last executing test programs:

9m43.912227694s ago: executing program 1 (id=224):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1, 0x2}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})

9m43.746510276s ago: executing program 1 (id=228):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4, 0x9, @local, 0x2}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040040)

9m42.913334509s ago: executing program 1 (id=230):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="1802444237a44aefc60d661836590000000000000002000000950000000000009bfb5bcc03512525d6fd365f62e760da1c555cb8154b5423454338ed8a3436eaea3a0d715e82f60725d47372b29e1935fa031539030ee7bea200000000000000000000e34e34cb52bf9b1fb037121fd8d2d5583144ca8e49fd91f8dd22cf546b0b6985998bc6f8ce5504d425746756af7d8ac6cbbbfc87a653a49d363d54450a113d2a9fc863b340de68b31e37213d525a746b2b7d0ca9641aeb8fda0bbdf0314a542c2abdc63279b7f545a8a6f830db612d6036ed9c4b0d0ec75fbcc9ba3ac0eeaac1c095ef9f203767d19b16bbeff955"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000200)={0x7f, 0x40000000, 0x3, {0x3, @sdr={0x30323953, 0x9}}, 0xfffff800})
write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [], 0xa, "b5a4be350e7611b133a163b4ab1b0400000000000000000000000000000080ca925f71fcd3da0ed66c23ef689b28ee5c370a4b0eae91c3f16ee47acd81e02bbef5d3e59a0c1408636e6fd52ba9d446590747008418fd7319b2d74459b026c32ff8293eb0f59fa7b69ee06054e4b756cd85e7cf4c3af63461d53f4c9c938bcba0af249f05e185a4e8275ff49723b94e129caded69015fb912ff9cb0cf7bae0c4e8dd11dab9a2704c69e02aa5abc5229c574e4a9f532a2da381fd22d31cac62152b18f94218226342229c100ea8864598b57f9a151c13712197987660444b31f76cdb07cbe9c6d9398bafa31ab6ef0efd9ec2793f5b908f9385add94bae3b792b066810cca101e16c8e78c00762a19696620dee95ffc752bdcf3e61c1246d8603b3b66aa27cdbebaf081e450070addca9a935c3bdb9da6e92dae4100000000b6083dac5757f973ba2bae282de6c4ec5364eded39df01c1ab246fe4442bf2e440bd4fda03784dcabab421b60149dfad398ada8b7e7aa797d8b40e4f129ba81e31c3cb96102377ecbfa573941988b1c590c26c9f9b7482358b79a4f303ed10261a58fb43544f3aa1dfe25b09baa59fc697d8a6c0dbc3673906f4c8fdae1576ff2e2ad665d8b63d21d2ada32d2c0499f2097db7ced5ca757378f5639923c4abc6e6342fb705c3254fc326199d2e02cf9a16f3a60d2902d7de84ab98dd1d5b4dc155dc29b5d2c630e5a8be30bb030245906416d3e3b28e64dbf5da056bf1ab65e69a8ffc7f1e1f83b4bbce6b559827c058045f6c8ecb219ff89ca8dfe10b0809d59f0195f117496ab2f842b2f45dd2de72a7b634796f70f8b994b8a7e78f6f3f185218ff330c6d0b6d5c6ffbba4629ec83d343670ac66677e467e9008e81a6ce5a04931c05ae90705c280899c7f7449c9c0a4148109b5f858e518180558140fd9ff9fb9a212c5612645b46236da0877d919838b936d952fb4f1d05c6dcdfce8b3823dbf536116db2653cbd94effb52fd2a4f6ba8ccf0900c13bf31e5cce98547cec11e4a34ff0ac18baec5fab835eb4a710c9e0162fad8ff2ac2239c793bb7c5663c649838557dc63c648f3dad40b92448492941330b2bbc99780119d1609596ddfcee6eea982f0a8f94c5a1d0093edd0b59878e8883f66a6525c708ebe3cce1a60eb0c4b2ef09fa4dcf50c994e9ae981d955bf4ddfb52ee9eb5f1cc8fdd128d83ba2009c2313f4d726b39857d141fe37f891fd2359d9bbe8e888a2220312fede911dbf949010d8a76ea251f53561ae41934cb7fb7f9b59a61d00ed03c0fd4c015781ace1ebed6f5236a3d1f9ea6229d8da87f5d28c216af1847a66ce82af628ac710422f298bd674d8d7cbdf742fe85b9877acefa15c38dbec3d8743cf8ade1e47c5ac32bc24dd07a650048eb570b566665a02cdbd8e2c7b3e4d5a6827fe4176f95cdcae07b8da6da00da07a0cf4d6e2e5120b3c5c53f05417194ba2ffe63fcfcc5dcbab4d6c55a329a"}, 0x43b)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802010000000000000000000000932018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})
userfaultfd(0x80001)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/129, 0x81}], 0x1)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00')
preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="8b97ee7dff4084293f63751caea3556b33a967f9f4cf568f960d9a7087676db008688ea95c5dd62221a4250fd1dc31353558f63e71915e5fd84085bf7b643b8d82a04bdb7e09a01083b3082d996002bac0b4133fb1a12049444a5168c2d9d5f1c5704b7213d4d667dc8c6bd6a7e5b9479946cdfcdac47fc01a9b120f3cd47cac232f633a71f2d85fd96fc2ba225075776b619d9ad934692ceecb3783ee90c0400fdec161dc3c2ce91b8643a7ed5298a56e2466e2a46a1cddf87b628f57adf1f7de51a650295fc9885c32b755782014d0122ff18ad823ffa2", 0xd8, 0xfffffffffffffffd)
syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r9, r9, r9}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x80000003, 0x0, 0xffffffff, 0x10}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

9m41.413293632s ago: executing program 1 (id=248):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x38, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0)

9m41.269313024s ago: executing program 1 (id=251):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$snapshot(r1, 0x0, 0x0)

9m41.128092026s ago: executing program 1 (id=253):
socket(0x32, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40c0080)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)

9m37.028820699s ago: executing program 0 (id=279):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe8, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xac, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xc272, 0x2, 0xb813, 0xff}}, @TCA_DEF_DATA={0x16, 0x3, '&\')!)+:.):\\))+\xbb\xe2)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x20000000, 0x437, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x20000000, 0x71d}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x17, 0x6, "d58bf499cc57967c3f34ab339255bf5fe1d3be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

9m36.93088526s ago: executing program 0 (id=280):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x8, 0x55, 0xffffffff}, 0x9c)

9m36.788236493s ago: executing program 0 (id=283):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0300"})
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0)

9m35.846167547s ago: executing program 0 (id=296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00')

9m35.736400068s ago: executing program 0 (id=297):
r0 = socket(0x11, 0xa, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008"], 0x50}}, 0x4000850)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

9m35.374529495s ago: executing program 0 (id=304):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
syz_emit_ethernet(0xfc3, &(0x7f0000001280)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x0, 0x6, "d7ee16", 0xf89, 0x4, 0x0, @private1, @loopback, {[], "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"}}}}}}, 0x0)

