415.877587][T19656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.230970][T19669] netlink: 'syz.2.3382': attribute type 1 has an invalid length.
[  416.580456][ T5625] Bluetooth: hci4: command tx timeout
[  416.673889][T19681] block nbd9: server does not support multiple connections per device.
[  416.690334][T19681] block nbd9: shutting down sockets
[  416.715434][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'.
[  416.759811][T19689] netlink: 'syz.1.3388': attribute type 1 has an invalid length.
[  416.981244][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.082975][T19703] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  417.126598][T19707] openvswitch: netlink: Unknown key attributes 1
[  417.284773][T19712] sch_fq: defrate 8 ignored.
[  417.379802][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.426263][T19465] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  417.464990][T19465] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  417.473323][T19465] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  417.487758][T19465] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  417.534912][T19465] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  417.543244][T19715] __nla_validate_parse: 1 callbacks suppressed
[  417.543263][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3393'.
[  417.565679][T19465] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  417.586909][T19465] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  417.600048][T19465] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  417.817091][T19465] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.846395][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'.
[  417.870674][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'.
[  417.982507][T19465] 8021q: adding VLAN 0 to HW filter on device team0
[  418.037491][T15982] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.044748][T15982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.101289][T16016] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.108500][T16016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.126967][T19740] netlink: 'syz.2.3400': attribute type 1 has an invalid length.
[  418.419840][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.595930][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'.
[  418.624925][T19758] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  418.637037][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'.
[  418.654153][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'.
[  418.663682][ T5625] Bluetooth: hci4: command tx timeout
[  418.680795][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'.
[  418.690461][T16018] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.708821][T16018] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.761685][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'.
[  418.911069][T16018] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.982727][T16016] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  419.104246][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3410'.
[  419.461499][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.547837][T15976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.681305][T19810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3419'.
[  419.690926][T19465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.888168][T19465] veth0_vlan: entered promiscuous mode
[  419.997963][T19465] veth1_vlan: entered promiscuous mode
[  420.019294][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.132108][T19465] veth0_macvtap: entered promiscuous mode
[  420.166700][T19465] veth1_macvtap: entered promiscuous mode
[  420.191602][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.379824][T19830] bond2: (slave bond_slave_1): Device is not our slave
[  420.386861][T19830] bond2: option active_slave: invalid value (bond_slave_1)
[  420.401308][T19830] bond2 (unregistering): Released all slaves
[  420.496674][T19465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.507336][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.576928][T19465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.732875][T16017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.759927][T16017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.368885][T19874] netlink: 'syz.1.3436': attribute type 21 has an invalid length.
[  421.377048][T19874] netlink: 'syz.1.3436': attribute type 6 has an invalid length.
[  421.429175][T19873] geneve2: entered promiscuous mode
[  421.461585][T19873] geneve2: entered allmulticast mode
[  421.470134][T16016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.480290][T16016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.542207][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.603483][T15982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.638348][T15982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.725596][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.733744][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.076051][T19900] Cannot find set identified by id 9990 to match
[  422.551358][T19921] bond3: option mode: invalid value (254)
[  422.552571][T19930] __nla_validate_parse: 8 callbacks suppressed
[  422.552586][T19930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3452'.
[  422.586101][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.598607][T19921] bond3 (unregistering): Released all slaves
[  422.648364][T19932] batman_adv: batadv0: Adding interface: dummy0
[  422.655109][T19932] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.703444][T19932] batman_adv: batadv0: Interface activated: dummy0
[  422.720185][T19927] netlink: 'syz.4.3451': attribute type 3 has an invalid length.
[  423.059880][T15976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.082144][T19949] tipc: Can't bind to reserved service type 2
[  423.626087][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.665454][T19966] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3462'.
[  423.737604][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'.
[  424.024235][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.084313][T19970] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.112511][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3467'.
[  424.528947][T19995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3472'.
[  424.554716][T19995] tc_dump_action: action bad kind
[  424.641748][T19997] netlink: 'syz.4.3473': attribute type 1 has an invalid length.
[  424.662111][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.687276][T19998] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  424.688202][T19997] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  424.879570][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'.
