last executing test programs:

11m49.646924842s ago: executing program 32 (id=270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

11m32.307164908s ago: executing program 33 (id=454):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x84)

10m35.734923463s ago: executing program 34 (id=1455):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b7030000feffffff850000000600000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, 0x0, 0x4004084)
r2 = getpid()
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000002b40)={'nr0\x00', @random="965585b52597"})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000900000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r5, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000002c80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000080d510d222db9a08c03cd225bfdcffd700dd26b5694271"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

10m32.881035136s ago: executing program 35 (id=1323):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x6, 0x31, 0x9, 0x80, 0x4, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={<r1=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f00000000c0)={r1, 0x1}, &(0x7f00000001c0)=0x8)

7m27.770223036s ago: executing program 1 (id=4722):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)

7m27.702537986s ago: executing program 1 (id=4725):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xa, &(0x7f0000000980)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m27.55859232s ago: executing program 1 (id=4731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x13, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0xfdae, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfb}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x0)

7m27.495768105s ago: executing program 1 (id=4732):
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x110f00, 0x3, 0xfffffffc, 0x1, 0x0, 0x1, 0xcf35, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)

7m27.439422099s ago: executing program 1 (id=4734):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0)

7m26.970372521s ago: executing program 1 (id=4738):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

7m11.96895091s ago: executing program 36 (id=4738):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

6m50.803236883s ago: executing program 6 (id=5241):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c)

6m50.719147857s ago: executing program 6 (id=5244):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x6b, 0xfe, 0x8, 0x3, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000380)=0x6, 0x4)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)

6m50.650312966s ago: executing program 6 (id=5247):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

6m50.570722146s ago: executing program 6 (id=5248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100cb0000000800014000000005cf0001800a000100726564697200000014000280080002400000000108000140000000100900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

6m50.570312616s ago: executing program 6 (id=5250):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x6, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989046, 0x0)
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/../file0/../file0/file0/../file0\x00')

6m50.44826739s ago: executing program 6 (id=5254):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
write(r0, &(0x7f00000005c0)="fffffffffff73111221844554305000f32001800000900000000040000112233445500ff000029", 0x27)

6m34.820158247s ago: executing program 37 (id=5254):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
write(r0, &(0x7f00000005c0)="fffffffffff73111221844554305000f32001800000900000000040000112233445500ff000029", 0x27)

6m3.958984494s ago: executing program 8 (id=5842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4c}, 0x7b)

6m3.958792258s ago: executing program 8 (id=5843):
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2041, 0x0)

6m3.910451316s ago: executing program 8 (id=5845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0)

6m3.856306906s ago: executing program 8 (id=5846):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)

6m3.800504302s ago: executing program 8 (id=5850):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x6afb, 0x4, 0x6, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0)

6m3.72005087s ago: executing program 8 (id=5854):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x2c, 0x20000000000000f0}})

5m48.699930399s ago: executing program 38 (id=5854):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x2c, 0x20000000000000f0}})

5m20.493098326s ago: executing program 7 (id=6329):
syz_emit_ethernet(0x7f, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0xfffe, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "4f46b5"}, @sack={0x5, 0xe, [0x394, 0x6, 0x6]}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1a, [0x5, 0x95, 0x5, 0xfffffff8, 0x8000, 0x3]}, @mss={0x2, 0x4, 0x6}, @fastopen={0x22, 0xd, "ef4c01040000e2f6ab0f21"}]}}, {"1f"}}}}}}, 0x0)

5m20.429454886s ago: executing program 7 (id=6332):
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d00040012"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2030}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xf6, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xd)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)=@ax25={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="f946ce18e1952c351d988eca47d61ba13ce089109f0128975cc8d9e098633333fadba3c57b80f4c2bb0b43780ea725ea792a2b0a905acee322bb2ccf2cddd7bd91b61129cdd2455ce57857ff22a66ea37cc3eab53c325e7453a35b22cc77f2a6d8928ea5cb610b31314de17f6c127f2dd1c7a7a85b2e515fcb55acf7a89af95d63163352900552", 0x87}], 0x1}, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'vlan1\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r3}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0), 0x0, 0x10, &(0x7f0000000d00), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000e00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000e80)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat$tun(0xffffffffffffff9c, 0x0, 0x109a42, 0x0)
perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x8}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open$cgroup(&(0x7f0000000f80)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xc3c80, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)

5m19.64380549s ago: executing program 7 (id=6342):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m19.643514188s ago: executing program 7 (id=6343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dbdbfb, {0x0, 0x0, 0x0, 0x0, 0x4c818, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xa60}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

5m19.580208301s ago: executing program 7 (id=6346):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x7}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x100, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xad8}}]}, 0x38}}, 0x4000010)
sendmsg$key(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020b0e090600000025bd7000fedbdf2504000300040000000500005e420000000f0000000000000001000000000010"], 0x30}}, 0x4000)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x21, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @map_fd={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb5e}}, @exit, @tail_call, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, &(0x7f0000000d00), 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x5, 0x5, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001600)=[{0x0, 0x2, 0x2, 0x4}, {0x1, 0x1, 0x0, 0xc}, {0x3, 0x4, 0x0, 0x2}], 0x10, 0xf56f}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0)

5m19.427161443s ago: executing program 7 (id=6349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m4.379032582s ago: executing program 39 (id=6349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m3.940210756s ago: executing program 9 (id=6591):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
fstat(r0, &(0x7f0000000080))

5m3.879703734s ago: executing program 9 (id=6593):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2b, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

5m3.879383074s ago: executing program 9 (id=6594):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000d40)={0x18, 0x0, {0x4001, @local, 'hsr0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x29}, {&(0x7f0000002380)="a543", 0x2}], 0x2}}, {{&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="b7b7c6ceb0b02376640e25eae9c1de9e5421da0f65a892923e61b67186f0a8280371dae360de8cbdc5e76199030df953f40212c29a4a400953d31618c6c19e7f6b624934acae52962efa4fc3b81f18ca66ddc5ee567ec05366efa8c56217d407f831d430e2c544a480d0b777d03f1ae815751c29173e6557ac4e2de2838b212dd867148d304f810c8351b845f2ec07375be427b395f4b094f98db4aa12cf7805572ac0fa6ec6fa63f41227650d0943a96f0aff7ad5f5b14afcecd4c5da57f86e90083d71"}], 0x0, &(0x7f0000000200)=[{0x0, 0x6, 0x2, "cdb76bc8d2c5c426b1d9c12d5cfce11d087014af6863b06a42272d3247dc03af7ec54771746189220b86"}, {0x0, 0x112, 0x2}, {0x0, 0x3a, 0x6, "61fd82b70a5396ff648cfdcf0f5ec649d7f88d46156d8ac905cb4464e116c17a0619940425b4eae8de76a8440f6ef0f835346d2e1cfd678833c0cd1a9491cff20f0e4a4cc1e0c27b1e0ada62c794766853b22006b33a22f2b1d410512a8a3522c84d04be1d9db15b7d584457575ad03086afb4e60e0d2ac6b47503f73ccd7ef06e90f325bf62697803a2890e7ca6a08c5dbc904c9a028e4b9c11f8f6bcf590d39c1d59acaa6e59e26829d8879e522f3bc7ba11b724fb0f977c7633863332c710b2cddfd5735526f2c611ddac54e030bad6cd140d036f49a427fc67fe38eaf930b7"}, {0x0, 0x112, 0x43, "6166824676ccebd2cc2a15dda49a018b6235a75efd1d694fff1dad608cd2612375399cdfe323320a5e1ba0c18815fac6a6886a0931b0915d52417d793590465542c3bb935218d4b1a5d6bca0082b8f54810e24bd7cbd53fcb020eea0ba3b31a1f11994aac7d419fc720438e02c2fc54b887215bd748c306c5bcdb431128b82d81b335e263928e71efb296f2165bade5b6553242589c17680584d331a878b1cbdfe6bfe5bd0d927d16db5ffa6fef24cc69c"}, {0x0, 0xff, 0x2, "b18cbabd58d3c998cbcdf1898e70b2fe6338e14f58de6c18503cd63bce63616644caa31509be53f5e91ae16c05c3d6327618c9229f40e76716bbf4c7a3f820dd9db5b011110762fe87e1b8b20f46b836b7806dffcbbba410f2507546c1c87e7512ca7960dbe25ba337673a8f21d84d1125f950e94e7247b7c7ad9b8ffadd24dfc77261d62723a36a8711a1c541c6b5f1e7bb5dbd799c1ec66a12185f4525075fdfab8f644c9df43397f73a6f319754068e18a733955ad27b922d7fdf6c937268c4ddfb3f2412d24a0d4abba29df624d27f75766c989a953977bb3d4d9b09e408e5c9"}, {0x0, 0x0, 0x800, "f4e7a11fae8df07b0da61d9b0894e9d30a8160b9e13d04131d134135b9c50b74b7c2dee4478ef691e5d08b0e2740cc3056a79039a9280ff3c70423e448f82915dc47c2e0e388afc286dc40a1cf6f3bd9d5ff2646c93fcc4524a6078fca3243bdef95ab6c07a2dbfe1be18d6320692821608f070c51fbf76bca03079a42d05ffa"}]}}], 0x1, 0x4)

5m3.768352517s ago: executing program 9 (id=6596):
perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffffffff, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)

5m3.688343925s ago: executing program 9 (id=6597):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x60c5}, 0x80)

5m3.350433716s ago: executing program 9 (id=6602):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r2, 0x0, 0x0)

5m3.160352391s ago: executing program 40 (id=6602):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r2, 0x0, 0x0)

2m18.597591851s ago: executing program 2 (id=9451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xf1, 0x1}, {0x2, 0x3}, {0x40, 0x1}, {0xa, 0x2}, {0x2, 0x1}], "b9c0c283ef0656e9"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x80)

2m18.551179779s ago: executing program 2 (id=9452):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)="0e5a255d1ea2", 0x6}], 0x1}}], 0x1, 0x40015)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28)

2m18.493525215s ago: executing program 2 (id=9454):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900140000060015000200000014001680100008800c00028004000100"], 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0)

2m18.373335361s ago: executing program 2 (id=9457):
writev(0xffffffffffffffff, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="1902eb", 0x3}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x900)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

2m17.383654281s ago: executing program 2 (id=9463):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2m14.776444393s ago: executing program 2 (id=9465):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000780)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f00000007c0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000800)=0x45, 0x4)

1m59.766970659s ago: executing program 41 (id=9465):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000780)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f00000007c0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000800)=0x45, 0x4)

1m34.460711633s ago: executing program 4 (id=10075):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@expire={0x104, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x180, 0x73}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x9, 0x0, 0x800, 0x1000, 0x800, 0x0, 0x81}, {0x8, 0xa, 0xfffffffffffffffd, 0x3}, {0x4, 0xe415, 0x7}, 0x70bd2a, 0x0, 0xa, 0x0, 0xff}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc)

1m34.460596761s ago: executing program 4 (id=10076):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001180)={0x2, 0x15, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000011c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000001280)={0x2, 0x15, @loopback}, 0x10)
write(r1, &(0x7f00000012c0)='PASV', 0x4)

1m34.367176139s ago: executing program 4 (id=10077):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000001540)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4)

1m34.260806519s ago: executing program 4 (id=10078):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000900)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
read(r1, &(0x7f00000000c0)=""/102, 0x66)

1m34.26046239s ago: executing program 4 (id=10079):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2034}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x114945, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f0000000180)=ANY=[@ANYBLOB="757f1c"])

1m33.659692639s ago: executing program 4 (id=10084):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)

1m18.624608824s ago: executing program 42 (id=10084):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)

15.479556677s ago: executing program 0 (id=11399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4000)
socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800)
recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1}, 0x5dda}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002440)=""/188, 0xbc}, {&(0x7f0000002500)=""/175, 0xaf}, {&(0x7f00000025c0)=""/212, 0xd4}, {&(0x7f00000026c0)=""/189, 0xbd}, {&(0x7f0000003b00)=""/4083, 0xff3}, {&(0x7f0000000a00)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0)

15.420600157s ago: executing program 0 (id=11401):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40)

15.420449297s ago: executing program 0 (id=11402):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r2=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000240), 0x56)
sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

15.307545493s ago: executing program 0 (id=11405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x18a, 0x2, 0x1, 0x1, 0xfffff000, {0x4, 0x1, 0x8, 0x316, 0xd}, {0x9, 0x0, 0x7, 0x4, 0x7, 0x80}, 0x9, 0x5, 0xa86}}]}]}}]}, 0x74}}, 0x0)
write$tun(r0, &(0x7f0000000c00)=ANY=[], 0x32)

15.180504865s ago: executing program 0 (id=11406):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0)

15.110439169s ago: executing program 0 (id=11407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000001b00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ebff00850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.007328982s ago: executing program 5 (id=11607):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000600)=""/14, 0x2}, 0x20)

1.00720852s ago: executing program 5 (id=11608):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c)

440.896763ms ago: executing program 3 (id=11621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000800)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000840)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

440.792745ms ago: executing program 3 (id=11622):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000000)={'veth0_macvtap\x00', @ifru_names='dvmrp1\x00'})

340.227181ms ago: executing program 3 (id=11623):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000540)={<r1=>r0})
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4880)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000740)={'batadv_slave_0\x00', @random="02000000670b"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x16, 0xb, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x7}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000b00), 0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000b40), 0x8)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000b80)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000bc0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000cc0)={0x2, &(0x7f0000000d00)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)

119.3183ms ago: executing program 5 (id=11624):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="50000000100003050400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x50}}, 0x0)

119.124616ms ago: executing program 3 (id=11625):
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x281}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x7a]}, 0xfffffffffffffdf1)

119.00014ms ago: executing program 43 (id=11407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000001b00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ebff00850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

61.016853ms ago: executing program 5 (id=11627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040))

60.90155ms ago: executing program 3 (id=11628):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
splice(r0, 0x0, r0, 0x0, 0x2, 0x2)

60.804712ms ago: executing program 5 (id=11629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0)

182.566µs ago: executing program 3 (id=11630):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @empty}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

0s ago: executing program 5 (id=11631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x409, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x2, 0xfff3}, {0xfff3, 0xffff}, {0x3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x5}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240480cd}, 0x4000050)

kernel console output (not intermixed with test programs):

