last executing test programs:

2m30.952646502s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m25.128033969s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m19.469204915s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m13.475560244s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m7.940304654s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m2.259060419s ago: executing program 1 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

2m2.143360719s ago: executing program 32 (id=566):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000200)={0x9, 0x6e, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x66)

35.733956701s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

29.615641579s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

22.878708182s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

17.530368744s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

11.713686066s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

5.297206472s ago: executing program 3 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x325}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5)
r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x5, &(0x7f0000000700)=""/102, 0x66}, 0x8000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/248, 0xf8}], 0x7, &(0x7f0000002d00)=""/141, 0x8d}, 0x6}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e40)=""/80, 0x50}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000003040)=""/227, 0xe3}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/108, 0x6c}, {&(0x7f00000041c0)=""/191, 0xbf}], 0x6, &(0x7f0000004300)=""/225, 0xe1}, 0x5}], 0x3, 0x14000, &(0x7f00000044c0))
listen(r8, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)

798.029593ms ago: executing program 0 (id=2982):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x7}, 0x94)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/55, 0x37, 0x1, &(0x7f0000000480)=""/243, 0xf3}, &(0x7f0000000180)=0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xff58, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="d3d60d2df3d51bcf2a"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x20}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc042}, 0x94)

727.845296ms ago: executing program 0 (id=2983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x712, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
shutdown(r1, 0x1)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1600000076000d0b"], 0x20}}, 0x4000040)

669.004412ms ago: executing program 0 (id=2984):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8010, 0xffffffffffffffff, 0x0)
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
unshare(0x10000000)
gettid()
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'})
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaabe23c68b7c245225330377ba25ac1414ff"], 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)

514.107619ms ago: executing program 2 (id=2986):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=<r3=>0x0)
sendmsg$nl_generic(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="1e100700000000000000e63e7e568233732f65d65ea9d6861078446939505f72e565658ac621b3c382d690b12728b56905152170f3d39b7dfe82e0392316ad499bb51601a6dd0fa575ff02b507f689ef878cd209223dc3d58fcce4197cdd86e6e0bc07f0951503dcdecfc14904276753ba952bf37d77da106bfa6789ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec909b9fbd2e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd935e50200f2f4c96b8f33c7aa000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x1360}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000280), &(0x7f0000000300)=0xc) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000280), &(0x7f0000000300)=0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = accept4(r6, &(0x7f0000000480)=@nfc, &(0x7f0000000380)=0x80, 0x81800)
accept4$tipc(r7, 0x0, &(0x7f0000000500), 0x80800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, r5, 0x200, 0x1000400, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "377ce8ed95"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, r5, 0x200, 0x1000400, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "377ce8ed95"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c1}, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x5, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r13, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf)
shutdown(r11, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={<r14=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000080)={r14, 0x7, 0x7ff, 0x0, 0x6, 0x0, 0x4, 0x3, {r14, @in6={{0xa, 0x4e21, 0x80000001, @local, 0xb}}, 0xe, 0x0, 0x9, 0x10001}}, &(0x7f0000000240)=0xb0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80)

368.002289ms ago: executing program 2 (id=2987):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}]}}]}, 0x8c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

356.468016ms ago: executing program 2 (id=2988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000020}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000a1caee78510bdcfe53f753e0db4937fd5828d68de61c0202ff159f9c929bbb5e50a5d9c3b5c36816554977a88ab986cf45fe9fc8c3f885272777534fafd65ef558367740154fcafcbe823f9f11b1b5c560772b4433f3222c72ac63e63f2d9a85ece338fc939d674a25af06797512468e955375769d109a0cedef5932361c89ae03bd5b1f0d0f2c69661e77459b1677e0dc436f3da3674b1d9c2eec822d84ee72b2f24f57dc00d7ec7683af28c534714056de89e01f54ae3a5e9c27d68ba6701c26460bc80c8d8ac9b050ac363555eba9ab44", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25430000000c0058004b000000000000000c00580040000000000000000c0058000a000000000000000c0058003f00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x20004000)

219.295089ms ago: executing program 2 (id=2989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb023, 0x241}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000e4060000000500110009"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38001d00d02ed82e9d335265500ae3df6831b6499c21a1fdce5f4a93033eae4928dcfe675e5df84742b62b88c7934cf2b08cca118e118c1771d5cc0cc4a7f3059170cc15b7c971f37942f7a2e7170fa9f2506eae36911816730357333fc05bd929e8c663489d81968ec8da54a627bc8041cce13069fb8d2a97f75e58244d5991e410b3262bdff6b97982363af0649414e99034f93640ad00", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900f40000002e000000080026006c0900000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d7c0e}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000300)=""/143, &(0x7f00000000c0)=0x8f)

207.441788ms ago: executing program 2 (id=2990):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000050085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

138.349335ms ago: executing program 2 (id=2991):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x1, 0xb1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@local, @remote, <r1=>0x0}, &(0x7f0000000200)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/169, 0xa9, <r2=>0x0, &(0x7f0000000380)=""/113, 0x71}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e}, [@exit, @ldst={0x1, 0x2, 0x6, 0x2, 0x7, 0x40}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x9c, &(0x7f0000000500)=""/156, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x2, 0x4, 0x6}, {0x0, 0x1, 0x8, 0x2}, {0x1, 0x3, 0x5, 0xc}, {0x4, 0x4, 0x0, 0xb}], 0x10, 0xf}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6876, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x30, &(0x7f0000000180)=""/48, 0x40f00, 0x10, '\x00', r1, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xf, 0xed}, 0x10, r2, r3, 0x2, &(0x7f00000007c0)=[r4, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0x5}, {0x0, 0x3, 0xa, 0xab23c40c2f0c8fd0}], 0x10, 0x5}, 0x94)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x1, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_EXP={0x38, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, @NFQA_EXP={0x10, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}]}, 0x5c}}, 0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000a80)=@ctrl_frame=@bar={{}, {0x2}, @device_a, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0x9, 0x9e2}}}, 0x14)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r5}, 0x8)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000b00)=@req3={0x0, 0x100, 0xa, 0x3000, 0x2, 0x1, 0x56}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000e40)={&(0x7f0000000b80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/138, 0x8a}, {&(0x7f0000000cc0)=""/110, 0x6e}, {&(0x7f0000000d40)=""/104, 0x68}], 0x3, &(0x7f0000000e00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff]}}], 0x30}, 0x12001)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e80)={'wlan0\x00', <r14=>0x0})
accept$packet(r10, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f00)=0x14)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xcc, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x6, 0x13}}}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="e83e6668ab48c5e6df455c7c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "df9c8295a1"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r15 = socket$packet(0x11, 0x3, 0x300)
setsockopt$netlink_NETLINK_RX_RING(r9, 0x10e, 0x6, &(0x7f0000001100)={0x4, 0x9, 0x4, 0x9}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001140)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000011c0)={r13, r15, 0x789, 0x0, &(0x7f0000001180), 0x6, 0xb, 0x1, 0x8, 0x6, 0x2, 0xffffffff, 'syz1\x00'})
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000001280)=@req={0x7d3, 0x8, 0x6, 0x8}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x90, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff80}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x95}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000001440)={0x10}, 0x4)
recvmsg$unix(r9, &(0x7f0000001700)={&(0x7f0000001480), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/43, 0x2b}, {&(0x7f0000001540)=""/55, 0x37}, {&(0x7f0000001580)=""/155, 0x9b}, {&(0x7f0000001640)=""/108, 0x6c}], 0x4}, 0x2002)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r12, 0x58, &(0x7f0000001740)={0x0, <r16=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={r16, 0x50, 0x8}, 0xc)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, 0x140e, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000c841)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001940))

79.257527ms ago: executing program 0 (id=2992):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={<r2=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x5, @remote, 0x8}]}, &(0x7f0000000500)=0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000580)={<r3=>0x0, 0x8d, "91e1d39b9cddd6f46b48a8f4c3dc43da03be6e2c1fef875231a6bcfe4b029e9db88f8eb084f839eb333a2de6c12439be69a37b5698cb034efcee293acf416bfdc6c82fe20b3e73a36dca73df7907e6d33b99424ce8eba41a15e3bcc6727b1dd2f4687644754ad08aae968a12740cebd3ca61f013acb29bf2e00900db21943d0ea26d2cd4107821099224302806"}, &(0x7f0000000bc0)=0x95)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000c00)={r2, 0x64c8, 0x800, 0x6, 0x33e4, 0xd6a8, 0x1, 0x0, {r3, @in6={{0xa, 0x4e23, 0x80000000, @empty, 0x5}}, 0x4, 0x200, 0x0, 0x100, 0x7}}, &(0x7f0000000cc0)=0xb0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r4 = socket(0x27, 0x1, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x325}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x454, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4d, @mcast2, 0x8}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x220, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xec, 0x3, "5461a9d896c910348a662d69e412801907a54c8d26e6034dfaba698afb7507c4ab92f5a20b4b3286096bd284248ab6d7571df9a7fb1e2bd286fb576cdf3cf14dfd245be980c6c2dc9a969480e806128dd4e1796fa707b2be4c149c1009ce524020d94d57f9c7914aa3439ead8e21b24f68fb205858e0400199a91cec3a1c39da4468ddf57c19c61dc68c54decbfbbed281c1f72efd9ee64aaef12e13c99fef2620d8cf79a339a23733ca9638e7f65b8479b3c5ed2b70b3fba5887d528ba7eca235490c96dd599d22204abdaa9049379898b09fbe13a429e5adf59e075af6a1e060f99ff1048b4bd2"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6ade38b689d4a54de794d700a1400e1d8fe4fecd332af4179d0c555865"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "53b0cb1cf9b5857a6736dc771035623d24cc525df292f5399d333ccec796cb9b285c027c69db71ae33fcdacdf584ee05a91575376265f01a8c83e200c150829168f1579e3bf31077a86bbf8e83dd00627ce945999697146ec4e1bae50933fa4e369c6b0c0d844efdec08b12dce7f98e5266ae76beb0c6958e48f9314184ec9d69898bd6719ebb817719da869c6299a78fb7a3f84a725def1f1f49925b38aa3ed12064a6532de33fd2389b3d675f452613c5b277914a485a3f12dd9064eb1a04cd0b29eeb7e746be78d"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffec3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x397d4c26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee08}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000)

79.041747ms ago: executing program 0 (id=2993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000040ee8033810badfc5a6991d0c86cee6842f5c821f7ade6748dc8741aa99ca5ef1c4cc13e9e8c3dfa2943ac831e967251ce76479df316b47274a54b666806225400000000000000210000000000a193ff3cb2f13c2e37f9e6db8149fa8c8624399ba61c0c437177ca2e7819fb33d84a03000000e94a1171416ccf21226e9bf9a0ecfe016b4f0c35604fce2703fe15a94fa3290210b069858a140d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xcd, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendto$inet(r1, &(0x7f0000000380)="0406fea90294990975e40bcb62dee07bf180f3ad71d4cf62d9c64805e97f8229a78358fbe577cdfd43fec5ec266a2d6cb79656b7f96781f546bd3eb87bfc2fb91aee25bad3890f86aa378fb12a4370df71fa16e349bd17d2359cf5fd61e63e34", 0x6e, 0x1004c007, &(0x7f0000000340)={0x2, 0x0, @empty}, 0xfef7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000100001042bbd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="0048010000000000240012800b00010067656e65766500001400028008000b4000000009060005004e2200001400030067650b9fdfa9dd7c1dab851c346e6576"], 0x58}}, 0x2000000)