[  425.188290][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'.
[  425.369852][T20041] netlink: 'syz.2.3484': attribute type 1 has an invalid length.
[  425.373528][T20040] netlink: 'syz.2.3484': attribute type 1 has an invalid length.
[  425.622084][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3485'.
[  425.658534][T20046] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  425.704125][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.062988][T20057] syzkaller0: entered promiscuous mode
[  426.081497][T20057] syzkaller0: entered allmulticast mode
[  426.101695][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.347045][T20069] IPv6: addrconf: prefix option has invalid lifetime
[  426.681163][T20083] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3495'.
[  426.694479][T20082] netlink: 'syz.0.3497': attribute type 16 has an invalid length.
[  426.741277][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.767357][T20081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3496'.
[  426.941487][T20089] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  426.974029][T20089] netlink: 'syz.2.3498': attribute type 11 has an invalid length.
[  427.208996][T20103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.263655][T20103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.278306][T20111] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  427.301384][T20103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.376912][T20103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.721500][T20137] __nla_validate_parse: 3 callbacks suppressed
[  427.721520][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'.
[  427.846022][T20137] sch_fq: defrate 4294967293 ignored.
[  427.914893][T20150] netlink: 'syz.0.3514': attribute type 1 has an invalid length.
[  427.955987][T20148] bond4: entered promiscuous mode
[  427.984406][T20148] bond4: entered allmulticast mode
[  428.211919][T20146] xfrm0 speed is unknown, defaulting to 1000
[  428.386502][T15982] IPVS: starting estimator thread 0...
[  428.527309][T20179] – speed is unknown, defaulting to 1000
[  428.549440][T20173] IPVS: using max 31 ests per chain, 74400 per kthread
[  428.826407][T20197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3526'.
[  429.197757][T20220] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3532'.
[  429.252126][T20216] syzkaller0: entered promiscuous mode
[  429.284265][T20216] syzkaller0: entered allmulticast mode
[  429.294062][T20146] – speed is unknown, defaulting to 1000
[  429.407712][T20224] netlink: 'syz.2.3534': attribute type 4 has an invalid length.
[  429.536569][T20228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3536'.
[  429.825997][T20236] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3540'.
[  430.300280][T20256] bond1 (unregistering): Released all slaves
[  431.515407][T20282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3553'.
[  431.863289][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3556'.
[  431.922253][T20302] macvtap1: entered allmulticast mode
[  431.927744][T20302] dummy0: entered allmulticast mode
[  431.936483][T20302] dummy0: entered promiscuous mode
[  431.945548][T20302] dummy0: left allmulticast mode
[  431.970623][T15976] dummy0: left promiscuous mode
[  432.203862][T20311] bond2: option fail_over_mac: invalid value (127)
[  432.215420][T20311] bond2 (unregistering): Released all slaves
[  432.863844][T20238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  433.245135][T20343] netlink: 'syz.0.3571': attribute type 1 has an invalid length.
[  433.258569][T20341] xt_hashlimit: size too large, truncated to 1048576
[  433.360484][T20343] 8021q: adding VLAN 0 to HW filter on device bond1
[  433.456264][T20347] bond1: (slave gretap1): making interface the new active one
[  433.470527][T20353] netlink: 'syz.3.3573': attribute type 1 has an invalid length.
[  433.495121][T20347] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  433.521421][T20348] bond1 (unregistering): (slave gretap1): Releasing active interface
[  433.532269][T20348] bond1 (unregistering): Released all slaves
[  433.558542][T20355] netlink: 'syz.4.3572': attribute type 1 has an invalid length.
[  433.577792][T20355] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3572'.
[  433.630468][ T5717] net_ratelimit: 7 callbacks suppressed
[  433.630484][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.667528][T20353] 8021q: adding VLAN 0 to HW filter on device bond2
[  433.797785][T20359] bond2: (slave veth3): Enslaving as an active interface with a down link
[  433.846692][T20376] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3577'.
[  433.896722][T20380] netlink: 'syz.2.3578': attribute type 32 has an invalid length.
[  433.932267][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'.