9m35.244103057s ago: executing program 32 (id=304):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
syz_emit_ethernet(0xfc3, &(0x7f0000001280)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x0, 0x6, "d7ee16", 0xf89, 0x4, 0x0, @private1, @loopback, {[], "40f7fa7531c21acb1e313e825c250910794ca1f117e8c47a70e1e75e07ec576797b7e8599e992d8fd821869de6be525bd29f110e8a886b6e6f28de5bf8fa840f0bb6af86d7e6b02d06a5ade7a754af10389ba78bbb0b425f268046eb8cc655140d94a8ba12acf79a32d57029e91903f5c66a07f40727a7c0f6e778e02a372cf82785435501968945b44256ea5e950b57f735de75d6a9b99acb9adcf24100621ec1357598080d35a798c28a897a937995b7bc01c0805211733808d1005a26b85e50326ba321000331e3cd96113675681ebf0bb0b53dbce100da9ef76a749900bf1151d152aa7f654ade36e06f2005865ad5400364e5c0426933ac7ffbaaad133c3acc881c796e1f23fc06c120dee0358d2c423e0b361b5928a24456c7cd023de01a133a5a04ca7fee946ad655b471747e6ddf0c105cea526adab6ead934e54418ec47fca35e8eb3681ddd69e6a2d9cc9f7e3c28744ea3a7f7cb5530bbb0a2392a1204f21c193f02fbd06ae7d4fc21649bca73ffdf0d24a444e0e1f6da135ddf7af8ddfa3746770df9897b05277061a2d1add99b5172ad1ae153033bc5cfbc4d82c3f76eb390cf9e9dfa8f7755a8bf500ca65960a6226b62ca5df7e665570e406802254950c9bb25dc2fdb6528d3ef159e95c89b3f1ca38f2dafb61826fefe67e984888a227c492fc25367bbc15737c6135f0ace38dbfa24de5dd80b4d068b84bea6f7f84283c12e11772f32d0922f451cbbe38253203e1aa9b77d10ed9e4be43def0b890c7672d27e4fc306f9f13d00a76818fbfbac61441d2039e9ebbb109f9cc1e88c02fdd8217c256f96dc8d334e6d3f67facb6ab61e119bb7e881ddffa60c9779b15937696fc5290ad78de0bab3b277b3f50904ddba73ddb8c8eec15488fb52b3cd9e793ab37c65677edc9866b9b1190aeb85bfb2e57c2268d6fd21f471ad875d5f723823da218701ebe3197fcc851e6a822abfd32ec51d417b041bfdd35da14f1473531a06959fce21cf7f5b0306d209195178707b1bc3a8bc905f00e73c24d81e9dd6a5e8447006a076bb0a565e1f63fe60cb35e4fb5d2f5afcc2b9558848d4a3d64511a1bca1e86185e17f203b7ba8b778959435671a49308df64b8d954e2687a3542370fd774d8e46630769a448a0c1c7c95872ad1c472d7b92f2fc12f9396aa57b11ac225301a809f1426a75ddc54c71c240425429a56a4089a170893ac884733a8ada1a175cd7c662138cd24fd584e8759091110a7fd1a58f1d9bcdc5b20ef9d484cc4edeb30d7c6035d2f6db5fc42a88cca58d335041b2c2dd7ea5f916ae4914731a035a8b4e78d7ed94efeab0d1ae15df1aa676b8bc9b8653aade8910879b69c2ceff2f051578257f999ed1a02e2197f75ee77696a8352d5ed5fce4cd4160c8856a0596c8cf2cf201d19516bf29914af1873c47accc7032098d1a558e178e2f6ad2de8ad48402bb12c5fce1a97bc542a8dbffb3874db99421e72360c5f88033ba7064427f72047c0be9235eea66a347e3511fb38f748d45cbf1ee2dd3c23d11f81ac614d70884b359055c1dc77246a09ff009fb5f4faf957501116cd508d033f151b9845b75fd6fcebe2b6dbc1ba4b254339297274a761147507cddd9e2fb5a480ee1d41178c2e390c403e6c0adba5b18a1ec88c79fc98d00d294de6761c102aa48cbfcc92ccfe6104bbe0cf3e118ff3284b5bb430d2c787dfa2b689b0a081884a543b04e459c56390521927f1a8b792336acb7f7f3d6ccae7bec529f3fa85c4a74c44ef573419be710ef07cf520012ae028c6d6cc6f02163af59f3763161b425120e3d3290e6effe8eab85d8b8d6615e2ff01f05d8a0008f70664bf61ccee0483d7bced457cc159828ba2d7a1670f1afd5340cfe10d10464480efc7c873d492f27c226530530979b2a11512b348e72f5f377f56ed3cb3d08e14e30c09eb757425b91f15ce4302eb5b17cb9244d9d6469586b03b5e96c48fd630c52f4606fc82252abe0256ead7e7beb991d9fa0ab53cdf52a28018d0ab4dfa3be3d516628cb073bf5ee31d0900bf875b0592bd8240144ff7170670ab570569a868691661ca3da4c9b129309703f05504900ed837f99a995afc381f3d4baf107cbd3a078ee0f4572145fc574540c9ea4564b16c9c77401d8a7148fa7351e1a8c0905b51966732db25c18bce59ddeb5529909c5244641cecb88c6f9ce16399add18bc0c742299305d5ef5347efe1f992d42077a18b4c63e2fb4117609852beb940c886edadff65bb56bfddc2a02d3d5fa5ecd250dd22ed06b6f6ff2c4383925b6809f68ba64f844d37e4c7a718fdd0304c2f7ac86e06033420f183f16785216d91241b2a58157d5ce9aeb75b965783221c1f7b998a7531a42053a54b3b3796f69186cdfdcb1a46d930a0231864063ba3cc086af9706c7bc1136553de066060d09e18561fb0c1553fe84cde56579842e810743a2351871d76ce3c35c091bb890812e23e3e9ddc8a88a69c13b44d6647ef5ed8c815bd407b132fadcfe8e0154df3283beadd8cb72bdccd570405e8e466ad899fce7ce1899f8e26d9f26e85e1bd9e0bb3413cd3ccbe6127bd60c96254f3ebb7097d698ee46cfdc1455e90b4aac9b8580e1462274ff3a027da985b7a56c3bda9bdcdb6eed8ef8e822d8c4cd4c65822fedd4fe87c1f741dea9a2ffd8b437c8d03b58583e1cc22735f384251a711e4e694fb9147b66289daf10e4700c2b107ad1068d582396312d0adb98fb46bdc9c0401d3e7ef6e1d77bdd685940844a4fa381ba44a16d4ea798e58979d6fcc44845086c812467ef49224d0293396d0f1bb889c306d3ff60756ebf0139b651ae77e83bd3fca311fe3ac3824c09310a8897a3299ecdc38f3caabed3b36b4e46f9b6073d333ff3a927dc42a7202bac8f9af9c98f8caf97d1da10712f3c3d7af6cfe4e0f05e2a630471f3e593f500a99727636b22e1a9b89367e66095d6fdc9e05017570a8f1110c5a733b8e33cdaca3d18e851f2d097ab0e9776d8e1170d51bad6bff845e051f541e21a405501debe62ab01b81c38b2f945c890c3caa5a27116114e14e08d47cd7bd84c20852a2802233a0a4c9171cad1c841a55852c186eef53717a587597467381af2e69808b7c3fe1a93c31e0d434b5125b143eb4c5b1e78bd7005232123fe0566937b163103ea65dac74d0800190805c7228b326642aab2bf25f5cbcb76ab5556364308ab77f21cc9e099a9328d944b65187cc9bda0bce583f700bc967ea97534aa3ec8d5e5f18faab3f2c8c3e2d6fa70e3ed79fc5e0b1396a703ab15eeaaa3e72d0ef5fd22a2f47afd66e73300607b75485fc957520ac54fb7e59a45c492955b0f71ca571141a045cf0c4596106ce5cc5966b2bf3b69cc91f71bd5b07e6f77805442ad52586bdf0041989241c81f0ddbdafdaef527c61c7d84e173514c803510afa23fa0b13996665009857864dfbbc1a72935db13334ccfd690cc73b8ed46c87ba8d6fb463e936173f1416334e355c612db0971cc840f639dc2b1f30cca0c496790ec8d4c33d2af8641417b79621ac88dc86e9b561d5c8429319cc115946e2e65d29b16d64ed6c33af7fb582499428783401ea1a7bdb0e68a21b6e8b1837523e0f6e523fd2507342679bb0037ecf81dcc8fc742abe2b5d8efbc5f49e84ac5439331f00d36cb1a2f4f31c7b1e9ed0b1955ed102eb374506c62393ae3d7125eb639caabd3885c925cf3e184670954cf401ae22535a6583a564d0c3f8489b994c10f0186de6ccb03c65b87a884474f4987f2837febcc4e3ac4e031f7bda4cc9100c06ef2af9fbfee80e9a7c31d09dfe71c7144783c6a9289aebd5b9996882987ee7a8b660fa5504c3520c861631ec684bca05dbfe34c0015535ab9d2925876c66f0768dce72f2e30111bb9fa63ec52939d0c31368fff624520c466ce8949f53a67e813f3979d795867d0bba36792ded51486b7932204cc86ed69c25170c05cb3346e1c48d665a5d843a9a92ff93302a92766cb42404176e3773a4a9adeff3d528b98e3c1ca2d11bd7d25f7bd7851ee12e8cec59732b7e88b40241afd3d5d3e43415d5e988721d03e31050c6cc7782378773303874c8f6de08a5daf7803117f88797ee2b80a273503ee4815d0225a832a77ae89fde5ea7f61abc9079c962feb377796e780a28ec1c9382ac864f71d2041d9608ac544ba640ea66584ed88af9f3bf68d3b9c8a7d0ad758bb02f1aa036df6e1542d4aa17871e24351f579dfd39547d8ff4eaf174f2c0056ebedfa9ab26651a06cb65d04ae4cacb5f38f0b47e3216242404bd1e7c895c8962a49de326904b7e1911dee06caea492ef79d2e5b54d8a651bc5cb3d960972efadeaa2586531523c610778d155a750875055a9c3bc4404c10b852598f74142569b87cc613401a05e054077f17e88995e6aec2b8d20cc01c78ba69db6e818dacc6371f7222d79fc6c7817cff3f45d1b6c852bcf51d4bee46596d1926857297a2070318b0b0ef099c5509452464ecdd0df2aaa75fb96d20c6bea89e9633b104aeb0dd90b986833a058c64a7163416df2d2c7265ac3c0a7cd77ba40c5d4ea14dc10188e9ebf7dc7fe055d9b27042e3b8602465fb877b64982e05e2db0bb76c7c373ecaf97ac12f1c1d395b7f397c668af0e187e2aa9f664367120f5f65fdc49ccc965db6ad1426cb3ed387b8873c79524486f1c4e0675cf1f3316cf72c9457171f69f659014c22d89546ae7b40ffda76ea89b3b13d7efd1a842b2eed5ebd448b86242f00be888e58dd5842eee158f2ba34ead087050f097a82edf3479e1c9140f065a151294bb1e1d4a32f4d8be03a087a15888990337f8bd434e4ca5265e41d15607181b52820f515ad24b05a68fb550fdd519df7afed42953539cb105275a95a33ea681fb1a77f08958340d14e1c3c45d3cbdbce16c4c77b62ebfc2e380454103339de2c245f82f30b7e2b58edbc82d81eb100edfc7765f85f3892bd9778e6a6a83a361de2ff8e10dd8fe0c0f537ce270145678fa9ad6693b420dc21c73d2fc21ba9ecdac8c0a81dc79cd5a42061d243311a4b3e5db462c2cb0e2443054751aaff88e36ee4d552d2485eb799a406395a705f7038d4e269b094945d938f2bdaccd576ae4bf0e44ebbf1e18cf10d09f0407ab43a47a2aaf19b1da414d5aaeeba515f33afb96f13c05c130ae24e6906da6ee803d0ad7d24583290ffe327ec77690359bfad0fe448a251e4ab71dfaddaed931abb0dbd7a696c06cdff7e40ce7d20bfc85a17b137caf223e93cb8e2f9db0a9009f5a33b2b71c3f8c3ff5fae53dbc8037df33efda5b68b8ffddeeb3c7409bb1d63ef2efb7812a6dc6124a5b1ca845f8adc3761b0dc0613bb02a55df6aa7485d9515099ef8b02c64cb97c251371fae67f0592ffed13e4b2f3f75b371037a66b5c34805529e4449823c1d3f923456d23d4cb1b06421bdc94b89b7e7f6626bda87610fa105ed27c0458b4236a6f06213e78256ada3167f0ffa20c13cedaf9191cbc54b7214eb2334c61ca504789b5a9d5879d30614f6e6de8c423d62c504ffc324042231417156007f2c80b3776a58026446541041dcf55b99ee10c40e2016262f2b70afd2c0cfecdce80d10a2f2338"}}}}}}, 0x0)

9m26.095908796s ago: executing program 33 (id=253):
socket(0x32, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40c0080)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)

25.204374285s ago: executing program 5 (id=3745):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)

14.020877055s ago: executing program 5 (id=3749):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006000600800a0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

13.67168272s ago: executing program 2 (id=3761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

13.254527817s ago: executing program 6 (id=3762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x8000004)

13.204650178s ago: executing program 5 (id=3763):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500000004000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00e4"], 0x44}}, 0x20008040)

13.193717638s ago: executing program 3 (id=3764):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x8, 0x1, {{0x4, 0x85, 0x1}, {0x4002, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)

13.108392759s ago: executing program 6 (id=3765):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000140)={0x23, 0x3, 0x1, 0x45}, 0x10)

13.03543426s ago: executing program 5 (id=3766):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xa4, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x91, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f2"]}]}, 0xa4}], 0x1}, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x4c830)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

12.784269494s ago: executing program 4 (id=3770):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600), 0x0)

12.694430465s ago: executing program 4 (id=3771):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

12.693345256s ago: executing program 4 (id=3772):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

12.228000343s ago: executing program 6 (id=3773):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80}]}}}]}, 0x58}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

12.189391034s ago: executing program 6 (id=3774):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.702359203s ago: executing program 2 (id=3775):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

1.648466393s ago: executing program 3 (id=3776):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500000004000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00e4"], 0x44}}, 0x20008040)

1.586904344s ago: executing program 5 (id=3777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

1.585606324s ago: executing program 2 (id=3778):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.504313626s ago: executing program 2 (id=3779):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd86744108354"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.493205816s ago: executing program 2 (id=3780):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

1.064163383s ago: executing program 4 (id=3781):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)

1.008316474s ago: executing program 3 (id=3782):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040014)

1.008079454s ago: executing program 4 (id=3783):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

965.116025ms ago: executing program 6 (id=3784):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80}]}}}]}, 0x58}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

947.142475ms ago: executing program 4 (id=3785):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

820.317517ms ago: executing program 6 (id=3786):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x8, 0x1, {{0x4, 0x85, 0x1}, {0x4002, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)

820.039617ms ago: executing program 5 (id=3787):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xa4, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x91, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f2"]}]}, 0xa4}], 0x1}, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4c830)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

609.66787ms ago: executing program 2 (id=3788):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40808)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x17c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2c00}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a3313bd55416542e1f15e200c9b84a566fcdbc86be79ef49da55d165e98c37e"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ced7b03c73db68d57126e6aac8f30d0f607483d725825e381ae2be540c32093"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffaa71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x17c}}, 0x41)

81.974498ms ago: executing program 3 (id=3789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c53"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

318.18µs ago: executing program 3 (id=3790):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=3791):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

kernel console output (not intermixed with test programs):