0s ago: executing program 0 (id=2994):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x15)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0xf, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b926558305", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, 0x0, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4000800)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.0.1402'.
[  154.207928][T10852] netlink: 'syz.0.1402': attribute type 29 has an invalid length.
[  154.221878][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'.
[  154.275790][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'.
[  154.416162][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'.
[  154.419491][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'.
[  154.420858][T10878] nftables ruleset with unbound chain
[  154.537196][T10897] sock: sock_set_timeout: `syz.2.1418' (pid 10897) tries to set negative timeout
[  154.605744][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1422'.
[  154.692254][T10910] netlink: 'syz.2.1424': attribute type 9 has an invalid length.
[  154.790203][T10925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  154.839011][T10928] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  155.232037][T10932] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  155.638870][T10963] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  155.772479][T10980] vxcan1 speed is unknown, defaulting to 1000
[  155.925112][T10989] xt_CT: No such helper "snmp"
[  155.958310][T10989] xt_CT: No such helper "snmp"
[  155.970223][T10989] xt_CT: No such helper "snmp"
[  156.115001][T11012] No such timeout policy "syz1"
[  156.263831][T11024] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  156.278574][T11023] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  156.297919][T11026] bond0: entered allmulticast mode
[  156.299787][T11026] bond_slave_0: entered allmulticast mode
[  156.301710][T11026] bond_slave_1: entered allmulticast mode
[  156.305323][T11026] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.341730][T11030] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  156.371159][T11032] netlink: 'syz.2.1460': attribute type 7 has an invalid length.
[  156.373693][T11032] netlink: 'syz.2.1460': attribute type 8 has an invalid length.
[  156.376180][T11032] netlink: 'syz.2.1460': attribute type 4 has an invalid length.
[  156.527454][T11049] pim6reg1: entered promiscuous mode
[  156.529272][T11049] pim6reg1: entered allmulticast mode
[  156.543294][T11049] vlan3: entered allmulticast mode
[  156.692629][T11063] vxcan1 speed is unknown, defaulting to 1000
[  156.797013][T11072] netlink: 'syz.0.1478': attribute type 21 has an invalid length.
[  156.997051][T11086] netlink: 'syz.2.1484': attribute type 1 has an invalid length.
[  157.208547][T11109] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  157.251440][T11113] tipc: Enabled bearer <eth:gre0>, priority 10
[  157.329054][T11122] bridge0: port 3(batadv1) entered blocking state
[  157.331306][T11122] bridge0: port 3(batadv1) entered disabled state
[  157.333376][T11122] batadv1: entered allmulticast mode
[  157.336539][T11122] batadv1: entered promiscuous mode
[  157.834358][ T5858] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  157.837496][ T5858] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  158.391976][T11208] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  158.398171][T11208] __nla_validate_parse: 19 callbacks suppressed
[  158.398180][T11208] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.1520'.
[  158.563343][T11217] validate_nla: 1 callbacks suppressed
[  158.563352][T11217] netlink: 'syz.0.1523': attribute type 10 has an invalid length.
[  158.571220][T11217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1523'.
[  158.586326][T11217] batadv0: entered promiscuous mode
[  158.589522][T11217] batadv0: entered allmulticast mode
[  158.592436][T11217] bridge0: port 3(batadv0) entered blocking state
[  158.598274][T11217] bridge0: port 3(batadv0) entered disabled state
[  158.603264][T11217] bridge0: port 3(batadv0) entered blocking state
[  158.605678][T11217] bridge0: port 3(batadv0) entered forwarding state
[  158.905525][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  158.908399][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  158.973023][T11236] netlink: 'syz.0.1530': attribute type 1 has an invalid length.
[  158.976433][T11236] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1530'.
[  158.990098][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'.
[  158.993329][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'.
[  158.997821][T11238] netlink: 'syz.3.1531': attribute type 13 has an invalid length.
[  159.000597][T11238] netlink: 'syz.3.1531': attribute type 11 has an invalid length.
[  159.036862][T11240] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  159.061255][T11243] Cannot find set identified by id 0 to match
[  159.061285][T11242] Cannot find set identified by id 0 to match
[  159.161385][T11254] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  159.164585][T11254] netlink: 'syz.0.1537': attribute type 21 has an invalid length.
[  159.167073][T11254] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1537'.
[  159.192283][T11258] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  159.249178][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'.
[  159.276642][T11262] netlink: 'syz.2.1541': attribute type 1 has an invalid length.
[  159.682423][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  159.685590][T11280] openvswitch: netlink: Flow key attr not present in new flow.
[  159.911360][T11292] netlink: 'syz.3.1551': attribute type 5 has an invalid length.
[  159.918454][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'.
[  160.092442][T11309] netlink: 'syz.0.1559': attribute type 1 has an invalid length.
[  160.096821][T11309] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1559'.
[  160.312176][T11323] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  160.439446][T11331] Cannot find add_set index 0 as target
[  160.479954][T11340] ip6tnl1: entered promiscuous mode
[  160.481642][T11340] ip6tnl1: entered allmulticast mode
[  160.485934][T11340] team0: Device ip6tnl1 is of different type
[  161.265057][T11423] netlink: 'syz.3.1597': attribute type 1 has an invalid length.
[  161.841994][T11445] ip6gre2: entered allmulticast mode
[  161.852831][T11445] ip6tnl4: entered promiscuous mode
[  161.854976][T11445] ip6tnl4: entered allmulticast mode
[  163.178279][T11529] geneve2: entered promiscuous mode
[  163.180042][T11529] geneve2: entered allmulticast mode
[  163.380444][T11533] bond0: (slave bridge0): Releasing backup interface
[  163.383214][T11533] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.385557][T11533] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.394553][T11533] bridge_slave_0: left allmulticast mode
[  163.396478][T11533] bridge_slave_0: left promiscuous mode
[  163.398435][T11533] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.402685][T11533] bridge_slave_1: left allmulticast mode
[  163.405593][T11533] bridge_slave_1: left promiscuous mode
[  163.407489][T11533] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.412341][T11533] bond0: (slave bond_slave_0): Releasing backup interface
[  163.418924][T11533] bond0: (slave bond_slave_1): Releasing backup interface
[  163.435018][T11533] team0: Failed to send options change via netlink (err -105)
[  163.438062][T11533] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  163.441225][T11533] team0: Port device team_slave_0 removed
[  163.449560][T11533] team0: Failed to send options change via netlink (err -105)
[  163.452253][T11533] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  163.456384][T11533] team0: Port device team_slave_1 removed
[  163.458754][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.461108][T11533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.465688][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.468030][T11533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.478002][T11533] bond1: (slave ip6gretap1): Releasing active interface
[  163.484110][T11533] batadv1: left allmulticast mode
[  163.485723][T11533] batadv1: left promiscuous mode
[  163.487345][T11533] bridge0: port 3(batadv1) entered disabled state
[  163.683948][T11543] nbd1: detected capacity change from 0 to 63
[  163.694292][T10474] block nbd1: Receive control failed (result -32)
[  163.732853][T11560] __nla_validate_parse: 27 callbacks suppressed
[  163.732862][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'.
[  163.734847][T11562] validate_nla: 2 callbacks suppressed
[  163.734856][T11562] netlink: 'syz.0.1644': attribute type 6 has an invalid length.
[  163.786829][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1645'.
[  163.826520][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'.
[  163.883595][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'.
[  163.887416][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1650'.
[  163.895354][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1650'.
[  163.919083][T11578] netlink: 'syz.2.1651': attribute type 2 has an invalid length.
[  163.926033][T11578] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1651'.
[  164.271420][T11596] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1659'.
[  164.392075][T11612] sctp: [Deprecated]: syz.3.1664 (pid 11612) Use of int in maxseg socket option.
[  164.392075][T11612] Use struct sctp_assoc_value instead
[  164.487244][T11625] wg1 speed is unknown, defaulting to 1000
[  164.489361][T11625] wg1 speed is unknown, defaulting to 1000
[  164.492023][T11625] wg1 speed is unknown, defaulting to 1000
[  164.497499][T11625] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  164.506062][T11625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  164.519120][T11625] wg1 speed is unknown, defaulting to 1000
[  164.521910][T11625] wg1 speed is unknown, defaulting to 1000
[  164.524737][T11625] wg1 speed is unknown, defaulting to 1000
[  164.558601][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'.
[  164.595756][T11634] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1672'.
[  164.652213][T11637] vxcan1 speed is unknown, defaulting to 1000
[  164.699758][T11640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.748753][T11637] wg1 speed is unknown, defaulting to 1000
[  164.762261][T11640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.775698][T11640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.153450][T11648] netlink: 'syz.0.1675': attribute type 13 has an invalid length.
[  165.156115][T11648] netlink: 'syz.0.1675': attribute type 27 has an invalid length.
[  165.295145][T11637] syz.3.1673 (11637) used greatest stack depth: 19880 bytes left
[  165.468700][T11660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.475418][T11660] batadv_slave_0: entered promiscuous mode
[  165.506481][T11663] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  165.658994][T11676] syz_tun: entered allmulticast mode
[  165.708283][T11677] syz_tun: left allmulticast mode
[  165.772940][T11697] gtp1: entered promiscuous mode
[  165.777844][T11697] gtp1: entered allmulticast mode
[  165.858315][T11708] netlink: 'syz.2.1693': attribute type 4 has an invalid length.
[  165.864639][T11708] netlink: 'syz.2.1693': attribute type 4 has an invalid length.
[  166.503010][T11734] ip6gretap0: entered promiscuous mode
[  166.926233][T11753] netlink: 'syz.0.1707': attribute type 5 has an invalid length.
[  166.938887][T11757] Cannot find add_set index 0 as target
[  167.343177][T11790] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  167.463982][T11802] nbd: must specify at least one socket
[  167.523968][T11808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.342384][T11839] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  168.435664][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.438294][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.446107][T11845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.711236][T11862] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  168.717257][T11862] openvswitch: netlink: IP tunnel dst address not specified
[  168.818934][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.822377][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.825436][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.828427][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.831106][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.857967][T11863] vxcan1 speed is unknown, defaulting to 1000
[  168.886714][T11868] IPv6: sit1: Disabled Multicast RS
[  168.955610][T11863] wg1 speed is unknown, defaulting to 1000
[  169.035881][T11875] vxcan1 speed is unknown, defaulting to 1000
[  169.071041][T11863] chnl_net:caif_netlink_parms(): no params data found
[  169.135700][T11863] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.138153][T11863] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.140626][T11863] bridge_slave_0: entered allmulticast mode
[  169.143459][T11863] bridge_slave_0: entered promiscuous mode
[  169.152007][T11863] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.155950][T11863] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.159550][T11863] bridge_slave_1: entered allmulticast mode
[  169.164708][T11863] bridge_slave_1: entered promiscuous mode
[  169.175572][T11875] wg1 speed is unknown, defaulting to 1000
[  169.184049][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.193246][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.229493][T11863] team0: Port device team_slave_0 added
[  169.238246][T11863] team0: Port device team_slave_1 added
[  169.268449][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.270744][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.282463][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.287616][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.289820][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.304248][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.368247][T11863] hsr_slave_0: entered promiscuous mode
[  169.371992][T11863] hsr_slave_1: entered promiscuous mode
[  169.376721][T11863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.379046][T11863] Cannot create hsr debugfs directory
[  169.397889][T11909] __nla_validate_parse: 28 callbacks suppressed
[  169.397899][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'.
[  169.605490][T11863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.657663][T11863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.698890][T11863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.739074][T11863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.839370][T11863] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.844076][T11863] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.848212][T11863] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.852360][T11863] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.903563][T11863] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.917700][T11863] 8021q: adding VLAN 0 to HW filter on device team0
[  169.923415][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.925716][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.935417][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.937803][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.033512][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.059324][T11863] veth0_vlan: entered promiscuous mode
[  170.066051][T11863] veth1_vlan: entered promiscuous mode
[  170.080875][T11863] veth0_macvtap: entered promiscuous mode
[  170.086308][T11863] veth1_macvtap: entered promiscuous mode
[  170.094937][T11863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.100686][T11863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.105959][T11863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.108833][T11863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.111637][T11863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.115444][T11863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.167069][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.172594][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.175692][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.189359][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.191863][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.240690][T11933] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1761'.
[  170.418290][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'.
[  170.530597][T11979] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1772'.
