last executing test programs:

6.550915407s ago: executing program 0 (id=3354):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000c80)="9f9ae8e9", 0x4}], 0x2}}], 0x1, 0x0)

6.403635066s ago: executing program 0 (id=3358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd28, 0x100000, {{}, {}, {0x14, 0x19, {0xffefffff, 0x80000001, 0x1, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x50c4)

6.244552628s ago: executing program 0 (id=3361):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="c8050000100019", 0x7}], 0x1)
r0 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

5.98493251s ago: executing program 0 (id=3366):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x4e23, 0xfff, @empty, 0x31ba}, 0x1c, 0x0}, 0x20040041)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

5.751121148s ago: executing program 0 (id=3369):
unshare(0x2c020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000400000000000b7080000000009000000000000000000000007020000f8ffffffb703000008000000b704000000000000020000000100000000000093e21ccc7af1eba09582cfcc772e25f9ed6c58a6567a09235b1269d4795469f88194c2e4543dfe6e796b78e183fa427951e8626539e5b1d9a3bf064814e8c2219757de9cd4cc366577ebc4917ff7ea3b593aa8b362da7027948eed8297ab5e4a463078b3d94176396c2d59d2b818ae17f906d3be6307b9bd42bd03f29bccfeaf5406de272e9b956d7953ff1d41c67ee21dd8b4e01f9e7c9399421bd8b0490910fad7f567441e436a2cadabe25755c0b46601de946a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
r2 = socket(0x29, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500fe2efa08de5a5a010007000000280007800c000180080001400a0101020c00148008000140ac1414100c00028008000140ffffffff"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
socket(0xa, 0x3, 0xff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000140)=0x8001)
write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
socket(0x2b, 0x1, 0x0)

2.89937712s ago: executing program 2 (id=3395):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket(0x1d, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x65, 0x64, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0xff, 0x3, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x40064)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)

2.267252612s ago: executing program 2 (id=3398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$ppp(r2, &(0x7f00000005c0)="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", 0xaf6)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008d1}, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x3, 0x88, @vifc_lcl_ifindex=r6, @rand_addr=0x64010102}, 0x10)

2.256753922s ago: executing program 1 (id=3399):
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0xc)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000004c0)="2e94", 0x2}], 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

1.959220004s ago: executing program 0 (id=3401):
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
unshare(0x6000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r4, &(0x7f0000000080)={0x23, 0x3, 0x2}, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x38}}, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x4040000)

1.873679944s ago: executing program 2 (id=3403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x80000000, @mcast1, 0xfffffffe}}, 0x1000, 0x4, 0x8, 0xb6, 0x28, 0x67, 0x1}, &(0x7f00000000c0)=0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x371d}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8)

1.583399987s ago: executing program 4 (id=3404):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
recvmmsg$unix(r1, 0x0, 0x0, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {0xf, 0xfffd}, {0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x20040043)
connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15)

1.417758112s ago: executing program 4 (id=3405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$kcm(0x11, 0x3, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x6483, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4)

1.367574553s ago: executing program 1 (id=3406):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', <r4=>0x0, 0x700, 0x80, 0x6, 0xc, {{0x31, 0x4, 0x2, 0x4, 0xc4, 0x68, 0x0, 0x4, 0x2d, 0x0, @local, @multicast2, {[@noop, @cipso={0x86, 0x9, 0x3, [{0x1, 0x3, '9'}]}, @end, @generic={0x82, 0x11, "9d762812c5e89f857a84fd12d8f7da"}, @cipso={0x86, 0x4c, 0x2, [{0x2, 0x12, "c76cef337959634ecab6ae3cb7abcf62"}, {0x7, 0x6, "e3b53fe4"}, {0x1, 0x4, "b85f"}, {0x7, 0xa, "e3540f0df9ee562c"}, {0x2, 0x4, "f399"}, {0x5, 0x2}, {0x7, 0x12, "c430033fb3363d96d252282aa6dbe5a5"}, {0x1, 0x8, "c110d896de39"}]}, @ssrr={0x89, 0x7, 0x49, [@empty]}, @noop, @lsrr={0x83, 0x17, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @empty]}, @generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x24, 0x98, 0x3, 0x8, [{@loopback, 0x7}, {@local, 0x6}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x6}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r5=>0x0, 0x29, 0x4, 0xff, 0x1fc0000, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x5, 0xffffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', <r6=>0x0, 0x4, 0x4, 0x9, 0x4, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x8000, 0x10, 0x9, 0xfffffe01}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@multicast1, @broadcast, <r7=>0x0}, &(0x7f0000000680)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', <r8=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=<r9=>0x0, &(0x7f0000000740)=0x4)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c)
r15 = socket$packet(0x11, 0x3, 0x300)
r16 = socket$nl_route(0x10, 0x3, 0x0)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r18, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r15, &(0x7f00000001c0)="11eb0300", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r18, 0x1, 0x4, 0x6, @multicast}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b40)={&(0x7f0000000100), 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x350, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1b}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff0, 0x6, 0x7, 0xfffffffd}, {0xffc0, 0x0, 0x2f, 0x1d9f}, {0x2, 0xe, 0x8, 0x7fffffff}, {0x5, 0x2, 0xa, 0xfffffffd}, {0x400, 0x5, 0x75, 0xe}, {0x2, 0xc, 0x9, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r18}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x88005}, 0x20008010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x24}, 0x28)

1.127116149s ago: executing program 3 (id=3408):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x104, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x89}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = gettid()
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid\x00')

1.100287708s ago: executing program 1 (id=3409):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0xb29, 0x14, 0x3}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x68, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "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"}}}}, 0x7ff) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000080000009500000000000000733a22c8e03c45ddfd9a6e11025496fed3bfefcfea7c1f13586532a240dca8be2a9a87384667631e07cb65a2495f9670d699777f4235f3505e81b0c2da7806f82ef792287d951b876949f244554cd169d044e75e9018f2375ceb797f4d85ff3fa17cc095aecdfe60998cee4d10a2271cc4d0bc7a12f23280a8193159b54bc56eeff46f14619b211f42485f9f317b17eb9b53875279333d6048833a114efe31e34c806f6e10c8009bbeb09471f36e0e7b0ba3ae8857d23646b392d730dba5381bcbb2a8836948c15e355b008000"/230], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.011069205s ago: executing program 4 (id=3410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x83, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x80000045, [0x2007, 0xd]}})

910.722593ms ago: executing program 2 (id=3411):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$pptp(0x18, 0x1, 0x2)
accept(r2, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000adbd25f1febb65f9000040f7ff0086ff000900000085000000110000009500000000bd7600"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r4, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)

866.464045ms ago: executing program 3 (id=3412):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000003c0)={'bond0\x00', @ifru_names='rose0\x00'}) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="380000001200050100000000000000e627001a00"], 0x38}}, 0x20040810) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r5, 0xd99) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8, 0xe}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
recvfrom$llc(r1, &(0x7f0000000000)=""/168, 0xa8, 0x2041, &(0x7f00000000c0)={0x1a, 0x305, 0xe8, 0x7, 0x81, 0x2}, 0x10)

611.035167ms ago: executing program 4 (id=3413):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0)

610.110773ms ago: executing program 3 (id=3414):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x4, @empty, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="140000000000000029000000430000000900800000000000f90000000000000029000000390000002b00010200000000"], 0x30}}], 0x2, 0x2000c0d1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000ac0)={0x15a8, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x11b0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0de}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.]({!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_macvtap\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':$!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x435}]}]}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "02969fe3e704089b276656d0e5230d37b4a565d101f1d6e23c8b3a8819cccc4a0661688ae1be5fe07fd1db9a5e13192f5c7a92b43daa0f23fdf841604288fe"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "022a47ae56beb2d41231186bd0e4696cd5e18ced8bc22baebdf0866d61e47ce62431709aea8dc42b914a28d7f42cd6b0efc23eab7b230c8f92f1288389c9e7d196118d5b43f9cd774e147f41b3b6fccf762da59a729cd505a1995923fee15c54c49499fdd4a3e07e0d0f3d0d8ae626bc853f23667c88a093c1284766f054ddd092174e4c8f2fac465588ed7c508d7a5781039081e5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x13c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "8935853fe9ac4690d8784b8d3858baf1d7e114ed7f922dfc907f6c64e5ed1246f626793b059a3a46869622ae35cd3e6bf8e1ac90b601bef92e786f3e5a4b78ff9331b35e72c4e6a55e28e949f575ec3646225ccf711af3497304ae4900011992c5f6a84087cbd94fb77dcdc8ce08ff2b6919db83b788f7091a8f635ce2d75907c648ce0f4eace6393f71dc2692c623f5df4955d25bda5f30fa96ba3d9c397ee0cff42c863e435f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "41d121db3287f8323546d0a70baf232905e874c7cc03b5640952e66c0985157306896c92cc02b72d1ecd98ef79c3149c2080b1c34d9b0b9859329a631c990c7e105ca36039a5052725d3d7897f68c8f5ed8b2d3294c512ad2595e0ea344d6a4dcc1214a8e37664bd31b5d2fed3d0fb17c225339d8ed9eb9b"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "3b34524c14c9a523d7a3ea3b3d758a716a0debccf77fe01514f0f80bcf0b250243a9d2b9749bcd409f0dddb7366f675735f661bd30cc5cecaba0eecf5d7a3ad5976ab56c2e37da63bd9a08a11acd44f4112d994b9ef0c5e1a67d15d1c27ff38ae8f8b604348726ec93e7275625dd33f1e347b49d485cdc543e502adbf210c9decf2b574376117ea80fd359780698d07447e1c7c002b153038cc9ee3da01a1935fefd160dfd90eea9dca8d6ab2b6235c0fe44a02cee85f5fbe2f96bee55629453557b60b45f2d33bc127ae06433f0ed02f1543b9e0ac6d249829edb04117cd45ad296faf875a711ceaae1de86006da83bd7b9149f53492ec4f25a5d"}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "2fca09b034c08eedbe7bb981b2cb827b56a41799226a41fdc65550c6e4ffbff7aaf7971288585960a12851c5c1e20616302864e7712b4dac04f2cbca7d658e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "bf111715e2e9a8140dcffe16026f46dca3ce636b1d9742f5831e345420e25b41d48d78931a1e6c8a706aed5dfe1571a121cb3f6882dd65b485f3c27c030028f421daf20ee7fd7b898358f176795aabfc3a4f1f27542344436e631f232eef983de449efef716a26addb22b4c24ad8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x15a8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
close(r1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008001)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000000d0a05000000000000000000020000070900021b89797a32000000000900020073797a3100000000180003801400008010000a800c0002800800034000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r4], 0x84}}, 0x20008040)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', 0x0})
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

538.919025ms ago: executing program 4 (id=3415):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, [@jmp={0x5, 0x0, 0x4, 0x4, 0xa, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xa, 0x2, 0x100, 0x10}, @call={0x85, 0x0, 0x0, 0x9e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x13}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffe, 0x71, &(0x7f0000000200)=""/113, 0x41000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x210, 0x100}, 0x10}, 0x94)
sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000300)={0x11, 0x17, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r3 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r4, @ANYBLOB="010029bd700003dcdf251500000008002c00000000800c00060001000000010000003c002b800c000500010000000000000008000100010000000500020001000000", @ANYRES32=0x0, @ANYRESDEC], 0x104}, 0x1, 0x0, 0x0, 0x400c011}, 0x80)
getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000080)=""/91, &(0x7f0000000100)=0x5b)

485.968049ms ago: executing program 1 (id=3416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000400000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@union={0x0, 0x6, 0x0, 0x5, 0x0, 0x3, [{0xd, 0x3, 0x8}, {0x6, 0x0, 0x1000000}, {0xa, 0x5}, {0x6, 0x0, 0x5}, {0x10, 0x1}, {0xa, 0x4, 0xfffffc01}]}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f0000000300)=""/235, 0x71, 0xeb, 0x0, 0xa, 0x10000}, 0x28)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x6, 0x101, 0x10118, r0, 0x54d, '\x00', 0x0, r2, 0x3, 0x5, 0x0, 0x9, @void, @value, @value=r3}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

433.505832ms ago: executing program 3 (id=3417):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r5 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff030}, {0x6, 0x1, 0x6, 0x400006}]}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

321.282183ms ago: executing program 1 (id=3418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x40000)

288.985817ms ago: executing program 2 (id=3419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x9, 0x0, 0x2de}}], {0x14}}, 0x8c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000)

245.494248ms ago: executing program 1 (id=3420):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xd, 0x4}, {0x0, 0x9}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0xa200, 0x5, 0x1, 0x13472340, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x6, 0xffff, 0x6e, 0x5, 0xff, 0xffff]}}, {{0x1c, 0x1, {0x6, 0xff, 0x4, 0xfffffff9, 0x2, 0x80, 0x2, 0x3}}, {0xa}}, {{0x1c, 0x1, {0x3, 0x0, 0xc, 0x7ff, 0x0, 0x3, 0x4, 0x2}}, {0x8}}]}]}, 0xffd1}}, 0x800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xffffffff}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000080)
pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x1000000}, &(0x7f0000000300)={0x4, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x401}, &(0x7f0000000340)={0x0, 0x3, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a0101000000010100000000000000"], 0x14}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

147.194131ms ago: executing program 3 (id=3421):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

146.449514ms ago: executing program 4 (id=3422):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020400)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000001bc0)=""/4104, 0x1008}, {&(0x7f0000001a00)=""/50, 0x32}], 0x4}, 0x536}], 0x2, 0x42, 0x0) (async)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000001bc0)=""/4104, 0x1008}, {&(0x7f0000001a00)=""/50, 0x32}], 0x4}, 0x536}], 0x2, 0x42, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001d00070f0002", @ANYRES32, @ANYRES16=r4, @ANYBLOB="989dba31bd1d4ecd9257d3f6d241aac43a58a47327e42da6f93adeb430c5a2924920f4fc1fb945835d2708e2b06cdf866495adafc36191186292a5a7d85164cc9ecf477cd1ea46250a1ee3c1a7ee34cc4035d407b77675c58d63032ef08f61aab846d726d83e1bc41f943e0f07cd2da40ef3b13441a9532bc865774026b107f55abd2ffcc4f54fad58ff236bce03fc2a5ca62d8aff0f9ff3d41b6e97781a4bb03dcd8d66bad6e96c11549c7dfbed6638fbda8588c9904d6e83872f2248b7b0d3323df4626adcc26b5f1c840a6fc7135d47b034b81634c637e7e79e91ca7e727bcfe98afd596985a20146a43e35a4fc7c"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
unshare(0x2060880)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000005c0)={'dummy0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x8b33, 0x8, 0x86, 0x10001, 0xb9, 0x7fc, 0x4, 0x5, 0x0, 0x0, 0x2550, 0x5, 0x9b, 0x8000, 0xffff, 0x790, 0x6, 0x9, 0xc, 0xfffffffe, 0x1, 0x498, 0x0, 0x3ff, 0x7, 0x4, 0x9, 0x1000000, 0x7, 0xffff, 0x3, 0x8, 0x8, 0x9, 0x3, 0xffff, 0x2, 0xe202, 0x3, 0x7b, 0xefef, 0x100, 0x6, 0xee6, 0x1ff, 0x4, 0x400, 0x4, 0x3, 0x100, 0xffff4f4f, 0x25d73ff4, 0x7, 0x2, 0x4, 0x8000, 0x3, 0x5, 0x2, 0x7ff, 0xff, 0x8, 0xc, 0x5, 0x9c2, 0x2, 0x5, 0x8, 0x2, 0x3, 0x8, 0x6, 0x9, 0xef74, 0x3ff, 0x8000, 0x8001, 0x3, 0xf38, 0x2638, 0x10, 0x2, 0xe1, 0xc, 0xf7, 0x0, 0x0, 0x101, 0xfda, 0x4, 0x8, 0x400, 0x7, 0x3, 0x9, 0x7, 0x0, 0x6, 0xf, 0x6, 0x5, 0x0, 0xd, 0xbd, 0x9, 0x1, 0x9, 0xfffffbff, 0x2, 0xfff, 0x9, 0xb, 0x3ff, 0x870, 0x845, 0x3, 0x8, 0x7, 0x15f2, 0x3, 0x1ed1, 0x10, 0x6, 0x6, 0x5, 0x1]}})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
getpeername$netlink(r0, 0x0, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'})

