last executing test programs:

1m4.742246629s ago: executing program 4 (id=3911):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000004001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c"], 0x270}}, 0x0) (fail_nth: 1)

1m4.493778986s ago: executing program 4 (id=3914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000001063503040000000a0000000000000081ab7f49402a77def7b0e32846414d8e2270222967e4b96ef148f7b65c10f36863d0304c47b4ac24ab309f1e46a94a167d14cf4570c633745ad9bdb9e08474cc25d62b7d6a444cf57efb6e5d1f0ffca89a4c16fe18ab", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xb, [@union={0x10, 0x7, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x0, 0xe606}, {0x0, 0x5, 0x400}, {0x10, 0x4}, {0xf, 0x1, 0x8}, {0x4, 0x2, 0xc}, {0x1, 0x4, 0x2}, {0xa, 0x1, 0x401}]}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @fwd={0x6}, @fwd={0xc}, @const={0x3, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x8000, [{0x10, 0x1, 0x1ff}, {0x7, 0x2, 0x691}, {0x3, 0x4, 0x84}]}]}, {0x0, [0x61, 0x30, 0x30, 0x0, 0x2e, 0x30, 0x61, 0x61, 0x5f]}}, &(0x7f0000000480)=""/43, 0xef, 0x2b, 0x0, 0x6000000, 0x10000}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x39}, @ldst={0x1, 0x3, 0x2, 0x2, 0x9, 0x80, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @ldst={0x0, 0x2, 0x4, 0x9, 0x0, 0x40, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000001c0)='syzkaller\x00', 0x9a, 0xb9, &(0x7f00000003c0)=""/185, 0x100, 0x0, '\x00', r3, @fallback=0x19, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x10, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000740)=[r2, r2, r2, r2, r8, r2, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000540)=@tcp, 0x3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000", @ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)

1m3.793877173s ago: executing program 4 (id=3923):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x1000})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1000003}, 0x10)
write(r5, &(0x7f00000000c0)="2400000012005fe914f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x52)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000060a010400000000000000000a0000040900010073797a310000000010000480f8ffffff08000100647570000900020073797a3200000000140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x1000}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1000003}, 0x10) (async)
write(r5, &(0x7f00000000c0)="2400000012005fe914f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async)
write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x52) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000060a010400000000000000000a0000040900010073797a310000000010000480f8ffffff08000100647570000900020073797a3200000000140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)

1m3.042676823s ago: executing program 4 (id=3933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e24, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={r5, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="3ba9a08329c8683e3d736a29b6003559478f45", @ANYRES16=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m2.702554018s ago: executing program 4 (id=3935):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
close(r4)
r6 = socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
accept$ax25(r7, 0x0, &(0x7f0000000140)) (async)
r10 = accept$ax25(r7, 0x0, &(0x7f0000000140))
writev(r10, &(0x7f0000000300)=[{&(0x7f0000000440)="7197227487c6922d1025ba4000b5c4c7c712b1502fe7f6dbcc574a52eaca71a46fbc7a4dfab52d019404d358232f7ee824d523c92871e993ce93e2b496f546f6446a7754e39cc48a7cb205abec0ff2fc084fa96953c42789f7c59ee48040b2287e4f6ef1ddf702deddb2ea1892841f83e8bd039e92ce7cd46c78a2e92195b1999c900be8d74c2cb09fd538e969281fc42269d1facb64b53dfeb3dc1acf0e84358c804b1976958851b8b529a39462d124022fdeef0426dbdf44fdf28ff6354027666b57564d942edfcf6c03718f34fad43256be", 0xd3}, {&(0x7f0000000240)}, {&(0x7f0000000540)="c4ce065819c011db86940019823c9123fdc00332616df4f9c18bf382524d32f7f88472c5ad88782144ee341fb2872b7036030c58231c353d68970e324ae8c8fd58b25e20b1dba80d17e7974f03551a87097f81ae859e565d4ff87c915d092567e01d76638e5d8bf5b81af1d47a05cd5bcf50ceb13e6875c741b1390223d3a04c45ac4be4df687050e3b4a37b0e7d9559e9ed962abf9eba53ca404c5e743b905c727cf174a622c52bf6349d1700b9af6bc8a4e2d42b809c97eea33923cb7cd8", 0xbf}, {&(0x7f0000000380)="d78105ff579f146baae6de0ec5c4ff5db2c46512554ccac3831be8ccbfaba58be3bc827b3e680b117818888e50446e9c36cac220ea8647a894edf78e6a42da42bbae2229cdaac10d69b7f27e56b4d4b035a06b2d7445070be236845449781b9ebb891c030481265c5c36e336cdc0", 0x6e}], 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m1.722468313s ago: executing program 4 (id=3943):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = socket(0x10, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1410, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x0)
connect$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
ppoll(&(0x7f0000000000)=[{r0, 0x440}, {r2, 0x9280}, {r3, 0x2000}, {r2, 0x1}], 0x0, 0x0, 0x0, 0xffffff0b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
recvmmsg$unix(r4, &(0x7f0000003580)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/174, 0xae}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/52, 0x34}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x5, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002a80)=""/188, 0xbc}, {&(0x7f0000002b40)=""/217, 0xd9}, {&(0x7f0000002c40)=""/239, 0xef}, {&(0x7f0000002d40)=""/180, 0xb4}, {&(0x7f0000002e00)=""/153, 0x99}], 0x5, &(0x7f0000002f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f00000030c0)=""/226, 0xe2}, {&(0x7f00000031c0)=""/80, 0x50}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000003240)=""/118, 0x76}, {&(0x7f00000032c0)=""/4, 0x4}], 0x5}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/8, 0x8}], 0x2, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x5, 0x1, &(0x7f00000036c0)={0x77359400})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0)
pipe(&(0x7f0000003700)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x2c, r8, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20048840)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)

