last executing test programs:

4.422337833s ago: executing program 4 (id=3054):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) (async)
pipe(&(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) (async)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40004) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (rerun: 64)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000009c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e00531863f3d5cfe6cb55b5bb9fa6935849e6098ed97e1d5e110c90257cf7c7cb51726b360fbb37b4f70cf3f2fdf0b4d209d8003c182646708f0e05ed0c4ab4fec3b323d097d5cc5f4373608f2da9adb928ec47fde2f3e0562d21ff4a22176ee3989f1ea30fd31bcc005d0786b055b79933bb4071d1c783ee026aeeaa4a6be98324dc6b730b7618a2ecb969f8ed24fb995216ad93bebdbfeba52076c167ba0688ace7d13386d41afa76ce051c2fda2a2d5a80f722a84229e87ec42e3", 0xe0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc4}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e022000"], 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$x25(0x3, 0x5, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
recvmsg$unix(r6, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async, rerun: 64)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000180)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.348224598s ago: executing program 4 (id=3055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)={0x0, 0x1c, '\x00', [@enc_lim, @pad1, @generic={0x5, 0xdc, "5bcf9bb759133f6b68206f1b44d1c53288f7b5f0bff4b6b2f532aed655556cbae192b9a1d4c18f54216e9f1ab842802a076d2d75d415f90563f38cf808dc98bb6f2499e16d69c0bbef46e8d7141f391b07c6b5f908cce5910b04f998715bd3e98b3ebbb72ce400e489d494ca8fd18faf1e6f2dfb38aadc07df464a57534e1bda5aabd525e5c0a9a4cc1ed95154ceb35cc81afcc6fceaf845c7fdd3243b10ebfb3c76a9e6f723a53afde9b597678c550125be58218fe5716cc4c3c3fb5a518fa811a39b4bca273383a82f4b55f9b0d5957641c85fb64fcdecb65cb6e1"}, @pad1]}, 0xf0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0)

4.241864556s ago: executing program 4 (id=3058):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

3.361992353s ago: executing program 4 (id=3071):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r1=>0x0)
connect$nfc_raw(r0, &(0x7f0000000080)={0x27, r1, 0x0, 0x5}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c", "85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"}}}}}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, <r5=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
connect$nfc_raw(r0, &(0x7f0000000080)={0x27, r1, 0x0, 0x5}, 0x10) (async)
socket(0x10, 0x80002, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c", "85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"}}}}}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) (async)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r5}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async)

3.312924031s ago: executing program 4 (id=3072):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030c0000000000000000bd00000000000600b1cd6b0711f1c495591eaf82c7bf31fd803260a8e84456bf1e47930a234d37a7d1e5c7a683750c03798183544086fbf4d7a16b9afd42862d5e567a5ee82dfa8bb7e6ecd87827fb34ee450e9135c17ad02514ea013652b1e58e9fbda480ea53f370f37930bd207ec71d0fa3495862a5127a852982a13516eb4b91e7761afca2a620348b929bce23340c0e2a0044000000030a01020000000000000000020000000900030073797a31000000001cff030073797a31000000000c00024000160000000000050900010073797a3100000000140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0x1}}}, 0x24}}, 0x0) (async, rerun: 64)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) (async, rerun: 64)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000063295d8d8e2b7996f29bd2f32000000000000000a38000000030a03000000400000000000020000020900030073797a0a32000000000c00048008000140000000020900010073797a31000000001400000011000100"/109], 0x60}}, 0x4000)

3.253416069s ago: executing program 4 (id=3073):
socket(0x1e, 0x4, 0x0) (async)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0xf, 0x4, 0xe1e0)
listen(r1, 0x8c7)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/25, 0x19}], 0x1}, 0x4003)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00'})
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1a270685f88fd617"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffead}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1a270685f88fd617"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffead}, 0x94)

1.563020206s ago: executing program 0 (id=3103):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0)

1.562260698s ago: executing program 0 (id=3105):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x83cd5ee2fa2aa4c2}, 0x8010)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x3, 0x6, 0x2, 0x1, 0x5, 0x1}, 0xc)
listen(r0, 0x0)
accept$inet6(r0, 0x0, 0x0)

1.450723839s ago: executing program 0 (id=3107):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x7d, 0xa, 0x0, 0x0, @uid}]}, 0xe6}}, 0x84) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc}, 0x50) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r3=>0x0, 0x29, 0x3, 0x2, 0x4, 0xa, @mcast1, @private0, 0x8, 0x10, 0x2, 0x6}})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r4, 0xc08ba000) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0)

1.385114068s ago: executing program 2 (id=3109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) (async)
r1 = socket(0x1e, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000005040), &(0x7f0000005080)=0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
close(0x3) (async)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r2, 0x0, 0x0, 0x0) (async)
recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000008850) (async)
recvmmsg$unix(r1, &(0x7f0000004e40)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000500)=""/58, 0x3a}, {&(0x7f0000000640)=""/170, 0xaa}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/69, 0x45}, {&(0x7f0000000ac0)=""/47, 0x2f}, {&(0x7f0000000b40)=""/186, 0xba}, {&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f0000000cc0)=""/200, 0xc8}, {&(0x7f0000000dc0)=""/59, 0x3b}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x9, &(0x7f0000001ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001f40)=""/31, 0x1f}, {&(0x7f0000001f80)=""/229, 0xe5}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000004100)=""/195, 0xc3}, {&(0x7f0000004200)=""/172, 0xac}, {&(0x7f00000042c0)=""/133, 0x85}, {&(0x7f0000003080)=""/120, 0x78}], 0x7, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000044c0), 0x6e, &(0x7f0000004580)=[{&(0x7f0000004540)=""/15, 0xf}], 0x1, &(0x7f00000045c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000004700)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004780)=""/47, 0x2f}, {&(0x7f00000047c0)=""/109, 0x6d}, {&(0x7f0000004840)=""/82, 0x52}], 0x3, &(0x7f0000004900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000004d40)=[{&(0x7f00000049c0)=""/104, 0x68}, {&(0x7f0000004a40)=""/5, 0x5}, {&(0x7f0000004a80)=""/41, 0x29}, {&(0x7f0000004ac0)=""/228, 0xe4}, {&(0x7f0000004bc0)=""/199, 0xc7}, {&(0x7f0000004cc0)=""/99, 0x63}], 0x6, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x68}}], 0x7, 0x2, &(0x7f0000005000)={0x0, 0x989680})
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000050c0)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000051c0)={'syztnl1\x00', &(0x7f0000005100)={'ip_vti0\x00', r6, 0x80, 0x700, 0x3, 0xfff, {{0x20, 0x4, 0x2, 0x2, 0x80, 0x66, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010101, {[@end, @noop, @timestamp_prespec={0x44, 0x2c, 0xd1, 0x3, 0xe, [{@loopback, 0xa2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x4}, {@loopback, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @generic={0x82, 0x10, "068c1edd16878b3ab7de2b32c845"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "821022506226c21d9970c1df08"}, {0x6, 0xa, "4f2e1a1fc9df3b14"}, {0x6, 0x7, "513fa4ac3b"}, {0x1, 0x4, "e356"}]}]}}}}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000)="5e1d82726d9ced8dc48635a207b256f7f99b1b8ef39a57a2cb12492f97c6b496cbddfec11d8646ca5cb8f538a50effaf6fd1033137d1f6953081d7e66192b4cc2d205b4d5df0c99e5d639edeb634be23c65e1b3a92433e375d0b876f54860f978f31fe689f1677d056c94fa4358b821edaf072862b2fb4f622c261169457ef35eb3b72ee03fff2466ba0f1db8efb1f", &(0x7f00000000c0)=""/111}, 0x20)

1.307042387s ago: executing program 0 (id=3111):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c00a7aa00000000000000000a0006000000074000000001"], 0x44}}, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0)
write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x8}, @val={0x2, 0x0, 0x7, 0x1, 0x1529}, @mpls={[{0x80}, {0xfff00, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7}, {0x5}, {0x1}], @ipv4=@generic={{0x2b, 0x4, 0x1, 0x0, 0xc9, 0x64, 0x0, 0x8, 0xff, 0x0, @private=0xa010100, @private=0xa010101, {[@generic={0x94, 0xa, "e3c3d31fafbc2e4a"}, @end, @rr={0x7, 0x1b, 0x19, [@loopback, @loopback, @multicast1, @multicast1, @empty, @loopback]}, @noop, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x898b}]}, @timestamp_addr={0x44, 0x3c, 0xcd, 0x1, 0x8, [{@broadcast, 0x4}, {@local, 0x8}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x400}, {@rand_addr=0x64010101, 0x2}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010102, 0x1}]}, @rr={0x7, 0x27, 0xc8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010100, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @local]}, @noop, @noop]}}, "dc3217ab8c9973631eadc781758b9a2d23bb685c454f2423ff17a2fe2d"}}}, 0xef)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.197818171s ago: executing program 0 (id=3113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70080000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)

609.150184ms ago: executing program 3 (id=3117):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r1, &(0x7f0000000240)=""/3, 0x3, 0x4141, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884)

608.86806ms ago: executing program 1 (id=3118):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

570.703147ms ago: executing program 1 (id=3119):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0)

567.971308ms ago: executing program 3 (id=3120):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0)=0x4008007a, 0x4)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x2, 0x4) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0)=0x4008007a, 0x4) (async)
socket(0x40000000015, 0x5, 0x0) (async)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) (async)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) (async)

548.674104ms ago: executing program 0 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r2, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

434.993142ms ago: executing program 2 (id=3122):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="230000080000000000000000000000006110ac0000ad0200730000007ea03f4d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

433.99355ms ago: executing program 3 (id=3123):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000440)={<r8=>0x0, 0x11}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r8, 0x8, 0x9, 0x100}, 0x10) (async)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001a80)={0x29c, r11, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d543778aa85ae74a8f46a0c743e971d6885ed78c48e192f6360a70f8"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x12400000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa3, 0x3, "d1d390ae50e078d9a6d5c0e65678919aa486d225cc914488802e257ce390be11739a3668e394d3a6393888110c1f8a840ca0ab6a7ea148bebb464f9f06a34e3d8e8d4ad222e199fa8eaaa811754df3745a1d95722af584dade52650c9c52666b0e7953d45a8ed248e914086a6b3c28351f5e73449807de1658b144ce56fc8f186bb3b3f5e99813897bac13e3ab2859420c394943fb1d499b09a9a07b50ad2a"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "456033f9ac016c2dd1705d53c42e64366660c62c46bec10bc985363e3b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc87}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "9b8413e8799a807c1c269c25a11189d63b91a76580d3094da58d81e05254"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "74e1691a79063cc52f55ec20aee93621bc7f113adcc07d485e38b546ec8012f66754"}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async)
recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/164, 0xa4}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}, 0x21)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

415.778644ms ago: executing program 2 (id=3124):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

395.619227ms ago: executing program 1 (id=3125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, '\x00\a\x00', 0x0, 0x2b, 0x0, @private1, @mcast2}}}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x10001, 0x4, 0x101}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r4, 0x104, 0x2, 0x0, &(0x7f0000000380)) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
getpeername(r5, 0x0, &(0x7f0000000000)) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

307.844972ms ago: executing program 1 (id=3126):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000008000)=@newtfilter={0x24, 0x2c, 0x40c, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x5, 0x3}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

307.085327ms ago: executing program 3 (id=3127):
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x140f, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x4080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044090)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000003c0)="05765818d6340cbd8fc64b9569fb603072a747a6837397eddd0e0918c06d4cc1165d3480dcc3f5d3354939ec", &(0x7f0000000400)=""/10, 0x4}, 0x20)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={<r4=>0x0, @broadcast, @empty}, &(0x7f00000004c0)=0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd9e3, 0x63}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x854)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={<r7=>r5})
ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000680)={r3, 0x1, 0x6, "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"})
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_ifreq(r7, 0x8929, &(0x7f0000001700)={'wlan0\x00', @ifru_data=&(0x7f00000016c0)="6c1d702887e1c500c07bcd3b3cdabc7c5da13ef716fad9a5cdb77334d15cdf46"})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000001740)={'erspan0\x00', {0x2, 0x0, @remote}})
r9 = accept4(r8, &(0x7f0000001780)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001800)=0x80, 0x80800)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000001840)={0x40, 0x2, 0x2}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=@ipv6_newaddr={0x20, 0x14, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0xfd, r4}, [@IFA_FLAGS={0x8, 0x8, 0x226}]}, 0x20}, 0x1, 0x0, 0x0, 0x44810}, 0x94)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x58, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xdb1, 0x36}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x800)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x50080, 0x0)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x0, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000001c00)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x1, 0x5, 0x10, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001cc0)=[r2, r2, r2, r2, r2, 0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000001d00)=[{0x3, 0x5, 0x4, 0x5}, {0x3, 0x4, 0xc, 0x1}, {0x1, 0x1, 0x5, 0xa}, {0x2, 0x1, 0x0, 0xc}], 0x10, 0x4}, 0x94)
ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f0000001e00)=r12)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002140)={&(0x7f0000001e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x13c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x406}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x29c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r11, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)

284.48739ms ago: executing program 2 (id=3128):
unshare(0x20000600)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0)
read(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x2b)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a3200"], 0x78}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x49, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

234.417004ms ago: executing program 3 (id=3129):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.kill\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001})

154.744508ms ago: executing program 3 (id=3130):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000b80)="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", &(0x7f0000000200)=""/20, &(0x7f0000000340)="bd4a40437891032324d7cb31a50d7b4fbd8abeffe0c893df608a878bdd6c8fc32e9c4ba7428729107f64453fe2adcde77953363688fe5b08ae68b1429cec0bbb0b3b51ee287b09cfa63172c2f04ae2410daa901bc60092be3cf09e772eb5853f031eb28cdb560b6ad9907b96c42e3325ab3ffa497a4056697f2c9089fb81a64c47d88cfd48661c2e57480e10ec8364adfd1dedffa3b87746af66caed39484e4361393fb38b", &(0x7f0000000400)="672590a1d0cc62", 0xd, 0x1, 0x4}, 0x38)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) (async)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) (async)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x1b) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r6)