[  170.572419][T11984] netlink: 'syz.0.1774': attribute type 12 has an invalid length.
[  170.576885][T11984] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  170.579283][T11984] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1774'.
[  170.582193][T11984] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1774'.
[  170.621852][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'.
[  170.803761][T11997] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1778'.
[  170.808471][T11997] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1778'.
[  170.824101][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'.
[  170.827282][T11997] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  170.832008][T11997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.859842][T11999] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  170.883930][ T5835] Bluetooth: hci0: command tx timeout
[  171.297839][T12038] pimreg3: entered allmulticast mode
[  171.344317][T12054] xt_hashlimit: size too large, truncated to 1048576
[  171.347072][T12054] xt_hashlimit: max too large, truncated to 1048576
[  171.370476][T12054] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  171.373392][T12054] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  171.378559][T12054] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  171.381524][T12054] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  171.387423][T12054] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  171.390476][T12054] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  171.393893][T12054] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  171.396811][T12054] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  171.399886][T12054] geneve3: entered promiscuous mode
[  171.401729][T12054] geneve3: entered allmulticast mode
[  171.473811][T12061] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  171.485252][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.487838][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.493483][T12059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.499809][T12099] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  172.585005][T12101] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  172.631409][T12104] vxcan1 speed is unknown, defaulting to 1000
[  172.717693][T12104] wg1 speed is unknown, defaulting to 1000
[  173.112211][ T5858] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  173.116990][ T5858] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  173.136233][  T789] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  173.167065][T12133] netlink: 'syz.2.1821': attribute type 2 has an invalid length.
[  173.463821][ T5296] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  174.084875][ T5296] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  174.433320][T12165] __nla_validate_parse: 10 callbacks suppressed
[  174.433330][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1832'.
[  174.438471][T12165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1832'.
[  174.554203][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  174.557072][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'.
[  174.640634][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'.
[  174.699533][T12195] netlink: 'syz.2.1843': attribute type 7 has an invalid length.
[  175.503053][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'.
[  175.543586][T12204] gretap2: entered promiscuous mode
[  175.545676][T12204] gretap2: entered allmulticast mode
[  175.685035][T12210] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  176.454687][ T5835] Bluetooth: hci2: link tx timeout
[  176.456679][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.460192][ T5835] Bluetooth: hci2: link tx timeout
[  176.461973][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.536690][T12230] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  176.676523][T12227] veth5: entered promiscuous mode
[  176.773062][T12243] netlink: 'syz.0.1855': attribute type 4 has an invalid length.
[  177.363786][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  177.991983][T12283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1869'.
[  178.175475][T12299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.359753][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1875'.
[  178.389499][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'.
[  178.485049][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  178.497323][T12312] netlink: 'syz.2.1879': attribute type 1 has an invalid length.
[  178.510129][T12312] bond7: entered promiscuous mode
[  178.512011][T12312] 8021q: adding VLAN 0 to HW filter on device bond7
[  178.569749][T12318] xt_l2tp: v2 sid > 0xffff: 4294901760
[  178.612043][T12325] Cannot find set identified by id 1 to match
[  178.828243][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'.
[  178.840058][T12341] set match dimension is over the limit!
[  178.888468][T12343] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[  178.888468][T12344] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[  178.919330][T12350] x_tables: duplicate underflow at hook 1
[  179.088448][T12359] netlink: 'syz.2.1897': attribute type 10 has an invalid length.
[  179.092036][T12359] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.095232][T12359] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.103385][T12359] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.105776][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.108219][T12359] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.110519][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.116883][T12359] bridge0: entered promiscuous mode
[  179.118763][T12359] bridge0: entered allmulticast mode
[  179.120870][T12359] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  179.182678][T12363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.186834][T12363] syzkaller0: MTU too low for tipc bearer
[  179.188747][T12363] tipc: Disabling bearer <eth:syzkaller0>
[  179.483189][T12382] __nla_validate_parse: 4 callbacks suppressed
[  179.483199][T12382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1908'.
[  179.576328][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'.
[  179.917973][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'.
[  180.193418][T12412] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1918'.
[  180.200655][T12412] siw: device registration error -23
[  180.386387][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  180.412294][T12436] netlink: 'syz.2.1924': attribute type 3 has an invalid length.
[  180.418194][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  180.421351][T12436] netlink: 'syz.2.1924': attribute type 3 has an invalid length.
[  180.424158][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  180.448128][T12440] netlink: 'syz.0.1925': attribute type 11 has an invalid length.
[  180.506345][T12451] netlink: 'syz.0.1929': attribute type 13 has an invalid length.
[  180.509064][T12451] netlink: 'syz.0.1929': attribute type 17 has an invalid length.
[  180.515809][T12451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.545643][T12451] vxcan1 speed is unknown, defaulting to 1000
[  180.586707][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1929'.
[  180.593568][T12454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.645534][T12451] wg1 speed is unknown, defaulting to 1000
[  180.650975][T12454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.853010][T12472] netlink: 'syz.2.1935': attribute type 24 has an invalid length.
[  180.916642][T12476] netlink: 'syz.2.1936': attribute type 26 has an invalid length.
[  180.972742][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'.
[  181.022300][T12485] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1937'.
[  181.088951][T12489] bridge_slave_1: left allmulticast mode
[  181.090870][T12489] bridge_slave_1: left promiscuous mode
[  181.092863][T12489] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.099242][T12489] bridge_slave_0: left promiscuous mode
[  181.101146][T12489] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.126656][T12489] bond0: (slave bridge0): Releasing backup interface
[  181.129472][T12489] bridge0 (unregistering): left promiscuous mode
[  181.131658][T12489] bridge0 (unregistering): left allmulticast mode
[  181.381779][T12505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.027539][T12550] x_tables: duplicate underflow at hook 3
[  183.076318][T12550] netlink: ct family unspecified
[  183.077929][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.118227][T12561] validate_nla: 4 callbacks suppressed
[  183.118237][T12561] netlink: 'syz.2.1963': attribute type 5 has an invalid length.
[  183.123099][T12561] netlink: 'syz.2.1963': attribute type 24 has an invalid length.
[  183.203459][T12571] netlink: 'syz.0.1968': attribute type 1 has an invalid length.
[  183.292272][T12579] ip6t_rpfilter: unknown options
[  183.811431][T12614] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  184.320817][T12641] vxcan1 speed is unknown, defaulting to 1000
[  184.407776][T12641] wg1 speed is unknown, defaulting to 1000
[  185.516457][T12677] openvswitch: netlink: IP tunnel dst address not specified
[  185.553283][T12679] __nla_validate_parse: 14 callbacks suppressed
[  185.553294][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'.
[  185.559005][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'.
[  185.562077][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'.
[  185.635574][T12682] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2000'.
[  185.665851][T12684] pim6reg1: entered promiscuous mode
[  185.667739][T12684] pim6reg1: entered allmulticast mode
[  185.748878][T12689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2002'.
[  185.786301][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'.
[  185.789920][T12693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.802895][T12693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.938151][T12702] netlink: 'syz.2.2006': attribute type 9 has an invalid length.
[  186.089362][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'.
[  186.102029][T12709] vxcan1 speed is unknown, defaulting to 1000
[  186.145498][   T33] audit: type=1800 audit(1752305818.549:8): pid=12710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2008" name="memory.events" dev="tmpfs" ino=4025 res=0 errno=0
[  186.204997][T12709] wg1 speed is unknown, defaulting to 1000
[  186.386139][T12723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.404954][T12725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.462762][T12729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.466984][T12729] syzkaller0: entered promiscuous mode
[  186.468969][T12729] syzkaller0: entered allmulticast mode
[  186.492905][T12729] sch_fq: defrate 257 ignored.
[  186.501473][T12729] tipc: Resetting bearer <eth:syzkaller0>
[  186.561510][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2019'.
[  186.570950][T12728] tipc: Resetting bearer <eth:syzkaller0>
[  186.588666][T12728] tipc: Disabling bearer <eth:syzkaller0>
[  186.643781][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  186.672432][T12751] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2022'.
[  186.844926][T12781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2033'.
[  186.946223][T12797] syzkaller1: entered promiscuous mode
[  186.949255][T12797] syzkaller1: entered allmulticast mode
[  187.097657][T12817] bridge0: port 1(bridge_slave_0) entered listening state
[  187.127236][T12821] ksmbd: Unknown IPC event: 3, ignore.
[  187.450247][T12858] netlink: 'syz.0.2055': attribute type 23 has an invalid length.
[  187.506107][T12865] netlink: 'syz.0.2055': attribute type 10 has an invalid length.
[  187.508899][T12865] netlink: 'syz.0.2055': attribute type 10 has an invalid length.
[  187.799678][T12884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.387171][T12901] xt_ecn: cannot match TCP bits for non-tcp packets
[  188.421938][T12908] netlink: 'syz.2.2068': attribute type 1 has an invalid length.
[  188.426656][T12908] netlink: 'syz.2.2068': attribute type 2 has an invalid length.
[  188.537636][T12923] bond8: entered promiscuous mode
[  188.539367][T12923] bond8: entered allmulticast mode
[  188.542070][T12923] 8021q: adding VLAN 0 to HW filter on device bond8
[  188.996937][T12964] netlink: 'syz.0.2086': attribute type 8 has an invalid length.
[  190.243907][ T1088] wlan0: Trigger new scan to find an IBSS to join
[  190.819645][T13019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.607556][T13044] __nla_validate_parse: 23 callbacks suppressed
[  191.607565][T13044] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2112'.
[  191.727792][T13057] syzkaller0: refused to change device tx_queue_len
[  191.876477][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'.
[  192.608834][T13071] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2122'.
[  192.692071][ T8237] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  193.294026][T12668] wlan0: Trigger new scan to find an IBSS to join
[  193.460393][T13089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2126'.
[  193.595689][T13103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'.
[  193.602925][T13099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.144879][T13105] syzkaller1: entered promiscuous mode
[  194.146803][T13105] syzkaller1: entered allmulticast mode
[  194.307402][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  194.417166][T13110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2134'.
[  194.421268][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'.
[  194.546144][T13125] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2139'.
[  194.598266][T13128] netlink: 'syz.0.2140': attribute type 12 has an invalid length.
[  194.604715][T13128] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2140'.
[  194.612200][T13127] syz.0.2140 (13127) used greatest stack depth: 18568 bytes left
[  194.810803][   T33] audit: type=1800 audit(1752305827.209:9): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2145" name="memory.events" dev="tmpfs" ino=4520 res=0 errno=0
[  195.019176][T13162] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  195.031307][T13162] vlan0: entered promiscuous mode
[  195.033078][T13162] dummy0: entered promiscuous mode
[  195.072231][T13164] wg2: entered promiscuous mode
[  195.074329][T13164] wg2: entered allmulticast mode
[  195.249044][T13174] netlink: 'syz.0.2157': attribute type 12 has an invalid length.
[  195.251769][T13174] netlink: 'syz.0.2157': attribute type 29 has an invalid length.
[  195.257494][T13174] netlink: 'syz.0.2157': attribute type 2 has an invalid length.
[  195.260111][T13174] netlink: 'syz.0.2157': attribute type 3 has an invalid length.
[  195.322348][T13183] IPVS: stopping master sync thread 10201 ...
[  195.352577][T13187] netlink: 'syz.2.2161': attribute type 1 has an invalid length.
[  195.398521][T13192] netlink: 'syz.2.2163': attribute type 43 has an invalid length.
[  195.401273][T13192] netlink: 'syz.2.2163': attribute type 9 has an invalid length.
[  195.463210][T13189] unsupported nlmsg_type 40
[  195.682547][T13219] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  195.718303][T13223] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  196.247641][T13258] 8021q: VLANs not supported on ip6tnl0
[  196.250855][T13258] syzkaller1: entered promiscuous mode
[  196.253347][T13258] syzkaller1: entered allmulticast mode
[  196.334074][ T4266] wlan0: Trigger new scan to find an IBSS to join
[  196.736789][T13289] __nla_validate_parse: 21 callbacks suppressed
[  196.736798][T13289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2199'.
[  196.742699][T13289] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2199'.
[  196.848667][T13295] netlink: 'syz.0.2200': attribute type 9 has an invalid length.
[  197.274236][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.745488][T13313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2204'.
[  197.801304][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'.
[  197.827587][T13321] macvlan0: entered promiscuous mode
[  198.052206][T13330] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2212'.
[  198.063577][T13330] dvmrp1: entered allmulticast mode
[  198.068028][T13330] dvmrp1: left allmulticast mode
[  198.725727][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'.
[  198.752800][T13347] unknown channel width for channel at 909000KHz?
[  198.786941][T13349] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  199.534735][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'.
[  199.564074][T13356] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  199.918547][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2231'.