1m1.246662864s ago: executing program 32 (id=3943):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = socket(0x10, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1410, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x0)
connect$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
ppoll(&(0x7f0000000000)=[{r0, 0x440}, {r2, 0x9280}, {r3, 0x2000}, {r2, 0x1}], 0x0, 0x0, 0x0, 0xffffff0b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
recvmmsg$unix(r4, &(0x7f0000003580)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/174, 0xae}], 0x2, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/52, 0x34}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x5, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002a80)=""/188, 0xbc}, {&(0x7f0000002b40)=""/217, 0xd9}, {&(0x7f0000002c40)=""/239, 0xef}, {&(0x7f0000002d40)=""/180, 0xb4}, {&(0x7f0000002e00)=""/153, 0x99}], 0x5, &(0x7f0000002f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f00000030c0)=""/226, 0xe2}, {&(0x7f00000031c0)=""/80, 0x50}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000003240)=""/118, 0x76}, {&(0x7f00000032c0)=""/4, 0x4}], 0x5}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/8, 0x8}], 0x2, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x5, 0x1, &(0x7f00000036c0)={0x77359400})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0)
pipe(&(0x7f0000003700)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x2c, r8, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20048840)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)

11.302795689s ago: executing program 5 (id=4466):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x20})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
ioctl$sock_proto_private(r4, 0x89ee, &(0x7f0000000180)="b6812465ba2e036414a4c5af2c28cbcf1b13c5342ed10800c545af4ab0aac2d7b0ecf0b5f271c2637bf51971dadf103d6b4ea4eae9863264d19d48774ee5411c4ae484e1c4b945e134938e46d2839e2dfc942568fbad34fbd87803195426fed0e13d0fa4f0ddf8512ab03a6a3254002ebd6e2837b1490959ffb2faa6ad6d9284fcd9e81b0f11f015f0d6d610b114d06c95f9c4aa4ea59059626fd19022ce271cb92d576616614f88382a4ee115fef78785530e08c1")

10.506642004s ago: executing program 5 (id=4477):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x7, 0x6, 0x1d}, &(0x7f0000000180)=0x10)
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20})
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x800, 0x7)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0)
unshare(0x2000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x80040009, 0x0, r6}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x33, 0x0, @vifc_lcl_ifindex=r7, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

9.35205249s ago: executing program 5 (id=4488):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x83}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x97a75000)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4)
sendmmsg$inet(r2, &(0x7f0000003200)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0xcc1}], 0x1}}], 0x2, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)
syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x32815}}, 0x20}, 0x1, 0x0, 0x0, 0x4017}, 0x4000040)