154.122129ms ago: executing program 1 (id=3131):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x12, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0x8}}}, 0x24}}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140300008e09000000000000a0000000bf090000000000005509010000030040950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000000000000009500000000000000f771baccf7117b9fa1f6d83a4dcc0953df00b7f9f6df8f54664ca0ad073b11482428b4ab4b6ac892210f8745a46b4120f45c297b7dc853811ecb493bb3bfc65531a0d62cd98ddfdf78881d48451ba73107317fd002a35bb20b22830bd3d13103feee1808fa6bdcb98d77ec205af0a10b29cc81062e24319fae25822fc81669daea85ab542f81e8a7302aef2dacd4fa5831b02fe216ebd09fea0d54f9a1d90cd5817b27d28fdc8689a0c9c33b74155cbb69b913b195f90ef020e102"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

152.182274ms ago: executing program 2 (id=3132):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000037776c36568c1233801500010300000000000000000c31af85ff000100cbd7a7ee8a6c6853a906ee5edd0e56b32df1b45d5971377e64ec26531686ec4e57a5e98f5b49284d7abf353d617b2b3eacfd47043e207ad1e3e27de54d93", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

66.564239ms ago: executing program 1 (id=3133):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYBLOB="31cc658749e9c269552eed60ac8a157801f0ea71b68b1a87d468262908608aae2241259b0661888ceaa86f185f54fcca8272", @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

0s ago: executing program 2 (id=3134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3f04d}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440))

kernel console output (not intermixed with test programs):