11.05077ms ago: executing program 2 (id=3423):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000040)) (async)
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x9, 0x9, 0xffffffff, 0x1, 0x2, 0xff, 0x0, 0xfffffff8}})
socket$kcm(0xa, 0x3, 0x87) (async)
r1 = socket$kcm(0xa, 0x3, 0x87)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc7, 0x8, 0xe1, 0x2, 0xa, 0x3c, 0xfffffffffffffffe, 0xfffffffffffffff6}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRES32], 0xfdef)
socket(0x40000000015, 0x5, 0x0) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/23, 0x17}, 0x8}], 0x1, 0x20, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140f, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000040}, 0x15)

0s ago: executing program 3 (id=3424):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20)

kernel console output (not intermixed with test programs):

sing attributes in process `syz.2.2234'.
[  382.154895][T15079] netlink: Unknown conntrack attr (type=2304, max=9)
[  382.553066][T15107] pim6reg: entered allmulticast mode
[  382.561249][T15107] pim6reg: left allmulticast mode
[  382.634701][    C0] ip6_tunnel: syzkaller0 xmit: Local address not yet configured!
[  383.507795][T15155] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2251'.
[  384.163907][T15178] IPVS: Scheduler module ip_vs_sip not found
[  384.344032][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2258'.
[  384.397829][T15197] 8021q: adding VLAN 0 to HW filter on device bond4
[  384.423064][T15197] syzkaller1: entered promiscuous mode
[  384.430360][T15197] syzkaller1: entered allmulticast mode
[  384.438663][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'.
[  384.449939][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2257'.
[  384.460484][T15197] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  384.478948][T15197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2258'.
[  384.584704][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'.
[  384.612536][T15206] openvswitch: netlink: IP tunnel dst address not specified
[  384.645775][T15208] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  385.063366][T15228] bond10: Unable to set up delay as MII monitoring is disabled
[  385.097922][T15228] bond10 (unregistering): Released all slaves
[  385.158991][T15194] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  385.187999][T15233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2268'.
[  385.266968][T15238] validate_nla: 3 callbacks suppressed
[  385.266991][T15238] netlink: 'syz.3.2269': attribute type 7 has an invalid length.
[  385.368408][T15244] xt_connbytes: Forcing CT accounting to be enabled
[  385.901350][ T5839] block nbd3: Receive control failed (result -1)
[  386.525913][T15299] netlink: 'syz.3.2286': attribute type 6 has an invalid length.
[  386.543881][T15299] netlink: 'syz.3.2286': attribute type 7 has an invalid length.
[  386.625376][T15299] netlink: 'syz.3.2286': attribute type 8 has an invalid length.
[  386.644601][T15299] netlink: 'syz.3.2286': attribute type 15 has an invalid length.
[  386.940645][ T5839] Bluetooth: hci4: link tx timeout
[  386.949275][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  387.322434][T15324] __nla_validate_parse: 25 callbacks suppressed
[  387.322459][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'.
[  387.362841][T15324] netlink: 'syz.4.2292': attribute type 14 has an invalid length.
[  387.380218][T15324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2292'.
[  387.412027][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2292'.
[  388.284667][T15344] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  388.292229][T15344] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  388.753395][T15346] tipc: Resetting bearer <eth:syzkaller0>
[  388.836686][T15353] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  389.038014][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  389.386988][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2305'.
[  389.517639][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  389.531369][T15376] lo speed is unknown, defaulting to 1000
[  389.659889][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'.
[  389.911665][T15401] pimreg9: entered allmulticast mode
[  390.028118][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  390.108876][T15413] hsr_slave_1: Device is already in use.
[  390.206198][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'.
[  390.231207][T15424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2320'.
[  390.255473][T15424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2320'.
[  390.575424][T15448] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  390.666357][T15451] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  390.676427][T15451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  390.979013][T15460] bond9: Unable to set up delay as MII monitoring is disabled
[  391.005106][T15460] bond9 (unregistering): Released all slaves
[  391.015646][T15464] netlink: 'syz.3.2329': attribute type 10 has an invalid length.
[  391.059994][T15464] bond0: (slave dummy0): Releasing backup interface
[  391.067853][T15464] dummy0: left promiscuous mode
[  391.091251][T15464] team0: Port device dummy0 added
[  391.138608][T15467] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  391.200358][T15469] lo speed is unknown, defaulting to 1000
[  392.160482][T15521] lo speed is unknown, defaulting to 1000
[  392.387520][T15524] __nla_validate_parse: 5 callbacks suppressed
[  392.387539][T15524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2347'.
[  392.403952][T15524] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2347'.
[  392.454792][T15525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2347'.
[  392.495565][T15525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2347'.
[  392.773769][T15535] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  392.791012][T15535] netlink: 'syz.1.2351': attribute type 4 has an invalid length.
[  392.811103][T15535] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2351'.
[  393.417746][T15562] gretap2: entered promiscuous mode
[  393.448327][T15562] batman_adv: batadv0: Adding interface: gretap2
[  393.476996][T15562] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  393.534552][T15562] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  394.087514][T15581] erspan0: entered promiscuous mode
[  394.103150][T15581] macsec3: entered allmulticast mode
[  394.120854][T15581] erspan0: entered allmulticast mode
[  394.162634][T15581] erspan0: left allmulticast mode
[  394.174671][T15581] erspan0: left promiscuous mode
[  394.621967][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'.
[  394.853132][T15593] tap0: tun_chr_ioctl cmd 1074025680
[  396.013361][T15617] veth0: entered promiscuous mode
[  396.023414][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099186
[  396.048253][T15615] veth0: left promiscuous mode
[  396.050054][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099185
[  396.081244][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099184
[  396.093019][T15620] lo speed is unknown, defaulting to 1000
[  396.117251][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099186
[  396.130536][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099185
[  396.139885][T15621] tipc: Failed to remove unknown binding: 66,0,0/20185096:2051099183/2051099184
[  396.516909][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'.
[  396.595793][T15636] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  397.041376][T15661] netlink: 'syz.2.2387': attribute type 1 has an invalid length.
[  397.163139][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'.
[  397.173718][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'.
[  397.219938][T15661] bond8: entered promiscuous mode
[  397.225914][T15661] 8021q: adding VLAN 0 to HW filter on device bond8
[  397.279620][T15666] lo speed is unknown, defaulting to 1000
[  397.289196][T15675] netlink: 'syz.3.2386': attribute type 1 has an invalid length.
[  397.317913][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  397.355153][T15675] 8021q: adding VLAN 0 to HW filter on device bond5
[  397.411656][T15674] bond8: (slave bridge3): making interface the new active one
[  397.423719][T15674] bridge3: entered promiscuous mode
[  397.445544][T15674] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  397.662670][T15693] netlink: 'syz.0.2394': attribute type 1 has an invalid length.
[  397.672173][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'.
[  397.682361][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'.
[  397.790503][T15697] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2395'.
[  398.076716][T15708] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  398.140742][T15714] netlink: 'syz.1.2399': attribute type 1 has an invalid length.
[  398.164917][T15714] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.2399'.
[  398.174121][T15714] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2399'.
[  398.258173][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  398.295384][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'.
[  398.304413][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  398.343579][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  398.417021][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'.
[  398.490183][T15723] C: renamed from team_slave_0
[  398.505589][T15723] netlink: 'syz.2.2404': attribute type 4 has an invalid length.
[  398.554639][T15723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  399.006660][T15759] netlink: 'syz.4.2417': attribute type 12 has an invalid length.
[  399.036065][T15759] 8021q: VLANs not supported on vcan0
[  399.317367][T15777] netlink: 'syz.4.2422': attribute type 1 has an invalid length.
[  399.371844][T15777] bond7: entered promiscuous mode
[  399.385655][T15777] 8021q: adding VLAN 0 to HW filter on device bond7
[  399.412049][T15782] bond7: entered allmulticast mode
[  399.456411][T15777] bond7: (slave bridge5): making interface the new active one
[  399.464109][T15777] bridge5: entered promiscuous mode
[  399.470051][T15777] bridge5: entered allmulticast mode
[  399.477797][T15777] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  399.529210][T15780] lo speed is unknown, defaulting to 1000
[  399.987456][T15795] lo speed is unknown, defaulting to 1000
[  400.392990][T15825] lo speed is unknown, defaulting to 1000
[  400.821872][T15847] bond0: (slave 
3
0
): Error -34 calling ndo_bpf
[  400.829500][T15847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  400.853523][T15848] bond0: (slave 
3
0
): Error -34 calling ndo_bpf
[  400.861449][T15848] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  400.979817][T15845] netlink: 'syz.4.2441': attribute type 62 has an invalid length.
[  401.056033][T15855] netlink: 'syz.0.2443': attribute type 3 has an invalid length.
[  401.076168][T15855] netlink: 'syz.0.2443': attribute type 3 has an invalid length.
[  401.109021][T15857] lo speed is unknown, defaulting to 1000
[  401.332268][T15867] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  401.391030][T15837] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  401.399395][T15867] xt_hashlimit: max too large, truncated to 1048576
[  401.407268][T15867] xt_hashlimit: overflow, try lower: 2/0
[  401.446613][T15867] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  402.025418][   T30] audit: type=1800 audit(1774999432.067:10): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2457" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2688 res=0 errno=0
[  402.304099][T15857] validate_nla: 1 callbacks suppressed
[  402.304121][T15857] netlink: 'syz.3.2445': attribute type 8 has an invalid length.
[  403.018149][T15939] __nla_validate_parse: 20 callbacks suppressed
[  403.018171][T15939] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2466'.
[  403.937520][T15995] SET target dimension over the limit!
[  403.998735][T15999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  404.330839][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2486'.
[  404.807243][T16050] openvswitch: netlink: IPv4 tun info is not correct
[  405.004050][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2493'.
[  405.599024][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'.
[  405.621729][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'.
[  405.737937][T16079] syzkaller0: entered promiscuous mode
[  405.743691][T16079] syzkaller0: entered allmulticast mode
[  406.050449][T16094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2505'.
[  406.453395][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  406.474550][T16114] bond0: option downdelay: invalid value (18446744071951403948)
[  406.482280][T16114] bond0: option downdelay: allowed values 0 - 2147483647
[  406.843449][T16129] FAULT_INJECTION: forcing a failure.
[  406.843449][T16129] name failslab, interval 1, probability 0, space 0, times 0
[  406.913866][T16129] CPU: 0 UID: 0 PID: 16129 Comm: syz.1.2515 Not tainted syzkaller #0 PREEMPT(full) 
[  406.913897][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  406.913920][T16129] Call Trace:
[  406.913929][T16129]  <TASK>
[  406.913938][T16129]  dump_stack_lvl+0xe8/0x150
[  406.913974][T16129]  should_fail_ex+0x412/0x560
[  406.914012][T16129]  should_failslab+0xa8/0x100
[  406.914043][T16129]  __kmalloc_cache_noprof+0x88/0x660
[  406.914070][T16129]  ? sctp_add_bind_addr+0x8c/0x370
[  406.914100][T16129]  ? __pfx_sctp_get_port_local+0x10/0x10
[  406.914129][T16129]  sctp_add_bind_addr+0x8c/0x370
[  406.914158][T16129]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  406.914187][T16129]  sctp_do_bind+0x5b2/0x9d0
[  406.914224][T16129]  sctp_connect_new_asoc+0x270/0x6b0
[  406.914252][T16129]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  406.914283][T16129]  ? __local_bh_enable_ip+0xd0/0x130
[  406.914311][T16129]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  406.914338][T16129]  ? security_sctp_bind_connect+0x7e/0x2c0
[  406.914370][T16129]  sctp_sendmsg+0x1528/0x2c10
[  406.914417][T16129]  ? __pfx_sctp_sendmsg+0x10/0x10
[  406.914448][T16129]  ? aa_sk_perm+0x6d5/0x900
[  406.914487][T16129]  ? __pfx_aa_sk_perm+0x10/0x10
[  406.914520][T16129]  ? sock_rps_record_flow+0x19/0x350
[  406.914545][T16129]  ? __pfx_inet_sendmsg+0x10/0x10
[  406.914573][T16129]  ? inet_sendmsg+0x2f4/0x370
[  406.914600][T16129]  ? __pfx_inet_sendmsg+0x10/0x10
[  406.914628][T16129]  __sys_sendto+0x5de/0x710
[  406.914656][T16129]  ? __pfx___sys_sendto+0x10/0x10
[  406.914680][T16129]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  406.914726][T16129]  ? __fget_files+0x3a0/0x420
[  406.914771][T16129]  ? ksys_write+0x242/0x270
[  406.914797][T16129]  ? __pfx_ksys_write+0x10/0x10
[  406.914828][T16129]  __x64_sys_sendto+0xde/0x100
[  406.914859][T16129]  do_syscall_64+0x14d/0xf80
[  406.914890][T16129]  ? trace_irq_disable+0x3b/0x150
[  406.914909][T16129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.914931][T16129]  ? clear_bhb_loop+0x40/0x90
[  406.914959][T16129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.914986][T16129] RIP: 0033:0x7f9922d9c819
[  406.915007][T16129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.915027][T16129] RSP: 002b:00007f9923cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  406.915050][T16129] RAX: ffffffffffffffda RBX: 00007f9923015fa0 RCX: 00007f9922d9c819
[  406.915067][T16129] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  406.915080][T16129] RBP: 00007f9923cbf090 R08: 0000200000000000 R09: 000000000000001c
[  406.915095][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.915107][T16129] R13: 00007f9923016038 R14: 00007f9923015fa0 R15: 00007fff3413d398
[  406.915142][T16129]  </TASK>
[  407.428603][T16131] lo speed is unknown, defaulting to 1000
[  407.690011][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2519'.
[  407.744148][T16140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2519'.
[  407.805029][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'.
[  407.992508][T16153] tipc: Trying to set illegal importance in message
[  408.048345][T16156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.483112][T16182] __nla_validate_parse: 3 callbacks suppressed
[  408.483135][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.499924][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.512222][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.538974][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.559706][T16185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.612430][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.653590][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.677610][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.691696][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'.
[  408.722043][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2533'.
[  409.005798][T16210] xt_hashlimit: size too large, truncated to 1048576
[  409.034897][T16212] xt_hashlimit: size too large, truncated to 1048576
[  409.164798][T16221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  409.172529][T16221] IPv6: NLM_F_CREATE should be set when creating new route
[  409.180014][T16221] IPv6: NLM_F_CREATE should be set when creating new route
[  409.281667][T16222] lo speed is unknown, defaulting to 1000
[  409.384228][T16226] netlink: 'syz.3.2543': attribute type 1 has an invalid length.
[  409.432471][T16226] 8021q: adding VLAN 0 to HW filter on device bond6
[  409.494005][T16226] bond6: (slave gretap3): making interface the new active one
[  409.504208][T16226] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  409.763634][T16240] lo speed is unknown, defaulting to 1000
[  411.803639][T16318] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000
[  411.961471][T16332] Cannot find set identified by id 65534 to match
[  413.213053][T16373] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  413.451292][T16382] netlink: 'syz.2.2572': attribute type 16 has an invalid length.
[  413.576802][T16386] syzkaller1: entered promiscuous mode
[  413.582366][T16386] syzkaller1: entered allmulticast mode
[  413.703599][T16389] lo speed is unknown, defaulting to 1000
[  413.767740][T16389] lo speed is unknown, defaulting to 1000
[  413.912372][T16389] lo speed is unknown, defaulting to 1000