[  433.968207][T20380] bond5: Setting coupled_control to off (0)
[  433.982758][T20381] vlan2: entered promiscuous mode
[  433.987934][T20381] hsr0: entered promiscuous mode
[  433.994732][T20381] vlan2: entered allmulticast mode
[  434.000977][T20381] hsr0: entered allmulticast mode
[  434.006216][T20381] hsr_slave_0: entered allmulticast mode
[  434.013326][T20381] hsr_slave_1: entered allmulticast mode
[  434.039412][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'.
[  434.084691][T20380] hsr_slave_0: left promiscuous mode
[  434.108870][T20380] hsr_slave_1: left promiscuous mode
[  434.552570][T20412] Cannot find add_set index 0 as target
[  434.674799][T20430] xt_ecn: cannot match TCP bits for non-tcp packets
[  434.780309][T20432] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0
[  435.078464][T20431] xfrm0 speed is unknown, defaulting to 1000
[  435.089424][T20441] syzkaller0: entered promiscuous mode
[  435.104400][T20441] syzkaller0: entered allmulticast mode
[  435.415111][T20455] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3596'.
[  435.475553][T20457] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3596'.
[  435.681275][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'.
[  435.760187][T20467] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  435.799711][T20467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  435.829259][T20470] netlink: 'syz.1.3601': attribute type 1 has an invalid length.
[  435.886956][T20470] 8021q: adding VLAN 0 to HW filter on device bond1
[  435.940040][T20475] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3602'.
[  436.010515][T20431] – speed is unknown, defaulting to 1000
[  436.076674][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  436.100418][T20478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3603'.
[  436.237736][T20490] IPVS: rr: FWM 3 0x00000003 - no destination available
[  436.752533][T20503] batadv_slave_1: entered promiscuous mode
[  437.068165][T20509] syzkaller0: entered promiscuous mode
[  437.075849][T20509] syzkaller0: entered allmulticast mode
[  437.559061][T20537] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  438.705926][T20607] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  438.722099][T20596] bond2 (unregistering): Released all slaves
[  438.758055][T20603] xt_cgroup: path and classid specified
[  438.904173][T20607] 8021q: adding VLAN 0 to HW filter on device bond6
[  439.204293][T20622] netlink: 'syz.1.3639': attribute type 6 has an invalid length.
[  439.219020][T20622] netlink: 'syz.1.3639': attribute type 7 has an invalid length.
[  439.238302][T20622] netlink: 'syz.1.3639': attribute type 8 has an invalid length.
[  439.316705][T20629] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  439.447680][T20638] xt_cgroup: invalid path, errno=-2
[  439.755880][T20654] __nla_validate_parse: 3 callbacks suppressed
[  439.755897][T20654] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3650'.
[  440.083465][T20673] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  440.097351][T20670] xfrm0 speed is unknown, defaulting to 1000
[  440.123943][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'.
[  440.261994][T20675] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  440.335367][T20675] bond7 (unregistering): Released all slaves
[  440.553852][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'.
[  440.744800][T20701] netlink: 'syz.2.3659': attribute type 10 has an invalid length.
[  440.922623][T20709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.996309][T20701] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  441.007738][T20701] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  441.073961][T20670] – speed is unknown, defaulting to 1000
[  441.087542][T20712] pim6reg: entered allmulticast mode
[  441.443878][T20725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3669'.
[  441.823754][T20744] netlink: 'syz.0.3673': attribute type 1 has an invalid length.
[  441.889924][T20744] netlink: 'syz.0.3673': attribute type 1 has an invalid length.
[  441.928567][T20744] netlink: 'syz.0.3673': attribute type 1 has an invalid length.
[  441.978022][T20747] netlink: 'syz.0.3673': attribute type 1 has an invalid length.
[  442.076989][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'.
[  442.392304][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3677'.
[  442.445315][T20760] netlink: 'syz.0.3677': attribute type 1 has an invalid length.
[  442.537645][   T12] IPVS: starting estimator thread 0...