vsim0: entered promiscuous mode
[  224.268017][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  224.287495][ T8875] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  224.473338][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'.
[  225.232044][ T8903] openvswitch: netlink: Message has 24 unknown bytes.
[  225.238941][ T8903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.313308][ T8875] vlan2: entered allmulticast mode
[  225.318480][ T8875] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  225.555604][ T8926] netlink: 68 bytes leftover after parsing attributes in process `syz.0.873'.
[  225.591073][ T8926] netlink: 'syz.0.873': attribute type 11 has an invalid length.
[  225.652982][ T8933] syzkaller1: entered promiscuous mode
[  225.678579][ T8925] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000
[  225.686033][ T8933] syzkaller1: entered allmulticast mode
[  225.792897][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'.
[  225.830858][ T8939] ip6_vti0: entered promiscuous mode
[  225.852901][ T8939] ip6_vti0: entered allmulticast mode
[  225.862159][ T8945] netlink: 'syz.3.881': attribute type 1 has an invalid length.
[  225.925649][ T8948] gretap1: entered promiscuous mode
[  225.934121][ T8948] bond3: (slave gretap1): making interface the new active one
[  225.972901][ T8948] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  226.014059][ T8945] macvlan3: entered promiscuous mode
[  226.019678][ T8945] macvlan3: entered allmulticast mode
[  226.026629][ T8945] bond3: entered promiscuous mode
[  226.034612][ T8945] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  226.057529][ T8945] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  226.076843][ T8945] bond3: left promiscuous mode
[  226.357970][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'.
[  226.498781][ T8980] netlink: 256 bytes leftover after parsing attributes in process `syz.1.893'.
[  226.509306][ T8980] unsupported nlmsg_type 40
[  227.356130][ T9023] hsr_slave_1 (unregistering): left promiscuous mode
[  227.398837][ T9030] Bluetooth: MGMT ver 1.23
[  227.508701][ T9037] netlink: 'syz.2.907': attribute type 7 has an invalid length.
[  227.536212][ T9037] netlink: 'syz.2.907': attribute type 8 has an invalid length.
[  227.573611][ T9042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.862480][ T9080] batadv_slave_0: entered promiscuous mode
[  227.881567][ T9079] batadv_slave_0: left promiscuous mode
[  227.889151][ T9082] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  227.909607][ T9086] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  229.563678][ T9109] __nla_validate_parse: 10 callbacks suppressed
[  229.563700][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.925'.
[  229.731813][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'.
[  229.864241][ T9133] pim6reg1: entered promiscuous mode
[  229.869717][ T9133] pim6reg1: entered allmulticast mode
[  229.945085][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'.
[  229.989411][ T9133] macvlan3: entered allmulticast mode
[  229.996138][ T9146] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  230.043598][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  230.065413][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  230.079967][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.944'.
[  230.140266][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  230.175590][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'.
[  230.233691][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'.
[  230.960144][ T9167] netlink: 36 bytes leftover after parsing attributes in process `syz.4.952'.
[  231.089605][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'.
[  231.249319][ T9196] netlink: 'syz.1.957': attribute type 29 has an invalid length.
[  231.477246][ T9220] bridge0: port 3(batadv0) entered disabled state
[  231.494128][ T9220] bridge_slave_1: left allmulticast mode
[  231.523142][ T9220] bridge_slave_1: left promiscuous mode
[  231.529317][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.564788][ T9220] bridge_slave_0: left allmulticast mode
[  231.571962][ T9226] netlink: 'syz.4.972': attribute type 10 has an invalid length.
[  231.580496][ T9220] bridge_slave_0: left promiscuous mode
[  231.586359][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.645071][ T9226] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  231.654597][ T9237] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  231.720306][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.727749][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.741822][ T9248] openvswitch: netlink: IPv4 tun info is not correct
[  231.894057][ T9256] netlink: 'syz.1.980': attribute type 6 has an invalid length.
[  232.259344][ T9297] netlink: 'syz.1.991': attribute type 3 has an invalid length.
[  232.355236][ T9306] geneve2: entered promiscuous mode
[  232.367653][ T9306] geneve2: entered allmulticast mode
[  232.394156][ T7605] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  232.416837][ T7605] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  232.447157][ T7605] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  232.467443][ T7605] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  232.511349][ T9320] bridge_slave_0: entered allmulticast mode
[  232.694318][ T9335] netlink: 'syz.1.1001': attribute type 4 has an invalid length.
[  232.786427][ T9348] netlink: 'syz.1.1007': attribute type 7 has an invalid length.
[  232.795479][ T9348] netlink: 'syz.1.1007': attribute type 8 has an invalid length.
[  232.907944][ T9356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.942758][ T9351] syz.2.1008 (9351) used greatest stack depth: 17992 bytes left
[  233.051563][ T9367] chnl_net:caif_netlink_parms(): no params data found
[  233.088897][ T9374] netlink: 'syz.4.1015': attribute type 5 has an invalid length.
[  233.112310][ T9377] warn_alloc: 1 callbacks suppressed
[  233.112331][ T9377] syz.3.1016: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  233.150039][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.3.1016 Not tainted syzkaller #0 PREEMPT(full) 
[  233.150068][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  233.150080][ T9377] Call Trace:
[  233.150087][ T9377]  <TASK>
[  233.150096][ T9377]  dump_stack_lvl+0x189/0x250
[  233.150127][ T9377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.150159][ T9377]  ? __pfx__printk+0x10/0x10
[  233.150183][ T9377]  ? lock_release+0x4b/0x3e0
[  233.150213][ T9377]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  233.150238][ T9377]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  233.150263][ T9377]  warn_alloc+0x214/0x310
[  233.150296][ T9377]  ? __pfx_warn_alloc+0x10/0x10
[  233.150331][ T9377]  ? __get_vm_area_node+0x28f/0x300
[  233.150359][ T9377]  ? hash_ipport_create+0x741/0x1410
[  233.150391][ T9377]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  233.150434][ T9377]  ? alloc_pages_mpol+0x3cd/0x4a0
[  233.150463][ T9377]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  233.150495][ T9377]  ? rcu_is_watching+0x15/0xb0
[  233.150515][ T9377]  ? hash_ipport_create+0x741/0x1410
[  233.150543][ T9377]  ? hash_ipport_create+0x741/0x1410
[  233.150570][ T9377]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  233.150599][ T9377]  ? hash_ipport_create+0x741/0x1410
[  233.150628][ T9377]  ? hash_ipport_create+0x6d5/0x1410
[  233.150659][ T9377]  hash_ipport_create+0x741/0x1410
[  233.150693][ T9377]  ? ip_set_create+0x4a2/0x1940
[  233.150718][ T9377]  ? __pfx_hash_ipport_create+0x10/0x10
[  233.150748][ T9377]  ? __nla_parse+0x40/0x60
[  233.150779][ T9377]  ? __pfx_hash_ipport_create+0x10/0x10
[  233.150808][ T9377]  ip_set_create+0xa97/0x1940
[  233.150832][ T9377]  ? ip_set_create+0x4a2/0x1940
[  233.150860][ T9377]  ? __pfx_ip_set_create+0x10/0x10
[  233.150895][ T9377]  ? rcu_is_watching+0x15/0xb0
[  233.150915][ T9377]  ? lock_release+0x4b/0x3e0
[  233.150943][ T9377]  ? __nla_parse+0x40/0x60
[  233.150974][ T9377]  nfnetlink_rcv_msg+0xb4d/0x1130
[  233.151001][ T9377]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  233.151037][ T9377]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  233.151061][ T9377]  ? kasan_save_free_info+0x46/0x50
[  233.151108][ T9377]  netlink_rcv_skb+0x208/0x470
[  233.151145][ T9377]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  233.151171][ T9377]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.151206][ T9377]  ? bpf_lsm_capable+0x9/0x20
[  233.151233][ T9377]  ? security_capable+0x7e/0x2e0
[  233.151265][ T9377]  nfnetlink_rcv+0x26a/0x2520
[  233.151293][ T9377]  ? __dev_queue_xmit+0x1d79/0x3b50
[  233.151321][ T9377]  ? __dev_queue_xmit+0x27b/0x3b50
[  233.151350][ T9377]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  233.151375][ T9377]  ? __pfx___dev_queue_xmit+0x10/0x10
[  233.151405][ T9377]  ? ref_tracker_free+0x63a/0x7d0
[  233.151433][ T9377]  ? __asan_memcpy+0x40/0x70
[  233.151455][ T9377]  ? __pfx_ref_tracker_free+0x10/0x10
[  233.151491][ T9377]  ? skb_clone+0x246/0x3a0
[  233.151514][ T9377]  ? __netlink_deliver_tap+0x807/0x850
[  233.151544][ T9377]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.151572][ T9377]  ? rcu_is_watching+0x15/0xb0
[  233.151590][ T9377]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.151637][ T9377]  ? lock_release+0x4b/0x3e0
[  233.151673][ T9377]  netlink_unicast+0x82c/0x9e0
[  233.151704][ T9377]  ? __pfx_netlink_unicast+0x10/0x10
[  233.151732][ T9377]  ? netlink_sendmsg+0x642/0xb30
[  233.151762][ T9377]  ? skb_put+0x11b/0x210
[  233.151782][ T9377]  netlink_sendmsg+0x805/0xb30
[  233.151818][ T9377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.151851][ T9377]  ? aa_sock_msg_perm+0xf1/0x1d0
[  233.151870][ T9377]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  233.151892][ T9377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.151924][ T9377]  __sock_sendmsg+0x21c/0x270
[  233.151958][ T9377]  ____sys_sendmsg+0x505/0x830
[  233.151982][ T9377]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.152008][ T9377]  ? import_iovec+0x74/0xa0
[  233.152033][ T9377]  ___sys_sendmsg+0x21f/0x2a0
[  233.152055][ T9377]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.152079][ T9377]  ? futex_wake+0x4b2/0x560
[  233.152123][ T9377]  ? __fget_files+0x2a/0x420
[  233.152159][ T9377]  ? __fget_files+0x3a0/0x420
[  233.152196][ T9377]  __x64_sys_sendmsg+0x19b/0x260
[  233.152219][ T9377]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.152246][ T9377]  ? rcu_is_watching+0x15/0xb0
[  233.152268][ T9377]  ? rcu_is_watching+0x15/0xb0
[  233.152290][ T9377]  do_syscall_64+0xfa/0x3b0
[  233.152321][ T9377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.152341][ T9377]  ? clear_bhb_loop+0x60/0xb0
[  233.152365][ T9377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.152385][ T9377] RIP: 0033:0x7f785c98ebe9
[  233.152403][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.152421][ T9377] RSP: 002b:00007f785d7d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.152444][ T9377] RAX: ffffffffffffffda RBX: 00007f785cbb5fa0 RCX: 00007f785c98ebe9
[  233.152460][ T9377] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 0000000000000005
[  233.152473][ T9377] RBP: 00007f785ca11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.152486][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.152498][ T9377] R13: 00007f785cbb6038 R14: 00007f785cbb5fa0 R15: 00007ffc8ab08008
[  233.152523][ T9377]  </TASK>
[  233.152531][ T9377] Mem-Info:
[  233.168992][ T9383] netlink: 'syz.2.1018': attribute type 7 has an invalid length.
[  233.211879][ T9377] active_anon:9775 inactive_anon:0 isolated_anon:0
[  233.211879][ T9377]  active_file:2436 inactive_file:39858 isolated_file:0
[  233.211879][ T9377]  unevictable:768 dirty:77 writeback:0
[  233.211879][ T9377]  slab_reclaimable:11645 slab_unreclaimable:112796
[  233.211879][ T9377]  mapped:28774 shmem:1366 pagetables:1177
[  233.211879][ T9377]  sec_pagetables:0 bounce:0
[  233.211879][ T9377]  kernel_misc_reclaimable:0
[  233.211879][ T9377]  free:1302783 free_pcp:18432 free_cma:0
[  233.400055][ T9383] netlink: 'syz.2.1018': attribute type 8 has an invalid length.
[  233.413929][ T9377] Node 0 active_anon:39500kB inactive_anon:0kB active_file:9744kB inactive_file:159232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115296kB dirty:308kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12392kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.413995][ T9377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.414040][ T9377] Node 0 
[  233.525782][ T9383] gretap0: entered promiscuous mode
[  233.539973][ T9377] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.570345][ T9383] batadv_slave_1: entered promiscuous mode
[  233.578331][ T9377] lowmem_reserve[]:
[  233.624519][ T9383] erspan0: entered promiscuous mode
[  233.632905][ T9377]  0 2497 2499 2499 2499
[  233.851921][ T9377] Node 0 DMA32 free:1310132kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39552kB inactive_anon:0kB active_file:9744kB inactive_file:157668kB unevictable:1536kB writepending:308kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:50148kB local_pcp:25964kB free_cma:0kB
[  233.868330][ T9402] IPVS: Error connecting to the multicast addr
[  233.885272][ T9377] lowmem_reserve[]: 0 0 1 1 1
[  233.895215][ T9377] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  233.994389][ T9377] lowmem_reserve[]: 0 0 0 0 0
[  234.010302][ T9377] Node 1 Normal free:3884480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24852kB local_pcp:11432kB free_cma:0kB
[  234.076819][ T9377] lowmem_reserve[]: 0 0 0 0 0
[  234.091804][ T9377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.146498][ T9377] Node 0 DMA32: 1124*4kB (UM) 817*8kB (UME) 496*16kB (UME) 665*32kB (UME) 451*64kB (UM) 335*128kB (UME) 290*256kB (UM) 263*512kB (UM) 205*1024kB (UME) 6*2048kB (UM) 190*4096kB (M) = 1321336kB
[  234.185576][ T9377] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  234.226699][ T9377] Node 1 Normal: 226*4kB (UE) 57*8kB (UME) 37*16kB (UME) 53*32kB (UME) 16*64kB (UME) 5*128kB (UM) 5*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3884480kB
[  234.263816][ T9377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.274312][ T9377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.301170][ T9377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.317534][ T9377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.329393][ T9377] 43661 total pagecache pages
[  234.334208][ T9377] 0 pages in swap cache
[  234.338383][ T9377] Free swap  = 124996kB
[  234.345273][ T9377] Total swap = 124996kB
[  234.349458][ T9377] 2097051 pages RAM
[  234.354310][ T9377] 0 pages HighMem/MovableOnly
[  234.361469][ T9377] 425660 pages reserved
[  234.365656][ T9377] 0 pages cma reserved
[  234.525308][ T9461] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  234.647325][ T9471] macsec2: entered promiscuous mode
[  234.661879][ T9471] bridge0: entered promiscuous mode
[  234.665047][ T9473] ieee802154 phy0 wpan0: encryption failed: -22
[  234.674693][ T9471] bridge0: port 3(macsec2) entered blocking state
[  234.682542][ T9471] bridge0: port 3(macsec2) entered disabled state
[  234.689922][ T9471] macsec2: entered allmulticast mode
[  234.695552][ T9471] bridge0: entered allmulticast mode
[  234.704647][ T9471] macsec2: left allmulticast mode
[  234.727245][ T9471] bridge0: left allmulticast mode
[  234.735982][ T9471] bridge0: left promiscuous mode
[  234.749420][ T9478] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  234.759225][ T9478] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  234.770424][ T9478] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.902101][ T9490] dvmrp0: entered allmulticast mode
[  234.907434][ T9492] __nla_validate_parse: 18 callbacks suppressed
[  234.907462][ T9492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1050'.
[  234.985861][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  235.003845][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'.
[  235.056683][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1053'.
[  235.478019][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'.
[  235.604230][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'.
[  235.628388][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'.
[  235.682848][ T9547] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1065'.
[  235.700775][ T9547] openvswitch: netlink: IP tunnel dst address not specified
[  235.809555][ T9561] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1071'.
[  235.818925][ T9561] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1071'.
[  235.875994][ T9569] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[  236.286843][ T9596] openvswitch: netlink: Actions may not be safe on all matching packets
[  236.305980][ T9602] openvswitch: netlink: Actions may not be safe on all matching packets
[  236.621441][ T9625] syzkaller1: entered promiscuous mode
[  236.636628][ T9625] syzkaller1: entered allmulticast mode
[  237.775455][ T9686] validate_nla: 6 callbacks suppressed
[  237.775475][ T9686] netlink: 'syz.0.1110': attribute type 12 has an invalid length.
[  238.019222][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.061719][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.909418][ T9791] IPv6: sit1: Disabled Multicast RS
[  239.207590][ T9799] netlink: 'syz.0.1143': attribute type 11 has an invalid length.
[  239.596431][ T9823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.713331][ T9838] netlink: 'syz.3.1153': attribute type 1 has an invalid length.
[  239.722691][ T9831] pim6reg: entered allmulticast mode
[  239.749593][ T9838] bond0: entered promiscuous mode
[  239.765042][ T9838] team0: entered promiscuous mode
[  239.775699][ T9838] syz_tun: entered promiscuous mode
[  239.784146][ T9838] bond0: left promiscuous mode
[  239.795978][ T9838] team0: left promiscuous mode
[  239.812199][ T9838] syz_tun: left promiscuous mode
[  239.831045][ T9843] netlink: 'syz.0.1155': attribute type 11 has an invalid length.
[  240.128388][ T9866] __nla_validate_parse: 17 callbacks suppressed
[  240.128420][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'.
[  240.271589][ T9872] netlink: 'syz.0.1165': attribute type 1 has an invalid length.
[  240.279392][ T9872] netlink: 'syz.0.1165': attribute type 1 has an invalid length.
[  240.344989][ T9886] netlink: 'syz.1.1170': attribute type 4 has an invalid length.
[  240.357492][ T9886] netlink: 'syz.1.1170': attribute type 4 has an invalid length.
[  240.522215][ T9902] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1175'.
[  240.532991][ T9904] sctp: [Deprecated]: syz.2.1178 (pid 9904) Use of int in maxseg socket option.
[  240.532991][ T9904] Use struct sctp_assoc_value instead
[  240.556850][ T9894] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  240.624115][ T9908] netlink: 'syz.4.1177': attribute type 7 has an invalid length.
[  240.632162][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'.
[  240.681500][ T9913] netlink: 'syz.0.1180': attribute type 23 has an invalid length.
[  240.763450][ T9918] 8021q: adding VLAN 0 to HW filter on device bond5