00771][T23344] Bluetooth: hci0: unsupported parameter 8192
[  532.611732][T23425] netlink: 'syz.5.7082': attribute type 5 has an invalid length.
[  533.220361][T23473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7104'.
[  533.223027][T23471] netlink: 1584 bytes leftover after parsing attributes in process `syz.5.7103'.
[  533.361911][T23487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7111'.
[  533.694494][ T4992] Bluetooth: hci2: command 0x0401 tx timeout
[  533.694653][ T5790] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  534.469985][T23541] Bluetooth: MGMT ver 1.23
[  534.588424][T23552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7141'.
[  535.716899][T23596] nbd: must specify at least one socket
[  536.170139][T23619] xt_hashlimit: max too large, truncated to 1048576
[  536.170528][T23619] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  536.237217][T23622] __nla_validate_parse: 6 callbacks suppressed
[  536.237234][T23622] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7171'.
[  536.237242][T23622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7171'.
[  536.237255][T23622] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7171'.
[  536.321685][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7173'.
[  536.467521][T23628] veth1_macvtap (unregistering): left allmulticast mode
[  536.648282][T23644] ieee802154 phy0 wpan0: encryption failed: -22
[  536.801293][T23657] netlink: 208 bytes leftover after parsing attributes in process `syz.5.7182'.
[  536.801320][T23657] netlink: 208 bytes leftover after parsing attributes in process `syz.5.7182'.
[  536.935037][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7184'.
[  537.432979][ T5822] nci: nci_rx_work: unknown MT 0x6
[  537.437972][T23696] netlink: 'syz.5.7192': attribute type 4 has an invalid length.
[  537.437988][T23696] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7192'.
[  540.325565][T23688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  540.622254][T23752] netlink: 'syz.5.7199': attribute type 1 has an invalid length.
[  540.650380][T23752] bond11: option mode: invalid value (7)
[  540.651746][T23752] bond11 (unregistering): Released all slaves
[  540.820958][T23760] netlink: 'syz.5.7199': attribute type 10 has an invalid length.
[  540.820974][T23760] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7199'.
[  540.825153][T23752] batman_adv: batadv0: Interface deactivated: dummy0
[  540.830652][T23752] batman_adv: batadv0: Removing interface: dummy0
[  540.846139][T23760] dummy0: entered promiscuous mode
[  540.889195][T23762] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7206'.
[  541.780207][T23792] __nla_validate_parse: 1 callbacks suppressed
[  541.780316][T23792] netlink: 592 bytes leftover after parsing attributes in process `syz.0.7220'.
[  542.647601][T23802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7223'.
[  542.911276][T23814] netlink: 'syz.2.7229': attribute type 1 has an invalid length.
[  542.937738][T23814] 8021q: adding VLAN 0 to HW filter on device bond1
[  543.760898][T23814] macvlan3: entered promiscuous mode
[  543.760917][T23814] macvlan3: entered allmulticast mode
[  543.761601][T23814] bond1: entered promiscuous mode
[  543.766027][T23814] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  543.784303][T23814] bond1: left promiscuous mode
[  544.313954][T23871] syzkaller1: entered promiscuous mode
[  544.313967][T23871] syzkaller1: entered allmulticast mode
[  544.561281][T23888] netlink: 763 bytes leftover after parsing attributes in process `syz.5.7262'.
[  545.462278][T23940] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7285'.
[  545.542246][T23942] bond11: entered allmulticast mode
[  545.615179][T23942] 8021q: adding VLAN 0 to HW filter on device bond12
[  545.618380][T23942] bond12: entered allmulticast mode
[  545.625787][T23942] bond11: (slave bond12): Enslaving as an active interface with an up link
[  545.641302][T23942] bond11 (unregistering): (slave bond12): Releasing backup interface
[  545.643451][T23942] bond12: left allmulticast mode
[  545.646567][T23942] bond11 (unregistering): Released all slaves
[  545.733701][T23952] syzkaller1: entered promiscuous mode
[  545.733720][T23952] syzkaller1: entered allmulticast mode
[  545.796828][T23958] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7292'.
[  546.165153][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7308'.
[  546.760670][T24035] netlink: 'syz.2.7324': attribute type 1 has an invalid length.
[  546.760686][T24035] netlink: 'syz.2.7324': attribute type 2 has an invalid length.
[  546.849197][T24041] nft_compat: unsupported protocol 5
[  547.044969][T24053] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  547.202794][T24061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7337'.
[  547.543800][T24090] IPVS: Unknown mcast interface: bond_slave_0
[  548.925275][T24136] netlink: 495 bytes leftover after parsing attributes in process `syz.0.7372'.
[  549.152987][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7377'.
[  549.309659][T24157] mac80211_hwsim hwsim41 ..c: renamed from wlan1 (while UP)
[  549.606041][T24170] netlink: 'syz.2.7388': attribute type 1 has an invalid length.
[  549.606062][T24170] netlink: 212380 bytes leftover after parsing attributes in process `syz.2.7388'.
[  549.713428][T24177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7391'.
[  550.130028][T24208] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7407'.
[  550.185925][T24212] netlink: 'syz.5.7408': attribute type 46 has an invalid length.
[  550.800916][T24259] netlink: 'syz.5.7428': attribute type 10 has an invalid length.
[  550.847125][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7430'.
[  550.871885][T24267] bridge_slave_0: left allmulticast mode
[  550.871900][T24267] bridge_slave_0: left promiscuous mode
[  550.872053][T24267] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.891710][T24266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7431'.
[  551.583276][T24293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7444'.
[  551.875238][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7456'.
[  552.140818][T24348] netlink: 'syz.2.7469': attribute type 10 has an invalid length.
[  552.141164][T24348] batman_adv: batadv0: Adding interface: erspan0
[  552.141170][T24348] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.141179][T24348] batman_adv: batadv0: Not using interface erspan0 (retrying later): interface not active
[  552.526140][T24367] netlink: 'syz.2.7475': attribute type 15 has an invalid length.
[  552.673371][ T5728] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 6081 - 0
[  552.673427][ T5728] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 6081 - 0
[  552.673450][ T5728] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 6081 - 0
[  552.673469][ T5728] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 6081 - 0
[  552.814856][T24389] netlink: 'syz.5.7484': attribute type 6 has an invalid length.
[  552.857772][T24393] sit0: entered promiscuous mode
[  552.885139][T24393] netlink: 'syz.5.7488': attribute type 1 has an invalid length.
[  552.885152][T24393] __nla_validate_parse: 1 callbacks suppressed
[  552.885157][T24393] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7488'.
[  553.702081][T24424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7496'.
[  553.906446][T24402] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  553.906468][T24402] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  554.000406][T24402] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  554.000427][T24402] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  554.929075][T24438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7503'.
[  554.965973][T24438] bond1: entered promiscuous mode
[  554.965993][T24438] bond1: entered allmulticast mode
[  555.041265][T24449] net_ratelimit: 12 callbacks suppressed
[  555.041288][T24449] ip_tables: iptables: counters copy to user failed while replacing table
[  555.239441][T24464] sctp: [Deprecated]: syz.0.7515 (pid 24464) Use of struct sctp_assoc_value in delayed_ack socket option.
[  555.239441][T24464] Use struct sctp_sack_info instead
[  555.261608][T24466] ip_tables: iptables: counters copy to user failed while replacing table
[  555.297809][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7517'.
[  556.004031][T24511] netlink: 'syz.5.7530': attribute type 9 has an invalid length.
[  556.256047][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7538'.
[  556.844294][T24556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.775489][T24612] netlink: 'syz.0.7573': attribute type 2 has an invalid length.
[  557.775507][T24612] netlink: 'syz.0.7573': attribute type 8 has an invalid length.
[  557.775516][T24612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7573'.
[  557.884714][T24617] syz_tun: entered allmulticast mode
[  558.158905][T24626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.042187][T24672] pimreg: entered allmulticast mode
[  559.044253][T24672] pimreg: left allmulticast mode
[  559.050619][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7600'.
[  559.437784][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7610'.
[  559.473068][ T5822] netdevsim netdevsim2 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0
[  559.473141][ T5822] netdevsim netdevsim2 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0
[  559.486947][ T5694] netdevsim netdevsim2 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0
[  559.486982][ T5694] netdevsim netdevsim2 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0
[  559.588086][T24708] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  559.705653][T24713] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7618'.
[  559.777842][T24720] netlink: 'syz.0.7620': attribute type 4 has an invalid length.
[  559.841522][T24723] openvswitch: netlink: Missing key (keys=40, expected=100)
[  559.896057][T24734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7627'.
[  559.906368][T24733] netlink: 'syz.5.7626': attribute type 1 has an invalid length.
[  559.975903][T24733] bond11: (slave veth13): Enslaving as an active interface with a down link
[  559.986925][T24733] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  560.264587][T24748] Cannot find add_set index 0 as target
[  560.306265][T24751] batman_adv: batadv0: Adding interface: syzkaller0
[  560.306280][T24751] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.306300][T24751] batman_adv: batadv0: Interface activated: syzkaller0
[  560.681436][T24775] dummy0: mtu less than device minimum
[  560.898401][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7656'.
[  561.270954][T24819] vlan2: entered allmulticast mode
[  561.270974][T24819] bond0: entered allmulticast mode
[  561.270983][T24819] bond_slave_0: entered allmulticast mode
[  561.270998][T24819] bond_slave_1: entered allmulticast mode
[  561.484352][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7673'.
[  561.484381][T24833] netlink: 'syz.0.7673': attribute type 10 has an invalid length.
[  561.484444][T24833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7673'.
[  561.489347][T24833] geneve2: entered promiscuous mode
[  561.489362][T24833] geneve2: entered allmulticast mode
[  561.952678][T24858] netlink: 'syz.0.7684': attribute type 4 has an invalid length.
[  562.158689][T24866] netlink: 'syz.0.7688': attribute type 1 has an invalid length.
[  562.216471][T24868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7689'.
[  562.388070][T24875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7689'.
[  562.388085][T24875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7689'.
[  562.404900][T24875] nbd: device at index 64 is going down
[  562.461286][T24877] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  562.879132][T24908] syzkaller0: entered promiscuous mode
[  562.879150][T24908] syzkaller0: entered allmulticast mode
[  563.138876][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  563.673238][T24966] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  564.490504][T24996] __nla_validate_parse: 5 callbacks suppressed
[  564.490616][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7746'.
[  564.523340][T24996] netlink: 'syz.0.7746': attribute type 39 has an invalid length.
[  564.538954][T25000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7748'.
[  564.586898][T25001] netlink: 'syz.0.7746': attribute type 13 has an invalid length.
[  564.950900][T25012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7753'.
[  565.247309][T25021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.677273][T25056] netlink: 'syz.0.7772': attribute type 6 has an invalid length.
[  565.677290][T25056] netlink: 360 bytes leftover after parsing attributes in process `syz.0.7772'.
[  565.716672][T25058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7776'.
[  565.757181][ T1108] IPVS: starting estimator thread 0...
[  565.771732][T25058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7776'.
[  565.860321][T25065] IPVS: using max 83 ests per chain, 199200 per kthread
[  566.046599][T25080] IPVS: Error connecting to the multicast addr
[  566.413043][T25088] Unsupported ieee802154 address type: 0
[  566.791288][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7797'.
[  567.105246][T25119] netlink: 'syz.0.7802': attribute type 2 has an invalid length.
[  567.105308][T25119] netlink: 'syz.0.7802': attribute type 8 has an invalid length.
[  567.105363][T25119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7802'.
[  567.146234][T25119] netlink: 'syz.0.7802': attribute type 2 has an invalid length.
[  567.146330][T25119] netlink: 'syz.0.7802': attribute type 8 has an invalid length.
[  567.146385][T25119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7802'.
[  567.169380][T25125] syzkaller0: left promiscuous mode
[  567.169392][T25125] syzkaller0: left allmulticast mode
[  567.462071][T25134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7807'.
[  567.704828][T25150] syzkaller1: entered promiscuous mode
[  567.704846][T25150] syzkaller1: entered allmulticast mode
[  568.370320][T25174] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  569.012445][T25212] x_tables: duplicate entry at hook 2
[  569.377462][T25232] netlink: 'syz.0.7849': attribute type 2 has an invalid length.
[  569.456087][T25238] syzkaller0: entered promiscuous mode
[  569.456099][T25238] syzkaller0: entered allmulticast mode
[  569.508115][T25236] __nla_validate_parse: 5 callbacks suppressed
[  569.508303][T25236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7851'.
[  569.730394][T25254] netlink: 'syz.2.7860': attribute type 29 has an invalid length.
[  569.732399][T25254] netlink: 'syz.2.7860': attribute type 29 has an invalid length.
[  569.765604][T25256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7861'.
[  569.765626][T25256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7861'.
[  569.830686][T25262] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  569.913957][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7868'.
[  571.073862][T25322] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7890'.
[  571.646147][T25322] team0: Port device vlan4 removed
[  572.247312][T25350] netlink: 'syz.5.7903': attribute type 15 has an invalid length.
[  572.247336][T25350] netlink: 'syz.5.7903': attribute type 7 has an invalid length.
[  572.247347][T25350] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7903'.
[  572.463741][T25348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7902'.
[  572.469150][T25348] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  572.469437][T25348] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  573.082637][T25384] ip_tables: iptables: counters copy to user failed while replacing table
[  573.436472][T25390] syzkaller0: entered promiscuous mode
[  573.436487][T25390] syzkaller0: entered allmulticast mode
[  573.733864][T25407] mac80211_hwsim hwsim37 ..c: renamed from wlan1
[  573.736844][T25409] netlink: 'syz.2.7928': attribute type 10 has an invalid length.
[  573.736855][T25409] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7928'.
[  574.615634][T25450] bond0: (slave ip6tnl0): refused to change device type
[  574.892457][T25452] rdma_rxe: rxe_newlink: failed to add wg2
[  575.093748][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7953'.
[  575.197039][T25473] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  575.197057][T25473] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  575.197071][T25473] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  575.212474][T25473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  575.239958][T25469] netlink: 'syz.5.7956': attribute type 2 has an invalid length.
[  575.244297][T25469] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7956'.
[  575.329825][T25473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7959'.
[  575.332832][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7961'.
[  575.332867][T25482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7961'.
[  575.403376][T25488] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7964'.
[  575.965936][T25540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7988'.
[  575.965949][T25540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7988'.
[  575.986680][T25542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7989'.
[  576.116356][T25549] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7992'.
[  576.812815][T25593] netlink: 'syz.0.8014': attribute type 46 has an invalid length.
[  577.406569][T25630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  577.427223][T25628] netlink: 'syz.2.8028': attribute type 10 has an invalid length.
[  577.427411][T25628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.447834][T25628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.466513][T25628] batman_adv: batadv0: Removing interface: erspan0
[  580.495223][T25640] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  580.600620][ T5822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 6081 - 0
[  580.711891][ T5822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 6081 - 0
[  580.762147][T25645] syzkaller0: entered promiscuous mode
[  580.762169][T25645] syzkaller0: entered allmulticast mode
[  583.111331][T25668] tipc: Resetting bearer <eth:syzkaller0>
[  583.111363][T25668] batman_adv: batadv0: Interface deactivated: syzkaller0
[  583.152359][T25668] tipc: Disabling bearer <eth:syzkaller0>
[  583.153065][T25668] batman_adv: batadv0: Removing interface: syzkaller0