[  442.595771][T20771] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  442.628759][T20770] IPVS: using max 34 ests per chain, 81600 per kthread
[  443.012237][T20786] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  443.220018][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.279993][T20800] bridge3: the hash_elasticity option has been deprecated and is always 16
[  443.289446][T20800] bridge3: entered allmulticast mode
[  443.317733][T20802] bridge4: the hash_elasticity option has been deprecated and is always 16
[  443.327827][T20802] bridge4: entered allmulticast mode
[  443.604271][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3700'.
[  443.666844][T20818] gretap1: entered allmulticast mode
[  443.831980][T20832] ip6gretap1: entered allmulticast mode
[  443.844315][T20832] batman_adv: batadv0: Adding interface: ip6gretap1
[  443.844666][T20835] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  443.853723][T20832] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.890719][T20832] batman_adv: batadv0: Interface activated: ip6gretap1
[  444.382976][T20854] validate_nla: 2 callbacks suppressed
[  444.382993][T20854] netlink: 'syz.2.3710': attribute type 3 has an invalid length.
[  444.438112][T20854] netlink: 'syz.2.3710': attribute type 3 has an invalid length.
[  444.631070][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'.
[  444.648049][T20871] syz_tun: entered allmulticast mode
[  444.683908][T20871] dvmrp8: entered allmulticast mode
[  445.346512][T20862] syz_tun: left allmulticast mode
[  445.385785][T20856] 
[  445.388154][T20856] ======================================================
[  445.395211][T20856] WARNING: possible circular locking dependency detected
[  445.402238][T20856] syzkaller #0 Not tainted
[  445.406636][T20856] ------------------------------------------------------
[  445.413643][T20856] syz.1.3712/20856 is trying to acquire lock:
[  445.419691][T20856] ffff88802752ebf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  445.429083][T20856] 
[  445.429083][T20856] but task is already holding lock:
[  445.436437][T20856] ffff88802752e6d0 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x194/0x480
[  445.446635][T20856] 
[  445.446635][T20856] which lock already depends on the new lock.
[  445.446635][T20856] 
[  445.457024][T20856] 
[  445.457024][T20856] the existing dependency chain (in reverse order) is:
[  445.466033][T20856] 
[  445.466033][T20856] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}:
[  445.474634][T20856]        blk_alloc_queue+0x544/0x690
[  445.479918][T20856]        __blk_mq_alloc_disk+0x194/0x390
[  445.485554][T20856]        nbd_dev_add+0x494/0xb60
[  445.490515][T20856]        nbd_init+0x15f/0x1e0
[  445.495200][T20856]        do_one_initcall+0x250/0x870
[  445.500476][T20856]        do_initcall_level+0x10a/0x1a0
[  445.505925][T20856]        do_initcalls+0x59/0xa0
[  445.510771][T20856]        kernel_init_freeable+0x29d/0x3e0
[  445.516483][T20856]        kernel_init+0x1d/0x1d0
[  445.521325][T20856]        ret_from_fork+0x514/0xb70
[  445.526432][T20856]        ret_from_fork_asm+0x1a/0x30
[  445.531747][T20856] 
[  445.531747][T20856] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  445.538946][T20856]        fs_reclaim_acquire+0x71/0x100
[  445.544400][T20856]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  445.550748][T20856]        __alloc_skb+0x1d7/0x7a0
[  445.555673][T20856]        __ip6_append_data+0x2ec4/0x40c0
[  445.561287][T20856]        ip6_append_data+0x108/0x270
[  445.566552][T20856]        rawv6_sendmsg+0x1298/0x18c0
[  445.571820][T20856]        sock_sendmsg_nosec+0x10e/0x180
[  445.577358][T20856]        ____sys_sendmsg+0x54e/0x850
[  445.582637][T20856]        ___sys_sendmsg+0x2a5/0x360
[  445.587847][T20856]        __x64_sys_sendmsg+0x1b1/0x290
[  445.593307][T20856]        do_syscall_64+0x174/0x580