[  199.931269][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  200.146005][T13396] validate_nla: 4 callbacks suppressed
[  200.146014][T13396] netlink: 'syz.0.2232': attribute type 2 has an invalid length.
[  200.150604][T13396] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2232'.
[  200.925586][T13398] netlink: 'syz.2.2233': attribute type 2 has an invalid length.
[  201.997164][T13427] __nla_validate_parse: 1 callbacks suppressed
[  201.997173][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'.
[  202.029587][T13429] bridge7: entered allmulticast mode
[  202.124732][T13440] syzkaller0: entered promiscuous mode
[  202.126553][T13440] syzkaller0: entered allmulticast mode
[  202.182501][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2246'.
[  202.963165][T13449] IPVS: length: 164 != 8
[  202.984757][T13451] tc_dump_action: action bad kind
[  203.002321][T13453] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  203.121758][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2255'.
[  203.136084][T13466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2256'.
[  203.141622][T13468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2256'.
[  203.172017][T13470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2257'.
[  203.180122][T13470] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  203.205974][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'.
[  203.209400][    C0] Unknown status report in ack skb
[  203.215235][T13474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.222289][T13474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.300230][T13483] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2263'.
[  203.433857][T13485] nbd2: detected capacity change from 0 to 63
[  203.437047][T10474] block nbd2: Receive control failed (result -32)
[  203.459680][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'.
[  203.462653][T13488] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  203.465541][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.509208][T13495] netlink: 'syz.2.2267': attribute type 2 has an invalid length.
[  203.512818][T13497] netlink: 'syz.2.2267': attribute type 2 has an invalid length.
[  203.656569][T13508] macsec2: entered promiscuous mode
[  203.658263][T13508] macsec2: entered allmulticast mode
[  203.747107][T13517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.756930][T13517] syzkaller0: entered promiscuous mode
[  203.758657][T13517] syzkaller0: entered allmulticast mode
[  203.766055][T13517] tipc: Resetting bearer <eth:syzkaller0>
[  203.771849][T13516] tipc: Resetting bearer <eth:syzkaller0>
[  203.780595][T13516] tipc: Disabling bearer <eth:syzkaller0>
[  203.798480][T13523] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  203.802109][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'.
[  203.834814][T13525] netlink: 'syz.0.2276': attribute type 8 has an invalid length.
[  203.877637][T13528] siw: device registration error -23
[  203.919554][T13532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.922427][T13532] syzkaller0: entered promiscuous mode
[  203.933455][T13532] syzkaller0: entered allmulticast mode
[  203.947205][T13532] tipc: Resetting bearer <eth:syzkaller0>
[  203.973575][T13531] tipc: Resetting bearer <eth:syzkaller0>
[  204.002330][T13531] tipc: Disabling bearer <eth:syzkaller0>
[  204.147186][T13558] netlink: 'syz.0.2287': attribute type 2 has an invalid length.
[  204.150136][T13558] netlink: 'syz.0.2287': attribute type 1 has an invalid length.
[  204.298816][T13584] syzkaller0: entered allmulticast mode
[  204.469397][T13590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  204.471695][T13590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  204.540994][T13613] Cannot find del_set index 2 as target
[  204.826520][T13635] netlink: 'syz.0.2310': attribute type 1 has an invalid length.
[  204.840453][T13635] 8021q: adding VLAN 0 to HW filter on device bond6
[  204.849190][T13635] bond6: (slave bridge9): making interface the new active one
[  204.852091][T13635] bond6: (slave bridge9): Enslaving as an active interface with an up link
[  204.861433][T13635] gretap3: entered promiscuous mode
[  204.865398][T13635] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  204.871078][T13635] : renamed from bond_slave_0 (while UP)
[  204.877291][T13635] macvlan0: entered promiscuous mode
[  204.879031][T13635] macvlan0: entered allmulticast mode
[  204.881044][T13635] bond6: entered promiscuous mode
[  204.882595][T13635] bridge9: entered promiscuous mode
[  204.885601][T13635] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  204.888030][T13635] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  204.893123][T13635] bond6: left promiscuous mode
[  204.896984][T13635] bridge9: left promiscuous mode
[  204.971696][T13638] bond0: (slave bridge0): Releasing backup interface
[  204.975723][T13638] bridge0: port 3(batadv0) entered disabled state
[  204.977859][T13638] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.980257][T13638] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.988296][T13638] bridge0: port 3(batadv0) entered disabled state
[  204.995289][T13638] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.999065][T13638] bridge_slave_1: left allmulticast mode
[  205.000843][T13638] bridge_slave_1: left promiscuous mode
[  205.002638][T13638] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.009617][T13638] bond0: (slave 77): Releasing backup interface
[  205.015821][T13638] bond0: (slave bond_slave_1): Releasing backup interface
[  205.024581][T13638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.028921][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.040015][T13638] bond3: (slave gretap1): Releasing active interface
[  205.046134][T13638] bond6: (slave bridge9): Releasing active interface
[  205.048722][T13638] bond6: (slave bridge9): the permanent HWaddr of slave - 46:1a:9b:98:57:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  205.055068][T13638] bond6: (slave gretap3): making interface the new active one
[  205.062777][T13638] bond6: (slave gretap3): Releasing active interface
[  205.330052][T13659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.335004][T13659] syzkaller0: entered promiscuous mode
[  205.336799][T13659] syzkaller0: entered allmulticast mode
[  205.372503][T13658] tipc: Resetting bearer <eth:syzkaller0>
[  205.389812][T13658] tipc: Disabling bearer <eth:syzkaller0>
[  205.749610][T13716] netlink: 'syz.2.2331': attribute type 9 has an invalid length.
[  205.806412][T13723] netlink: 'syz.0.2334': attribute type 13 has an invalid length.
[  205.826672][T13723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.926378][T13733] openvswitch: netlink: IPv4 tun info is not correct
[  205.938125][T13735] netem: invalid attributes len -16
[  205.939820][T13735] netem: change failed
[  206.127339][T13758] netlink: 'syz.0.2344': attribute type 10 has an invalid length.
[  206.129828][T13758] batadv0: left promiscuous mode
[  206.131651][T13758] batadv0: left allmulticast mode
[  206.142773][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.152888][T13758] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  206.366181][T13770] netlink: 'syz.2.2349': attribute type 1 has an invalid length.
[  206.508119][T13781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.821401][ T5678] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  207.658681][T13832] netlink: 'syz.0.2366': attribute type 2 has an invalid length.
[  207.711855][ T5296] wg1 speed is unknown, defaulting to 1000
[  207.714605][ T5859] vxcan1 speed is unknown, defaulting to 1000
[  207.848428][T13844] __nla_validate_parse: 56 callbacks suppressed
[  207.848438][T13844] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2371'.
[  207.914010][T13847] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  207.916476][T13847] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2372'.
[  207.919435][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'.
[  207.923211][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'.
[  208.224034][T13856] tipc: Resetting bearer <eth:gre0>
[  208.225862][T13856] tipc: Resetting bearer <eth:gre0>
[  208.687498][T13889] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  208.722181][T13898] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  208.812593][T13908] vxcan1 speed is unknown, defaulting to 1000
[  208.907982][T13908] wg1 speed is unknown, defaulting to 1000
[  209.202417][T13940] dummy0: mtu less than device minimum
[  209.306083][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2389'.
[  209.306086][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'.
[  209.517123][T13970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2396'.
[  209.537061][T13959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.590445][T13976] atomic_op ffff88803c824198 conn xmit_atomic 0000000000000000
[  209.621608][T13980] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2400'.
[  209.679688][T13992] netlink: 'syz.0.2404': attribute type 1 has an invalid length.
[  209.731335][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'.
[  209.734362][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  209.737240][T13998] netlink: 'syz.0.2406': attribute type 19 has an invalid length.
[  209.743232][T13996] syz.2.2405 (13996) used obsolete PPPIOCDETACH ioctl
[  209.940937][ T5857] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.028934][ T5857] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.051446][T14019] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  210.054241][T14019] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  210.056612][T14019] tipc: Enabled bearer <eth:syzkaller0>, priority 9
[  210.119166][T14019] tipc: Resetting bearer <eth:syzkaller0>
[  210.141345][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  210.146162][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  210.153069][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  210.157308][ T5857] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.157315][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  210.167544][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  210.170095][T14019] tipc: Resetting bearer <eth:syzkaller0>
[  211.230736][T14019] tipc: Disabling bearer <eth:syzkaller0>
[  211.243560][ T5857] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.260524][T14029] vxcan1 speed is unknown, defaulting to 1000
[  211.419445][T14029] wg1 speed is unknown, defaulting to 1000
[  211.431576][ T5857] bridge_slave_1: left allmulticast mode
[  211.433345][ T5857] bridge_slave_1: left promiscuous mode
[  211.437583][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.441153][ T5857] bridge_slave_0: left allmulticast mode
[  211.442884][ T5857] bridge_slave_0: left promiscuous mode
[  211.455683][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.581703][T14054] Bluetooth: MGMT ver 1.23
[  211.636206][T14053] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  211.675497][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.680316][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.684070][ T5857] bond0 (unregistering): Released all slaves
[  211.886111][T14029] chnl_net:caif_netlink_parms(): no params data found
[  212.068793][ T5857] hsr_slave_0: left promiscuous mode
[  212.070950][ T5857] hsr_slave_1: left promiscuous mode
[  212.072962][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.075798][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.078415][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.080830][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.091959][ T5857] veth1_macvtap: left promiscuous mode
[  212.094485][ T5857] veth0_macvtap: left promiscuous mode
[  212.096236][ T5857] veth1_vlan: left promiscuous mode
[  212.097935][ T5857] veth0_vlan: left promiscuous mode
[  212.363062][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  212.386887][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  212.616985][T14029] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.619263][T14029] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.621488][T14029] bridge_slave_0: entered allmulticast mode
[  212.624309][T14029] bridge_slave_0: entered promiscuous mode
[  212.634400][T14029] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.636832][T14029] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.639061][T14029] bridge_slave_1: entered allmulticast mode
[  212.641641][T14029] bridge_slave_1: entered promiscuous mode
[  212.691419][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.696499][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.741884][T14029] team0: Port device team_slave_0 added
[  212.751815][T14029] team0: Port device team_slave_1 added
[  212.787674][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.789946][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.799266][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.804009][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.806184][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.814788][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.851114][T14029] hsr_slave_0: entered promiscuous mode
[  212.853380][T14029] hsr_slave_1: entered promiscuous mode
[  212.858298][T14029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.860663][T14029] Cannot create hsr debugfs directory
[  213.000431][T14115] __nla_validate_parse: 6 callbacks suppressed
[  213.000441][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2437'.
[  213.151399][T14029] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  213.161732][T14029] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  213.166499][T14029] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  213.170401][T14029] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  213.215517][T14029] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.233087][T14029] 8021q: adding VLAN 0 to HW filter on device team0
[  213.239757][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.242087][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.257194][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.259561][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.378340][T14029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.400766][T14029] veth0_vlan: entered promiscuous mode
[  213.406500][T14029] veth1_vlan: entered promiscuous mode
[  213.422074][T14029] veth0_macvtap: entered promiscuous mode
[  213.427376][T14029] veth1_macvtap: entered promiscuous mode
[  213.436431][T14029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.442819][T14029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.448797][T14029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.451797][T14029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.455039][T14029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.457807][T14029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.502828][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.508718][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.525805][T12668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.528419][T12668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.851808][T14141] xt_l2tp: missing protocol rule (udp|l2tpip)
[  213.857737][T14141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'.
[  213.893443][T14145] netlink: 'syz.0.2443': attribute type 21 has an invalid length.
[  213.896477][T14145] netlink: 'syz.0.2443': attribute type 22 has an invalid length.
[  213.899010][T14145] netlink: 'syz.0.2443': attribute type 23 has an invalid length.
[  213.901499][T14145] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2443'.
[  213.950503][T14151] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2445'.
[  213.958848][T14154] netlink: zone id is out of range
[  213.960972][T14154] netlink: zone id is out of range
[  213.963051][T14154] netlink: zone id is out of range
[  213.966127][T14154] netlink: zone id is out of range
[  213.968303][T14154] netlink: zone id is out of range
[  213.970404][T14154] netlink: zone id is out of range
[  213.972403][T14154] netlink: zone id is out of range
[  213.977533][T14154] netlink: zone id is out of range
[  213.979629][T14154] netlink: zone id is out of range
[  213.981628][T14154] netlink: zone id is out of range
[  214.029528][T14160] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  214.078255][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'.
[  214.161721][T14166] netlink: 'syz.2.2450': attribute type 7 has an invalid length.
[  214.167412][T14166] netlink: 'syz.2.2450': attribute type 3 has an invalid length.