[  413.936409][T16409] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  413.949561][T16389] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  414.019183][T16389] lo speed is unknown, defaulting to 1000
[  414.190205][T16427] __nla_validate_parse: 12 callbacks suppressed
[  414.190225][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'.
[  414.226753][T16389] lo speed is unknown, defaulting to 1000
[  414.232676][T16427] bond0: Unable to set up delay as MII monitoring is disabled
[  414.252887][T16389] lo speed is unknown, defaulting to 1000
[  414.271089][T16389] lo speed is unknown, defaulting to 1000
[  414.289898][T16389] lo speed is unknown, defaulting to 1000
[  414.336443][T16389] lo speed is unknown, defaulting to 1000
[  414.962847][T16456] lo speed is unknown, defaulting to 1000
[  414.988397][T16459] netlink: 'syz.2.2595': attribute type 11 has an invalid length.
[  415.005820][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  415.041254][T16461] FAULT_INJECTION: forcing a failure.
[  415.041254][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  415.062223][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.1.2596 Not tainted syzkaller #0 PREEMPT(full) 
[  415.062258][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  415.062274][T16461] Call Trace:
[  415.062283][T16461]  <TASK>
[  415.062294][T16461]  dump_stack_lvl+0xe8/0x150
[  415.062336][T16461]  should_fail_ex+0x412/0x560
[  415.062379][T16461]  _copy_from_iter+0x1d3/0x1670
[  415.062424][T16461]  ? rcu_is_watching+0x15/0xb0
[  415.062467][T16461]  ? __pfx__copy_from_iter+0x10/0x10
[  415.062515][T16461]  ? netlink_sendmsg+0x650/0xb40
[  415.062542][T16461]  ? skb_put+0x11b/0x210
[  415.062576][T16461]  netlink_sendmsg+0x6c0/0xb40
[  415.062615][T16461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  415.062647][T16461]  ? aa_sock_msg_perm+0xf1/0x1b0
[  415.062686][T16461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  415.062718][T16461]  ____sys_sendmsg+0x972/0x9f0
[  415.062763][T16461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  415.062807][T16461]  ? import_iovec+0x73/0xa0
[  415.062849][T16461]  ___sys_sendmsg+0x2a5/0x360
[  415.062890][T16461]  ? __pfx____sys_sendmsg+0x10/0x10
[  415.062966][T16461]  ? __fget_files+0x2a/0x420
[  415.063002][T16461]  ? __fget_files+0x3a0/0x420
[  415.063052][T16461]  __x64_sys_sendmsg+0x1bd/0x2a0
[  415.063089][T16461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  415.063133][T16461]  ? __pfx_ksys_write+0x10/0x10
[  415.063176][T16461]  do_syscall_64+0x14d/0xf80
[  415.063215][T16461]  ? trace_irq_disable+0x3b/0x150
[  415.063235][T16461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.063260][T16461]  ? clear_bhb_loop+0x40/0x90
[  415.063290][T16461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.063315][T16461] RIP: 0033:0x7f9922d9c819
[  415.063338][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.063360][T16461] RSP: 002b:00007f9923cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.063386][T16461] RAX: ffffffffffffffda RBX: 00007f9923015fa0 RCX: 00007f9922d9c819
[  415.063404][T16461] RDX: 0000000020004000 RSI: 0000200000001480 RDI: 0000000000000004
[  415.063421][T16461] RBP: 00007f9923cbf090 R08: 0000000000000000 R09: 0000000000000000
[  415.063436][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.063450][T16461] R13: 00007f9923016038 R14: 00007f9923015fa0 R15: 00007fff3413d398
[  415.063490][T16461]  </TASK>
[  415.391432][T16468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2598'.
[  415.667974][T16479] netlink: 'syz.0.2602': attribute type 89 has an invalid length.
[  415.829845][T16477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.948630][T16477] syzkaller0: entered promiscuous mode
[  415.964915][T16477] syzkaller0: entered allmulticast mode
[  416.031103][T16477] tipc: Resetting bearer <eth:syzkaller0>
[  416.056659][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2603'.
[  416.071950][T16476] tipc: Resetting bearer <eth:syzkaller0>
[  416.126074][T16476] tipc: Disabling bearer <eth:syzkaller0>
[  416.313353][T16509] netlink: 'syz.2.2609': attribute type 1 has an invalid length.
[  416.430636][T16518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2611'.
[  416.671479][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2614'.
[  417.116434][T16555] syzkaller0: entered promiscuous mode
[  417.122595][T16555] syzkaller0: entered allmulticast mode
[  417.147789][T16566] FAULT_INJECTION: forcing a failure.
[  417.147789][T16566] name failslab, interval 1, probability 0, space 0, times 0
[  417.184423][T16566] CPU: 1 UID: 0 PID: 16566 Comm: syz.1.2621 Not tainted syzkaller #0 PREEMPT(full) 
[  417.184459][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.184473][T16566] Call Trace:
[  417.184481][T16566]  <TASK>
[  417.184490][T16566]  dump_stack_lvl+0xe8/0x150
[  417.184525][T16566]  should_fail_ex+0x412/0x560
[  417.184563][T16566]  should_failslab+0xa8/0x100
[  417.184593][T16566]  __kmalloc_noprof+0xe8/0x760
[  417.184619][T16566]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  417.184657][T16566]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  417.184698][T16566]  genl_family_rcv_msg_doit+0xd9/0x330
[  417.184735][T16566]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  417.184773][T16566]  ? apparmor_capable+0x126/0x170
[  417.184799][T16566]  ? bpf_lsm_capable+0x9/0x20
[  417.184829][T16566]  ? security_capable+0x7e/0x2c0
[  417.184868][T16566]  genl_rcv_msg+0x61c/0x7a0
[  417.184906][T16566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  417.184943][T16566]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  417.184969][T16566]  ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10
[  417.184990][T16566]  ? __pfx_nl80211_post_doit+0x10/0x10
[  417.185016][T16566]  ? __lock_acquire+0x6b5/0x2cf0
[  417.185059][T16566]  netlink_rcv_skb+0x232/0x4b0
[  417.185085][T16566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  417.185116][T16566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  417.185160][T16566]  ? down_read+0x272/0x2e0
[  417.185179][T16566]  ? genl_rcv+0xd/0x40
[  417.185210][T16566]  genl_rcv+0x28/0x40
[  417.185236][T16566]  netlink_unicast+0x80f/0x9b0
[  417.185281][T16566]  ? __pfx_netlink_unicast+0x10/0x10
[  417.185318][T16566]  ? netlink_sendmsg+0x650/0xb40
[  417.185348][T16566]  netlink_sendmsg+0x813/0xb40
[  417.185383][T16566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.185411][T16566]  ? aa_sock_msg_perm+0xf1/0x1b0
[  417.185446][T16566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  417.185475][T16566]  ____sys_sendmsg+0x972/0x9f0
[  417.185515][T16566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  417.185554][T16566]  ? import_iovec+0x73/0xa0
[  417.185583][T16566]  ___sys_sendmsg+0x2a5/0x360
[  417.185617][T16566]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.185683][T16566]  ? __fget_files+0x2a/0x420
[  417.185715][T16566]  ? __fget_files+0x3a0/0x420
[  417.185759][T16566]  __x64_sys_sendmsg+0x1bd/0x2a0
[  417.185792][T16566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  417.185832][T16566]  ? __pfx_ksys_write+0x10/0x10
[  417.185868][T16566]  do_syscall_64+0x14d/0xf80
[  417.185897][T16566]  ? trace_irq_disable+0x3b/0x150
[  417.185916][T16566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.185944][T16566]  ? clear_bhb_loop+0x40/0x90
[  417.185970][T16566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.185991][T16566] RIP: 0033:0x7f9922d9c819
[  417.186010][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.186028][T16566] RSP: 002b:00007f9923cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.186051][T16566] RAX: ffffffffffffffda RBX: 00007f9923015fa0 RCX: 00007f9922d9c819
[  417.186066][T16566] RDX: 0000000020004000 RSI: 0000200000001480 RDI: 0000000000000004
[  417.186079][T16566] RBP: 00007f9923cbf090 R08: 0000000000000000 R09: 0000000000000000
[  417.186092][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.186104][T16566] R13: 00007f9923016038 R14: 00007f9923015fa0 R15: 00007fff3413d398
[  417.186136][T16566]  </TASK>
[  417.796606][T16583] lo speed is unknown, defaulting to 1000
[  418.059045][T16592] netlink: 'syz.4.2628': attribute type 1 has an invalid length.
[  418.077922][T16592] netlink: 'syz.4.2628': attribute type 7 has an invalid length.
[  418.086122][T16592] netlink: 'syz.4.2628': attribute type 8 has an invalid length.
[  418.094024][T16592] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2628'.
[  418.109913][T16592] NCSI netlink: No device for ifindex 1073545264
[  418.410129][T16609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  418.629369][T16622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2637'.
[  418.762902][T16625] netlink: 'syz.3.2639': attribute type 2 has an invalid length.
[  418.919090][T16634] lo speed is unknown, defaulting to 1000
[  419.021787][T16642] netlink: 'syz.1.2642': attribute type 1 has an invalid length.
[  419.052788][T16642] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  419.686399][T16666] openvswitch: netlink: IP tunnel dst address not specified
[  420.047312][T16685] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  420.061552][T16685] bond10 (unregistering): Released all slaves
[  420.088309][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2655'.
[  420.129363][T16691] pim6reg: entered allmulticast mode
[  420.147628][T16694] pim6reg: left allmulticast mode
[  420.155355][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  420.212589][T16688] netlink: 'syz.3.2655': attribute type 2 has an invalid length.
[  420.280666][T16688] l24): entered promiscuous mode
[  420.301157][T16706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.898921][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'.
[  420.924657][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'.
[  421.009894][T16740] netlink: 'syz.4.2668': attribute type 18 has an invalid length.
[  421.535867][T16758] bond9: entered promiscuous mode
[  421.562072][T16765] vcan1: entered promiscuous mode
[  421.569095][T16765] vcan1: entered allmulticast mode
[  421.576113][T16765] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  421.614640][T16765] bond9: (slave vcan1): Error -95 calling set_mac_address
[  424.317694][T16766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.574221][T16804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.701793][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'.
[  424.767700][T16814] Cannot find del_set index 0 as target
[  424.911416][T16822] lo speed is unknown, defaulting to 1000
[  424.931792][T16822] lo speed is unknown, defaulting to 1000
[  424.950257][T16822] lo speed is unknown, defaulting to 1000
[  424.980632][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2692'.
[  425.061417][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2695'.
[  425.121394][T16831] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  425.130699][T16831] pim6reg1: entered promiscuous mode
[  425.136355][T16831] pim6reg1: entered allmulticast mode
[  425.198777][T16838] xt_connbytes: Forcing CT accounting to be enabled
[  425.377869][T16822] infiniband syz0: set down
[  425.382843][T16822] infiniband syz0: added lo
[  425.402073][T13546] lo speed is unknown, defaulting to 1000
[  425.485457][T16822] RDS/IB: syz0: added
[  425.490503][T16822] smc: adding ib device syz0 with port count 1
[  425.499458][T16822] smc:    ib device syz0 port 1 has no pnetid
[  425.513638][ T5908] lo speed is unknown, defaulting to 1000
[  425.537092][T16822] lo speed is unknown, defaulting to 1000
[  425.758837][T16856] ip6_tunnel: syzkaller0 xmit: Local address not yet configured!
[  425.839449][T16862] netlink: 'syz.1.2700': attribute type 1 has an invalid length.
[  425.860526][T16862] netlink: 'syz.1.2700': attribute type 2 has an invalid length.
[  426.011059][T16862] syzkaller1: entered promiscuous mode
[  426.033725][T16862] syzkaller1: entered allmulticast mode
[  426.062737][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'.
[  426.118223][T16564] bond0: (slave 
3
0
): link status definitely down, disabling slave
[  426.155313][T16564] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  426.178783][T16564] bond0: (slave wlan1): link status definitely down, disabling slave
[  426.198809][T16564] bond0: now running without any active interface!
[  426.312341][T16822] lo speed is unknown, defaulting to 1000
[  426.732250][T16889] lo speed is unknown, defaulting to 1000
[  426.996733][T16889] lo speed is unknown, defaulting to 1000
[  427.186954][T16909] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2713'.
[  427.231115][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  427.249431][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  427.450508][T16920] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  427.500236][T16822] lo speed is unknown, defaulting to 1000
[  427.668999][T16929] netlink: 'syz.0.2718': attribute type 1 has an invalid length.
[  427.799407][T16929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2718'.
[  427.871601][T16926] lo speed is unknown, defaulting to 1000
[  427.896559][T16931] bond9: (slave geneve3): making interface the new active one
[  427.937240][T16931] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  427.968875][T16929] 8021q: adding VLAN 0 to HW filter on device bond9
[  427.987205][T16565] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  427.996784][T16565] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  428.010755][T16565] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  428.028128][T16565] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  428.046971][T16926] lo speed is unknown, defaulting to 1000
[  428.100456][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'.
[  428.333530][T16948] netlink: 'syz.3.2722': attribute type 1 has an invalid length.
[  428.347222][T16948] netlink: 'syz.3.2722': attribute type 2 has an invalid length.
[  428.456815][T16822] lo speed is unknown, defaulting to 1000
[  428.529929][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'.
[  428.618045][T16953] 8021q: adding VLAN 0 to HW filter on device bond10
[  428.852212][T16822] lo speed is unknown, defaulting to 1000
[  428.866199][T16962] netlink: 'syz.0.2725': attribute type 1 has an invalid length.
[  428.874271][T16962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2725'.
[  429.027633][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'.
[  429.044296][T16966] macvlan3: entered allmulticast mode
[  429.051175][T16966] hsr0: entered allmulticast mode
[  429.057507][T16966] ve: entered allmulticast mode
[  429.069036][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'.
[  429.088138][T16966] macvlan4: entered allmulticast mode
[  429.204116][T16822] lo speed is unknown, defaulting to 1000
[  429.344794][    C0] ip6_tunnel: syzkaller0 xmit: Local address not yet configured!
[  429.388842][T16946] lo speed is unknown, defaulting to 1000
[  429.961740][T16981] lo speed is unknown, defaulting to 1000
[  429.973029][T16981] lo speed is unknown, defaulting to 1000
[  429.988536][T16971] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.995389][T16971] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  430.026127][T16971] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  430.032175][T16971] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  430.052939][T16971] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  430.075625][T16971] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  430.113549][T16971] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  430.121932][T16971] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  430.441812][T16992] netlink: 'syz.1.2733': attribute type 1 has an invalid length.
[  430.716146][T17005] 8021q: adding VLAN 0 to HW filter on device bond11
[  430.832313][T17006] macvlan5: entered allmulticast mode
[  430.861696][T17006] bond11: (slave macvlan5): Enslaving as an active interface with an up link
[  430.954810][T17017] lo speed is unknown, defaulting to 1000
[  430.962627][T17017] lo speed is unknown, defaulting to 1000
[  431.192975][T17022] bond12: option updelay: invalid value (18446744072924056005)
[  431.308475][T17022] bond12: option updelay: allowed values 0 - 2147483647
[  431.319783][T17022] bond12 (unregistering): Released all slaves
[  431.733919][T17032] bond7: (slave bond_slave_1): Device is not our slave
[  431.804507][T17032] bond7: option active_slave: invalid value (bond_slave_1)
[  431.845963][T17032] bond7 (unregistering): Released all slaves
[  432.461599][T17065] __nla_validate_parse: 2 callbacks suppressed
[  432.461620][T17065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2753'.
[  432.469289][T17062] lo speed is unknown, defaulting to 1000
[  432.539719][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'.
[  432.573893][T17065] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2753'.
[  432.616354][T17065] netlink: 'syz.2.2753': attribute type 3 has an invalid length.
[  432.649373][T17062] lo speed is unknown, defaulting to 1000
[  432.655271][T17065] netlink: 'syz.2.2753': attribute type 2 has an invalid length.
[  432.663157][T17065] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2753'.
[  432.696232][T17065] netlink: 'syz.2.2753': attribute type 2 has an invalid length.
[  432.928516][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2754'.
[  432.972097][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'.
[  433.273260][T17088] lo speed is unknown, defaulting to 1000
[  433.353046][T17088] lo speed is unknown, defaulting to 1000
[  433.582720][T17100] ip6gre2: entered promiscuous mode
[  433.598405][T17100] ip6gre2: entered allmulticast mode
[  433.738097][T17108] openvswitch: netlink: Key type 2647 is out of range max 32
[  433.845716][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'.
[  433.905811][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'.
[  433.976701][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2763'.
[  434.022798][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'.
[  434.070077][T17129] lo: entered promiscuous mode
[  434.120638][T17129] tunl0: entered promiscuous mode
[  434.130843][T17129] gre0: entered promiscuous mode
[  434.139000][T17129] gretap0: entered promiscuous mode
[  434.147858][T17129] erspan0: entered promiscuous mode
[  434.153857][T17129] ip_vti0: entered promiscuous mode
[  434.162322][T17129] ip6_vti0: entered promiscuous mode