lave wlan1): Opening slave failed
[  303.692217][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.161018][ T9600] binder: 9599:9600 tried to acquire reference to desc 0, got 1 instead
[  305.180225][   T22] binder: release 9599:9600 transaction 19 out, still active
[  305.182328][   T22] binder: undelivered TRANSACTION_COMPLETE
[  305.183959][   T22] binder: undelivered TRANSACTION_COMPLETE
[  305.232937][ T4343] binder: undelivered transaction 18, process died.
[  305.234805][ T4343] binder: send failed reply for transaction 19, target dead
[  305.294191][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.724986][ T9664] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  309.292986][ T9712] netlink: 'syz.4.1796': attribute type 1 has an invalid length.
[  309.404989][ T9716] netlink: 'syz.2.1808': attribute type 1 has an invalid length.
[  309.806551][ T9734] ALSA: mixer_oss: invalid OSS volume ''
[  309.833867][ T9736] netlink: 'syz.3.1804': attribute type 33 has an invalid length.
[  309.836181][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1804'.
[  310.265912][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  310.270603][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  310.581019][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'.
[  310.799830][ T9757] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1813'.
[  311.999202][ T9777] binder: 9775:9777 tried to acquire reference to desc 0, got 1 instead
[  312.018004][   T24] binder: release 9775:9777 transaction 25 out, still active
[  312.025232][   T24] binder: undelivered TRANSACTION_COMPLETE
[  312.026781][   T24] binder: undelivered TRANSACTION_COMPLETE
[  312.059246][   T24] binder: undelivered transaction 24, process died.
[  312.066164][   T24] binder: send failed reply for transaction 25, target dead
[  312.198675][ T9787] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1824'.
[  313.586685][ T9811] binder: 9810:9811 tried to acquire reference to desc 0, got 1 instead
[  313.638307][ T4343] binder: release 9810:9811 transaction 31 out, still active
[  313.640478][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  313.642069][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  313.683638][ T4343] binder: undelivered transaction 30, process died.
[  313.685500][ T4343] binder: send failed reply for transaction 31, target dead
[  313.762267][ T9821] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1837'.
[  313.763292][ T9816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.790218][ T9816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.915072][ T9828] netlink: 'syz.2.1841': attribute type 17 has an invalid length.
[  315.100956][ T9852] binder: 9851:9852 tried to acquire reference to desc 0, got 1 instead
[  316.079031][ T9828] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.081655][ T9828] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.084139][ T9828] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.090394][ T9828] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.286973][ T9862] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1852'.
[  316.335312][ T9864] netlink: 'syz.6.1853': attribute type 1 has an invalid length.
[  317.355587][ T9878] binder: 9877:9878 tried to acquire reference to desc 0, got 1 instead
[  317.393517][ T4437] binder_debug: 5 callbacks suppressed
[  317.393528][ T4437] binder: undelivered TRANSACTION_COMPLETE
[  317.490097][ T4437] binder: undelivered transaction 42, process died.
[  317.548144][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  317.598572][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.620664][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.703143][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  317.719536][ T9893] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1865'.
[  317.724934][ T9897] netlink: 'syz.6.1864': attribute type 10 has an invalid length.
[  317.824717][ T9897] 8021q: adding VLAN 0 to HW filter on device team0
[  317.842790][ T9897] device team0 entered promiscuous mode
[  317.844684][ T9897] device team_slave_0 entered promiscuous mode
[  317.860591][ T9897] device team_slave_1 entered promiscuous mode
[  317.868880][ T9897] bond0: (slave team0): Enslaving as an active interface with an up link
[  318.921637][ T9929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1878'.
[  318.935659][ T9925] netlink: 'syz.5.1875': attribute type 1 has an invalid length.
[  318.942334][ T9928] binder: 9923:9928 tried to acquire reference to desc 0, got 1 instead
[  318.955244][ T4437] binder: undelivered TRANSACTION_COMPLETE
[  318.984821][ T4345] binder: undelivered transaction 47, process died.
[  319.345749][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1889'.
[  319.472883][ T9966] binder: 9962:9966 tried to acquire reference to desc 0, got 1 instead
[  320.143287][ T4345] binder: undelivered TRANSACTION_COMPLETE
[  320.203365][ T4437] binder: undelivered transaction 52, process died.
[  320.300027][ T9973] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  320.301910][ T9973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  320.305281][ T9973] vhci_hcd vhci_hcd.0: Device attached
[  320.318635][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'.
[  320.321331][ T9973] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11)
[  320.323231][ T9973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  320.325445][ T9973] vhci_hcd vhci_hcd.0: Device attached
[  320.328165][ T9973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.366482][ T9973] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15)
[  320.368361][ T9973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  320.377802][ T9973] vhci_hcd vhci_hcd.0: Device attached
[  320.381589][ T9979] netlink: 'syz.3.1895': attribute type 10 has an invalid length.
[  320.384584][ T9979] bond0: (slave wlan1): Opening slave failed
[  320.407018][ T9973] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17)
[  320.408900][ T9973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  320.411409][ T9973] vhci_hcd vhci_hcd.0: Device attached
[  320.413958][ T9973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.417848][ T9973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.423361][ T9994] netlink: 'syz.5.1900': attribute type 1 has an invalid length.
[  320.433021][ T9973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.458979][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'.
[  320.464309][ T9981] vhci_hcd: connection closed
[  320.464740][ T9974] vhci_hcd: connection closed
[  320.467367][ T9991] vhci_hcd: connection closed
[  320.468792][ T9984] vhci_hcd: connection closed
[  320.473000][ T4483] vhci_hcd: stop threads
[  320.475614][ T4483] vhci_hcd: release socket
[  320.480282][ T4483] vhci_hcd: disconnect device
[  320.502154][   T22] vhci_hcd: vhci_device speed not set
[  320.515271][ T4483] vhci_hcd: stop threads
[  320.518466][ T4483] vhci_hcd: release socket
[  320.541002][ T4483] vhci_hcd: disconnect device
[  320.545071][ T4483] vhci_hcd: stop threads
[  320.548582][ T4483] vhci_hcd: release socket
[  320.557027][ T4483] vhci_hcd: disconnect device
[  320.562873][ T4483] vhci_hcd: stop threads
[  320.566392][ T4483] vhci_hcd: release socket
[  320.568932][ T4483] vhci_hcd: disconnect device
[  320.570943][   T22] usb 14-1: new full-speed USB device number 2 using vhci_hcd
[  321.602221][T10016] binder: 10014:10016 tried to acquire reference to desc 0, got 1 instead
[  321.606243][ T4623] binder: release 10014:10016 transaction 57 out, still active
[  321.608333][ T4623] binder: undelivered TRANSACTION_COMPLETE
[  321.643942][T10023] fuse: Bad value for 'fd'
[  321.657238][ T4623] binder: send failed reply for transaction 57, target dead
[  321.777442][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'.
[  321.882436][T10040] netlink: 'syz.6.1920': attribute type 1 has an invalid length.
[  321.987053][T10050] binder: 10049:10050 tried to acquire reference to desc 0, got 1 instead
[  321.991640][ T4345] binder: release 10049:10050 transaction 62 out, still active
[  322.743286][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1928'.
[  322.888044][T10070] fuse: Bad value for 'fd'
[  322.920937][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1933'.
[  322.923499][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1933'.
[  322.937226][T10075] netlink: 'syz.3.1934': attribute type 1 has an invalid length.
[  323.083542][T10087] binder: 10085:10087 tried to acquire reference to desc 0, got 1 instead
[  323.087646][ T4343] binder_debug: 2 callbacks suppressed
[  323.087656][ T4343] binder: release 10085:10087 transaction 67 out, still active
[  323.096200][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  323.112204][ T4437] binder: send failed reply for transaction 67, target dead
[  324.194298][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1946'.
[  324.196833][T10109] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1946'.
[  324.235455][T10111] netlink: 'syz.6.1948': attribute type 1 has an invalid length.
[  324.334172][T10115] binder: BINDER_SET_CONTEXT_MGR already set
[  324.336120][T10115] binder: 10114:10115 ioctl 4018620d 20000040 returned -16
[  324.365374][T10115] binder: 10114:10115 got transaction to invalid handle, 1
[  324.367570][T10115] binder: 10115:10114 cannot find target node
[  324.369206][T10115] binder: 10114:10115 transaction async to 0:0 failed 70/29201/-22, size 0-0 line 3054
[  324.414917][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  324.628925][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1958'.
[  324.636331][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1958'.
[  324.661198][T10134] fuse: Bad value for 'fd'
[  325.585782][T10146] netlink: 'syz.5.1962': attribute type 1 has an invalid length.
[  325.644446][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.654578][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.700037][   T22] vhci_hcd: vhci_device speed not set
[  325.742785][T10147] device syzkaller0 entered promiscuous mode
[  326.034644][T10156] tipc: Cannot configure node identity twice
[  326.151491][T10160] binder: 10159:10160 got transaction to invalid handle, 1
[  326.156813][T10162] device bridge_slave_0 entered promiscuous mode
[  326.157982][T10160] binder: 10160:10159 cannot find target node
[  326.163823][T10160] binder: 10159:10160 transaction async to 0:0 failed 74/29201/-22, size 0-0 line 3054
[  326.175180][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  326.313600][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1969'.
[  326.320234][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1969'.
[  338.555624][T10192] netlink: 'syz.3.1976': attribute type 1 has an invalid length.
[  338.666790][T10208] tipc: Cannot configure node identity twice
[  338.696480][T10211] binder: 10210:10211 got transaction to invalid handle, 1
[  338.698564][T10211] binder: 10211:10210 cannot find target node
[  338.715923][T10211] binder: 10210:10211 transaction async to 0:0 failed 78/29201/-22, size 0-0 line 3054
[  338.727447][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  338.812738][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1982'.
[  338.826123][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1982'.
[  339.631206][T10231] netlink: 'syz.3.1989': attribute type 1 has an invalid length.
[  339.712438][T10233] netlink: 'syz.5.1988': attribute type 12 has an invalid length.
[  339.833044][T10250] binder: tried to use weak ref as strong ref
[  339.834891][T10250] binder: 10248:10250 Acquire 1 refcount change on invalid ref 0 ret -22
[  339.837926][T10250] binder: 10248:10250 got transaction to invalid handle, 1
[  339.840161][T10250] binder: 10250:10248 cannot find target node
[  339.842007][T10250] binder: 10248:10250 transaction async to 0:0 failed 81/29201/-22, size 0-0 line 3054
[  339.847628][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  339.860614][T10247] tipc: Cannot configure node identity twice
[  339.937917][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1997'.
[  339.940711][T10255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1997'.
[  339.985737][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'.
[  339.988218][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'.
[  339.995754][T10258] netlink: 'syz.3.1998': attribute type 12 has an invalid length.
[  340.956004][T10277] binder: tried to use weak ref as strong ref
[  340.957783][T10277] binder: 10276:10277 Acquire 1 refcount change on invalid ref 0 ret -22
[  340.979297][T10277] binder: 10276:10277 got transaction to invalid handle, 1
[  341.005312][T10277] binder: 10277:10276 cannot find target node
[  341.007161][T10277] binder: 10276:10277 transaction async to 0:0 failed 84/29201/-22, size 0-0 line 3054
[  341.046052][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  351.901566][T10285] netlink: 'syz.3.2009': attribute type 1 has an invalid length.
[  351.977107][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2011'.
[  351.990715][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2011'.
[  352.041517][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2012'.
[  352.067361][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2012'.
[  352.205169][T10318] binder: tried to use weak ref as strong ref
[  352.207055][T10318] binder: 10313:10318 Acquire 1 refcount change on invalid ref 0 ret -22
[  352.210227][T10318] binder: 10313:10318 got transaction to invalid handle, 1
[  352.212335][T10318] binder: 10318:10313 cannot find target node
[  352.213972][T10318] binder: 10313:10318 transaction async to 0:0 failed 87/29201/-22, size 0-0 line 3054
[  352.217990][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  353.108150][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.117348][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.225679][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.335521][T10331] netlink: 'syz.5.2022': attribute type 4 has an invalid length.
[  353.563577][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2027'.
[  353.566113][T10345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2027'.
[  353.566523][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.672817][T10348] netlink: 'syz.2.2028': attribute type 1 has an invalid length.
[  353.753761][T10350] fuse: Invalid rootmode
[  353.991573][T10357] binder: 10355:10357 tried to acquire reference to desc 0, got 1 instead
[  353.998243][T10357] binder_alloc: 10355: binder_alloc_buf, no vma
[  354.018260][T10357] binder: cannot allocate buffer: vma cleared, target dead or dying
[  354.018299][T10357] binder: 10355:10357 transaction async to 10355:0 failed 93/29189/-3, size 0-0 line 3239
[  354.032540][   T22] binder: undelivered TRANSACTION_ERROR: 29189
[  355.140453][ T4300] Bluetooth: hci5: command 0x0405 tx timeout
[  355.323408][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2038'.
[  355.326006][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2038'.
[  355.437167][T10380] netlink: 'syz.5.2039': attribute type 1 has an invalid length.
[  356.526740][T10392] binder: 10391:10392 tried to acquire reference to desc 0, got 1 instead
[  356.535503][T10392] binder_alloc: 10391: binder_alloc_buf, no vma
[  356.537366][T10392] binder: cannot allocate buffer: vma cleared, target dead or dying
[  356.537397][T10392] binder: 10391:10392 transaction async to 10391:0 failed 98/29189/-3, size 0-0 line 3239
[  356.569261][ T4345] binder: undelivered TRANSACTION_ERROR: 29189
[  356.723627][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.731838][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.949095][T10398] netlink: 'syz.4.2044': attribute type 4 has an invalid length.
[  357.768203][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2050'.
[  357.775855][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2050'.
[  357.778447][T10415] netlink: 'syz.6.2052': attribute type 1 has an invalid length.
[  357.903108][T10421] binder: 10418:10421 tried to acquire reference to desc 0, got 1 instead
[  357.972739][T10421] binder_alloc: 10418: binder_alloc_buf, no vma
[  357.974533][T10421] binder: cannot allocate buffer: vma cleared, target dead or dying
[  357.974567][T10421] binder: 10418:10421 transaction async to 10418:0 failed 103/29189/-3, size 0-0 line 3239
[  358.000253][ T4345] binder: undelivered TRANSACTION_ERROR: 29189
[  358.807583][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.812856][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.596639][T10442] netlink: 'syz.3.2063': attribute type 4 has an invalid length.
[  359.811809][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.835152][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.856205][T10454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.863906][T10454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.915474][T10449] fuse: Invalid rootmode
[  359.927513][T10460] netlink: 'syz.6.2067': attribute type 1 has an invalid length.
[  360.230575][T10469] binder: tried to use weak ref as strong ref
[  360.232435][T10469] binder: 10468:10469 Acquire 1 refcount change on invalid ref 0 ret -22
[  360.245340][T10469] binder: 10468:10469 got transaction to invalid handle, 1
[  360.247401][T10469] binder: 10469:10468 cannot find target node
[  360.249049][T10469] binder: 10468:10469 transaction async to 0:0 failed 107/29201/-22, size 0-0 line 3054
[  360.259416][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  362.932053][T10497] netlink: 'syz.6.2079': attribute type 1 has an invalid length.
[  363.100127][T10511] binder: tried to use weak ref as strong ref
[  363.104169][T10511] binder: 10510:10511 Acquire 1 refcount change on invalid ref 0 ret -22
[  363.107483][T10511] binder: 10510:10511 got transaction to invalid handle, 1
[  363.116539][T10511] binder: 10511:10510 cannot find target node
[  363.118601][T10511] binder: 10510:10511 transaction async to 0:0 failed 110/29201/-22, size 0-0 line 3054
[  363.123458][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  365.171324][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.173886][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.207381][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2093'.
[  365.290550][T10538] fuse: Invalid rootmode
[  365.328193][T10549] raw_sendmsg: syz.6.2094 forgot to set AF_INET. Fix it!
[  365.348079][T10552] netlink: 'syz.3.2095': attribute type 1 has an invalid length.
[  365.353231][T10551] binder: tried to use weak ref as strong ref
[  365.354905][T10551] binder: 10548:10551 Acquire 1 refcount change on invalid ref 0 ret -22
[  365.370707][T10551] binder: 10548:10551 got transaction to invalid handle, 1
[  365.373226][T10551] binder: 10551:10548 cannot find target node