[  214.170546][T14166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2450'.
[  214.369350][T14181] batman_adv: batadv0: Adding interface: macvlan7
[  214.371597][T14181] batman_adv: batadv0: The MTU of interface macvlan7 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.381965][T14181] batman_adv: batadv0: Interface activated: macvlan7
[  214.609219][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'.
[  214.639935][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'.
[  214.686597][T14199] delete_channel: no stack
[  214.796702][T14201] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  214.837469][T14203] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2465'.
[  214.840593][T14203] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2465'.
[  214.907467][T14203] vlan1: entered promiscuous mode
[  214.909172][T14203] bond0: entered promiscuous mode
[  214.910738][T14203] batadv0: entered promiscuous mode
[  214.912706][T14203] vlan1: entered allmulticast mode
[  214.917993][T14203] bond0: entered allmulticast mode
[  214.919707][T14203] batadv0: entered allmulticast mode
[  215.422779][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.570219][T14219] netlink: 'syz.0.2471': attribute type 10 has an invalid length.
[  215.639682][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.646277][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  215.652314][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  215.665110][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  215.669653][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.695493][T14223] vxcan1 speed is unknown, defaulting to 1000
[  215.786082][T14223] wg1 speed is unknown, defaulting to 1000
[  215.882771][T14223] chnl_net:caif_netlink_parms(): no params data found
[  215.887943][T14236] Bluetooth: MGMT ver 1.23
[  215.935268][T14242] netlink: 'syz.0.2474': attribute type 1 has an invalid length.
[  215.948989][T14242] 8021q: adding VLAN 0 to HW filter on device bond7
[  215.966510][T14242] 8021q: adding VLAN 0 to HW filter on device bond7
[  215.968847][T14242] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  215.972808][T14242] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  215.981199][T14223] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.985246][T14223] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.987507][T14223] bridge_slave_0: entered allmulticast mode
[  215.990433][T14223] bridge_slave_0: entered promiscuous mode
[  215.995527][T14223] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.997928][T14223] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.000297][T14223] bridge_slave_1: entered allmulticast mode
[  216.003380][T14223] bridge_slave_1: entered promiscuous mode
[  216.025744][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.030147][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.068653][T14223] team0: Port device team_slave_0 added
[  216.071859][T14223] team0: Port device team_slave_1 added
[  216.093849][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.096462][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.109044][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.113459][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.116236][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.126697][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.158003][T14223] hsr_slave_0: entered promiscuous mode
[  216.160234][T14223] hsr_slave_1: entered promiscuous mode
[  216.162276][T14223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.166442][T14223] Cannot create hsr debugfs directory
[  216.982774][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.048820][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.102566][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.188341][T14337] xt_l2tp: missing protocol rule (udp|l2tpip)
[  217.188343][T14336] xt_l2tp: missing protocol rule (udp|l2tpip)
[  217.197168][   T13] bridge_slave_1: left allmulticast mode
[  217.198981][   T13] bridge_slave_1: left promiscuous mode
[  217.201224][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.205579][   T13] bridge_slave_0: left allmulticast mode
[  217.207339][   T13] bridge_slave_0: left promiscuous mode
[  217.209144][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.396123][T14342] netlink: 'syz.2.2505': attribute type 1 has an invalid length.
[  217.448354][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.452528][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.456486][   T13] bond0 (unregistering): Released all slaves
[  217.584560][T14354] xt_CT: No such helper "snmp"
[  217.684093][   T54] Bluetooth: hci0: command tx timeout
[  217.801814][   T13] hsr_slave_0: left promiscuous mode
[  217.806760][   T13] hsr_slave_1: left promiscuous mode
[  217.808777][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.811032][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.813852][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.816104][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.830210][   T13] veth1_macvtap: left promiscuous mode
[  217.831937][   T13] veth0_macvtap: left promiscuous mode
[  217.838139][   T13] veth1_vlan: left promiscuous mode
[  217.839803][   T13] veth0_vlan: left promiscuous mode
[  218.102832][   T13] team0 (unregistering): Port device team_slave_1 removed
[  218.126940][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.411165][T14223] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  218.417776][T14223] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  218.425670][T14223] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  218.434041][T14223] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  218.545460][T14223] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.560610][T14223] 8021q: adding VLAN 0 to HW filter on device team0
[  218.578113][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.580330][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.585160][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.587355][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.603397][T14378] netlink: 'syz.2.2516': attribute type 4 has an invalid length.
[  218.608202][T14378] __nla_validate_parse: 10 callbacks suppressed
[  218.608211][T14378] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2516'.
[  218.720315][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'.
[  218.723071][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2521'.
[  218.733120][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.748981][T14390] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2520'.
[  218.761234][T14390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'.
[  218.769586][T14392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'.
[  218.784530][T14223] veth0_vlan: entered promiscuous mode
[  218.788991][T14223] veth1_vlan: entered promiscuous mode
[  218.803527][T14223] veth0_macvtap: entered promiscuous mode
[  218.811417][T14223] veth1_macvtap: entered promiscuous mode
[  218.826163][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.832290][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.837288][T14223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.840050][T14223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.843103][T14223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.847435][T14223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.853299][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'.
[  218.914522][T12668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.917056][T12668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.929921][T14406] x_tables: duplicate underflow at hook 1
[  218.934768][T12668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.938126][T12668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.979284][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2523'.
[  220.422382][T14478] vlan0: entered promiscuous mode
[  220.551401][T14487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.566104][T14487] vxcan1 speed is unknown, defaulting to 1000
[  220.650070][T14487] wg1 speed is unknown, defaulting to 1000
[  220.783598][T14486] tipc: Disabling bearer <eth:syzkaller0>
[  220.924683][T14496] netlink: 'syz.2.2553': attribute type 58 has an invalid length.
[  220.927132][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2553'.
[  220.944019][T14497] netlink: 'syz.2.2553': attribute type 58 has an invalid length.
[  220.946394][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2553'.
[  221.144586][ T8237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.455568][T14502] net_ratelimit: 770 callbacks suppressed
[  221.455583][T14502] netlink: del zone limit has 8 unknown bytes
[  221.502457][T14504] netlink: 'syz.0.2556': attribute type 1 has an invalid length.
[  221.576073][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.578943][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.581561][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.585717][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.588320][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.610721][T14514] vxcan1 speed is unknown, defaulting to 1000
[  221.737555][T14519] wg2: left promiscuous mode
[  221.739171][T14519] wg2: left allmulticast mode
[  221.759919][T14519] veth0_to_bond: left allmulticast mode
[  221.793984][T14519] hsr0: left promiscuous mode
[  221.795574][T14519] hsr0: left allmulticast mode
[  221.797172][T14519] hsr_slave_0: left allmulticast mode
[  221.800077][T14519] 0: left allmulticast mode
[  221.819607][T14519] tipc: Resetting bearer <eth:macvtap0>
[  221.826518][T14519] veth1_macvtap: left allmulticast mode
[  221.836562][T14519] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  221.857319][T14519] macsec0: left allmulticast mode
[  221.858926][T14519] macsec1: left allmulticast mode
[  221.863183][T14519] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.866683][T14519] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.869434][T14519] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.872293][T14519] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.879481][T14519] bridge1: left allmulticast mode
[  221.886320][T14519] bond2: left promiscuous mode
[  221.893734][T14519] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.896609][T14519] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.899391][T14519] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.902192][T14519] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.905401][T14519] geneve2: left promiscuous mode
[  221.907840][T14519] xfrm1: left promiscuous mode
[  221.910811][T14519] xfrm1: left allmulticast mode
[  221.912946][T14519] ip6gre2: left allmulticast mode
[  221.916981][T14519] ip6tnl4: left promiscuous mode
[  221.918693][T14519] ip6tnl4: left allmulticast mode
[  221.922308][T14519] gtp1: left promiscuous mode
[  221.925618][T14519] gtp1: left allmulticast mode
[  221.932995][T14519] gretap2: left promiscuous mode
[  221.935074][T14519] gretap2: left allmulticast mode
[  221.941642][T14519] vlan0: left promiscuous mode
[  221.943197][T14519] dummy0: left promiscuous mode
[  221.952519][T14519] gretap3: left promiscuous mode
[  221.957670][T14519] vlan1: left promiscuous mode
[  221.959886][T14519] bond0: left promiscuous mode
[  221.961491][T14519] batadv0: left promiscuous mode
[  221.963236][T14519] vlan1: left allmulticast mode
[  221.965169][T14519] bond0: left allmulticast mode
[  221.966815][T14519] batadv0: left allmulticast mode
[  221.970976][T14514] wg1 speed is unknown, defaulting to 1000
[  222.087030][T14514] chnl_net:caif_netlink_parms(): no params data found
[  222.130981][T14543] netlink: 'syz.2.2566': attribute type 10 has an invalid length.
[  222.143877][T14514] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.146138][T14514] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.148373][T14514] bridge_slave_0: entered allmulticast mode
[  222.150957][T14514] bridge_slave_0: entered promiscuous mode
[  222.154868][T14514] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.157242][T14514] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.159634][T14514] bridge_slave_1: entered allmulticast mode
[  222.162312][T14514] bridge_slave_1: entered promiscuous mode
[  222.180392][T14514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.185455][T14514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.210011][T14514] team0: Port device team_slave_0 added
[  222.215244][T14514] team0: Port device team_slave_1 added
[  222.217560][T14545] netlink: 'syz.0.2565': attribute type 6 has an invalid length.
[  222.237133][T14514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.239670][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.248610][T14514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.253212][T14514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.256063][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.265109][T14514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.297978][T14514] hsr_slave_0: entered promiscuous mode
[  222.300504][T14514] hsr_slave_1: entered promiscuous mode
[  222.303099][T14514] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.307820][T14514] Cannot create hsr debugfs directory
[  222.668411][ T8237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.738136][ T8237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.794551][ T8237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.827430][T14586] netlink: 'syz.0.2581': attribute type 4 has an invalid length.
[  222.871545][ T8237] bridge_slave_1: left allmulticast mode
[  222.873325][ T8237] bridge_slave_1: left promiscuous mode
[  222.878567][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.882330][ T8237] bridge_slave_0: left allmulticast mode
[  222.884682][ T8237] bridge_slave_0: left promiscuous mode
[  222.887008][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.160943][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.166956][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.172700][ T8237] bond0 (unregistering): Released all slaves
[  223.206980][T14613] tap0: tun_chr_ioctl cmd 1074025677
[  223.208870][T14613] tap0: linktype set to 769
[  223.314095][ T5859] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  223.316442][ T5859] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  223.329739][ T5859] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  223.611690][ T8237] hsr_slave_0: left promiscuous mode
[  223.614514][   T54] Bluetooth: hci0: command tx timeout
[  223.621809][ T8237] hsr_slave_1: left promiscuous mode
[  223.624767][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.627372][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.630347][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.632784][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.652327][ T8237] veth1_macvtap: left promiscuous mode
[  223.663808][ T8237] veth0_macvtap: left promiscuous mode
[  223.665668][ T8237] veth1_vlan: left promiscuous mode
[  223.667454][ T8237] veth0_vlan: left promiscuous mode
[  223.808789][T14667] __nla_validate_parse: 4 callbacks suppressed
[  223.808800][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2599'.
[  223.928559][T14672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2601'.
[  223.984355][ T8237] team0 (unregistering): Port device team_slave_1 removed
[  224.010561][ T8237] team0 (unregistering): Port device team_slave_0 removed
[  224.304925][T14514] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  224.316916][T14514] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  224.338263][T14514] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  224.352323][T14514] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  224.383456][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  224.406773][T14681] netlink: 'syz.0.2605': attribute type 29 has an invalid length.
[  224.417477][T14681] netlink: 'syz.0.2605': attribute type 29 has an invalid length.
[  224.431265][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  224.456478][T14514] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.482405][T14514] 8021q: adding VLAN 0 to HW filter on device team0
[  224.492246][T14606] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.494530][T14606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.511266][T14606] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.513570][T14606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.530413][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2608'.
[  224.627433][T14514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.662802][T14514] veth0_vlan: entered promiscuous mode