[  583.243527][ T5822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 6081 - 0
[  583.255317][   T13] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.255353][   T13] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.255379][   T13] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.255402][   T13] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.278086][T25678] netlink: 'syz.2.8048': attribute type 21 has an invalid length.
[  583.287679][T25674] __nla_validate_parse: 6 callbacks suppressed
[  583.287739][T25674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8047'.
[  583.378406][T25683] ovs-dp0: entered promiscuous mode
[  583.640475][   T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  583.640498][   T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  583.640511][   T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  583.640522][   T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  583.661636][ T5822] batadv0: left promiscuous mode
[  583.661805][ T5822] bridge0: port 3(batadv0) entered disabled state
[  583.664125][ T5822] bridge_slave_1: left allmulticast mode
[  583.664136][ T5822] bridge_slave_1: left promiscuous mode
[  583.664255][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.665426][ T5822] bridge_slave_0: left allmulticast mode
[  583.665435][ T5822] bridge_slave_0: left promiscuous mode
[  583.665503][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.941630][ T5822] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  583.942837][ T5822] .` (unregistering): Released all slaves
[  583.945879][ T5822] bond0 (unregistering): Released all slaves
[  583.962198][ T5822] bond1 (unregistering): (slave veth7): Releasing active interface
[  583.963462][ T5822] bond1 (unregistering): Released all slaves
[  584.025336][ T5822] : left promiscuous mode
[  584.115010][ T5822] tipc: Left network mode
[  584.450657][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  584.587776][ T5822] hsr_slave_0: left promiscuous mode
[  584.588213][ T5822] hsr_slave_1: left promiscuous mode
[  584.598250][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.598580][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  584.612996][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.613008][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.617066][ T5822] batman_adv: batadv0: Interface deactivated: veth0
[  584.617078][ T5822] batman_adv: batadv0: Removing interface: veth0
[  584.643366][ T5822] batman_adv: batadv0: Interface deactivated: ipvlan0
[  584.643378][ T5822] batman_adv: batadv0: Removing interface: ipvlan0
[  584.939212][ T5822] team_slave_1 (unregistering): left allmulticast mode
[  585.000492][ T5822] team0 (unregistering): Port device team_slave_1 removed
[  585.025720][ T5822] team_slave_0 (unregistering): left allmulticast mode
[  585.035385][ T5822] team0 (unregistering): Port device team_slave_0 removed
[  585.163398][ T5822]  (unregistering): left allmulticast mode
[  585.214243][ T5822] team0 (unregistering): Port device  removed
[  585.269698][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  585.446723][T25787] team0: entered allmulticast mode
[  585.446904][T25787] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  585.615924][T25794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8087'.
[  585.702734][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  586.082501][ T5822] IPVS: stop unused estimator thread 0...
[  586.299520][ T5338] 8021q: adding VLAN 0 to HW filter on device eth29
[  587.618925][T25885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8104'.
[  587.935205][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8109'.
[  588.177116][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8113'.
[  588.493416][T25917] bridge: RTM_NEWNEIGH with invalid state 0x20
[  588.551756][T25917] Cannot find set identified by id 0 to match
[  589.277940][T25948] ip6gretap0: entered allmulticast mode
[  589.279394][T25948] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  589.330895][T25948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.333158][T25948] bond_slave_0: left allmulticast mode
[  589.341569][T25948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.350562][T25948] bond_slave_1: left allmulticast mode
[  589.358427][T25948] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  589.391752][T25948] ip6gretap0: left allmulticast mode
[  589.395350][T25948] bond0 (unregistering): Released all slaves
[  589.400996][T25955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8128'.
[  589.419288][T25955] netlink: 'syz.5.8128': attribute type 6 has an invalid length.
[  589.419307][T25955] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8128'.
[  589.426630][T25953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  589.675701][T25964] netlink: 'syz.5.8131': attribute type 2 has an invalid length.
[  589.675732][T25964] netlink: 'syz.5.8131': attribute type 2 has an invalid length.
[  589.731811][T25967] netlink: 'syz.2.8132': attribute type 10 has an invalid length.
[  589.731908][T25967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8132'.
[  589.732963][T25967] team_slave_1: entered promiscuous mode
[  589.732979][T25967] team_slave_1: entered allmulticast mode
[  589.764888][T25967] team0: Port device team_slave_1 removed
[  589.767966][T25967] bridge0: port 3(team_slave_1) entered blocking state
[  589.768291][T25967] bridge0: port 3(team_slave_1) entered disabled state
[  589.792960][T25971] netlink: 16170 bytes leftover after parsing attributes in process `syz.5.8133'.
[  589.806754][T25970] netlink: 'syz.2.8132': attribute type 10 has an invalid length.
[  590.057378][T25978] netlink: 'syz.2.8136': attribute type 19 has an invalid length.
[  590.278186][T25989] 0: reclassify loop, rule prio 0, protocol 800
[  590.518183][T26002] bridge0: port 3(team_slave_1) entered disabled state
[  591.097773][T26002] bridge_slave_1: left allmulticast mode
[  591.097839][T26002] bridge_slave_1: left promiscuous mode
[  591.133748][T26002] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.178525][T26002] bridge_slave_0: left allmulticast mode
[  591.178574][T26002] bridge_slave_0: left promiscuous mode
[  591.178733][T26002] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.257834][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8153'.
[  591.438257][T26030] tipc: New replicast peer: 172.20.20.187
[  591.438372][T26030] tipc: Enabled bearer <udp:syz0>, priority 10
[  591.539067][T26040] netlink: 'syz.5.8166': attribute type 1 has an invalid length.
[  591.614259][T26048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8170'.
[  591.624420][T26048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8170'.
[  591.660659][T26035] tipc: Can't bind to reserved service type 2
[  591.660925][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8171'.
[  592.146115][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8180'.
[  592.146136][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8180'.
[  593.303587][T26122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.194263][T26174] ieee802154 phy0 wpan0: encryption failed: -22
[  594.313570][T26182] Cannot find set identified by id 0 to match
[  594.767640][T26210] netlink: 'syz.0.8237': attribute type 5 has an invalid length.
[  594.813384][T26212] netlink: 'syz.5.8238': attribute type 1 has an invalid length.
[  594.916155][T26221] __nla_validate_parse: 5 callbacks suppressed
[  594.916175][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8243'.
[  595.564488][T26263] ieee802154 phy0 wpan0: encryption failed: -22
[  595.723433][T26266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8257'.
[  595.723447][T26266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8257'.
[  595.723453][T26266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8257'.
[  596.046180][T26277] netlink: 'syz.0.8267': attribute type 1 has an invalid length.
[  596.046201][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8267'.
[  597.060236][T26339] sch_fq: defrate 4294967293 ignored.
[  597.075101][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8292'.
[  597.475127][T26376] netlink: 'syz.2.8308': attribute type 10 has an invalid length.
[  597.568257][T26384] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8309'.
[  597.574082][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8309'.
[  597.783835][T26402] TC_ACT_REPEAT abuse ?
[  597.945278][T26398] netlink: 296 bytes leftover after parsing attributes in process `syz.5.8314'.
[  598.697190][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8334'.
[  599.076451][T26479] netlink: 'syz.0.8342': attribute type 1 has an invalid length.
[  599.076468][T26479] netlink: 'syz.0.8342': attribute type 4 has an invalid length.
[  599.078987][T26479] netlink: 'syz.0.8342': attribute type 1 has an invalid length.
[  599.079002][T26479] netlink: 'syz.0.8342': attribute type 4 has an invalid length.
[  600.017354][T26515] netlink: 'syz.0.8351': attribute type 1 has an invalid length.
[  600.059921][T26515] 8021q: adding VLAN 0 to HW filter on device bond2
[  600.121889][T26515] bond2: (slave veth5): Enslaving as an active interface with a down link
[  600.194298][T26515] bond2: (slave syz_tun): making interface the new active one
[  600.208823][T26515] syz_tun: entered promiscuous mode
[  600.209180][T26515] bond2: (slave syz_tun): Enslaving as an active interface with an up link
[  600.337026][T26515] bond2: (slave bridge1): Enslaving as an active interface with a down link
[  600.770928][T26557] __nla_validate_parse: 3 callbacks suppressed
[  600.770940][T26557] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8361'.
[  601.507149][T26590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.660826][T26599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8378'.
[  601.660859][T26599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8378'.
[  602.069996][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'.
[  602.070023][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8388'.
[  602.153873][T26625] netlink: NAT attribute has 8 unknown bytes
[  602.153891][T26625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.167774][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8388'.
[  602.431996][T26642] netlink: zone id is out of range
[  602.432005][T26642] netlink: zone id is out of range
[  602.432008][T26642] netlink: zone id is out of range
[  602.432012][T26642] netlink: zone id is out of range
[  602.432014][T26642] netlink: zone id is out of range
[  602.432017][T26642] netlink: zone id is out of range
[  602.894590][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8408'.
[  603.073942][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8408'.
[  603.073968][T26667] net_ratelimit: 1708 callbacks suppressed
[  603.073978][T26667] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  603.187442][T26674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8412'.
[  603.187461][T26674] bond0: ARP target 0.0.0.2 is already present
[  603.187471][T26674] bond0: option arp_ip_target: invalid value (33554432)
[  603.203682][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8411'.
[  603.346823][T26686] openvswitch: netlink: nsh attr 107 is out of range max 3
[  603.501615][T26698] netlink: 'syz.5.8421': attribute type 61 has an invalid length.
[  603.510132][T26698] netlink: 'syz.5.8421': attribute type 39 has an invalid length.
[  603.575083][T26704] netlink: 'syz.5.8424': attribute type 1 has an invalid length.
[  603.609057][T26704] 8021q: adding VLAN 0 to HW filter on device bond13
[  603.630437][T26704] bond13: (slave veth15): Enslaving as an active interface with a down link
[  603.635830][T26704] netlink: 'syz.5.8424': attribute type 10 has an invalid length.
[  603.833725][T26723] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  604.894480][T26750] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  605.073642][T26764] Bluetooth: hci0: unsupported parameter 5135
[  605.073664][T26764] Bluetooth: hci0: unsupported parameter 8192
[  605.073672][T26764] Bluetooth: hci0: unsupported parameter 5135
[  605.073679][T26764] Bluetooth: hci0: unsupported parameter 8192
[  605.254928][T26777] block nbd2: Unsupported socket: should be TCP or UNIX.
[  606.051569][T26824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.633526][T26858] netlink: Setting conntrack mark requires 'commit' flag.
[  606.633569][T26858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.818291][T26866] __nla_validate_parse: 12 callbacks suppressed
[  606.818413][T26866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8490'.
[  606.893672][T26870] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8492'.
[  606.893703][T26870] netlink: 'syz.2.8492': attribute type 8 has an invalid length.
[  606.901868][T26870] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  606.901887][T26870] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  607.128385][T26890] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  607.232643][T26846] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  608.034888][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8516'.
[  608.051310][T26938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8521'.
[  608.799256][T26972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.519091][T27009] Bluetooth: hci0: unsupported parameter 5135
[  609.519114][T27009] Bluetooth: hci0: unsupported parameter 65
[  609.519123][T27009] Bluetooth: hci0: unsupported parameter 5135
[  609.519130][T27009] Bluetooth: hci0: unsupported parameter 65
[  609.721455][T27023] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8560'.
[  609.732719][T27028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8561'.
[  609.802675][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8564'.
[  609.853003][T27040] tmpfs: Unknown parameter 'Z8,9'
[  609.933862][T27042] gre1: entered promiscuous mode
[  609.933884][T27042] gre1: entered allmulticast mode
[  611.409071][   T13] syz_tun: left promiscuous mode
[  612.670599][T27102] netlink: 'syz.5.8592': attribute type 29 has an invalid length.
[  612.673071][T27102] netlink: 'syz.5.8592': attribute type 29 has an invalid length.
[  613.528250][T27147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8613'.
[  613.746678][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8623'.
[  613.755245][T27168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  613.755434][T27168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  614.581976][T27180] syzkaller0: entered promiscuous mode
[  614.581989][T27180] syzkaller0: entered allmulticast mode
[  614.721158][T27192] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  614.745778][T27196] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  615.092680][ T8362] IPVS: starting estimator thread 0...
[  615.131666][T27229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8651'.
[  615.133390][T27229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8651'.
[  615.174186][T27234] SET target dimension over the limit!
[  615.175373][T27234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8654'.
[  615.175841][T27234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8654'.
[  615.175849][T27234] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  615.180655][T27224] IPVS: using max 84 ests per chain, 201600 per kthread
[  615.657642][T27272] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8671'.
[  615.928404][T27286] syzkaller0: entered promiscuous mode
[  615.928415][T27286] syzkaller0: entered allmulticast mode
[  616.389289][T27294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8681'.
[  616.466659][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8682'.
[  616.466737][T27296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  616.643613][T27310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8689'.
[  616.795964][T27320] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  616.796262][T27320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  617.319878][T27358] sctp: [Deprecated]: syz.2.8711 (pid 27358) Use of struct sctp_assoc_value in delayed_ack socket option.
[  617.319878][T27358] Use struct sctp_sack_info instead
[  617.907493][T27409] syzkaller0: entered promiscuous mode
[  617.907510][T27409] syzkaller0: entered allmulticast mode
[  618.134353][T27413] ovs-system: entered promiscuous mode
[  618.240195][T27424] netlink: 'syz.5.8743': attribute type 1 has an invalid length.
[  618.365821][T27436] sock: sock_set_timeout: `syz.5.8749' (pid 27436) tries to set negative timeout
[  618.724059][T27470] __nla_validate_parse: 3 callbacks suppressed
[  618.724075][T27470] netlink: 3560 bytes leftover after parsing attributes in process `syz.5.8764'.
[  618.811066][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8767'.
[  618.987793][T27485] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8770'.
[  619.641139][T27492] openvswitch: netlink: IP tunnel dst address not specified
[  619.723427][T27498] netlink: 'syz.5.8776': attribute type 1 has an invalid length.
[  619.750229][T27498] bond14: entered promiscuous mode
[  619.751159][T27498] 8021q: adding VLAN 0 to HW filter on device bond14
[  619.769464][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8776'.
[  619.775022][T27498] 8021q: adding VLAN 0 to HW filter on device bond14
[  619.775226][T27498] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address
[  619.775240][T27498] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  619.815008][T27498] bond14: (slave wireguard0): making interface the new active one
[  619.815021][T27498] wireguard0: entered promiscuous mode
[  619.815743][T27498] bond14: (slave wireguard0): Enslaving as an active interface with an up link
[  620.049925][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8790'.
[  620.194861][T27540] netlink: 'syz.0.8795': attribute type 1 has an invalid length.
[  621.234293][T27567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8805'.
[  621.463868][T27595] syzkaller0: entered promiscuous mode
[  621.463880][T27595] syzkaller0: entered allmulticast mode
[  621.473533][T27595] 0: reclassify loop, rule prio 0, protocol 800
[  621.727810][T27619] netlink: 'syz.2.8831': attribute type 1 has an invalid length.
[  621.756464][T27619] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.776348][T27619] bond0: (slave geneve4): making interface the new active one
[  621.777156][T27619] bond0: (slave geneve4): Enslaving as an active interface with an up link
[  621.795722][T27624] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  621.824953][T27628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8836'.