[  365.374879][T10551] binder: 10548:10551 transaction async to 0:0 failed 114/29201/-22, size 0-0 line 3054
[  365.380408][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  366.826650][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2106'.
[  367.535812][T10585] binder: BINDER_SET_CONTEXT_MGR already set
[  367.537554][T10585] binder: 10584:10585 ioctl 4018620d 20000040 returned -16
[  367.571237][T10585] binder: 10584:10585 got transaction to invalid handle, 1
[  367.614084][T10585] binder: 10585:10584 cannot find target node
[  367.615836][T10585] binder: 10584:10585 transaction async to 0:0 failed 117/29201/-22, size 0-0 line 3054
[  367.633915][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  367.698676][T10593] netlink: 'syz.2.2110': attribute type 1 has an invalid length.
[  367.732866][T10597] netlink: 'syz.3.2111': attribute type 10 has an invalid length.
[  367.737363][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'.
[  367.778528][T10597] netlink: 'syz.3.2111': attribute type 10 has an invalid length.
[  367.781063][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'.
[  368.922779][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2118'.
[  368.958943][T10623] binder: BINDER_SET_CONTEXT_MGR already set
[  368.960716][T10623] binder: 10620:10623 ioctl 4018620d 20000040 returned -16
[  369.377591][T10623] binder: 10620:10623 got transaction to invalid handle, 1
[  369.521464][T10623] binder: 10623:10620 cannot find target node
[  369.647543][T10623] binder: 10620:10623 transaction async to 0:0 failed 120/29201/-22, size 0-0 line 3054
[  369.667836][T10628] binder: 10620:10628 got transaction to invalid handle, 1
[  369.678414][T10628] binder: 10628:10620 cannot find target node
[  369.697924][T10628] binder: 10620:10628 transaction call to 0:0 failed 121/29201/-22, size 0-0 line 3054
[  369.722702][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  369.724527][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  369.735033][T10636] netlink: 'syz.4.2124': attribute type 1 has an invalid length.
[  370.781001][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'.
[  371.732066][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  371.733941][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  371.897056][T10684] binder: BINDER_SET_CONTEXT_MGR already set
[  371.907903][T10684] binder: 10683:10684 ioctl 4018620d 20000040 returned -16
[  371.922017][T10684] binder: 10683:10684 got transaction to invalid handle, 1
[  371.934353][T10684] binder: 10684:10683 cannot find target node
[  371.939577][T10684] binder: 10683:10684 transaction async to 0:0 failed 124/29201/-22, size 0-0 line 3054
[  371.954865][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  372.895211][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'.
[  374.031746][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.070172][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.072796][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.075172][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.127064][T10718] binder: BINDER_SET_CONTEXT_MGR already set
[  374.144184][T10718] binder: 10717:10718 ioctl 4018620d 20000040 returned -16
[  374.149752][T10718] binder: 10717:10718 Acquire 1 refcount change on invalid ref 0 ret -22
[  374.155874][T10718] binder: 10717:10718 got transaction to invalid handle, 1
[  374.163789][T10718] binder: 10718:10717 cannot find target node
[  374.213981][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.230411][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.247014][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  374.250090][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[  376.441262][T10756] __nla_validate_parse: 46 callbacks suppressed
[  376.441276][T10756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2166'.
[  376.453487][T10757] binder: 10754:10757 got transaction to invalid handle, 1
[  376.455538][T10757] binder_debug: 2 callbacks suppressed
[  376.455547][T10757] binder: 10757:10754 cannot find target node
[  376.458696][T10757] binder: 10754:10757 transaction async to 0:0 failed 130/29201/-22, size 0-0 line 3054
[  376.484775][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  377.423307][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'.
[  378.608887][T10791] binder: 10790:10791 got transaction to invalid handle, 1
[  378.620080][T10791] binder: 10791:10790 cannot find target node
[  378.621828][T10791] binder: 10790:10791 transaction async to 0:0 failed 134/29201/-22, size 0-0 line 3054
[  378.651111][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  379.681454][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  380.926990][T10831] binder: BINDER_SET_CONTEXT_MGR already set
[  380.939040][T10831] binder: 10830:10831 ioctl 4018620d 20000040 returned -16
[  380.951144][T10831] binder: 10830:10831 got transaction to invalid handle, 1
[  380.953255][T10831] binder: 10831:10830 cannot find target node
[  380.954968][T10831] binder: 10830:10831 transaction async to 0:0 failed 136/29201/-22, size 0-0 line 3054
[  380.971208][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  382.501679][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2199'.
[  391.418809][T10833] device netdevsim0 entered promiscuous mode
[  391.420684][T10833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  391.510417][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'.
[  392.486770][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'.
[  392.489406][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2206'.
[  392.539436][T10869] random: crng reseeded on system resumption
[  392.594678][T10869] hibernate: Hibernate image not generated by this kernel!
[  392.600881][T10869] PM: hibernation: Image mismatch: architecture specific data
[  393.496264][T10880] binder: BINDER_SET_CONTEXT_MGR already set
[  393.512906][T10880] binder: 10879:10880 ioctl 4018620d 20000040 returned -16
[  393.543272][T10880] binder: 10879:10880 got transaction to invalid handle, 1
[  393.545321][T10880] binder: 10880:10879 cannot find target node
[  393.547090][T10880] binder: 10879:10880 transaction async to 0:0 failed 138/29201/-22, size 0-0 line 3054
[  393.598684][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  394.586179][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'.
[  394.599045][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2219'.
[  394.663127][T10899] random: crng reseeded on system resumption
[  394.699809][T10899] hibernate: Hibernate image not generated by this kernel!
[  394.710176][T10899] PM: hibernation: Image mismatch: architecture specific data
[  395.658221][T10912] binder: BINDER_SET_CONTEXT_MGR already set
[  395.666767][T10912] binder: 10911:10912 ioctl 4018620d 20000040 returned -16
[  395.677312][T10912] binder: 10911:10912 got transaction to invalid handle, 1
[  395.690764][T10912] binder: 10912:10911 cannot find target node
[  395.698088][T10912] binder: 10911:10912 transaction async to 0:0 failed 140/29201/-22, size 0-0 line 3054
[  395.734623][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  395.852665][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  395.855369][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2232'.
[  395.857941][T10922] netlink: 'syz.3.2232': attribute type 12 has an invalid length.
[  395.895198][T10924] binder: BINDER_SET_CONTEXT_MGR already set
[  395.897007][T10924] binder: 10923:10924 ioctl 4018620d 20000040 returned -16
[  395.905776][T10924] binder: 10923:10924 got transaction to invalid handle, 1
[  395.907905][T10924] binder: 10924:10923 cannot find target node
[  395.926097][T10929] random: crng reseeded on system resumption
[  395.972443][T10929] hibernate: Hibernate image not generated by this kernel!
[  395.974607][T10929] PM: hibernation: Image mismatch: architecture specific data
[  395.993016][T10924] binder: 10923:10924 transaction async to 0:0 failed 142/29201/-22, size 0-0 line 3054
[  396.023412][T10930] binder: 10923:10930 got transaction to invalid handle, 1
[  396.025444][T10930] binder: 10930:10923 cannot find target node
[  396.027091][T10930] binder: 10923:10930 transaction call to 0:0 failed 143/29201/-22, size 0-0 line 3054
[  396.972602][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2248'.
[  396.997384][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2248'.
[  397.006603][T10951] fuse: Bad value for 'fd'
[  397.011247][T10949] netlink: 'syz.6.2248': attribute type 12 has an invalid length.
[  398.026940][T10970] binder: 10969:10970 ioctl c0306201 0 returned -14
[  398.057628][T10970] binder: 10969:10970 got transaction to invalid handle, 1
[  398.163615][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'.
[  398.167389][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2253'.
[  398.174952][T10978] netlink: 'syz.5.2253': attribute type 12 has an invalid length.
[  398.265530][T10981] fuse: Bad value for 'fd'
[  399.236371][T11002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2261'.
[  399.354927][T11011] binder: 11010:11011 ioctl c0306201 0 returned -14
[  399.372890][T11011] binder: 11010:11011 got transaction to invalid handle, 1
[  399.383182][T11011] binder_debug: 5 callbacks suppressed
[  399.383193][T11011] binder: 11011:11010 cannot find target node
[  399.391076][T11011] binder: 11010:11011 transaction async to 0:0 failed 151/29201/-22, size 0-0 line 3054
[  399.404089][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'.
[  399.429113][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  399.436103][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2265'.
[  399.529131][T11021] fuse: Bad value for 'fd'
[  401.241740][T11036] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2273'.
[  401.592144][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'.
[  401.607669][T11055] binder: 11049:11055 ioctl c0306201 0 returned -14
[  401.612235][T11055] binder: 11049:11055 got transaction to invalid handle, 1
[  401.617707][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2280'.
[  401.624528][T11055] binder: 11055:11049 cannot find target node
[  401.626216][T11055] binder: 11049:11055 transaction async to 0:0 failed 155/29201/-22, size 0-0 line 3054
[  401.634908][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  402.575057][T11067] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2286'.
[  403.558007][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'.
[  403.579025][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2292'.
[  403.586728][T11087] binder: 11086:11087 got transaction to invalid handle, 1
[  403.588727][T11087] binder: 11087:11086 cannot find target node
[  403.608861][T11087] binder: 11086:11087 transaction async to 0:0 failed 159/29201/-22, size 0-0 line 3054
[  403.641180][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  403.766751][T11100] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2299'.
[  404.771448][T11128] binder: 11125:11128 got transaction to invalid handle, 1
[  404.773539][T11128] binder: 11128:11125 cannot find target node
[  404.782441][T11128] binder: 11125:11128 transaction async to 0:0 failed 163/29201/-22, size 0-0 line 3054
[  404.791755][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  404.877395][T11134] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2312'.
[  406.036821][T11162] binder: 11161:11162 got transaction to invalid handle, 1
[  406.038915][T11162] binder: 11162:11161 cannot find target node
[  406.041185][T11162] binder: 11161:11162 transaction async to 0:0 failed 167/29201/-22, size 0-0 line 3054
[  406.048763][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  406.073793][T11170] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2328'.
[  407.153736][T11201] binder: 11200:11201 got transaction to invalid handle, 1
[  407.156036][T11201] binder: 11201:11200 cannot find target node
[  407.157665][T11201] binder: 11200:11201 transaction async to 0:0 failed 171/29201/-22, size 0-0 line 3054
[  407.162130][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  407.957589][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2343'.
[  408.178486][T11234] binder: 11233:11234 got transaction to invalid handle, 1
[  408.181988][T11234] binder: 11234:11233 cannot find target node
[  408.985813][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'.
[  409.248650][T11271] binder: 11270:11271 got transaction to invalid handle, 1
[  409.380298][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'.
[  410.331569][T11310] binder: 11309:11310 got transaction to invalid handle, 1
[  410.333645][T11310] binder_debug: 5 callbacks suppressed
[  410.333653][T11310] binder: 11310:11309 cannot find target node
[  410.336706][T11310] binder: 11309:11310 transaction async to 0:0 failed 182/29201/-22, size 0-0 line 3054
[  410.341277][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  410.478764][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2392'.
[  410.677177][T11336] binder: tried to use weak ref as strong ref
[  410.678995][T11336] binder: 11335:11336 Acquire 1 refcount change on invalid ref 0 ret -22
[  410.704373][T11336] binder: 11335:11336 got transaction to invalid handle, 1
[  410.706468][T11336] binder: 11336:11335 cannot find target node
[  410.708131][T11336] binder: 11335:11336 transaction async to 0:0 failed 185/29201/-22, size 0-0 line 3054
[  410.735190][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  410.889347][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'.
[  411.880587][T11380] binder: tried to use weak ref as strong ref
[  411.882377][T11380] binder: 11379:11380 Acquire 1 refcount change on invalid ref 0 ret -22
[  411.894344][T11380] binder: 11379:11380 got transaction to invalid handle, 1
[  411.900608][T11380] binder: 11380:11379 cannot find target node
[  411.902307][T11380] binder: 11379:11380 transaction async to 0:0 failed 188/29201/-22, size 0-0 line 3054
[  411.917250][ T4437] binder: undelivered TRANSACTION_ERROR: 29201
[  412.024132][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2422'.
[  412.919666][T11411] binder: 11410:11411 ioctl 4018620d 0 returned -22
[  412.925654][T11411] binder: tried to use weak ref as strong ref
[  412.930907][T11411] binder: 11410:11411 Acquire 1 refcount change on invalid ref 0 ret -22
[  412.935769][T11411] binder: 11410:11411 got transaction to invalid handle, 1
[  412.944265][T11411] binder: 11411:11410 cannot find target node
[  413.123962][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2440'.
[  413.276467][T11439] binder: 11438:11439 ioctl 4018620d 0 returned -22
[  414.271287][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'.
[  414.364080][T11464] binder: 11463:11464 ioctl 4018620d 0 returned -22
[  414.654302][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2470'.
[  415.536109][T11509] binder: 11507:11509 ioctl c0306201 0 returned -14
[  415.542248][T11509] binder_user_error: 6 callbacks suppressed
[  415.542259][T11509] binder: 11507:11509 got transaction to invalid handle, 1
[  415.545839][T11509] binder_debug: 8 callbacks suppressed
[  415.545848][T11509] binder: 11509:11507 cannot find target node
[  415.574247][T11509] binder: 11507:11509 transaction async to 0:0 failed 201/29201/-22, size 0-0 line 3054
[  415.578096][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  415.617454][T11514] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2480'.
[  415.915739][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'.
[  416.683333][T11546] binder: 11545:11546 ioctl c0306201 0 returned -14
[  416.685725][T11546] binder: 11545:11546 got transaction to invalid handle, 1
[  416.687813][T11546] binder: 11546:11545 cannot find target node
[  416.689450][T11546] binder: 11545:11546 transaction async to 0:0 failed 205/29201/-22, size 0-0 line 3054
[  416.694057][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  416.714686][T11548] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2495'.
[  417.976486][T11586] binder: 11585:11586 ioctl c0306201 0 returned -14
[  417.992111][T11586] binder: 11585:11586 got transaction to invalid handle, 1
[  417.994166][T11586] binder: 11586:11585 cannot find target node
[  417.995857][T11586] binder: 11585:11586 transaction async to 0:0 failed 209/29201/-22, size 0-0 line 3054
[  418.013584][T11591] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2509'.
[  418.053330][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  418.142070][T11602] netlink: 'syz.3.2517': attribute type 1 has an invalid length.
[  418.148939][T11603] netlink: 'syz.6.2518': attribute type 4 has an invalid length.
[  418.176713][T11602] 8021q: adding VLAN 0 to HW filter on device bond6
[  418.231156][T11602] device veth3 entered promiscuous mode
[  418.255629][T11602] bond6: (slave veth3): Enslaving as a backup interface with a down link
[  418.267265][T11607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.295061][T11613] device syzkaller0 entered promiscuous mode
[  418.297507][T11613] tipc: Resetting bearer <eth:syzkaller0>
[  418.305964][T11606] tipc: Resetting bearer <eth:syzkaller0>
[  418.423598][T11619] xt_CT: No such helper "netbios-ns"
[  419.346195][T11634] binder: 11633:11634 got transaction to invalid handle, 1
[  419.348415][T11634] binder: 11634:11633 cannot find target node
[  419.406665][T11640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.796408][T11665] binder: 11664:11665 got transaction to invalid handle, 1
[  421.798665][T11665] binder_debug: 2 callbacks suppressed
[  421.798674][T11665] binder: 11665:11664 cannot find target node
[  421.803129][T11665] binder: 11664:11665 transaction async to 0:0 failed 217/29201/-22, size 0-0 line 3054
[  421.807353][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  429.867695][T11606] tipc: Disabling bearer <eth:syzkaller0>
[  429.875775][T11630] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2528'.
[  429.887978][T11676] netlink: 'syz.5.2546': attribute type 1 has an invalid length.
[  429.906585][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'.
[  429.988262][T11686] fuse: Unknown parameter 'default_p'
[  430.084921][T11697] binder: BINDER_SET_CONTEXT_MGR already set
[  430.086632][T11697] binder: 11694:11697 ioctl 4018620d 20000040 returned -16
[  430.089249][T11697] binder: 11694:11697 got transaction to invalid handle, 1
[  430.092639][T11697] binder: 11697:11694 cannot find target node
[  430.094334][T11697] binder: 11694:11697 transaction async to 0:0 failed 220/29201/-22, size 0-0 line 3054
[  430.098251][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  430.170583][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2556'.
[  430.283231][T11712] netdevsim netdevsim6: Direct firmware load for /.€ failed with error -2