[  224.670659][T14514] veth1_vlan: entered promiscuous mode
[  224.691009][T14514] veth0_macvtap: entered promiscuous mode
[  224.697192][T14514] veth1_macvtap: entered promiscuous mode
[  224.715300][T14514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.727952][T14514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.732988][T14514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.738686][T14514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.741539][T14514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.744393][T14514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.775759][T14719] netlink: 'syz.2.2615': attribute type 1 has an invalid length.
[  224.797089][T14606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.799597][T14606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.810156][T14722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'.
[  224.813155][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'.
[  224.821733][T14606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.825518][T14606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.868347][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'.
[  224.881959][T14727] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2618'.
[  224.935283][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'.
[  225.009117][T14737] netlink: 'syz.2.2622': attribute type 1 has an invalid length.
[  225.118702][T14748] vxcan1 speed is unknown, defaulting to 1000
[  225.197305][T14748] wg1 speed is unknown, defaulting to 1000
[  225.692880][T14774] 8021q: adding VLAN 0 to HW filter on device bond8
[  225.695599][T14774] bridge0: port 1(bond8) entered blocking state
[  225.698270][T14774] bridge0: port 1(bond8) entered disabled state
[  225.700270][T14774] bond8: entered allmulticast mode
[  225.702842][T14774] bond8: entered promiscuous mode
[  226.494001][T14838] Cannot find del_set index 2 as target
[  226.757768][T14862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.781702][T14862] syzkaller0: entered promiscuous mode
[  226.783696][T14862] syzkaller0: entered allmulticast mode
[  226.785987][T14862] tipc: Resetting bearer <eth:syzkaller0>
[  227.072964][ T8237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.339018][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[  227.477008][T14853] tipc: Resetting bearer <eth:syzkaller0>
[  227.799444][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  227.808057][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  227.815309][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  227.828995][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  227.836581][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  228.485557][T14853] tipc: Disabling bearer <eth:syzkaller0>
[  228.499870][T14869] vxcan1 speed is unknown, defaulting to 1000
[  228.522324][T14873] x_tables: duplicate underflow at hook 2
[  228.595484][T14869] wg1 speed is unknown, defaulting to 1000
[  228.643462][T14875] vxcan1 speed is unknown, defaulting to 1000
[  228.700355][T14869] chnl_net:caif_netlink_parms(): no params data found
[  228.765102][T14869] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.768687][T14869] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.773900][T14869] bridge_slave_0: entered allmulticast mode
[  228.779148][T14869] bridge_slave_0: entered promiscuous mode
[  228.787180][T14875] wg1 speed is unknown, defaulting to 1000
[  228.787560][T14869] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.793546][T14869] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.798413][T14869] bridge_slave_1: entered allmulticast mode
[  228.801063][T14869] bridge_slave_1: entered promiscuous mode
[  228.809548][T14895] syzkaller1: entered promiscuous mode
[  228.811276][T14895] syzkaller1: entered allmulticast mode
[  228.845101][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.856511][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.880203][T14869] team0: Port device team_slave_0 added
[  228.885133][T14869] team0: Port device team_slave_1 added
[  228.900168][ T8237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.948376][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.954850][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.967073][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.981034][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.983331][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.002043][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.019935][T14907] validate_nla: 1 callbacks suppressed
[  229.019944][T14907] netlink: 'syz.0.2651': attribute type 8 has an invalid length.
[  229.028189][ T8237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.087225][ T8237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.100079][T14869] hsr_slave_0: entered promiscuous mode
[  229.102491][T14869] hsr_slave_1: entered promiscuous mode
[  229.107932][T14869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.117297][T14869] Cannot create hsr debugfs directory
[  229.140166][T14913] __nla_validate_parse: 39 callbacks suppressed
[  229.140175][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'.
[  229.160182][T14921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.167974][T14920] tipc: Disabling bearer <eth:syzkaller0>
[  229.275935][ T8237] bridge_slave_1: left allmulticast mode
[  229.277825][ T8237] bridge_slave_1: left promiscuous mode
[  229.285575][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.306965][ T8237] bridge_slave_0: left allmulticast mode
[  229.308799][ T8237] bridge_slave_0: left promiscuous mode
[  229.310669][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.422517][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'.
[  229.422541][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'.
[  229.558658][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.562870][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.566743][ T8237] bond0 (unregistering): Released all slaves
[  229.851734][T14976] sock: sock_set_timeout: `syz.2.2671' (pid 14976) tries to set negative timeout
[  229.856270][T14976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2671'.
[  229.923843][   T54] Bluetooth: hci0: command tx timeout
[  229.926513][ T8237] hsr_slave_0: left promiscuous mode
[  229.928638][ T8237] hsr_slave_1: left promiscuous mode
[  229.930873][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.933176][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.937582][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.939922][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.949511][ T8237] veth1_macvtap: left promiscuous mode
[  229.951284][ T8237] veth0_macvtap: left promiscuous mode
[  229.953163][ T8237] veth1_vlan: left promiscuous mode
[  229.957751][ T8237] veth0_vlan: left promiscuous mode
[  230.232287][ T8237] team0 (unregistering): Port device team_slave_1 removed
[  230.259263][ T8237] team0 (unregistering): Port device team_slave_0 removed
[  230.558527][T14869] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  230.562890][T14869] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  230.567199][T14869] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  230.571384][T14869] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  230.646140][T14869] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.658376][T14869] 8021q: adding VLAN 0 to HW filter on device team0
[  230.670558][T14624] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.673066][T14624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.698547][T14624] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.700956][T14624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.818666][T15009] netlink: del zone limit has 4 unknown bytes
[  230.857358][T15015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.878966][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.916099][T14869] veth0_vlan: entered promiscuous mode
[  230.920699][T14869] veth1_vlan: entered promiscuous mode
[  230.949855][T14869] veth0_macvtap: entered promiscuous mode
[  230.957064][T14869] veth1_macvtap: entered promiscuous mode
[  230.969177][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.980884][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.985786][T14869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.988678][T14869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.991514][T14869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.995825][T14869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.160707][T14624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.164186][T14624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.178721][T14624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.181367][T14624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.311625][T15031] vxcan1 speed is unknown, defaulting to 1000
[  231.355101][T15032] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2688'.
[  231.402188][T15031] wg1 speed is unknown, defaulting to 1000
[  231.449409][T15035] netlink: 147440 bytes leftover after parsing attributes in process `syz.0.2689'.
[  231.459401][T15035] batadv2: entered promiscuous mode
[  231.745887][T15049] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  232.003976][   T54] Bluetooth: hci0: command 0x041b tx timeout
[  233.035905][T15065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2700'.
[  233.228293][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'.
[  233.362034][T15101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.427618][T15105] netlink: 'syz.0.2712': attribute type 3 has an invalid length.
[  233.467810][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2713'.
[  233.488010][T15109] xt_CT: No such helper "snmp_trap"
[  233.588483][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'.
[  233.792964][ T8237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.512260][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'.
[  234.634429][T15143] sctp: [Deprecated]: syz.2.2727 (pid 15143) Use of int in max_burst socket option.
[  234.634429][T15143] Use struct sctp_assoc_value instead
[  234.666404][T15148] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  234.670323][T15148] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  234.678610][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.681669][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.686389][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.698749][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.705200][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.716180][ T8237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.760164][T15152] vxcan1 speed is unknown, defaulting to 1000
[  234.837599][T15165] netlink: 'syz.0.2733': attribute type 1 has an invalid length.
[  234.868258][T15152] wg1 speed is unknown, defaulting to 1000
[  234.971515][T15184] set match dimension is over the limit!
[  234.978335][T15152] chnl_net:caif_netlink_parms(): no params data found
[  235.019084][ T8237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.076017][ T8237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.098990][T15152] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.101443][T15152] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.104695][T15152] bridge_slave_0: entered allmulticast mode
[  235.108016][T15152] bridge_slave_0: entered promiscuous mode
[  235.111315][T15152] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.115166][T15152] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.117595][T15152] bridge_slave_1: entered allmulticast mode
[  235.120312][T15152] bridge_slave_1: entered promiscuous mode
[  235.152211][T15152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.158354][T15152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.196361][T15152] team0: Port device team_slave_0 added
[  235.205484][T15152] team0: Port device team_slave_1 added
[  235.228475][ T8237] bridge_slave_1: left allmulticast mode
[  235.231151][ T8237] bridge_slave_1: left promiscuous mode
[  235.233047][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.237883][ T8237] bridge_slave_0: left allmulticast mode
[  235.239733][ T8237] bridge_slave_0: left promiscuous mode
[  235.241670][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.477431][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.481469][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.487891][ T8237] bond0 (unregistering): Released all slaves
[  235.494481][T15152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.496763][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.505190][T15152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.513729][T15152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.515990][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.524428][T15152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.556318][T15152] hsr_slave_0: entered promiscuous mode
[  235.558653][T15152] hsr_slave_1: entered promiscuous mode
[  235.560843][T15152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.563267][T15152] Cannot create hsr debugfs directory
[  235.793999][ T8237] hsr_slave_0: left promiscuous mode
[  235.796043][ T8237] hsr_slave_1: left promiscuous mode
[  235.798352][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.800709][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.803586][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.807992][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.817522][ T8237] veth1_macvtap: left promiscuous mode
[  235.819326][ T8237] veth0_macvtap: left promiscuous mode
[  235.821132][ T8237] veth1_vlan: left promiscuous mode
[  235.822843][ T8237] veth0_vlan: left promiscuous mode
[  236.195080][ T8237] team0 (unregistering): Port device team_slave_1 removed
[  236.217245][ T8237] team0 (unregistering): Port device team_slave_0 removed
[  236.645911][T15217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2745'.
[  236.703386][T15152] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  236.718726][T15152] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  236.723549][T15152] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  236.726408][   T54] Bluetooth: hci0: command tx timeout
[  236.737666][T15152] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  236.815754][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'.
[  236.819855][T15152] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.845997][T15152] 8021q: adding VLAN 0 to HW filter on device team0
[  236.851433][T14624] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.853828][T14624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.865064][T14624] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.867486][T14624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.974066][T15152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.008580][T15152] veth0_vlan: entered promiscuous mode
[  237.014138][T15152] veth1_vlan: entered promiscuous mode
[  237.029345][T15252] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.2752'.
[  237.029541][T15152] veth0_macvtap: entered promiscuous mode
[  237.039352][T15152] veth1_macvtap: entered promiscuous mode
[  237.049376][T15152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.058037][T15152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.063121][T15152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.066173][T15152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.069026][T15152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.071789][T15152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.119365][T14622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.123137][T14622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.138488][T14622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.141325][T14622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.149733][T15260] Bluetooth: hci1: Opcode 0x080f failed: -4
[  237.717717][T15278] can: request_module (can-proto-3) failed.
[  238.109982][T15288] xt_TCPMSS: Only works on TCP SYN packets
[  238.202865][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'.
[  238.344056][T15317] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  238.513489][T15327] netlink: 'syz.2.2774': attribute type 10 has an invalid length.
[  238.516536][T15327] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  238.526023][T15336] pimreg: entered allmulticast mode
[  238.538465][T15336] pimreg: left allmulticast mode
[  238.653558][T15351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2783'.
[  238.662059][T15350] vti1: entered promiscuous mode
[  238.667851][T15351] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2783'.