[  621.824965][T27628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8836'.
[  622.063996][T27648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  622.805503][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8860'.
[  622.805532][T27688] netlink: 'syz.2.8860': attribute type 26 has an invalid length.
[  622.805571][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8860'.
[  622.806220][T27688] netlink: 'syz.2.8860': attribute type 26 has an invalid length.
[  623.604449][T27739] netlink: 'syz.0.8878': attribute type 1 has an invalid length.
[  623.777605][T27747] __nla_validate_parse: 4 callbacks suppressed
[  623.777619][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8882'.
[  623.870319][T27753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8885'.
[  623.903249][T27755] netlink: 'syz.5.8886': attribute type 10 has an invalid length.
[  623.903263][T27755] netlink: 'syz.5.8886': attribute type 8 has an invalid length.
[  623.910131][T27757] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  623.910149][T27757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.951692][T27760] sctp: [Deprecated]: syz.2.8889 (pid 27760) Use of int in max_burst socket option deprecated.
[  623.951692][T27760] Use struct sctp_assoc_value instead
[  624.091934][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8894'.
[  624.316821][T27803] syzkaller0: entered promiscuous mode
[  624.316838][T27803] syzkaller0: entered allmulticast mode
[  624.572285][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  624.723040][T27826] syzkaller0: entered promiscuous mode
[  624.723052][T27826] syzkaller0: entered allmulticast mode
[  626.379885][T27833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8922'.
[  626.474111][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8929'.
[  626.803080][T27880] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.8944'.
[  626.803325][T27880] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.8944'.
[  628.022490][T27917] netlink: 'syz.2.8960': attribute type 17 has an invalid length.
[  628.022503][T27917] netlink: 'syz.2.8960': attribute type 16 has an invalid length.
[  628.022508][T27917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8960'.
[  628.065032][T27921] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.8961'.
[  630.666380][T27927] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  630.770050][T27951] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8976'.
[  631.980926][T27986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8992'.
[  632.315457][T27996] tipc: MTU too low for tipc bearer
[  632.803413][T28015] Bluetooth: hci0: unsupported parameter 5134
[  632.803431][T28015] Bluetooth: hci0: unsupported parameter 8192
[  632.803439][T28015] Bluetooth: hci0: unsupported parameter 5134
[  632.803448][T28015] Bluetooth: hci0: unsupported parameter 8192
[  632.858251][T28011] bond2: entered allmulticast mode
[  632.918161][T28016] macvlan3: entered promiscuous mode
[  632.918183][T28016] macvlan3: entered allmulticast mode
[  632.924724][T28016] bond2: entered promiscuous mode
[  632.926854][T28016] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  632.936453][T28016] bond2: left promiscuous mode
[  633.111689][T28020] veth0_to_bond: entered allmulticast mode
[  633.561310][T28033] x_tables: unsorted entry at hook 3
[  633.561801][T28033] tipc: Started in network mode
[  633.561815][T28033] tipc: Node identity ac1414aa, cluster identity 4711
[  633.562104][T28033] tipc: New replicast peer: 172.20.20.187
[  633.562396][T28033] tipc: Enabled bearer <udp:syz0>, priority 10
[  634.344174][T28045] netlink: 'syz.5.9020': attribute type 1 has an invalid length.
[  634.504849][T28045] 8021q: adding VLAN 0 to HW filter on device bond15
[  634.516493][T28051] lo speed is unknown, defaulting to 1000
[  634.532422][T28051] lo speed is unknown, defaulting to 1000
[  634.533878][T28051] lo speed is unknown, defaulting to 1000
[  634.679270][   T25] tipc: Node number set to 2886997162
[  634.793933][T28051] infiniband syz2: set down
[  634.793945][T28051] infiniband syz2: added lo
[  634.796678][    T9] lo speed is unknown, defaulting to 1000
[  634.810873][T28051] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  634.810891][T28051] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  634.810905][T28051] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  634.879413][T28066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.907615][T28051] RDS/IB: syz2: added
[  634.907642][T28051] smc: adding ib device syz2 with port count 1
[  634.907651][T28051] smc:    ib device syz2 port 1 has no pnetid
[  634.907692][    T9] lo speed is unknown, defaulting to 1000
[  634.925578][T28051] lo speed is unknown, defaulting to 1000
[  635.149436][T28075] x_tables: unsorted underflow at hook 1
[  635.173114][T28051] lo speed is unknown, defaulting to 1000
[  635.264171][T28079] bridge0: entered allmulticast mode
[  635.275461][T28079] pim6reg: entered allmulticast mode
[  635.290314][T28051] lo speed is unknown, defaulting to 1000
[  635.432247][T28083] tipc: Failed to remove unknown binding: 66,0,0/1335160602:789337750/789337752
[  635.432263][T28083] tipc: Failed to remove unknown binding: 66,0,0/1335160602:789337750/789337751
[  635.434964][T28083] tipc: Failed to remove unknown binding: 66,0,0/1335160602:789337750/789337752
[  635.434979][T28083] tipc: Failed to remove unknown binding: 66,0,0/1335160602:789337750/789337751
[  635.874175][T28060] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  636.047738][T28126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9054'.
[  636.211256][T28145] netlink: 'syz.2.9063': attribute type 1 has an invalid length.
[  636.834835][T28153] netlink: 'syz.2.9067': attribute type 29 has an invalid length.
[  636.835315][T28153] netlink: 'syz.2.9067': attribute type 29 has an invalid length.
[  636.875945][T28157] netlink: 762 bytes leftover after parsing attributes in process `syz.5.9069'.
[  636.875969][T28157] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0
[  636.916494][T28161] netlink: 'syz.0.9071': attribute type 1 has an invalid length.
[  637.097284][T28183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9082'.
[  637.531326][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9090'.
[  639.930095][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.987182][T28233] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  644.139764][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9107'.
[  644.682931][T28278] openvswitch: netlink: Tunnel attr 199 out of range max 16
[  644.814734][T28283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9123'.
[  645.384817][T28303] netlink: 'syz.5.9132': attribute type 1 has an invalid length.
[  645.384835][T28303] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9132'.
[  645.384846][T28303] NCSI netlink: No device for ifindex 0
[  646.892123][T28342] netlink: 'syz.5.9149': attribute type 2 has an invalid length.
[  646.892135][T28342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9149'.
[  646.896615][T28342] : entered promiscuous mode
[  646.940799][T28345] syzkaller0: entered promiscuous mode
[  646.940816][T28345] syzkaller0: entered allmulticast mode
[  647.494423][T28350] Cannot find set identified by id 65534 to match
[  647.558200][T28354] netlink: 'syz.5.9154': attribute type 10 has an invalid length.
[  647.582243][T28356] netlink: Unknown conntrack attr (0)
[  647.582482][T28356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.660042][T28356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9153'.
[  647.660216][T28356] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  647.965229][T28385] pimreg1: tun_chr_ioctl cmd 1074025677
[  647.965298][T28385] pimreg1: linktype set to 773
[  648.202265][T28401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9174'.
[  648.434613][T28430] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9185'.
[  648.714597][T28452] netlink: 'syz.0.9194': attribute type 3 has an invalid length.
[  649.237101][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9206'.
[  649.492725][T28506] xt_cluster: node mask cannot exceed total number of nodes
[  649.704875][T28520] netlink: 'syz.5.9225': attribute type 22 has an invalid length.
[  649.704895][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9225'.
[  650.241714][T28541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'.
[  650.246860][T28541] xfrm1: entered promiscuous mode
[  650.246871][T28541] xfrm1: entered allmulticast mode
[  650.247136][T28541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'.
[  650.383327][T28555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9241'.
[  650.443314][T28557] netlink: 'syz.2.9242': attribute type 4 has an invalid length.
[  650.443331][T28557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9242'.
[  651.007734][T28584] netlink: 'syz.2.9250': attribute type 4 has an invalid length.
[  651.427225][T28619] netlink: 'syz.2.9267': attribute type 29 has an invalid length.
[  651.427765][T28619] netlink: 'syz.2.9267': attribute type 29 has an invalid length.
[  651.666842][T28628] netlink: 'syz.2.9271': attribute type 23 has an invalid length.
[  651.729079][T28631] x_tables: ip_tables: icmp match: only valid for protocol 1
[  652.255614][T28642] netlink: 'syz.2.9277': attribute type 10 has an invalid length.
[  652.441015][T28656] netlink: 'syz.0.9284': attribute type 27 has an invalid length.
[  652.441034][T28656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9284'.
[  652.444855][T28656] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.484670][T28659] IPv6: NLM_F_CREATE should be specified when creating new route
[  652.640773][T28671] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.9291'.
[  652.640797][T28671] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  652.794650][T28679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9295'.
[  652.903780][T28683] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  652.906077][T28685] geneve5: entered promiscuous mode
[  652.947644][T28687] netlink: 'syz.5.9299': attribute type 4 has an invalid length.
[  652.947656][T28687] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9299'.
[  653.613408][T28718] xt_LOG: prefix is not null-terminated
[  654.573231][T28779] __nla_validate_parse: 4 callbacks suppressed
[  654.573249][T28779] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9339'.
[  654.757374][T28786] syzkaller1: entered promiscuous mode
[  654.757399][T28786] syzkaller1: entered allmulticast mode
[  654.994182][T28798] syzkaller0: entered promiscuous mode
[  654.994194][T28798] syzkaller0: entered allmulticast mode
[  654.995453][T28798] TC_ACT_REPEAT abuse ?
[  655.861100][T28849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  656.238934][T28867] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  656.424989][T28875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9383'.
[  656.425009][T28875] netlink: 'syz.5.9383': attribute type 4 has an invalid length.
[  656.425015][T28875] netlink: 'syz.5.9383': attribute type 1 has an invalid length.
[  656.744332][T28892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9388'.
[  656.804363][T28892] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9388'.
[  656.806702][T28892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9388'.
[  656.864394][T28896] bridge3: entered promiscuous mode
[  656.864407][T28896] bridge3: entered allmulticast mode
[  656.886507][   T34] audit: type=1804 audit(1792446052.881:13): pid=28898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9392" name="/newroot/2899/cgroup.controllers" dev="tmpfs" ino=14679 res=1 errno=0
[  656.886636][   T34] audit: type=1800 audit(1792446052.881:14): pid=28898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9392" name="cgroup.controllers" dev="tmpfs" ino=14679 res=0 errno=0
[  657.483265][T28936] Bluetooth: hci0: unsupported parameter 5161
[  657.483277][T28936] Bluetooth: hci0: unsupported parameter 8192
[  657.483282][T28936] Bluetooth: hci0: unsupported parameter 5161
[  657.483286][T28936] Bluetooth: hci0: unsupported parameter 8192
[  657.692090][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9415'.
[  657.898414][T28967] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  657.903960][T28967] syzkaller1: entered promiscuous mode
[  657.903979][T28967] syzkaller1: entered allmulticast mode
[  657.996498][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9426'.
[  658.087406][T28980] netlink: 'syz.5.9430': attribute type 21 has an invalid length.
[  658.087438][T28980] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9430'.
[  658.203502][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9431'.
[  659.356454][T29034] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9450'.
[  659.435623][T29039] netlink: 'syz.2.9454': attribute type 1 has an invalid length.
[  663.276345][T29080] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  663.303409][T29082] __nla_validate_parse: 1 callbacks suppressed
[  663.303421][T29082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9474'.
[  663.446079][ T2280] bridge0: entered promiscuous mode
[  665.044065][T29114] netlink: 'syz.0.9488': attribute type 12 has an invalid length.
[  665.044077][T29114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9488'.
[  665.918036][T29136] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  665.971935][T29140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9500'.
[  666.076053][T29146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9504'.
[  666.134996][T29149] openvswitch: netlink: IPv4 tunnel dst address is zero
[  666.256156][T29155] xt_hashlimit: size too large, truncated to 1048576
[  666.347487][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9509'.
[  666.584422][T29169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9514'.
[  666.584441][T29169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9514'.
[  666.584448][T29169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9514'.
[  666.648140][T29173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9516'.
[  666.691162][T29176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9517'.
[  667.716262][T29194] netlink: 'syz.5.9525': attribute type 10 has an invalid length.
[  667.803364][T29200] xt_ipcomp: unknown flags 1D
[  668.061348][T29218] netlink: 'syz.0.9535': attribute type 1 has an invalid length.
[  668.899360][T29266] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9556'.
[  669.030002][T29268] netlink: zone id is out of range
[  669.077284][T29268] netlink: zone id is out of range
[  669.864185][T29297] netlink: 'syz.0.9571': attribute type 1 has an invalid length.
[  669.864204][T29297] netlink: 'syz.0.9571': attribute type 2 has an invalid length.
[  669.864213][T29297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9571'.
[  670.262427][T29319] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9581'.
[  670.297746][T29319] netlink: 'syz.0.9581': attribute type 3 has an invalid length.
[  670.302136][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9581'.
[  670.302645][T29319] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  670.302656][T29319] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  671.120000][T29342] sctp: [Deprecated]: syz.5.9591 (pid 29342) Use of struct sctp_assoc_value in delayed_ack socket option.
[  671.120000][T29342] Use struct sctp_sack_info instead
[  671.676032][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9596'.
[  671.735519][T29363] netlink: 'syz.0.9597': attribute type 2 has an invalid length.
[  672.310464][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9611'.
[  672.337366][T29391] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9611'.
[  672.486295][T29402] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9615'.
[  672.597660][T29404] team0: Device macvlan2 failed to change mtu
[  672.833374][T29408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9617'.
[  672.993129][T29416] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.9621'.
[  673.110400][T29426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.631804][T29453] netlink: 'syz.5.9638': attribute type 15 has an invalid length.
[  673.733259][T29460] netlink: Unknown conntrack attr (0)
[  673.733315][T29460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.804809][T29460] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  674.281652][T29491] __nla_validate_parse: 1 callbacks suppressed
[  674.281668][T29491] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9654'.
[  675.197625][T29526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9670'.
[  675.673310][T29546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9679'.
[  676.186650][T29555] netlink: 'syz.0.9683': attribute type 21 has an invalid length.
[  676.186669][T29555] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9683'.
[  676.186720][T29555] netlink: 'syz.0.9683': attribute type 4 has an invalid length.
[  676.186728][T29555] netlink: 'syz.0.9683': attribute type 5 has an invalid length.
[  676.186736][T29555] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9683'.
[  676.323194][T29561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9686'.
[  676.503849][T29571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9689'.
[  676.912595][T29591] netlink: 'syz.5.9700': attribute type 2 has an invalid length.
[  678.178099][T29622] netlink: NAT attribute type 5 has unexpected length (0 != 2)
[  678.178117][T29622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.258597][ T4992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  678.262170][ T4992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  678.263379][ T4992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  678.263921][ T4992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  678.264276][ T4992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  678.855465][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  678.882110][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  678.887925][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  678.908266][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  678.913690][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  679.319571][T29625] rxe_eth0 speed is unknown, defaulting to 1000
[  679.527361][T29625] lo speed is unknown, defaulting to 1000
[  680.058002][T29625] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.058086][T29625] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.058259][T29625] bridge_slave_0: entered allmulticast mode