[  430.285822][T11712] netdevsim netdevsim6: Falling back to sysfs fallback for: /.€
[  430.309793][T11716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2560'.
[  430.338747][T11718] fuse: Unknown parameter 'default_p'
[  430.431839][T11724] binder: 11723:11724 got transaction to invalid handle, 1
[  430.434121][T11724] binder: 11724:11723 cannot find target node
[  430.436015][T11724] binder: 11723:11724 transaction async to 0:0 failed 224/29201/-22, size 0-0 line 3054
[  430.442092][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  430.555267][T11734] binder: 11733:11734 got transaction to invalid handle, 1
[  430.557465][T11734] binder: 11734:11733 cannot find target node
[  430.559276][T11734] binder: 11733:11734 transaction async to 0:0 failed 228/29201/-22, size 0-0 line 3054
[  430.565186][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  430.664805][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'.
[  430.680167][T11741] device bond7 entered promiscuous mode
[  430.683711][T11741] 8021q: adding VLAN 0 to HW filter on device bond7
[  430.707351][T11741] 8021q: adding VLAN 0 to HW filter on device bond7
[  430.709555][T11741] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  430.717633][T11741] bond7: (slave wireguard0): Error -95 calling set_mac_address
[  430.728088][T11740] netlink: 'syz.4.2572': attribute type 13 has an invalid length.
[  430.734214][T11740] netlink: 'syz.4.2572': attribute type 17 has an invalid length.
[  430.741569][T11740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  430.785198][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'.
[  430.790349][T11745] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  430.865340][T11747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2574'.
[  430.949536][T11753] fuse: Unknown parameter 'default_p'
[  431.176257][T11764] binder: 11763:11764 got transaction to invalid handle, 1
[  431.180977][T11764] binder: 11764:11763 cannot find target node
[  431.285555][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'.
[  431.295090][T11777] fuse: Unknown parameter 'default_permis'
[  431.336321][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2588'.
[  431.338780][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2588'.
[  431.549576][T11795] binder: 11793:11795 tried to acquire reference to desc 0, got 1 instead
[  431.566569][T11795] binder: 11793:11795 ioctl c0306201 0 returned -14
[  431.682968][T11803] fuse: Unknown parameter 'default_permis'
[  432.002481][T11824] binder: 11822:11824 tried to acquire reference to desc 0, got 1 instead
[  432.005636][T11824] binder: 11822:11824 ioctl c0306201 0 returned -14
[  432.106142][T11831] fuse: Unknown parameter 'default_permis'
[  432.209110][T11838] device vlan2 entered promiscuous mode
[  432.215336][T11844] xt_hashlimit: size too large, truncated to 1048576
[  432.227392][T11838] device bridge0 entered promiscuous mode
[  432.359361][T11851] binder: 11849:11851 tried to acquire reference to desc 0, got 1 instead
[  432.364233][T11851] binder: 11849:11851 ioctl c0306201 0 returned -14
[  432.629004][T11867] fuse: Unknown parameter 'default_permissio'
[  432.794091][T11874] netlink: 'syz.2.2630': attribute type 10 has an invalid length.
[  432.797051][T11874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.804870][T11874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.807518][T11874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.813840][T11874] team0: Port device geneve0 added
[  432.895420][T11871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.934165][T11879] binder: 11877:11879 tried to acquire reference to desc 0, got 1 instead
[  433.026693][T11871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.127071][T11871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.140730][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  433.142618][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  433.254960][T11893] fuse: Unknown parameter 'default_permissio'
[  433.359325][T11871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.381173][T11871] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.404606][T11871] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.437549][T11871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.462091][T11902] binder: 11901:11902 tried to acquire reference to desc 0, got 1 instead
[  433.812540][T11921] fuse: Unknown parameter 'default_permissio'
[  433.933242][T11930] binder: 11929:11930 tried to acquire reference to desc 0, got 1 instead
[  434.508128][T11956] fuse: Unknown parameter 'default_permission'
[  435.097854][T11992] fuse: Unknown parameter 'default_permission'
[  435.105247][T11994] __nla_validate_parse: 16 callbacks suppressed
[  435.105258][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2684'.
[  435.183614][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  435.186156][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'.
[  435.432686][T12010] binder_user_error: 2 callbacks suppressed
[  435.432698][T12010] binder: 12008:12010 tried to acquire reference to desc 0, got 1 instead
[  435.446352][   T22] binder_debug: 26 callbacks suppressed
[  435.446365][   T22] binder: release 12008:12010 transaction 277 out, still active
[  435.451268][   T22] binder: undelivered TRANSACTION_COMPLETE
[  435.471740][   T22] binder: send failed reply for transaction 277, target dead
[  435.675245][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'.
[  435.696220][T12026] fuse: Unknown parameter 'default_permission'
[  435.802834][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2697'.
[  435.830019][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2697'.
[  436.042191][T12045] binder: 12043:12045 tried to acquire reference to desc 0, got 1 instead
[  436.045335][T12045] binder: 12043:12045 ioctl c0306201 0 returned -14
[  436.054602][  T111] binder: undelivered TRANSACTION_COMPLETE
[  436.087946][  T111] binder: undelivered transaction 282, process died.
[  436.187952][T12052] 8021q: VLANs not supported on ip_vti0
[  436.240212][T12056] fuse: Bad value for 'group_id'
[  436.356457][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'.
[  436.358955][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'.
[  436.494084][T12072] binder: 12071:12072 tried to acquire reference to desc 0, got 1 instead
[  436.497312][T12072] binder: 12071:12072 ioctl c0306201 0 returned -14
[  436.505296][ T4345] binder: undelivered TRANSACTION_COMPLETE
[  436.541989][ T4345] binder: undelivered transaction 287, process died.
[  436.605255][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'.
[  436.688535][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2720'.
[  436.724271][T12084] fuse: Bad value for 'group_id'
[  436.770102][T12086] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  436.795657][T12086] 8021q: adding VLAN 0 to HW filter on device bond9
[  436.842094][T12086] 8021q: adding VLAN 0 to HW filter on device bond9
[  436.844203][T12086] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  436.848048][T12086] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  437.245269][T12107] binder: 12106:12107 tried to acquire reference to desc 0, got 1 instead
[  437.274979][T12107] binder: 12106:12107 ioctl c0306201 0 returned -14
[  437.279830][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  437.313697][ T4343] binder: undelivered transaction 292, process died.
[  437.347286][T12115] device pim6reg1 entered promiscuous mode
[  437.411200][T12120] fuse: Bad value for 'group_id'
[  437.796503][T12139] binder: 12138:12139 tried to acquire reference to desc 0, got 1 instead
[  437.805277][  T111] binder: undelivered TRANSACTION_COMPLETE
[  438.404510][T12169] binder: 12166:12169 tried to acquire reference to desc 0, got 1 instead
[  438.680427][T12184] sctp: [Deprecated]: syz.4.2763 (pid 12184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.680427][T12184] Use struct sctp_sack_info instead
[  439.912039][T12270] binder: 12265:12270 tried to acquire reference to desc 0, got 1 instead
[  451.348756][T12280] __nla_validate_parse: 9 callbacks suppressed
[  451.348769][T12280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2779'.
[  451.446858][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'.
[  451.511149][T12292] tipc: Cannot configure node identity twice
[  451.613507][T12301] binder: 12299:12301 tried to acquire reference to desc 0, got 1 instead
[  451.631242][ T4437] binder_debug: 5 callbacks suppressed
[  451.631253][ T4437] binder: undelivered TRANSACTION_COMPLETE
[  451.647848][ T4437] binder: undelivered transaction 312, process died.
[  452.480195][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'.
[  452.547507][T12336] xt_hashlimit: size too large, truncated to 1048576
[  463.095322][T12344] binder: 12343:12344 tried to acquire reference to desc 0, got 1 instead
[  463.109967][ T4437] binder: undelivered TRANSACTION_COMPLETE
[  463.113205][ T4437] binder: undelivered transaction 317, process died.
[  463.138669][T12330] tipc: Cannot configure node identity twice
[  463.151012][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'.
[  474.650793][T12381] netlink: 'syz.4.2816': attribute type 1 has an invalid length.
[  474.715513][T12392] binder: 12390:12392 tried to acquire reference to desc 0, got 1 instead
[  474.724862][   T22] binder: undelivered TRANSACTION_COMPLETE
[  474.764295][   T22] binder: undelivered transaction 322, process died.
[  474.796666][T12401] fuse: Unknown parameter 'grou00000000000000000000'
[  474.894852][T12407] xt_hashlimit: size too large, truncated to 1048576
[  475.041136][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'.
[  475.720295][T12420] netlink: 'syz.3.2829': attribute type 1 has an invalid length.
[  475.738005][T12420] 8021q: adding VLAN 0 to HW filter on device bond9
[  475.745623][T12431] device ip6erspan0 entered promiscuous mode
[  475.752971][T12431] bond9: (slave ip6erspan0): making interface the new active one
[  475.761562][T12431] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link
[  475.764071][T12425] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2828'.
[  475.767917][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  476.157963][T12452] fuse: Unknown parameter 'grou00000000000000000000'
[  476.255532][T12457] binder: 12456:12457 tried to acquire reference to desc 0, got 1 instead
[  476.259518][  T111] binder: release 12456:12457 transaction 328 out, still active
[  476.262950][  T111] binder: undelivered TRANSACTION_COMPLETE
[  476.264711][  T111] binder: undelivered TRANSACTION_COMPLETE
[  476.279574][  T111] binder: undelivered transaction 327, process died.
[  476.281830][  T111] binder: send failed reply for transaction 328, target dead
[  487.025931][T12443] netlink: 'syz.3.2834': attribute type 1 has an invalid length.
[  487.146783][T12484] fuse: Unknown parameter 'grou00000000000000000000'
[  487.202030][T12488] binder: 12486:12488 tried to acquire reference to desc 0, got 1 instead
[  487.224716][ T4343] binder: release 12486:12488 transaction 334 out, still active
[  487.226909][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  487.228642][ T4343] binder: undelivered TRANSACTION_COMPLETE
[  487.269736][ T4343] binder: undelivered transaction 333, process died.
[  487.275730][ T4343] binder: send failed reply for transaction 334, target dead
[  487.393689][T12501] device batadv_slave_0 left promiscuous mode
[  487.583845][T12520] fuse: Unknown parameter 'group_i00000000000000000000'
[  487.614760][T12523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2864'.
[  488.017351][ T4300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  488.030742][ T4300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  488.033700][ T4300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  488.037290][T12539] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  488.044927][T12539] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  488.047152][T12539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  490.100055][T12539] Bluetooth: hci6: command 0x0409 tx timeout
[  492.180004][T12539] Bluetooth: hci6: command 0x041b tx timeout
[  494.260014][T12539] Bluetooth: hci6: command 0x040f tx timeout
[  494.581657][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  494.583400][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  496.340002][T12539] Bluetooth: hci6: command 0x0419 tx timeout
[  498.998111][T12560] fuse: Unknown parameter 'group_i00000000000000000000'
[  499.039562][T12557] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2876'.
[  499.079530][ T4405] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.091299][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'.
[  499.093790][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'.
[  499.158229][ T4405] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.204278][T12568] netlink: 'syz.6.2880': attribute type 1 has an invalid length.
[  499.236055][T12538] chnl_net:caif_netlink_parms(): no params data found
[  499.254725][ T4405] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.391195][ T4405] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.452562][T12538] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.456108][T12538] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.470857][T12538] device bridge_slave_0 entered promiscuous mode
[  499.474266][T12538] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.476305][T12538] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.478882][T12538] device bridge_slave_1 entered promiscuous mode
[  499.507403][T12538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.518949][T12538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.665934][T12538] team0: Port device team_slave_0 added
[  499.669333][T12538] team0: Port device team_slave_1 added
[  499.738497][T12538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.749573][T12538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.800095][T12538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.803725][ T4405] tipc: Left network mode
[  499.808890][T12538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.819983][T12538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.826939][T12538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.961781][T12538] device hsr_slave_0 entered promiscuous mode
[  499.979706][T12607] fuse: Unknown parameter 'group_i00000000000000000000'
[  499.990363][T12538] device hsr_slave_1 entered promiscuous mode
[  500.020496][T12538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  500.022635][T12538] Cannot create hsr debugfs directory
[  500.161938][T12614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2890'.
[  511.628589][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'.
[  511.631408][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'.
[  511.706586][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.709584][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.720340][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.723259][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.816473][T12644] fuse: Unknown parameter 'group_id00000000000000000000'
[  512.032826][T12653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2900'.
[  512.331161][ T4405] bond1: (slave gretap1): Releasing active interface
[  512.885360][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'.
[  512.888433][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'.
[  512.917144][T12538] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  513.088744][T12538] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  513.112285][T12538] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  513.138036][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2912'.
[  513.204396][T12538] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  513.326687][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2913'.
[  513.329446][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'.
[  513.408635][ T4405] device hsr_slave_0 left promiscuous mode
[  513.441443][ T4405] device hsr_slave_1 left promiscuous mode
[  514.394731][ T4405] bond9 (unregistering): Released all slaves
[  514.401646][ T4405] bond8 (unregistering): Released all slaves
[  514.408009][ T4405] bond7 (unregistering): Released all slaves
[  514.414567][ T4405] bond6 (unregistering): Released all slaves
[  514.421056][ T4405] bond5 (unregistering): Released all slaves
[  514.427397][ T4405] bond4 (unregistering): Released all slaves
[  514.435305][ T4405] bond3 (unregistering): Released all slaves
[  514.442257][ T4405] bond2 (unregistering): Released all slaves
[  514.449651][ T4405] bond1 (unregistering): Released all slaves
[  514.533814][ T4405] team0 (unregistering): Port device geneve0 removed
[  519.013837][ T4405] bond0 (unregistering): Released all slaves
[  519.264728][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'.
[  519.447419][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'.
[  519.450058][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'.
[  519.568848][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2924'.
[  519.601135][T12752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2925'.
[  519.680001][T12538] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.713553][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  519.716202][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  519.751988][T12538] 8021q: adding VLAN 0 to HW filter on device team0
[  519.795214][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  519.798725][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  519.808168][T12255] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.810188][T12255] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.822599][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  519.826645][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  519.832399][T12255] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.834395][T12255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.836773][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  519.885271][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  519.891316][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  519.899279][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  519.911212][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  519.915675][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  519.918636][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  519.927573][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  519.931756][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  519.934261][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  519.955265][T12538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  519.964379][T12538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  520.090278][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  520.093114][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  520.496402][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  520.498684][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  520.512538][T12538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.563734][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  520.566666][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  520.594179][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  520.596902][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  520.599796][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  520.611946][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  520.616960][T12538] device veth0_vlan entered promiscuous mode