[  434.168915][T17129] ve: entered promiscuous mode
[  434.192146][T17129] ip6tnl0: entered promiscuous mode
[  434.198244][T17129] ip6gre0: entered promiscuous mode
[  434.204206][T17129] syz_tun: entered promiscuous mode
[  434.210844][T17129] ip6gretap0: entered promiscuous mode
[  434.217252][T17129] vcan0: entered promiscuous mode
[  434.240315][T17129] team0: entered promiscuous mode
[  434.265332][T17129] team_slave_0: entered promiscuous mode
[  434.271502][T17129] team_slave_1: entered promiscuous mode
[  434.294952][T17129] dummy0: entered promiscuous mode
[  434.301550][T17129] nlmon0: entered promiscuous mode
[  434.327614][T17129] caif0: entered promiscuous mode
[  434.332915][T17129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.440704][T17136] netlink: 'syz.2.2766': attribute type 29 has an invalid length.
[  434.501505][ T1140] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.513446][ T1140] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.531733][T13546] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.714770][T13546] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  435.155893][T17175] lo speed is unknown, defaulting to 1000
[  435.203574][T17175] lo speed is unknown, defaulting to 1000
[  435.594821][T13546] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  436.366884][T17204] lo speed is unknown, defaulting to 1000
[  436.502882][T17204] lo speed is unknown, defaulting to 1000
[  437.329407][T17229] netlink: 'syz.0.2791': attribute type 21 has an invalid length.
[  437.376542][T17229] netlink: 'syz.0.2791': attribute type 4 has an invalid length.
[  437.450370][T17228] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[  437.635278][   T30] audit: type=1800 audit(1774999467.697:11): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2793" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3017 res=0 errno=0
[  437.950290][T17251] netlink: 'syz.1.2797': attribute type 2 has an invalid length.
[  437.979070][T17251] __nla_validate_parse: 13 callbacks suppressed
[  437.979093][T17251] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2797'.
[  438.173595][T17259] lo speed is unknown, defaulting to 1000
[  438.197608][T17259] lo speed is unknown, defaulting to 1000
[  438.220502][T17261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2800'.
[  438.234944][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  438.544733][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  438.883035][T17271] netlink: 'syz.0.2802': attribute type 4 has an invalid length.
[  438.917370][T17271] netlink: 'syz.0.2802': attribute type 4 has an invalid length.
[  439.595059][T17288] bond10: (slave bond_slave_1): Device is not our slave
[  439.602216][T17288] bond10: option active_slave: invalid value (bond_slave_1)
[  439.628552][T17288] bond10 (unregistering): Released all slaves
[  440.562225][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'.
[  440.589546][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'.
[  440.612888][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2810'.
[  440.700259][T17326] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  440.797146][T17332] batadv2: entered promiscuous mode
[  440.878003][T17334] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2813'.
[  440.888890][T17334] netlink: 'syz.0.2813': attribute type 6 has an invalid length.
[  440.903338][T17334] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2813'.
[  441.059354][T17344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  441.066772][T17344] IPv6: NLM_F_CREATE should be set when creating new route
[  441.082409][T17344] lo: entered allmulticast mode
[  441.091688][T17344] tunl0: entered allmulticast mode
[  441.098898][T17344] gre0: entered allmulticast mode
[  441.126546][T17344] gretap0: entered allmulticast mode
[  441.137150][T17349] netlink: 'syz.1.2816': attribute type 30 has an invalid length.
[  441.148131][T17344] erspan0: entered allmulticast mode
[  441.177878][T17344] ip_vti0: entered allmulticast mode
[  441.196812][T17344] ip6_vti0: entered allmulticast mode
[  441.222246][T17344] sit0: entered allmulticast mode
[  441.261137][T17344] ip6tnl0: entered allmulticast mode
[  441.269231][T17344] ip6gre0: entered allmulticast mode
[  441.279327][T17344] ip6gretap0: entered allmulticast mode
[  441.297926][T17344] bridge0: entered allmulticast mode
[  441.306224][T17344] vcan0: entered allmulticast mode
[  441.313253][T17344] bond0: entered allmulticast mode
[  441.319856][T17344] 
: entered allmulticast mode
[  441.326121][T17344] bond_slave_1: entered allmulticast mode
[  441.332182][T17344] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  441.342578][T17344] team0: entered allmulticast mode
[  441.355751][T17344] team_slave_0: entered allmulticast mode
[  441.367594][T17344] team_slave_1: entered allmulticast mode
[  441.383712][T17344] veth3: entered allmulticast mode
[  441.395469][T17344] nlmon0: entered allmulticast mode
[  441.402357][T17344] caif0: entered allmulticast mode
[  441.413712][T17344] batadv0: entered allmulticast mode
[  441.422738][T17344] veth0: entered allmulticast mode
[  441.428262][T17344] veth1: entered allmulticast mode
[  441.441123][T17344] wg2: entered allmulticast mode
[  441.457453][T17344] veth1_to_bridge: entered allmulticast mode
[  441.463797][T17344] veth0_to_bond: entered allmulticast mode
[  441.500367][T17344] veth1_to_bond: entered allmulticast mode
[  441.545903][T17344] veth0_to_team: entered allmulticast mode
[  441.565777][T17344] veth1_to_team: entered allmulticast mode
[  441.572136][T17344] veth0_to_batadv: entered allmulticast mode
[  441.579691][T17344] batadv_slave_0: entered allmulticast mode
[  441.586586][T17344] xfrm0: entered allmulticast mode
[  441.592096][T17344] veth0_to_hsr: entered allmulticast mode
[  441.598854][T17344] hsr_slave_0: entered allmulticast mode
[  441.605441][T17344] veth1_to_hsr: entered allmulticast mode
[  441.611606][T17344] hsr_slave_1: entered allmulticast mode
[  441.620866][T17344] hsr0: entered allmulticast mode
[  441.626880][T17344] veth1_virt_wifi: entered allmulticast mode
[  441.633266][T17344] veth0_virt_wifi: entered allmulticast mode
[  441.642082][T17344] veth1_vlan: entered allmulticast mode
[  441.651808][T17344] ÿÿÿÿÿÿ: entered allmulticast mode
[  441.658058][T17344] vlan0: entered allmulticast mode
[  441.663579][T17344] vlan1: entered allmulticast mode
[  441.673025][T17344] macvlan0: entered allmulticast mode
[  441.679391][T17344] macvlan1: entered allmulticast mode
[  441.685681][T17344] ipvlan0: entered allmulticast mode
[  441.691842][T17344] ipvlan1: entered allmulticast mode
[  441.698200][T17344] veth1_macvtap: entered allmulticast mode
[  441.704945][T17344] veth0_macvtap: entered allmulticast mode
[  441.711371][T17344] macvtap0: entered allmulticast mode
[  441.717844][T17344] macsec0: entered allmulticast mode
[  441.723503][T17344] geneve0: entered allmulticast mode
[  441.729768][T17344] geneve1: entered allmulticast mode
[  441.736424][T17344] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  441.744207][T17344] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  441.753425][T17344] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  441.761534][T17344] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  441.770753][T17344] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  441.778424][T17344] veth2: entered allmulticast mode
[  441.784852][T17344] bridge1: entered allmulticast mode
[  441.790508][T17344] batadv1: entered allmulticast mode
[  441.797568][T17344] bond1: entered allmulticast mode
[  441.803248][T17344] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode
[  441.811068][T17344] vxlan0: entered allmulticast mode
[  441.817138][T17344] ip6gre1: entered allmulticast mode
[  441.822876][T17344] bond2: entered allmulticast mode
[  441.857857][T17344] vcan1: entered allmulticast mode
[  441.863448][T17344] mac80211_hwsim hwsim14 wlan3: entered allmulticast mode
[  441.871218][T17344] ipip0: entered allmulticast mode
[  441.877747][T17344] ip6erspan0: entered allmulticast mode
[  441.883712][T17344] bond3: entered allmulticast mode
[  441.889651][T17344] bond4: entered allmulticast mode
[  441.895299][T17344] ipvlan2: entered allmulticast mode
[  441.900883][T17344] sit1: entered allmulticast mode
[  441.906739][T17344] m1Ie5èÿá: entered allmulticast mode
[  441.912826][T17344] veth4: entered allmulticast mode
[  441.920579][T17344] veth5: entered allmulticast mode
[  441.926466][T17375] netlink: 'syz.2.2823': attribute type 10 has an invalid length.
[  441.927798][T17344] mac80211_hwsim hwsim20 wlan4: entered allmulticast mode
[  441.942516][T17344] ip6gretap1: entered allmulticast mode
[  441.950190][T17344] mac80211_hwsim hwsim21 wlan5: entered allmulticast mode
[  441.958434][T17344] ip6tnl1: entered allmulticast mode
[  441.966537][T17344] sit2: entered allmulticast mode
[  441.972838][T17344] gretap1: entered allmulticast mode
[  441.978916][T17344] bridge2: entered allmulticast mode
[  441.986587][T17344] vxlan1: entered allmulticast mode
[  441.992056][T17344] veth6: entered allmulticast mode
[  441.992494][T17376] netlink: 'syz.2.2823': attribute type 10 has an invalid length.
[  441.998930][T17344] veth7: entered allmulticast mode
[  442.011776][T17344] gtp0: entered allmulticast mode
[  442.018727][T17344] veth8: entered allmulticast mode
[  442.024109][T17344] veth9: entered allmulticast mode
[  442.031029][T17344] bridge3: entered allmulticast mode
[  442.036902][T17344] bond5: entered allmulticast mode
[  442.042792][T17344] vxlan2: entered allmulticast mode
[  442.051895][T17344] macsec1: entered allmulticast mode
[  442.057721][T17344] hsr1: entered allmulticast mode
[  442.065183][T17344] bond6: entered allmulticast mode
[  442.070785][T17344] bridge4: entered allmulticast mode
[  442.076822][T17344] dummy0.4: entered allmulticast mode
[  442.082704][T17344] bridge5: entered allmulticast mode
[  442.090380][T17344] bond7: entered allmulticast mode
[  442.095747][T17344] gretap2: entered allmulticast mode
[  442.101577][T17344] macsec2: entered allmulticast mode
[  442.110564][T17344] bridge6: entered allmulticast mode
[  442.119637][T17344] veth10: entered allmulticast mode
[  442.125344][T17344] veth11: entered allmulticast mode
[  442.130727][T17344] bond8: entered allmulticast mode
[  442.136037][T17344] ip6gretap2: entered allmulticast mode
[  442.143553][T17344] tipc: Resetting bearer <eth:syzkaller0>
[  442.151065][T17344] syzkaller0: left promiscuous mode
[  442.160321][T17344] bond9: entered allmulticast mode
[  442.167038][T17344] bridge7: entered allmulticast mode
[  442.172999][T17344] bridge8: entered allmulticast mode
[  442.181020][T17344] bridge9: entered allmulticast mode
[  442.188657][T17344] ip6tnl2: entered allmulticast mode
[  442.194097][T17344] bridge10: entered allmulticast mode
[  442.199872][T17344] bridge11: entered allmulticast mode
[  442.206341][T17344] veth0_to_hsr.3: entered allmulticast mode
[  442.212391][T17344] macvtap0.1: entered allmulticast mode
[  442.218636][T17344] geneve2: entered allmulticast mode
[  442.224317][T17344] ip6gre2: left promiscuous mode
[  442.232017][T17344] ip6_vti1: entered allmulticast mode
[  442.242231][T17346] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  442.252545][T17346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  442.262946][T17346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  442.327226][T17375] dummy0: left allmulticast mode
[  442.361476][T17375] dummy0: entered allmulticast mode
[  442.410326][T17375] team0: Port device dummy0 added
[  442.445729][T17376] dummy0: left allmulticast mode
[  442.480243][T17376] team0: Port device dummy0 removed
[  442.516433][T17376] dummy0: entered allmulticast mode
[  442.527218][T17376] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  442.538994][T16563] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.575698][T16563] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.678101][T16563] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.692123][T16563] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.846810][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2830'.
[  442.977003][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'.
[  443.099844][T17415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2833'.
[  443.142296][T17415] netlink: 'syz.3.2833': attribute type 1 has an invalid length.
[  443.223476][T17420] vti0: entered promiscuous mode
[  443.235574][T17420] vti0: entered allmulticast mode
[  443.279778][T17425] netlink: 'syz.0.2835': attribute type 11 has an invalid length.
[  443.288022][T17425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'.
[  443.289381][T17415] dummy0: left promiscuous mode
[  443.406412][T17415] team0: Port device dummy0 removed
[  443.525290][T17432] bond10 (unregistering): Released all slaves
[  443.553719][T17433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2835'.
[  443.573120][T17440] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2838'.
[  443.590938][T17440] macsec0: entered allmulticast mode
[  443.605503][T17440] veth1_macvtap: entered allmulticast mode
[  443.832443][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'.
[  443.968025][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.223064][T17469] netlink: 'syz.2.2846': attribute type 4 has an invalid length.
[  445.019682][T17490] geneve1: entered promiscuous mode
[  445.037332][T17490] geneve1: left allmulticast mode
[  445.159702][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  445.170788][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  445.180158][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  445.188400][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  445.196251][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  445.259397][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  445.281601][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  445.290221][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  445.301137][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  445.315958][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  445.417200][ T1140] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  445.442159][ T1140] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  445.450418][T13544] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  445.500941][T17491] lo speed is unknown, defaulting to 1000
[  445.580715][T17491] lo speed is unknown, defaulting to 1000
[  445.709893][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'.
[  445.831485][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'.
[  445.978252][T17519] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2858'.
[  446.224169][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2860'.
[  446.292438][T17528] lo speed is unknown, defaulting to 1000
[  446.304836][T13544] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  446.308969][T17528] lo speed is unknown, defaulting to 1000
[  446.331781][T17530] lo speed is unknown, defaulting to 1000
[  446.345835][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'.
[  446.385889][T13544] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  446.588819][T17491] chnl_net:caif_netlink_parms(): no params data found
[  446.679649][T17530] lo speed is unknown, defaulting to 1000
[  446.777067][T17542] ÿÿÿÿÿÿ: renamed from veth0_vlan
[  446.870144][T17491] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.881615][T17491] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.900237][T17491] bridge_slave_0: entered allmulticast mode
[  446.917111][T17491] bridge_slave_0: entered promiscuous mode
[  446.929895][T17491] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.937944][T17491] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.946482][T17491] bridge_slave_1: entered allmulticast mode
[  446.955588][T17491] bridge_slave_1: entered promiscuous mode
[  447.230260][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.282416][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.347525][ T5828] Bluetooth: hci5: command tx timeout
[  447.709478][T17561] erspan0: left allmulticast mode
[  447.715969][T17561] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  447.769332][T17491] team0: Port device team_slave_0 added
[  447.800901][T17491] team0: Port device team_slave_1 added
[  447.988166][T17568] lo speed is unknown, defaulting to 1000
[  447.993721][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.011829][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.078050][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.099690][T17568] lo speed is unknown, defaulting to 1000
[  448.132277][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.146527][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.182803][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.203586][T17575] __nla_validate_parse: 5 callbacks suppressed
[  448.203606][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  448.222834][T17575] bridge0: left allmulticast mode
[  448.451046][T17491] hsr_slave_0: entered promiscuous mode
[  448.474944][T17491] hsr_slave_1: entered promiscuous mode
[  448.481502][T17491] debugfs: 'hsr0' already exists in 'hsr'
[  448.488637][T17491] Cannot create hsr debugfs directory
[  448.822346][T17601] IPVS: set_ctl: invalid protocol: 41 172.20.20.57:20001
[  449.067445][T17604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2878'.
[  449.093601][T17491] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.176302][T17491] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.299411][T17491] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.344638][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  449.407347][T17491] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.434563][ T5828] Bluetooth: hci5: command tx timeout
[  449.535345][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'.
[  449.585479][T17629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.602281][T17626] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2885'.
[  449.635556][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2885'.
[  449.648302][T17626] netlink: 'syz.1.2885': attribute type 1 has an invalid length.
[  449.908230][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'.