[  680.065443][T29625] bridge_slave_0: entered promiscuous mode
[  680.067248][T29625] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.067353][T29625] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.067410][T29625] bridge_slave_1: entered allmulticast mode
[  680.069208][T29625] bridge_slave_1: entered promiscuous mode
[  680.085958][T29625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.087881][T29625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.102408][T29625] team0: Port device team_slave_0 added
[  680.103700][T29625] team0: Port device team_slave_1 added
[  680.117333][T29625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.117342][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.117351][T29625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.118312][T29625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.118319][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.118327][T29625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.144299][T29625] hsr_slave_0: entered promiscuous mode
[  680.145080][T29625] hsr_slave_1: entered promiscuous mode
[  680.145464][T29625] debugfs: 'hsr0' already exists in 'hsr'
[  680.145476][T29625] Cannot create hsr debugfs directory
[  680.968742][ T5790] Bluetooth: hci3: command tx timeout
[  682.504484][T29675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9722'.
[  682.548431][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  682.550177][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 6081 - 0
[  682.550198][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0
[  682.584481][T29665] syzkaller0: entered promiscuous mode
[  682.584500][T29665] syzkaller0: entered allmulticast mode
[  682.633860][T29679] netlink: 'syz.0.9724': attribute type 1 has an invalid length.
[  682.696804][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9724'.
[  682.726030][T29679] 8021q: adding VLAN 0 to HW filter on device bond3
[  682.797135][T29680] netlink: 'syz.0.9724': attribute type 10 has an invalid length.
[  682.797153][T29680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9724'.
[  682.804616][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  682.804641][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 6081 - 0
[  682.804655][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0
[  682.986966][T29679] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  682.987537][T29680] dummy0: entered promiscuous mode
[  682.995516][T29096] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  683.005869][T29680] bond3: (slave dummy0): Removing an active aggregator
[  683.013851][T29680] bond3: (slave dummy0): Releasing backup interface
[  683.050052][ T5790] Bluetooth: hci3: command tx timeout
[  683.061126][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  683.061150][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 6081 - 0
[  683.061165][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0
[  683.288208][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  683.288234][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 6081 - 0
[  683.288249][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0
[  683.952295][   T13] bond0 (unregistering): (slave geneve4): Releasing active interface
[  684.002471][   T13] bond1 (unregistering): Released all slaves
[  684.013038][   T13] bond0 (unregistering): Released all slaves
[  684.022038][   T13] bond2 (unregistering): Released all slaves
[  684.164605][   T13] ovs-dp0: left promiscuous mode
[  684.284140][   T13] tipc: Disabling bearer <udp:syz0>
[  684.284202][   T13] tipc: Left network mode
[  684.287962][T29625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  684.341918][T29625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  684.342477][T29625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  684.345569][T29625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  684.346070][T29625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  684.355206][T29625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  684.357294][T29625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  684.366384][T29625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  684.538984][T29625] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.573152][T29625] 8021q: adding VLAN 0 to HW filter on device team0
[  684.598059][T18684] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.598104][T18684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.612924][T18684] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.612966][T18684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.850694][T29773] netlink: 'syz.0.9738': attribute type 1 has an invalid length.
[  685.103874][T29625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.141299][ T5790] Bluetooth: hci3: command tx timeout
[  685.553431][T29625] veth0_vlan: entered promiscuous mode
[  685.569501][T29625] veth1_vlan: entered promiscuous mode
[  685.674931][T29625] veth0_macvtap: entered promiscuous mode
[  685.702609][T29625] veth1_macvtap: entered promiscuous mode
[  685.722049][   T13] hsr_slave_0: left promiscuous mode
[  685.722781][   T13] hsr_slave_1: left promiscuous mode
[  685.871153][   T13] team0 (unregistering): Port device team_slave_0 removed
[  685.884623][T18684] smbdirect: ib_dev[syz0] removed
[  685.983757][T27721] smc: removing ib device syz2
[  685.995944][T29625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.010438][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  686.011419][T29625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.028759][ T5728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.028781][ T5728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.028794][ T5728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.028807][ T5728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.109314][T27721] smbdirect: ib_dev[syz2] removed
[  686.424930][ T8362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.424946][ T8362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.427795][T29824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.763753][T18684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.763769][T18684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.780753][T29833] netlink: 'syz.0.9747': attribute type 10 has an invalid length.
[  686.780816][T29833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  686.780876][T29833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  686.937100][T29833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.085476][T29833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.152565][T29847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9750'.
[  687.220915][ T5790] Bluetooth: hci3: command tx timeout
[  687.452685][T29847] veth19: entered allmulticast mode
[  687.724654][   T13] IPVS: stop unused estimator thread 0...
[  687.773470][T29861] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9754'.
[  687.897267][ T5338] 8021q: adding VLAN 0 to HW filter on device eth9
[  687.928013][T29867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9755'.
[  688.029565][T29871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9757'.
[  688.047083][T29874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9758'.
[  688.316708][ T5338] 8021q: adding VLAN 0 to HW filter on device eth10
[  688.443633][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9764'.
[  688.672133][ T5338] 8021q: adding VLAN 0 to HW filter on device eth11
[  688.786232][T29920] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9772'.
[  688.786254][T29920] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9772'.
[  688.902949][ T5338] 8021q: adding VLAN 0 to HW filter on device eth12
[  689.449797][T29958] bond4: option tlb_dynamic_lb: invalid value (255)
[  689.451324][T29958] bond4 (unregistering): Released all slaves
[  690.071391][T29983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9794'.
[  690.136660][T29986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9796'.
[  690.494164][T30017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9810'.
[  691.270633][T30075] bond4: entered promiscuous mode
[  691.270653][T30075] bond4: entered allmulticast mode
[  691.361193][T30082] syzkaller0: entered promiscuous mode
[  691.361209][T30082] syzkaller0: entered allmulticast mode
[  691.500384][T30092] netlink: 'syz.0.9843': attribute type 1 has an invalid length.
[  691.573492][T30095] openvswitch: netlink: Missing valid actions attribute.
[  691.573508][T30095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.655796][T30096] aaaaaaaaaaaaaaa: entered promiscuous mode
[  691.834998][T30104] netlink: 'syz.5.9848': attribute type 21 has an invalid length.
[  691.971199][T30111] Bluetooth: ISO socket layer initialized
[  692.848190][T30138] netlink: 'syz.4.9863': attribute type 3 has an invalid length.
[  692.962597][T30148] netlink: 'syz.5.9870': attribute type 21 has an invalid length.
[  692.962667][T30148] netlink: 'syz.5.9870': attribute type 1 has an invalid length.
[  693.612417][T30194] __nla_validate_parse: 9 callbacks suppressed
[  693.612429][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9889'.
[  693.717479][T30198] netlink: 'syz.4.9888': attribute type 23 has an invalid length.
[  693.754246][T30202] netlink: 'syz.0.9892': attribute type 29 has an invalid length.
[  693.754876][T30202] netlink: 'syz.0.9892': attribute type 29 has an invalid length.
[  693.755233][T30202] netlink: 'syz.0.9892': attribute type 29 has an invalid length.
[  693.964246][T30208] Bluetooth: MGMT ver 1.23
[  694.553224][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9900'.
[  694.581442][T30223] netlink: 'syz.4.9902': attribute type 10 has an invalid length.
[  694.581951][T30223] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  694.582118][T30223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  694.677156][T30228] team0: Port device bridge0 added
[  694.817286][T30245] syzkaller0: entered promiscuous mode
[  694.817304][T30245] syzkaller0: entered allmulticast mode
[  694.968303][T30259] netlink: 703 bytes leftover after parsing attributes in process `syz.4.9917'.
[  695.402934][T30301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9934'.
[  695.643881][T30313] tipc: Started in network mode
[  695.643905][T30313] tipc: Node identity e0000002, cluster identity 4711
[  695.643942][T30313] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  695.674922][T30315] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9941'.
[  695.802180][T30322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9944'.
[  696.010051][T30337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9951'.
[  696.037115][T30337] netlink: 92 bytes leftover after parsing attributes in process `syz.5.9951'.
[  696.409284][T30354] syzkaller1: entered promiscuous mode
[  696.409305][T30354] syzkaller1: entered allmulticast mode
[  696.715140][T30372] validate_nla: 2 callbacks suppressed
[  696.715152][T30372] netlink: 'syz.4.9966': attribute type 4 has an invalid length.
[  696.832960][T30386] syzkaller0: entered promiscuous mode
[  696.832972][T30386] syzkaller0: entered allmulticast mode
[  700.152886][T30435] ip6gre2: entered promiscuous mode
[  700.202332][T30437] netlink: 'syz.0.9990': attribute type 2 has an invalid length.
[  700.202351][T30437] netlink: 'syz.0.9990': attribute type 3 has an invalid length.
[  700.202359][T30437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9990'.
[  700.491304][T30464] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10000'.
[  700.654848][T30482] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  700.679668][T30484] netlink: 'syz.4.10008': attribute type 2 has an invalid length.
[  700.679685][T30484] netlink: 'syz.4.10008': attribute type 2 has an invalid length.
[  701.191385][T30512] batman_adv: batadv0: Adding interface: syzkaller0
[  701.191401][T30512] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.191422][T30512] batman_adv: batadv0: Interface activated: syzkaller0
[  701.194414][T30510] batman_adv: batadv0: Interface deactivated: syzkaller0
[  701.242118][T30510] batman_adv: batadv0: Removing interface: syzkaller0
[  701.256062][T30517] netlink: 'syz.0.10021': attribute type 16 has an invalid length.
[  701.256073][T30517] netlink: 'syz.0.10021': attribute type 17 has an invalid length.
[  701.256085][T30517] lo: left promiscuous mode
[  701.284753][T30517] dummy0: left promiscuous mode
[  701.310048][T30517] veth0_to_bond: left allmulticast mode
[  701.330289][T30517] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  701.355497][T30517] bond1: left promiscuous mode
[  701.355522][T30517] bond1: left allmulticast mode
[  701.355901][T30517] 8021q: adding VLAN 0 to HW filter on device bond1
[  701.371940][T30517] geneve2: left promiscuous mode
[  701.371957][T30517] geneve2: left allmulticast mode
[  701.394956][T30517] gre1: left promiscuous mode
[  701.394976][T30517] gre1: left allmulticast mode
[  701.403469][T30517] xfrm1: left promiscuous mode
[  701.403486][T30517] xfrm1: left allmulticast mode
[  701.407651][T30517] bond4: left promiscuous mode
[  701.407668][T30517] bond4: left allmulticast mode
[  701.407902][T30517] 8021q: adding VLAN 0 to HW filter on device bond4
[  701.424454][T30517] 8021q: adding VLAN 0 to HW filter on device bond5
[  701.426447][T30517] ip6gre2: left promiscuous mode
[  701.434845][T27721] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.434916][T27721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.516777][   T13] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  701.850715][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10036'.
[  702.817101][T30615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10063'.
[  703.014667][T30623] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.10067'.
[  703.055890][T30628] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10070'.
[  703.062889][T30628] bridge0: port 1(vlan0) entered blocking state
[  703.063022][T30628] bridge0: port 1(vlan0) entered disabled state
[  703.063107][T30628] vlan0: entered allmulticast mode
[  703.063120][T30628] geneve0: entered allmulticast mode
[  703.064566][T30628] vlan0: entered promiscuous mode
[  703.064579][T30628] geneve0: entered promiscuous mode
[  703.153209][T30632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10071'.
[  703.710774][T30655] sysfs: Unknown parameter 'u'
[  705.950076][T30688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10096'.
[  706.304184][T30714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10108'.
[  706.436246][T30720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10110'.
[  706.436274][T30720] gre0: entered promiscuous mode
[  707.470156][T30735] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  708.456455][T30765] syzkaller0: entered promiscuous mode
[  708.456473][T30765] syzkaller0: entered allmulticast mode
[  708.737108][T30777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10138'.
[  708.913569][T30785] netlink: 'syz.0.10142': attribute type 2 has an invalid length.
[  708.994706][T30787] netlink: 388 bytes leftover after parsing attributes in process `syz.0.10143'.
[  709.163386][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10146'.
[  709.163405][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10146'.
[  709.163423][T30793] netlink: 'syz.0.10146': attribute type 18 has an invalid length.
[  709.186977][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10146'.
[  709.186995][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10146'.
[  709.187012][T30793] netlink: 'syz.0.10146': attribute type 18 has an invalid length.
[  709.200921][ T5694] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  709.200951][ T5694] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  709.200972][ T5694] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  709.200993][ T5694] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  709.298299][T30795] bond2: (slave syz_tun): Releasing active interface
[  709.299697][T30795] bond2: (slave veth5): making interface the new active one
[  709.322393][T30795] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.332742][T30795] team0: Port device bridge0 removed
[  709.337599][T30795] bridge_slave_1: left allmulticast mode
[  709.337612][T30795] bridge_slave_1: left promiscuous mode
[  709.337701][T30795] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.363081][T30795] bond0: (slave bond_slave_0): Releasing backup interface
[  709.377247][T30795] bond0: (slave bond_slave_1): Releasing backup interface
[  709.394976][T30795] team0: Port device team_slave_0 removed
[  709.403526][T30795] team0: Port device team_slave_1 removed
[  709.406717][T30795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  709.425937][ T2280] syz1: Port: 1 Link DOWN
[  710.101808][T30826] ieee802154 phy0 wpan0: encryption failed: -22
[  710.544729][T30846] syzkaller1: entered promiscuous mode
[  710.544747][T30846] syzkaller1: entered allmulticast mode
[  710.842332][T30858] netlink: 'syz.5.10176': attribute type 1 has an invalid length.
[  710.877300][T30858] 8021q: adding VLAN 0 to HW filter on device bond16
[  711.520233][T30876] ip_tables: iptables: counters copy to user failed while replacing table
[  711.721757][T30888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10190'.
[  713.076272][T30925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10205'.
[  713.130336][T30930] netlink: 236 bytes leftover after parsing attributes in process `syz.5.10207'.
[  713.130350][T30930] netlink: 236 bytes leftover after parsing attributes in process `syz.5.10207'.
[  713.210532][T30934] tc_dump_action: action bad kind
[  713.611481][T30964] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10223'.
[  715.301692][T31006] netlink: 'syz.5.10240': attribute type 2 has an invalid length.
[  715.301776][T31006] netlink: 'syz.5.10240': attribute type 2 has an invalid length.
[  716.382969][T31052] proc: Bad value for 'gid'
[  718.183373][T31138] openvswitch: netlink: IPv6 tunnel dst address is zero
[  719.402931][ T4992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  719.406990][ T4992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  719.420464][ T4992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  719.424871][ T4992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  719.425452][ T4992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  719.868188][T31182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10313'.
[  719.868206][T31182] tipc: Cannot configure node identity twice