[  445.598437][T20856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.604864][T20856] 
[  445.604864][T20856] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  445.612586][T20856]        lock_sock_nested+0x41/0x100
[  445.617875][T20856]        inet_shutdown+0x6a/0x390
[  445.622887][T20856]        nbd_mark_nsock_dead+0x2cb/0x550
[  445.628769][T20856]        recv_work+0x1cee/0x1e10
[  445.633688][T20856]        process_scheduled_works+0xa8e/0x14e0
[  445.639738][T20856]        worker_thread+0xa47/0xfb0
[  445.644925][T20856]        kthread+0x388/0x470
[  445.649504][T20856]        ret_from_fork+0x514/0xb70
[  445.654616][T20856]        ret_from_fork_asm+0x1a/0x30
[  445.659891][T20856] 
[  445.659891][T20856] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  445.667524][T20856]        __mutex_lock+0x19d/0x1550
[  445.672634][T20856]        nbd_queue_rq+0x373/0x1150
[  445.677731][T20856]        blk_mq_dispatch_rq_list+0x499/0x1990
[  445.683786][T20856]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  445.690629][T20856]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  445.701750][T20856]        blk_mq_run_work_fn+0x16c/0x300
[  445.707352][T20856]        process_scheduled_works+0xa8e/0x14e0
[  445.713460][T20856]        worker_thread+0xa47/0xfb0
[  445.718591][T20856]        kthread+0x388/0x470
[  445.723189][T20856]        ret_from_fork+0x514/0xb70
[  445.728307][T20856]        ret_from_fork_asm+0x1a/0x30
[  445.733664][T20856] 
[  445.733664][T20856] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  445.740895][T20856]        __mutex_lock+0x19d/0x1550
[  445.746012][T20856]        nbd_queue_rq+0xc1/0x1150
[  445.751026][T20856]        blk_mq_dispatch_rq_list+0x499/0x1990
[  445.757082][T20856]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  445.763925][T20856]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  445.770419][T20856]        blk_mq_run_work_fn+0x16c/0x300
[  445.776039][T20856]        process_scheduled_works+0xa8e/0x14e0
[  445.782099][T20856]        worker_thread+0xa47/0xfb0
[  445.787206][T20856]        kthread+0x388/0x470
[  445.791790][T20856]        ret_from_fork+0x514/0xb70
[  445.796897][T20856]        ret_from_fork_asm+0x1a/0x30
[  445.802177][T20856] 
[  445.802177][T20856] -> #1 (set->srcu){.+.+}-{0:0}:
[  445.809288][T20856]        __synchronize_srcu+0xc9/0x2f0
[  445.814746][T20856]        elevator_switch+0x1e8/0x7b0
[  445.820020][T20856]        elevator_change+0x2fa/0x480
[  445.825300][T20856]        elevator_set_default+0x375/0x440
[  445.831021][T20856]        blk_register_queue+0x3f3/0x4e0
[  445.836564][T20856]        __add_disk+0x6cb/0xe30
[  445.841397][T20856]        add_disk_fwnode+0x100/0x3a0
[  445.846945][T20856]        nbd_dev_add+0x733/0xb60
[  445.851874][T20856]        nbd_init+0x15f/0x1e0
[  445.856569][T20856]        do_one_initcall+0x250/0x870
[  445.861852][T20856]        do_initcall_level+0x10a/0x1a0
[  445.867329][T20856]        do_initcalls+0x59/0xa0
[  445.872972][T20856]        kernel_init_freeable+0x29d/0x3e0
[  445.878704][T20856]        kernel_init+0x1d/0x1d0
[  445.883551][T20856]        ret_from_fork+0x514/0xb70
[  445.888660][T20856]        ret_from_fork_asm+0x1a/0x30
[  445.893949][T20856] 
[  445.893949][T20856] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  445.901756][T20856]        __lock_acquire+0x1520/0x2cf0
[  445.907146][T20856]        lock_acquire+0x106/0x350
[  445.912178][T20856]        __mutex_lock+0x19d/0x1550
[  445.917303][T20856]        elevator_change+0x1af/0x480
[  445.922574][T20856]        elevator_set_none+0xb5/0x140
[  445.927937][T20856]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  445.934256][T20856]        nbd_start_device+0x189/0xb30
[  445.939617][T20856]        nbd_genl_connect+0x1597/0x1c10
[  445.945187][T20856]        genl_family_rcv_msg_doit+0x233/0x340
[  445.951248][T20856]        genl_rcv_msg+0x614/0x7a0
[  445.956260][T20856]        netlink_rcv_skb+0x226/0x4a0