[  240.780078][ T5871] Bluetooth: hci4: command 0x0405 tx timeout
[  240.787032][ T9922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.873566][ T9926] 8021q: adding VLAN 0 to HW filter on device bond6
[  240.923104][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'.
[  240.935729][ T9933] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1185'.
[  240.966329][ T9940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.009473][ T9946] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  241.104924][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'.
[  241.341018][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'.
[  241.425616][ T9965] bridge7: port 1(veth5) entered blocking state
[  241.439044][ T9965] bridge7: port 1(veth5) entered disabled state
[  241.452133][ T9965] veth5: entered allmulticast mode
[  241.458377][ T9965] veth5: entered promiscuous mode
[  241.476898][ T9974] bridge7: port 2(veth0_to_bond) entered blocking state
[  241.497372][ T9974] bridge7: port 2(veth0_to_bond) entered disabled state
[  241.514321][ T9974] veth0_to_bond: entered allmulticast mode
[  241.523220][ T9974] veth0_to_bond: entered promiscuous mode
[  241.608112][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'.
[  241.926047][ T6428] nci: nci_rsp_packet: unknown rsp opcode 0x221
[  242.730716][T10043] netem: incorrect ge model size
[  242.735800][T10043] netem: change failed
[  242.948091][T10059] netlink: 'syz.4.1222': attribute type 11 has an invalid length.
[  242.966488][T10059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1222'.
[  243.322765][ T5863] Bluetooth: hci4: link tx timeout
[  243.327943][ T5863] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  243.335739][ T5863] Bluetooth: hci4: link tx timeout
[  243.340968][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  243.375064][T10088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'.
[  243.383546][T10090] netlink: 'syz.4.1229': attribute type 33 has an invalid length.
[  243.486731][T10100] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  243.531218][T10106] netlink: 'syz.2.1236': attribute type 18 has an invalid length.
[  243.560984][ T7596] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.572031][T10106] netlink: 'syz.2.1236': attribute type 18 has an invalid length.
[  243.589614][ T7596] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.616046][ T7596] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.616461][T10113] netlink: 'syz.0.1239': attribute type 21 has an invalid length.
[  243.634693][ T7596] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.707432][T10109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.806526][T10108] tipc: Resetting bearer <eth:syzkaller0>
[  243.815079][T10108] tipc: Disabling bearer <eth:syzkaller0>
[  243.867694][T10139] !
: renamed from dummy0 (while UP)
[  244.141658][T10163] nbd: must specify at least one socket
[  244.147478][T10164] nbd: must specify at least one socket
[  244.156198][T10164] openvswitch: netlink: Actions may not be safe on all matching packets
[  244.485808][T10185] team0 (unregistering): Port device team_slave_0 removed
[  244.530242][T10185] team0 (unregistering): Port device team_slave_1 removed
[  244.694700][T10211] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  244.705674][T10213] veth0: entered promiscuous mode
[  244.768994][T10217] netlink: 'syz.4.1267': attribute type 10 has an invalid length.
[  244.821092][T10225] netlink: 'syz.4.1267': attribute type 10 has an invalid length.
[  244.825461][T10217] 8021q: adding VLAN 0 to HW filter on device team0
[  244.865226][T10217] bond0: (slave team0): Enslaving as an active interface with an up link
[  244.886316][T10226] netlink: 'syz.0.1272': attribute type 13 has an invalid length.
[  244.904040][T10225] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  244.987357][T10226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.062314][T10244] netlink: 'syz.2.1275': attribute type 19 has an invalid length.
[  245.226147][T10252] netlink: 'syz.3.1280': attribute type 11 has an invalid length.
[  245.234739][T10252] __nla_validate_parse: 50 callbacks suppressed
[  245.234758][T10252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1280'.
[  245.422722][ T5871] Bluetooth: hci4: command 0x0405 tx timeout
[  245.459555][T10263] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1283'.
[  245.500154][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  245.530896][T10267] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  245.548430][T10269] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  245.633396][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'.
[  245.661642][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'.
[  245.677104][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'.
[  245.790634][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'.
[  245.843106][T10287] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  245.868065][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'.
[  245.881574][T10296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1293'.
[  246.008492][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'.
[  247.500223][ T5871] Bluetooth: hci4: command 0x0405 tx timeout
[  255.742599][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.748918][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  301.974938][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'.
[  302.046869][T10329] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  302.085026][T10329] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  302.205759][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1311'.
[  302.368950][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'.
[  302.614676][T10381] netlink: 4844 bytes leftover after parsing attributes in process `syz.3.1321'.
[  302.634847][T10386] pim6reg: entered allmulticast mode
[  302.643854][T10389] netlink: 'syz.1.1320': attribute type 62 has an invalid length.
[  302.649735][T10382] sit1: entered promiscuous mode
[  302.657179][T10382] sit1: entered allmulticast mode
[  302.801522][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'.
[  302.816017][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.817679][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1330'.
[  302.835647][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'.
[  302.900768][T10413] bond7 (unregistering): Released all slaves
[  302.924260][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'.
[  302.940606][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1332'.
[  303.123621][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'.
[  303.440504][T10470] bond0: (slave syz_tun): Releasing backup interface
[  303.452927][T10470] bond0: (slave team0): Releasing backup interface
[  303.454177][T10466] can: request_module (can-proto-0) failed.
[  303.469558][T10470] bridge_slave_0: left allmulticast mode
[  303.477620][T10470] bridge_slave_0: left promiscuous mode
[  303.484359][T10470] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.496988][T10470] bridge_slave_1: left allmulticast mode
[  303.503435][T10470] bridge_slave_1: left promiscuous mode
[  303.509256][T10470] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.519220][T10470] bond2: (slave veth0_to_bond): Releasing active interface
[  303.531456][T10470] bond0: (slave bond_slave_0): Releasing backup interface
[  303.541938][T10470] bond0: (slave bond_slave_1): Releasing backup interface
[  303.553767][T10470] team0: Port device team_slave_0 removed
[  303.563338][T10470] team0: Port device team_slave_1 removed
[  303.573229][T10470] bond0: (slave netdevsim0): Releasing backup interface
[  303.594072][T10470] bond2: (slave veth3): Releasing active interface
[  303.612622][T10470] bond2: (slave veth3): the permanent HWaddr of slave - 0e:a8:20:35:a1:a3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  303.681744][T10482] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  303.731955][T10470] bond2: (slave veth5): Releasing active interface
[  303.757733][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.795209][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.824412][T10474] team0: Device is already in use.
[  303.937949][ T7604] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.961707][ T7604] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  303.986888][ T7604] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.998830][T10506] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16
[  304.007658][ T7604] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  304.220115][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  304.317827][T10541] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  304.409254][T10550] veth1: entered allmulticast mode
[  304.482992][T10558] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  304.514813][T10562] block nbd3: not configured, cannot reconfigure
[  304.524909][T10563] block nbd3: not configured, cannot reconfigure
[  304.918790][T10580] bond0: (slave team0): Releasing backup interface
[  304.925547][T10580] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  305.267192][T10611] geneve2: entered promiscuous mode
[  305.278418][T10611] geneve2: entered allmulticast mode
[  305.500407][T10625] netlink: 'syz.1.1398': attribute type 11 has an invalid length.
[  305.852690][T10651] hsr_slave_0: left promiscuous mode
[  305.861863][T10651] hsr_slave_1: left promiscuous mode
[  305.919036][T10661] netlink: 'syz.3.1411': attribute type 11 has an invalid length.
[  306.095461][T10674] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  306.196260][T10680] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  306.277606][T10685] syzkaller0: entered promiscuous mode
[  306.283896][T10685] syzkaller0: entered allmulticast mode
[  306.290944][T10688] veth0: entered promiscuous mode
[  306.451559][T10697] netdevsim netdevsim2 ������: renamed from netdevsim0 (while UP)
[  306.482089][T10704] netlink: 'syz.1.1424': attribute type 11 has an invalid length.
[  306.619462][T10714] ip6gre2: entered allmulticast mode
[  306.674960][T10720] dvmrp0: left allmulticast mode
[  306.832606][T10731] syzkaller0: entered promiscuous mode
[  306.838186][T10731] syzkaller0: entered allmulticast mode
[  306.921003][T10741] netlink: 'syz.3.1435': attribute type 11 has an invalid length.
[  307.037655][T10681] veth0: left promiscuous mode
[  307.123140][T10751] __nla_validate_parse: 31 callbacks suppressed
[  307.123163][T10751] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1438'.
[  307.257728][T10767] sctp: [Deprecated]: syz.3.1442 (pid 10767) Use of int in max_burst socket option.
[  307.257728][T10767] Use struct sctp_assoc_value instead
[  307.518288][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'.
[  307.559681][T10797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.581594][T10800] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1452'.
[  307.623600][T10797] tipc: Disabling bearer <eth:syzkaller0>
[  307.666976][T10808] netlink: 'syz.4.1452': attribute type 10 has an invalid length.
[  307.712979][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1456'.
[  307.920273][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'.
[  308.018703][T10847] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  308.585340][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'.
[  308.927733][T10888] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  308.952463][T10889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.048308][T10894] netlink: 'syz.3.1478': attribute type 13 has an invalid length.
[  309.096583][T10894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.183565][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  317.190184][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  356.475065][T10938] tipc: Enabled bearer <udp:syz1>, priority 10
[  356.692090][T10964] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  357.117181][T11000] vxcan2: entered promiscuous mode
[  357.135212][T11005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.144143][T11005] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  357.153443][T11005] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  357.254403][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'.
[  357.339596][T11033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1524'.
[  357.415626][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'.
[  357.427942][T11040] veth0_to_team: entered promiscuous mode
[  357.437631][T11040] veth0_to_team: entered allmulticast mode
[  357.469534][T11043] netlink: 'syz.2.1526': attribute type 3 has an invalid length.
[  357.495560][T11043] netlink: 'syz.2.1526': attribute type 1 has an invalid length.
[  357.504015][T11043] netlink: 'syz.2.1526': attribute type 2 has an invalid length.
[  357.606398][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  357.635189][T11057] openvswitch: netlink: IP tunnel TTL not specified.
[  357.645001][T11060] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1534'.
[  357.668201][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1534'.
[  357.851415][T11084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.887208][T11066] sctp: [Deprecated]: syz.1.1536 (pid 11066) Use of int in maxseg socket option.
[  357.887208][T11066] Use struct sctp_assoc_value instead
[  357.929447][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'.
[  357.995315][T11086] team_slave_0: entered promiscuous mode
[  358.001069][T11086] team_slave_1: entered promiscuous mode
[  358.006785][T11086] netdevsim netdevsim2 ������: entered promiscuous mode
[  358.207137][T11113] veth1_to_bond: entered allmulticast mode
[  358.226685][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'.
[  358.232694][T11113] veth1_to_bond: left allmulticast mode
[  358.382331][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  358.463715][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1556'.
[  358.464141][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'.
[  358.724324][T11150] tipc: New replicast peer: 255.255.255.255
[  358.733816][T11150] tipc: Enabled bearer <udp:syz2>, priority 10
[  358.774810][T11154] netlink: 'syz.4.1564': attribute type 4 has an invalid length.
[  358.815034][T11154] `: renamed from bond0 (while UP)
[  358.839134][T11154] openvswitch: netlink: Multiple metadata blocks provided
[  358.878402][T11163] geneve3: entered promiscuous mode
[  358.906418][T11163] geneve3: entered allmulticast mode
[  359.192423][T11191] syzkaller0: entered promiscuous mode
[  359.198061][T11191] syzkaller0: entered allmulticast mode
[  359.850806][   T44] tipc: Node number set to 3758096386
[  359.876887][T11199] team0: Device gtp0 is of different type
[  359.996341][T11212] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  360.068499][T11219] netlink: 'syz.1.1585': attribute type 8 has an invalid length.
[  360.351455][T11260] vlan1: entered allmulticast mode
[  360.362723][T11260] bridge0: entered allmulticast mode
[  360.703688][T11306] netlink: 'syz.2.1604': attribute type 16 has an invalid length.
[  361.396634][T11325] netlink: 'syz.0.1608': attribute type 23 has an invalid length.
[  361.466810][T11330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.683415][T11353] syzkaller1: entered promiscuous mode
[  361.688936][T11353] syzkaller1: entered allmulticast mode
[  361.834569][T11364] netlink: 'syz.3.1620': attribute type 4 has an invalid length.
[  361.852234][T11370] netlink: 'syz.2.1619': attribute type 1 has an invalid length.
[  361.873090][T11370] netlink: 'syz.2.1619': attribute type 1 has an invalid length.
[  361.972069][T11374] 8021q: VLANs not supported on vxcan1
[  362.261176][T11404] : entered promiscuous mode
[  363.585885][T11501] __nla_validate_parse: 18 callbacks suppressed
[  363.585910][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'.
[  363.644218][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1665'.
[  363.657553][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1665'.
[  363.667233][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'.
[  363.780171][T11520] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  363.853911][T11531] validate_nla: 8 callbacks suppressed
[  363.853943][T11531] netlink: 'syz.0.1672': attribute type 33 has an invalid length.
[  363.872604][T11518] syzkaller0: entered promiscuous mode
[  363.889657][T11531] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1672'.
[  363.895948][T11518] syzkaller0: entered allmulticast mode
[  363.914450][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'.
[  363.929343][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1674'.
[  363.938807][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1674'.
[  364.760829][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1687'.
[  365.106286][T11594] netlink: 'syz.0.1689': attribute type 8 has an invalid length.
[  365.334380][T11613] netlink: 'syz.2.1695': attribute type 10 has an invalid length.
[  365.347486][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1695'.
[  365.347915][T11617] netlink: 'syz.1.1696': attribute type 10 has an invalid length.
[  365.375874][T11613] geneve0: entered promiscuous mode
[  365.384183][T11613] team0: Port device geneve0 added
[  365.530905][T11634] sctp: [Deprecated]: syz.3.1701 (pid 11634) Use of int in max_burst socket option deprecated.
[  365.530905][T11634] Use struct sctp_assoc_value instead
[  365.695426][T11649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.988832][T11674] netlink: 'syz.4.1714': attribute type 5 has an invalid length.
[  366.010801][T11674] geneve2: entered promiscuous mode
[  366.016060][T11674] geneve2: entered allmulticast mode
[  366.023061][ T7604] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  366.032076][ T7604] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  366.055080][ T7604] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  366.070310][ T7604] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  366.194502][T11689] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  366.206014][T11692] netlink: 'syz.4.1718': attribute type 7 has an invalid length.
[  366.379167][T11706] netlink: 'syz.0.1720': attribute type 11 has an invalid length.
[  366.542439][T11715] netlink: 'syz.0.1723': attribute type 10 has an invalid length.
[  367.034113][T11715] !
: entered promiscuous mode
[  367.042137][T11715] bridge0: port 2(
0!
) entered blocking state
[  367.055767][T11715] bridge0: port 2(
0!
) entered disabled state
[  367.068602][T11715] !
: entered allmulticast mode
[  367.302290][T11749] netlink: 'syz.1.1733': attribute type 11 has an invalid length.
[  367.505149][T11767] netlink: 'syz.1.1740': attribute type 4 has an invalid length.
[  367.609167][T11780] netlink: 'syz.2.1745': attribute type 30 has an invalid length.
[  367.618914][T11780] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  367.633985][T11780] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  367.757352][T11794] netlink: 'syz.2.1750': attribute type 11 has an invalid length.
[  367.924118][T11803] 0��{X��: renamed from gretap0 (while UP)
[  367.933412][T11803] 0��{X��: entered allmulticast mode