[  238.989326][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'.
[  239.133436][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.213892][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  239.694114][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  239.924545][T15388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2795'.
[  239.931689][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'.
[  239.945028][T15389] x_tables: duplicate underflow at hook 1
[  239.984790][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'.
[  240.017729][T15397] 8021q: adding VLAN 0 to HW filter on device bond11
[  240.062821][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.066617][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.070014][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.074560][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.077684][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.104890][T15405] vxcan1 speed is unknown, defaulting to 1000
[  240.127304][T15412] wireguard0: entered promiscuous mode
[  240.129035][T15412] wireguard0: entered allmulticast mode
[  240.138988][T15415] vlan5: entered promiscuous mode
[  240.153558][T15415] bridge0: entered promiscuous mode
[  240.164119][T15415] vlan5: entered allmulticast mode
[  240.166209][T15415] bridge0: entered allmulticast mode
[  240.179390][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2804'.
[  240.204943][T15420] bond0: (slave batadv0): Releasing backup interface
[  240.208785][T15420] bond8: left allmulticast mode
[  240.210765][T15420] bond8: left promiscuous mode
[  240.212822][T15420] bridge0: port 1(bond8) entered disabled state
[  240.249713][T15405] wg1 speed is unknown, defaulting to 1000
[  240.311421][T15424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.361446][T15405] chnl_net:caif_netlink_parms(): no params data found
[  240.425170][T15405] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.434301][T15405] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.437184][T15405] bridge_slave_0: entered allmulticast mode
[  240.440463][T15405] bridge_slave_0: entered promiscuous mode
[  240.449371][T15405] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.452148][T15405] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.455697][T15405] bridge_slave_1: entered allmulticast mode
[  240.459242][T15405] bridge_slave_1: entered promiscuous mode
[  240.487296][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.493159][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.502796][T15441] IPVS: set_ctl: invalid protocol: 98 172.30.0.3:20000
[  240.512961][T15442] IPVS: set_ctl: invalid protocol: 98 172.30.0.3:20000
[  240.536352][T15405] team0: Port device team_slave_0 added
[  240.542695][T15405] team0: Port device team_slave_1 added
[  240.580437][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.583244][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.591810][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.609802][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.617276][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.619529][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.628551][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.659216][T15405] hsr_slave_0: entered promiscuous mode
[  240.661552][T15405] hsr_slave_1: entered promiscuous mode
[  240.664357][T15405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.668633][T15405] Cannot create hsr debugfs directory
[  240.681439][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.700265][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  240.740661][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.824995][   T13] bridge_slave_1: left allmulticast mode
[  240.833844][   T13] bridge_slave_1: left promiscuous mode
[  240.835725][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.840522][   T13] bridge_slave_0: left allmulticast mode
[  240.842469][   T13] bridge_slave_0: left promiscuous mode
[  240.844674][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.116503][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.120756][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.126764][   T13] bond0 (unregistering): Released all slaves
[  241.157493][T15458] vxcan1 speed is unknown, defaulting to 1000
[  241.281402][T15458] wg1 speed is unknown, defaulting to 1000
[  241.529204][   T13] hsr_slave_0: left promiscuous mode
[  241.531571][   T13] hsr_slave_1: left promiscuous mode
[  241.536418][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.538965][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.541944][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.544572][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.578709][   T13] veth1_macvtap: left promiscuous mode
[  241.580727][   T13] veth0_macvtap: left promiscuous mode
[  241.582705][   T13] veth1_vlan: left promiscuous mode
[  241.584799][   T13] veth0_vlan: left promiscuous mode
[  241.993997][   T13] team0 (unregistering): Port device team_slave_1 removed
[  242.019444][   T13] team0 (unregistering): Port device team_slave_0 removed
[  242.083970][ T5830] Bluetooth: hci0: command tx timeout
[  242.380637][T15469] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2818'.
[  242.381643][T15405] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  242.388412][T15469] 0: renamed from hsr_slave_1 (while UP)
[  242.391783][T15469] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  242.403944][T15405] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  242.418685][T15405] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  242.427422][T15405] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  242.456496][T15466] netlink: 'syz.0.2817': attribute type 10 has an invalid length.
[  242.518812][T15405] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.542788][T15405] 8021q: adding VLAN 0 to HW filter on device team0
[  242.556571][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.558841][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.578017][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.580222][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.661962][T15494] x_tables: duplicate underflow at hook 1
[  242.738177][T15405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.757911][T15405] veth0_vlan: entered promiscuous mode
[  242.764147][T15502] Dead loop on virtual device ip6_vti0, fix it urgently!
[  242.769023][T15405] veth1_vlan: entered promiscuous mode
[  242.774779][T15502] Dead loop on virtual device ip6_vti0, fix it urgently!
[  242.777247][T15502] Dead loop on virtual device ip6_vti0, fix it urgently!
[  242.785394][T15502] netlink: 'syz.2.2828': attribute type 1 has an invalid length.
[  242.809176][T15405] veth0_macvtap: entered promiscuous mode
[  242.812847][T15405] veth1_macvtap: entered promiscuous mode
[  242.832635][T15405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.846096][T15405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.867127][T15405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.870218][T15405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.873049][T15405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.879164][T15405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.932636][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.939446][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.968091][T14624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.971364][T14624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.037979][T15512] netlink: 'syz.0.2832': attribute type 7 has an invalid length.
[  243.041868][T15512] wg2 speed is unknown, defaulting to 1000
[  243.048355][T15512] wg2 speed is unknown, defaulting to 1000
[  243.050858][T15512] wg2 speed is unknown, defaulting to 1000
[  243.059123][T15512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  243.071614][T15512] wg2 speed is unknown, defaulting to 1000
[  243.074885][T15512] wg2 speed is unknown, defaulting to 1000
[  243.077764][T15512] wg2 speed is unknown, defaulting to 1000
[  243.080549][T15512] wg2 speed is unknown, defaulting to 1000
[  243.304707][T15526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.705090][T15537] vxcan1: entered allmulticast mode
[  243.781908][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'.
[  243.785282][T15543] netlink: 'syz.2.2842': attribute type 20 has an invalid length.
[  243.788318][T15543] netlink: 'syz.2.2842': attribute type 21 has an invalid length.
[  243.830360][T15545] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  244.090099][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'.
[  244.104683][T15522] tipc: Disabling bearer <eth:syzkaller0>
[  245.007525][ T8237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.887636][T15603] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  245.912105][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'.
[  245.966056][T15612] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2862'.
[  246.021844][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.029222][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.031942][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.035582][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.041029][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.063407][T15618] vxcan1 speed is unknown, defaulting to 1000
[  246.176519][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'.
[  246.200187][T15618] wg1 speed is unknown, defaulting to 1000
[  246.203231][T15618] wg2 speed is unknown, defaulting to 1000
[  246.323506][T15618] chnl_net:caif_netlink_parms(): no params data found
[  246.355949][T15638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.029657][T15618] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.032170][T15618] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.039352][T15618] bridge_slave_0: entered allmulticast mode
[  247.043602][T15618] bridge_slave_0: entered promiscuous mode
[  247.048919][T15618] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.051496][T15618] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.054566][T15618] bridge_slave_1: entered allmulticast mode
[  247.057325][T15618] bridge_slave_1: entered promiscuous mode
[  247.068286][T15652] raw_sendmsg: syz.0.2874 forgot to set AF_INET. Fix it!
[  247.082614][T15618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.087276][T15618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.119464][T15618] team0: Port device team_slave_0 added
[  247.123113][T15618] team0: Port device team_slave_1 added
[  247.141592][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'.
[  247.146575][T15618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.148849][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.165104][T15618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.169438][T15618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.171683][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.180390][T15618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.224926][T15618] hsr_slave_0: entered promiscuous mode
[  247.227333][T15618] hsr_slave_1: entered promiscuous mode
[  247.229522][T15618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.232074][T15618] Cannot create hsr debugfs directory
[  247.300335][T15656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2876'.
[  247.307935][T15664] syz_tun: entered promiscuous mode
[  247.309643][T15664] syz_tun: entered allmulticast mode
[  247.343375][ T8237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.412649][ T8237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.465481][ T8237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.482835][T15679] x_tables: duplicate underflow at hook 1
[  247.486729][T15679] xt_TCPMSS: Only works on TCP SYN packets
[  247.566011][ T8237] bridge_slave_1: left allmulticast mode
[  247.567826][ T8237] bridge_slave_1: left promiscuous mode
[  247.569729][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.578844][ T8237] bridge_slave_0: left allmulticast mode
[  247.580789][ T8237] bridge_slave_0: left promiscuous mode
[  247.582662][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.832731][T15708] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2893'.
[  247.890067][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.896607][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.900385][ T8237] bond0 (unregistering): Released all slaves
[  248.084187][ T5830] Bluetooth: hci0: command tx timeout
[  248.202384][ T8237] hsr_slave_0: left promiscuous mode
[  248.213329][ T8237] hsr_slave_1: left promiscuous mode
[  248.218016][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.220866][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.224389][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.227101][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.238975][ T8237] veth1_macvtap: left promiscuous mode
[  248.240846][ T8237] veth0_macvtap: left promiscuous mode
[  248.242596][ T8237] veth1_vlan: left promiscuous mode
[  248.244964][ T8237] veth0_vlan: left promiscuous mode
[  248.521384][ T8237] team0 (unregistering): Port device team_slave_1 removed
[  248.542804][ T8237] team0 (unregistering): Port device team_slave_0 removed
[  248.809165][T15728] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  248.812233][T15728] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  248.890974][T15618] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  248.902448][T15618] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  248.911579][T15618] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  248.928442][T15618] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  249.012477][T15618] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.032074][T15618] 8021q: adding VLAN 0 to HW filter on device team0
[  249.049914][T14622] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.052234][T14622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.061006][T14622] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.063304][T14622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.190830][T15618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.207800][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'.
[  249.216965][T15618] veth0_vlan: entered promiscuous mode
[  249.221929][T15618] veth1_vlan: entered promiscuous mode
[  249.239382][T15618] veth0_macvtap: entered promiscuous mode
[  249.243447][T15618] veth1_macvtap: entered promiscuous mode
[  249.257338][T15618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.263242][T15618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.268091][T15618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.270901][T15618] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.274029][T15618] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.277077][T15618] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.331621][T14623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.334440][T14623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.358544][T14622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.361118][T14622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.693149][T15799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2914'.
[  250.525412][T15816] netlink: 'syz.0.2921': attribute type 1 has an invalid length.
[  250.527924][T15816] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2921'.
[  250.530787][T15816] netlink: 'syz.0.2921': attribute type 2 has an invalid length.
[  250.533209][T15816] netlink: 'syz.0.2921': attribute type 1 has an invalid length.
[  250.537242][T15816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2921'.
[  250.597323][T15820] netlink: 'syz.0.2922': attribute type 11 has an invalid length.
[  250.956413][T15853] netlink: 'syz.2.2935': attribute type 1 has an invalid length.
[  250.956413][T15852] netlink: 'syz.2.2935': attribute type 1 has an invalid length.
[  251.007135][T15852] batman_adv: batadv0: Interface deactivated: dummy0
[  251.009287][T15852] batman_adv: batadv0: Removing interface: dummy0
[  251.019149][T15852] bond0: (slave bond_slave_0): Releasing backup interface
[  251.022268][T15852] bond_slave_0: left promiscuous mode
[  251.024865][T15852] bond_slave_0: left allmulticast mode
[  251.028880][T15852] bond0: (slave bond_slave_1): Releasing backup interface
[  251.032621][T15852] bond_slave_1: left promiscuous mode
[  251.037968][T15852] bond_slave_1: left allmulticast mode
[  251.048840][T15852] team0: Port device C removed
[  251.054905][T15852] team0: Port device team_slave_1 removed
[  251.057277][T15852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.059762][T15852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.068753][T15852] bond2: (slave geneve3): Releasing active interface