[  445.961534][T20856]        genl_rcv+0x28/0x40
[  445.966038][T20856]        netlink_unicast+0x7bb/0x940
[  445.971323][T20856]        netlink_sendmsg+0x813/0xb40
[  445.976615][T20856]        sock_sendmsg_nosec+0x13a/0x180
[  445.982158][T20856]        ____sys_sendmsg+0x54e/0x850
[  445.987436][T20856]        ___sys_sendmsg+0x2a5/0x360
[  445.992620][T20856]        __x64_sys_sendmsg+0x1b1/0x290
[  445.998099][T20856]        do_syscall_64+0x174/0x580
[  446.003208][T20856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.009636][T20856] 
[  446.009636][T20856] other info that might help us debug this:
[  446.009636][T20856] 
[  446.019857][T20856] Chain exists of:
[  446.019857][T20856]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58
[  446.019857][T20856] 
[  446.033595][T20856]  Possible unsafe locking scenario:
[  446.033595][T20856] 
[  446.041125][T20856]        CPU0                    CPU1
[  446.046479][T20856]        ----                    ----
[  446.051867][T20856]   lock(&q->q_usage_counter(io)#58);
[  446.057238][T20856]                                lock(fs_reclaim);
[  446.063735][T20856]                                lock(&q->q_usage_counter(io)#58);
[  446.071619][T20856]   lock(&q->elevator_lock);
[  446.076194][T20856] 
[  446.076194][T20856]  *** DEADLOCK ***
[  446.076194][T20856] 
[  446.084413][T20856] 6 locks held by syz.1.3712/20856:
[  446.089593][T20856]  #0: ffffffff90099b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.097850][T20856]  #1: ffffffff90099960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.108399][T20856]  #2: ffff888027e041c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  446.119810][T20856]  #3: ffff888027e040d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  446.130767][T20856]  #4: ffff88802752e6d0 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x194/0x480
[  446.141379][T20856]  #5: ffff88802752e708 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  446.152259][T20856] 
[  446.152259][T20856] stack backtrace:
[  446.158155][T20856] CPU: 1 UID: 0 PID: 20856 Comm: syz.1.3712 Not tainted syzkaller #0 PREEMPT(full) 
[  446.158173][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.158188][T20856] Call Trace:
[  446.158196][T20856]  <TASK>
[  446.158203][T20856]  dump_stack_lvl+0xe8/0x150
[  446.158226][T20856]  print_circular_bug+0x2e1/0x300
[  446.158246][T20856]  check_noncircular+0x12e/0x150
[  446.158266][T20856]  __lock_acquire+0x1520/0x2cf0
[  446.158288][T20856]  ? elevator_change+0x1af/0x480
[  446.158304][T20856]  lock_acquire+0x106/0x350
[  446.158319][T20856]  ? elevator_change+0x1af/0x480
[  446.158337][T20856]  __mutex_lock+0x19d/0x1550
[  446.158355][T20856]  ? elevator_change+0x1af/0x480
[  446.158369][T20856]  ? rcu_is_watching+0x15/0xb0
[  446.158388][T20856]  ? elevator_change+0x1af/0x480
[  446.158403][T20856]  ? __pfx___mutex_lock+0x10/0x10
[  446.158419][T20856]  ? enable_work+0x17f/0x230
[  446.158434][T20856]  ? lockdep_hardirqs_on+0x7a/0x110
[  446.158452][T20856]  ? __cancel_work_sync+0xf7/0x110
[  446.158466][T20856]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  446.158485][T20856]  elevator_change+0x1af/0x480
[  446.158504][T20856]  elevator_set_none+0xb5/0x140
[  446.158518][T20856]  ? __pfx_elevator_set_none+0x10/0x10
[  446.158543][T20856]  ? xa_load+0x1db/0x210
[  446.158556][T20856]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  446.158573][T20856]  ? kernfs_add_one+0x480/0x5e0
[  446.158592][T20856]  ? nbd_start_device+0x17d/0xb30
[  446.158606][T20856]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  446.158629][T20856]  ? sysfs_add_file_mode_ns+0x258/0x300
[  446.158647][T20856]  nbd_start_device+0x189/0xb30
[  446.158663][T20856]  ? device_create_file+0xf4/0x1b0
[  446.158677][T20856]  nbd_genl_connect+0x1597/0x1c10
[  446.158697][T20856]  ? __pfx_nbd_genl_connect+0x10/0x10