[  367.966008][T11803] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  367.993068][T11809] tipc: Started in network mode
[  368.008200][T11809] tipc: Node identity ac1414aa, cluster identity 4711
[  368.016807][T11809] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  368.362541][T11838] tipc: Cannot configure node identity twice
[  368.378944][T11842] netlink: 'syz.1.1765': attribute type 11 has an invalid length.
[  368.826270][T11879] __nla_validate_parse: 20 callbacks suppressed
[  368.826292][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1779'.
[  368.989936][T11892] netlink: 'syz.1.1781': attribute type 11 has an invalid length.
[  369.019963][T11892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1781'.
[  369.111695][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'.
[  369.167987][T11898] hsr_slave_1 (unregistering): left promiscuous mode
[  369.192054][T11907] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1788'.
[  369.263300][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'.
[  369.491269][T11935] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1794'.
[  369.569294][T11935] ` (unregistering): Released all slaves
[  369.695099][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'.
[  369.705770][T11948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'.
[  369.738579][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'.
[  369.770567][T11947] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1800'.
[  369.841355][T11953] veth7: entered allmulticast mode
[  370.014878][T11970] validate_nla: 3 callbacks suppressed
[  370.014900][T11970] netlink: 'syz.1.1806': attribute type 1 has an invalid length.
[  370.062738][T11970] 8021q: adding VLAN 0 to HW filter on device bond4
[  370.153570][T11969] veth7: entered promiscuous mode
[  370.159697][T11978] netlink: 'syz.0.1808': attribute type 21 has an invalid length.
[  370.190790][T11978] IPv6: NLM_F_CREATE should be specified when creating new route
[  370.211947][T11978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.219230][T11978] IPv6: NLM_F_CREATE should be set when creating new route
[  370.226540][T11978] IPv6: NLM_F_CREATE should be set when creating new route
[  370.233797][T11978] IPv6: NLM_F_CREATE should be set when creating new route
[  370.593704][T12012] netlink: 'syz.4.1816': attribute type 10 has an invalid length.
[  370.666316][T12018] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  370.690921][T12020] netlink: 'syz.4.1820': attribute type 1 has an invalid length.
[  370.691020][T12021] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  370.763203][T12020] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  370.796759][T12020] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  370.819294][T12033] netlink: 'syz.3.1824': attribute type 10 has an invalid length.
[  370.834984][T12031] gretap1: entered promiscuous mode
[  370.843619][T12031] bond0: (slave gretap1): making interface the new active one
[  370.854993][T12031] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  370.891522][T12020] macvlan0: entered promiscuous mode
[  370.896905][T12020] macvlan0: entered allmulticast mode
[  370.904640][T12020] bond0: entered promiscuous mode
[  370.913248][T12020] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  370.926446][T12020] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  370.950983][T12020] bond0: left promiscuous mode
[  371.311342][T12079] IPv6: Can't replace route, no match found
[  371.402997][T12084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.734288][   T30] audit: type=1107 audit(1755976892.718:4): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  371.848313][T12109] netlink: 'syz.1.1847': attribute type 11 has an invalid length.
[  372.381531][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  372.454619][T12162] netlink: 'syz.4.1863': attribute type 11 has an invalid length.
[  372.535106][T12166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.551675][T12166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.560678][T12166] syzkaller0: entered promiscuous mode
[  372.566169][T12166] syzkaller0: entered allmulticast mode
[  372.575360][T12166] tipc: Resetting bearer <eth:syzkaller0>
[  372.587544][T12165] tipc: Resetting bearer <eth:syzkaller0>
[  372.804634][T12197] netlink: 'syz.2.1877': attribute type 11 has an invalid length.
[  373.102257][T12222] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  373.169630][T12226] netlink: 'syz.3.1890': attribute type 11 has an invalid length.
[  373.218742][T12224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.247062][T12223] tipc: Resetting bearer <eth:syzkaller0>
[  373.397893][T12223] tipc: Disabling bearer <eth:syzkaller0>
[  373.424811][ T7599] tipc: Resetting bearer <eth:syzkaller0>
[  373.464737][T12248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.659292][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.679050][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.685908][T12273] netlink: 'syz.2.1905': attribute type 11 has an invalid length.
[  373.732741][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.772769][T12269] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  373.802032][T12286] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16
[  373.823091][T12269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  373.893055][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.906070][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.918943][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.943961][T12269] hsr0 speed is unknown, defaulting to 1000
[  373.953014][T12269] hsr0 speed is unknown, defaulting to 1000
[  374.010430][T12306] netlink: 'syz.4.1914': attribute type 11 has an invalid length.
[  374.018489][T12306] netlink: 'syz.4.1914': attribute type 11 has an invalid length.
[  374.034477][T12306] __nla_validate_parse: 27 callbacks suppressed
[  374.034498][T12306] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1914'.
[  374.279696][T12335] netlink: 4364 bytes leftover after parsing attributes in process `syz.1.1923'.
[  374.323245][T12339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1924'.
[  374.350845][T12339] sctp: [Deprecated]: syz.4.1924 (pid 12339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.350845][T12339] Use struct sctp_sack_info instead
[  374.369104][T12339] sctp: [Deprecated]: syz.4.1924 (pid 12339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.369104][T12339] Use struct sctp_sack_info instead
[  374.433325][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'.
[  374.554553][T12339] hsr0 speed is unknown, defaulting to 1000
[  375.013706][T12397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  375.021030][T12397] IPv6: NLM_F_CREATE should be set when creating new route
[  375.039277][T12396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1938'.
[  375.051597][T12394] delete_channel: no stack
[  375.141720][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.317189][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'.
[  375.326731][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'.
[  375.356593][T12429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1948'.
[  375.385684][T12434] netlink: 'syz.4.1950': attribute type 11 has an invalid length.
[  375.399315][T12434] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1950'.
[  375.471454][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'.
[  375.972760][T12480] netlink: 'syz.0.1966': attribute type 10 has an invalid length.
[  375.978247][T12483] netlink: 'syz.2.1967': attribute type 1 has an invalid length.
[  375.983291][T12486] netlink: ct family unspecified
[  375.994645][T12486] openvswitch: netlink: Actions may not be safe on all matching packets
[  376.005260][T12480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  376.028589][T12475] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  376.153858][T12494] unknown channel width for channel at 909000KHz?
[  376.249294][T12507] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  376.318064][T12512] netlink: 'syz.2.1976': attribute type 3 has an invalid length.
[  376.454402][T12521] netlink: 'syz.3.1977': attribute type 1 has an invalid length.
[  376.520550][T12525] 8021q: VLANs not supported on wg1
[  376.583522][T12530] netlink: 'syz.2.1979': attribute type 11 has an invalid length.
[  376.667542][T12523] 0��{X��: renamed from gretap0
[  376.714078][T12523] 0��{X��: entered allmulticast mode
[  376.732448][T12523] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  377.009301][   T30] audit: type=1107 audit(1755976897.988:5): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='��cLj�� 妺�Ε�s�M[ΐ�*��;������\T��:��Rr��E.���4��%��_$����od&��./�e�R~�Ov�s���b!Œ�Z�w���Hh	}��v�SCTZ_��*#�P��Xȵ���R!C��?
��s
�'
[  377.034861][T12570] netlink: 'syz.3.1993': attribute type 10 has an invalid length.
[  377.106166][T12579] : entered promiscuous mode
[  377.251524][T12593] netlink: 'syz.0.2001': attribute type 11 has an invalid length.
[  377.370674][T12596] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  377.514808][T12605] openvswitch: netlink: Flow actions attr not present in new flow.
[  377.588054][T12607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  378.175809][T12624] netlink: 'syz.4.2013': attribute type 7 has an invalid length.
[  378.475278][T12646] netlink: 'syz.2.2020': attribute type 11 has an invalid length.
[  378.506646][T12648] atomic_op ffff88802f336998 conn xmit_atomic 0000000000000000
[  378.623031][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  378.626755][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  378.647479][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  378.828967][T12680] netlink: 'syz.4.2031': attribute type 10 has an invalid length.
[  378.858534][T12676] syzkaller0: entered promiscuous mode
[  378.866111][T12676] syzkaller0: entered allmulticast mode
[  379.016547][T12697] netlink: 'syz.3.2037': attribute type 10 has an invalid length.
[  379.077208][T12700] netlink: 'syz.2.2038': attribute type 1 has an invalid length.
[  379.086322][T12700] __nla_validate_parse: 21 callbacks suppressed
[  379.086341][T12700] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2038'.
[  379.481003][T12730] netlink: 'syz.0.2046': attribute type 3 has an invalid length.
[  380.177308][T12754] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2053'.
[  380.273622][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2055'.
[  380.332218][T12769] block nbd1: server does not support multiple connections per device.
[  380.338688][   T30] audit: type=1800 audit(1755976901.318:6): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2061" name="memory.events" dev="tmpfs" ino=2198 res=0 errno=0
[  380.353669][T12769] block nbd1: shutting down sockets
[  380.461483][T12793] netlink: 'syz.4.2064': attribute type 11 has an invalid length.
[  380.469353][T12793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2064'.
[  380.553018][T12799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2067'.
[  380.570568][T12799] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  380.598187][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'.
[  380.644784][T12808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2071'.
[  380.683889][T12811] sctp: [Deprecated]: syz.2.2070 (pid 12811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  380.683889][T12811] Use struct sctp_sack_info instead
[  380.684851][T12808] team0: Port device geneve0 added
[  380.726362][T12812] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2072'.
[  380.776279][T12808] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2071'.
[  380.813449][   T44] IPVS: starting estimator thread 0...
[  380.832161][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2076'.
[  380.900038][T12825] IPVS: using max 42 ests per chain, 100800 per kthread
[  381.071880][T12861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.240868][T12868] 0��{X��: left allmulticast mode
[  381.432259][T12868] bridge_slave_0: left allmulticast mode
[  381.452072][T12868] bridge2: left allmulticast mode
[  381.477132][T12868] bond1: left promiscuous mode
[  381.483295][T12868] wireguard0: left promiscuous mode
[  381.505810][T12868] gretap1: left promiscuous mode
[  381.512394][T12868] macvlan3: left allmulticast mode
[  381.518939][T12868] geneve2: left promiscuous mode
[  381.524650][T12868] geneve2: left allmulticast mode
[  381.576941][T12868] sit1: left promiscuous mode
[  381.583864][T12868] sit1: left allmulticast mode
[  381.591450][T12868] vxcan2: left promiscuous mode
[  381.603038][ T6427] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  381.619685][ T6427] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  381.643380][ T6427] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  381.651939][ T6427] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  381.670702][ T7596] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  381.700334][ T7596] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  381.713370][ T7596] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  381.725719][ T7596] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  381.959278][T12907] sctp: [Deprecated]: syz.4.2094 (pid 12907) Use of struct sctp_assoc_value in delayed_ack socket option.
[  381.959278][T12907] Use struct sctp_sack_info instead
[  382.011457][T12910] validate_nla: 2 callbacks suppressed
[  382.011476][T12910] netlink: 'syz.3.2096': attribute type 1 has an invalid length.
[  382.322528][T12945] netlink: 'syz.1.2106': attribute type 9 has an invalid length.
[  382.357477][T12945] netlink: 'syz.1.2106': attribute type 9 has an invalid length.
[  382.402164][T12950] netlink: 'syz.0.2108': attribute type 21 has an invalid length.
[  382.676581][T12978] delete_channel: no stack
[  382.886331][T12997] netlink: 'syz.0.2122': attribute type 1 has an invalid length.
[  383.124678][T13019] netlink: 'syz.4.2128': attribute type 1 has an invalid length.
[  383.189668][T13019] 8021q: adding VLAN 0 to HW filter on device bond7
[  383.212809][T13031] bond7: (slave geneve3): making interface the new active one
[  383.255187][T13031] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  383.351853][T13048] netem: unknown loss type 0
[  383.369648][T13050] netlink: 'syz.2.2139': attribute type 11 has an invalid length.
[  383.370364][T13048] netem: change failed
[  383.600704][T13069] openvswitch: netlink: Actions may not be safe on all matching packets
[  383.659716][T13073] netlink: 'syz.3.2145': attribute type 62 has an invalid length.
[  383.755497][T13082] bridge0: port 3(vlan4) entered blocking state
[  383.763995][T13082] bridge0: port 3(vlan4) entered disabled state
[  383.771811][T13082] vlan4: entered allmulticast mode
[  383.779476][T13082] bridge0: entered allmulticast mode
[  383.787849][T13082] vlan4: left allmulticast mode
[  383.792895][T13082] bridge0: left allmulticast mode
[  383.948081][T13098] syzkaller1: entered promiscuous mode
[  383.953723][T13098] syzkaller1: entered allmulticast mode
[  384.072838][T13110] team0: Device wireguard0 is of different type
[  384.120251][T13113] netlink: 'syz.2.2157': attribute type 1 has an invalid length.
[  384.128736][T13113] __nla_validate_parse: 27 callbacks suppressed
[  384.128759][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'.
[  384.152255][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'.
[  384.223935][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'.
[  384.376183][ T7596] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d
[  384.380769][T13128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  384.421898][T13139] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2166'.
[  384.425975][T13143] netlink: 'syz.1.2165': attribute type 7 has an invalid length.
[  384.443611][T13143] : entered promiscuous mode
[  384.516969][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'.
[  384.537906][T13156] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  384.581303][T13160] netlink: 'syz.2.2171': attribute type 1 has an invalid length.
[  384.667777][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'.
[  384.798308][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'.
[  384.824840][T13184] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2177'.
[  384.867021][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'.
[  385.232889][T13212] syzkaller1: entered promiscuous mode
[  385.238542][T13212] syzkaller1: entered allmulticast mode
[  385.254854][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'.
[  385.355061][T13218] syzkaller0: entered promiscuous mode
[  385.380678][T13218] syzkaller0: entered allmulticast mode
[  385.855759][T13266] bond8: entered promiscuous mode
[  385.872730][T13266] bond8: entered allmulticast mode
[  385.878317][T13266] 8021q: adding VLAN 0 to HW filter on device bond8
[  385.906012][T13266] openvswitch: netlink: Message has -1 unknown bytes.
[  386.082924][T13285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.098413][T13285] bridge9: entered promiscuous mode
[  386.113116][T13285] bridge9: entered allmulticast mode
[  386.123049][T13295] openvswitch: netlink: Flow actions attr not present in new flow.
[  386.170955][T13293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.190721][T13293] syzkaller0: entered promiscuous mode
[  386.196253][T13293] syzkaller0: entered allmulticast mode
[  386.207036][T13293] sch_tbf: burst 178 is lower than device syzkaller0 mtu (1514) !
[  386.285089][T13293] tipc: Resetting bearer <eth:syzkaller0>
[  386.311937][T13291] tipc: Resetting bearer <eth:syzkaller0>
[  386.326210][T13291] tipc: Disabling bearer <eth:syzkaller0>
[  386.398360][T13319] netlink: 'syz.4.2219': attribute type 11 has an invalid length.
[  386.448073][T13323] netlink: zone id is out of range
[  386.453526][T13323] netlink: zone id is out of range
[  386.458834][T13323] netlink: zone id is out of range
[  386.464282][T13323] netlink: zone id is out of range
[  386.469787][T13323] netlink: zone id is out of range
[  386.475325][T13323] netlink: zone id is out of range
[  386.480963][T13323] netlink: zone id is out of range
[  386.486262][T13323] netlink: zone id is out of range
[  386.557718][T13329] netlink: 'syz.0.2223': attribute type 11 has an invalid length.
[  387.446935][T13365] syzkaller1: entered promiscuous mode
[  387.459875][T13365] syzkaller1: entered allmulticast mode
[  387.888734][T13419] validate_nla: 5 callbacks suppressed
[  387.888754][T13419] netlink: 'syz.2.2245': attribute type 4 has an invalid length.
[  388.306308][T13457] netlink: 'syz.2.2260': attribute type 10 has an invalid length.
[  388.332826][T13457] ipvlan1: entered promiscuous mode
[  388.351332][T13457] ipvlan1: entered allmulticast mode
[  388.357740][T13457] veth0_vlan: entered allmulticast mode
[  388.445202][T13469] netlink: 'syz.0.2262': attribute type 11 has an invalid length.
[  388.603795][T13485] netlink: 'syz.1.2265': attribute type 1 has an invalid length.
[  388.796933][T13499] netlink: 'syz.2.2268': attribute type 49 has an invalid length.
[  388.803266][T13493] syzkaller0: entered promiscuous mode
[  388.811366][T13493] syzkaller0: entered allmulticast mode
[  388.837662][T13502] netlink: 'syz.0.2271': attribute type 10 has an invalid length.