[  520.623184][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'.
[  520.629509][T12538] device veth1_vlan entered promiscuous mode
[  520.668433][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  520.674611][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  520.677210][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  520.703021][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  520.732673][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2937'.
[  520.735030][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2937'.
[  520.755297][T12538] device veth0_macvtap entered promiscuous mode
[  520.759317][T12538] device veth1_macvtap entered promiscuous mode
[  520.776856][T12813] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2939'.
[  520.803706][T12538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.823122][T12538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.829996][T12538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.836767][T12538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.845493][T12538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.861325][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  520.863984][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  520.866532][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  520.883327][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  520.906216][T12538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.909117][T12538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.912306][T12538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.915297][T12538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.918933][T12538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.928034][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  520.941752][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  520.961824][T12538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.964282][T12538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.966556][T12538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.969679][T12538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.119235][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.122194][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.126572][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  521.155319][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.158697][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.165812][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.234378][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'.
[  521.695487][T12539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  521.699566][T12539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  521.704932][T12539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  521.710988][T12539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  521.714182][T12539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  521.716584][T12539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  522.315840][T12858] chnl_net:caif_netlink_parms(): no params data found
[  522.495842][T12858] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.497894][T12858] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.501293][T12858] device bridge_slave_0 entered promiscuous mode
[  522.525458][T12858] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.527654][T12858] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.540881][T12858] device bridge_slave_1 entered promiscuous mode
[  522.733328][T12858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.737806][T12858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.798318][T12858] team0: Port device team_slave_0 added
[  522.862106][T12858] team0: Port device team_slave_1 added
[  522.896280][T12858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.898242][T12858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.915001][T12858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.941152][T12858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.943109][T12858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.972156][T12858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.062267][T12858] device hsr_slave_0 entered promiscuous mode
[  523.090309][T12858] device hsr_slave_1 entered promiscuous mode
[  523.130006][T12858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.133287][T12858] Cannot create hsr debugfs directory
[  523.464154][T12954] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  523.638298][T12968] netlink: 'syz.3.2999': attribute type 4 has an invalid length.
[  523.648988][T12968] netlink: 'syz.3.2999': attribute type 4 has an invalid length.
[  523.790129][T12539] Bluetooth: hci3: command 0x0409 tx timeout
[  524.611130][ T4405] bond1: (slave gretap1): Releasing active interface
[  524.678467][T13019] __nla_validate_parse: 14 callbacks suppressed
[  524.678489][T13019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3014'.
[  524.705260][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'.
[  524.707896][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3017'.
[  524.938404][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'.
[  524.953843][T12858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  525.169480][T12858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  525.221720][T12858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  525.440977][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3027'.
[  525.463764][T12858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  525.574976][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3028'.
[  525.577575][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3028'.
[  525.669291][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3029'.
[  525.860341][T12539] Bluetooth: hci3: command 0x041b tx timeout
[  525.891274][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'.
[  526.035246][ T4405] device hsr_slave_0 left promiscuous mode
[  526.081677][ T4405] device hsr_slave_1 left promiscuous mode
[  526.151210][ T4405] device bridge_slave_1 left promiscuous mode
[  526.154249][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.210662][ T4405] bond6 (unregistering): Released all slaves
[  526.217165][ T4405] bond5 (unregistering): Released all slaves
[  526.230278][ T4405] bond4 (unregistering): Released all slaves
[  526.236758][ T4405] bond3 (unregistering): Released all slaves
[  526.248357][ T4405] bond2 (unregistering): Released all slaves
[  526.255852][ T4405] bond1 (unregistering): Released all slaves
[  526.971999][ T4405] bond0 (unregistering): Released all slaves
[  527.950052][T12539] Bluetooth: hci3: command 0x040f tx timeout
[  528.703619][ T4405] team0 (unregistering): Port device team_slave_1 removed
[  528.872032][ T4405] team0 (unregistering): Port device team_slave_0 removed
[  530.020074][ T4308] Bluetooth: hci3: command 0x0419 tx timeout
[  530.937475][T12858] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.949349][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'.
[  530.952264][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  530.955616][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  530.964709][T12858] 8021q: adding VLAN 0 to HW filter on device team0
[  530.980401][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  530.983121][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  530.985689][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.987629][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.025162][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  531.034536][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  531.043223][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  531.065352][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.067290][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.070959][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  531.102032][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  531.105001][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  531.119383][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  531.122275][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  531.125147][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  531.127953][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  531.131710][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3041'.
[  531.136972][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3042'.
[  531.148142][T12858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  531.152156][T12858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  531.156886][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  531.160409][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  531.163622][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  531.166396][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  531.179013][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  531.460561][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  531.469400][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  531.499316][T12858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.685577][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3053'.
[  531.740227][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3054'.
[  531.980563][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  531.983255][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  532.025922][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  532.028796][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  532.031681][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'.
[  532.054114][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  532.056647][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  532.068003][T12858] device veth0_vlan entered promiscuous mode
[  532.093970][T12858] device veth1_vlan entered promiscuous mode
[  532.180959][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  532.183611][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  532.186137][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  532.196437][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  532.220138][T12858] device veth0_macvtap entered promiscuous mode
[  532.232603][T12858] device veth1_macvtap entered promiscuous mode
[  532.267718][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.291947][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.294658][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.297937][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.312202][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.315013][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.348007][T12858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.358594][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  532.364450][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  532.366968][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  532.369536][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  532.394195][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3064'.
[  532.398723][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.412983][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.415752][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.418598][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.448427][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.465967][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.504245][T12858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.508670][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  532.512780][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  532.524176][T12858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.526628][T12858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.528912][T12858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.543001][T12858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.556668][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3067'.
[  532.774294][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'.
[  532.799286][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'.
[  532.877628][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.880500][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.923782][ T7444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.926047][ T7444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.944136][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  532.946736][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  534.803993][T13317] xt_hashlimit: size too large, truncated to 1048576
[  535.653856][ T4308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  535.660456][ T4308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  535.664600][ T4308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  535.667203][ T4308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  535.669599][ T4308] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  535.671985][ T4308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  535.802163][T13358] device ip6erspan0 entered promiscuous mode
[  536.104067][T13352] chnl_net:caif_netlink_parms(): no params data found
[  536.144754][T13373] __nla_validate_parse: 8 callbacks suppressed
[  536.144776][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'.
[  536.190101][T13352] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.200180][T13352] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.202747][T13352] device bridge_slave_0 entered promiscuous mode
[  536.223893][T13352] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.230482][T13352] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.241485][T13352] device bridge_slave_1 entered promiscuous mode
[  536.296015][T13352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.299026][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'.
[  536.326377][T13352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.386125][T13352] team0: Port device team_slave_0 added
[  536.408398][T13352] team0: Port device team_slave_1 added
[  536.443666][T13352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.445624][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.469794][T13352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.560555][T13352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.562582][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.569420][T13352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.587039][T13390] device ip6erspan0 entered promiscuous mode
[  536.662633][T13352] device hsr_slave_0 entered promiscuous mode
[  536.723424][T13352] device hsr_slave_1 entered promiscuous mode
[  536.749985][T13352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.752117][T13352] Cannot create hsr debugfs directory
[  537.153184][T13405] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3151'.
[  537.236005][ T4405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.275607][T13409] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3152'.
[  537.362620][ T4405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.391259][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'.
[  537.472635][ T4405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.611707][ T4405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.699973][T12539] Bluetooth: hci4: command 0x0409 tx timeout
[  537.898103][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3161'.
[  538.103908][ T4405] tipc: Left network mode
[  538.105775][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3163'.
[  538.422045][ T4405] bond9: (slave ip6erspan0): Releasing active interface
[  539.212176][ T4405] bond1: (slave gretap1): Releasing active interface
[  539.258233][T13486] netlink: 'syz.4.3174': attribute type 1 has an invalid length.
[  539.377098][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3175'.
[  539.468037][T13352] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  539.502805][T13352] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  539.523804][T13498] netlink: 'syz.5.3177': attribute type 1 has an invalid length.
[  539.570391][T13498] 8021q: adding VLAN 0 to HW filter on device bond9
[  539.776894][T13352] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  539.779933][T12539] Bluetooth: hci4: command 0x041b tx timeout
[  539.812202][T13352] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  540.400593][ T4405] device hsr_slave_0 left promiscuous mode
[  540.461952][ T4405] device hsr_slave_1 left promiscuous mode
[  540.560069][ T4405] device bridge_slave_1 left promiscuous mode
[  540.561920][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.750258][ T4405] device veth1_macvtap left promiscuous mode
[  540.752031][ T4405] device veth0_macvtap left promiscuous mode
[  540.754806][ T4405] device veth1_vlan left promiscuous mode
[  541.774672][ T4405] bond9 (unregistering): Released all slaves
[  541.785052][ T4405] bond8 (unregistering): Released all slaves
[  541.859957][T12539] Bluetooth: hci4: command 0x040f tx timeout
[  542.452553][ T4405] bond7 (unregistering): Released all slaves
[  542.541674][ T4405] bond6 (unregistering): (slave veth3): Releasing backup interface
[  543.274501][ T4405] bond6 (unregistering): Released all slaves
[  543.281173][ T4405] bond5 (unregistering): Released all slaves
[  543.287676][ T4405] bond4 (unregistering): Released all slaves
[  543.294839][ T4405] bond3 (unregistering): Released all slaves
[  543.301421][ T4405] bond2 (unregistering): Released all slaves
[  543.307872][ T4405] bond1 (unregistering): Released all slaves
[  543.950006][T12539] Bluetooth: hci4: command 0x0419 tx timeout
[  544.973042][ T4405] team0 (unregistering): Port device team_slave_1 removed
[  545.163807][ T4405] team0 (unregistering): Port device team_slave_0 removed