[  719.884791][T31159] rxe_eth0 speed is unknown, defaulting to 1000
[  720.066059][ T5728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.120706][T31191] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10317'.
[  720.213467][T31198] netlink: 'syz.5.10319': attribute type 21 has an invalid length.
[  720.214407][ T5728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.350707][ T5728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.393146][T31203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10322'.
[  720.485938][ T5728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.846455][T31159] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.846630][T31159] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.846794][T31159] bridge_slave_0: entered allmulticast mode
[  720.860791][T31159] bridge_slave_0: entered promiscuous mode
[  720.883159][T31159] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.883243][T31159] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.883330][T31159] bridge_slave_1: entered allmulticast mode
[  720.887340][T31159] bridge_slave_1: entered promiscuous mode
[  720.960321][T31159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.962878][T31159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.994232][ T5728] bridge_slave_1: left allmulticast mode
[  720.994253][ T5728] bridge_slave_1: left promiscuous mode
[  720.994387][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.997344][ T5728] bridge_slave_0: left allmulticast mode
[  720.997364][ T5728] bridge_slave_0: left promiscuous mode
[  720.997574][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.063992][T31243] netlink: 'syz.0.10337': attribute type 10 has an invalid length.
[  721.064009][T31243] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10337'.
[  721.289571][ T5728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.292113][ T5728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.293640][ T5728] bond0 (unregistering): Released all slaves
[  721.311498][T31159] team0: Port device team_slave_0 added
[  721.324290][T31159] team0: Port device team_slave_1 added
[  721.434530][T31159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.434573][T31159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.434590][T31159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.461407][ T5790] Bluetooth: hci2: command tx timeout
[  721.465126][T31159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.465137][T31159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.465147][T31159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.543261][T31254] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  721.636712][T31159] hsr_slave_0: entered promiscuous mode
[  721.637432][T31159] hsr_slave_1: entered promiscuous mode
[  721.637945][T31159] debugfs: 'hsr0' already exists in 'hsr'
[  721.637959][T31159] Cannot create hsr debugfs directory
[  721.806076][ T5338] 8021q: adding VLAN 0 to HW filter on device eth30
[  721.907208][T31276] netlink: 'syz.0.10349': attribute type 3 has an invalid length.
[  721.956736][T31278] sctp: [Deprecated]: syz.0.10350 (pid 31278) Use of int in maxseg socket option.
[  721.956736][T31278] Use struct sctp_assoc_value instead
[  721.958436][T31278] netlink: 'syz.0.10350': attribute type 39 has an invalid length.
[  722.052739][T31280] xt_hashlimit: size too large, truncated to 1048576
[  722.105077][T31281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10350'.
[  722.430920][ T5728] hsr_slave_0: left promiscuous mode
[  722.431571][ T5728] hsr_slave_1: left promiscuous mode
[  722.455638][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.455660][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.456865][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.456878][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.473369][ T5728] veth1_macvtap: left promiscuous mode
[  722.473405][ T5728] veth0_macvtap: left promiscuous mode
[  722.473470][ T5728] veth1_vlan: left promiscuous mode
[  722.473581][ T5728] veth0_vlan: left promiscuous mode
[  722.739009][T31295] netlink: 'syz.5.10354': attribute type 1 has an invalid length.
[  722.848908][T31297] netlink: 'syz.5.10354': attribute type 10 has an invalid length.
[  722.848926][T31297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10354'.
[  722.877649][T31299] x_tables: unsorted underflow at hook 4
[  722.974645][ T5728] team0 (unregistering): Port device team_slave_1 removed
[  722.997605][ T5728] team0 (unregistering): Port device team_slave_0 removed
[  723.000400][T31305] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  723.122097][ T5338] 8021q: adding VLAN 0 to HW filter on device eth31
[  723.159876][T31295] 8021q: adding VLAN 0 to HW filter on device bond17
[  723.331806][T31318] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  723.530567][ T5790] Bluetooth: hci2: command tx timeout
[  723.543009][T31319] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check.
[  723.560609][T31324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10366'.
[  723.752628][T31324] xt_IDLETIMER: timeout value is zero
[  724.105363][ T5338] 8021q: adding VLAN 0 to HW filter on device eth32
[  724.151647][T31159] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  724.334334][T31159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  724.337384][T31159] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  724.349697][T31159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  724.351137][T31159] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  724.353837][T31159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  724.354681][T31159] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  724.356865][T31159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  724.441572][T31159] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.453062][T31159] 8021q: adding VLAN 0 to HW filter on device team0
[  724.458168][T18684] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.458211][T18684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.472128][T18684] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.472181][T18684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.712528][ T5338] 8021q: adding VLAN 0 to HW filter on device eth33
[  724.880848][T31159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.928235][T31159] veth0_vlan: entered promiscuous mode
[  724.941208][T31159] veth1_vlan: entered promiscuous mode
[  724.944329][T31388] netlink: 'syz.0.10378': attribute type 1 has an invalid length.
[  724.992244][T31159] veth0_macvtap: entered promiscuous mode
[  724.995905][T31159] veth1_macvtap: entered promiscuous mode
[  725.012958][T31159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.026099][T31159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.129572][ T5694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.129611][ T5694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.129635][ T5694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.129658][ T5694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.190112][T18683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.190129][T18683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.251223][T18683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.251240][T18683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.608880][ T5790] Bluetooth: hci2: command tx timeout
[  725.734242][T31422] syzkaller0: entered promiscuous mode
[  725.734254][T31422] syzkaller0: entered allmulticast mode
[  725.836968][T31427] syzkaller0: entered promiscuous mode
[  725.836990][T31427] syzkaller0: entered allmulticast mode
[  726.634294][T31458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  726.696686][T31462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  726.757266][T31462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  727.286358][T31513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10418'.
[  727.423824][T31529] Cannot find set identified by id 0 to match
[  727.689017][ T5790] Bluetooth: hci2: command tx timeout
[  727.711895][T31564] openvswitch: netlink: Unknown key attributes 1
[  727.968400][T31578] netlink: Invalid conntrack helper
[  727.968425][T31578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  728.141137][T31598] 8021q: adding VLAN 0 to HW filter on device bond6
[  728.141660][T31598] bridge0: port 1(bond6) entered blocking state
[  728.141734][T31598] bridge0: port 1(bond6) entered disabled state
[  728.141814][T31598] bond6: entered allmulticast mode
[  728.143710][T31598] bond6: entered promiscuous mode
[  728.587355][T31614] netlink: 7906 bytes leftover after parsing attributes in process `syz.5.10452'.
[  729.065732][T31634] netlink: 'syz.5.10461': attribute type 4 has an invalid length.
[  729.246718][T31645] wg2 speed is unknown, defaulting to 1000
[  729.247482][T31645] wg2 speed is unknown, defaulting to 1000
[  729.249719][T31645] wg2 speed is unknown, defaulting to 1000
[  729.423324][T31656] IPv6: Can't replace route, no match found
[  729.496834][T31645] infiniband syz0: set active
[  729.496955][T14482] wg2 speed is unknown, defaulting to 1000
[  729.507967][T31645] infiniband syz0: added wg2
[  729.525959][T31645] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  729.525979][T31645] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  729.525993][T31645] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  729.547221][T31645] RDS/IB: syz0: added
[  729.547270][T31645] smc: adding ib device syz0 with port count 1
[  729.547285][T31645] smc:    ib device syz0 port 1 has no pnetid
[  729.547353][T14477] wg2 speed is unknown, defaulting to 1000
[  729.548394][T31645] wg2 speed is unknown, defaulting to 1000
[  729.704763][T31671] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  729.735519][T31645] wg2 speed is unknown, defaulting to 1000
[  729.836945][T31676] syzkaller0: entered promiscuous mode
[  729.836967][T31676] syzkaller0: entered allmulticast mode
[  732.491050][T31645] wg2 speed is unknown, defaulting to 1000
[  732.541489][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10481'.
[  732.541788][T31686] xt_cgroup: path and classid specified
[  732.583728][T31688] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10482'.
[  732.837006][T31716] netlink: 'syz.0.10494': attribute type 1 has an invalid length.
[  732.837018][T31716] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10494'.
[  733.142617][T31732] netlink: 'syz.5.10500': attribute type 21 has an invalid length.
[  733.543993][   T12] bond0: (slave bond_slave_0): interface is now down
[  733.544010][   T12] bond0: (slave bond_slave_1): interface is now down
[  733.708159][T31771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10517'.
[  734.858065][T31832] netlink: 'syz.3.10541': attribute type 58 has an invalid length.
[  734.858083][T31832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10541'.
[  735.293213][T31868] netlink: 'syz.3.10555': attribute type 23 has an invalid length.
[  735.505798][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10560'.
[  736.059257][T31911] netlink: 'syz.0.10575': attribute type 12 has an invalid length.
[  736.059270][T31911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10575'.
[  736.090513][ T5694] bond0: (slave bond_slave_0): interface is now down
[  736.090528][ T5694] bond0: (slave bond_slave_1): interface is now down
[  736.202023][ T5694] bond0: now running without any active interface!
[  737.215201][T31943] netlink: 'syz.0.10588': attribute type 6 has an invalid length.
[  737.215219][T31943] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10588'.
[  737.782174][T31958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10593'.
[  737.782194][T31958] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  737.926161][T31968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10598'.
[  737.926224][T31968] openvswitch: netlink: Flow actions attr not present in new flow.
[  738.242893][T31977] syzkaller1: entered promiscuous mode
[  738.242911][T31977] syzkaller1: entered allmulticast mode
[  738.424698][T31980] netlink: 'syz.0.10600': attribute type 21 has an invalid length.
[  738.426435][T31980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10600'.
[  739.516201][T32009] netlink: 'syz.0.10605': attribute type 10 has an invalid length.
[  739.560134][T32009] team0: Port device dummy0 added
[  739.696671][T32021] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10609'.
[  739.777259][T32024] netlink: 'syz.3.10609': attribute type 2 has an invalid length.
[  742.726852][T32038] ip_tables: iptables: counters copy to user failed while replacing table
[  742.872784][T32051] netlink: 'syz.3.10622': attribute type 267 has an invalid length.
[  743.073898][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10626'.
[  744.622088][T32131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'.
[  744.622605][T32131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'.
[  744.622784][T32131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'.
[  744.623044][T32131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'.
[  744.735196][T32139] netlink: 'syz.3.10657': attribute type 15 has an invalid length.
[  744.735216][T32139] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10657'.
[  744.929842][T32150] erspan0: entered promiscuous mode
[  745.413741][T32163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10667'.
[  745.435646][T32161] netlink: 'syz.5.10666': attribute type 12 has an invalid length.
[  746.192794][T32209] : renamed from bond_slave_0 (while UP)
[  746.381078][T32216] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10692'.
[  746.712519][T32225] netlink: 'syz.3.10694': attribute type 1 has an invalid length.
[  746.712638][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10694'.
[  746.740451][T32225] netlink: 'syz.3.10694': attribute type 10 has an invalid length.
[  746.740666][T32225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  746.740712][T32225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.774747][T32225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  746.774812][T32225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  747.451956][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  747.520924][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10716'.
[  748.055410][T32302] netlink: 'syz.5.10726': attribute type 10 has an invalid length.
[  748.434211][T32313] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  750.207986][T32343] syzkaller0: entered promiscuous mode
[  750.208005][T32343] syzkaller0: entered allmulticast mode
[  750.540058][   T34] audit: type=1800 audit(1792446146.531:15): pid=32364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10747" name=63633F206C6F6F705F6865616465723F2069646F6D20696E736E233A206C6976655F726567735F6265666F7265293A0A2020202020202020202D31202020303A202E312E2E2E2E2E2E2E2E2028313829207238203D2030783363333130303030300A2020202020202020202030202020323A202E312E2E2E2E2E2E382E20283835292063616C6C2070632B360A2020202020202020202032202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666 dev="tmpfs" ino=7222 res=0 errno=0
[  750.977840][T32422] __nla_validate_parse: 1 callbacks suppressed
[  750.977855][T32422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10774'.
[  751.650568][T32463] syzkaller0: entered promiscuous mode
[  751.650583][T32463] syzkaller0: entered allmulticast mode
[  751.819988][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10799'.
[  751.923341][T32482] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10803'.
[  752.248402][T32514] netlink: 'syz.5.10818': attribute type 29 has an invalid length.
[  752.256022][T32514] netlink: 'syz.5.10818': attribute type 29 has an invalid length.
[  752.256437][T32514] netlink: 'syz.5.10818': attribute type 29 has an invalid length.
[  753.647412][T32559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10838'.
[  753.752071][T32563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10840'.
[  753.841292][T32574] netlink: zone id is out of range
[  753.841309][T32574] netlink: zone id is out of range
[  753.841316][T32574] netlink: zone id is out of range
[  753.841322][T32574] netlink: zone id is out of range
[  753.841330][T32574] netlink: zone id is out of range
[  753.841338][T32574] netlink: zone id is out of range
[  753.841345][T32574] netlink: zone id is out of range
[  753.841351][T32574] netlink: zone id is out of range
[  753.841358][T32574] netlink: zone id is out of range
[  753.841366][T32574] netlink: zone id is out of range
[  753.956438][T32577] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.963540][T32577] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.986177][T32578] netlink: 'syz.3.10847': attribute type 16 has an invalid length.
[  753.986192][T32578] netlink: 'syz.3.10847': attribute type 17 has an invalid length.
[  754.033390][T32581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10849'.
[  754.045151][   T25] wg2 speed is unknown, defaulting to 1000
[  754.070834][T32578] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.070976][T32578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  754.072788][T32578] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.072869][T32578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  754.157442][ T5728] ip6_tunnel:  xmit: Local address not yet configured!
[  754.157608][ T5728] ip6_tunnel:  xmit: Local address not yet configured!
[  754.172295][T32582] syzkaller0: entered promiscuous mode
[  754.172314][T32582] syzkaller0: entered allmulticast mode
[  754.194007][T13674] ip6_tunnel:  xmit: Local address not yet configured!
[  754.285735][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10852'.
[  754.511281][T32615] netlink: 'syz.3.10862': attribute type 6 has an invalid length.
[  754.540116][    T9] ip6_tunnel:  xmit: Local address not yet configured!
[  754.603485][    T9] ip6_tunnel:  xmit: Local address not yet configured!
[  755.349512][T32656] syzkaller0: entered promiscuous mode
[  755.349525][T32656] syzkaller0: entered allmulticast mode
[  755.371350][ T5728] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  755.371438][ T5728] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  755.371478][ T5728] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  755.371491][ T5728] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  755.410075][T32658] netlink: 'syz.3.10881': attribute type 3 has an invalid length.
[  755.410088][T32658] netlink: 'syz.3.10881': attribute type 2 has an invalid length.
[  755.611588][T32691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10893'.