[  450.430290][T17635] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  450.477431][T17491] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  450.568997][T17491] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  450.589679][T17491] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  450.631740][T17491] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  450.733034][T17648] lo speed is unknown, defaulting to 1000
[  450.741318][T17648] lo speed is unknown, defaulting to 1000
[  450.901347][T17491] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.940581][T17665] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2892'.
[  450.976405][T17491] 8021q: adding VLAN 0 to HW filter on device team0
[  451.015488][T16565] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.022711][T16565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.060535][T16563] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.067796][T16563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.472312][T17688] netlink: 91 bytes leftover after parsing attributes in process `syz.2.2897'.
[  451.485700][T17689] netlink: 91 bytes leftover after parsing attributes in process `syz.2.2897'.
[  451.507724][ T5828] Bluetooth: hci5: command tx timeout
[  451.669842][T17702] sctp: [Deprecated]: syz.0.2898 (pid 17702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  451.669842][T17702] Use struct sctp_sack_info instead
[  451.796464][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.940823][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2902'.
[  452.368789][T17491] veth0_vlan: entered promiscuous mode
[  452.382312][T17491] veth1_vlan: entered promiscuous mode
[  452.482490][T17491] veth0_macvtap: entered promiscuous mode
[  452.536767][T17491] veth1_macvtap: entered promiscuous mode
[  452.617495][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.675843][T17737] team0: left promiscuous mode
[  452.680700][T17737] team_slave_0: left promiscuous mode
[  452.695427][T17737] team_slave_1: left promiscuous mode
[  452.706412][T17737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  452.733558][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.780555][T17737] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.791808][T17737] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.844970][T16564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.895835][T16564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.907026][T16564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.921258][T16564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.949868][T17737] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.979369][T17737] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.059736][T17737] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.081895][T17737] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.159127][T17737] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.175132][T17737] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.217607][T16560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.227621][T17751] lo speed is unknown, defaulting to 1000
[  453.234955][T16560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.254058][T17751] lo speed is unknown, defaulting to 1000
[  453.351803][T16565] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  453.366555][T16565] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.378279][T16565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.388537][T16565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.493059][T16565] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  453.509947][T16565] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.585660][ T5828] Bluetooth: hci5: command tx timeout
[  453.601080][T16565] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  453.634969][T16565] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.760203][T16561] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  453.781878][T16561] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.013142][T17767] FAULT_INJECTION: forcing a failure.
[  454.013142][T17767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.095659][T17767] CPU: 0 UID: 0 PID: 17767 Comm: syz.3.2918 Not tainted syzkaller #0 PREEMPT(full) 
[  454.095687][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  454.095699][T17767] Call Trace:
[  454.095708][T17767]  <TASK>
[  454.095716][T17767]  dump_stack_lvl+0xe8/0x150
[  454.095748][T17767]  should_fail_ex+0x412/0x560
[  454.095782][T17767]  _copy_from_user+0x2d/0xb0
[  454.095805][T17767]  ___sys_recvmsg+0x175/0x590
[  454.095841][T17767]  ? __pfx____sys_recvmsg+0x10/0x10
[  454.095889][T17767]  ? __fget_files+0x3a0/0x420
[  454.095926][T17767]  do_recvmmsg+0x334/0x800
[  454.095960][T17767]  ? __pfx_do_recvmmsg+0x10/0x10
[  454.095996][T17767]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  454.096041][T17767]  __x64_sys_recvmmsg+0x198/0x250
[  454.096070][T17767]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  454.096108][T17767]  do_syscall_64+0x14d/0xf80
[  454.096136][T17767]  ? trace_irq_disable+0x3b/0x150
[  454.096153][T17767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.096173][T17767]  ? clear_bhb_loop+0x40/0x90
[  454.096198][T17767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.096218][T17767] RIP: 0033:0x7fcf42f9c819
[  454.096237][T17767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.096252][T17767] RSP: 002b:00007fcf43ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  454.096271][T17767] RAX: ffffffffffffffda RBX: 00007fcf43216090 RCX: 00007fcf42f9c819
[  454.096284][T17767] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004
[  454.096295][T17767] RBP: 00007fcf43ee5090 R08: 0000000000000000 R09: 0000000000000000
[  454.096305][T17767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.096316][T17767] R13: 00007fcf43216128 R14: 00007fcf43216090 R15: 00007ffedab9d618
[  454.096345][T17767]  </TASK>
[  454.099286][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  454.306575][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  454.331120][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  454.357412][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  454.366126][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  454.368262][T17772] __nla_validate_parse: 12 callbacks suppressed
[  454.368318][T17772] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2919'.
[  454.453513][T17773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2919'.
[  454.825565][T17769] lo speed is unknown, defaulting to 1000
[  454.843651][T17769] lo speed is unknown, defaulting to 1000
[  455.633761][T17810] netlink: 'syz.0.2926': attribute type 10 has an invalid length.
[  455.711072][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'.
[  455.736126][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'.
[  455.967910][T17823] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  456.203113][T17769] chnl_net:caif_netlink_parms(): no params data found
[  456.464822][ T5828] Bluetooth: hci4: command tx timeout
[  456.510471][T17769] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.536866][T17769] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.564986][T17769] bridge_slave_0: entered allmulticast mode
[  456.577990][T17769] bridge_slave_0: entered promiscuous mode
[  456.600439][T17769] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.625722][T17769] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.652393][T17769] bridge_slave_1: entered allmulticast mode
[  456.673079][T17769] bridge_slave_1: entered promiscuous mode
[  456.771114][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.787233][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.894991][T17769] team0: Port device team_slave_0 added
[  456.958205][T17769] team0: Port device team_slave_1 added
[  456.985693][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.057292][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.072147][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.148059][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.174973][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.209247][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.274811][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.397142][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2941'.
[  457.433010][T17769] hsr_slave_0: entered promiscuous mode
[  457.443699][T17769] hsr_slave_1: entered promiscuous mode
[  457.453154][T17769] debugfs: 'hsr0' already exists in 'hsr'
[  457.460921][T17769] Cannot create hsr debugfs directory
[  457.504667][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  458.057029][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2948'.
[  458.133126][T17901] openvswitch: netlink: Key 12 has unexpected len 16 expected 2
[  458.152605][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.481526][T17908] bridge0: port 3(syz_tun) entered blocking state
[  458.488395][T17908] bridge0: port 3(syz_tun) entered forwarding state
[  458.513041][T17908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  458.560880][ T5828] Bluetooth: hci4: command tx timeout
[  458.606828][T17913] ip6_vti0: left allmulticast mode
[  458.622933][T17913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  458.902601][T17769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  458.936461][T17769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  458.975396][T17769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  458.999902][T17769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  459.132143][T17941] netlink: 'syz.0.2957': attribute type 3 has an invalid length.
[  459.209913][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'.
[  459.230773][T17928] syzkaller0: entered promiscuous mode
[  459.238360][T17928] syzkaller0: entered allmulticast mode
[  459.270033][T17947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.276505][T17964] netlink: 'syz.3.2962': attribute type 5 has an invalid length.
[  460.405925][T16560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.624685][ T5828] Bluetooth: hci4: command tx timeout
[  461.461407][T17769] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.487856][T17769] 8021q: adding VLAN 0 to HW filter on device team0
[  461.515532][T16565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.556787][T16565] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.564000][T16565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.596838][T16565] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.604093][T16565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.995477][T17999] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  462.005916][   T30] audit: type=1804 audit(1774999492.047:12): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2970" name="/newroot/628/cgroup.controllers" dev="tmpfs" ino=3222 res=1 errno=0
[  462.364998][   T30] audit: type=1800 audit(1774999492.047:13): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2970" name="cgroup.controllers" dev="tmpfs" ino=3222 res=0 errno=0
[  462.663910][T16560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.678815][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'.
[  462.705118][ T5828] Bluetooth: hci4: command tx timeout
[  462.791814][T18019] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  462.848159][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.968217][T17769] veth0_vlan: entered promiscuous mode
[  462.999235][T17769] veth1_vlan: entered promiscuous mode
[  463.090955][T17769] veth0_macvtap: entered promiscuous mode
[  463.118768][T17769] veth1_macvtap: entered promiscuous mode
[  463.162420][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.268391][T16560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.273257][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.349549][T18039] team0 (unregistering): Failed to send port change of device C via netlink (err -105)
[  463.371793][T18039] team0 (unregistering): Port device C removed
[  463.387284][T18039] team0 (unregistering): Failed to send options change via netlink (err -105)
[  463.398733][T18039] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  463.410523][T18039] team0 (unregistering): Port device team_slave_1 removed
[  463.423695][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'.
[  463.453310][T16564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.496308][T16564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.508696][T16564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.535653][T16564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.716719][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.733270][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.798421][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.901491][T16565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.931462][T16565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.291859][T18075] x_tables: duplicate underflow at hook 2
[  464.360934][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2986'.
[  464.720180][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2993'.
[  464.754736][   T30] audit: type=1804 audit(1774999494.787:14): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2992" name="/newroot/541/memory.events" dev="tmpfs" ino=2792 res=1 errno=0
[  464.803180][   T30] audit: type=1800 audit(1774999494.787:15): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2992" name="memory.events" dev="tmpfs" ino=2792 res=0 errno=0
[  464.959851][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  464.969962][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  464.980724][T18106] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  464.985419][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  464.995855][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'.
[  465.007821][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.017380][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  465.035941][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  465.130316][T18106] 8021q: adding VLAN 0 to HW filter on device bond9
[  465.154887][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'.
[  465.165674][T18116] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2994'.
[  465.226376][T18112] bond9: (slave gretap2): making interface the new active one
[  465.236915][T18112] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  465.252797][T18114] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  465.264275][T18114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  465.296757][ T5825] bridge0: port 3(syz_tun) entered disabled state
[  465.322275][ T5825] syz_tun (unregistering): left allmulticast mode
[  465.334793][ T5825] syz_tun (unregistering): left promiscuous mode
[  465.341388][ T5825] bridge0: port 3(syz_tun) entered disabled state
[  465.449141][T18115] bond9 (unregistering): (slave gretap2): Releasing active interface
[  465.471151][T18115] bond9 (unregistering): Released all slaves
[  465.533235][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'.
[  465.628614][T16563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  465.745805][T18104] lo speed is unknown, defaulting to 1000
[  465.753455][T18104] lo speed is unknown, defaulting to 1000
[  465.806467][T16563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  466.022264][T18135] netlink: 'syz.2.3002': attribute type 9 has an invalid length.
[  466.030891][T18135] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3002'.
[  466.226101][T16565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.536808][T16563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  466.662475][T16563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  466.755114][T18146] netlink: 'syz.3.3005': attribute type 3 has an invalid length.
[  466.764884][T18146] netlink: 'syz.3.3005': attribute type 3 has an invalid length.
[  466.780924][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3005'.
[  466.832512][T18153] IPVS: Unknown mcast interface: hsr0
[  466.964881][T16560] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  467.077666][T16565] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  467.104946][ T5828] Bluetooth: hci2: command tx timeout
[  467.123070][T16565] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  467.186642][T18168] macvtap0: entered promiscuous mode
[  467.238596][T16564] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  467.310075][T16563] bridge_slave_1: left allmulticast mode
[  467.318866][T16563] bridge_slave_1: left promiscuous mode
[  467.331280][T16563] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.356489][T16564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.374052][T16563] bridge_slave_0: left allmulticast mode
[  467.382678][T16563] bridge_slave_0: left promiscuous mode
[  467.388780][T16563] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.423012][T16563] tipc: Resetting bearer <eth:ip6gre0>
[  467.461403][T18187] xt_hashlimit: size too large, truncated to 1048576
[  467.632382][T16563] tipc: Disabling bearer <eth:ip6gre0>
[  467.698153][T16563] ip6gretap0 (unregistering): left promiscuous mode
[  467.794150][T16563] ªªªªª» (unregistering): left promiscuous mode
[  467.857736][T16563] ve (unregistering): left promiscuous mode
[  467.866613][T16563] hsr0 (unregistering): left allmulticast mode
[  467.931393][T16563] bond9 (unregistering): (slave geneve3): Releasing active interface
[  467.971173][T16563] bridge0 (unregistering): left promiscuous mode
[  468.099033][T16563] bond6 (unregistering): (slave bridge3): Releasing active interface
[  468.152339][T16563] bridge4 (unregistering): left promiscuous mode
[  468.209428][T16563] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  468.218224][T16563] bridge5 (unregistering): left promiscuous mode
[  468.224858][T16563] bridge5 (unregistering): left allmulticast mode
[  468.309802][T16563] bond1 (unregistering): Released all slaves
[  468.324192][T16563] bond2 (unregistering): Released all slaves
[  468.338779][T16563] bond3 (unregistering): Released all slaves
[  468.354008][T16563] bond4 (unregistering): Released all slaves
[  468.386151][T16563] bond0 (unregistering): left promiscuous mode
[  468.401024][T16563] bond0 (unregistering): Released all slaves
[  468.421685][T16563] bond5 (unregistering): Released all slaves
[  468.436629][T16563] bond6 (unregistering): Released all slaves
[  468.453008][T16563] bond7 (unregistering): Released all slaves