[  389.152760][T13516] netlink: 'syz.4.2275': attribute type 1 has an invalid length.
[  389.162995][T13516] __nla_validate_parse: 25 callbacks suppressed
[  389.163014][T13516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2275'.
[  389.282562][T13541] netlink: 'syz.1.2283': attribute type 21 has an invalid length.
[  389.292092][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'.
[  389.301145][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'.
[  389.313038][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'.
[  389.321961][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'.
[  389.338689][T13547] netlink: 920 bytes leftover after parsing attributes in process `syz.3.2285'.
[  389.355629][T13548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2284'.
[  389.371269][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2284'.
[  389.465414][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2290'.
[  389.492101][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'.
[  389.955943][T13616] netlink: 'syz.1.2305': attribute type 6 has an invalid length.
[  389.989791][T13618] netlink: 'syz.2.2307': attribute type 13 has an invalid length.
[  390.093675][T13627] netlink: 'syz.1.2311': attribute type 11 has an invalid length.
[  390.596849][T13667] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.983320][T13707] sctp: [Deprecated]: syz.2.2338 (pid 13707) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.983320][T13707] Use struct sctp_sack_info instead
[  391.001170][T13706] IPv6: NLM_F_CREATE should be specified when creating new route
[  391.091158][T13711] 8021q: adding VLAN 0 to HW filter on device bond9
[  391.148678][T13711] 8021q: adding VLAN 0 to HW filter on device bond9
[  391.159171][T13711] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  391.172867][T13711] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  391.200720][T13726] veth11: entered promiscuous mode
[  391.208963][T13726] bond9: (slave veth11): Enslaving as an active interface with a down link
[  391.223432][T13726] 8021q: adding VLAN 0 to HW filter on device bond9
[  391.413021][T13744] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1
[  391.874955][T13763] net_ratelimit: 62 callbacks suppressed
[  391.874977][T13763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.965186][T13768] delete_channel: no stack
[  392.005311][T13770] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  392.401733][T13802] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  392.424956][T13802] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  392.610465][T13803] nbd1: detected capacity change from 0 to 127
[  392.619079][ T5863] block nbd1: Receive control failed (result -32)
[  392.627680][ T5871] block nbd1: Receive control failed (result -32)
[  392.719589][T13832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.757565][T13821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.150379][T13872] validate_nla: 9 callbacks suppressed
[  393.150398][T13872] netlink: 'syz.1.2393': attribute type 1 has an invalid length.
[  393.345321][T13891] netlink: 'syz.2.2400': attribute type 4 has an invalid length.
[  393.397781][T13897] netlink: 'syz.2.2400': attribute type 4 has an invalid length.
[  393.435006][T13893] netlink: 'syz.0.2401': attribute type 2 has an invalid length.
[  393.740740][T13932] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001
[  393.808921][T13935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.154837][ T1137] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  394.282192][T13983] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20000
[  394.293053][T13983] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003
[  394.302183][T13984] __nla_validate_parse: 24 callbacks suppressed
[  394.302203][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'.
[  394.319286][T13984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.630260][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2431'.
[  394.981953][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'.
[  395.007907][T14011] 8021q: adding VLAN 0 to HW filter on device bond10
[  395.310576][T14035] netlink: 'syz.0.2442': attribute type 11 has an invalid length.
[  395.322116][T14035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2442'.
[  395.791738][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2452'.
[  395.915751][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'.
[  395.945176][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2456'.
[  395.956797][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2457'.
[  395.965885][T14085] netlink: 'syz.3.2457': attribute type 7 has an invalid length.
[  395.973935][T14085] netlink: 'syz.3.2457': attribute type 8 has an invalid length.
[  395.982953][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'.
[  396.145110][T14102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  396.162872][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'.
[  396.376777][T14133] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  396.458005][T14142] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  396.470077][T14142] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  396.820651][T14171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.928015][T14200] macvlan4: entered promiscuous mode
[  396.937587][T14200] macvlan4: entered allmulticast mode
[  396.948489][T13758] tipc: Subscription rejected, illegal request
[  397.039615][T14211] netlink: 'syz.4.2496': attribute type 1 has an invalid length.
[  397.276282][T14242] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  397.415423][T14253] delete_channel: no stack
[  397.575897][T14274] vcan0 (unregistering): left allmulticast mode
[  397.908402][T14309] tipc: Resetting bearer <eth:syzkaller0>
[  397.917587][T14309] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  397.930825][T14308] tipc: Resetting bearer <eth:syzkaller0>
[  398.074623][T14318] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  398.085707][T14318] gretap1: entered promiscuous mode
[  398.092653][T14318] gretap1: entered allmulticast mode
[  398.281524][T14328] netlink: 'syz.0.2534': attribute type 2 has an invalid length.
[  398.291478][T14328] netlink: 'syz.0.2534': attribute type 32 has an invalid length.
[  398.325146][T14331] netlink: 'syz.4.2535': attribute type 21 has an invalid length.
[  398.548391][T14353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  398.610089][T14359] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003
[  398.731072][T14370] netlink: 'syz.1.2546': attribute type 6 has an invalid length.
[  398.819390][T14372] netlink: 'syz.4.2547': attribute type 4 has an invalid length.
[  398.880252][T13759] tipc: Resetting bearer <eth:syzkaller0>
[  399.029862][   T30] audit: type=1107 audit(1755976920.008:7): pid=14386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  399.188972][T14403] netlink: 'syz.4.2560': attribute type 1 has an invalid length.
[  399.223160][T14403] bond11: (slave gretap2): making interface the new active one
[  399.232074][T14403] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  399.330979][T14416] __nla_validate_parse: 21 callbacks suppressed
[  399.331000][T14416] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2565'.
[  399.419496][T14420] netlink: 'syz.3.2567': attribute type 1 has an invalid length.
[  399.427972][T14420] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2567'.
[  399.437498][T14420] netlink: 'syz.3.2567': attribute type 2 has an invalid length.
[  399.453367][T14420] netlink: 'syz.3.2567': attribute type 1 has an invalid length.
[  399.487446][T14420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2567'.
[  399.507035][T14420] openvswitch: netlink: Flow key attr not present in new flow.
[  399.591725][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'.
[  399.623785][T14434] netlink: 'syz.4.2571': attribute type 39 has an invalid length.
[  399.841567][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'.
[  399.915322][T14467] netlink: 'syz.1.2580': attribute type 11 has an invalid length.
[  399.934740][T14467] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2580'.
[  399.979197][T14468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2581'.
[  400.000613][T14472] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2584'.
[  400.195577][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'.
[  400.206952][T14499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2592'.
[  400.397730][T14512] netlink: 'syz.1.2596': attribute type 11 has an invalid length.
[  400.519752][T14525] geneve2: entered promiscuous mode
[  400.526097][T14525] geneve2: entered allmulticast mode
[  400.578664][T14521] syzkaller1: entered promiscuous mode
[  400.624322][T14521] syzkaller1: entered allmulticast mode
[  400.713257][T14547] openvswitch: netlink: Duplicate or invalid key (type 0).
[  400.723517][T14547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.060871][T14580] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  401.152369][T14592] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  401.236905][T14597] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  401.411403][T14618] sctp: [Deprecated]: syz.3.2628 (pid 14618) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.411403][T14618] Use struct sctp_sack_info instead
[  401.437657][T14625] net veth1_virt_wifi .������: renamed from virt_wifi0
[  401.494677][T14618] syzkaller0: entered promiscuous mode
[  401.503675][T14618] syzkaller0: entered allmulticast mode
[  401.659998][    C0] syz_tun: tun_net_xmit 86
[  401.951505][T14678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  401.958830][T14678] IPv6: NLM_F_CREATE should be set when creating new route
[  401.966113][T14678] IPv6: NLM_F_CREATE should be set when creating new route
[  401.973391][T14678] IPv6: NLM_F_CREATE should be set when creating new route
[  402.040150][T14687] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  402.198133][T14706] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  402.209758][T14706] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  402.245747][T14705] macvlan6: entered promiscuous mode
[  402.251903][T14705] macvlan6: entered allmulticast mode
[  402.257881][T14705] bond5: entered promiscuous mode
[  402.263508][T14705] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  402.272198][T14705] bond5: left promiscuous mode
[  402.386788][T14721] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  402.439871][T14721] tipc: Bearer <udp:s>: trying with adjusted priority
[  402.446782][T14721] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  402.673517][T14731] C: renamed from team_slave_0
[  402.704684][T14731] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  402.758191][T14764] IPv6: sit1: Disabled Multicast RS
[  402.897093][T14775] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  402.908343][T14775] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  402.932102][T14775] gretap0: entered promiscuous mode
[  402.937478][T14775] gretap0: entered allmulticast mode
[  402.997252][T14783] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  403.101129][T14793] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  403.189891][ T5871] Bluetooth: hci4: command 0x0405 tx timeout
[  403.329097][T14825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.725917][T14864] validate_nla: 49 callbacks suppressed
[  403.725939][T14864] netlink: 'syz.3.2704': attribute type 6 has an invalid length.
[  403.749243][T14868] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  403.767177][T14861] ip6erspan0: entered promiscuous mode
[  403.784067][T14864] netlink: 'syz.3.2704': attribute type 6 has an invalid length.
[  404.103899][T14905] netlink: 'syz.4.2718': attribute type 10 has an invalid length.
[  404.354958][T14933] __nla_validate_parse: 32 callbacks suppressed
[  404.354980][T14933] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2727'.
[  404.538382][T14953] net_ratelimit: 1 callbacks suppressed
[  404.538400][T14953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.560914][T14956] bridge_slave_0: entered promiscuous mode
[  404.674527][T14966] nbd: must specify a size in bytes for the device
[  404.685329][T14966] ieee802154 phy0 wpan0: encryption failed: -22
[  404.720282][T14966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.727557][T14966] IPv6: NLM_F_CREATE should be set when creating new route
[  404.734831][T14966] IPv6: NLM_F_CREATE should be set when creating new route
[  404.751196][T14966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.888887][T14984] netlink: 'syz.0.2738': attribute type 10 has an invalid length.
[  404.994898][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'.
[  405.028372][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'.
[  405.245806][T15010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2746'.
[  405.386179][T15027] syzkaller1: entered allmulticast mode
[  405.478090][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'.
[  405.492254][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2752'.
[  405.602727][T15045] veth0: entered promiscuous mode
[  405.612788][T15049] ieee802154 phy0 wpan0: encryption failed: -22
[  405.633663][T15042] veth0: left promiscuous mode
[  405.662227][T15053] nbd: must specify a size in bytes for the device
[  405.740729][T15060] sctp: [Deprecated]: syz.1.2760 (pid 15060) Use of int in maxseg socket option.
[  405.740729][T15060] Use struct sctp_assoc_value instead
[  405.879332][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2762'.
[  406.353507][T15107] netlink: 'syz.4.2773': attribute type 13 has an invalid length.
[  406.377080][T15107] netlink: 'syz.4.2773': attribute type 4 has an invalid length.
[  406.651840][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'.
[  406.676284][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'.
[  406.878428][T15141] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2784'.
[  406.962990][ T5856] bond0: (slave syz_tun): Releasing backup interface
[  406.977497][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.986775][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.995868][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.999225][T15150] netlink: 'syz.1.2786': attribute type 10 has an invalid length.
[  407.003775][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  407.020489][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  407.037247][T15150] bridge_slave_1: left allmulticast mode
[  407.043243][T15150] bridge_slave_1: left promiscuous mode
[  407.049176][T15150] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.075155][T15150] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  407.204387][T15146] hsr0 speed is unknown, defaulting to 1000
[  407.215751][T15163] netlink: 'syz.1.2791': attribute type 11 has an invalid length.
[  407.386970][T15174] netlink: 'syz.4.2794': attribute type 1 has an invalid length.
[  407.429634][T15146] chnl_net:caif_netlink_parms(): no params data found
[  407.496216][T15183] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  407.587343][T15199] netlink: 'syz.1.2798': attribute type 7 has an invalid length.
[  407.629267][T15199] netlink: 'syz.1.2798': attribute type 8 has an invalid length.
[  407.664223][T15146] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.678460][T15146] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.694512][T15146] bridge_slave_0: entered allmulticast mode
[  407.702393][T15146] bridge_slave_0: entered promiscuous mode
[  407.710461][T15146] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.717723][T15146] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.726676][T15146] bridge_slave_1: entered allmulticast mode
[  407.734199][T15146] bridge_slave_1: entered promiscuous mode
[  407.776403][T15146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.811775][T15146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.878551][T15146] team0: Port device team_slave_0 added
[  407.897601][T15146] team0: Port device team_slave_1 added
[  407.924259][T15212] tipc: Resetting bearer <eth:syzkaller0>
[  407.952749][T15146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.991973][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.054244][T15146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.091832][T15221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.100059][T15221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  408.117460][T15146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.138932][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.193187][T15146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.293096][T15146] hsr_slave_0: entered promiscuous mode
[  408.305154][T15146] hsr_slave_1: entered promiscuous mode
[  408.333486][T15146] debugfs: 'hsr0' already exists in 'hsr'
[  408.338583][T15234] openvswitch: netlink: IPv4 frag type 128 is out of range max 2
[  408.355886][T15146] Cannot create hsr debugfs directory
[  408.453154][T15238] warn_alloc: 1 callbacks suppressed
[  408.453188][T15238] syz.4.2811: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  408.495255][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.4.2811 Not tainted syzkaller #0 PREEMPT(full) 
[  408.495283][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  408.495302][T15238] Call Trace:
[  408.495309][T15238]  <TASK>
[  408.495317][T15238]  dump_stack_lvl+0x189/0x250
[  408.495347][T15238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.495370][T15238]  ? __pfx__printk+0x10/0x10
[  408.495394][T15238]  ? lock_release+0x4b/0x3e0
[  408.495425][T15238]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  408.495448][T15238]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  408.495471][T15238]  warn_alloc+0x214/0x310
[  408.495503][T15238]  ? __pfx_warn_alloc+0x10/0x10
[  408.495535][T15238]  ? __get_vm_area_node+0x28f/0x300
[  408.495561][T15238]  ? nf_tables_newset+0x132b/0x2530
[  408.495594][T15238]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  408.495621][T15238]  ? unwind_get_return_address+0x4d/0x90
[  408.495654][T15238]  ? alloc_pages_mpol+0x3cd/0x4a0
[  408.495681][T15238]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  408.495709][T15238]  ? rcu_is_watching+0x15/0xb0
[  408.495726][T15238]  ? nf_tables_newset+0x132b/0x2530
[  408.495743][T15238]  ? nf_tables_newset+0x132b/0x2530
[  408.495761][T15238]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  408.495787][T15238]  ? nf_tables_newset+0x132b/0x2530
[  408.495806][T15238]  ? nft_table_lookup+0x211/0x230
[  408.495825][T15238]  ? nft_set_lookup+0x128/0x150
[  408.495848][T15238]  ? nft_hash_privsize+0xaf/0xf0
[  408.495875][T15238]  nf_tables_newset+0x132b/0x2530
[  408.495900][T15238]  ? __pfx_nf_tables_newset+0x10/0x10
[  408.495921][T15238]  ? nfnl_pernet+0x23/0x240
[  408.495941][T15238]  ? rcu_is_watching+0x15/0xb0
[  408.495961][T15238]  ? lock_release+0x4b/0x3e0
[  408.495989][T15238]  ? __nla_parse+0x40/0x60
[  408.496019][T15238]  nfnetlink_rcv+0x1132/0x2520
[  408.496057][T15238]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  408.496087][T15238]  ? ref_tracker_free+0x63a/0x7d0