[  755.611621][T32691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10893'.
[  755.830769][T32717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10905'.
[  757.176664][  T311] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10931'.
[  757.389172][  T323] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  757.409084][  T323] bond1: (slave lo): Enslaving as an active interface with an up link
[  757.552092][  T334] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10940'.
[  757.552517][  T334] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10940'.
[  757.714087][   T34] audit: type=1107 audit(1792446153.711:16): pid=344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  757.942245][ T5790] Bluetooth: hci2: unexpected subevent 0x18 length: 150 > 19
[  757.942275][ T5790] Bluetooth: hci2: Unable to find connection for dst 00:00:05:00:00:00 sid 0x00
[  758.088963][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  758.363983][  T384] netlink: 'syz.0.10963': attribute type 2 has an invalid length.
[  758.369984][  T384] : entered promiscuous mode
[  758.585889][  T392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10967'.
[  758.692511][  T399] netlink: 'syz.5.10970': attribute type 2 has an invalid length.
[  758.692524][  T399] netlink: 'syz.5.10970': attribute type 9 has an invalid length.
[  758.692531][  T399] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10970'.
[  760.292150][  T424] C: renamed from veth1_to_team (while UP)
[  760.424966][  T432] netlink: 'syz.0.10983': attribute type 10 has an invalid length.
[  762.027423][  T424] netlink: 'syz.3.10981': attribute type 3 has an invalid length.
[  762.027442][  T424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10981'.
[  762.091039][  T432] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode
[  762.121437][  T432] team0: Port device wlan0 added
[  762.304494][  T450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10990'.
[  762.321012][  T450] netlink: 'syz.3.10990': attribute type 2 has an invalid length.
[  762.590726][  T459] bond18: option primary_reselect: invalid value (6)
[  762.612200][  T459] bond18 (unregistering): Released all slaves
[  762.782145][  T487] netlink: 'syz.3.11002': attribute type 27 has an invalid length.
[  762.782166][  T487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11002'.
[  762.786868][  T487] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.821439][  T489] xt_CT: No such helper "netbios-ns"
[  762.953708][  T503] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11007'.
[  763.028354][  T511] af_packet: packet size is too long (65578 > 1284)
[  763.061838][  T513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11014'.
[  763.686091][  T542] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  764.497588][  T582] netlink: 'syz.0.11044': attribute type 21 has an invalid length.
[  764.876218][  T605] ipvlan2: entered promiscuous mode
[  764.887003][  T605] team0: Device ipvlan2 failed to register rx_handler
[  764.974346][  T610] netlink: 'syz.0.11057': attribute type 27 has an invalid length.
[  764.974368][  T610] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11057'.
[  765.661069][  T645] netlink: 'syz.5.11073': attribute type 21 has an invalid length.
[  765.661382][  T645] netlink: 'syz.5.11073': attribute type 3 has an invalid length.
[  765.661501][  T645] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11073'.
[  766.019613][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  766.383484][  T695] netlink: 'syz.3.11095': attribute type 2 has an invalid length.
[  766.383498][  T695] netlink: 'syz.3.11095': attribute type 1 has an invalid length.
[  766.383503][  T695] netlink: 'syz.3.11095': attribute type 8 has an invalid length.
[  766.383508][  T695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11095'.
[  767.002348][  T728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11107'.
[  769.632302][  T821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11147'.
[  769.632318][  T821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11147'.
[  769.632324][  T821] netlink: 'syz.5.11147': attribute type 6 has an invalid length.
[  769.713958][  T827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11150'.
[  769.752491][  T827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11150'.
[  769.778388][  T829] netlink: 'syz.5.11151': attribute type 10 has an invalid length.
[  770.083504][  T837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11152'.
[  770.102761][  T812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  770.102792][  T812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  770.102809][  T812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.120955][  T834] can: request_module (can-proto-5) failed.
[  770.190861][  T839] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11154'.
[  770.229243][  T841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11155'.
[  770.234275][  T812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  770.234303][  T812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  770.234320][  T812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.407668][  T812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  770.407695][  T812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  770.407712][  T812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.371844][  T812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.371873][  T812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  771.371888][  T812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.375859][  T859] netlink: 'syz.5.11164': attribute type 2 has an invalid length.
[  771.430202][  T861] syzkaller0: left promiscuous mode
[  771.430214][  T861] syzkaller0: left allmulticast mode
[  771.569104][T29096] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  771.569121][T29096] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  771.569130][T29096] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.569150][T29096] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  771.569159][T29096] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  771.569167][T29096] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.569178][T29096] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  771.569187][T29096] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  771.616910][T29096] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.616947][T29096] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  771.616962][T29096] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  771.616975][T29096] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.733778][  T881] netlink: 'syz.3.11172': attribute type 21 has an invalid length.
[  772.581045][  T919] xt_bpf: check failed: parse error
[  772.764477][  T940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11194'.
[  772.801529][ T5790] Bluetooth: hci2: Malformed HCI Event: 0x22
[  772.899209][  T952] syzkaller0: entered promiscuous mode
[  772.899221][  T952] syzkaller0: entered allmulticast mode
[  773.111384][  T969] net_ratelimit: 10 callbacks suppressed
[  773.111396][  T969] ip_tables: iptables: counters copy to user failed while replacing table
[  773.268303][  T977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11208'.
[  773.275977][  T977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11208'.
[  773.285637][  T977] netlink: 'syz.0.11208': attribute type 8 has an invalid length.
[  773.285655][  T977] sch_fq: defrate 0 ignored.
[  773.296409][  T977] openvswitch: netlink: IPv4 tunnel dst address is zero
[  773.735366][ T1001] siw: device registration error -23
[  774.238805][ T1017] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  774.538054][ T1025] netlink: 'syz.5.11226': attribute type 16 has an invalid length.
[  774.538066][ T1025] netlink: 'syz.5.11226': attribute type 17 has an invalid length.
[  774.545800][ T1025] sit0: left promiscuous mode
[  774.547387][ T1025] team0: left allmulticast mode
[  774.559407][ T1025] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check.
[  774.716245][ T1025] __nla_validate_parse: 1 callbacks suppressed
[  774.716314][ T1025] netlink: 508 bytes leftover after parsing attributes in process `syz.5.11226'.
[  774.843465][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11223'.
[  775.126787][ T1046] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11234'.
[  775.253567][ T1061] netlink: 'syz.3.11237': attribute type 1 has an invalid length.
[  775.323102][ T1061] ip6tnl1: entered promiscuous mode
[  775.323120][ T1061] ip6tnl1: entered allmulticast mode
[  775.378305][ T1068] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.11240'.
[  775.475456][ T1080] netlink: 'syz.0.11244': attribute type 16 has an invalid length.
[  775.622739][ T1096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11250'.
[  775.764063][ T1115] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11252'.
[  775.869446][ T1107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11252'.
[  775.973002][ T1120] Cannot find del_set index 3 as target
[  776.129850][ T1129] netlink: 'syz.0.11258': attribute type 46 has an invalid length.
[  776.129863][ T1129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11258'.
[  776.129870][ T1129] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11258'.
[  776.355186][ T1152] veth1_to_bond: entered promiscuous mode
[  776.355443][ T1152] veth1_to_bond: entered allmulticast mode
[  776.355828][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11268'.
[  776.377082][ T1152] veth1_to_bond (unregistering): left promiscuous mode
[  776.377105][ T1152] veth1_to_bond (unregistering): left allmulticast mode
[  776.763153][ T1182] sctp: [Deprecated]: syz.0.11280 (pid 1182) Use of int in max_burst socket option.
[  776.763153][ T1182] Use struct sctp_assoc_value instead
[  776.883786][ T1187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.885611][ T1190] vcan0: tx address claim with different name
[  776.943284][ T1193] veth0: entered promiscuous mode
[  776.946158][ T1192] veth0: left promiscuous mode
[  777.350418][ T1223] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  777.549511][ T1241] netlink: 'syz.3.11308': attribute type 2 has an invalid length.
[  778.394668][ T5790] Bluetooth: hci2: link tx timeout
[  778.394681][ T5790] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  778.481106][ T4992] Bluetooth: hci2: link tx timeout
[  778.481123][ T4992] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  778.511865][ T4992] Bluetooth: hci2: link tx timeout
[  778.511884][ T4992] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  778.515650][ T1315] netlink: 'syz.3.11332': attribute type 4 has an invalid length.
[  778.665171][ T1319] bond7: (slave ip6tnl3): The slave device specified does not support setting the MAC address
[  778.665570][ T1319] bond7: (slave ip6tnl3): Error -95 calling set_mac_address
[  778.710126][ T1326] netlink: 'syz.0.11333': attribute type 1 has an invalid length.
[  778.770063][ T4992] Bluetooth: hci2: link tx timeout
[  778.770081][ T4992] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  778.839139][ T4992] Bluetooth: hci2: link tx timeout
[  778.839155][ T4992] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  779.209296][ T4992] Bluetooth: hci2: link tx timeout
[  779.213193][ T4992] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  779.736134][ T1363] netlink: 'syz.3.11349': attribute type 1 has an invalid length.
[  779.862797][ T1373] __nla_validate_parse: 5 callbacks suppressed
[  779.862812][ T1373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11354'.
[  780.066239][ T1395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11360'.
[  780.076865][ T1396] netlink: 71 bytes leftover after parsing attributes in process `syz.5.11363'.
[  780.092824][ T1395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11360'.
[  780.425884][ T5790] Bluetooth: hci2: command 0x0406 tx timeout
[  781.051810][ T1420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11369'.
[  781.051830][ T1420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11369'.
[  781.053059][ T1420] syzkaller0: entered promiscuous mode
[  781.053073][ T1420] syzkaller0: entered allmulticast mode
[  781.807718][ T1465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  781.938131][ T1474] syzkaller0: entered promiscuous mode
[  781.938150][ T1474] syzkaller0: entered allmulticast mode
[  781.956115][ T1474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  781.957743][ T1473] tipc: Resetting bearer <eth:syzkaller0>
[  781.995133][ T1473] tipc: Disabling bearer <eth:syzkaller0>
[  782.008691][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  782.069167][ T1486] ip_tables: iptables: counters copy to user failed while replacing table
[  782.095974][ T1489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11389'.
[  782.095989][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11389'.
[  782.294432][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11396'.
[  782.483360][ T1529] netlink: 5408 bytes leftover after parsing attributes in process `syz.3.11403'.
[  782.483385][ T1529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.551635][ T1534] syzkaller1: entered promiscuous mode
[  782.551648][ T1534] syzkaller1: entered allmulticast mode
[  783.326056][ T1556] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  783.711526][ T1570] netlink: 'syz.5.11421': attribute type 41 has an invalid length.
[  783.711540][ T1570] netlink: 'syz.5.11421': attribute type 17 has an invalid length.
[  783.789145][ T1577] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  784.221257][ T1600] tmpfs: Bad value for 'uid'
[  784.221269][ T1600] tmpfs: Bad value for 'uid'
[  784.545572][ T1611] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  784.545572][ T1611] Please contact the netfilter-devel mailing list or update your nftables rules.
[  784.605785][ T1616] openvswitch: netlink: Duplicate key (type 6).
[  784.632628][ T1618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  785.124899][ T1648] netlink: 'syz.3.11457': attribute type 13 has an invalid length.
[  785.430629][ T1656] netlink: 'syz.3.11461': attribute type 1 has an invalid length.
[  786.010823][ T1685] IPv6: Can't replace route, no match found
[  786.127465][ T1683] netlink: 'syz.5.11474': attribute type 102 has an invalid length.
[  786.183986][ T1683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  786.190084][ T1683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  786.680498][ T1712] __nla_validate_parse: 9 callbacks suppressed
[  786.680516][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11487'.
[  786.796951][ T1715] netlink: 292 bytes leftover after parsing attributes in process `syz.3.11488'.
[  786.812249][ T1717] ip_tables: iptables: counters copy to user failed while replacing table
[  787.050077][ T4992] Bluetooth: hci2: command 0x0406 tx timeout
[  787.182763][ T1743] nbd3: detected capacity change from 0 to 63
[  787.190516][T17398] block nbd3: Receive control failed (result -32)
[  787.207888][  T191] block nbd3: Dead connection, failed to find a fallback
[  787.207904][  T191] block nbd3: shutting down sockets
[  787.207953][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  787.207994][  T191] Buffer I/O error on dev nbd3, logical block 0, async page read
[  787.213425][  T191] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  787.213451][  T191] Buffer I/O error on dev nbd3, logical block 1, async page read
[  787.213464][  T191] Buffer I/O error on dev nbd3, logical block 2, async page read
[  787.213474][  T191] Buffer I/O error on dev nbd3, logical block 3, async page read
[  787.216278][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.216294][  T191] Buffer I/O error on dev nbd3, logical block 0, async page read
[  787.216302][  T191] Buffer I/O error on dev nbd3, logical block 1, async page read
[  787.216308][  T191] Buffer I/O error on dev nbd3, logical block 2, async page read
[  787.216316][  T191] Buffer I/O error on dev nbd3, logical block 3, async page read
[  787.216385][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.216395][  T191] Buffer I/O error on dev nbd3, logical block 0, async page read
[  787.216402][  T191] Buffer I/O error on dev nbd3, logical block 1, async page read
[  787.216478][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.216616][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.218397][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.218582][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.218694][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.218724][ T1744] ldm_validate_partition_table(): Disk read failed.
[  787.218781][  T191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  787.218994][ T1744] Dev nbd3: unable to read RDB block 0
[  787.219354][ T1744]  nbd3: unable to read partition table
[  787.299130][ T1744] ldm_validate_partition_table(): Disk read failed.
[  787.299400][ T1744] Dev nbd3: unable to read RDB block 0
[  787.299796][ T1744]  nbd3: unable to read partition table
[  788.532487][ T1785] netlink: 'syz.5.11520': attribute type 5 has an invalid length.
[  788.581872][T32670] IPVS: starting estimator thread 0...
[  788.678593][ T1788] IPVS: using max 84 ests per chain, 201600 per kthread
[  789.617894][ T1803] block nbd0: reconnected socket
[  789.617934][ T1803] block nbd0: reconnected socket
[  789.622868][T17398] block nbd0: Receive control failed (result -32)
[  789.633926][T17398] block nbd0: Receive control failed (result -32)
[  789.817177][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11528'.
[  789.817208][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11528'.
[  790.928204][ T1819] ieee802154 phy0 wpan0: encryption failed: -22
[  793.414354][ T1839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  793.453781][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11540'.
[  793.679351][ T1864] syzkaller1: entered promiscuous mode
[  793.679364][ T1864] syzkaller1: entered allmulticast mode
[  793.754727][ T1868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11552'.
[  793.755522][ T1868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11552'.
[  793.798583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.007160][ T1880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11558'.
[  794.529036][ T1908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11571'.
[  794.668075][ T1922] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11577'.
[  794.692433][ T1924] netlink: 'syz.5.11578': attribute type 3 has an invalid length.