[  468.473006][T16563] bond8 (unregistering): Released all slaves
[  468.489396][T16563] bond9 (unregistering): Released all slaves
[  468.503695][T16563] bond10 (unregistering): Released all slaves
[  468.522098][T16563] bond11 (unregistering): (slave macvlan5): Releasing backup interface
[  468.536784][T16563] bond11 (unregistering): Released all slaves
[  468.553382][T18104] chnl_net:caif_netlink_parms(): no params data found
[  468.583162][T18190] bridge_slave_1: left promiscuous mode
[  468.591541][T18190] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.626944][T18190] bridge_slave_0: left promiscuous mode
[  468.647071][T18190] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.720242][T18190] bond0: (slave bridge0): Releasing backup interface
[  468.865314][T16563] 5nè‹Ò: left promiscuous mode
[  469.003713][T16563] l24): left promiscuous mode
[  469.166140][T18213] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  469.167963][T16563] tipc: Disabling bearer <eth:veth1_to_bond>
[  469.185552][ T5828] Bluetooth: hci2: command tx timeout
[  469.201016][T16563] tipc: Left network mode
[  469.207040][T18205] syzkaller0: entered promiscuous mode
[  469.213098][T18205] syzkaller0: entered allmulticast mode
[  469.289165][T16563] IPVS: stopping backup sync thread 6274 ...
[  469.345429][T18104] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.370440][T18104] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.386282][T18104] bridge_slave_0: entered allmulticast mode
[  469.417058][T18104] bridge_slave_0: entered promiscuous mode
[  469.436476][T18104] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.443680][T18104] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.475407][T18104] bridge_slave_1: entered allmulticast mode
[  469.483565][T18104] bridge_slave_1: entered promiscuous mode
[  469.579999][T18241] __nla_validate_parse: 3 callbacks suppressed
[  469.580018][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'.
[  469.627364][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.771102][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.806500][T18250] netlink: 'syz.4.3027': attribute type 64 has an invalid length.
[  470.113294][T18104] team0: Port device team_slave_0 added
[  470.196194][T18104] team0: Port device team_slave_1 added
[  470.297609][T18104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.314687][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.373378][T18104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.527907][T18104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.550533][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.614175][T18104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.804160][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'.
[  470.832658][T18299] tipc: Started in network mode
[  470.845881][T18299] tipc: Node identity 82a0991f7059, cluster identity 4711
[  470.864292][T18299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.894163][T18307] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3040'.
[  470.904997][T18307] netlink: 'syz.3.3040': attribute type 2 has an invalid length.
[  470.920243][T18104] hsr_slave_0: entered promiscuous mode
[  470.942824][T18104] hsr_slave_1: entered promiscuous mode
[  470.952177][T18104] debugfs: 'hsr0' already exists in 'hsr'
[  470.958729][T18104] Cannot create hsr debugfs directory
[  470.977855][T18304] syzkaller0: entered promiscuous mode
[  470.990952][T18304] syzkaller0: entered allmulticast mode
[  471.022683][T18312] tipc: Resetting bearer <eth:syzkaller0>
[  471.181886][T18315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3042'.
[  471.227957][T18298] tipc: Resetting bearer <eth:syzkaller0>
[  471.251114][T18298] tipc: Disabling bearer <eth:syzkaller0>
[  471.264723][ T5828] Bluetooth: hci2: command tx timeout
[  471.393869][T16563] hsr_slave_0: left promiscuous mode
[  471.412753][T16563] hsr_slave_1: left promiscuous mode
[  471.421029][T16563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.446956][T16563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.533057][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'.
[  471.554735][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'.
[  471.748586][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  472.642144][T18358] bond2 (unregistering): Released all slaves
[  472.887498][T18104] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.097229][T18104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.113794][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'.
[  473.152379][T18387] openvswitch: netlink: Flow key attr not present in new flow.
[  473.261414][T18104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.344733][ T5828] Bluetooth: hci2: command tx timeout
[  473.375626][T18393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3056'.
[  473.504618][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  473.547631][T18104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.696987][T18397] veth11: entered promiscuous mode
[  473.728284][T16563] IPVS: stop unused estimator thread 0...
[  474.056116][T18104] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  474.096583][T18104] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.097945][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3060'.
[  474.165707][T18104] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  474.201855][T18104] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  474.470124][T18104] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.561464][T18104] 8021q: adding VLAN 0 to HW filter on device team0
[  474.608811][ T9808] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  474.631431][ T9808] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  474.654385][ T9808] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  474.673963][ T9808] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  474.697045][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.704284][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.751851][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.759085][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  474.890806][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'.
[  475.118303][T18475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.470642][T18104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.583484][T18498] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3080'.
[  475.631155][T18104] veth0_vlan: entered promiscuous mode
[  475.673259][T18104] veth1_vlan: entered promiscuous mode
[  475.770255][T18104] veth0_macvtap: entered promiscuous mode
[  475.802080][T18104] veth1_macvtap: entered promiscuous mode
[  475.875606][T18104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.920472][T18104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.971455][T16561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.016405][T16561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.097365][T16561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.133114][T16561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.387964][T18534] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3087'.
[  476.388419][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'.
[  476.651440][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'.
[  476.664841][T18540] tipc: Started in network mode
[  476.669933][T18540] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  476.685215][T18540] tipc: Enabled bearer <eth:vlan0>, priority 0
[  476.729012][ T9808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.757934][ T9808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.871968][T16561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.905812][T16561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.092113][T18553] lo speed is unknown, defaulting to 1000
[  477.100183][T18553] lo speed is unknown, defaulting to 1000
[  477.252349][T18565] netlink: 'syz.1.3093': attribute type 4 has an invalid length.
[  477.665927][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'.
[  477.708712][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'.
[  477.709821][T13546] tipc: Node number set to 10005162
[  477.751138][T18582] netlink: 'syz.2.3096': attribute type 15 has an invalid length.
[  477.862080][T18587] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.869746][T18587] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.090266][T18587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.120717][T18587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.721040][T16563] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.736842][T16563] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.834665][T18583] lo speed is unknown, defaulting to 1000
[  478.857057][T16563] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.884848][T16563] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.897631][T18583] lo speed is unknown, defaulting to 1000
[  480.381488][T18685] lo speed is unknown, defaulting to 1000
[  480.445512][T18685] lo speed is unknown, defaulting to 1000
[  480.720335][T18694] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.789786][T18694] team0: Port device bond1 added
[  480.920695][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  480.930095][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  480.938986][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  480.967300][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  480.977845][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  481.067282][T18708] lo speed is unknown, defaulting to 1000
[  481.420584][T18708] lo speed is unknown, defaulting to 1000
[  481.547850][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'.
[  481.572447][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'.
[  481.586855][T18726] netlink: 'syz.4.3125': attribute type 19 has an invalid length.
[  481.595242][T18726] netlink: 'syz.4.3125': attribute type 20 has an invalid length.
[  481.727832][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.767355][T16560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.906247][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.926516][T16560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.244944][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.255134][T16560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.300475][T18745] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  482.460645][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.477392][T16560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.832307][ T1140] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.842019][ T1140] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.992510][ T1140] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.024695][ T5828] Bluetooth: hci0: command tx timeout
[  483.035518][T16565] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  483.052412][T18708] chnl_net:caif_netlink_parms(): no params data found
[  483.098358][T16560] dvmrp1: left allmulticast mode
[  483.151735][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'.
[  483.204954][T18785] netlink: 'syz.0.3142': attribute type 1 has an invalid length.
[  483.240569][T18786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3139'.
[  483.250278][T18788] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3143'.
[  483.471910][T16560] batman_adv: batadv0: Removing interface: gretap2
[  483.492516][T18798] netlink: 'syz.1.3143': attribute type 11 has an invalid length.
[  483.503547][T18798] netlink: 'syz.1.3143': attribute type 23 has an invalid length.
[  483.512373][T18798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3143'.
[  483.587312][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3143'.
[  483.601350][T18792] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  483.603367][T18798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3143'.
[  483.619404][ T7436] IPVS: starting estimator thread 0...
[  483.688207][T16560] bond6 (unregistering): (slave gretap3): Releasing active interface
[  483.714648][T18799] IPVS: using max 29 ests per chain, 69600 per kthread
[  483.724578][T16560] bond2 (unregistering): (slave geneve2): Releasing active interface
[  483.768097][T16560] bridge1 (unregistering): left promiscuous mode
[  483.935969][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.946132][T16560] bond_slave_0: left promiscuous mode
[  483.953157][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.962824][T16560] bond_slave_1: left promiscuous mode
[  483.970069][T16560] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  483.981576][T16560] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  483.992978][T16560] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  484.002028][T16560] batadv0: left promiscuous mode
[  484.010614][T16560] bond0 (unregistering): Released all slaves
[  484.021769][T16560] bond1 (unregistering): Released all slaves
[  484.040033][T16560] bond2 (unregistering): Released all slaves
[  484.058519][T16560] bond3 (unregistering): Released all slaves
[  484.081412][T16560] bond4 (unregistering): Released all slaves
[  484.103866][T16560] bond5 (unregistering): Released all slaves
[  484.120354][T16560] bond6 (unregistering): Released all slaves
[  484.155778][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'.
[  484.185487][T18785] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  484.279945][T18798] gretap1: entered promiscuous mode
[  484.288535][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  484.402735][T16560] !: left promiscuous mode
[  484.478214][T16560] : left promiscuous mode
[  484.568358][T16560] m1Ie5nè‹Ò: left promiscuous mode
[  484.691063][T16560] l24): left promiscuous mode
[  484.766858][T18708] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.774076][T18708] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.803342][T18708] bridge_slave_0: entered allmulticast mode
[  484.830150][T18708] bridge_slave_0: entered promiscuous mode
[  484.841618][T18708] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.853945][T18708] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.874214][T18708] bridge_slave_1: entered allmulticast mode
[  484.896497][T18708] bridge_slave_1: entered promiscuous mode
[  484.916021][T16560] tipc: Left network mode
[  484.973213][T16560] IPVS: stopping backup sync thread 10442 ...
[  485.080278][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.105168][ T5828] Bluetooth: hci0: command tx timeout
[  485.233109][T18839] netlink: 'syz.4.3152': attribute type 13 has an invalid length.
[  485.261637][T18823] lo speed is unknown, defaulting to 1000
[  485.273885][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.435538][T13544] IPVS: starting estimator thread 0...
[  485.441159][T18825] IPVS: ip_vs_add_dest(): server weight less than zero
[  485.467516][T18823] lo speed is unknown, defaulting to 1000
[  485.604619][T18848] IPVS: using max 29 ests per chain, 69600 per kthread
[  485.677048][T18708] team0: Port device team_slave_0 added
[  485.737525][T18708] team0: Port device team_slave_1 added
[  485.875092][T18871] sctp: [Deprecated]: syz.2.3156 (pid 18871) Use of int in maxseg socket option.
[  485.875092][T18871] Use struct sctp_assoc_value instead
[  485.957645][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.981698][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.032483][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.066125][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.073147][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.110586][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.172569][T18869] lo speed is unknown, defaulting to 1000
[  486.240273][T18869] lo speed is unknown, defaulting to 1000
[  486.382812][T18708] hsr_slave_0: entered promiscuous mode
[  486.389408][T18857] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  486.397562][T18708] hsr_slave_1: entered promiscuous mode
[  486.406094][T18857] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  486.416350][T18708] debugfs: 'hsr0' already exists in 'hsr'
[  486.422166][T18708] Cannot create hsr debugfs directory
[  487.194356][ T5828] Bluetooth: hci0: command tx timeout
[  487.858182][T18924] __nla_validate_parse: 6 callbacks suppressed
[  487.858203][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'.
[  487.930368][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'.
[  487.940233][T18708] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.121238][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.162691][T16560] veth1_vlan: left allmulticast mode
[  488.194922][T16560] veth1_macvtap: left allmulticast mode
[  488.836188][T16560] team0 (unregistering): Port device team_slave_1 removed
[  488.864145][T16560] team0 (unregistering): Port device team_slave_0 removed
[  489.063959][T18708] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.191983][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'.
[  489.214471][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'.
[  489.233120][T18963] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3175'.
[  489.264784][ T5828] Bluetooth: hci0: command tx timeout
[  489.282345][T18970] netlink: 'syz.0.3174': attribute type 1 has an invalid length.
[  489.296149][T18708] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.323980][T18967] xt_limit: Overflow, try lower: 28676/2147483648
[  489.460070][T18708] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.527936][T18980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3177'.
[  489.606233][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'.
[  489.629822][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3178'.
[  489.891903][T16560] IPVS: stop unused estimator thread 0...
[  490.033296][T18999] lo speed is unknown, defaulting to 1000
[  490.068095][T18999] lo speed is unknown, defaulting to 1000
[  490.077360][T18708] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  490.138263][T18708] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  490.190367][T18708] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  490.241209][T18708] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  490.294327][T19012] pimreg: entered allmulticast mode
[  490.327227][T19015] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3184'.
[  490.366622][T19011] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3184'.
[  490.410002][T19025] macvtap0: entered promiscuous mode