[  408.496126][T15238]  ? __netlink_deliver_tap+0x807/0x850
[  408.496154][T15238]  ? netlink_deliver_tap+0x2e/0x1b0
[  408.496181][T15238]  ? lock_release+0x4b/0x3e0
[  408.496212][T15238]  netlink_unicast+0x82c/0x9e0
[  408.496241][T15238]  ? __pfx_netlink_unicast+0x10/0x10
[  408.496266][T15238]  ? netlink_sendmsg+0x642/0xb30
[  408.496293][T15238]  ? skb_put+0x11b/0x210
[  408.496312][T15238]  netlink_sendmsg+0x805/0xb30
[  408.496345][T15238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.496374][T15238]  ? futex_unqueue+0x22/0x240
[  408.496394][T15238]  ? aa_sock_msg_perm+0xf1/0x1d0
[  408.496412][T15238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  408.496432][T15238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.496460][T15238]  __sock_sendmsg+0x21c/0x270
[  408.496486][T15238]  ____sys_sendmsg+0x505/0x830
[  408.496508][T15238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.496532][T15238]  ? import_iovec+0x74/0xa0
[  408.496556][T15238]  ___sys_sendmsg+0x21f/0x2a0
[  408.496583][T15238]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.496606][T15238]  ? futex_wait+0x285/0x360
[  408.496647][T15238]  ? __fget_files+0x2a/0x420
[  408.496675][T15238]  ? __fget_files+0x3a0/0x420
[  408.496709][T15238]  __x64_sys_sendmsg+0x19b/0x260
[  408.496731][T15238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.496756][T15238]  ? rcu_is_watching+0x15/0xb0
[  408.496776][T15238]  ? rcu_is_watching+0x15/0xb0
[  408.496796][T15238]  do_syscall_64+0xfa/0x3b0
[  408.496825][T15238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.496844][T15238]  ? clear_bhb_loop+0x60/0xb0
[  408.496866][T15238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.496890][T15238] RIP: 0033:0x7f598ab8ebe9
[  408.496908][T15238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.496926][T15238] RSP: 002b:00007f598ba4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.496947][T15238] RAX: ffffffffffffffda RBX: 00007f598adb5fa0 RCX: 00007f598ab8ebe9
[  408.496961][T15238] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  408.496973][T15238] RBP: 00007f598ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  408.496985][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.496996][T15238] R13: 00007f598adb6038 R14: 00007f598adb5fa0 R15: 00007fff71cb2618
[  408.497018][T15238]  </TASK>
[  408.497030][T15238] Mem-Info:
[  408.784960][T15254] netlink: 'syz.1.2814': attribute type 11 has an invalid length.
[  408.788523][T15238] active_anon:10800 inactive_anon:0 isolated_anon:0
[  408.788523][T15238]  active_file:2564 inactive_file:39897 isolated_file:0
[  408.788523][T15238]  unevictable:768 dirty:65 writeback:0
[  408.788523][T15238]  slab_reclaimable:13489 slab_unreclaimable:132237
[  408.788523][T15238]  mapped:29816 shmem:2315 pagetables:1212
[  408.788523][T15238]  sec_pagetables:0 bounce:0
[  408.788523][T15238]  kernel_misc_reclaimable:0
[  408.788523][T15238]  free:1282308 free_pcp:14333 free_cma:0
[  408.967241][T15238] Node 0 active_anon:47264kB inactive_anon:0kB active_file:10256kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123272kB dirty:260kB writeback:0kB shmem:11740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13360kB pagetables:4700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  408.999222][T15238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  409.031824][T15238] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  409.074626][T15238] lowmem_reserve[]: 0 2497 2499 2499 2499
[  409.080857][T15238] Node 0 DMA32 free:1226964kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50716kB inactive_anon:0kB active_file:10256kB inactive_file:157824kB unevictable:1536kB writepending:256kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:26656kB local_pcp:8640kB free_cma:0kB
[  409.113299][ T5871] Bluetooth: hci0: command tx timeout
[  409.123569][T15238] lowmem_reserve[]: 0 0 1 1 1
[  409.128430][T15238] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  409.168265][T15238] lowmem_reserve[]: 0 0 0 0 0
[  409.178749][T15238] Node 1 Normal free:3885540kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23916kB local_pcp:12896kB free_cma:0kB
[  409.213568][T15238] lowmem_reserve[]: 0 0 0 0 0
[  409.218460][T15238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  409.236129][T15238] Node 0 DMA32: 3*4kB (UME) 24*8kB (ME) 161*16kB (M) 286*32kB (UM) 516*64kB (UME) 346*128kB (UM) 312*256kB (UM) 236*512kB (UM) 213*1024kB (UME) 5*2048kB (UM) 173*4096kB (UM) = 1226908kB
[  409.268278][T15238] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  409.283437][T15238] Node 1 Normal: 229*4kB (UE) 58*8kB (UME) 38*16kB (UME) 77*32kB (UME) 18*64kB (UME) 6*128kB (UM) 5*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3885540kB
[  409.303223][T15238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  409.312933][T15238] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  409.319030][T15259] validate_nla: 1 callbacks suppressed
[  409.319049][T15259] netlink: 'syz.0.2816': attribute type 33 has an invalid length.
[  409.325118][T15261] netlink: 'syz.1.2817': attribute type 4 has an invalid length.
[  409.334173][T15238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  409.357225][T15238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  409.368463][T15238] 43852 total pagecache pages
[  409.374230][T15238] 0 pages in swap cache
[  409.378736][T15259] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  409.404553][T15238] Free swap  = 124996kB
[  409.408833][T15238] Total swap = 124996kB
[  409.413156][T15238] 2097051 pages RAM
[  409.417037][T15238] 0 pages HighMem/MovableOnly
[  409.424994][T15238] 425660 pages reserved
[  409.430718][T15238] 0 pages cma reserved
[  409.435998][T15262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.573831][T15146] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  409.616882][T15146] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  409.643577][T15146] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  409.662199][T15146] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  409.771764][T15274] hsr0 speed is unknown, defaulting to 1000
[  409.787659][T15287] netlink: 'syz.2.2823': attribute type 1 has an invalid length.
[  409.811135][T15287] 8021q: adding VLAN 0 to HW filter on device bond4
[  409.822879][T15146] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.847166][T15287] bond4: (slave veth7): Enslaving as an active interface with a down link
[  409.892895][T15146] 8021q: adding VLAN 0 to HW filter on device team0
[  409.908302][T15287] vlan2: entered allmulticast mode
[  409.915618][T15287] veth0_to_bond: entered allmulticast mode
[  409.924464][T15287] veth0_to_bond: entered promiscuous mode
[  409.931205][T15287] veth0_to_bond: left promiscuous mode
[  409.938296][T15287] bond4: (slave vlan2): making interface the new active one
[  409.946980][T15287] veth0_to_bond: entered promiscuous mode
[  409.955632][T15287] vlan2: entered promiscuous mode
[  409.961327][T15287] bond4: (slave vlan2): Enslaving as an active interface with an up link
[  409.975308][T13759] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.982468][T13759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.039047][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.046747][ T7596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.113045][T15294] __nla_validate_parse: 8 callbacks suppressed
[  410.113067][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2826'.
[  410.129780][T15300] sctp: [Deprecated]: syz.2.2827 (pid 15300) Use of int in max_burst socket option.
[  410.129780][T15300] Use struct sctp_assoc_value instead
[  410.146817][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2826'.
[  410.168890][T15300] syz_tun: tun_net_xmit 42
[  410.376769][T15146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.385738][T15314] sctp: [Deprecated]: syz.0.2830 (pid 15314) Use of struct sctp_assoc_value in delayed_ack socket option.
[  410.385738][T15314] Use struct sctp_sack_info instead
[  410.443447][T15146] veth0_vlan: entered promiscuous mode
[  410.463522][T15146] veth1_vlan: entered promiscuous mode
[  410.513527][T15146] veth0_macvtap: entered promiscuous mode
[  410.523108][T15146] veth1_macvtap: entered promiscuous mode
[  410.559767][T15146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.584157][T15146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.609502][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2835'.
[  410.616610][T13759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.628866][T13759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.655977][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.665544][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.766199][T13759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.788435][T13759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.836757][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.849572][T15344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2840'.
[  410.850551][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.022262][ T1137] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.032114][ T1137] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.050396][T12878] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.158044][T15367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2848'.
[  411.179923][    C0] syz_tun: tun_net_xmit 42
[  411.183298][ T5871] Bluetooth: hci0: command tx timeout
[  411.223658][T15371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2850'.
[  411.232959][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'.
[  411.280650][ T5943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.322877][T15376] netlink: 'syz.2.2851': attribute type 1 has an invalid length.
[  411.338910][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2851'.
[  411.437208][ T7597] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  411.448725][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2852'.
[  411.569988][ T5943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.937215][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  411.944889][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.952438][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  411.960585][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  411.968087][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  411.968905][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.045765][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.077791][T15394] hsr0 speed is unknown, defaulting to 1000
[  412.106446][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.166144][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.195245][T15394] chnl_net:caif_netlink_parms(): no params data found
[  412.219929][    C0] syz_tun: tun_net_xmit 42
[  412.351823][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2859'.
[  412.489611][T15413] bond4 (unregistering): Released all slaves
[  412.523011][T15394] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.532970][T15394] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.540558][T15394] bridge_slave_0: entered allmulticast mode
[  412.549607][T15394] bridge_slave_0: entered promiscuous mode
[  412.568724][T15394] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.578987][T15394] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.586409][T15394] bridge_slave_1: entered allmulticast mode
[  412.594475][T15429] openvswitch: netlink: Message has -1 unknown bytes.
[  412.599051][T15394] bridge_slave_1: entered promiscuous mode
[  412.614883][ T1137] bridge_slave_0: left allmulticast mode
[  412.621050][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.634813][ T1137] veth0_to_bond: left allmulticast mode
[  412.640433][ T1137] veth0_to_bond: left promiscuous mode
[  412.646034][ T1137] bridge7: port 2(veth0_to_bond) entered disabled state
[  412.655934][ T1137] veth5: left allmulticast mode
[  412.661062][ T1137] veth5: left promiscuous mode
[  412.666057][ T1137] bridge7: port 1(veth5) entered disabled state
[  412.862072][T15441] netlink: 'syz.2.2870': attribute type 10 has an invalid length.
[  413.259646][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.268411][ T5863] Bluetooth: hci0: command tx timeout
[  413.277221][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.287532][ T1137] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  413.297359][ T1137] bond0 (unregistering): Released all slaves
[  413.307641][ T1137] bond1 (unregistering): Released all slaves
[  413.317771][ T1137] bond2 (unregistering): Released all slaves
[  413.328052][ T1137] bond3 (unregistering): Released all slaves
[  413.339333][ T1137] bond4 (unregistering): Released all slaves
[  413.356006][ T1137] bond5 (unregistering): Released all slaves
[  413.395856][T15441] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  413.476224][T15394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.503231][T15394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.513460][ T1137] : left promiscuous mode
[  413.526072][T15447] netlink: 'syz.2.2872': attribute type 1 has an invalid length.
[  413.536110][T15449] bond0: option ad_select: unable to set because the bond device is up
[  413.545541][T15449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.582455][ T1137] tipc: Disabling bearer <udp:syz2>
[  413.588567][ T1137] tipc: Left network mode
[  413.592570][T15394] team0: Port device team_slave_0 added
[  413.612830][T15394] team0: Port device team_slave_1 added
[  413.999561][ T5863] Bluetooth: hci3: command tx timeout
[  414.247643][T15394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.256787][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.285757][T15394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.319148][T15394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.342155][T15394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.376110][T15394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.564196][T15394] hsr_slave_0: entered promiscuous mode
[  414.570854][T15394] hsr_slave_1: entered promiscuous mode
[  414.578307][T15394] debugfs: 'hsr0' already exists in 'hsr'
[  414.586418][T15394] Cannot create hsr debugfs directory
[  414.700058][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  414.813931][ T1137] pim6reg (unregistering): left allmulticast mode
[  414.966403][T15495] netlink: 'syz.2.2886': attribute type 2 has an invalid length.
[  415.161519][T15507] __nla_validate_parse: 11 callbacks suppressed
[  415.161541][T15507] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2890'.
[  415.343709][ T5863] Bluetooth: hci0: command tx timeout
[  415.369734][ T1137] IPVS: stop unused estimator thread 0...
[  415.522376][T15394] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  415.544474][T15394] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  415.563764][T15394] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  415.611164][T15394] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  415.751071][T15394] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.776621][T15394] 8021q: adding VLAN 0 to HW filter on device team0
[  415.789585][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.796770][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.818143][T15560] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  415.831506][T15560] netlink: 'syz.3.2903': attribute type 10 has an invalid length.
[  415.841774][T15560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2903'.
[  415.852825][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.859975][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.873155][T15560] batadv0: entered promiscuous mode
[  415.879728][T15560] batadv0: entered allmulticast mode
[  415.886463][T15560] bridge0: port 3(batadv0) entered blocking state
[  415.895503][T15560] bridge0: port 3(batadv0) entered disabled state
[  415.905486][T15560] bridge0: port 3(batadv0) entered blocking state
[  415.912133][T15560] bridge0: port 3(batadv0) entered forwarding state
[  416.060577][ T5863] Bluetooth: hci3: command tx timeout
[  416.140572][ T1137] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  416.149892][ T1137] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  416.173207][T15584] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000
[  416.213953][T15586] netlink: 'syz.3.2911': attribute type 4 has an invalid length.
[  416.237957][T15394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.251141][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2909'.
[  416.273413][T15584] ip6_vti0: entered promiscuous mode
[  416.278851][T15584] ip6_vti0: entered allmulticast mode
[  416.336351][T15582] hsr0 speed is unknown, defaulting to 1000
[  416.344009][T15394] veth0_vlan: entered promiscuous mode
[  416.404295][T15394] veth1_vlan: entered promiscuous mode
[  416.436112][T15394] veth0_macvtap: entered promiscuous mode
[  416.448915][T15394] veth1_macvtap: entered promiscuous mode
[  416.473291][T15394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.491356][T15394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.508106][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.525766][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.575826][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.659010][T13759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.732938][ T7606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.760457][ T7606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.794834][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.806256][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.925846][T15603] tipc: New replicast peer: 255.255.255.255
[  416.949705][T15603] tipc: Enabled bearer <udp:syz2>, priority 10
[  416.990657][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'.
[  417.039979][ T1137] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  417.167524][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'.
[  417.194680][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'.
[  417.200996][T15620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'.
[  417.227089][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'.
[  417.240764][T15620] netlink: 'syz.1.2921': attribute type 7 has an invalid length.
[  417.248557][T15620] netlink: 'syz.1.2921': attribute type 8 has an invalid length.
[  417.258695][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'.
[  417.309127][T15626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'.
[  417.575746][T15655] netlink: 'syz.4.2928': attribute type 13 has an invalid length.
[  417.597464][T15646] IPVS: Scheduler module ip_vs_sip not found
[  417.606874][T15657] IPv6: Can't replace route, no match found
[  417.616373][T15646] smc: net device bond0 applied user defined pnetid SYZ2
[  417.753398][T15668] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  417.841440][T15678] netlink: 'syz.3.2940': attribute type 6 has an invalid length.
[  417.855190][T15679] pim6reg1: entered promiscuous mode
[  417.861066][T15679] pim6reg1: entered allmulticast mode
[  417.906110][T15683] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  418.061829][T15692] netlink: 'syz.3.2942': attribute type 12 has an invalid length.