[  794.810588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.983372][ T1930] netlink: 'syz.5.11581': attribute type 29 has an invalid length.
[  794.984018][ T1930] netlink: 'syz.5.11581': attribute type 29 has an invalid length.
[  795.545780][ T1936] netlink: 'syz.3.11584': attribute type 29 has an invalid length.
[  795.551698][ T1936] netlink: 'syz.3.11584': attribute type 29 has an invalid length.
[  795.554489][ T1936] netlink: 'syz.3.11584': attribute type 29 has an invalid length.
[  795.848568][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.006041][ T1954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11589'.
[  796.175304][ T1956] syzkaller0: left promiscuous mode
[  796.176246][ T1956] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.184064][ T1956] 8021q: adding VLAN 0 to HW filter on device bond2
[  796.192312][T32672] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.192373][T32672] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.199720][T14483] ip6_tunnel:  xmit: Local address not yet configured!
[  796.325167][ T1968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11592'.
[  796.392050][ T1970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11595'.
[  796.411749][ T1972] syzkaller0: left allmulticast mode
[  796.652523][ T1982] netlink: 'syz.5.11601': attribute type 1 has an invalid length.
[  796.652536][ T1982] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11601'.
[  796.652572][ T1982] nbd: couldn't find a device at index 767
[  796.717776][ T1987] Bluetooth: hci0: load_link_keys: too big key_count value 5120
[  796.840344][T14483] ip6_tunnel:  xmit: Local address not yet configured!
[  796.994890][ T2010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  797.857212][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  797.860535][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  797.863397][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  797.869587][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  797.871665][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  797.879121][ T4992] 
[  797.884775][ T4992] ======================================================
[  797.887505][ T4992] WARNING: possible circular locking dependency detected
[  797.890261][ T4992] syzkaller #0 Not tainted
[  797.892102][ T4992] ------------------------------------------------------
[  797.894459][ T4992] kworker/u11:1/4992 is trying to acquire lock:
[  797.896394][ T4992] ffff8881012d4210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  797.900329][ T4992] 
[  797.900329][ T4992] but task is already holding lock:
[  797.903228][ T4992] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  797.906893][ T4992] 
[  797.906893][ T4992] which lock already depends on the new lock.
[  797.906893][ T4992] 
[  797.910895][ T4992] 
[  797.910895][ T4992] the existing dependency chain (in reverse order) is:
[  797.914378][ T4992] 
[  797.914378][ T4992] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  797.917497][ T4992]        down_write+0x96/0x200
[  797.919415][ T4992]        kernfs_add_one+0x41/0x6f0
[  797.921449][ T4992]        kernfs_create_dir_ns+0x1a1/0x230
[  797.923702][ T4992]        internal_create_group+0x440/0x1180
[  797.926044][ T4992]        cpuhp_invoke_callback+0x434/0x810
[  797.928285][ T4992]        cpuhp_issue_call+0x3f0/0x750
[  797.930177][ T4992]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  797.932382][ T4992]        __cpuhp_setup_state+0x3f/0x60
[  797.934110][ T4992]        do_one_initcall+0x250/0x870
[  797.935811][ T4992]        do_initcall_level+0x10a/0x1a0
[  797.937988][ T4992]        do_initcalls+0x59/0xa0
[  797.939963][ T4992]        kernel_init_freeable+0x29d/0x3e0
[  797.941994][ T4992]        kernel_init+0x22/0x1d0
[  797.943563][ T4992]        ret_from_fork+0x514/0xb70
[  797.945156][ T4992]        ret_from_fork_asm+0x1a/0x30
[  797.946808][ T4992] 
[  797.946808][ T4992] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  797.949252][ T4992] 
[  797.949252][ T4992] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  797.951736][ T4992]        cpus_read_lock+0x42/0x160
[  797.953535][ T4992]        static_key_slow_inc+0x12/0x30
[  797.955730][ T4992]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  797.958197][ T4992]        nbd_genl_foreach_sock+0x265/0x450
[  797.960108][ T4992]        nbd_genl_reconfigure+0xbbb/0x1040
[  797.962315][ T4992]        genl_family_rcv_msg_doit+0x233/0x340
[  797.964701][ T4992]        genl_rcv_msg+0x614/0x7a0
[  797.966677][ T4992]        netlink_rcv_skb+0x226/0x4a0
[  797.968390][ T4992]        genl_rcv+0x28/0x40
[  797.970155][ T4992]        netlink_unicast+0x7bd/0x940
[  797.972220][ T4992]        netlink_sendmsg+0x813/0xb40
[  797.974132][ T4992]        sock_sendmsg_nosec+0x13a/0x180
[  797.976325][ T4992]        ____sys_sendmsg+0x54e/0x850
[  797.978395][ T4992]        ___sys_sendmsg+0x2a5/0x360
[  797.980411][ T4992]        __x64_sys_sendmsg+0x1b1/0x290
[  797.982526][ T4992]        do_syscall_64+0x166/0x520
[  797.984523][ T4992]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.986720][ T4992] 
[  797.986720][ T4992] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  797.989352][ T4992]        __mutex_lock+0x19d/0x1550
[  797.991361][ T4992]        nbd_queue_rq+0x373/0xff0
[  797.993230][ T4992]        blk_mq_dispatch_rq_list+0x499/0x1990
[  797.995435][ T4992]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  797.998097][ T4992]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  798.000540][ T4992]        blk_mq_run_work_fn+0x16c/0x300
[  798.002515][ T4992]        process_scheduled_works+0xc3d/0x1630
[  798.004736][ T4992]        worker_thread+0xa47/0xfb0
[  798.006349][ T4992]        kthread+0x38b/0x480
[  798.007907][ T4992]        ret_from_fork+0x514/0xb70
[  798.009795][ T4992]        ret_from_fork_asm+0x1a/0x30
[  798.011492][ T4992] 
[  798.011492][ T4992] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  798.013762][ T4992]        __mutex_lock+0x19d/0x1550
[  798.015371][ T4992]        nbd_queue_rq+0xc1/0xff0
[  798.016963][ T4992]        blk_mq_dispatch_rq_list+0x499/0x1990
[  798.018866][ T4992]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  798.020981][ T4992]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  798.023127][ T4992]        blk_mq_run_work_fn+0x16c/0x300
[  798.024870][ T4992]        process_scheduled_works+0xc3d/0x1630
[  798.026801][ T4992]        worker_thread+0xa47/0xfb0
[  798.028429][ T4992]        kthread+0x38b/0x480
[  798.029930][ T4992]        ret_from_fork+0x514/0xb70
[  798.031602][ T4992]        ret_from_fork_asm+0x1a/0x30
[  798.033723][ T4992] 
[  798.033723][ T4992] -> #4 (set->srcu){.+.+}-{0:0}:
[  798.036152][ T4992]        __synchronize_srcu+0xc9/0x2f0
[  798.038322][ T4992]        elevator_switch+0x1e8/0x7b0
[  798.040374][ T4992]        elevator_change+0x2fa/0x480
[  798.042434][ T4992]        elevator_set_default+0x375/0x440
[  798.044508][ T4992]        blk_register_queue+0x3f3/0x4e0
[  798.046715][ T4992]        __add_disk+0x6b8/0xdb0
[  798.048408][ T4992]        add_disk_fwnode+0x100/0x3a0
[  798.050251][ T4992]        nbd_dev_add+0x733/0xb60
[  798.051891][ T4992]        nbd_init+0x168/0x1f0
[  798.053424][ T4992]        do_one_initcall+0x250/0x870
[  798.055148][ T4992]        do_initcall_level+0x10a/0x1a0
[  798.056854][ T4992]        do_initcalls+0x59/0xa0
[  798.058480][ T4992]        kernel_init_freeable+0x29d/0x3e0
[  798.060267][ T4992]        kernel_init+0x22/0x1d0
[  798.061922][ T4992]        ret_from_fork+0x514/0xb70
[  798.063534][ T4992]        ret_from_fork_asm+0x1a/0x30
[  798.065630][ T4992] 
[  798.065630][ T4992] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  798.068266][ T4992]        __mutex_lock+0x19d/0x1550
[  798.069864][ T4992]        elevator_change+0x1af/0x480
[  798.071532][ T4992]        elevator_set_none+0xb5/0x140
[  798.073268][ T4992]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  798.075622][ T4992]        nbd_start_device+0x189/0xb30
[  798.077740][ T4992]        nbd_genl_connect+0x167d/0x1cd0
[  798.079850][ T4992]        genl_family_rcv_msg_doit+0x233/0x340
[  798.082192][ T4992]        genl_rcv_msg+0x614/0x7a0
[  798.084178][ T4992]        netlink_rcv_skb+0x226/0x4a0
[  798.086253][ T4992]        genl_rcv+0x28/0x40
[  798.087877][ T4992]        netlink_unicast+0x7bd/0x940
[  798.089723][ T4992]        netlink_sendmsg+0x813/0xb40
[  798.091391][ T4992]        sock_sendmsg_nosec+0x13a/0x180
[  798.093148][ T4992]        ____sys_sendmsg+0x54e/0x850
[  798.094830][ T4992]        ___sys_sendmsg+0x2a5/0x360
[  798.096487][ T4992]        __x64_sys_sendmsg+0x1b1/0x290
[  798.098482][ T4992]        do_syscall_64+0x166/0x520
[  798.100509][ T4992]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.103019][ T4992] 
[  798.103019][ T4992] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  798.106372][ T4992]        blk_alloc_queue+0x544/0x690
[  798.108449][ T4992]        __blk_mq_alloc_disk+0x194/0x390
[  798.110672][ T4992]        nbd_dev_add+0x494/0xb60
[  798.112624][ T4992]        nbd_init+0x168/0x1f0
[  798.114399][ T4992]        do_one_initcall+0x250/0x870
[  798.116101][ T4992]        do_initcall_level+0x10a/0x1a0
[  798.117865][ T4992]        do_initcalls+0x59/0xa0
[  798.119667][ T4992]        kernel_init_freeable+0x29d/0x3e0
[  798.121783][ T4992]        kernel_init+0x22/0x1d0
[  798.123708][ T4992]        ret_from_fork+0x514/0xb70
[  798.125728][ T4992]        ret_from_fork_asm+0x1a/0x30
[  798.127808][ T4992] 
[  798.127808][ T4992] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  798.130618][ T4992]        fs_reclaim_acquire+0x71/0x100
[  798.132782][ T4992]        kmem_cache_alloc_noprof+0x5f/0x600
[  798.134999][ T4992]        __kernfs_iattrs+0xdd/0x380
[  798.137065][ T4992]        kernfs_iop_setattr+0xe6/0x3f0
[  798.139320][ T4992]        notify_change+0xbba/0xea0
[  798.141196][ T4992]        do_truncate+0x1c2/0x250
[  798.142894][ T4992]        path_openat+0x15b5/0x1d60
[  798.144447][ T4992]        do_file_open+0x23e/0x4a0
[  798.146461][ T4992]        do_sys_openat2+0x115/0x200
[  798.148402][ T4992]        __x64_sys_openat+0x138/0x170
[  798.150507][ T4992]        do_syscall_64+0x166/0x520
[  798.152316][ T4992]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.154805][ T4992] 
[  798.154805][ T4992] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  798.158013][ T4992]        __lock_acquire+0x164c/0x2de0
[  798.160144][ T4992]        lock_acquire+0x115/0x350
[  798.162139][ T4992]        down_write+0x96/0x200
[  798.164042][ T4992]        kernfs_link_sibling+0x4c7/0x5a0
[  798.166266][ T4992]        kernfs_add_one+0x2db/0x6f0
[  798.168107][ T4992]        kernfs_create_dir_ns+0x1a1/0x230
[  798.170130][ T4992]        sysfs_create_dir_ns+0x12f/0x2a0
[  798.171820][ T4992]        kobject_add_internal+0x622/0xcd0
[  798.173898][ T4992]        kobject_add+0x163/0x240
[  798.175800][ T4992]        device_add+0x3fa/0xb80
[  798.177569][ T4992]        hci_conn_add_sysfs+0xd5/0x210
[  798.179332][ T4992]        hci_conn_complete_evt+0x8a8/0x1350
[  798.181221][ T4992]        hci_event_packet+0x6cd/0xf10
[  798.182956][ T4992]        hci_rx_work+0x3ee/0x1020
[  798.184598][ T4992]        process_scheduled_works+0xc3d/0x1630
[  798.186526][ T4992]        worker_thread+0xa47/0xfb0
[  798.188354][ T4992]        kthread+0x38b/0x480
[  798.190089][ T4992]        ret_from_fork+0x514/0xb70
[  798.191941][ T4992]        ret_from_fork_asm+0x1a/0x30
[  798.193906][ T4992] 
[  798.193906][ T4992] other info that might help us debug this:
[  798.193906][ T4992] 
[  798.197305][ T4992] Chain exists of:
[  798.197305][ T4992]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  798.197305][ T4992] 
[  798.202516][ T4992]  Possible unsafe locking scenario:
[  798.202516][ T4992] 
[  798.205058][ T4992]        CPU0                    CPU1
[  798.206963][ T4992]        ----                    ----
[  798.208815][ T4992]   lock(&root->kernfs_rwsem);
[  798.210626][ T4992]                                lock(cpuhp_state_mutex);
[  798.213534][ T4992]                                lock(&root->kernfs_rwsem);
[  798.216340][ T4992]   lock(&root->kernfs_iattr_rwsem);
[  798.218442][ T4992] 
[  798.218442][ T4992]  *** DEADLOCK ***
[  798.218442][ T4992] 
[  798.221981][ T4992] locks held by kworker/u11:1/4992: 4, last CPU#1:
[  798.224106][ T4992]  #0: ffff8881067e1140 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  798.227657][ T4992]  #1: ffffc90008d6fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  798.231364][ T4992]  #2: ffff88811851c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350
[  798.234362][ T4992]  #3: ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  798.237638][ T4992] 
[  798.237638][ T4992] stack backtrace:
[  798.239577][ T4992] CPU: 1 UID: 0 PID: 4992 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  798.242783][ T4992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  798.246357][ T4992] Workqueue: hci3 hci_rx_work
[  798.247882][ T4992] Call Trace:
[  798.248942][ T4992]  <TASK>
[  798.249915][ T4992]  dump_stack_lvl+0xe8/0x150
[  798.251376][ T4992]  print_circular_bug+0x2e2/0x300
[  798.252993][ T4992]  check_noncircular+0x12f/0x150
[  798.254579][ T4992]  __lock_acquire+0x164c/0x2de0
[  798.256103][ T4992]  ? __lock_acquire+0x747/0x2de0
[  798.257743][ T4992]  lock_acquire+0x115/0x350
[  798.259181][ T4992]  ? kernfs_link_sibling+0x4c7/0x5a0
[  798.260845][ T4992]  down_write+0x96/0x200
[  798.262177][ T4992]  ? kernfs_link_sibling+0x4c7/0x5a0
[  798.263875][ T4992]  ? __pfx_down_write+0x10/0x10
[  798.265403][ T4992]  ? kernfs_root+0x1c/0x230
[  798.266892][ T4992]  ? kernfs_root+0x1c/0x230
[  798.268325][ T4992]  ? kernfs_root+0x1c/0x230
[  798.269966][ T4992]  ? kernfs_root+0x1ea/0x230
[  798.271867][ T4992]  kernfs_link_sibling+0x4c7/0x5a0
[  798.274002][ T4992]  kernfs_add_one+0x2db/0x6f0
[  798.275976][ T4992]  kernfs_create_dir_ns+0x1a1/0x230
[  798.278118][ T4992]  sysfs_create_dir_ns+0x12f/0x2a0
[  798.280206][ T4992]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  798.282534][ T4992]  ? do_raw_spin_unlock+0x4d/0x200
[  798.284680][ T4992]  kobject_add_internal+0x622/0xcd0
[  798.286775][ T4992]  kobject_add+0x163/0x240
[  798.288542][ T4992]  ? __pfx_kobject_add+0x10/0x10
[  798.290571][ T4992]  ? get_device_parent+0x366/0x3a0
[  798.292724][ T4992]  device_add+0x3fa/0xb80
[  798.294160][ T4992]  hci_conn_add_sysfs+0xd5/0x210
[  798.295766][ T4992]  hci_conn_complete_evt+0x8a8/0x1350
[  798.297694][ T4992]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  798.300176][ T4992]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  798.302439][ T4992]  ? skb_pull_data+0xf0/0x200
[  798.304315][ T4992]  hci_event_packet+0x6cd/0xf10
[  798.306255][ T4992]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  798.308630][ T4992]  ? __pfx_hci_event_packet+0x10/0x10
[  798.310767][ T4992]  ? audit_put_chunk+0x120/0x2d0
[  798.312917][ T4992]  ? hci_send_to_monitor+0xe2/0x590
[  798.315108][ T4992]  hci_rx_work+0x3ee/0x1020
[  798.317008][ T4992]  ? process_scheduled_works+0x97a/0x1630
[  798.319347][ T4992]  process_scheduled_works+0xc3d/0x1630
[  798.321640][ T4992]  ? __pfx_process_scheduled_works+0x10/0x10
[  798.324131][ T4992]  ? assign_work+0x3cf/0x5d0
[  798.326058][ T4992]  worker_thread+0xa47/0xfb0
[  798.327933][ T4992]  kthread+0x38b/0x480
[  798.329629][ T4992]  ? __pfx_worker_thread+0x10/0x10
[  798.331368][ T4992]  ? __pfx_kthread+0x10/0x10
[  798.332876][ T4992]  ret_from_fork+0x514/0xb70
[  798.334318][ T4992]  ? __pfx_ret_from_fork+0x10/0x10
[  798.335918][ T4992]  ? __switch_to+0xc89/0x1420
[  798.337515][ T4992]  ? __pfx_kthread+0x10/0x10
[  798.338989][ T4992]  ret_from_fork_asm+0x1a/0x30
[  798.340508][ T4992]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  798.462096][ T5694] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.462113][ T5694] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  798.462122][ T5694] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.640607][ T9298] syz_tun (unregistering): left allmulticast mode
[  798.712242][ T5694] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.712267][ T5694] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  798.712282][ T5694] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.804669][ T5694] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.804695][ T5694] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  798.804709][ T5694] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.841173][ T5694] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.841197][ T5694] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  798.841210][ T5694] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.911711][ T5694] bond6: left allmulticast mode
[  798.911746][ T5694] bond6: left promiscuous mode
[  798.911824][ T5694] bridge0: port 1(bond6) entered disabled state
[  799.046886][ T5694] bond2 (unregistering): (slave bridge1): Releasing active interface
[  799.046901][ T5694] veth5: entered promiscuous mode
[  799.080573][  T913] smbdirect: ib_dev[syz1] removed
[  799.083497][ T5694] bond0 (unregistering): Released all slaves
[  799.084812][ T5694] bond1 (unregistering): Released all slaves
[  799.087611][ T5694] bond2 (unregistering): (slave veth5): Releasing active interface
[  799.087625][ T5694] veth5: left promiscuous mode
[  799.088667][ T5694] bond2 (unregistering): Released all slaves
[  799.090746][ T5694] bond3 (unregistering): Released all slaves
[  799.092826][ T5694] bond4 (unregistering): Released all slaves
[  799.095050][ T5694] bond5 (unregistering): Released all slaves
[  799.097310][ T5694] bond6 (unregistering): Released all slaves
[  799.099679][ T5694] bond7 (unregistering): Released all slaves
[  799.163536][ T5694] : left promiscuous mode
[  799.200114][ T5694] tipc: Left network mode
[  799.306234][ T5694] team0: Port device wlan0 removed
[  799.432124][ T5694] hsr_slave_0: left promiscuous mode
[  799.432362][ T5694] hsr_slave_1: left promiscuous mode
[  799.434371][ T5694] veth1_macvtap: left promiscuous mode
[  799.576095][ T5694] team0 (unregistering): Port device dummy0 removed
[  799.623371][ T5338] 8021q: adding VLAN 0 to HW filter on device eth13
[  799.739379][ T5694] IPVS: stop unused estimator thread 0...
[  799.748541][ T5338] 8021q: adding VLAN 0 to HW filter on device eth15
[  799.830337][ T5338] 8021q: adding VLAN 0 to HW filter on device eth14
[  799.898825][ T5338] 8021q: adding VLAN 0 to HW filter on device eth16