[  490.418327][T19009] macvtap0: left promiscuous mode
[  490.427115][T19014] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode
[  490.435088][T19014] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode
[  490.621410][T19034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  490.762876][T18708] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.821123][T19040] vlan2: entered promiscuous mode
[  490.846006][T19040] vlan2: entered allmulticast mode
[  490.851214][T19040] hsr_slave_1: entered allmulticast mode
[  491.688081][T18708] 8021q: adding VLAN 0 to HW filter on device team0
[  491.736027][T19052] veth0_vlan: entered allmulticast mode
[  491.827474][T16563] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.834728][T16563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.886318][T16563] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.893522][T16563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.576452][T19096] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  492.630612][T19097] vlan4: entered allmulticast mode
[  492.653419][T19097] macvtap0: entered allmulticast mode
[  492.695694][T19097] veth0_macvtap: entered allmulticast mode
[  492.843400][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.998349][T18708] veth0_vlan: entered promiscuous mode
[  493.032907][T18708] veth1_vlan: entered promiscuous mode
[  493.210170][T18708] veth0_macvtap: entered promiscuous mode
[  493.312459][T18708] veth1_macvtap: entered promiscuous mode
[  493.526110][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.585947][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.601578][T19139] IPVS: length: 35 != 24
[  493.666593][T19133] __nla_validate_parse: 1 callbacks suppressed
[  493.666613][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'.
[  493.687489][T16565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.702948][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'.
[  493.726934][T16561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.738650][T16561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.768446][T16561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.985802][T19152] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  494.019165][T19146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3206'.
[  494.045568][T19149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.060051][T19146] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.067862][T19146] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.121995][T16563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.153011][T16563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.261816][T19162] : renamed from veth1_to_batadv (while UP)
[  494.289368][T16559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.301329][T16559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.335523][T19168] netlink: 'syz.2.3212': attribute type 6 has an invalid length.
[  494.432318][T19169] lo speed is unknown, defaulting to 1000
[  494.451350][T19169] lo speed is unknown, defaulting to 1000
[  494.768859][T19195] netlink: 'syz.3.3217': attribute type 3 has an invalid length.
[  494.776841][T19195] netlink: 'syz.3.3217': attribute type 1 has an invalid length.
[  494.792022][T19195] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3217'.
[  494.802803][T19195] NCSI netlink: No device for ifindex 813332851
[  494.909307][T19195] team0: entered promiscuous mode
[  494.920007][T19195] team_slave_0: entered promiscuous mode
[  494.934101][T19195] team_slave_1: entered promiscuous mode
[  494.942845][T19195] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  495.038822][T19205] netlink: 'syz.4.3219': attribute type 1 has an invalid length.
[  495.369534][T19200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.383483][T19200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.448523][T19200] veth0_macvtap: left allmulticast mode
[  495.500007][T19200] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode
[  495.507565][T19200] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode
[  495.516946][T19200] vlan2: left promiscuous mode
[  495.521926][T19200] vlan2: left allmulticast mode
[  495.530780][T19200] hsr_slave_1: left allmulticast mode
[  495.561728][T19215] gretap0: entered promiscuous mode
[  495.577390][T16564] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.587529][T16564] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.654073][T16564] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.664830][T16561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.271906][T19190] infiniband syz1: set down
[  496.281434][T19190] infiniband syz1: added bond_slave_1
[  496.293432][T19190] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  496.312559][T19190] infiniband syz1: Couldn't open port 1
[  496.368415][T19235] syzkaller1: entered promiscuous mode
[  496.374225][T19235] syzkaller1: entered allmulticast mode
[  496.447144][T19190] RDS/IB: syz1: added
[  496.451304][T19190] smc: adding ib device syz1 with port count 1
[  496.468917][T19190] smc:    ib device syz1 port 1 has no pnetid
[  496.675117][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'.
[  496.686141][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'.
[  496.873707][T19250] lo speed is unknown, defaulting to 1000
[  496.888260][T19251] netlink: 'syz.3.3230': attribute type 9 has an invalid length.
[  496.898156][T19251] netlink: 'syz.3.3230': attribute type 11 has an invalid length.
[  496.906069][T19250] lo speed is unknown, defaulting to 1000
[  496.925431][T19251] netlink: 'syz.3.3230': attribute type 12 has an invalid length.
[  496.937527][T19251] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3230'.
[  496.965712][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'.
[  497.031252][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'.
[  497.088728][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  497.119993][T19258] netlink: 'syz.4.3233': attribute type 2 has an invalid length.
[  497.138279][T19251] lo speed is unknown, defaulting to 1000
[  497.240503][T19263] syzkaller0: entered promiscuous mode
[  497.246338][T19263] syzkaller0: entered allmulticast mode
[  497.337328][T19265] netlink: 'syz.1.3235': attribute type 1 has an invalid length.
[  497.431417][T19265] 8021q: adding VLAN 0 to HW filter on device bond1
[  497.446428][T19251] lo speed is unknown, defaulting to 1000
[  497.601218][T19268] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  497.644969][T19268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  497.734778][T19271] 8021q: adding VLAN 0 to HW filter on device bond2
[  497.771879][T19270] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  497.805341][T19274] netlink: 'syz.4.3236': attribute type 1 has an invalid length.
[  497.846336][T16563] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  497.893703][T19268] lo speed is unknown, defaulting to 1000
[  497.957275][T19268] lo speed is unknown, defaulting to 1000
[  497.989548][T16565] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  498.592808][T19299] 8021q: adding VLAN 0 to HW filter on device bond3
[  498.638171][T19299] bond3: (slave veth3): Enslaving as an active interface with a down link
[  499.019233][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3249'.
[  499.512562][T19319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'.
[  499.521996][T19319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'.
[  499.945021][T19331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3253'.
[  500.030294][T19333] validate_nla: 2 callbacks suppressed
[  500.030314][T19333] netlink: 'syz.1.3254': attribute type 10 has an invalid length.
[  500.044757][T19333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3254'.
[  500.054016][T19333] team0: entered promiscuous mode
[  500.062473][T19333] team_slave_0: entered promiscuous mode
[  500.069792][T19333] team_slave_1: entered promiscuous mode
[  500.077364][T19333] team0: entered allmulticast mode
[  500.083380][T19333] team_slave_0: entered allmulticast mode
[  500.091014][T19333] team_slave_1: entered allmulticast mode
[  500.099140][T19333] 8021q: adding VLAN 0 to HW filter on device team0
[  500.107500][T19333] bridge0: port 3(team0) entered blocking state
[  500.114023][T19333] bridge0: port 3(team0) entered disabled state
[  500.688693][T19355] netlink: 'syz.1.3261': attribute type 1 has an invalid length.
[  501.065977][T19358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[  501.128611][T19357] 8021q: adding VLAN 0 to HW filter on device bond5
[  501.162487][T19357] bond4: (slave bond5): making interface the new active one
[  501.171815][T19357] bond4: (slave bond5): Enslaving as an active interface with an up link
[  501.301546][T19355] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  502.084091][T19385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3267'.
[  502.327135][T19392] lo speed is unknown, defaulting to 1000
[  502.346904][T19392] lo speed is unknown, defaulting to 1000
[  502.407844][T19398] netlink: 'syz.4.3270': attribute type 1 has an invalid length.
[  502.428327][T19398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3270'.
[  502.466597][T19403] netlink: 'syz.0.3269': attribute type 6 has an invalid length.
[  503.164009][T19411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.206053][T19414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.333089][T19419] lo speed is unknown, defaulting to 1000
[  503.406827][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  503.428631][T19411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.498576][T19419] lo speed is unknown, defaulting to 1000
[  503.548660][T19416] ip6t_srh: unknown srh match flags  4000
[  503.597183][T19411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.615022][T19413] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  503.816135][T19421] bond6: entered promiscuous mode
[  503.834174][T19421] 8021q: adding VLAN 0 to HW filter on device bond6
[  503.922619][T19426] 8021q: adding VLAN 0 to HW filter on device bond6
[  503.942274][T19426] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  503.969338][T19426] bond6: (slave vti0): Error -95 calling set_mac_address
[  504.120271][T19411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.224622][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  504.342006][T16565] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  504.402831][T16565] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  504.439875][T16561] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  504.488279][T16559] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  504.622335][T19444] bridge0: port 3(gretap0) entered blocking state
[  504.641301][T19444] bridge0: port 3(gretap0) entered disabled state
[  504.649271][T19444] gretap0: entered allmulticast mode
[  504.708839][T19444] gretap0: entered promiscuous mode
[  504.768383][T19449] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3282'.
[  505.095787][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  505.111916][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  505.123050][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  505.139351][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  505.148573][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.585617][T19451] lo speed is unknown, defaulting to 1000
[  505.735960][T19451] lo speed is unknown, defaulting to 1000
[  505.913722][T19461] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  506.068220][T19463] bridge1: entered promiscuous mode
[  506.073619][T19463] bridge1: entered allmulticast mode
[  506.087229][T19463] team0: Port device bridge1 added
[  506.286719][T19469] nbd: must specify a size in bytes for the device
[  506.560468][T19456] lo speed is unknown, defaulting to 1000
[  506.663743][T19456] lo speed is unknown, defaulting to 1000
[  507.036310][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'.
[  507.056314][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'.
[  507.075577][T19494] netlink: 'syz.0.3292': attribute type 18 has an invalid length.
[  507.187363][ T5828] Bluetooth: hci1: command tx timeout
[  507.424029][T19451] chnl_net:caif_netlink_parms(): no params data found
[  507.640133][T19507] netlink: 'syz.0.3293': attribute type 1 has an invalid length.
[  507.711242][T19507] 8021q: adding VLAN 0 to HW filter on device bond2
[  507.794751][T19514] netlink: 'syz.3.3295': attribute type 10 has an invalid length.
[  507.805691][T19511] bond2: (slave veth3): Enslaving as an active interface with a down link
[  507.853411][T19507] bond2: (slave veth5): Enslaving as an active interface with a down link
[  507.865368][T19514] vxcan1: entered promiscuous mode
[  507.870689][T19514] team0: Device vxcan1 is of different type
[  507.977794][T19511] bond2: entered allmulticast mode
[  508.037199][T19451] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.057771][T19451] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.069773][T19451] bridge_slave_0: entered allmulticast mode
[  508.090551][T19451] bridge_slave_0: entered promiscuous mode
[  508.112782][T19451] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.129343][T19451] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.143933][T19451] bridge_slave_1: entered allmulticast mode
[  508.163328][T19451] bridge_slave_1: entered promiscuous mode
[  508.295788][T19534] sctp: [Deprecated]: syz.1.3299 (pid 19534) Use of struct sctp_assoc_value in delayed_ack socket option.
[  508.295788][T19534] Use struct sctp_sack_info instead
[  508.358217][T19451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.397388][T19451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.517335][T19451] team0: Port device team_slave_0 added
[  508.543523][T19451] team0: Port device team_slave_1 added
[  508.585589][T19540] bond7: entered promiscuous mode
[  508.658818][T19451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.668855][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.695754][T19451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.710325][T19451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.717811][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.745880][T19451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.111135][T19451] hsr_slave_0: entered promiscuous mode
[  509.135850][T19451] hsr_slave_1: entered promiscuous mode
[  509.152806][T19451] debugfs: 'hsr0' already exists in 'hsr'
[  509.174562][T19451] Cannot create hsr debugfs directory
[  509.264825][ T5828] Bluetooth: hci1: command tx timeout
[  509.437702][T19576] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3311'.
[  509.871813][T19451] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.000944][T19599] tipc: Started in network mode
[  510.015961][T19599] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  510.025544][T19599] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  510.037777][T19451] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.135783][T19451] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.201656][T19451] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.447912][T19451] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  510.481437][T19451] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  510.509472][T19451] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  510.541419][T19451] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  510.699449][T19451] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.727233][T19451] 8021q: adding VLAN 0 to HW filter on device team0
[  510.751187][T16559] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.758465][T16559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.806384][T16559] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.813586][T16559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.344730][ T5828] Bluetooth: hci1: command tx timeout
[  511.360004][T19451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.369836][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'.
[  511.543433][T19451] veth0_vlan: entered promiscuous mode
[  511.577578][T19451] veth1_vlan: entered promiscuous mode
[  511.613454][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'.
[  511.673495][T19451] veth0_macvtap: entered promiscuous mode
[  511.697540][T19451] veth1_macvtap: entered promiscuous mode
[  511.753350][T19451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.793978][T19451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.822476][T16565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.846743][T16565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.894352][T19690] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.3361'.
[  511.907952][T16565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.010932][T16565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.168109][T19693] lo speed is unknown, defaulting to 1000
[  512.180398][T16557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.192934][T19693] lo speed is unknown, defaulting to 1000
[  512.220440][T16557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.326360][T16561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.344167][T16561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.450555][T19714] lo speed is unknown, defaulting to 1000
[  512.606752][T19709] xt_CT: No such helper "syz1"
[  512.771415][T19729] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3373'.
[  512.818587][T19729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.852246][T19714] lo speed is unknown, defaulting to 1000
[  512.911399][T19735] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  512.970715][T19734] lo speed is unknown, defaulting to 1000
[  513.229993][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'.
[  513.271202][T19748] netlink: 'syz.2.3378': attribute type 2 has an invalid length.
[  513.293000][T19748] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3378'.
[  513.424839][ T5828] Bluetooth: hci1: command tx timeout
[  513.454504][T19734] lo speed is unknown, defaulting to 1000
[  513.546670][T19753] veth0_virt_wifi: entered allmulticast mode
[  513.555252][T19753] veth0_virt_wifi: left allmulticast mode
[  513.747467][T19766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3383'.
[  513.761300][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'.
[  513.778793][T19766] macvlan2: entered promiscuous mode