[  545.321526][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  545.547693][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.845773][ T4405] bond0 (unregistering): Released all slaves
[  548.127364][T13352] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.130306][T13536] netlink: 'syz.5.3186': attribute type 1 has an invalid length.
[  548.147354][T13352] 8021q: adding VLAN 0 to HW filter on device team0
[  548.151240][T13539] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3187'.
[  548.245612][T13542] device geneve2 entered promiscuous mode
[  548.248315][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  548.257552][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  548.264756][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  548.267464][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  548.270943][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.272884][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.277782][T13552] netlink: 'syz.4.3189': attribute type 1 has an invalid length.
[  548.289388][T13552] 8021q: adding VLAN 0 to HW filter on device bond1
[  548.343719][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  548.361120][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  548.364080][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  548.366756][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.368748][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.371745][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  548.375072][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  548.378091][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  548.382228][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  548.385090][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  548.387919][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  548.393565][T13552] device ip6erspan0 entered promiscuous mode
[  548.395586][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  548.436200][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  548.438820][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  548.443526][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  548.446096][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  548.468876][T13352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  548.803988][T13577] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3200'.
[  548.837548][T13352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.846865][T13576] netlink: 'syz.5.3199': attribute type 1 has an invalid length.
[  548.858116][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  548.860736][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.867601][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  548.876986][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  549.025231][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  549.028061][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  549.035436][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  549.057847][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  549.062738][T13352] device veth0_vlan entered promiscuous mode
[  549.082471][T13352] device veth1_vlan entered promiscuous mode
[  549.131927][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  549.134732][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  549.142896][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  549.146858][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  549.154917][T13352] device veth0_macvtap entered promiscuous mode
[  549.158932][T13352] device veth1_macvtap entered promiscuous mode
[  549.188060][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.193809][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.196631][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.199669][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.225644][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.228676][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.237048][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.241125][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.245091][T13352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.256793][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  549.259572][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  549.263366][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  549.266055][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  549.270152][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.273009][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.275800][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.278616][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.283645][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.286629][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.289272][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.293136][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.297379][T13352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.306368][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  549.309163][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  549.315906][T13352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.318572][T13352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.337718][T13352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.342914][T13352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.457794][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.467750][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.575111][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  549.577762][T13608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3211'.
[  549.594475][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.603353][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.608993][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  549.741367][T13618] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3129'.
[  549.821352][T13620] netlink: 'syz.4.3216': attribute type 1 has an invalid length.
[  550.365480][T12539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  550.369148][T12539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  550.374172][T12539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  550.378995][T12539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  550.397369][T12539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  550.413463][T12539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  550.702869][ T5857] device syz_tun left promiscuous mode
[  550.704547][ T5857] bridge0: port 3(syz_tun) entered disabled state
[  550.720515][T13668] sctp: [Deprecated]: syz.4.3232 (pid 13668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  550.720515][T13668] Use struct sctp_sack_info instead
[  550.725713][T13668] sctp: [Deprecated]: syz.4.3232 (pid 13668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  550.725713][T13668] Use struct sctp_sack_info instead
[  550.776815][T13666] netlink: 'syz.3.3231': attribute type 1 has an invalid length.
[  551.106523][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3240'.
[  551.109759][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3240'.
[  551.349067][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3247'.
[  551.486984][T13709] netlink: 'syz.3.3246': attribute type 1 has an invalid length.
[  551.516204][T13648] chnl_net:caif_netlink_parms(): no params data found
[  551.729486][T13648] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.755578][T13648] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.765704][T13648] device bridge_slave_0 entered promiscuous mode
[  551.853173][T13648] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.855580][T13648] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.861104][T13648] device bridge_slave_1 entered promiscuous mode
[  551.885384][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'.
[  551.927248][T12259] tipc: Left network mode
[  551.948614][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.986628][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.174389][T13648] team0: Port device team_slave_0 added
[  552.177658][T13648] team0: Port device team_slave_1 added
[  552.284655][T13772] netlink: 'syz.6.3266': attribute type 1 has an invalid length.
[  552.306422][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.309037][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.329743][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.341108][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.343090][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.350520][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.500241][ T4308] Bluetooth: hci0: command 0x0409 tx timeout
[  552.657581][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3268'.
[  552.691835][T13648] device hsr_slave_0 entered promiscuous mode
[  552.721255][T13648] device hsr_slave_1 entered promiscuous mode
[  552.755948][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.758025][T13648] Cannot create hsr debugfs directory
[  553.058378][T13825] netlink: 'syz.2.3275': attribute type 29 has an invalid length.
[  553.186403][T13825] netlink: 'syz.2.3275': attribute type 29 has an invalid length.
[  553.188770][T13829] netlink: 'syz.6.3278': attribute type 1 has an invalid length.
[  553.334612][T13832] netlink: 'syz.2.3275': attribute type 29 has an invalid length.
[  553.440859][T12259] bond1: (slave gretap1): Releasing active interface
[  553.502216][T13845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3280'.
[  553.505067][T13837] netlink: 'syz.2.3275': attribute type 29 has an invalid length.
[  553.786454][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3288'.
[  553.833141][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3288'.
[  554.091183][T13871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3288'.
[  554.189771][T13895] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.3292'.
[  554.494256][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[  554.499818][T13898] netlink: 'syz.2.3293': attribute type 1 has an invalid length.
[  554.580016][ T4308] Bluetooth: hci0: command 0x041b tx timeout
[  554.653635][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3295'.
[  554.713824][T12259] device hsr_slave_0 left promiscuous mode
[  554.752184][T12259] device hsr_slave_1 left promiscuous mode
[  554.811598][T12259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.814224][T12259] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.816767][T12259] device bridge_slave_1 left promiscuous mode
[  554.827426][T12259] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.875206][T12259] bond10 (unregistering): Released all slaves
[  554.881197][T13934] netlink: 'syz.3.3306': attribute type 29 has an invalid length.
[  555.542156][T12259] bond9 (unregistering): Released all slaves
[  555.598504][T12259] bond8 (unregistering): Released all slaves
[  555.605242][T12259] bond7 (unregistering): Released all slaves
[  555.613121][T12259] bond6 (unregistering): Released all slaves
[  555.619753][T12259] bond5 (unregistering): Released all slaves
[  555.626615][T12259] bond4 (unregistering): Released all slaves
[  555.636363][T12259] bond3 (unregistering): Released all slaves
[  555.643848][T12259] bond2 (unregistering): Released all slaves
[  555.651432][T12259] bond1 (unregistering): Released all slaves
[  556.026747][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  556.028541][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  556.660049][T12539] Bluetooth: hci0: command 0x040f tx timeout
[  557.344119][T12259] team0 (unregistering): Port device team_slave_1 removed
[  557.533372][T12259] team0 (unregistering): Port device team_slave_0 removed
[  557.720704][T12259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.922779][T12259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  558.750030][ T4308] Bluetooth: hci0: command 0x0419 tx timeout
[  560.195988][T12259] bond0 (unregistering): Released all slaves
[  560.448274][T13934] netlink: 'syz.3.3306': attribute type 29 has an invalid length.
[  560.457579][T13942] netlink: 61775 bytes leftover after parsing attributes in process `syz.3.3306'.
[  560.638074][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3310'.
[  560.692726][T13648] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  560.733105][T13648] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  560.774534][T13648] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  560.821816][T13648] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  560.860425][T13963] netlink: 'syz.6.3314': attribute type 1 has an invalid length.
[  560.919822][T13960] device syzkaller0 entered promiscuous mode
[  572.251180][T13648] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.282306][T13648] 8021q: adding VLAN 0 to HW filter on device team0
[  572.291853][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  572.294544][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  572.400471][T14015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3324'.
[  572.403055][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  572.408506][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  572.418550][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.420618][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.429367][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  572.440524][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  572.459992][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.462112][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.490875][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  572.498525][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  572.508894][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  572.517147][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  572.525977][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  572.586845][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  572.589709][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  572.595904][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  572.611591][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  572.623221][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  572.629400][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  572.635502][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  572.644115][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  572.651441][T14032] netlink: 'syz.6.3328': attribute type 1 has an invalid length.
[  573.075894][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.079299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  573.096290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  573.181247][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3335'.
[  573.408201][T14088] device ip6erspan0 entered promiscuous mode
[  573.625233][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  573.627990][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  573.663776][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  573.667162][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  573.670425][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  573.681124][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  573.684568][T13648] device veth0_vlan entered promiscuous mode
[  573.702682][T13648] device veth1_vlan entered promiscuous mode
[  573.753192][T13648] device veth0_macvtap entered promiscuous mode
[  573.757191][T13648] device veth1_macvtap entered promiscuous mode
[  573.785328][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  573.788015][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  573.802982][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  573.816740][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  573.836002][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  573.839083][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  573.855286][T14112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3348'.
[  573.881081][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.899602][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.913687][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.916539][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.919216][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.937042][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.944520][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.948214][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.957563][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.960842][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.965250][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.971893][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  573.974996][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  574.070793][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.073919][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.077140][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.080451][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.083215][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.086238][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.089109][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.093639][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.096844][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.101035][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.105685][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.108016][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  574.121101][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  574.142264][T13648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.144671][T13648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.147015][T13648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.156222][T13648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.284908][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.287225][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.319142][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  574.399580][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.407436][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.416827][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  574.491283][T14157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3361'.
[  574.496159][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'.
[  574.604500][T14160] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3221'.
[  574.866014][ T4308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  574.870732][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  574.882122][ T4308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  574.887607][ T4308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  574.900978][ T4308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  574.909060][ T4308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  575.226029][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3375'.