[  418.085987][ T7606] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.097063][ T7606] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.106768][ T7606] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.129300][ T7606] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.140953][ T5863] Bluetooth: hci3: command tx timeout
[  418.576294][T15729] netlink: 'syz.4.2957': attribute type 1 has an invalid length.
[  418.666988][T15729] 8021q: adding VLAN 0 to HW filter on device bond13
[  418.684425][T15731] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  418.752551][T15729] vlan1: entered promiscuous mode
[  418.757639][T15729] bond13: entered promiscuous mode
[  418.777491][T15729] vlan1: entered allmulticast mode
[  418.797313][T15729] bond13: entered allmulticast mode
[  418.811298][T15739] Bluetooth: MGMT ver 1.23
[  418.906121][T15749] tipc: Resetting bearer <eth:syzkaller0>
[  418.936333][T15747] tipc: Resetting bearer <eth:syzkaller0>
[  418.995559][T15756] sctp: [Deprecated]: syz.3.2967 (pid 15756) Use of struct sctp_assoc_value in delayed_ack socket option.
[  418.995559][T15756] Use struct sctp_sack_info instead
[  419.087454][T15762] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.110148][T15762] bridge_slave_1: left allmulticast mode
[  419.115828][T15762] bridge_slave_1: left promiscuous mode
[  419.132742][T15762] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.160013][T15762] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  419.358195][T15771] nbd2: detected capacity change from 0 to 16
[  419.386941][ T5863] block nbd2: Receive control failed (result -104)
[  419.470215][T15792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.494063][T15796] bond14: entered promiscuous mode
[  419.499265][T15796] bond14: entered allmulticast mode
[  419.505046][T15796] 8021q: adding VLAN 0 to HW filter on device bond14
[  419.512678][T15792] syzkaller0: entered promiscuous mode
[  419.518168][T15792] syzkaller0: entered allmulticast mode
[  419.618275][T15791] tipc: Resetting bearer <eth:syzkaller0>
[  419.630819][T15791] tipc: Disabling bearer <eth:syzkaller0>
[  419.827461][T15815] delete_channel: no stack
[  419.856759][T15817] team0: Device gtp0 is of different type
[  419.872339][T15819] pim6reg1: entered promiscuous mode
[  419.880014][T15819] pim6reg1: entered allmulticast mode
[  419.952536][T15821] 8021q: adding VLAN 0 to HW filter on device bond6
[  419.963456][T15821] bond5: (slave bond6): making interface the new active one
[  419.983884][T15821] bond5: (slave bond6): Enslaving as an active interface with an up link
[  420.007276][ T7599] tipc: Resetting bearer <eth:syzkaller0>
[  420.056285][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  420.064835][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  420.072108][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  420.085241][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  420.100076][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  420.144000][T15835] netlink: zone id is out of range
[  420.217088][T15835] netlink: zone id is out of range
[  420.222404][ T5871] Bluetooth: hci3: command tx timeout
[  420.226228][T15831] hsr0 speed is unknown, defaulting to 1000
[  420.247346][T15835] netlink: zone id is out of range
[  420.262009][T15835] netlink: zone id is out of range
[  420.269169][T15835] netlink: zone id is out of range
[  420.275410][T15835] netlink: zone id is out of range
[  420.289642][T15835] netlink: zone id is out of range
[  420.295076][T15835] netlink: zone id is out of range
[  420.307188][T15835] netlink: zone id is out of range
[  420.343661][T15835] netlink: zone id is out of range
[  420.359358][T15831] chnl_net:caif_netlink_parms(): no params data found
[  420.391128][T15850] validate_nla: 5 callbacks suppressed
[  420.391145][T15850] netlink: 'syz.1.3003': attribute type 4 has an invalid length.
[  420.502254][T15855] __nla_validate_parse: 92 callbacks suppressed
[  420.502274][T15855] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3005'.
[  420.528455][T15831] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.536374][T15831] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.544035][T15831] bridge_slave_0: entered allmulticast mode
[  420.551670][T15831] bridge_slave_0: entered promiscuous mode
[  420.559461][T15831] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.566813][T15831] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.574173][T15831] bridge_slave_1: entered allmulticast mode
[  420.583166][T15831] bridge_slave_1: entered promiscuous mode
[  420.640213][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.685145][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.806592][T15886] unsupported nla_type 52263
[  420.854525][T15831] team0: Port device team_slave_0 added
[  420.879394][T15892] IPVS: ip_vs_edit_dest(): server weight less than zero
[  420.879990][T15831] team0: Port device team_slave_1 added
[  420.919573][T15894] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3018'.
[  420.959785][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.968183][T15896] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34
[  420.984007][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.012504][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.095941][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3018'.
[  421.116606][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.123928][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.152970][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.165499][T15911] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3022'.
[  421.220475][T15915] dvmrp0: entered allmulticast mode
[  421.236549][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3025'.
[  421.259475][T15831] hsr_slave_0: entered promiscuous mode
[  421.276568][T15831] hsr_slave_1: entered promiscuous mode
[  421.285864][T15831] debugfs: 'hsr0' already exists in 'hsr'
[  421.295372][T15831] Cannot create hsr debugfs directory
[  421.450791][T15941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3029'.
[  421.609616][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'.
[  421.630500][T15961] netem: change failed
[  421.678536][T15831] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.703623][T15831] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.724123][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'.
[  421.734651][T13758] vlan2: left promiscuous mode
[  421.756013][T15831] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.766756][T15831] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.840228][T15831] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.850641][T15831] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.865484][T15980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3042'.
[  421.952868][T15831] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.979091][T15831] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.040947][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3047'.
[  422.126241][T15831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  422.136255][T15831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  422.140822][ T5871] Bluetooth: hci1: command tx timeout
[  422.143406][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  422.184299][T15831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  422.200654][T15831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  422.216890][T16005] pim6reg1: entered promiscuous mode
[  422.230178][T16005] pim6reg1: entered allmulticast mode
[  422.354060][T15831] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.391856][T15831] 8021q: adding VLAN 0 to HW filter on device team0
[  422.428708][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.435863][ T7599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.478359][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.485543][ T7599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.534405][T16035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.565091][T16035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.578239][T16035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  422.638815][T16035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.659965][T16035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.674890][T16035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  422.754513][T16035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.767540][T16035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.809933][T16035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  422.884750][T16035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.897656][T16035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.908210][T16035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  422.984708][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.020821][ T7597] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.046099][ T7597] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.057944][ T7597] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  423.097338][ T7596] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.097614][T12878] IPVS: starting estimator thread 0...
[  423.106298][ T7596] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.121579][ T7596] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  423.146097][ T7596] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.157786][ T7596] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.166385][ T7596] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  423.199349][T15831] veth0_vlan: entered promiscuous mode
[  423.205412][ T7596] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.214303][ T7596] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.222933][T16083] IPVS: using max 38 ests per chain, 91200 per kthread
[  423.230943][ T7596] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  423.250569][T15831] veth1_vlan: entered promiscuous mode
[  423.289646][T15831] veth0_macvtap: entered promiscuous mode
[  423.300730][T15831] veth1_macvtap: entered promiscuous mode
[  423.319231][T16097] bridge0: port 3(batadv0) entered disabled state
[  423.327562][T16097] bridge_slave_1: left allmulticast mode
[  423.335706][T16097] bridge_slave_1: left promiscuous mode
[  423.342756][T16097] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.351855][T16097] bridge_slave_0: left allmulticast mode
[  423.357565][T16097] bridge_slave_0: left promiscuous mode
[  423.366331][T16097] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.437460][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.453635][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.465643][ T7597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.474605][ T7597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.485023][ T7597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.496296][T13758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.853086][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.866970][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.916432][T13759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.935120][T13759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.223946][ T5871] Bluetooth: hci1: command tx timeout
[  424.237624][T16141] netlink: 'syz.0.3083': attribute type 1 has an invalid length.
[  424.943672][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  424.951223][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  424.958453][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  424.985495][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  424.993177][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  425.192379][T16189] hsr0 speed is unknown, defaulting to 1000
[  425.232887][T16212] netlink: 'syz.0.3107': attribute type 10 has an invalid length.
[  425.408650][T16189] chnl_net:caif_netlink_parms(): no params data found
[  425.646529][T16189] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.654042][T16189] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.661913][T16189] bridge_slave_0: entered allmulticast mode
[  425.669089][T16189] bridge_slave_0: entered promiscuous mode
[  425.677488][T16189] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.685605][T16189] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.692858][T16189] bridge_slave_1: entered allmulticast mode
[  425.700526][T16189] bridge_slave_1: entered promiscuous mode
[  425.745138][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.765119][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.804441][T16189] team0: Port device team_slave_0 added
[  425.813775][T16189] team0: Port device team_slave_1 added
[  425.831132][T16248] __nla_validate_parse: 16 callbacks suppressed
[  425.831151][T16248] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3115'.
[  425.848350][T13759] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.859537][T13759] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.871151][T13759] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.897377][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.906311][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.935990][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.955662][T13759] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.965645][T13759] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.979007][T13759] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.999782][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.009466][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.040067][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.118263][T13759] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.130904][T13759] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.144188][T13759] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  426.171600][T16189] hsr_slave_0: entered promiscuous mode
[  426.182261][T16189] hsr_slave_1: entered promiscuous mode
[  426.188373][T16189] debugfs: 'hsr0' already exists in 'hsr'
[  426.213551][T16189] Cannot create hsr debugfs directory
[  426.220215][T16268] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  426.267826][T13759] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.283377][T13759] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.293332][T13759] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  426.300441][ T5863] Bluetooth: hci1: command tx timeout
[  426.328710][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'.
[  426.376095][T16288] hsr_slave_1 (unregistering): left promiscuous mode
[  426.626225][T16307] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3133'.
[  426.695937][T13759] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI
[  426.707882][T13759] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67]
[  426.717445][T13759] CPU: 0 UID: 0 PID: 13759 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) 
[  426.727093][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.737162][T13759] Workqueue: netns cleanup_net
[  426.742005][T13759] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  426.747817][T13759] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5
[  426.767447][T13759] RSP: 0018:ffffc9001bfcf4f8 EFLAGS: 00010206
[  426.773532][T13759] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff8880280d9e00
[  426.781513][T13759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  426.789508][T13759] RBP: ffff888054fcc820 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034
[  426.797483][T13759] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60
[  426.805459][T13759] R13: dffffc0000000000 R14: ffff88807545d400 R15: 1ffff1100a9f9904
[  426.813532][T13759] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  426.822484][T13759] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  426.829076][T13759] CR2: 00007f4dcd968f98 CR3: 00000000636fa000 CR4: 00000000003526f0
[  426.837057][T13759] Call Trace:
[  426.840341][T13759]  <TASK>
[  426.843276][T13759]  inetdev_event+0x2a7/0x15b0
[  426.847985][T13759]  ? __pfx_inetdev_event+0x10/0x10
[  426.853111][T13759]  notifier_call_chain+0x1b3/0x3e0
[  426.858238][T13759]  netif_close_many+0x29c/0x410
[  426.863103][T13759]  ? __pfx_netif_close_many+0x10/0x10
[  426.868548][T13759]  unregister_netdevice_many_notify+0x7b9/0x1ff0
[  426.874895][T13759]  ? __pfx___remove_nexthop+0x10/0x10
[  426.880299][T13759]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  426.887094][T13759]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  426.893374][T13759]  ? sysfs_remove_group+0x236/0x2c0
[  426.898597][T13759]  ? remove_nexthop+0x114/0x180
[  426.903461][T13759]  ops_undo_list+0x3dc/0x990
[  426.908074][T13759]  ? __pfx_ops_undo_list+0x10/0x10
[  426.913230][T13759]  ? do_raw_spin_unlock+0x122/0x240
[  426.918459][T13759]  cleanup_net+0x4c5/0x800
[  426.922911][T13759]  ? __pfx_cleanup_net+0x10/0x10
[  426.927868][T13759]  ? rcu_is_watching+0x15/0xb0
[  426.932656][T13759]  ? process_scheduled_works+0x9ef/0x17b0
[  426.938382][T13759]  ? process_scheduled_works+0x9ef/0x17b0
[  426.944104][T13759]  process_scheduled_works+0xae1/0x17b0
[  426.949662][T13759]  ? __pfx_process_scheduled_works+0x10/0x10
[  426.955648][T13759]  worker_thread+0x8a0/0xda0
[  426.960246][T13759]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  426.966585][T13759]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  426.972503][T13759]  ? __kthread_parkme+0x7b/0x200
[  426.977454][T13759]  kthread+0x70e/0x8a0
[  426.981533][T13759]  ? __pfx_worker_thread+0x10/0x10
[  426.986643][T13759]  ? __pfx_kthread+0x10/0x10
[  426.991239][T13759]  ? rcu_is_watching+0x15/0xb0
[  426.996003][T13759]  ? __pfx_kthread+0x10/0x10
[  427.000605][T13759]  ret_from_fork+0x3f9/0x770
[  427.005200][T13759]  ? __pfx_ret_from_fork+0x10/0x10
[  427.010313][T13759]  ? __switch_to_asm+0x39/0x70
[  427.015091][T13759]  ? __switch_to_asm+0x33/0x70
[  427.019863][T13759]  ? __pfx_kthread+0x10/0x10
[  427.024468][T13759]  ret_from_fork_asm+0x1a/0x30
[  427.029253][T13759]  </TASK>
[  427.032292][T13759] Modules linked in:
[  427.037652][T13759] ---[ end trace 0000000000000000 ]---
[  427.044357][ T5863] Bluetooth: hci4: command tx timeout
[  427.050357][T13759] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  427.056114][T13759] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5
[  427.076536][T13759] RSP: 0018:ffffc9001bfcf4f8 EFLAGS: 00010206
[  427.082688][T13759] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff8880280d9e00
[  427.090777][T13759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  427.098765][T13759] RBP: ffff888054fcc820 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034
[  427.107104][T13759] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60
[  427.115293][T13759] R13: dffffc0000000000 R14: ffff88807545d400 R15: 1ffff1100a9f9904
[  427.123348][T13759] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  427.132953][T13759] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  427.139558][T13759] CR2: 00007f4dcd968f98 CR3: 00000000339a2000 CR4: 00000000003526f0
[  427.147590][T13759] Kernel panic - not syncing: Fatal exception
[  427.154033][T13759] Kernel Offset: disabled
[  427.158359][T13759] Rebooting in 86400 seconds..