[  251.072615][T15852] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  251.075964][T15852] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  251.078598][T15852] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  251.081267][T15852] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  251.087170][T15852] bond3: (slave veth3): Releasing active interface
[  251.091378][T15852] bond4: (slave gretap1): Releasing active interface
[  251.099319][T15852] bond6: (slave vti0): Releasing backup interface
[  251.103745][T15852] batman_adv: batadv0: Interface deactivated: macvlan7
[  251.106041][T15852] batman_adv: batadv0: Removing interface: macvlan7
[  251.305827][T15867] __nla_validate_parse: 1 callbacks suppressed
[  251.305840][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2939'.
[  251.312424][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'.
[  251.315514][T15867] macvlan0: left promiscuous mode
[  251.317304][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2939'.
[  251.345099][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'.
[  251.362066][T15869] vxcan1 (unregistering): left allmulticast mode
[  251.367394][   T40] smc: removing ib device syz2
[  251.370744][   T47] vxcan1 speed is unknown, defaulting to 1000
[  251.372641][   T47] syz2: Port: 1 Link DOWN
[  251.398991][T15870] netlink: 'syz.2.2940': attribute type 8 has an invalid length.
[  251.432973][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.456952][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'.
[  252.518976][T15879] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  252.601329][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.604870][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.610517][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.622977][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.628751][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.855938][T15888] wg1 speed is unknown, defaulting to 1000
[  252.861951][T15888] wg2 speed is unknown, defaulting to 1000
[  252.865853][T15885] wg1 speed is unknown, defaulting to 1000
[  252.871862][T15885] wg2 speed is unknown, defaulting to 1000
[  252.982964][T15888] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  253.070218][T15885] chnl_net:caif_netlink_parms(): no params data found
[  253.116869][T15912] netlink: 'syz.0.2951': attribute type 58 has an invalid length.
[  253.119272][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2951'.
[  253.164895][T15885] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.167187][T15885] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.169472][T15885] bridge_slave_0: entered allmulticast mode
[  253.172182][T15885] bridge_slave_0: entered promiscuous mode
[  253.178259][T15885] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.180567][T15885] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.182912][T15885] bridge_slave_1: entered allmulticast mode
[  253.186569][T15885] bridge_slave_1: entered promiscuous mode
[  253.195455][T15921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2954'.
[  253.198386][T15921] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2954'.
[  253.244903][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.260087][T15885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.270089][T15885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.328986][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.347859][T15885] team0: Port device team_slave_0 added
[  253.351273][T15885] team0: Port device team_slave_1 added
[  253.383162][T15885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.385889][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.396406][T15885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.402475][T15943] IPVS: set_ctl: invalid protocol: 51 172.30.0.3:20002
[  253.422418][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.431287][T15885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.433898][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.443014][T15885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.481199][T15885] hsr_slave_0: entered promiscuous mode
[  253.484305][T15885] hsr_slave_1: entered promiscuous mode
[  253.486450][T15885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.488861][T15885] Cannot create hsr debugfs directory
[  253.559176][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'.
[  253.561961][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'.
[  253.573347][T15955] syzkaller0: entered promiscuous mode
[  253.575497][T15955] syzkaller0: entered allmulticast mode
[  253.666977][   T13] bridge_slave_1: left allmulticast mode
[  253.668782][   T13] bridge_slave_1: left promiscuous mode
[  253.670585][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.674541][   T13] bridge_slave_0: left allmulticast mode
[  253.676350][   T13] bridge_slave_0: left promiscuous mode
[  253.678196][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.911789][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.917475][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.920993][   T13] bond0 (unregistering): Released all slaves
[  254.724083][ T5830] Bluetooth: hci0: command tx timeout
[  255.151182][   T13] hsr_slave_0: left promiscuous mode
[  255.153261][   T13] hsr_slave_1: left promiscuous mode
[  255.157507][T15991] netlink: 'syz.2.2979': attribute type 1 has an invalid length.
[  255.160507][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.162961][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.169611][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.172008][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.181509][   T13] veth1_macvtap: left promiscuous mode
[  255.183426][   T13] veth0_macvtap: left promiscuous mode
[  255.185398][   T13] veth1_vlan: left promiscuous mode
[  255.187073][   T13] veth0_vlan: left promiscuous mode
[  255.488502][   T13] team0 (unregistering): Port device team_slave_1 removed
[  255.522320][   T13] team0 (unregistering): Port device team_slave_0 removed
[  255.890786][T15885] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  255.899427][T15885] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  255.932392][T15885] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  255.946885][T15885] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  255.983601][T16013] wg1 speed is unknown, defaulting to 1000
[  255.986371][T16013] wg2 speed is unknown, defaulting to 1000
[  256.037182][T15885] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.053540][T15885] 8021q: adding VLAN 0 to HW filter on device team0
[  256.064799][T16017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  256.077257][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.079623][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.092500][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.094922][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.142459][T16015] wg1 speed is unknown, defaulting to 1000
[  256.146711][T15885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  256.150180][T15885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.172560][T16015] wg2 speed is unknown, defaulting to 1000
[  256.330058][T15885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.372899][T16037] __nla_validate_parse: 2 callbacks suppressed
[  256.372910][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'.
[  256.410573][T15885] veth0_vlan: entered promiscuous mode
[  256.421021][T15885] veth1_vlan: entered promiscuous mode
[  256.464221][T15885] veth0_macvtap: entered promiscuous mode
[  256.471914][T15885] veth1_macvtap: entered promiscuous mode
[  256.490014][T15885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.516705][T16046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.531533][T15885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.538937][T15885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.541737][T15885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.550083][T15885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.553465][T15885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.625509][T14624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.632924][T14624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.652473][T14624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.661495][T14624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.675257][T16053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2994'.
[  256.730697][T15885] 
[  256.731501][T15885] ======================================================
[  256.733722][T15885] WARNING: possible circular locking dependency detected
[  256.735883][T15885] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  256.738944][T15885] ------------------------------------------------------
[  256.741085][T15885] syz-executor/15885 is trying to acquire lock:
[  256.742981][T15885] ffff888118ecf840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  256.746426][T15885] 
[  256.746426][T15885] but task is already holding lock:
[  256.748680][T15885] ffff888118ecfb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  256.751407][T15885] 
[  256.751407][T15885] which lock already depends on the new lock.
[  256.751407][T15885] 
[  256.754524][T15885] 
[  256.754524][T15885] the existing dependency chain (in reverse order) is:
[  256.757248][T15885] 
[  256.757248][T15885] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  256.759562][T15885]        lock_acquire+0x120/0x360
[  256.761118][T15885]        __mutex_lock+0x182/0xe80
[  256.762716][T15885]        l2cap_info_timeout+0x60/0xa0
[  256.764396][T15885]        process_scheduled_works+0xae1/0x17b0
[  256.766281][T15885]        worker_thread+0x8a0/0xda0
[  256.767879][T15885]        kthread+0x711/0x8a0
[  256.769319][T15885]        ret_from_fork+0x3fc/0x770
[  256.770942][T15885]        ret_from_fork_asm+0x1a/0x30
[  256.772622][T15885] 
[  256.772622][T15885] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  256.775844][T15885]        validate_chain+0xb9b/0x2140
[  256.777466][T15885]        __lock_acquire+0xab9/0xd20
[  256.779088][T15885]        lock_acquire+0x120/0x360
[  256.780638][T15885]        __flush_work+0x6b8/0xbc0
[  256.782210][T15885]        __cancel_work_sync+0xbe/0x110
[  256.783929][T15885]        l2cap_conn_del+0x4f0/0x680
[  256.785679][T15885]        hci_conn_hash_flush+0x10d/0x230
[  256.787413][T15885]        hci_dev_close_sync+0xaef/0x1330
[  256.789203][T15885]        hci_unregister_dev+0x21a/0x510
[  256.791111][T15885]        vhci_release+0x80/0xd0
[  256.792630][T15885]        __fput+0x44c/0xa70
[  256.794047][T15885]        task_work_run+0x1d4/0x260
[  256.795680][T15885]        do_exit+0x6b5/0x22e0
[  256.797137][T15885]        do_group_exit+0x21c/0x2d0
[  256.798722][T15885]        __x64_sys_exit_group+0x3f/0x40
[  256.800405][T15885]        x64_sys_call+0x21ba/0x21c0
[  256.802038][T15885]        do_syscall_64+0xfa/0x3b0
[  256.803583][T15885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.803992][ T5830] Bluetooth: hci0: command tx timeout
[  256.805609][T15885] 
[  256.805609][T15885] other info that might help us debug this:
[  256.805609][T15885] 
[  256.805616][T15885]  Possible unsafe locking scenario:
[  256.805616][T15885] 
[  256.812798][T15885]        CPU0                    CPU1
[  256.814452][T15885]        ----                    ----
[  256.816166][T15885]   lock(&conn->lock#2);
[  256.817509][T15885]                                lock((work_completion)(&(&conn->info_timer)->work));
[  256.820477][T15885]                                lock(&conn->lock#2);
[  256.822589][T15885]   lock((work_completion)(&(&conn->info_timer)->work));
[  256.824829][T15885] 
[  256.824829][T15885]  *** DEADLOCK ***
[  256.824829][T15885] 
[  256.827339][T15885] 5 locks held by syz-executor/15885:
[  256.829020][T15885]  #0: ffff88810b1dcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  256.832149][T15885]  #1: ffff88810b1dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  256.835193][T15885]  #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  256.838403][T15885]  #3: ffff888118ecfb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  256.841396][T15885]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  256.844314][T15885] 
[  256.844314][T15885] stack backtrace:
[  256.846150][T15885] CPU: 0 UID: 0 PID: 15885 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  256.846160][T15885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.846165][T15885] Call Trace:
[  256.846169][T15885]  <TASK>
[  256.846173][T15885]  dump_stack_lvl+0x189/0x250
[  256.846184][T15885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.846192][T15885]  ? __pfx__printk+0x10/0x10
[  256.846201][T15885]  ? print_lock_name+0xde/0x100
[  256.846211][T15885]  print_circular_bug+0x2ee/0x310
[  256.846221][T15885]  check_noncircular+0x134/0x160
[  256.846231][T15885]  validate_chain+0xb9b/0x2140
[  256.846239][T15885]  ? do_raw_spin_lock+0x121/0x290
[  256.846250][T15885]  ? look_up_lock_class+0x74/0x170
[  256.846261][T15885]  ? register_lock_class+0x51/0x320
[  256.846269][T15885]  __lock_acquire+0xab9/0xd20
[  256.846276][T15885]  ? __flush_work+0xd2/0xbc0
[  256.846285][T15885]  lock_acquire+0x120/0x360
[  256.846291][T15885]  ? __flush_work+0xd2/0xbc0
[  256.846301][T15885]  ? _raw_spin_unlock_irq+0x23/0x50
[  256.846311][T15885]  ? __flush_work+0xd2/0xbc0
[  256.846319][T15885]  __flush_work+0x6b8/0xbc0
[  256.846328][T15885]  ? __flush_work+0xd2/0xbc0
[  256.846336][T15885]  ? __flush_work+0xd2/0xbc0
[  256.846345][T15885]  ? __pfx___flush_work+0x10/0x10
[  256.846353][T15885]  ? __pfx_wq_barrier_func+0x10/0x10
[  256.846364][T15885]  ? __pfx___cancel_work+0x10/0x10
[  256.846373][T15885]  ? hci_conn_drop+0x14d/0x280
[  256.846384][T15885]  __cancel_work_sync+0xbe/0x110
[  256.846393][T15885]  l2cap_conn_del+0x4f0/0x680
[  256.846403][T15885]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  256.846411][T15885]  hci_conn_hash_flush+0x10d/0x230
[  256.846421][T15885]  hci_dev_close_sync+0xaef/0x1330
[  256.846431][T15885]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  256.846439][T15885]  ? up_write+0x1c4/0x420
[  256.846449][T15885]  hci_unregister_dev+0x21a/0x510
[  256.846456][T15885]  vhci_release+0x80/0xd0
[  256.846463][T15885]  ? __pfx_vhci_release+0x10/0x10
[  256.846470][T15885]  __fput+0x44c/0xa70
[  256.846482][T15885]  task_work_run+0x1d4/0x260
[  256.846492][T15885]  ? __pfx_task_work_run+0x10/0x10
[  256.846503][T15885]  ? kmem_cache_free+0x18f/0x400
[  256.846512][T15885]  do_exit+0x6b5/0x22e0
[  256.846523][T15885]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  256.846533][T15885]  ? __pfx_do_exit+0x10/0x10
[  256.846543][T15885]  ? _raw_spin_unlock_irq+0x23/0x50
[  256.846553][T15885]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.846563][T15885]  do_group_exit+0x21c/0x2d0
[  256.846575][T15885]  __x64_sys_exit_group+0x3f/0x40
[  256.846584][T15885]  x64_sys_call+0x21ba/0x21c0
[  256.846594][T15885]  do_syscall_64+0xfa/0x3b0
[  256.846601][T15885]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.846611][T15885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.846618][T15885]  ? exc_page_fault+0x9f/0xf0
[  256.846628][T15885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.846635][T15885] RIP: 0033:0x7f8f4418e929
[  256.846641][T15885] Code: Unable to access opcode bytes at 0x7f8f4418e8ff.
[  256.846645][T15885] RSP: 002b:00007ffcc0959368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  256.846672][T15885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f4418e929
[  256.846678][T15885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  256.846682][T15885] RBP: 00007f8f441ee8f0 R08: 00007ffcc0957107 R09: 0000000000000003
[  256.846687][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.846691][T15885] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffcc0959520
[  256.846698][T15885]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
07:38:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003fcee30
R8 =ffff888108b08237 R9 =1ffff11021161046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bd R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555842b500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcc0956c08 CR3=00000000253c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=77000ef1a0678400 RBX=ffffffff81976c78 RCX=77000ef1a0678400 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33aab7f2d8 CR3=000000010fc2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f33aaa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