[  575.228934][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'.
[  575.378335][T14202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3377'.
[  575.546593][T14173] chnl_net:caif_netlink_parms(): no params data found
[  575.664711][T14173] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.666705][T14173] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.669235][T14173] device bridge_slave_0 entered promiscuous mode
[  575.685610][T14173] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.687639][T14173] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.690509][T14173] device bridge_slave_1 entered promiscuous mode
[  575.709438][T14173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  575.722168][T14173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.762029][T14173] team0: Port device team_slave_0 added
[  575.772659][T14173] team0: Port device team_slave_1 added
[  575.880026][T14173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.881973][T14173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.888856][T14173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.908091][T14173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.920778][T14173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.928244][T14173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.982228][T14173] device hsr_slave_0 entered promiscuous mode
[  576.031958][T14173] device hsr_slave_1 entered promiscuous mode
[  576.061071][T14173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  576.063225][T14173] Cannot create hsr debugfs directory
[  576.064873][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3388'.
[  576.073840][T14242] IPv6: Can't replace route, no match found
[  576.343080][T14173] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.493372][T14173] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.605943][T14173] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.986270][T12539] Bluetooth: hci2: command 0x0409 tx timeout
[  579.061055][T12539] Bluetooth: hci2: command 0x041b tx timeout
[  581.140090][ T4308] Bluetooth: hci2: command 0x040f tx timeout
[  583.220087][T12539] Bluetooth: hci2: command 0x0419 tx timeout
[  587.991725][T14173] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.037547][T14278] __nla_validate_parse: 2 callbacks suppressed
[  588.037568][T14278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3400'.
[  588.113948][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'.
[  588.132766][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'.
[  588.301625][T14173] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  588.355922][T14309] netlink: 'syz.5.3410': attribute type 1 has an invalid length.
[  588.359165][T14173] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  588.401943][T14173] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  588.436812][T14173] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  599.460081][T14322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3414'.
[  599.470355][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3418'.
[  599.472841][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3418'.
[  599.503267][T14173] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.516567][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  599.519046][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  599.563142][T14173] 8021q: adding VLAN 0 to HW filter on device team0
[  599.596173][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  599.599118][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  599.604293][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.606355][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  599.621422][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  599.632602][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  599.640721][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.642702][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  599.657919][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  599.687396][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  599.690567][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  599.741601][T14354] netlink: 'syz.4.3423': attribute type 1 has an invalid length.
[  599.763159][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  599.778165][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  599.940036][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  599.942832][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  599.945905][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  599.948682][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  599.951437][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  599.967431][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  599.970266][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  599.974282][T14173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  600.132227][T14373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3428'.
[  600.292068][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'.
[  600.294771][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'.
[  611.487250][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  611.489546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  611.492093][T14400] netlink: 'syz.2.3437': attribute type 1 has an invalid length.
[  611.499165][T14173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.757233][T14418] netlink: 'syz.3.3442': attribute type 10 has an invalid length.
[  611.767653][T14418] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.769992][T14418] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.789855][T14418] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.792016][T14418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.795304][T14418] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.797367][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.802809][T14418] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  611.807674][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3444'.
[  611.987767][T14436] netlink: 'syz.3.3449': attribute type 1 has an invalid length.
[  612.098089][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  612.101615][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  612.113851][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  612.116496][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  612.119476][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  612.137591][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  612.151579][T14173] device veth0_vlan entered promiscuous mode
[  612.183345][T14173] device veth1_vlan entered promiscuous mode
[  612.242743][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  612.245428][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  612.247999][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  612.251104][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  612.256192][T14173] device veth0_macvtap entered promiscuous mode
[  612.261147][T14173] device veth1_macvtap entered promiscuous mode
[  612.277702][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.285604][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.298754][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.305244][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.309306][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.319681][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.325058][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.336718][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.344982][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.348736][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.353864][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.357320][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.362664][T14173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.371387][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  612.374435][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  612.377794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  612.384685][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  612.393501][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.396564][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.399296][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.405560][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.408514][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.412217][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.415182][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.418752][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.423068][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.426258][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.429237][T14173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.432435][T14173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.436524][T14173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.443345][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3454'.
[  612.446182][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  612.449019][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  612.454123][T14173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.456637][T14173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.459010][T14173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.461848][T14173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.597929][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.607406][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.625069][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  612.728618][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.731776][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.764751][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  612.784813][T14470] netlink: 'syz.4.3461': attribute type 1 has an invalid length.
[  613.109044][T14489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3465'.
[  613.438761][T14513] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3475'.
[  613.442833][T14515] netlink: 'syz.3.3476': attribute type 1 has an invalid length.
[  613.504554][T14515] bond2: (slave gretap1): making interface the new active one
[  613.552105][T14515] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  614.057360][T14559] netlink: 'syz.4.3492': attribute type 1 has an invalid length.
[  614.094069][T14559] bond5: (slave gretap1): making interface the new active one
[  614.097012][T14559] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  614.420440][ T4308] Bluetooth: hci6: command 0x0406 tx timeout
[  614.655458][T14608] netlink: 'syz.6.3509': attribute type 1 has an invalid length.
[  615.018756][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3517'.
[  615.214152][T14644] netlink: 'syz.5.3523': attribute type 1 has an invalid length.
[  615.302299][T14652] bond1: (slave gretap1): making interface the new active one
[  615.314663][T14652] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  615.526873][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'.
[  615.810881][T14684] netlink: 'syz.3.3537': attribute type 1 has an invalid length.
[  616.015437][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'.
[  616.388483][T14734] netlink: 'syz.4.3553': attribute type 1 has an invalid length.
[  616.470855][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'.
[  616.975798][T14784] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  617.056949][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'.
[  617.060293][T14789] netlink: 763 bytes leftover after parsing attributes in process `syz.6.3572'.
[  617.461279][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  617.463143][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  617.507787][T14823] netlink: 'syz.4.3584': attribute type 1 has an invalid length.
[  617.536526][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'.
[  618.095160][T14862] netlink: 'syz.5.3597': attribute type 1 has an invalid length.
[  618.552277][T14899] netlink: 'syz.5.3609': attribute type 1 has an invalid length.
[  619.019501][T14936] netlink: 'syz.2.3622': attribute type 1 has an invalid length.
[  619.067909][T14936] bond2: (slave gretap1): making interface the new active one
[  619.086879][T14936] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  619.168306][T14944] netlink: 15119 bytes leftover after parsing attributes in process `syz.5.3625'.
[  619.625667][T14985] netlink: 'syz.5.3639': attribute type 1 has an invalid length.
[  619.626848][T14986] netlink: 'syz.2.3640': attribute type 2 has an invalid length.
[  619.638212][T14986] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3640'.
[  620.066387][T15010] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  631.238676][T15035] netlink: 'syz.2.3656': attribute type 1 has an invalid length.
[  631.250797][T15032] netlink: 96168 bytes leftover after parsing attributes in process `syz.6.3655'.
[  631.948625][T15082] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  643.351424][T15102] netlink: 'syz.2.3672': attribute type 1 has an invalid length.
[  643.510930][T15118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3676'.
[  644.226408][T15140] netlink: 'syz.2.3684': attribute type 39 has an invalid length.
[  644.229284][T15140] device veth0_macvtap left promiscuous mode
[  644.471759][T15146] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  645.140002][T12539] Bluetooth: hci3: command 0x0406 tx timeout
[  655.813136][T15152] netlink: 'syz.5.3688': attribute type 1 has an invalid length.
[  655.821242][T15164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3692'.
[  656.689360][T15190] netlink: 'syz.6.3699': attribute type 39 has an invalid length.
[  656.692523][T15190] device veth0_macvtap left promiscuous mode
[  656.826947][T15204] netlink: 'syz.2.3703': attribute type 1 has an invalid length.
[  656.943695][T15210] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  660.500175][T12539] Bluetooth: hci4: command 0x0406 tx timeout
[  668.117284][T15213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3706'.
[  668.960582][T15240] netlink: 'syz.4.3717': attribute type 1 has an invalid length.
[  669.100816][T15253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3722'.
[  669.254942][T15256] netlink: 'syz.2.3720': attribute type 1 has an invalid length.
[  669.426012][T15274] netlink: 'syz.3.3732': attribute type 1 has an invalid length.
[  670.264180][T15288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3736'.
[  670.530401][T15307] netlink: 'syz.5.3745': attribute type 1 has an invalid length.
[  675.860036][ T4308] Bluetooth: hci0: command 0x0406 tx timeout
[  678.901985][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  678.903863][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  681.689482][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3748'.
[  681.925450][T15342] netlink: 'syz.5.3749': attribute type 1 has an invalid length.
[  682.463770][T15354] netlink: 'syz.3.3760': attribute type 1 has an invalid length.
[  682.635670][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3763'.
[  694.650971][T15400] netlink: 'syz.6.3774': attribute type 1 has an invalid length.
[  694.683702][T15407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3776'.
[  701.460014][T12539] Bluetooth: hci2: command 0x0406 tx timeout
[  706.108132][T15457] ------------[ cut here ]------------
[  706.109986][T15457] WARNING: CPU: 0 PID: 15457 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x13c/0x16c
[  706.112922][T15457] Modules linked in:
[  706.114016][T15457] CPU: 0 PID: 15457 Comm: syz.3.3791 Not tainted 6.1.141-syzkaller #0
[  706.116309][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  706.119262][T15457] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  706.121504][T15457] pc : taprio_get_start_time+0x13c/0x16c
[  706.123165][T15457] lr : taprio_get_start_time+0x13c/0x16c
[  706.124807][T15457] sp : ffff8000215c6ba0
[  706.126012][T15457] x29: ffff8000215c6ba0 x28: 0000000000000000 x27: ffff7000042b8d94
[  706.128325][T15457] x26: ffff0000f51e0d00 x25: ffff0000cfcc9000 x24: dfff800000000000
[  706.130822][T15457] x23: 0000000000000000 x22: 000000a4661c9318 x21: 0000000000000000
[  706.133131][T15457] x20: 0000000000000000 x19: ffff8000215c6c98 x18: ffff800011a7bce0
[  706.135451][T15457] x17: ffff8000181a1000 x16: ffff8000082d1c00 x15: ffff800017c81fc0
[  706.137817][T15457] x14: ffff0000d4422658 x13: 1ffff00002a0e0b1 x12: 0000000000080000
[  706.140167][T15457] x11: 000000000000560c x10: ffff80002579b000 x9 : ffff80000ffb71d0
[  706.142474][T15457] x8 : 000000000000560d x7 : ffff80000ffb7128 x6 : 0000000000000000
[  706.144824][T15457] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  706.147108][T15457] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000
[  706.149423][T15457] Call trace:
[  706.150328][T15457]  taprio_get_start_time+0x13c/0x16c
[  706.151877][T15457]  taprio_change+0x3670/0x4ca0
[  706.153265][T15457]  taprio_init+0x498/0x520
[  706.154538][T15457]  qdisc_create+0x6f0/0xe20
[  706.155849][T15457]  tc_modify_qdisc+0x954/0x1718
[  706.157286][T15457]  rtnetlink_rcv_msg+0x734/0xce4
[  706.158771][T15457]  netlink_rcv_skb+0x208/0x3c4
[  706.160152][T15457]  rtnetlink_rcv+0x28/0x38
[  706.161431][T15457]  netlink_unicast+0x600/0x818
[  706.162830][T15457]  netlink_sendmsg+0x6e8/0x9b0
[  706.164224][T15457]  ____sys_sendmsg+0x5b8/0x918
[  706.165643][T15457]  __sys_sendmsg+0x25c/0x320
[  706.166976][T15457]  __arm64_sys_sendmsg+0x80/0x94
[  706.168368][T15457]  invoke_syscall+0x98/0x2bc
[  706.169741][T15457]  el0_svc_common+0x138/0x258
[  706.171107][T15457]  do_el0_svc+0x58/0x13c
[  706.172329][T15457]  el0_svc+0x58/0x138
[  706.173494][T15457]  el0t_64_sync_handler+0x84/0xf0
[  706.174943][T15457]  el0t_64_sync+0x18c/0x190
[  706.176258][T15457] irq event stamp: 427
[  706.177418][T15457] hardirqs last  enabled at (426): [<ffff8000083b99e0>] ktime_mono_to_any+0x14c/0x22c
[  706.180197][T15457] hardirqs last disabled at (427): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  706.182843][T15457] softirqs last  enabled at (342): [<ffff80000fd07b78>] local_bh_enable+0x10/0x34
[  706.185499][T15457] softirqs last disabled at (418): [<ffff80000ffaf974>] taprio_change+0x3500/0x4ca0
[  706.188219][T15457] ---[ end trace 0000000000000000 ]---
[  706.189831][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.911919][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3792'.