[  513.784373][T19766] macvlan2: entered allmulticast mode
[  513.791218][T19766] veth1_to_batadv: entered allmulticast mode
[  514.409327][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'.
[  514.984026][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'.
[  515.288123][T19810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  515.295585][T19810] IPv6: NLM_F_CREATE should be set when creating new route
[  515.302917][T19810] IPv6: NLM_F_CREATE should be set when creating new route
[  515.310271][T19810] IPv6: NLM_F_CREATE should be set when creating new route
[  515.625142][   T30] audit: type=1800 audit(1774999545.677:16): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3397" name="memory.events" dev="tmpfs" ino=634 res=0 errno=0
[  516.242855][T19833] team1: entered promiscuous mode
[  516.256294][T19833] team1: entered allmulticast mode
[  516.262046][T19833] 8021q: adding VLAN 0 to HW filter on device team1
[  516.373247][T19839] team2: entered promiscuous mode
[  516.406902][T19839] team2: entered allmulticast mode
[  516.434303][T19839] 8021q: adding VLAN 0 to HW filter on device team2
[  516.471108][T19842] netlink: 'syz.4.3404': attribute type 12 has an invalid length.
[  516.480383][T19829] lo speed is unknown, defaulting to 1000
[  516.487223][T19842] __nla_validate_parse: 2 callbacks suppressed
[  516.487242][T19842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3404'.
[  516.527717][T19829] lo speed is unknown, defaulting to 1000
[  517.249045][T19862] syzkaller1: entered promiscuous mode
[  517.255195][T19862] syzkaller1: entered allmulticast mode
[  517.290092][T19871] bond0: (slave rose0): Enslaving as an active interface with an up link
[  517.595410][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'.
[  517.677900][T19883] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3415'.
[  518.036694][T19901] lo speed is unknown, defaulting to 1000
[  518.127231][T19901] lo speed is unknown, defaulting to 1000
[  518.147561][T19894] 
[  518.149969][T19894] ======================================================
[  518.157111][T19894] WARNING: possible circular locking dependency detected
[  518.164189][T19894] syzkaller #0 Not tainted
[  518.168643][T19894] ------------------------------------------------------
[  518.175692][T19894] syz.1.3420/19894 is trying to acquire lock:
[  518.181790][T19894] ffffffff8fd45318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  518.191174][T19894] 
[  518.191174][T19894] but task is already holding lock:
[  518.198567][T19894] ffff88801e6a7670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  518.208007][T19894] 
[  518.208007][T19894] which lock already depends on the new lock.
[  518.208007][T19894] 
[  518.218693][T19894] 
[  518.218693][T19894] the existing dependency chain (in reverse order) is:
[  518.227816][T19894] 
[  518.227816][T19894] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  518.235852][T19894]        _raw_spin_lock_bh+0x36/0x50
[  518.241172][T19894]        nr_rt_device_down+0x153/0x860
[  518.246655][T19894]        nr_device_event+0x137/0x150
[  518.251965][T19894]        notifier_call_chain+0x1be/0x400
[  518.257635][T19894]        netif_close_many+0x2ae/0x420
[  518.263035][T19894]        netif_close+0x160/0x220
[  518.268038][T19894]        dev_close+0x10a/0x220
[  518.272914][T19894]        bpq_device_event+0x377/0x6a0
[  518.278323][T19894]        notifier_call_chain+0x1be/0x400
[  518.283983][T19894]        netif_close_many+0x2ae/0x420
[  518.289372][T19894]        netif_close+0x160/0x220
[  518.294328][T19894]        dev_close+0x10a/0x220
[  518.299120][T19894]        bond_setup_by_slave+0x5f/0x3e0
[  518.304694][T19894]        bond_enslave+0x847/0x3c10
[  518.309848][T19894]        bond_do_ioctl+0x6ec/0x8d0
[  518.315000][T19894]        bond_siocdevprivate+0x19c/0x1f0
[  518.320693][T19894]        dev_ifsioc+0xba6/0x1280
[  518.325653][T19894]        dev_ioctl+0x84c/0x1150
[  518.330527][T19894]        sock_ioctl+0x75f/0x7f0
[  518.335409][T19894]        __se_sys_ioctl+0xfc/0x170
[  518.340545][T19894]        do_syscall_64+0x14d/0xf80
[  518.345713][T19894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.352154][T19894] 
[  518.352154][T19894] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  518.360008][T19894]        _raw_spin_lock_bh+0x36/0x50
[  518.365333][T19894]        nr_rt_device_down+0xbe/0x860
[  518.370732][T19894]        nr_device_event+0x137/0x150
[  518.376046][T19894]        notifier_call_chain+0x1be/0x400
[  518.381711][T19894]        netif_close_many+0x2ae/0x420
[  518.387106][T19894]        netif_close+0x160/0x220
[  518.392076][T19894]        dev_close+0x10a/0x220
[  518.396877][T19894]        bpq_device_event+0x377/0x6a0
[  518.402278][T19894]        notifier_call_chain+0x1be/0x400
[  518.407999][T19894]        netif_close_many+0x2ae/0x420
[  518.413392][T19894]        netif_close+0x160/0x220
[  518.418349][T19894]        dev_close+0x10a/0x220
[  518.423133][T19894]        bond_setup_by_slave+0x5f/0x3e0
[  518.428700][T19894]        bond_enslave+0x847/0x3c10
[  518.433863][T19894]        bond_do_ioctl+0x6ec/0x8d0
[  518.439030][T19894]        bond_siocdevprivate+0x19c/0x1f0
[  518.444705][T19894]        dev_ifsioc+0xba6/0x1280
[  518.449672][T19894]        dev_ioctl+0x84c/0x1150
[  518.454560][T19894]        sock_ioctl+0x75f/0x7f0
[  518.459457][T19894]        __se_sys_ioctl+0xfc/0x170
[  518.464600][T19894]        do_syscall_64+0x14d/0xf80
[  518.469744][T19894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.476192][T19894] 
[  518.476192][T19894] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  518.484125][T19894]        __lock_acquire+0x15a5/0x2cf0
[  518.489531][T19894]        lock_acquire+0xf0/0x2e0
[  518.494492][T19894]        _raw_spin_lock_bh+0x36/0x50
[  518.499812][T19894]        nr_remove_neigh+0x25/0xe0
[  518.504958][T19894]        nr_add_node+0x1e41/0x2630
[  518.510097][T19894]        nr_rt_ioctl+0xe59/0xf90
[  518.515067][T19894]        sock_do_ioctl+0x101/0x320
[  518.520233][T19894]        sock_ioctl+0x5c6/0x7f0
[  518.525123][T19894]        __se_sys_ioctl+0xfc/0x170
[  518.530264][T19894]        do_syscall_64+0x14d/0xf80
[  518.535406][T19894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.541843][T19894] 
[  518.541843][T19894] other info that might help us debug this:
[  518.541843][T19894] 
[  518.552097][T19894] Chain exists of:
[  518.552097][T19894]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  518.552097][T19894] 
[  518.565966][T19894]  Possible unsafe locking scenario:
[  518.565966][T19894] 
[  518.573438][T19894]        CPU0                    CPU1
[  518.578817][T19894]        ----                    ----
[  518.584206][T19894]   lock(&nr_node->node_lock);
[  518.588991][T19894]                                lock(nr_node_list_lock);
[  518.596120][T19894]                                lock(&nr_node->node_lock);
[  518.603423][T19894]   lock(nr_neigh_list_lock);
[  518.608123][T19894] 
[  518.608123][T19894]  *** DEADLOCK ***
[  518.608123][T19894] 
[  518.616369][T19894] 1 lock held by syz.1.3420/19894:
[  518.621500][T19894]  #0: ffff88801e6a7670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  518.631366][T19894] 
[  518.631366][T19894] stack backtrace:
[  518.637274][T19894] CPU: 0 UID: 0 PID: 19894 Comm: syz.1.3420 Not tainted syzkaller #0 PREEMPT(full) 
[  518.637296][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  518.637308][T19894] Call Trace:
[  518.637317][T19894]  <TASK>
[  518.637326][T19894]  dump_stack_lvl+0xe8/0x150
[  518.637354][T19894]  print_circular_bug+0x2e1/0x300
[  518.637385][T19894]  check_noncircular+0x12e/0x150
[  518.637415][T19894]  __lock_acquire+0x15a5/0x2cf0
[  518.637449][T19894]  lock_acquire+0xf0/0x2e0
[  518.637471][T19894]  ? nr_remove_neigh+0x25/0xe0
[  518.637494][T19894]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  518.637512][T19894]  ? nr_remove_neigh+0x25/0xe0
[  518.637532][T19894]  _raw_spin_lock_bh+0x36/0x50
[  518.637554][T19894]  ? nr_remove_neigh+0x25/0xe0
[  518.637574][T19894]  nr_remove_neigh+0x25/0xe0
[  518.637595][T19894]  nr_add_node+0x1e41/0x2630
[  518.637617][T19894]  ? dev_get_by_name+0x21/0x200
[  518.637642][T19894]  ? dev_get_by_name+0x21/0x200
[  518.637666][T19894]  ? nr_call_to_digi+0x136/0x1b0
[  518.637687][T19894]  nr_rt_ioctl+0xe59/0xf90
[  518.637710][T19894]  ? kasan_quarantine_put+0xbb/0x1f0
[  518.637728][T19894]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  518.637751][T19894]  ? apparmor_capable+0x126/0x170
[  518.637775][T19894]  ? capable+0x88/0xe0
[  518.637798][T19894]  ? nr_ioctl+0x1b1/0x3b0
[  518.637815][T19894]  sock_do_ioctl+0x101/0x320
[  518.637843][T19894]  ? __pfx_sock_do_ioctl+0x10/0x10
[  518.637875][T19894]  ? do_futex+0x395/0x420
[  518.637904][T19894]  sock_ioctl+0x5c6/0x7f0
[  518.637930][T19894]  ? __pfx_sock_ioctl+0x10/0x10
[  518.637956][T19894]  ? __fget_files+0x2a/0x420
[  518.637982][T19894]  ? __fget_files+0x3a0/0x420
[  518.638008][T19894]  ? __fget_files+0x2a/0x420
[  518.638035][T19894]  ? bpf_lsm_file_ioctl+0x9/0x20
[  518.638058][T19894]  ? __pfx_sock_ioctl+0x10/0x10
[  518.638083][T19894]  __se_sys_ioctl+0xfc/0x170
[  518.638116][T19894]  do_syscall_64+0x14d/0xf80
[  518.638141][T19894]  ? trace_irq_disable+0x3b/0x150
[  518.638155][T19894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.638172][T19894]  ? clear_bhb_loop+0x40/0x90
[  518.638191][T19894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.638208][T19894] RIP: 0033:0x7fea9199c819
[  518.638225][T19894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.638240][T19894] RSP: 002b:00007fea928a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  518.638258][T19894] RAX: ffffffffffffffda RBX: 00007fea91c15fa0 RCX: 00007fea9199c819
[  518.638271][T19894] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000009
[  518.638283][T19894] RBP: 00007fea91a32c91 R08: 0000000000000000 R09: 0000000000000000
[  518.638294][T19894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  518.638304][T19894] R13: 00007fea91c16038 R14: 00007fea91c15fa0 R15: 00007fffbaaddf28
[  518.638325][T19894]  </TASK>
[  519.407262][T16557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.444511][T16557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.679408][T16557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.715089][T16557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.810543][T16557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.821367][T16557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.894640][T16557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.905125][T16557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.021269][T16563] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  520.078575][T16565] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  520.128658][T16559] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  520.148991][T16565] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  520.163500][T16557] bridge_slave_1: left allmulticast mode
[  520.170121][T16557] bridge_slave_1: left promiscuous mode
[  520.176820][T16557] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.192851][T16557] bridge_slave_0: left allmulticast mode
[  520.199235][T16557] bridge_slave_0: left promiscuous mode
[  520.206635][T16557] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.468009][T16557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.478580][T16557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.488825][T16557] bond0 (unregistering): Released all slaves
[  520.497600][T16557] bond1 (unregistering): Released all slaves
[  520.575837][T16557] tipc: Disabling bearer <eth:vlan0>
[  520.615100][T16557] tipc: Left network mode
[  521.082902][T16557] hsr_slave_0: left promiscuous mode
[  521.089056][T16557] hsr_slave_1: left promiscuous mode
[  521.095462][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.102895][T16557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.116400][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.123845][T16557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.136081][T16557] veth1_macvtap: left promiscuous mode
[  521.141639][T16557] veth0_macvtap: left promiscuous mode
[  521.147618][T16557] veth1_vlan: left promiscuous mode
[  521.152924][T16557] veth0_vlan: left promiscuous mode
[  521.301811][T16557] team0 (unregistering): Port device team_slave_1 removed
[  521.332057][T16557] team0 (unregistering): Port device team_slave_0 removed
[  522.043936][T16564] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  522.059560][T16564] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  522.083140][T16564] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  522.104587][T16564] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  522.116874][T16557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.153284][T16557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.223138][T16557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.276842][T16557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.324211][T16564] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  522.350722][T16561] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  522.393003][T16557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.411358][T16561] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  522.420253][T16561] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  522.460558][T16557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.530677][T16557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.562281][T16557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.652603][T16559] netdevsim netdevsim3 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  522.676639][T16559] netdevsim netdevsim3 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  522.698210][T16564] netdevsim netdevsim3 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  522.727522][T16564] netdevsim netdevsim3 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  522.737009][T16557] gretap0: left allmulticast mode
[  522.742094][T16557] gretap0: left promiscuous mode
[  522.748975][T16557] bridge0: port 3(gretap0) entered disabled state
[  522.757941][T16557] bridge_slave_1: left allmulticast mode
[  522.763642][T16557] bridge_slave_1: left promiscuous mode
[  522.770209][T16557] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.779445][T16557] bridge_slave_0: left allmulticast mode
[  522.787483][T16557] bridge_slave_0: left promiscuous mode
[  522.793223][T16557] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.807301][T16557] bridge_slave_1: left allmulticast mode
[  522.813177][T16557] bridge_slave_1: left promiscuous mode
[  522.819548][T16557] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.828612][T16557] bridge_slave_0: left allmulticast mode
[  522.834302][T16557] bridge_slave_0: left promiscuous mode
[  522.842936][T16557] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.856053][T16557] bridge_slave_1: left allmulticast mode
[  522.861772][T16557] bridge_slave_1: left promiscuous mode
[  522.867955][T16557] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.877218][T16557] bridge_slave_0: left allmulticast mode
[  522.882910][T16557] bridge_slave_0: left promiscuous mode
[  522.889396][T16557] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.099379][T16557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.109454][T16557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.119397][T16557] bond0 (unregistering): Released all slaves
[  523.127941][T16557] team0: Port device bond1 removed
[  523.133767][T16557] bond1 (unregistering): Released all slaves
[  523.146403][T16557] bond2 (unregistering): (slave veth3): Releasing active interface
[  523.156588][T16557] bond2 (unregistering): (slave veth5): Releasing active interface
[  523.166170][T16557] bond2 (unregistering): Released all slaves
[  523.258539][T16557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.269694][T16557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.279946][T16557] bond0 (unregistering): Released all slaves
[  523.338912][T16557] team0: Port device bridge1 removed
[  523.397181][T16557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.407523][T16557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.418510][T16557] bond0 (unregistering): Released all slaves
[  523.519725][T16557] tipc: Left network mode
[  524.548857][T16557] hsr_slave_0: left promiscuous mode
[  524.557272][T16557] hsr_slave_1: left promiscuous mode
[  524.563203][T16557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.571276][T16557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.580586][T16557] hsr_slave_0: left promiscuous mode
[  524.586867][T16557] hsr_slave_1: left promiscuous mode
[  524.592796][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.601416][T16557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.609633][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.617650][T16557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.634332][T16557] hsr_slave_0: left promiscuous mode
[  524.640533][T16557] hsr_slave_1: left promiscuous mode
[  524.646769][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.654192][T16557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.662374][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.670118][T16557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.683522][T16557] veth1_macvtap: left promiscuous mode
[  524.689410][T16557] veth0_macvtap: left promiscuous mode
[  524.695810][T16557] veth1_macvtap: left promiscuous mode
[  524.701296][T16557] veth0_macvtap: left promiscuous mode
[  524.707546][T16557] veth1_vlan: left promiscuous mode
[  524.712903][T16557] veth0_vlan: left promiscuous mode
[  524.892497][T16557] team0 (unregistering): Port device team_slave_1 removed
[  524.903735][T16557] team0 (unregistering): Port device team_slave_0 removed
[  525.010584][T16557] team0 (unregistering): Port device team_slave_1 removed
[  525.023331][T16557] team0 (unregistering): Port device team_slave_0 removed
[  525.139267][T16557] team_slave_1 (unregistering): left promiscuous mode
[  525.146823][T16557] team0 (unregistering): Port device team_slave_1 removed
[  525.158394][T16557] team_slave_0 (unregistering): left promiscuous mode
[  525.166649][T16557] team0 (unregistering): Port device team_slave_0 removed
[  525.823283][T16557] IPVS: stop unused estimator thread 0...