[  446.158715][T20856]  ? rcu_is_watching+0x15/0xb0
[  446.158731][T20856]  ? trace_kmalloc+0x2a/0xf0
[  446.158746][T20856]  ? __kmalloc_noprof+0x396/0x720
[  446.158760][T20856]  ? __nla_parse+0x40/0x60
[  446.158777][T20856]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  446.158790][T20856]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  446.158805][T20856]  genl_family_rcv_msg_doit+0x233/0x340
[  446.158819][T20856]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  446.158834][T20856]  ? __lock_acquire+0x683/0x2cf0
[  446.158851][T20856]  genl_rcv_msg+0x614/0x7a0
[  446.158864][T20856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.158875][T20856]  ? __pfx_nbd_genl_connect+0x10/0x10
[  446.158896][T20856]  netlink_rcv_skb+0x226/0x4a0
[  446.158911][T20856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.158923][T20856]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.158941][T20856]  ? down_read+0x2be/0x330
[  446.158953][T20856]  genl_rcv+0x28/0x40
[  446.158963][T20856]  netlink_unicast+0x7bb/0x940
[  446.158980][T20856]  netlink_sendmsg+0x813/0xb40
[  446.159003][T20856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.159019][T20856]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.159032][T20856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.159046][T20856]  sock_sendmsg_nosec+0x13a/0x180
[  446.159066][T20856]  ____sys_sendmsg+0x54e/0x850
[  446.159082][T20856]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.159098][T20856]  ? import_iovec+0x73/0xa0
[  446.159116][T20856]  ___sys_sendmsg+0x2a5/0x360
[  446.159129][T20856]  ? __lock_acquire+0x683/0x2cf0
[  446.159145][T20856]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.159160][T20856]  ? futex_wait+0x2a2/0x390
[  446.159181][T20856]  ? __fget_files+0x2a/0x420
[  446.159195][T20856]  ? __fget_files+0x3a2/0x420
[  446.159212][T20856]  __x64_sys_sendmsg+0x1b1/0x290
[  446.159227][T20856]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.159247][T20856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.159259][T20856]  do_syscall_64+0x174/0x580
[  446.159275][T20856]  ? trace_irq_disable+0x3b/0x140
[  446.159290][T20856]  ? clear_bhb_loop+0x70/0xc0
[  446.159303][T20856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.159316][T20856] RIP: 0033:0x7f8b78b9e0d9
[  446.159329][T20856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.159340][T20856] RSP: 002b:00007f8b799ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.159355][T20856] RAX: ffffffffffffffda RBX: 00007f8b78e25fa0 RCX: 00007f8b78b9e0d9
[  446.159364][T20856] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000009
[  446.159373][T20856] RBP: 00007f8b78c35024 R08: 0000000000000000 R09: 0000000000000000
[  446.159380][T20856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.159388][T20856] R13: 00007f8b78e26038 R14: 00007f8b78e25fa0 R15: 00007fff73015dd8
[  446.159402][T20856]  </TASK>
[  446.699855][T20877] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  446.705816][T20877] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  446.730396][T20877] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  446.736454][T20877] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  446.753680][ T5625] block nbd9: Receive control failed (result -32)
[  446.753680][ T5624] block nbd9: Receive control failed (result -32)
[  446.780307][T20881] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht'
[  446.809067][T20877] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  446.815270][T20877] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  446.858023][T20877] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  446.865318][T20877] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  446.905116][T20877] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  446.913182][T20877] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  452.829377][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog