last executing test programs:

15.603494081s ago: executing program 3 (id=7766):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="0a720c1c046e67d67640895e03e368fbe59ce673ac5fdfe24f24290ca91b2f7b2a42cc72d0f43b92dbb6ab4988b9711cd9b59e1c5ef370a08f8a070b37d53742b7d729b8510f36b658cb70e0a174b056df5aea4cfc19ad1c9daebfb119f7abe8d2ea46030c295663f0da3e4c3d3cec548b566b2f59a1321c1e533999b27ad4700e00df0e0c2171e133f80d5e047823033275aecd856a", @ANYRES16=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4000841)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2)
unshare(0x20000400)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r7, 0x0, 0x0)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]})
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000540)=0xfff)
write$ppp(r4, &(0x7f0000000280)="1e08bc018558d82f", 0x8)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4003050, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x7, 0xfffffffa}, 0x28)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

11.213137382s ago: executing program 3 (id=7801):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048080}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000200))

11.091321159s ago: executing program 3 (id=7803):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000012c0)={<r1=>r0, &(0x7f00000011c0)='\x00', 0x8000, &(0x7f0000001200)={@align=0x1ff, {0x8, 0x0, 0xfffff1d7, 0x56}}, 0x7fff, &(0x7f0000001240), &(0x7f0000001280)=0x9})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001300)={&(0x7f0000000080)="ea2f4444590bcad56779be43ee81ff8e8787fbbb8a19716836e090824719873dd5b6685bd0e53af94d5ab1bc430cf3b917a6ad281cd1d27f5b6cf41256bdc76ec13e610b72e50354d75e739ca1af873d996e83d86f7537ed9478d4bb2ac23e1a112e7106de2dbf0eb6ab8a2f33dc9ea06daefef92c31bcfe01ce9d4f20cc4131601d6a1f38365d762f56d4", &(0x7f0000000140)=""/38, &(0x7f0000000180)="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", &(0x7f0000001180)="1930951bfeb895c29a043428f3a97b50d80b35ad3a95bc3e19868bce1856d1db49f80e0d8a2f2608d342d8bde9ded93b5c1d099d5aa511edea2507d0d8fe8a0b", 0xd1, r1, 0x4}, 0x38) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @random="fcffa58492d0", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
unshare(0x6020400) (async)
r3 = gettid()
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00')
unshare(0x2020000) (async)
close(r4)

10.973482923s ago: executing program 3 (id=7805):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)=""/151, &(0x7f00000000c0)=0x97)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)
r3 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @remote}, {0x1}, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}, 'netdevsim0\x00'})
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)=r4}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000004c0)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x7, "a063e6652baf1d"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000014c0)={{r6, 0x0, 0x5, 0x8000000000000001, 0x1, 0x20, 0x8, 0x3, 0x5, 0x400, 0x9e97, 0x3, 0xb, 0x5f, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write(r2, &(0x7f0000001580)="894bac3b69105f176df5c4f03054d308f6831fee3f504ae8654a51cdf2206ade3a12809ecaa72bcb6f6f77f54511f21e2b555942ff6e81be0cd711f622476ced46368f11c23ae1d7bbe81c77f395fbc42988bea5ad3ce69f883bbe172a46febc4cb9101baa1b21e38252f66397", 0x6d)
getsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000001600), &(0x7f0000001640)=0x4)
r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0)=0x10)
r8 = accept4$phonet_pipe(r7, 0x0, &(0x7f0000001700), 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r9)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x94, r11, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x719}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044005}, 0x24000080)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000010)
r13 = epoll_create(0xf)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001a80)=<r14=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001b40)={{r13}, r14, 0x6, @inherit={0x50, &(0x7f0000001ac0)={0x1, 0x1, 0x6, 0xfffffffffffff000, {0x17, 0x1, 0xffffffffffffffff, 0xfff, 0xb0000}, [0x9]}}, @subvolid=0x1})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002bc0)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000002cc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x54, r15, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x39}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x10)

10.686975306s ago: executing program 3 (id=7808):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0xf5cfd0ed62d9e836, 0xffffffffffffffff, 0x2000)

10.540804772s ago: executing program 3 (id=7809):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000), 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={r7, 0x5}, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
unshare(0x28000600)
r8 = socket(0x10, 0x3, 0x0)
close(0x3)
socket(0x10, 0x1, 0x20000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
write(r8, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0)
write$tun(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="08000800065ae3dbff001400000045320014006500000d6c907864010102ffffffff"], 0x22)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000000051229dc9", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.584196594s ago: executing program 4 (id=7880):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.508400612s ago: executing program 0 (id=7882):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8)
r3 = socket(0x5, 0x800, 0x1bc83)
r4 = socket(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00e50008000000000100a56b05000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="00400000ff5c00000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800f7ffb7042000000000000000950000000000000000000000000067246d1a9ea4a6e78ee5e340e1f398f8bc817915a2149d8c8ce19f6f0735c49021c7572b7267cac43e5b2f20f1cb0a18cba836333dbf"], &(0x7f00000020c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r9 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'})
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x1a, {0x2, 0x0, @broadcast}, 'ipvlan1\x00'})
setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f00000000c0)="c4019146490981f7282fc6555ae7fdb569bc2bcb41ff562525a096faca991e082048974342844f709220390f5d6f3c5b2463d3ac66d1a0e039a2bc801a826f5215c0b19241d9506557d5fc6bb6171d4647af61bfef86", 0x56)
r10 = socket(0x2, 0x3, 0xff)
sendmsg$rds(r10, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x48800)
r11 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x40000000, @loopback, 0x2}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x6, 0x0, 0x0)

2.491185151s ago: executing program 4 (id=7883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x5, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x83, 0x1}], "84"}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28)
socket$kcm(0x2, 0xa, 0x2)
writev(r3, 0x0, 0x0)
r6 = socket(0x2, 0xa, 0x300)
ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000300)={'ip6gretap0\x00', {0x2, 0x0, @private}})

2.047317476s ago: executing program 4 (id=7888):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="0500000003000000000000", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x38}, 0x20}, 0x0)

1.833719229s ago: executing program 4 (id=7889):
r0 = epoll_create1(0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600156f27bd7000f6dfdf270a008000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000280)='0', 0x1)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r4, @ANYBLOB="05000000000000000000000000000000a81efc243659b986a58d15d1c8"], 0x2c}}, 0x80)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000229bd7000fbdbdf250200000008002c000500000005002d000100000008003b00ff7f0000080039000400000005002f0000000000050033000100000008003a00ffffffff05002a0000000000"], 0x54}}, 0x2404c053)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x22000, 0x0)

1.752429869s ago: executing program 0 (id=7890):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvfrom(r2, &(0x7f0000000380)=""/192, 0xc0, 0x10000, &(0x7f0000000440)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80)
setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "1057ff3eee1079dd", "a1615d91dcab3eddacf6c9ebaf5244f2", "46c0f122", "350d2e2ef439d63b"}, 0x28)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r8 = socket(0x14, 0x2, 0x4)
pipe(0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x61f0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000003e80), 0x0, 0x0)
shutdown(r9, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

1.670396134s ago: executing program 1 (id=7891):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x32, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.55289805s ago: executing program 0 (id=7892):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0xe})
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000200)={'wg1\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x1, [0x200]}})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a0800100042c04001400128009000100626f6e640000000004000280080020"], 0x3c}}, 0x24)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
close(0x3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}}, 0x4000010)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
epoll_create1(0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008000100", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x248df5b63620896)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1.480332664s ago: executing program 1 (id=7893):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x80)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000200)=""/110, 0x6e}], 0x2}, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r5, 0x0)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x15015000)
mmap(&(0x7f0000611000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007a000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)

1.469998618s ago: executing program 2 (id=7894):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x6, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r3)
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}]}, 0x64}}, 0x4)

1.357764062s ago: executing program 1 (id=7895):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
write(r0, 0x0, 0x0)

1.215450932s ago: executing program 0 (id=7896):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x700001b, 0x148, 0x128, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x4, 0x6, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, [@inet]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff74)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x4, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.181433691s ago: executing program 0 (id=7897):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10)
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000000)=0x41)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x4}, 0x10}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r11=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180))
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58}, 0x20040044)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9f}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000000080)={r7, 0x0, 0x4, 0x3, 0x3e1, 0x8, [0x9f9, 0x80, 0x3, 0x0, 0x2, 0x1]})
socket$l2tp6(0xa, 0x2, 0x73)

1.098590828s ago: executing program 2 (id=7898):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a7000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10)
write(r4, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)

908.384372ms ago: executing program 1 (id=7899):
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000480)) (async)
pipe(&(0x7f0000000480))
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}}, 0xc010) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}}, 0xc010)
socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x803, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

906.591522ms ago: executing program 2 (id=7900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006a00010026bd7000fddbdf2554efad38b8193d6aa40af600000000000011000900"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

814.854257ms ago: executing program 2 (id=7901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x6, 0xa}}}, 0x24}}, 0x0)

713.648872ms ago: executing program 1 (id=7902):
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
recvfrom$inet(r0, &(0x7f00000000c0)=""/231, 0xe7, 0x2000, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)="4c5aa198", 0x4}, {&(0x7f00000002c0)="942c2d0c6467f7db5330c97559f8341a9686424d56bf453eaa84550c7a3ab947b346f9e679b30ba07cb2341fac2a4c0eed2557acf4cb8fb38dd0a0d6f92701c3a3e022fc53b4423ff6a7dfd90761cff1e1477f48b559c4355eb84d6aceced2ee77660b4457905a107ea041a3bba1859cdd41cd663010348b41e5f7699cc081a1a1f4a37b1e77fc0e342254e7a23a48c5d6cc69cc88c52faba8671493", 0x9c}, {&(0x7f00000004c0)="b074c91c4f6ac248b63ba546400e27c651d3117f8342321d0f278a43527d31ad4c82714c7e0e46b8cb3f2fdcc5c5c5e70b302692171fc71d51a5bc3a65e00cbbaa3113c0399a30e77f534a60b71c49fc5923ce4f4e53f7d49cebaf775917ace4bb69db7f6dfa5d5e1103ed8cf6290a22dd01725c78177b8c524595712a26c9e0aa66c7d89495d486ace776e3631199a3deda1339cbef00131bb97f931d678cfe133a40e2a596086a6303c620", 0xac}, {&(0x7f0000000580)="dad4bc6a023b8034901d4a403723ce6cba42b008e369c8fd90053f184980691363507372fd7268bc21412c7928aec68b5bd765b6b61af39f47ebb223fc3a5cb80a2eb07c47ff61bfe3264f3ed981fc78c8814e2606d230476200b8b8199e3fdbcb30c39e4a64d22e8a74c20605e8735d6129cbb81f511b70dd6732c46154e540b553cc106466815f422b64d61b9267172a15165e83658081f2a96525e80a3563221015845f88185913955f17023fa91049f9d5fddc2a54883153ad9e4087b0648898da6984d838278441aa", 0xcb}, {&(0x7f0000000680)="240ee9f343a0644e6f4dc33520a7e0a125f31f3de1e309b5590827d7970211a4a0bbce2f79c26a3d770cbfe8457a459ba3763c3aa91360eb04e08b6faf5e67b9d518686e01ea7666a27710e44d13b6901b028650c9f3563a290e3b3b8a9525c4bb225b17976c597726745d9ef46098d4d8129948fcbd63abe58352d5bc53f9f6615e7cae0fd2799bb4a3fedace2e18e0e2cc69a9c9ce6f", 0x97}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="f4c8b5e9aed463bd57b1228de957577ec3f9a93af38f539074e2930042625e4115a8a0d6a80134511a9994df95449136f59686f642fb475af364cd5260574831e926bc396caf60fa282257", 0x4b}], 0x7, 0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000002010400000000000000000a100000040001803c0003800c0002800500014d060000002c000180140003002001000000000000000000000000000014000400ff0100000000000000000000000000013c0002800c00028005000100860000002c00018014000300ff02000000000000000000000000000114000400"], 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
socket(0x1e, 0x1, 0x0) (async)
listen(r0, 0x0) (async)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) (async)
recvfrom$inet(r0, &(0x7f00000000c0)=""/231, 0xe7, 0x2000, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)="4c5aa198", 0x4}, {&(0x7f00000002c0)="942c2d0c6467f7db5330c97559f8341a9686424d56bf453eaa84550c7a3ab947b346f9e679b30ba07cb2341fac2a4c0eed2557acf4cb8fb38dd0a0d6f92701c3a3e022fc53b4423ff6a7dfd90761cff1e1477f48b559c4355eb84d6aceced2ee77660b4457905a107ea041a3bba1859cdd41cd663010348b41e5f7699cc081a1a1f4a37b1e77fc0e342254e7a23a48c5d6cc69cc88c52faba8671493", 0x9c}, {&(0x7f00000004c0)="b074c91c4f6ac248b63ba546400e27c651d3117f8342321d0f278a43527d31ad4c82714c7e0e46b8cb3f2fdcc5c5c5e70b302692171fc71d51a5bc3a65e00cbbaa3113c0399a30e77f534a60b71c49fc5923ce4f4e53f7d49cebaf775917ace4bb69db7f6dfa5d5e1103ed8cf6290a22dd01725c78177b8c524595712a26c9e0aa66c7d89495d486ace776e3631199a3deda1339cbef00131bb97f931d678cfe133a40e2a596086a6303c620", 0xac}, {&(0x7f0000000580)="dad4bc6a023b8034901d4a403723ce6cba42b008e369c8fd90053f184980691363507372fd7268bc21412c7928aec68b5bd765b6b61af39f47ebb223fc3a5cb80a2eb07c47ff61bfe3264f3ed981fc78c8814e2606d230476200b8b8199e3fdbcb30c39e4a64d22e8a74c20605e8735d6129cbb81f511b70dd6732c46154e540b553cc106466815f422b64d61b9267172a15165e83658081f2a96525e80a3563221015845f88185913955f17023fa91049f9d5fddc2a54883153ad9e4087b0648898da6984d838278441aa", 0xcb}, {&(0x7f0000000680)="240ee9f343a0644e6f4dc33520a7e0a125f31f3de1e309b5590827d7970211a4a0bbce2f79c26a3d770cbfe8457a459ba3763c3aa91360eb04e08b6faf5e67b9d518686e01ea7666a27710e44d13b6901b028650c9f3563a290e3b3b8a9525c4bb225b17976c597726745d9ef46098d4d8129948fcbd63abe58352d5bc53f9f6615e7cae0fd2799bb4a3fedace2e18e0e2cc69a9c9ce6f", 0x97}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="f4c8b5e9aed463bd57b1228de957577ec3f9a93af38f539074e2930042625e4115a8a0d6a80134511a9994df95449136f59686f642fb475af364cd5260574831e926bc396caf60fa282257", 0x4b}], 0x7, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000002010400000000000000000a100000040001803c0003800c0002800500014d060000002c000180140003002001000000000000000000000000000014000400ff0100000000000000000000000000013c0002800c00028005000100860000002c00018014000300ff02000000000000000000000000000114000400"], 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async)

713.326626ms ago: executing program 4 (id=7903):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

303.703315ms ago: executing program 1 (id=7904):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x3}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

301.961613ms ago: executing program 2 (id=7905):
r0 = socket(0x1e, 0x4, 0x0)
pipe(&(0x7f0000019480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000640)=[{&(0x7f0000000600)="c2", 0x1}], 0x1, 0x1)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20)
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10)

250.008509ms ago: executing program 0 (id=7906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/21, 0x15}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)

145.259099ms ago: executing program 2 (id=7907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4)

0s ago: executing program 4 (id=7908):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d02060030002406000000000000009065c00b0001000ab2db5e471f92c537a431290aa39119afff94ac862029850563697036746e6c000020000280050009000402000014000200fe8000001b000000000000000000"], 0x58}}, 0x4000)

kernel console output (not intermixed with test programs):

prio class 2
[  928.463243][T30999] Buffer I/O error on dev nbd6, logical block 0, async page read
[  928.473737][T30999] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  928.490673][T30999] Buffer I/O error on dev nbd6, logical block 1, async page read
[  928.515510][T30999] ldm_validate_partition_table(): Disk read failed.
[  928.530505][T30999] Dev nbd6: unable to read RDB block 0
[  928.548830][T30999]  nbd6: unable to read partition table
[  928.589129][T30999] ldm_validate_partition_table(): Disk read failed.
[  928.634353][T30999] Dev nbd6: unable to read RDB block 0
[  928.657033][T30999]  nbd6: unable to read partition table
[  928.846029][T32037] lo speed is unknown, defaulting to 1000
[  928.854734][T32053] nicvf0: tun_chr_ioctl cmd 2148553947
[  929.231046][T32042] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  929.459311][T32067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6419'.
[  929.897567][T32082] syzkaller1: entered promiscuous mode
[  929.915423][T32082] syzkaller1: entered allmulticast mode
[  930.006495][T32092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6427'.
[  930.149500][T32102] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  930.202568][T32103] nicvf0: tun_chr_ioctl cmd 2148553947
[  930.278964][T32101] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6429'.
[  930.372778][T32106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6431'.
[  930.401784][T32106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6431'.
[  930.433268][T32106] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6431'.
[  930.461603][T32106] netlink: 'syz.4.6431': attribute type 5 has an invalid length.
[  930.471364][ T5641] Bluetooth: hci0: command 0x0401 tx timeout
[  930.480404][T32106] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6431'.
[  930.496057][T32108] net_ratelimit: 99 callbacks suppressed
[  930.496075][T32108] netlink: zone id is out of range
[  930.556262][T32108] netlink: zone id is out of range
[  930.581040][T32108] netlink: zone id is out of range
[  930.606727][T32108] netlink: zone id is out of range
[  930.628700][T32108] netlink: zone id is out of range
[  930.645714][T32108] netlink: zone id is out of range
[  930.680029][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6434'.
[  930.800348][T32124] No such timeout policy "syz1"
[  930.934298][T32128] syzkaller1: entered promiscuous mode
[  930.969177][T32128] syzkaller1: entered allmulticast mode
[  931.047133][T32135] netlink: 'syz.4.6440': attribute type 18 has an invalid length.
[  931.209002][T32142] xt_bpf: check failed: parse error
[  931.433655][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.480336][T32157] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  931.499925][T32163] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  931.517225][T32162] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  931.525456][T32151] lo speed is unknown, defaulting to 1000
[  932.287739][T32194] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.295676][T32194] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.454670][T32194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  932.483113][T32194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  932.651947][T32194] batman_adv: batadv0: Interface deactivated: macsec1
[  932.659260][T32194] macsec1: left promiscuous mode
[  932.677759][T32209] ip6gre1: entered promiscuous mode
[  932.684548][T32209] ip6gre1: entered allmulticast mode
[  932.696934][T11277] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.727977][T11277] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.807933][T11277] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.844801][T11277] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.260903][T32256] Bluetooth: MGMT ver 1.23
[  933.349843][T32266] tipc: Started in network mode
[  933.368253][T32266] tipc: Node identity 72b6f6dde199, cluster identity 4711
[  933.398419][T32266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  933.506340][T32284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  933.567885][T32265] tipc: Disabling bearer <eth:syzkaller0>
[  934.089688][T32313] bridge_slave_1: left allmulticast mode
[  934.097149][T32313] bridge_slave_1: left promiscuous mode
[  934.104531][T32313] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.150383][T32313] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  934.169035][T32314] __nla_validate_parse: 11 callbacks suppressed
[  934.169056][T32314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6481'.
[  934.222381][T32323] netlink: 'syz.1.6485': attribute type 1 has an invalid length.
[  934.335772][T32323] bond1: entered promiscuous mode
[  934.359095][T32323] 8021q: adding VLAN 0 to HW filter on device bond1
[  934.471631][T32332] netlink: 'syz.1.6485': attribute type 1 has an invalid length.
[  934.604185][T32329] bond1: (slave veth3): making interface the new active one
[  934.620277][T32329] veth3: entered promiscuous mode
[  934.628106][T32329] bond1: (slave veth3): Enslaving as an active interface with an up link
[  934.874606][T32345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6488'.
[  934.888865][T32352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6488'.
[  934.928857][T32359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6491'.
[  934.968672][T32359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6491'.
[  935.008629][T32357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  935.027515][T32357] gretap1: entered promiscuous mode
[  935.034233][T32357] gretap1: entered allmulticast mode
[  935.075347][   T30] audit: type=1804 audit(1779048024.704:28): pid=32361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6492" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=263 res=1 errno=0
[  935.101914][T32359] Cannot find add_set index 0 as target
[  935.156991][   T30] audit: type=1800 audit(1779048024.704:29): pid=32361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6492" name="cgroup.controllers" dev="tmpfs" ino=263 res=0 errno=0
[  935.287710][T32363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6494'.
[  935.331374][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6495'.
[  935.406356][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6496'.
[  935.567074][T32369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6496'.
[  935.853522][T32394] nicvf0: tun_chr_ioctl cmd 2148553947
[  936.087128][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6504'.
[  936.546239][T32412] rdma_op ffff88805b2c49f0 conn xmit_rdma 0000000000000000
[  936.699219][T32414] netlink: 'syz.3.6510': attribute type 32 has an invalid length.
[  936.738264][T32414] bond2: option coupled_control: invalid value (64)
[  936.747866][T32414] bond2 (unregistering): Released all slaves
[  936.849892][T32418] ip6erspan0: left promiscuous mode
[  937.073125][T32440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  939.790289][T32423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  939.800732][T32446] __nla_validate_parse: 7 callbacks suppressed
[  939.800750][T32446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'.
[  940.057970][T32462] netlink: 'syz.3.6522': attribute type 1 has an invalid length.
[  940.081385][T32462] netlink: 'syz.3.6522': attribute type 2 has an invalid length.
[  940.100908][T32462] netlink: 'syz.3.6522': attribute type 1 has an invalid length.
[  940.132493][T32462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6522'.
[  940.248153][T32467] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6525'.
[  940.346677][T32470] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6526'.
[  940.480710][T32454] lo speed is unknown, defaulting to 1000
[  940.717951][T32479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'.
[  940.766325][T32489] Bluetooth: MGMT ver 1.23
[  941.003441][T32499] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6532'.
[  941.125402][T32504] openvswitch: netlink: Multiple metadata blocks provided
[  941.255168][T32504] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6535'.
[  941.425163][T32517] netlink: 'syz.3.6539': attribute type 11 has an invalid length.
[  942.115769][T32543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6544'.
[  942.247655][T32556] netlink: 'syz.0.6547': attribute type 1 has an invalid length.
[  942.272652][T32556] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6547'.
[  942.293016][T32556] netlink: 'syz.0.6547': attribute type 1 has an invalid length.
[  942.333394][T32556] netlink: 638 bytes leftover after parsing attributes in process `syz.0.6547'.
[  942.333588][T32543] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  942.627164][T32568] netlink: 'syz.0.6551': attribute type 1 has an invalid length.
[  942.644697][T32568] netlink: 'syz.0.6551': attribute type 1 has an invalid length.
[  942.704679][T32572] syzkaller1: entered promiscuous mode
[  942.722549][T32572] syzkaller1: entered allmulticast mode
[  942.790117][T32572] netlink: 'syz.2.6554': attribute type 30 has an invalid length.
[  943.065677][T32597] openvswitch: netlink: IP tunnel dst address not specified
[  943.162376][T32590] nbd: nbd64 already in use
[  943.308748][T32599] netlink: 'syz.2.6560': attribute type 13 has an invalid length.
[  943.330681][T32599] netlink: 'syz.2.6560': attribute type 17 has an invalid length.
[  943.364352][T32604] netlink: 'syz.2.6560': attribute type 1 has an invalid length.
[  943.671088][T18605] hid-generic 0005:10CF:7FFF.0001: item fetching failed at offset 0/1
[  943.693558][T18605] hid-generic 0005:10CF:7FFF.0001: probe with driver hid-generic failed with error -22
[  943.805770][T32599] ip6gre1: left promiscuous mode
[  943.810872][T32599] ip6gre1: left allmulticast mode
[  943.837047][T32599] gretap1: left promiscuous mode
[  943.843815][T32599] gretap1: left allmulticast mode
[  943.857613][T32599] 8021q: adding VLAN 0 to HW filter on device bond1
[  943.867439][T32599] 8021q: adding VLAN 0 to HW filter on device bond2
[  943.890977][T32607] macsec1: entered promiscuous mode
[  943.897679][T32607] dummy0: entered promiscuous mode
[  943.904178][T32607] macsec1: entered allmulticast mode
[  943.909991][T32607] dummy0: entered allmulticast mode
[  943.919705][T32607] dummy0: left allmulticast mode
[  943.926684][T32607] dummy0: left promiscuous mode
[  944.099756][T32629] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  944.133978][T32629] bond1: entered promiscuous mode
[  944.188180][T32629] 8021q: adding VLAN 0 to HW filter on device bond1
[  944.468494][T32639] netlink: 'syz.0.6566': attribute type 2 has an invalid length.
[  944.496279][T32639] netlink: 'syz.0.6566': attribute type 2 has an invalid length.
[  944.582804][T32639] macsec1: entered promiscuous mode
[  945.358852][T32664] 8021q: adding VLAN 0 to HW filter on device bond1
[  945.460531][T32666] bond1: (slave ip6gretap1): making interface the new active one
[  945.477314][T32666] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  945.546367][T32673] syzkaller0: entered promiscuous mode
[  945.552563][T32673] syzkaller0: entered allmulticast mode
[  945.845094][T32682] veth0: entered promiscuous mode
[  945.956405][T32692] __nla_validate_parse: 18 callbacks suppressed
[  945.956443][T32692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6583'.
[  946.328313][T32705] lo speed is unknown, defaulting to 1000
[  946.757604][T32726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6592'.
[  947.000160][T32730] : entered promiscuous mode
[  947.260122][T32741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.529831][T32752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6601'.
[  947.548618][T32754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6604'.
[  947.742734][T32760] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  947.788104][T32760] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  947.957703][  T304] macvlan0: entered promiscuous mode
[  947.975609][  T304] macvlan0: entered allmulticast mode
[  947.983879][  T304] bond2: (slave macvlan0): Error -98 calling set_mac_address
[  948.009639][T32764] syzkaller1: entered promiscuous mode
[  948.016986][T32764] syzkaller1: entered allmulticast mode
[  948.035541][  T313] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  948.114931][  T317] validate_nla: 1 callbacks suppressed
[  948.114951][  T317] netlink: 'syz.0.6610': attribute type 1 has an invalid length.
[  948.151264][  T317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  949.085554][  T355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6620'.
[  949.120197][  T355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6620'.
[  949.150735][  T355] netlink: 'syz.0.6620': attribute type 7 has an invalid length.
[  949.240598][  T355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6620'.
[  949.411233][  T358] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.608263][  T358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  949.622848][  T358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  949.748972][T11277] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  949.790788][  T372] bond3: entered allmulticast mode
[  949.804230][  T374] pim6reg: entered allmulticast mode
[  949.809775][T11277] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  949.847854][T11277] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  949.970942][T11277] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  949.982409][  T383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6628'.
[  950.156902][  T387] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  950.784570][  T425] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  950.905592][  T429] block nbd7: Unsupported socket: should be TCP or UNIX.
[  951.786351][  T453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  952.328489][  T477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6653'.
[  952.443012][  T480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6653'.
[  952.624451][  T491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6657'.
[  952.651314][  T491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6657'.
[  953.092713][  T505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6660'.
[  953.125597][  T505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6660'.
[  953.350769][  T521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6662'.
[  953.967500][  T551] syzkaller0: entered promiscuous mode
[  953.983582][  T551] syzkaller0: entered allmulticast mode
[  954.040845][  T551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6670'.
[  954.683846][  T585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.003877][  T600] bond3 (unregistering): Released all slaves
[  955.199494][  T604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6684'.
[  955.246365][  T604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6684'.
[  955.293989][  T605] syzkaller0: entered promiscuous mode
[  955.309807][  T605] syzkaller0: entered allmulticast mode
[  955.352232][  T613] netlink: 'syz.3.6687': attribute type 4 has an invalid length.
[  955.761528][  T631] netlink: 'syz.4.6689': attribute type 1 has an invalid length.
[  955.893010][  T638] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  955.929583][  T638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  956.148510][  T649] sctp: [Deprecated]: syz.3.6693 (pid 649) Use of int in max_burst socket option.
[  956.148510][  T649] Use struct sctp_assoc_value instead
[  956.169871][  T645] netlink: 'syz.1.6692': attribute type 11 has an invalid length.
[  956.317994][  T653] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  956.372564][  T653] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.729121][  T715] __nla_validate_parse: 4 callbacks suppressed
[  957.729143][  T715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6708'.
[  958.156849][  T735] Cannot find add_set index 1 as target
[  958.426782][  T747] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  958.441030][  T745] netlink: 'syz.4.6716': attribute type 1 has an invalid length.
[  958.568800][  T745] bond2: entered promiscuous mode
[  958.597978][  T756] openvswitch: netlink: Key type 142 is out of range max 32
[  958.638351][  T745] 8021q: adding VLAN 0 to HW filter on device bond2
[  959.211486][  T782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6721'.
[  959.243521][  T781] lo speed is unknown, defaulting to 1000
[  959.245119][  T783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6721'.
[  959.309401][  T779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6723'.
[  959.742927][  T815] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[  959.910298][  T815] 8021q: adding VLAN 0 to HW filter on device bond3
[  960.260166][  T838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6736'.
[  960.315219][  T838] ipvlan2: entered allmulticast mode
[  960.320705][  T838] gretap0: entered allmulticast mode
[  960.925750][  T866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  961.055934][  T871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6745'.
[  961.208492][  T887] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6748'.
[  961.655777][  T927] syzkaller0: entered promiscuous mode
[  961.685654][  T927] syzkaller0: entered allmulticast mode
[  961.714428][  T919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  961.745551][  T920] syzkaller0: entered promiscuous mode
[  961.772513][  T920] syzkaller0: entered allmulticast mode
[  961.942648][  T920] tipc: Resetting bearer <eth:syzkaller0>
[  962.030927][  T920] tipc: Disabling bearer <eth:syzkaller0>
[  962.086339][ T5288] veth1_macvtap: left promiscuous mode
[  962.146192][  T967] openvswitch: netlink: Tunnel attr 19 out of range max 16
[  962.219429][  T973] syzkaller1: entered promiscuous mode
[  962.239769][  T973] syzkaller1: entered allmulticast mode
[  962.737289][ T1006] netlink: 'syz.2.6769': attribute type 1 has an invalid length.
[  962.888348][ T1014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6771'.
[  962.904063][ T1006] bond4: entered promiscuous mode
[  962.919260][ T1006] 8021q: adding VLAN 0 to HW filter on device bond4
[  962.980538][ T1006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6769'.
[  963.007529][ T1006] netlink: 'syz.2.6769': attribute type 1 has an invalid length.
[  963.027901][ T1014] ip6gre1: entered promiscuous mode
[  963.044107][ T1014] ip6gre1: entered allmulticast mode
[  963.107284][ T1016] bond4: (slave bridge1): making interface the new active one
[  963.144000][ T1016] bridge1: entered promiscuous mode
[  963.183343][ T1016] bridge1: left promiscuous mode
[  963.355617][ T1021] tipc: Started in network mode
[  963.380072][ T1021] tipc: Node identity f65a15cae709, cluster identity 4711
[  963.427041][ T1021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  963.484359][ T1011] syzkaller0: entered promiscuous mode
[  963.523435][ T1011] syzkaller0: entered allmulticast mode
[  963.708495][ T1050] tipc: Resetting bearer <eth:syzkaller0>
[  963.734810][ T1004] lo speed is unknown, defaulting to 1000
[  963.809372][ T1010] tipc: Resetting bearer <eth:syzkaller0>
[  963.944696][ T1010] tipc: Disabling bearer <eth:syzkaller0>
[  964.040919][  T994] lo speed is unknown, defaulting to 1000
[  964.199574][ T1087] netlink: 'syz.2.6780': attribute type 6 has an invalid length.
[  964.606266][ T1090] bond3: left allmulticast mode
[  964.614855][ T1090] bond4: left promiscuous mode
[  964.775448][ T1092] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  964.956992][ T1111] Cannot find add_set index 1 as target
[  964.992021][ T1111] netlink: 'syz.1.6785': attribute type 2 has an invalid length.
[  965.284532][ T1124] syzkaller1: entered promiscuous mode
[  965.290266][ T1124] syzkaller1: entered allmulticast mode
[  965.311755][ T1124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6787'.
[  965.328227][ T1121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6787'.
[  965.953424][ T1156] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.6796'.
[  965.974596][ T1145] macvtap0: entered promiscuous mode
[  965.989159][ T1145] team0: entered promiscuous mode
[  966.004771][ T1145] team_slave_0: entered promiscuous mode
[  966.018540][ T1145] team_slave_1: entered promiscuous mode
[  966.042302][ T1145] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  966.049880][ T1145] team0: Device macvtap0 is already an upper device of the team interface
[  966.064521][ T1145] team0: left promiscuous mode
[  966.069555][ T1145] team_slave_0: left promiscuous mode
[  966.077436][ T1145] team_slave_1: left promiscuous mode
[  966.129561][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6798'.
[  966.502117][ T1170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6800'.
[  966.658012][ T1170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6800'.
[  966.673159][ T1172] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  966.721057][ T1172] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  966.976798][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'.
[  967.137775][ T1192] m1Ie5nè‹Ò: entered promiscuous mode
[  967.162346][ T1199] netlink: 'syz.4.6809': attribute type 3 has an invalid length.
[  967.524211][ T1221] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6815'.
[  967.679464][ T1226] lo speed is unknown, defaulting to 1000
[  968.150734][ T1245] netlink: 'syz.1.6823': attribute type 1 has an invalid length.
[  968.174557][ T1245] netlink: 'syz.1.6823': attribute type 2 has an invalid length.
[  968.183866][ T1245] netlink: 'syz.1.6823': attribute type 3 has an invalid length.
[  968.513211][ T1257] xt_hashlimit: size too large, truncated to 1048576
[  968.520138][ T1257] xt_hashlimit: max too large, truncated to 1048576
[  968.565718][ T1257] ipt_REJECT: TCP_RESET invalid for non-tcp
[  968.675866][ T1262] __nla_validate_parse: 1 callbacks suppressed
[  968.675886][ T1262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6829'.
[  969.073219][ T1278] syzkaller0: entered promiscuous mode
[  969.096186][ T1278] syzkaller0: entered allmulticast mode
[  969.112389][ T1278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6835'.
[  969.167050][ T1286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6838'.
[  969.225243][ T1282] lo speed is unknown, defaulting to 1000
[  969.359553][ T5638] Bluetooth: hci0: command 0x0401 tx timeout
[  970.162039][ T1323] xt_hashlimit: size too large, truncated to 1048576
[  970.269023][ T1326] bridge_slave_0 (unregistering): left allmulticast mode
[  970.299034][ T1326] bridge_slave_0 (unregistering): left promiscuous mode
[  970.346210][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.527140][ T1330] veth1: entered promiscuous mode
[  970.571428][ T1330] veth1: entered allmulticast mode
[  970.598009][ T1329] lo speed is unknown, defaulting to 1000
[  970.700873][ T1329] lo speed is unknown, defaulting to 1000
[  970.729690][ T1329] lo speed is unknown, defaulting to 1000
[  970.948213][ T1350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6850'.
[  970.975825][ T1353] syzkaller0: entered promiscuous mode
[  970.987480][ T1353] syzkaller0: entered allmulticast mode
[  971.337619][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'.
[  971.380541][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'.
[  971.406525][ T1368] netlink: 58 bytes leftover after parsing attributes in process `syz.1.6858'.
[  971.420461][ T1329] infiniband syz0: set down
[  971.420539][   T10] lo speed is unknown, defaulting to 1000
[  971.443655][ T1329] infiniband syz0: added lo
[  971.467416][ T1329] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  971.472137][ T1329] infiniband syz0: Couldn't open port 1
[  971.510790][ T1329] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  971.537177][ T1329] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  971.574887][ T1329] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  971.676984][ T1388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6862'.
[  971.709691][ T1329] RDS/IB: syz0: added
[  971.723463][ T1329] smc: adding ib device syz0 with port count 1
[  971.735348][ T1329] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[  971.758066][T11475] lo speed is unknown, defaulting to 1000
[  971.773013][ T1329] lo speed is unknown, defaulting to 1000
[  971.988355][ T1397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6865'.
[  972.114623][ T1405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6867'.
[  972.570561][ T1405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  972.601033][ T1405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  972.758864][ T1417] netlink: 'syz.4.6870': attribute type 6 has an invalid length.
[  972.777640][ T1329] lo speed is unknown, defaulting to 1000
[  972.784126][T11276] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.784174][T11276] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.784208][T11276] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.784240][T11276] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  973.106608][ T1428] lo speed is unknown, defaulting to 1000
[  973.387235][ T1329] lo speed is unknown, defaulting to 1000
[  973.849941][ T1458] lo speed is unknown, defaulting to 1000
[  974.029740][ T1428] lo speed is unknown, defaulting to 1000
[  974.412984][ T1489] __nla_validate_parse: 167 callbacks suppressed
[  974.413004][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'.
[  977.336633][ T1458] lo speed is unknown, defaulting to 1000
[  977.369636][ T1501] netlink: 328 bytes leftover after parsing attributes in process `syz.2.6888'.
[  977.691621][ T1520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6892'.
[  977.718319][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'.
[  977.938893][ T1528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6894'.
[  977.948291][ T1329] lo speed is unknown, defaulting to 1000
[  978.004652][ T1528] netlink: 'syz.2.6894': attribute type 7 has an invalid length.
[  978.028983][ T1532] netlink: 'syz.2.6894': attribute type 1 has an invalid length.
[  978.049283][ T1528] netlink: 'syz.2.6894': attribute type 8 has an invalid length.
[  978.058671][ T1532] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.6894'.
[  978.070397][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6894'.
[  978.378393][ T1533] syzkaller0: entered promiscuous mode
[  978.397855][ T1533] syzkaller0: entered allmulticast mode
[  978.417580][ T1537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6894'.
[  980.748323][ T1329] lo speed is unknown, defaulting to 1000
[  980.826173][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6897'.
[  980.920962][ T1554] hsr_slave_1 (unregistering): left promiscuous mode
[  980.948009][ T1557] bridge4: the hash_elasticity option has been deprecated and is always 16
[  981.056414][ T1329] lo speed is unknown, defaulting to 1000
[  981.329160][ T1329] lo speed is unknown, defaulting to 1000
[  981.522179][ T1329] lo speed is unknown, defaulting to 1000
[  981.767688][ T1329] lo speed is unknown, defaulting to 1000
[  981.939925][ T1329] lo speed is unknown, defaulting to 1000
[  982.164502][ T1329] lo speed is unknown, defaulting to 1000
[  982.365532][ T1578] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6907'.
[  982.456093][ T1580] : entered promiscuous mode
[  982.517206][ T1582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  982.909112][ T1594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6913'.
[  983.003732][ T1591] ipt_REJECT: ECHOREPLY no longer supported.
[  983.197923][ T1597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6914'.
[  983.400881][ T1606] : entered promiscuous mode
[  983.605956][ T1620] syzkaller1: entered promiscuous mode
[  983.614619][ T1620] syzkaller1: entered allmulticast mode
[  983.624367][ T1618] lo speed is unknown, defaulting to 1000
[  983.630498][ T1624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6920'.
[  983.698520][ T1618] lo speed is unknown, defaulting to 1000
[  984.157509][ T1649] netlink: 'syz.1.6926': attribute type 1 has an invalid length.
[  984.315826][ T1649] bond2: entered promiscuous mode
[  984.333406][ T1649] 8021q: adding VLAN 0 to HW filter on device bond2
[  984.378555][ T1657] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  984.422632][ T1657] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  984.433124][ T1657] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  984.538657][ T1662] netlink: 'syz.2.6928': attribute type 2 has an invalid length.
[  984.558645][ T1662] netlink: 'syz.2.6928': attribute type 2 has an invalid length.
[  984.744658][ T1670] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6931'.
[  984.763460][ T1650] ip6t_rpfilter: unknown options
[  985.119726][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6934'.
[  985.262571][ T1694] netlink: 'syz.4.6936': attribute type 4 has an invalid length.
[  985.309555][ T1696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6937'.
[  985.573363][ T1699] veth1: left promiscuous mode
[  985.580081][ T1699] veth1: left allmulticast mode
[  985.594704][ T1699] bond1: left promiscuous mode
[  985.605097][ T1699] veth3: left promiscuous mode
[  985.629430][ T1699] ip6gre1: left promiscuous mode
[  985.635904][ T1699] ip6gre1: left allmulticast mode
[  985.660896][ T1699] bond2: left promiscuous mode
[  986.029763][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6944'.
[  986.503263][ T1748] nbd: must specify a device to reconfigure
[  986.613709][ T1756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6953'.
[  986.627700][ T1758] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  986.628528][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6953'.
[  986.668975][ T1756] netlink: 'syz.3.6953': attribute type 14 has an invalid length.
[  986.677497][ T1756] netlink: 'syz.3.6953': attribute type 13 has an invalid length.
[  986.946579][ T1773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6956'.
[  987.174055][ T1785] netlink: 'syz.1.6961': attribute type 22 has an invalid length.
[  987.202159][ T1785] netlink: 'syz.1.6961': attribute type 1 has an invalid length.
[  987.218135][ T1785] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6961'.
[  987.351468][ T5638] Bluetooth: hci2: command 0x0405 tx timeout
[  987.479523][ T1801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6963'.
[  987.691952][ T1797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.927275][ T1810] netlink: 'syz.0.6968': attribute type 1 has an invalid length.
[  988.000298][ T1797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.038487][ T1810] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  988.246543][ T1797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.416447][ T1797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.440538][ T1841] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  988.459058][ T1839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6975'.
[  988.747410][ T1854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6979'.
[  988.828395][T22742] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  988.865689][T11277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  988.929330][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  988.978262][T11277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  988.999906][ T1865] lo speed is unknown, defaulting to 1000
[  989.047316][ T1865] lo speed is unknown, defaulting to 1000
[  989.841568][ T5638] Bluetooth: hci4: command 0x0406 tx timeout
[  990.087696][ T1915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6995'.
[  991.423613][ T1839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  991.975787][ T1944] tap0: tun_chr_ioctl cmd 1074025677
[  991.981433][ T1944] tap0: linktype set to 778
[  992.138275][ T1950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  992.239565][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7008'.
[  992.261246][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7008'.
[  992.281066][ T1962] netlink: 'syz.2.7010': attribute type 10 has an invalid length.
[  992.296758][ T1964] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  992.308330][ T1964] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  992.335478][ T1964] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  992.350321][ T1962] team0: No ports can be present during mode change
[  992.903340][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.928771][ T1976] syzkaller0: entered promiscuous mode
[  992.946180][ T1976] syzkaller0: entered allmulticast mode
[  993.235644][ T1987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7016'.
[  993.564236][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  993.573053][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  993.597724][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  993.618033][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  993.876994][ T2012] FAULT_INJECTION: forcing a failure.
[  993.876994][ T2012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  993.895774][ T2012] CPU: 1 UID: 0 PID: 2012 Comm: syz.1.7025 Not tainted syzkaller #0 PREEMPT(full) 
[  993.895802][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  993.895815][ T2012] Call Trace:
[  993.895825][ T2012]  <TASK>
[  993.895834][ T2012]  dump_stack_lvl+0xe8/0x150
[  993.895864][ T2012]  should_fail_ex+0x412/0x560
[  993.895898][ T2012]  _copy_from_user+0x2d/0xb0
[  993.895945][ T2012]  sk_getsockopt+0x1d4/0x2840
[  993.895987][ T2012]  ? __pfx_sk_getsockopt+0x10/0x10
[  993.896018][ T2012]  ? __pfx_aa_unix_opt_perm+0x10/0x10
[  993.896052][ T2012]  ? get_pid_task+0x20/0x1f0
[  993.896091][ T2012]  ? __might_fault+0xaf/0x130
[  993.896119][ T2012]  ? __might_fault+0xaf/0x130
[  993.896171][ T2012]  do_sock_getsockopt+0x2bd/0x7e0
[  993.896211][ T2012]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  993.896260][ T2012]  ? __fget_files+0x3a0/0x420
[  993.896285][ T2012]  ? __fget_files+0x2a/0x420
[  993.896317][ T2012]  __x64_sys_getsockopt+0x1a4/0x240
[  993.896355][ T2012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.896377][ T2012]  do_syscall_64+0x15f/0xf80
[  993.896407][ T2012]  ? trace_irq_disable+0x3b/0x140
[  993.896438][ T2012]  ? clear_bhb_loop+0x40/0x90
[  993.896465][ T2012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.896486][ T2012] RIP: 0033:0x7f73a279ce59
[  993.896506][ T2012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.896523][ T2012] RSP: 002b:00007f73a365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  993.896545][ T2012] RAX: ffffffffffffffda RBX: 00007f73a2a15fa0 RCX: 00007f73a279ce59
[  993.896560][ T2012] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003
[  993.896572][ T2012] RBP: 00007f73a365f090 R08: 0000200000cab000 R09: 0000000000000000
[  993.896585][ T2012] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001
[  993.896604][ T2012] R13: 00007f73a2a16038 R14: 00007f73a2a15fa0 R15: 00007ffc6b8d8e08
[  993.896639][ T2012]  </TASK>
[  994.207506][ T2021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.285860][ T2021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.402533][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7029'.
[  994.555685][ T2036] netlink: 'syz.4.7032': attribute type 1 has an invalid length.
[  994.737670][ T2036] 8021q: adding VLAN 0 to HW filter on device bond3
[  994.879707][ T2044] veth5: entered allmulticast mode
[  994.905662][ T2044] bond3: (slave veth5): Enslaving as an active interface with an up link
[  994.944509][ T2047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'.
[  995.000530][ T2036] bond3 (unregistering): (slave veth5): Releasing backup interface
[  995.047753][ T2036] bond3 (unregistering): Released all slaves
[  995.239651][ T2059] FAULT_INJECTION: forcing a failure.
[  995.239651][ T2059] name failslab, interval 1, probability 0, space 0, times 0
[  995.268225][ T2059] CPU: 0 UID: 0 PID: 2059 Comm: syz.0.7038 Not tainted syzkaller #0 PREEMPT(full) 
[  995.268261][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  995.268274][ T2059] Call Trace:
[  995.268283][ T2059]  <TASK>
[  995.268293][ T2059]  dump_stack_lvl+0xe8/0x150
[  995.268323][ T2059]  should_fail_ex+0x412/0x560
[  995.268352][ T2059]  ? alloc_inode+0xb8/0x1b0
[  995.268376][ T2059]  should_failslab+0xa8/0x100
[  995.268409][ T2059]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  995.268457][ T2059]  alloc_inode+0xb8/0x1b0
[  995.268481][ T2059]  path_from_stashed+0x200/0x5c0
[  995.268514][ T2059]  pidfs_alloc_file+0xff/0x290
[  995.268540][ T2059]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  995.268574][ T2059]  pidfd_prepare+0x11a/0x1b0
[  995.268599][ T2059]  sk_getsockopt+0x210f/0x2840
[  995.268637][ T2059]  ? __pfx_sk_getsockopt+0x10/0x10
[  995.268664][ T2059]  ? __pfx_aa_unix_opt_perm+0x10/0x10
[  995.268696][ T2059]  ? get_pid_task+0x20/0x1f0
[  995.268731][ T2059]  ? __might_fault+0xaf/0x130
[  995.268757][ T2059]  ? __might_fault+0xaf/0x130
[  995.268800][ T2059]  do_sock_getsockopt+0x2bd/0x7e0
[  995.268836][ T2059]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  995.268880][ T2059]  ? __fget_files+0x3a0/0x420
[  995.268903][ T2059]  ? __fget_files+0x2a/0x420
[  995.268933][ T2059]  __x64_sys_getsockopt+0x1a4/0x240
[  995.268968][ T2059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.268989][ T2059]  do_syscall_64+0x15f/0xf80
[  995.269016][ T2059]  ? trace_irq_disable+0x3b/0x140
[  995.269044][ T2059]  ? clear_bhb_loop+0x40/0x90
[  995.269067][ T2059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.269086][ T2059] RIP: 0033:0x7f28b9d9ce59
[  995.269104][ T2059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.269121][ T2059] RSP: 002b:00007f28bab6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  995.269141][ T2059] RAX: ffffffffffffffda RBX: 00007f28ba015fa0 RCX: 00007f28b9d9ce59
[  995.269154][ T2059] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003
[  995.269165][ T2059] RBP: 00007f28bab6f090 R08: 0000200000cab000 R09: 0000000000000000
[  995.269178][ T2059] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001
[  995.269189][ T2059] R13: 00007f28ba016038 R14: 00007f28ba015fa0 R15: 00007ffcb775d168
[  995.269227][ T2059]  </TASK>
[  995.923350][ T5638] block nbd8: Receive control failed (result -32)
[  995.926958][ T5641] block nbd7: Receive control failed (result -32)
[  996.307455][ T2092] netlink: 'syz.0.7046': attribute type 1 has an invalid length.
[  996.326488][ T2092] netlink: 'syz.0.7046': attribute type 1 has an invalid length.
[  996.380865][ T2092] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  996.428896][ T2100] FAULT_INJECTION: forcing a failure.
[  996.428896][ T2100] name failslab, interval 1, probability 0, space 0, times 0
[  996.457640][ T2100] CPU: 1 UID: 0 PID: 2100 Comm: syz.1.7049 Not tainted syzkaller #0 PREEMPT(full) 
[  996.457667][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  996.457679][ T2100] Call Trace:
[  996.457687][ T2100]  <TASK>
[  996.457695][ T2100]  dump_stack_lvl+0xe8/0x150
[  996.457724][ T2100]  should_fail_ex+0x412/0x560
[  996.457754][ T2100]  should_failslab+0xa8/0x100
[  996.457802][ T2100]  ? security_inode_alloc+0x39/0x310
[  996.457829][ T2100]  kmem_cache_alloc_noprof+0x87/0x650
[  996.457865][ T2100]  security_inode_alloc+0x39/0x310
[  996.457905][ T2100]  inode_init_always_gfp+0x9c8/0xda0
[  996.457934][ T2100]  alloc_inode+0x82/0x1b0
[  996.457956][ T2100]  path_from_stashed+0x200/0x5c0
[  996.457989][ T2100]  pidfs_alloc_file+0xff/0x290
[  996.458014][ T2100]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  996.458047][ T2100]  pidfd_prepare+0x11a/0x1b0
[  996.458070][ T2100]  sk_getsockopt+0x210f/0x2840
[  996.458109][ T2100]  ? __pfx_sk_getsockopt+0x10/0x10
[  996.458137][ T2100]  ? __pfx_aa_unix_opt_perm+0x10/0x10
[  996.458168][ T2100]  ? get_pid_task+0x20/0x1f0
[  996.458202][ T2100]  ? __might_fault+0xaf/0x130
[  996.458228][ T2100]  ? __might_fault+0xaf/0x130
[  996.458271][ T2100]  do_sock_getsockopt+0x2bd/0x7e0
[  996.458308][ T2100]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  996.458361][ T2100]  ? __fget_files+0x3a0/0x420
[  996.458383][ T2100]  ? __fget_files+0x2a/0x420
[  996.458413][ T2100]  __x64_sys_getsockopt+0x1a4/0x240
[  996.458447][ T2100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.458468][ T2100]  do_syscall_64+0x15f/0xf80
[  996.458496][ T2100]  ? trace_irq_disable+0x3b/0x140
[  996.458523][ T2100]  ? clear_bhb_loop+0x40/0x90
[  996.458546][ T2100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.458565][ T2100] RIP: 0033:0x7f73a279ce59
[  996.458583][ T2100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  996.458599][ T2100] RSP: 002b:00007f73a365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  996.458619][ T2100] RAX: ffffffffffffffda RBX: 00007f73a2a15fa0 RCX: 00007f73a279ce59
[  996.458632][ T2100] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003
[  996.458643][ T2100] RBP: 00007f73a365f090 R08: 0000200000cab000 R09: 0000000000000000
[  996.458655][ T2100] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001
[  996.458672][ T2100] R13: 00007f73a2a16038 R14: 00007f73a2a15fa0 R15: 00007ffc6b8d8e08
[  996.458702][ T2100]  </TASK>
[  997.370760][ T2116] bond5: entered promiscuous mode
[  997.391082][ T2116] 8021q: adding VLAN 0 to HW filter on device bond5
[  997.526790][ T2143] netlink: 'syz.4.7057': attribute type 29 has an invalid length.
[  997.700861][ T2147] FAULT_INJECTION: forcing a failure.
[  997.700861][ T2147] name failslab, interval 1, probability 0, space 0, times 0
[  997.718734][ T2129] syzkaller0: entered promiscuous mode
[  997.730582][ T2129] syzkaller0: entered allmulticast mode
[  997.737873][ T2147] CPU: 1 UID: 0 PID: 2147 Comm: syz.1.7061 Not tainted syzkaller #0 PREEMPT(full) 
[  997.737899][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  997.737912][ T2147] Call Trace:
[  997.737921][ T2147]  <TASK>
[  997.737930][ T2147]  dump_stack_lvl+0xe8/0x150
[  997.737960][ T2147]  should_fail_ex+0x412/0x560
[  997.737989][ T2147]  ? __d_alloc+0x37/0x6f0
[  997.738018][ T2147]  should_failslab+0xa8/0x100
[  997.738052][ T2147]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  997.738089][ T2147]  __d_alloc+0x37/0x6f0
[  997.738122][ T2147]  path_from_stashed+0x384/0x5c0
[  997.738160][ T2147]  pidfs_alloc_file+0xff/0x290
[  997.738188][ T2147]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  997.738224][ T2147]  pidfd_prepare+0x11a/0x1b0
[  997.738250][ T2147]  sk_getsockopt+0x210f/0x2840
[  997.738298][ T2147]  ? __pfx_sk_getsockopt+0x10/0x10
[  997.738328][ T2147]  ? __pfx_aa_unix_opt_perm+0x10/0x10
[  997.738362][ T2147]  ? get_pid_task+0x20/0x1f0
[  997.738400][ T2147]  ? __might_fault+0xaf/0x130
[  997.738428][ T2147]  ? __might_fault+0xaf/0x130
[  997.738474][ T2147]  do_sock_getsockopt+0x2bd/0x7e0
[  997.738514][ T2147]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  997.738563][ T2147]  ? __fget_files+0x3a0/0x420
[  997.738586][ T2147]  ? __fget_files+0x2a/0x420
[  997.738618][ T2147]  __x64_sys_getsockopt+0x1a4/0x240
[  997.738656][ T2147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.738679][ T2147]  do_syscall_64+0x15f/0xf80
[  997.738708][ T2147]  ? trace_irq_disable+0x3b/0x140
[  997.738738][ T2147]  ? clear_bhb_loop+0x40/0x90
[  997.738764][ T2147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.738783][ T2147] RIP: 0033:0x7f73a279ce59
[  997.738803][ T2147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.738820][ T2147] RSP: 002b:00007f73a365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  997.738841][ T2147] RAX: ffffffffffffffda RBX: 00007f73a2a15fa0 RCX: 00007f73a279ce59
[  997.738856][ T2147] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003
[  997.738868][ T2147] RBP: 00007f73a365f090 R08: 0000200000cab000 R09: 0000000000000000
[  997.738880][ T2147] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001
[  997.738893][ T2147] R13: 00007f73a2a16038 R14: 00007f73a2a15fa0 R15: 00007ffc6b8d8e08
[  997.738927][ T2147]  </TASK>
[ 1000.798766][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7070'.
[ 1000.905400][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7072'.
[ 1000.912427][ T2183] FAULT_INJECTION: forcing a failure.
[ 1000.912427][ T2183] name failslab, interval 1, probability 0, space 0, times 0
[ 1000.942197][ T2183] CPU: 0 UID: 0 PID: 2183 Comm: syz.2.7073 Not tainted syzkaller #0 PREEMPT(full) 
[ 1000.942226][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1000.942239][ T2183] Call Trace:
[ 1000.942248][ T2183]  <TASK>
[ 1000.942258][ T2183]  dump_stack_lvl+0xe8/0x150
[ 1000.942288][ T2183]  should_fail_ex+0x412/0x560
[ 1000.942320][ T2183]  should_failslab+0xa8/0x100
[ 1000.942352][ T2183]  ? alloc_empty_file+0x5b/0x1d0
[ 1000.942375][ T2183]  kmem_cache_alloc_noprof+0x87/0x650
[ 1000.942402][ T2183]  ? pidfs_stash_dentry+0xa2/0xd0
[ 1000.942428][ T2183]  ? mntget+0x19/0x60
[ 1000.942450][ T2183]  alloc_empty_file+0x5b/0x1d0
[ 1000.942474][ T2183]  dentry_open+0x44/0xa0
[ 1000.942498][ T2183]  pidfs_alloc_file+0x18d/0x290
[ 1000.942526][ T2183]  ? __pfx_pidfs_alloc_file+0x10/0x10
[ 1000.942562][ T2183]  pidfd_prepare+0x11a/0x1b0
[ 1000.942588][ T2183]  sk_getsockopt+0x210f/0x2840
[ 1000.942630][ T2183]  ? __pfx_sk_getsockopt+0x10/0x10
[ 1000.942661][ T2183]  ? __pfx_aa_unix_opt_perm+0x10/0x10
[ 1000.942696][ T2183]  ? get_pid_task+0x20/0x1f0
[ 1000.942735][ T2183]  ? __might_fault+0xaf/0x130
[ 1000.942763][ T2183]  ? __might_fault+0xaf/0x130
[ 1000.942811][ T2183]  do_sock_getsockopt+0x2bd/0x7e0
[ 1000.942851][ T2183]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1000.942908][ T2183]  ? __fget_files+0x3a0/0x420
[ 1000.942932][ T2183]  ? __fget_files+0x2a/0x420
[ 1000.942965][ T2183]  __x64_sys_getsockopt+0x1a4/0x240
[ 1000.943005][ T2183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.943028][ T2183]  do_syscall_64+0x15f/0xf80
[ 1000.943059][ T2183]  ? trace_irq_disable+0x3b/0x140
[ 1000.943090][ T2183]  ? clear_bhb_loop+0x40/0x90
[ 1000.943116][ T2183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.943137][ T2183] RIP: 0033:0x7f4af379ce59
[ 1000.943157][ T2183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.943174][ T2183] RSP: 002b:00007f4af4676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1000.943196][ T2183] RAX: ffffffffffffffda RBX: 00007f4af3a15fa0 RCX: 00007f4af379ce59
[ 1000.943211][ T2183] RDX: 000000000000004d RSI: 0000000000000001 RDI: 0000000000000003
[ 1000.943224][ T2183] RBP: 00007f4af4676090 R08: 0000200000cab000 R09: 0000000000000000
[ 1000.943237][ T2183] R10: 0000200000caaffb R11: 0000000000000246 R12: 0000000000000001
[ 1000.943250][ T2183] R13: 00007f4af3a16038 R14: 00007f4af3a15fa0 R15: 00007ffe4dc84318
[ 1000.943285][ T2183]  </TASK>
[ 1000.958239][ T2181] smc: net device lo applied user defined pnetid SYZ2
[ 1001.242313][ T2189] bridge0: port 2(syz_tun) entered blocking state
[ 1001.246756][ T2191] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1001.249310][ T2189] bridge0: port 2(syz_tun) entered disabled state
[ 1001.261970][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1001.265053][ T2189] syz_tun: entered allmulticast mode
[ 1001.280863][ T2189] syz_tun: entered promiscuous mode
[ 1001.542421][ T2206] sock: sock_set_timeout: `syz.1.7080' (pid 2206) tries to set negative timeout
[ 1001.552459][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'.
[ 1001.612313][ T2199] lo speed is unknown, defaulting to 1000
[ 1001.634539][ T2211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7084'.
[ 1001.659695][ T2199] lo speed is unknown, defaulting to 1000
[ 1001.722847][ T2211] netlink: 'syz.1.7084': attribute type 5 has an invalid length.
[ 1001.730646][ T2211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7084'.
[ 1001.747145][ T2211] geneve2: entered promiscuous mode
[ 1001.796525][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7083'.
[ 1001.831493][ T2211] geneve2: entered allmulticast mode
[ 1001.859600][ T6262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[ 1001.904056][ T2219] bond0: (slave dummy0): Releasing backup interface
[ 1001.922567][ T2219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7083'.
[ 1001.972445][ T6262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[ 1002.811201][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[ 1002.820280][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[ 1002.856092][ T2239] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7088'.
[ 1003.234526][ T2254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1003.268359][ T2258] syzkaller1: entered promiscuous mode
[ 1003.273885][ T2258] syzkaller1: entered allmulticast mode
[ 1003.802504][ T2254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1004.371043][ T2254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1004.432990][ T2293] block nbd9: server does not support multiple connections per device.
[ 1004.455630][ T2293] block nbd9: shutting down sockets
[ 1004.627542][ T2254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1005.044610][ T2325] ip6erspan0: entered promiscuous mode
[ 1005.050150][ T2325] ip6erspan0: entered allmulticast mode
[ 1005.392680][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1005.513505][ T6262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1005.576959][ T6262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1005.624191][ T6262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1005.854230][T11475] IPVS: starting estimator thread 0...
[ 1005.932380][ T2350] __nla_validate_parse: 4 callbacks suppressed
[ 1005.932399][ T2350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7120'.
[ 1005.947561][ T2350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7120'.
[ 1005.959015][ T2356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7124'.
[ 1006.046472][ T2352] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1006.369141][ T2369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7126'.
[ 1006.378264][ T2369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7126'.
[ 1007.376672][ T2405] lo speed is unknown, defaulting to 1000
[ 1007.394510][ T2405] lo speed is unknown, defaulting to 1000
[ 1007.846308][ T2420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7139'.
[ 1008.127617][ T2438] netlink: 'syz.0.7140': attribute type 1 has an invalid length.
[ 1008.162883][ T2438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7140'.
[ 1008.163333][ T2436] lo speed is unknown, defaulting to 1000
[ 1008.181197][ T2436] lo speed is unknown, defaulting to 1000
[ 1012.782765][ T2504] lo speed is unknown, defaulting to 1000
[ 1012.792447][ T2504] lo speed is unknown, defaulting to 1000
[ 1012.856613][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7157'.
[ 1012.865568][ T2515] netlink: 'syz.2.7157': attribute type 9 has an invalid length.
[ 1012.883700][T22732] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.899704][T22732] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.907944][T22732] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.916161][T22732] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1013.001835][ T2517] netlink: 'syz.0.7158': attribute type 7 has an invalid length.
[ 1014.246397][ T2549] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1014.431572][ T2562] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode
[ 1014.439228][ T2562] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode
[ 1014.459020][ T2564] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7169'.
[ 1014.484535][ T2566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7172'.
[ 1014.532258][ T2570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7173'.
[ 1014.596445][ T2574] geneve3: entered promiscuous mode
[ 1014.601874][ T2574] geneve3: entered allmulticast mode
[ 1014.640267][   T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1014.649955][   T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1014.669902][   T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1014.712339][   T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1015.054826][ T2598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7178'.
[ 1015.362395][ T2606] lo speed is unknown, defaulting to 1000
[ 1015.376440][ T2606] lo speed is unknown, defaulting to 1000
[ 1015.686347][ T2633] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7188'.
[ 1015.982392][ T2652] rdma_op ffff88805b48b1f0 conn xmit_rdma 0000000000000000
[ 1016.227742][ T2675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7198'.
[ 1016.414658][ T2682] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1016.431001][ T2680] syzkaller0: entered promiscuous mode
[ 1016.443429][ T2680] syzkaller0: entered allmulticast mode
[ 1016.751761][ T2700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7205'.
[ 1016.759934][ T2695] tipc: Started in network mode
[ 1016.765666][ T2695] tipc: Node identity 523389593178, cluster identity 4711
[ 1016.773038][ T2695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1016.951135][ T2695] tipc: Resetting bearer <eth:syzkaller0>
[ 1017.086959][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7207'.
[ 1017.167918][ T2711] vlan2: entered allmulticast mode
[ 1017.174261][ T2711] macvtap0: entered allmulticast mode
[ 1017.549459][ T2738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1017.653570][ T2743] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7212'.
[ 1017.841847][ T5761] tipc: Node number set to 1665894745
[ 1017.857217][ T2749] netlink: 'syz.2.7216': attribute type 10 has an invalid length.
[ 1018.382630][ T2786] __nla_validate_parse: 1 callbacks suppressed
[ 1018.382649][ T2786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7224'.
[ 1018.437629][ T2781] lo speed is unknown, defaulting to 1000
[ 1018.467646][ T2781] lo speed is unknown, defaulting to 1000
[ 1018.719237][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.747763][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.766675][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.776106][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.785277][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.794453][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.803626][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.812805][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.821990][ T2798] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7229'.
[ 1018.939215][ T2804] syzkaller0: entered promiscuous mode
[ 1018.946337][ T2804] syzkaller0: entered allmulticast mode
[ 1019.557685][ T2843] netlink: 'syz.0.7238': attribute type 1 has an invalid length.
[ 1019.634240][ T2843] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1019.665841][ T2843] bond5: (slave vxcan3): Error -95 calling set_mac_address
[ 1019.714443][ T2854] tipc: Invalid UDP bearer configuration
[ 1019.714501][ T2854] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1019.752600][ T2854] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1019.820925][ T2857] netlink: 'syz.1.7242': attribute type 11 has an invalid length.
[ 1020.016618][ T2871] netlink: 'syz.1.7247': attribute type 1 has an invalid length.
[ 1020.116564][ T2871] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1020.230826][ T2891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1020.432753][ T2893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1020.441528][ T2893] 8021q: adding VLAN 0 to HW filter on device team0
[ 1020.455553][ T2893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1020.576451][ T2893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1020.591459][ T2893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1020.604862][ T2893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1020.615249][ T2893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1020.650153][ T2893] veth1_vlan: left promiscuous mode
[ 1020.656775][ T2893] veth0_vlan: left promiscuous mode
[ 1020.663047][ T2893] veth0_vlan: entered promiscuous mode
[ 1020.672209][ T2893] veth1_vlan: entered promiscuous mode
[ 1020.683564][ T2893] veth1_macvtap: left promiscuous mode
[ 1020.690330][ T2893] veth0_macvtap: left promiscuous mode
[ 1020.697020][ T2893] veth0_macvtap: entered promiscuous mode
[ 1020.704050][ T2893] veth1_macvtap: entered promiscuous mode
[ 1020.725582][ T2893] batman_adv: batadv0: Interface activated: macsec1
[ 1020.753453][ T2893] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1020.775416][ T2893] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1020.785963][ T2893] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1020.797269][ T2893] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1020.806208][ T2893] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1020.815266][ T2893] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1020.824212][ T2893] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1020.845934][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1020.863611][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1020.929117][ T5761] team_slave_0: entered promiscuous mode
[ 1020.934843][ T5761] team_slave_1: entered promiscuous mode
[ 1020.943525][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1020.961243][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1021.038225][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1021.065154][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1021.476365][   T30] audit: type=1804 audit(1779048111.054:30): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7260" name="/newroot/197/cgroup.controllers" dev="tmpfs" ino=1030 res=1 errno=0
[ 1021.501918][   T30] audit: type=1800 audit(1779048111.054:31): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7260" name="cgroup.controllers" dev="tmpfs" ino=1030 res=0 errno=0
[ 1021.789279][ T2943] netlink: 'syz.0.7265': attribute type 8 has an invalid length.
[ 1022.110409][ T2967] netlink: 'syz.0.7268': attribute type 1 has an invalid length.
[ 1022.609016][ T2990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[ 1023.104632][ T3025] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002
[ 1023.453939][T18601] IPVS: starting estimator thread 0...
[ 1023.507235][ T3040] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1023.638020][ T3041] __nla_validate_parse: 36 callbacks suppressed
[ 1023.638039][ T3041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7289'.
[ 1023.707182][ T3040] IPVS: persistence engine module ip_vs_pe_‘‚ not found
[ 1023.908751][ T3058] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode
[ 1023.918393][ T3058] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode
[ 1023.929433][ T3037] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1024.085230][ T3063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7294'.
[ 1024.097256][ T3063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7294'.
[ 1024.229545][ T3061] lo speed is unknown, defaulting to 1000
[ 1024.247937][ T3061] lo speed is unknown, defaulting to 1000
[ 1024.510957][ T3076] SET target dimension over the limit!
[ 1024.593788][ T3078] netlink: 'syz.4.7297': attribute type 1 has an invalid length.
[ 1024.631562][ T3078] bond3: entered promiscuous mode
[ 1024.636733][ T3078] bond3: entered allmulticast mode
[ 1024.642354][ T3078] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1024.677881][ T3078] macvlan3: entered promiscuous mode
[ 1024.715942][ T3078] macvlan3: entered allmulticast mode
[ 1024.725022][ T3078] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1024.822506][ T3089] netlink: 'syz.4.7297': attribute type 6 has an invalid length.
[ 1025.103463][ T3110] geneve4: entered promiscuous mode
[ 1025.128464][   T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 54153 - 0
[ 1025.165970][   T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 54153 - 0
[ 1025.191262][   T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 54153 - 0
[ 1025.208630][   T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 54153 - 0
[ 1025.423741][ T3127] only policy match revision 0 supported
[ 1025.423762][ T3127] unable to load match
[ 1025.620516][ T3135] sctp: [Deprecated]: syz.4.7317 (pid 3135) Use of int in max_burst socket option.
[ 1025.620516][ T3135] Use struct sctp_assoc_value instead
[ 1026.020377][ T3143] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1026.078383][ T3146] bridge5: entered promiscuous mode
[ 1026.083713][ T3146] bridge5: entered allmulticast mode
[ 1026.210731][ T3155] Cannot find add_set index 0 as target
[ 1026.269429][ T3157] bond6: entered promiscuous mode
[ 1026.275163][ T3157] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1026.382521][ T3161] bond4 (unregistering): Released all slaves
[ 1026.700831][ T3174] xt_cgroup: xt_cgroup: no path or classid specified
[ 1026.742434][ T3174] gre1: entered allmulticast mode
[ 1026.876330][ T3187] netlink: 'syz.4.7334': attribute type 1 has an invalid length.
[ 1026.976557][ T3198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7337'.
[ 1026.987278][ T3198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7337'.
[ 1027.040867][ T3198] ip6gre2: entered promiscuous mode
[ 1027.046155][ T3198] ip6gre2: entered allmulticast mode
[ 1027.158778][ T3204] lo speed is unknown, defaulting to 1000
[ 1027.168211][ T3204] lo speed is unknown, defaulting to 1000
[ 1027.203353][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7339'.
[ 1027.585706][ T3230] mac80211_hwsim hwsim84 wlan0: entered allmulticast mode
[ 1027.720285][ T3239] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7346'.
[ 1028.230772][ T3259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7352'.
[ 1028.255475][ T3260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7349'.
[ 1028.278162][ T3259] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[ 1028.278588][ T3262] netlink: 'syz.3.7353': attribute type 1 has an invalid length.
[ 1028.304586][   T29] IPVS: starting estimator thread 0...
[ 1028.330396][ T3262] bond7: entered promiscuous mode
[ 1028.349709][ T3262] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1028.381485][ T3264] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1028.388715][ T3264] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[ 1028.398921][ T3264] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[ 1028.411778][ T3264] bond7: (slave vcan1): making interface the new active one
[ 1028.419109][ T3264] vcan1: entered promiscuous mode
[ 1028.426102][ T3264] bond7: (slave vcan1): Enslaving as an active interface with an up link
[ 1028.453215][ T3263] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1028.973400][ T3284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7358'.
[ 1028.982460][ T3284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7358'.
[ 1029.405632][ T3294] lo speed is unknown, defaulting to 1000
[ 1029.414787][ T3294] lo speed is unknown, defaulting to 1000
[ 1029.730418][ T3315] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1029.839946][ T3319] bridge_slave_1: left allmulticast mode
[ 1029.845671][ T3319] bridge_slave_1: left promiscuous mode
[ 1029.852712][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.885796][ T3323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'.
[ 1029.897942][ T3323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7370'.
[ 1030.206467][ T3338] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1030.392338][ T3342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7374'.
[ 1030.813567][ T5641] Bluetooth: hci5: command 0x0406 tx timeout
[ 1031.043299][ T3374] lo speed is unknown, defaulting to 1000
[ 1031.053089][ T3374] lo speed is unknown, defaulting to 1000
[ 1031.067978][ T3380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1031.379793][ T3385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7386'.
[ 1031.699572][ T3390] syzkaller0: entered promiscuous mode
[ 1031.710521][ T3390] 0: reclassify loop, rule prio 0, protocol 700
[ 1032.068885][ T3412] IPVS: Scheduler module ip_vs_sip not found
[ 1032.250975][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7396'.
[ 1032.842233][ T3439] lo speed is unknown, defaulting to 1000
[ 1032.890415][ T3446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7404'.
[ 1032.925381][ T3441] bond7: invalid ARP target 0.0.0.0 specified for addition
[ 1032.932893][ T3441] bond7: option arp_ip_target: invalid value (0)
[ 1032.942349][ T3441] bond7 (unregistering): Released all slaves
[ 1032.952510][   T30] audit: type=1107 audit(1779048122.534:32): pid=3445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1032.988405][ T3446] team0: Failed to send options change via netlink (err -105)
[ 1032.996158][ T3446] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[ 1033.005637][ T3446] team0: Port device team_slave_0 removed
[ 1033.045829][ T3439] lo speed is unknown, defaulting to 1000
[ 1033.053330][ T3439] lo speed is unknown, defaulting to 1000
[ 1033.262305][ T3454] lo speed is unknown, defaulting to 1000
[ 1033.274034][ T3454] lo speed is unknown, defaulting to 1000
[ 1033.513290][ T3461] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1033.549671][ T3461] bond4 (unregistering): Released all slaves
[ 1033.578974][ T3465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7407'.
[ 1033.648571][ T3464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7409'.
[ 1033.703475][ T3439] infiniband sqz0: set down
[ 1033.708254][T18601] lo speed is unknown, defaulting to 1000
[ 1033.717552][ T3439] infiniband sqz0: added lo
[ 1033.770994][ T3439] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1033.811833][ T3439] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1033.872160][ T3439] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1033.952487][ T3439] RDS/IB: sqz0: added
[ 1033.976813][ T3439] smc: adding ib device sqz0 with port count 1
[ 1033.991229][ T3439] smc:    ib device sqz0 port 1 has no pnetid
[ 1034.004486][   T29] lo speed is unknown, defaulting to 1000
[ 1034.015482][ T3439] lo speed is unknown, defaulting to 1000
[ 1034.038540][ T3474] __nla_validate_parse: 2 callbacks suppressed
[ 1034.038558][ T3474] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7411'.
[ 1034.084498][ T3474] netlink: 'syz.3.7411': attribute type 2 has an invalid length.
[ 1034.715874][ T3439] lo speed is unknown, defaulting to 1000
[ 1034.750948][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7417'.
[ 1034.843609][ T3494] syzkaller0: entered allmulticast mode
[ 1035.093359][ T3439] lo speed is unknown, defaulting to 1000
[ 1035.100217][ T5638] Bluetooth: hci2: link tx timeout
[ 1035.111304][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1035.254616][ T3507] FAULT_INJECTION: forcing a failure.
[ 1035.254616][ T3507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1035.269138][ T3507] CPU: 1 UID: 0 PID: 3507 Comm: syz.2.7421 Not tainted syzkaller #0 PREEMPT(full) 
[ 1035.269164][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1035.269176][ T3507] Call Trace:
[ 1035.269184][ T3507]  <TASK>
[ 1035.269193][ T3507]  dump_stack_lvl+0xe8/0x150
[ 1035.269221][ T3507]  should_fail_ex+0x412/0x560
[ 1035.269252][ T3507]  _copy_from_iter+0x3b0/0x1670
[ 1035.269280][ T3507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.269323][ T3507]  ? __pfx__copy_from_iter+0x10/0x10
[ 1035.269365][ T3507]  bcm_sendmsg+0x172/0x6c0
[ 1035.269397][ T3507]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 1035.269429][ T3507]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1035.269457][ T3507]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1035.269489][ T3507]  ____sys_sendmsg+0x972/0x9f0
[ 1035.269518][ T3507]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1035.269548][ T3507]  ? import_iovec+0x73/0xa0
[ 1035.269599][ T3507]  ___sys_sendmsg+0x2a5/0x360
[ 1035.269619][ T3507]  ? __lock_acquire+0x6b5/0x2cf0
[ 1035.269646][ T3507]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1035.269705][ T3507]  ? __fget_files+0x2a/0x420
[ 1035.269730][ T3507]  ? __fget_files+0x3a0/0x420
[ 1035.269766][ T3507]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1035.269790][ T3507]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1035.269822][ T3507]  ? __pfx_ksys_write+0x10/0x10
[ 1035.269861][ T3507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.269884][ T3507]  do_syscall_64+0x15f/0xf80
[ 1035.269913][ T3507]  ? trace_irq_disable+0x3b/0x140
[ 1035.269943][ T3507]  ? clear_bhb_loop+0x40/0x90
[ 1035.269969][ T3507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.269990][ T3507] RIP: 0033:0x7f4af379ce59
[ 1035.270009][ T3507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1035.270025][ T3507] RSP: 002b:00007f4af4676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1035.270046][ T3507] RAX: ffffffffffffffda RBX: 00007f4af3a15fa0 RCX: 00007f4af379ce59
[ 1035.270061][ T3507] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1035.270075][ T3507] RBP: 00007f4af4676090 R08: 0000000000000000 R09: 0000000000000000
[ 1035.270088][ T3507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1035.270100][ T3507] R13: 00007f4af3a16038 R14: 00007f4af3a15fa0 R15: 00007ffe4dc84318
[ 1035.270134][ T3507]  </TASK>
[ 1035.702533][ T3439] lo speed is unknown, defaulting to 1000
[ 1035.702560][ T3512] netlink: 'syz.2.7423': attribute type 12 has an invalid length.
[ 1035.754883][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7423'.
[ 1035.770451][ T3512] gtp0: entered promiscuous mode
[ 1035.775449][ T3512] gtp0: entered allmulticast mode
[ 1035.788590][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7424'.
[ 1035.906388][ T3519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7425'.
[ 1036.103705][ T3439] lo speed is unknown, defaulting to 1000
[ 1036.146283][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7428'.
[ 1036.224984][ T3532] xt_hashlimit: max too large, truncated to 1048576
[ 1036.325386][ T3537] atomic_op ffff8880b364a198 conn xmit_atomic 0000000000000000
[ 1036.414255][ T3544] FAULT_INJECTION: forcing a failure.
[ 1036.414255][ T3544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1036.427459][ T3544] CPU: 0 UID: 0 PID: 3544 Comm: syz.2.7433 Not tainted syzkaller #0 PREEMPT(full) 
[ 1036.427486][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1036.427499][ T3544] Call Trace:
[ 1036.427507][ T3544]  <TASK>
[ 1036.427516][ T3544]  dump_stack_lvl+0xe8/0x150
[ 1036.427546][ T3544]  should_fail_ex+0x412/0x560
[ 1036.427579][ T3544]  _copy_to_user+0x31/0xb0
[ 1036.427612][ T3544]  simple_read_from_buffer+0xe1/0x170
[ 1036.427644][ T3544]  proc_fail_nth_read+0x1bb/0x230
[ 1036.427674][ T3544]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1036.427704][ T3544]  ? rw_verify_area+0x2a6/0x4d0
[ 1036.427732][ T3544]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1036.427761][ T3544]  vfs_read+0x20c/0xa70
[ 1036.427824][ T3544]  ? __pfx___mutex_lock+0x10/0x10
[ 1036.427845][ T3544]  ? __pfx_vfs_read+0x10/0x10
[ 1036.427875][ T3544]  ? __fget_files+0x2a/0x420
[ 1036.427905][ T3544]  ? __fget_files+0x3a0/0x420
[ 1036.427929][ T3544]  ? __fget_files+0x2a/0x420
[ 1036.427962][ T3544]  ksys_read+0x150/0x270
[ 1036.427998][ T3544]  ? __pfx_ksys_read+0x10/0x10
[ 1036.428035][ T3544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.428058][ T3544]  do_syscall_64+0x15f/0xf80
[ 1036.428086][ T3544]  ? trace_irq_disable+0x3b/0x140
[ 1036.428117][ T3544]  ? clear_bhb_loop+0x40/0x90
[ 1036.428142][ T3544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.428171][ T3544] RIP: 0033:0x7f4af375d68e
[ 1036.428190][ T3544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1036.428208][ T3544] RSP: 002b:00007f4af4675fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1036.428229][ T3544] RAX: ffffffffffffffda RBX: 00007f4af46766c0 RCX: 00007f4af375d68e
[ 1036.428244][ T3544] RDX: 000000000000000f RSI: 00007f4af46760a0 RDI: 0000000000000004
[ 1036.428256][ T3544] RBP: 00007f4af4676090 R08: 0000000000000000 R09: 0000000000000000
[ 1036.428269][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1036.428280][ T3544] R13: 00007f4af3a16038 R14: 00007f4af3a15fa0 R15: 00007ffe4dc84318
[ 1036.428314][ T3544]  </TASK>
[ 1036.593703][ T3439] lo speed is unknown, defaulting to 1000
[ 1037.163133][ T5638] Bluetooth: hci2: command 0x0405 tx timeout
[ 1037.232179][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1037.250804][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1037.285820][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1037.303159][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1037.330685][ T3439] lo speed is unknown, defaulting to 1000
[ 1037.455508][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7441'.
[ 1037.464534][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7441'.
[ 1037.584224][ T3585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7443'.
[ 1037.615396][ T3585] netlink: 'syz.2.7443': attribute type 1 has an invalid length.
[ 1037.813455][ T3439] lo speed is unknown, defaulting to 1000
[ 1038.040104][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7448'.
[ 1038.165330][ T3439] lo speed is unknown, defaulting to 1000
[ 1038.533660][ T3439] lo speed is unknown, defaulting to 1000
[ 1038.560879][ T3620] netlink: 'syz.4.7453': attribute type 15 has an invalid length.
[ 1038.571431][ T3620] team0: entered promiscuous mode
[ 1038.576537][ T3620] team_slave_0: entered promiscuous mode
[ 1038.582765][ T3620] team_slave_1: entered promiscuous mode
[ 1038.595823][ T3620] netlink: 'syz.4.7453': attribute type 15 has an invalid length.
[ 1038.728669][ T3630] tipc: Started in network mode
[ 1038.744982][ T3630] tipc: Node identity 080211000001, cluster identity 4711
[ 1038.767436][ T3630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1039.082433][T18605] IPVS: starting estimator thread 0...
[ 1039.129277][ T3652] __nla_validate_parse: 8 callbacks suppressed
[ 1039.129297][ T3652] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7460'.
[ 1039.177797][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1039.187345][ T3643] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.203030][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1039.222871][ T3650] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1039.273858][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1039.284181][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1039.296849][ T3643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1039.307197][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1039.323560][ T3643] veth1_vlan: left promiscuous mode
[ 1039.343281][ T3643] veth0_vlan: left promiscuous mode
[ 1039.349540][ T3643] veth0_vlan: entered promiscuous mode
[ 1039.359369][ T3643] veth1_vlan: entered promiscuous mode
[ 1039.369950][ T3643] veth1_macvtap: left promiscuous mode
[ 1039.376574][ T3643] veth0_macvtap: left promiscuous mode
[ 1039.383728][ T3643] veth0_macvtap: entered promiscuous mode
[ 1039.390853][ T3643] veth1_macvtap: entered promiscuous mode
[ 1039.403679][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1039.412140][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1039.420323][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1039.428834][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1039.458186][ T3643] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1039.475146][ T5826] lo speed is unknown, defaulting to 1000
[ 1039.480925][ T5826] syz0: Port: 1 Link ACTIVE
[ 1039.486730][ T5826] lo speed is unknown, defaulting to 1000
[ 1039.500057][ T3439] lo speed is unknown, defaulting to 1000
[ 1039.630487][ T6262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.680583][ T6262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.689341][ T6262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.698071][ T6262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.772755][   T29] tipc: Node number set to 134418688
[ 1039.984831][ T3677] netlink: 'syz.2.7467': attribute type 1 has an invalid length.
[ 1040.130842][ T3439] lo speed is unknown, defaulting to 1000
[ 1040.173066][ T3677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7467'.
[ 1040.237083][ T3682] netlink: 'syz.2.7467': attribute type 1 has an invalid length.
[ 1040.330031][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7470'.
[ 1040.342659][ T3686] netlink: 'syz.0.7470': attribute type 8 has an invalid length.
[ 1040.544333][ T3689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7471'.
[ 1040.604359][ T3694] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1040.612494][ T3694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1040.620577][ T3694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1040.783177][ T3697] netlink: 'syz.3.7473': attribute type 3 has an invalid length.
[ 1040.837598][ T3697] netlink: 'syz.3.7473': attribute type 3 has an invalid length.
[ 1041.781217][ T3748] batadv0: entered promiscuous mode
[ 1041.797947][ T3748] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1042.102927][ T3759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7489'.
[ 1042.171518][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7490'.
[ 1042.202154][ T3765] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1042.297115][ T3770] netlink: 'syz.4.7492': attribute type 29 has an invalid length.
[ 1042.372543][ T3773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7493'.
[ 1042.451233][ T3775] lo speed is unknown, defaulting to 1000
[ 1042.460424][ T3775] lo speed is unknown, defaulting to 1000
[ 1042.622092][ T3777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7494'.
[ 1042.635602][ T3775] lo speed is unknown, defaulting to 1000
[ 1042.684125][ T3777] lo speed is unknown, defaulting to 1000
[ 1042.694744][ T3777] lo speed is unknown, defaulting to 1000
[ 1042.706434][ T3778] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7494'.
[ 1042.929901][ T3789] netlink: 'syz.0.7499': attribute type 1 has an invalid length.
[ 1043.053004][ T3789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7499'.
[ 1043.075086][ T3789] bond8: (slave bridge0): making interface the new active one
[ 1043.083689][ T3789] bond8: (slave bridge0): Enslaving as an active interface with an up link
[ 1043.103683][ T3787] tipc: Enabling <eth:lo> not permitted
[ 1043.109393][ T3787] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1043.230140][ T3797] xt_hashlimit: size too large, truncated to 1048576
[ 1043.321692][ T3789] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1044.185149][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.228571][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1044.692901][ T3796] tipc: Resetting bearer <eth:syzkaller0>
[ 1044.755157][ T3777] lo speed is unknown, defaulting to 1000
[ 1044.770547][ T3793] macvlan2: entered promiscuous mode
[ 1044.785188][ T3793] macvlan2: entered allmulticast mode
[ 1044.822759][ T3793] bond8: entered promiscuous mode
[ 1044.839225][ T3793] bridge0: entered promiscuous mode
[ 1044.845582][ T3793] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1044.853437][ T3793] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1044.871326][ T3793] bond8: left promiscuous mode
[ 1044.876147][ T3793] bridge0: left promiscuous mode
[ 1045.019529][ T3817] syzkaller1: entered promiscuous mode
[ 1045.025074][ T3817] syzkaller1: entered allmulticast mode
[ 1045.035364][T11277] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1045.066669][T11277] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.093062][T11277] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1045.202962][T11277] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1045.211579][T11277] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.219993][T11277] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1045.292836][T11277] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1045.301464][T11277] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.309953][T11277] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1045.318903][T11277] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1045.327872][T11277] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.336733][T11277] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1045.515783][ T3836] lo speed is unknown, defaulting to 1000
[ 1045.525088][ T3836] lo speed is unknown, defaulting to 1000
[ 1045.533844][ T3844] netlink: 'syz.0.7509': attribute type 1 has an invalid length.
[ 1045.640358][ T3844] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1045.685937][ T3844] bond9: (slave geneve3): making interface the new active one
[ 1045.699940][ T3844] bond9: (slave geneve3): Enslaving as an active interface with an up link
[ 1045.851004][ T3836] lo speed is unknown, defaulting to 1000
[ 1045.938167][ T3853] __nla_validate_parse: 2 callbacks suppressed
[ 1045.938196][ T3853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7511'.
[ 1045.964150][ T3852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7511'.
[ 1046.382042][ T3867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7516'.
[ 1046.603202][ T3860] ªªªªª»€: renamed from team_slave_1 (while UP)
[ 1047.184139][ T3876] vlan3: entered promiscuous mode
[ 1047.189326][ T3876] bridge0: entered promiscuous mode
[ 1047.205981][ T3879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7518'.
[ 1048.090957][ T3894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1048.748618][ T3919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.759291][ T3919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1048.786023][ T3919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 54153 - 0
[ 1048.842207][ T3938] netlink: 'syz.0.7533': attribute type 1 has an invalid length.
[ 1048.913285][ T3930] lo speed is unknown, defaulting to 1000
[ 1048.930114][ T3930] lo speed is unknown, defaulting to 1000
[ 1049.004568][ T3938] bond10: (slave bridge4): making interface the new active one
[ 1049.034013][ T3938] bond10: (slave bridge4): Enslaving as an active interface with an up link
[ 1049.143718][ T3952] netlink: 'syz.4.7536': attribute type 3 has an invalid length.
[ 1049.151511][ T3952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1049.243419][ T3954] openvswitch: netlink: Multiple metadata blocks provided
[ 1050.155418][ T3930] lo speed is unknown, defaulting to 1000
[ 1050.237434][ T3919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.248119][ T3919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1050.258500][ T3919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 54153 - 0
[ 1050.323427][ T3961] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1050.367169][ T3961] netlink: 'syz.2.7539': attribute type 58 has an invalid length.
[ 1050.375045][ T3961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7539'.
[ 1050.594445][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7541'.
[ 1050.850341][ T3919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.869638][ T3919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1050.880041][ T3919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 54153 - 0
[ 1052.469005][ T3919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.479328][ T3919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1052.489688][ T3919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 54153 - 0
[ 1052.515557][ T4027] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7548'.
[ 1052.643520][ T4020] lo speed is unknown, defaulting to 1000
[ 1052.652570][ T4020] lo speed is unknown, defaulting to 1000
[ 1052.683987][ T4021] netlink: 'syz.0.7548': attribute type 5 has an invalid length.
[ 1052.947233][ T4020] lo speed is unknown, defaulting to 1000
[ 1053.029769][T22732] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 54153 - 0
[ 1053.039400][T22732] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1053.047828][T22732] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[ 1053.083074][T22732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 54153 - 0
[ 1053.091595][T22732] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1053.100015][T22732] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[ 1053.185249][T22732] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 54153 - 0
[ 1053.200166][T22732] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1053.215562][T22732] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[ 1053.278852][ T6262] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 54153 - 0
[ 1053.287239][ T6262] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1053.313704][ T6262] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[ 1053.545215][ T4055] sctp: [Deprecated]: syz.4.7557 (pid 4055) Use of int in maxseg socket option.
[ 1053.545215][ T4055] Use struct sctp_assoc_value instead
[ 1053.568840][ T4056] sctp: [Deprecated]: syz.4.7557 (pid 4056) Use of int in maxseg socket option.
[ 1053.568840][ T4056] Use struct sctp_assoc_value instead
[ 1053.630346][ T4058] netlink: 'syz.4.7558': attribute type 1 has an invalid length.
[ 1053.647859][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7558'.
[ 1054.422551][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.582911][ T4081] netlink: 292 bytes leftover after parsing attributes in process `syz.2.7562'.
[ 1054.840670][ T4096] lo speed is unknown, defaulting to 1000
[ 1054.872152][ T4097] xt_hashlimit: size too large, truncated to 1048576
[ 1054.903785][ T4101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7568'.
[ 1054.945255][ T4096] lo speed is unknown, defaulting to 1000
[ 1055.585618][ T4096] lo speed is unknown, defaulting to 1000
[ 1055.688074][ T4131] netlink: 'syz.3.7577': attribute type 4 has an invalid length.
[ 1055.907018][ T4146] netlink: 'syz.0.7581': attribute type 1 has an invalid length.
[ 1055.989243][ T4146] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1056.010242][ T4146] bond11: (slave vxcan3): Error -95 calling set_mac_address
[ 1056.051308][ T4153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7581'.
[ 1056.141099][ T4158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7581'.
[ 1056.187443][ T4159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7584'.
[ 1056.210684][ T4159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7584'.
[ 1056.232383][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7584'.
[ 1056.329621][ T4158] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1056.717174][ T4187] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003
[ 1057.096021][ T4195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1057.425032][ T4204] lo speed is unknown, defaulting to 1000
[ 1057.434618][ T4204] lo speed is unknown, defaulting to 1000
[ 1057.865950][ T4217] bond5: up delay (5) is not a multiple of miimon (80), value rounded to 0 ms
[ 1057.877675][ T4217] bond5: entered promiscuous mode
[ 1057.883283][ T4217] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1057.971447][ T4204] lo speed is unknown, defaulting to 1000
[ 1058.128212][ T4229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7597'.
[ 1058.721528][ T4240] netlink: 180568 bytes leftover after parsing attributes in process `syz.1.7599'.
[ 1058.913490][ T4245] netlink: del zone limit has 8 unknown bytes
[ 1059.062559][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[ 1059.072442][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[ 1059.081342][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[ 1059.164016][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7605'.
[ 1060.662570][ T4320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7617'.
[ 1060.953051][ T4326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7619'.
[ 1061.135540][ T4331] sctp: [Deprecated]: syz.4.7619 (pid 4331) Use of int in maxseg socket option.
[ 1061.135540][ T4331] Use struct sctp_assoc_value instead
[ 1061.158876][ T4345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7623'.
[ 1061.854249][   T30] audit: type=1804 audit(1779048151.474:33): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7634" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1699 res=1 errno=0
[ 1061.877968][   T30] audit: type=1800 audit(1779048151.474:34): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7634" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0
[ 1061.998909][ T4383] bond0: entered promiscuous mode
[ 1062.004088][ T4383] bond_slave_0: entered promiscuous mode
[ 1062.009947][ T4383] bond_slave_1: entered promiscuous mode
[ 1062.031102][ T4383] batadv0: entered promiscuous mode
[ 1062.037228][ T4383] debugfs: 'hsr1' already exists in 'hsr'
[ 1062.043001][ T4383] Cannot create hsr debugfs directory
[ 1062.048555][ T4383] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1062.058482][ T4383] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1062.071026][ T4383] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1062.083063][ T4383] bond0: left promiscuous mode
[ 1062.087888][ T4383] bond_slave_0: left promiscuous mode
[ 1062.093502][ T4383] bond_slave_1: left promiscuous mode
[ 1062.100702][ T4383] batadv0: left promiscuous mode
[ 1062.212147][ T4393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7639'.
[ 1062.652306][ T4417] x_tables: duplicate entry at hook 3
[ 1062.708999][ T4373] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1062.720061][ T4417] netlink: 'syz.4.7645': attribute type 1 has an invalid length.
[ 1062.746722][ T4373] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1062.865071][ T4427] macvtap1: entered promiscuous mode
[ 1062.870426][ T4427] team0: entered promiscuous mode
[ 1062.875493][ T4427] team_slave_0: entered promiscuous mode
[ 1062.881353][ T4427] team_slave_1: entered promiscuous mode
[ 1062.887811][ T4427] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1062.895093][ T4427] team0: Device macvtap1 is already an upper device of the team interface
[ 1062.920021][ T4427] team0: left promiscuous mode
[ 1062.924847][ T4427] team_slave_0: left promiscuous mode
[ 1062.930449][ T4427] team_slave_1: left promiscuous mode
[ 1063.007635][ T4433] netlink: 'syz.4.7649': attribute type 10 has an invalid length.
[ 1063.207757][ T4445] __nla_validate_parse: 9 callbacks suppressed
[ 1063.207778][ T4445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7653'.
[ 1063.230878][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.274027][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.297245][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.321062][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.353045][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.397985][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.422372][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.447580][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.473786][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.526694][ T4438] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1063.921985][ T4468] netlink: 4192 bytes leftover after parsing attributes in process `syz.1.7658'.
[ 1064.119552][ T4475] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7659'.
[ 1064.191573][ T4477] bridge5: entered promiscuous mode
[ 1064.269947][ T4478] xt_bpf: check failed: parse error
[ 1066.580466][ T4451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1066.590666][ T4455] netlink: 'syz.2.7654': attribute type 1 has an invalid length.
[ 1066.598786][ T4455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7654'.
[ 1066.619638][ T4455] netlink: 'syz.2.7654': attribute type 1 has an invalid length.
[ 1066.627376][ T4455] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7654'.
[ 1066.636393][ T4455] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7654'.
[ 1066.670202][ T5641] Bluetooth: hci3: command 0x0406 tx timeout
[ 1066.971561][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'.
[ 1067.026463][ T4500] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20000
[ 1067.065761][ T4501] xt_CT: No such helper "snmp"
[ 1067.084667][ T4510] netlink: 'syz.3.7670': attribute type 13 has an invalid length.
[ 1067.282625][ T4513] syzkaller0: Caught tx_queue_len zero misconfig
[ 1067.352224][ T4516] tipc: New replicast peer: 255.255.255.255
[ 1067.359151][ T4516] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1067.377948][ T4528] geneve4: entered allmulticast mode
[ 1067.458966][ T4528] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1067.587434][ T4538] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7679'.
[ 1067.644388][ T4534] lo speed is unknown, defaulting to 1000
[ 1067.657264][ T4540] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.7680'.
[ 1067.691525][ T4534] lo speed is unknown, defaulting to 1000
[ 1067.917632][ T4534] lo speed is unknown, defaulting to 1000
[ 1068.416994][ T4562] tipc: Cannot configure node identity twice
[ 1068.612458][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7687'.
[ 1068.754867][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1068.813739][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1069.292773][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1069.304203][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1069.597385][T18601] lo speed is unknown, defaulting to 1000
[ 1069.615011][T18601] syz0: Port: 1 Link DOWN
[ 1069.693539][ T6262] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.716809][T18601] lo speed is unknown, defaulting to 1000
[ 1069.716835][ T6262] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.736942][ T6262] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.748858][ T4600] net_ratelimit: 24 callbacks suppressed
[ 1069.748875][ T4600] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1069.787974][ T4600] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1069.788256][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7694'.
[ 1069.822068][ T6262] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.095097][ T4613] netlink: 'syz.3.7696': attribute type 12 has an invalid length.
[ 1070.149778][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7697'.
[ 1070.208589][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7697'.
[ 1070.405487][ T4638] netlink: 'syz.3.7702': attribute type 1 has an invalid length.
[ 1070.434988][ T4641] IPv6: Can't replace route, no match found
[ 1070.467769][ T4638] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1070.496340][ T4642] bond8: (slave veth1): Enslaving as an active interface with a down link
[ 1070.543804][ T4638] bond8: (slave dummy0): making interface the new active one
[ 1070.587441][ T4638] dummy0: entered promiscuous mode
[ 1070.593053][ T4638] bond8: (slave dummy0): Enslaving as an active interface with an up link
[ 1070.618736][ T4638] netlink: 'syz.3.7702': attribute type 10 has an invalid length.
[ 1070.641520][ T4638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7702'.
[ 1070.643216][ T4648] lo speed is unknown, defaulting to 1000
[ 1070.660363][ T4648] lo speed is unknown, defaulting to 1000
[ 1070.706977][ T4638] bond8: (slave dummy0): Releasing active interface
[ 1070.911784][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1070.956192][ T4642] 8021q: adding VLAN 0 to HW filter on device team0
[ 1070.964461][ T4642] dummy0: left promiscuous mode
[ 1070.974654][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1071.089085][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1071.099139][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1071.127067][ T4642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1071.137449][ T4642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1071.163961][ T4642] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.173905][ T4642] veth1_vlan: left promiscuous mode
[ 1071.182731][ T4642] veth0_vlan: left promiscuous mode
[ 1071.189677][ T4642] veth0_vlan: entered promiscuous mode
[ 1071.203032][ T4642] veth1_vlan: entered promiscuous mode
[ 1071.212149][ T4642] veth0_macvtap: left promiscuous mode
[ 1071.219113][ T4642] veth0_macvtap: entered promiscuous mode
[ 1071.226639][ T4642] veth0_macvtap: entered allmulticast mode
[ 1071.252303][ T4642] mac80211_hwsim hwsim81 wlan0: left promiscuous mode
[ 1071.259499][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7710'.
[ 1071.276822][ T4642] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.296288][ T4642] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1071.312912][ T4642] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1071.322630][ T4642] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1071.332159][ T4642] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1071.357589][ T4642] syzkaller0: left promiscuous mode
[ 1071.367348][ T4642] bond5: left promiscuous mode
[ 1071.373659][ T4642] ip6erspan0: left promiscuous mode
[ 1071.379518][ T4642] geneve3: left promiscuous mode
[ 1071.386120][ T4642] geneve4: left promiscuous mode
[ 1071.391615][ T4642] bridge5: left promiscuous mode
[ 1071.397094][ T4642] bond6: left promiscuous mode
[ 1071.407887][ T4642] bond7: left promiscuous mode
[ 1071.412670][ T4642] vcan1: left promiscuous mode
[ 1071.419597][ T4642] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.429793][ T4642] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1071.437667][ T4642] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.460699][ T4642] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1071.473350][ T4642] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.483814][ T4642] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1071.492437][ T4642] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.502692][ T4642] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1071.510702][ T4642] ip6erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1071.523618][ T4644] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7705'.
[ 1071.532621][ T4644] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7705'.
[ 1071.541570][ T4644] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1071.616855][ T4648] lo speed is unknown, defaulting to 1000
[ 1071.697630][ T4669] netlink: 'syz.3.7711': attribute type 11 has an invalid length.
[ 1071.766863][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1071.775130][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1071.862471][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1071.870837][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1071.895397][T22742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1071.914964][   T13] bond8: (slave veth1): link status definitely up, 10000 Mbps full duplex
[ 1071.928390][   T13] bond8: (slave veth1): making interface the new active one
[ 1071.960573][   T13] bond8: active interface up!
[ 1072.223046][ T4683] xt_hashlimit: size too large, truncated to 1048576
[ 1072.668548][ T4690] ipip1: entered promiscuous mode
[ 1072.709646][ T4690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip1
[ 1072.723075][ T4690] gretap2: entered promiscuous mode
[ 1072.728330][ T4690] gretap2: entered allmulticast mode
[ 1073.389862][ T4705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1073.492953][ T4704] tipc: Disabling bearer <eth:syzkaller0>
[ 1073.546778][ T4719] netlink: 'syz.3.7722': attribute type 1 has an invalid length.
[ 1073.608033][ T4719] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1073.653466][ T4719] bond9: (slave gretap3): making interface the new active one
[ 1073.664581][ T4719] bond9: (slave gretap3): Enslaving as an active interface with an up link
[ 1073.876530][ T4733] __nla_validate_parse: 4 callbacks suppressed
[ 1073.876550][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7725'.
[ 1074.284663][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7729'.
[ 1074.523546][ T4765] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7732'.
[ 1074.712364][ T4780] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1075.074684][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7743'.
[ 1075.074684][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7743'.
[ 1075.288438][ T4810] lo speed is unknown, defaulting to 1000
[ 1075.296525][ T4810] lo speed is unknown, defaulting to 1000
[ 1075.591497][ T4810] lo speed is unknown, defaulting to 1000
[ 1075.643205][ T4827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1075.832906][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1076.466609][ T4860] bond10 (unregistering): Released all slaves
[ 1077.391970][ T4903] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1077.401859][ T4903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54153 - 0
[ 1077.411725][ T4903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1077.437340][ T4908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7769'.
[ 1077.455917][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7768'.
[ 1077.471884][ T4903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[ 1077.830433][ T4919] mac80211_hwsim hwsim88 syzkaller0: left promiscuous mode
[ 1077.837839][ T4919] mac80211_hwsim hwsim88 syzkaller0: left allmulticast mode
[ 1077.846046][ T4919] tipc: Resetting bearer <eth:syzkaller0>
[ 1078.038993][ T4921] veth7: entered promiscuous mode
[ 1078.275660][ T4929] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1078.367557][ T4934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7776'.
[ 1078.629842][ T4949] lo speed is unknown, defaulting to 1000
[ 1078.672283][ T4949] lo speed is unknown, defaulting to 1000
[ 1078.725369][ T4959] netlink: 'syz.0.7782': attribute type 11 has an invalid length.
[ 1078.736248][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7783'.
[ 1078.823936][ T4963] netlink: 'syz.1.7781': attribute type 39 has an invalid length.
[ 1078.843695][ T4960] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7783'.
[ 1079.060082][ T4949] lo speed is unknown, defaulting to 1000
[ 1079.156919][ T4968] __nla_validate_parse: 1 callbacks suppressed
[ 1079.156937][ T4968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7785'.
[ 1079.213232][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7785'.
[ 1079.370286][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7785'.
[ 1079.517500][ T4903] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1079.527318][ T4903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54153 - 0
[ 1079.586816][ T4903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1079.599782][ T4903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[ 1079.640161][ T4985] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7788'.
[ 1079.742600][ T4985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7788'.
[ 1079.758635][ T4988] netlink: 'syz.2.7789': attribute type 1 has an invalid length.
[ 1079.788533][ T4985] veth1_to_team: entered promiscuous mode
[ 1079.796875][ T4985] veth1_to_team: left promiscuous mode
[ 1079.821721][ T4989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7789'.
[ 1079.875300][ T4988] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1079.923002][ T4903] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1079.932854][ T4903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54153 - 0
[ 1079.942682][ T4903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1079.954291][ T4903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[ 1080.043686][ T4998] netlink: 'syz.0.7791': attribute type 10 has an invalid length.
[ 1080.061101][ T4998] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.073629][ T4998] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1080.158724][ T5006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7791'.
[ 1080.307194][ T4903] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1080.317011][ T4903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54153 - 0
[ 1080.392869][ T4903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1080.408163][ T4903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[ 1080.539306][ T5012] lo speed is unknown, defaulting to 1000
[ 1080.624426][ T5012] lo speed is unknown, defaulting to 1000
[ 1080.837008][ T5021] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7796'.
[ 1080.932644][ T5027] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1080.940584][ T5027] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1080.950850][   T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1080.988701][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.004563][   T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 54153 - 0
[ 1081.015608][   T36] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[ 1081.178445][ T6262] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1081.212023][ T6262] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.220279][ T6262] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 54153 - 0
[ 1081.228573][ T6262] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[ 1081.236902][ T6262] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1081.294813][ T6262] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.303057][ T6262] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 54153 - 0
[ 1081.311373][ T6262] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[ 1081.319789][T11276] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1081.341350][T11276] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.373980][T11276] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 54153 - 0
[ 1081.399675][T11276] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[ 1081.512737][ T5012] lo speed is unknown, defaulting to 1000
[ 1081.858420][ T5064] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7802'.
[ 1082.105781][ T5067] team0: entered promiscuous mode
[ 1082.114373][ T5067] team_slave_0: entered promiscuous mode
[ 1082.124168][ T5067] ªªªªª»€: entered promiscuous mode
[ 1082.160844][ T5067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1082.522846][ T5087] syzkaller1: entered promiscuous mode
[ 1082.528381][ T5087] syzkaller1: entered allmulticast mode
[ 1082.609227][ T5087] netlink: 'syz.3.7809': attribute type 3 has an invalid length.
[ 1082.882626][ T5113] tun0: tun_chr_ioctl cmd 1074025681
[ 1083.570298][ T5131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7817'.
[ 1083.720744][ T5136] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1083.782042][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1084.151415][ T5161] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[ 1084.287172][ T5168] lo speed is unknown, defaulting to 1000
[ 1084.295740][ T5168] lo speed is unknown, defaulting to 1000
[ 1084.493401][ T5168] lo speed is unknown, defaulting to 1000
[ 1084.565643][ T5177] netlink: 'syz.1.7830': attribute type 10 has an invalid length.
[ 1084.577343][ T5177] team_slave_0: left promiscuous mode
[ 1084.583909][ T5177] team_slave_1: left promiscuous mode
[ 1085.699337][ T5194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1085.881649][ T5210] __nla_validate_parse: 2 callbacks suppressed
[ 1085.881669][ T5210] netlink: 41 bytes leftover after parsing attributes in process `syz.0.7841'.
[ 1085.941216][ T5210] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7841'.
[ 1085.950324][ T5210] netlink: 41 bytes leftover after parsing attributes in process `syz.0.7841'.
[ 1085.999148][ T5216] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7842'.
[ 1086.327138][ T5233] netlink: 'syz.1.7848': attribute type 3 has an invalid length.
[ 1086.348061][ T5233] nbd: nbd1 already in use
[ 1086.384493][ T5233] block nbd1: NBD_DISCONNECT
[ 1086.391481][ T5233] block nbd1: Send disconnect failed -32
[ 1086.397176][ T5233] block nbd1: Send disconnect failed -32
[ 1086.433368][ T5244] siw: device registration error -23
[ 1086.519432][T22732] veth1_to_bridge: left allmulticast mode
[ 1086.526866][T22732] veth1_to_bridge: left promiscuous mode
[ 1086.550775][T22732] bridge0: port 3(veth1_to_bridge) entered disabled state
[ 1086.560234][T22732] bridge_slave_1: left allmulticast mode
[ 1086.579822][T22732] bridge_slave_1: left promiscuous mode
[ 1086.585727][T22732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.604239][T22732] tipc: Resetting bearer <eth:xfrm0>
[ 1086.724829][T22732] tipc: Disabling bearer <eth:xfrm0>
[ 1086.780205][T22732] bond4 (unregistering): (slave gretap1): Releasing active interface
[ 1086.892091][T22732] team0: Port device geneve1 removed
[ 1087.879184][T22732] bond0 (unregistering): left promiscuous mode
[ 1087.885385][T22732] bond_slave_0: left promiscuous mode
[ 1087.890910][T22732] bond_slave_1: left promiscuous mode
[ 1087.898115][T22732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.909584][T22732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.920126][T22732] bond0 (unregistering): Released all slaves
[ 1087.931222][T22732] bond1 (unregistering): Released all slaves
[ 1087.947126][T22732] bond2 (unregistering): Released all slaves
[ 1087.962132][T22732] bond3 (unregistering): Released all slaves
[ 1087.992283][T22732] bond4 (unregistering): Released all slaves
[ 1088.010367][T22732] bond5 (unregistering): Released all slaves
[ 1088.028695][T22732] bond6 (unregistering): Released all slaves
[ 1088.047983][T22732] bond7 (unregistering): Released all slaves
[ 1088.066128][T22732] bond8 (unregistering): Released all slaves
[ 1088.093497][T22732] bond9 (unregistering): Released all slaves
[ 1088.215316][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7857'.
[ 1088.225890][ T5264] xt_TCPMSS: Only works on TCP SYN packets
[ 1088.228097][ T5265] xt_TCPMSS: Only works on TCP SYN packets
[ 1088.284975][ T5269] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7859'.
[ 1088.294197][ T5269] .70·X: renamed from veth1_virt_wifi
[ 1088.324550][ T5269] .70·X: entered allmulticast mode
[ 1088.334787][ T5269] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check.
[ 1088.574725][T22732] tipc: Left network mode
[ 1088.768674][T22732] IPVS: stopping backup sync thread 29049 ...
[ 1089.000667][ T5301] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 1089.068173][ T5304] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000
[ 1089.338835][ T5313] netlink: 540 bytes leftover after parsing attributes in process `syz.0.7870'.
[ 1089.551252][ T5283] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1089.721852][ T5326] netlink: 'syz.2.7873': attribute type 9 has an invalid length.
[ 1089.785905][ T5326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1089.794795][ T5326] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode
[ 1089.802433][ T5326] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode
[ 1089.810433][ T5326] tipc: Resetting bearer <eth:syzkaller0>
[ 1089.816502][ T5328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7874'.
[ 1089.826898][ T5328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7874'.
[ 1089.856843][ T5326] syzkaller0: mtu less than device minimum
[ 1090.055416][ T5334] bond8 (unregistering): Released all slaves
[ 1090.275413][ T5360] 
: renamed from bond0
[ 1090.286516][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7883'.
[ 1090.337562][ T5360] team1: entered promiscuous mode
[ 1090.342835][ T5360] team1: entered allmulticast mode
[ 1090.350579][ T5360] 8021q: adding VLAN 0 to HW filter on device team1
[ 1090.359917][ T5363] team2 (uninitialized): Failed to send options change via netlink (err -105)
[ 1090.430745][ T5363] team2: entered promiscuous mode
[ 1090.437913][ T5363] team2: entered allmulticast mode
[ 1090.444016][ T5363] 8021q: adding VLAN 0 to HW filter on device team2
[ 1090.710909][ T5372] xt_hashlimit: size too large, truncated to 1048576
[ 1090.755899][ T5638] Bluetooth: hci0: command 0x0401 tx timeout
[ 1090.786104][ T5380] hsr0: entered promiscuous mode
[ 1090.795220][ T5353] Bluetooth: hci0: Opcode 0x0401 failed: -110
[ 1091.009318][ T5387] __nla_validate_parse: 2 callbacks suppressed
[ 1091.009339][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7889'.
[ 1091.078632][ T5372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1091.278956][ T5400] block nbd0: reconnected socket
[ 1091.451950][ T5638] block nbd0: Receive control failed (result -32)
[ 1091.503599][ T5409] netlink: 'syz.0.7896': attribute type 13 has an invalid length.
[ 1091.511470][ T5409] netlink: 'syz.0.7896': attribute type 11 has an invalid length.
[ 1091.684803][ T5414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7898'.
[ 1091.694938][ T5414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7898'.
[ 1091.845364][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7900'.
[ 1092.126627][ T5426] ipvlan2: entered promiscuous mode
[ 1092.137974][ T5426] bridge0: port 1(ipvlan2) entered blocking state
[ 1092.145491][ T5426] bridge0: port 1(ipvlan2) entered disabled state
[ 1092.177434][ T5426] ipvlan2: entered allmulticast mode
[ 1092.195203][ T5426] bridge0: entered allmulticast mode
[ 1092.221041][ T5426] ipvlan2: left allmulticast mode
[ 1092.224680][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7901'.
[ 1092.239127][ T5426] bridge0: left allmulticast mode
[ 1092.247395][ T5430] netlink: 'syz.4.7903': attribute type 1 has an invalid length.
[ 1092.358255][ T5430] bond0: entered promiscuous mode
[ 1092.376461][ T5430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1092.520293][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1092.527455][ T5438] bond0: (slave ipip0): The slave device specified does not support setting the MAC address
[ 1092.537561][ T5438] bond0: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[ 1092.606374][ T5442] netlink: 'syz.1.7904': attribute type 13 has an invalid length.
[ 1092.623416][ T5438] bond0: (slave ipip0): making interface the new active one
[ 1092.631273][ T5438] ipip0: entered promiscuous mode
[ 1092.639156][ T5438] bond0: (slave ipip0): Enslaving as an active interface with an up link
[ 1092.720751][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7908'.
[ 1092.832515][ T5638] Bluetooth: hci0: command 0x0401 tx timeout
[ 1092.996530][T22732] 
[ 1092.998993][T22732] ======================================================
[ 1093.006036][T22732] WARNING: possible circular locking dependency detected
[ 1093.013122][T22732] syzkaller #0 Not tainted
[ 1093.017570][T22732] ------------------------------------------------------
[ 1093.024587][T22732] kworker/u8:32/22732 is trying to acquire lock:
[ 1093.030910][T22732] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180
[ 1093.041530][T22732] 
[ 1093.041530][T22732] but task is already holding lock:
[ 1093.048893][T22732] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[ 1093.058475][T22732] 
[ 1093.058475][T22732] which lock already depends on the new lock.
[ 1093.058475][T22732] 
[ 1093.068877][T22732] 
[ 1093.068877][T22732] the existing dependency chain (in reverse order) is:
[ 1093.077887][T22732] 
[ 1093.077887][T22732] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1093.085880][T22732]        down_write+0x96/0x200
[ 1093.090649][T22732]        kernfs_add_one+0x41/0x5c0
[ 1093.095791][T22732]        kernfs_create_dir_ns+0xde/0x130
[ 1093.101442][T22732]        internal_create_group+0x425/0x1180
[ 1093.107354][T22732]        cpuhp_invoke_callback+0x445/0x860
[ 1093.113197][T22732]        cpuhp_issue_call+0x430/0x7a0
[ 1093.118591][T22732]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[ 1093.125241][T22732]        __cpuhp_setup_state+0x3f/0x60
[ 1093.130727][T22732]        do_one_initcall+0x250/0x870
[ 1093.136038][T22732]        do_initcall_level+0x104/0x190
[ 1093.141519][T22732]        do_initcalls+0x59/0xa0
[ 1093.146390][T22732]        kernel_init_freeable+0x2a6/0x3e0
[ 1093.152121][T22732]        kernel_init+0x1d/0x1d0
[ 1093.156983][T22732]        ret_from_fork+0x514/0xb70
[ 1093.162116][T22732]        ret_from_fork_asm+0x1a/0x30
[ 1093.167416][T22732] 
[ 1093.167416][T22732] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[ 1093.175337][T22732] 
[ 1093.175337][T22732] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 1093.183083][T22732]        cpus_read_lock+0x42/0x160
[ 1093.188227][T22732]        static_key_slow_inc+0x12/0x30
[ 1093.193699][T22732]        nbd_genl_reconfigure+0x132f/0x1ea0
[ 1093.199602][T22732]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1093.205686][T22732]        genl_rcv_msg+0x61c/0x7a0
[ 1093.210735][T22732]        netlink_rcv_skb+0x232/0x4b0
[ 1093.216052][T22732]        genl_rcv+0x28/0x40
[ 1093.220587][T22732]        netlink_unicast+0x75c/0x8e0
[ 1093.225921][T22732]        netlink_sendmsg+0x813/0xb40
[ 1093.231228][T22732]        ____sys_sendmsg+0x972/0x9f0
[ 1093.236527][T22732]        ___sys_sendmsg+0x2a5/0x360
[ 1093.241739][T22732]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1093.247215][T22732]        do_syscall_64+0x15f/0xf80
[ 1093.252354][T22732]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.258786][T22732] 
[ 1093.258786][T22732] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1093.266454][T22732]        __mutex_lock+0x1a3/0x1550
[ 1093.271580][T22732]        nbd_queue_rq+0x37b/0x1100
[ 1093.276706][T22732]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1093.282784][T22732]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1093.289732][T22732]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1093.296244][T22732]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1093.301906][T22732]        blk_mq_dispatch_list+0xd16/0xe10
[ 1093.307649][T22732]        blk_mq_flush_plug_list+0x48d/0x570
[ 1093.313572][T22732]        __blk_flush_plug+0x3ed/0x4d0
[ 1093.318956][T22732]        __submit_bio+0x28d/0x580
[ 1093.324002][T22732]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1093.330196][T22732]        block_read_full_folio+0x599/0x830
[ 1093.336027][T22732]        filemap_read_folio+0x137/0x3b0
[ 1093.341600][T22732]        do_read_cache_folio+0x358/0x590
[ 1093.347265][T22732]        read_part_sector+0xb6/0x2b0
[ 1093.352570][T22732]        adfspart_check_ICS+0xb1/0x960
[ 1093.358079][T22732]        bdev_disk_changed+0x817/0x1770
[ 1093.363639][T22732]        blkdev_get_whole+0x380/0x510
[ 1093.369039][T22732]        bdev_open+0x31e/0xd30
[ 1093.373825][T22732]        blkdev_open+0x470/0x610
[ 1093.378765][T22732]        do_dentry_open+0x785/0x14e0
[ 1093.384063][T22732]        vfs_open+0x3b/0x340
[ 1093.388676][T22732]        path_openat+0x2e08/0x3860
[ 1093.393807][T22732]        do_file_open+0x23e/0x4a0
[ 1093.398842][T22732]        do_sys_openat2+0x113/0x200
[ 1093.404053][T22732]        __x64_sys_openat+0x138/0x170
[ 1093.409433][T22732]        do_syscall_64+0x15f/0xf80
[ 1093.414556][T22732]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.420975][T22732] 
[ 1093.420975][T22732] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1093.428195][T22732]        __mutex_lock+0x1a3/0x1550
[ 1093.433316][T22732]        nbd_queue_rq+0xc6/0x1100
[ 1093.438352][T22732]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1093.444438][T22732]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1093.451315][T22732]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1093.457843][T22732]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1093.463500][T22732]        blk_mq_dispatch_list+0xd16/0xe10
[ 1093.469241][T22732]        blk_mq_flush_plug_list+0x48d/0x570
[ 1093.475157][T22732]        __blk_flush_plug+0x3ed/0x4d0
[ 1093.480545][T22732]        __submit_bio+0x28d/0x580
[ 1093.485594][T22732]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1093.491782][T22732]        block_read_full_folio+0x599/0x830
[ 1093.497602][T22732]        filemap_read_folio+0x137/0x3b0
[ 1093.503170][T22732]        do_read_cache_folio+0x358/0x590
[ 1093.508823][T22732]        read_part_sector+0xb6/0x2b0
[ 1093.514164][T22732]        adfspart_check_ICS+0xb1/0x960
[ 1093.519649][T22732]        bdev_disk_changed+0x817/0x1770
[ 1093.525211][T22732]        blkdev_get_whole+0x380/0x510
[ 1093.530621][T22732]        bdev_open+0x31e/0xd30
[ 1093.535399][T22732]        blkdev_open+0x470/0x610
[ 1093.540343][T22732]        do_dentry_open+0x785/0x14e0
[ 1093.545635][T22732]        vfs_open+0x3b/0x340
[ 1093.550234][T22732]        path_openat+0x2e08/0x3860
[ 1093.555363][T22732]        do_file_open+0x23e/0x4a0
[ 1093.560405][T22732]        do_sys_openat2+0x113/0x200
[ 1093.565627][T22732]        __x64_sys_openat+0x138/0x170
[ 1093.571037][T22732]        do_syscall_64+0x15f/0xf80
[ 1093.576176][T22732]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.582610][T22732] 
[ 1093.582610][T22732] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1093.589767][T22732]        __synchronize_srcu+0xca/0x300
[ 1093.595243][T22732]        elevator_switch+0x1e8/0x7a0
[ 1093.600547][T22732]        elevator_change+0x2cc/0x450
[ 1093.605848][T22732]        elevator_set_default+0x36c/0x430
[ 1093.611587][T22732]        blk_register_queue+0x3e9/0x4e0
[ 1093.617154][T22732]        __add_disk+0x677/0xd50
[ 1093.622025][T22732]        add_disk_fwnode+0xfb/0x480
[ 1093.627243][T22732]        nbd_dev_add+0x72c/0xb50
[ 1093.632187][T22732]        nbd_init+0x168/0x1f0
[ 1093.636886][T22732]        do_one_initcall+0x250/0x870
[ 1093.642189][T22732]        do_initcall_level+0x104/0x190
[ 1093.647666][T22732]        do_initcalls+0x59/0xa0
[ 1093.652524][T22732]        kernel_init_freeable+0x2a6/0x3e0
[ 1093.658261][T22732]        kernel_init+0x1d/0x1d0
[ 1093.663123][T22732]        ret_from_fork+0x514/0xb70
[ 1093.668242][T22732]        ret_from_fork_asm+0x1a/0x30
[ 1093.673536][T22732] 
[ 1093.673536][T22732] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1093.681378][T22732]        __mutex_lock+0x1a3/0x1550
[ 1093.686524][T22732]        elevator_change+0x1b3/0x450
[ 1093.691833][T22732]        elevator_set_none+0xb5/0x140
[ 1093.697221][T22732]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1093.703557][T22732]        nbd_start_device+0x17f/0xb10
[ 1093.708946][T22732]        nbd_genl_connect+0x165b/0x1cf0
[ 1093.714516][T22732]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1093.720600][T22732]        genl_rcv_msg+0x61c/0x7a0
[ 1093.725644][T22732]        netlink_rcv_skb+0x232/0x4b0
[ 1093.730940][T22732]        genl_rcv+0x28/0x40
[ 1093.735465][T22732]        netlink_unicast+0x75c/0x8e0
[ 1093.740769][T22732]        netlink_sendmsg+0x813/0xb40
[ 1093.746058][T22732]        ____sys_sendmsg+0x972/0x9f0
[ 1093.751350][T22732]        ___sys_sendmsg+0x2a5/0x360
[ 1093.756561][T22732]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1093.762027][T22732]        do_syscall_64+0x15f/0xf80
[ 1093.767157][T22732]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.773589][T22732] 
[ 1093.773589][T22732] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1093.782207][T22732]        blk_alloc_queue+0x546/0x680
[ 1093.787519][T22732]        __blk_mq_alloc_disk+0x197/0x390
[ 1093.793166][T22732]        nbd_dev_add+0x499/0xb50
[ 1093.798121][T22732]        nbd_init+0x168/0x1f0
[ 1093.802827][T22732]        do_one_initcall+0x250/0x870
[ 1093.808132][T22732]        do_initcall_level+0x104/0x190
[ 1093.813607][T22732]        do_initcalls+0x59/0xa0
[ 1093.818470][T22732]        kernel_init_freeable+0x2a6/0x3e0
[ 1093.824225][T22732]        kernel_init+0x1d/0x1d0
[ 1093.829097][T22732]        ret_from_fork+0x514/0xb70
[ 1093.834246][T22732]        ret_from_fork_asm+0x1a/0x30
[ 1093.839558][T22732] 
[ 1093.839558][T22732] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1093.846789][T22732]        fs_reclaim_acquire+0x71/0x100
[ 1093.852289][T22732]        kmem_cache_alloc_noprof+0x40/0x650
[ 1093.858231][T22732]        __kernfs_iattrs+0xdf/0x320
[ 1093.863455][T22732]        kernfs_iop_setattr+0xea/0x3f0
[ 1093.868925][T22732]        notify_change+0xc1a/0xf40
[ 1093.874044][T22732]        do_truncate+0x1c2/0x250
[ 1093.878997][T22732]        path_openat+0x2f89/0x3860
[ 1093.884140][T22732]        do_file_open+0x23e/0x4a0
[ 1093.889212][T22732]        do_sys_openat2+0x113/0x200
[ 1093.894452][T22732]        __x64_sys_openat+0x138/0x170
[ 1093.899833][T22732]        do_syscall_64+0x15f/0xf80
[ 1093.905430][T22732]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.911865][T22732] 
[ 1093.911865][T22732] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1093.920419][T22732]        __lock_acquire+0x15a5/0x2cf0
[ 1093.925816][T22732]        lock_acquire+0x106/0x350
[ 1093.930854][T22732]        down_write+0x96/0x200
[ 1093.935626][T22732]        kernfs_unlink_sibling+0x71/0x180
[ 1093.941446][T22732]        kernfs_rename_ns+0x4a6/0x830
[ 1093.946838][T22732]        sysfs_rename_link_ns+0x16e/0x1b0
[ 1093.952562][T22732]        device_rename+0x110/0x210
[ 1093.957685][T22732]        __dev_change_net_namespace+0x15d3/0x20a0
[ 1093.964109][T22732]        cfg802154_switch_netns+0xbf/0x3d0
[ 1093.969933][T22732]        cfg802154_pernet_exit+0x75/0xe0
[ 1093.975572][T22732]        ops_undo_list+0x49f/0x940
[ 1093.980695][T22732]        cleanup_net+0x56b/0x800
[ 1093.985646][T22732]        process_scheduled_works+0xb5d/0x1860
[ 1093.991764][T22732]        worker_thread+0xa53/0xfc0
[ 1093.996913][T22732]        kthread+0x389/0x470
[ 1094.001520][T22732]        ret_from_fork+0x514/0xb70
[ 1094.006658][T22732]        ret_from_fork_asm+0x1a/0x30
[ 1094.011965][T22732] 
[ 1094.011965][T22732] other info that might help us debug this:
[ 1094.011965][T22732] 
[ 1094.022209][T22732] Chain exists of:
[ 1094.022209][T22732]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[ 1094.022209][T22732] 
[ 1094.036658][T22732]  Possible unsafe locking scenario:
[ 1094.036658][T22732] 
[ 1094.044116][T22732]        CPU0                    CPU1
[ 1094.049504][T22732]        ----                    ----
[ 1094.054882][T22732]   lock(&root->kernfs_rwsem);
[ 1094.059684][T22732]                                lock(cpuhp_state_mutex);
[ 1094.066815][T22732]                                lock(&root->kernfs_rwsem);
[ 1094.074123][T22732]   lock(&root->kernfs_iattr_rwsem);
[ 1094.079429][T22732] 
[ 1094.079429][T22732]  *** DEADLOCK ***
[ 1094.079429][T22732] 
[ 1094.087585][T22732] 5 locks held by kworker/u8:32/22732:
[ 1094.093048][T22732]  #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1094.104005][T22732]  #1: ffffc900069cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1094.114569][T22732]  #2: ffffffff8fdc2568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1094.123921][T22732]  #3: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0
[ 1094.133524][T22732]  #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[ 1094.143563][T22732] 
[ 1094.143563][T22732] stack backtrace:
[ 1094.149469][T22732] CPU: 1 UID: 0 PID: 22732 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) 
[ 1094.149494][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1094.149508][T22732] Workqueue: netns cleanup_net
[ 1094.149538][T22732] Call Trace:
[ 1094.149549][T22732]  <TASK>
[ 1094.149560][T22732]  dump_stack_lvl+0xe8/0x150
[ 1094.149585][T22732]  print_circular_bug+0x2e1/0x300
[ 1094.149614][T22732]  check_noncircular+0x12e/0x150
[ 1094.149645][T22732]  __lock_acquire+0x15a5/0x2cf0
[ 1094.149671][T22732]  ? __lock_acquire+0x6b5/0x2cf0
[ 1094.149694][T22732]  ? __lock_acquire+0x6b5/0x2cf0
[ 1094.149719][T22732]  ? kernfs_unlink_sibling+0x71/0x180
[ 1094.149747][T22732]  lock_acquire+0x106/0x350
[ 1094.149768][T22732]  ? kernfs_unlink_sibling+0x71/0x180
[ 1094.149805][T22732]  down_write+0x96/0x200
[ 1094.149824][T22732]  ? kernfs_unlink_sibling+0x71/0x180
[ 1094.149853][T22732]  ? __pfx_down_write+0x10/0x10
[ 1094.149872][T22732]  ? kernfs_root+0x1c/0x230
[ 1094.149896][T22732]  ? kernfs_root+0x1c/0x230
[ 1094.149919][T22732]  ? kernfs_root+0x1c/0x230
[ 1094.149944][T22732]  ? kernfs_root+0x1ea/0x230
[ 1094.149970][T22732]  kernfs_unlink_sibling+0x71/0x180
[ 1094.150002][T22732]  kernfs_rename_ns+0x4a6/0x830
[ 1094.150037][T22732]  sysfs_rename_link_ns+0x16e/0x1b0
[ 1094.150066][T22732]  device_rename+0x110/0x210
[ 1094.150092][T22732]  __dev_change_net_namespace+0x15d3/0x20a0
[ 1094.150128][T22732]  ? __pfx___dev_change_net_namespace+0x10/0x10
[ 1094.150174][T22732]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1094.150217][T22732]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1094.150243][T22732]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1094.150271][T22732]  ? __mutex_lock+0xef8/0x1550
[ 1094.150293][T22732]  ? __mutex_lock+0x608/0x1550
[ 1094.150313][T22732]  ? __pfx___mutex_lock+0x10/0x10
[ 1094.150334][T22732]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1094.150358][T22732]  cfg802154_switch_netns+0xbf/0x3d0
[ 1094.150384][T22732]  cfg802154_pernet_exit+0x75/0xe0
[ 1094.150407][T22732]  ops_undo_list+0x49f/0x940
[ 1094.150438][T22732]  ? __pfx_ops_undo_list+0x10/0x10
[ 1094.150466][T22732]  ? idr_destroy+0x218/0x290
[ 1094.150489][T22732]  ? do_raw_spin_unlock+0xf5/0x210
[ 1094.150519][T22732]  cleanup_net+0x56b/0x800
[ 1094.150547][T22732]  ? __pfx_cleanup_net+0x10/0x10
[ 1094.150577][T22732]  ? process_scheduled_works+0xa70/0x1860
[ 1094.150598][T22732]  ? process_scheduled_works+0xa70/0x1860
[ 1094.150619][T22732]  process_scheduled_works+0xb5d/0x1860
[ 1094.150655][T22732]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1094.150678][T22732]  ? assign_work+0x3d5/0x5e0
[ 1094.150699][T22732]  worker_thread+0xa53/0xfc0
[ 1094.150734][T22732]  kthread+0x389/0x470
[ 1094.150759][T22732]  ? __pfx_worker_thread+0x10/0x10
[ 1094.150778][T22732]  ? __pfx_kthread+0x10/0x10
[ 1094.150821][T22732]  ret_from_fork+0x514/0xb70
[ 1094.150844][T22732]  ? __pfx_ret_from_fork+0x10/0x10
[ 1094.150865][T22732]  ? __switch_to+0xc79/0x1410
[ 1094.150894][T22732]  ? __pfx_kthread+0x10/0x10
[ 1094.150920][T22732]  ret_from_fork_asm+0x1a/0x30
[ 1094.150954][T22732]  </TASK>
[ 1094.457210][T22732] batadv0: left promiscuous mode
[ 1094.471615][T22732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1094.479064][T22732] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1094.488162][T22732] veth1_macvtap: left promiscuous mode
[ 1094.493738][T22732] veth0_macvtap: left promiscuous mode
[ 1094.499492][T22732] veth1_vlan: left promiscuous mode
[ 1094.505960][T22732] veth0_vlan: left promiscuous mode
[ 1094.700064][T22732] team0 (unregistering): Port device team_slave_1 removed
[ 1094.716210][T22732] team0 (unregistering): Port device team_slave_0 removed
[ 1094.899905][ T5446] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1094.908196][ T5446] syzkaller1: linktype set to 822
[ 1095.089962][T22732] IPVS: stop unused estimator thread 0...
[ 1099.751743][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!