3.347797665s ago: executing program 1 (id=4541):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600bc45344f11a740a303000000000000006ba050805a", @ANYRES32=0x0], 0x24}}, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x1, 0x6537, 0x9, 0x339, 0x9, 0x3, 0x6}, 0x0, &(0x7f0000000140), 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

3.078722803s ago: executing program 1 (id=4544):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000009674000010008150a3910071ee9dddc4cd01611035000000000000000000000000002ce8a811ebce4c22d6079445f5146a85efa4376b4fb541284d1e9c84cecd33cfc82ca2914caddc24bd017cefa25cb542661bcee69e906e80bc403aff47c3060e56699de9dae9d95e6aa59582b6dbdf1b1617e5523a9d6baa1fc36e20f5ffcecadbfd5bc5a662b1e1304c884062e6be52d4a61e4826f859d76dd1261a621d7e9df9bcfd9b36f5816e36b6e33720d1c3314fe0aac731624e773c38c163df74333995a7b818b91ff1fa73260294943a81099d6efa09fa7e9eea70ea80f18e19beb7b7eb34931396d1e9a8a5a02177bd2a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r13)

2.063963778s ago: executing program 1 (id=4551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xffffff94, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x20004000)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="c3e06cecbe552745a3d9864d794f3891d82e1e870e", 0x15}, 0x1, 0x0, 0x0, 0x1810}, 0x20000040)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780001"], 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x138, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4048084}, 0x1)
recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/152, 0x98}], 0x9, &(0x7f0000001780)=""/129, 0x81}, 0x101}], 0x1, 0x1, &(0x7f0000001880)={0x77359400})

1.822626868s ago: executing program 3 (id=4554):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.708789227s ago: executing program 2 (id=4556):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000000c0)=""/222, 0xde}], 0x2)
sendmmsg$inet_sctp(r0, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0x800}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x4040000}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000000c0)=""/222, 0xde}], 0x2) (async)
sendmmsg$inet_sctp(r0, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0x800}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x4040000}], 0x1, 0x0) (async)

1.70792722s ago: executing program 3 (id=4557):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$inet6(r1, &(0x7f0000000440)="df6d5f", 0x3, 0x10, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r3=>0x0})
r4 = gettid()
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

1.53543464s ago: executing program 2 (id=4559):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000004001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c"], 0x270}, 0x1, 0x0, 0x300}, 0x0)

1.420790773s ago: executing program 0 (id=4560):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.361185177s ago: executing program 3 (id=4561):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000009674000010008150a3910071ee9dddc4cd01611035000000000000000000000000002ce8a811ebce4c22d6079445f5146a85efa4376b4fb541284d1e9c84cecd33cfc82ca2914caddc24bd017cefa25cb542661bcee69e906e80bc403aff47c3060e56699de9dae9d95e6aa59582b6dbdf1b1617e5523a9d6baa1fc36e20f5ffcecadbfd5bc5a662b1e1304c884062e6be52d4a61e4826f859d76dd1261a621d7e9df9bcfd9b36f5816e36b6e33720d1c3314fe0aac731624e773c38c163df74333995a7b818b91ff1fa73260294943a81099d6efa09fa7e9eea70ea80f18e19beb7b7eb34931396d1e9a8a5a02177bd2a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r13)

1.250658104s ago: executing program 2 (id=4562):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)="1c00000021006bcd210002006e04000081", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000980)={&(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/219, 0xdb}], 0x9, &(0x7f0000000940)=""/2, 0x2}, 0xd2774fa7cddccc1d)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.123429682s ago: executing program 1 (id=4563):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0)
close(r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0)

1.016126572s ago: executing program 2 (id=4564):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x70, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x40801)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'nicvf0\x00', 0x2}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x22bf, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6}, 0x94)

897.368397ms ago: executing program 1 (id=4565):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

894.800295ms ago: executing program 0 (id=4566):
connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

856.839927ms ago: executing program 2 (id=4567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaa2aaaaaaa2089a819008100190008004519001d14020000081190787f0000017f000001005cc9d56700000000"], 0x37)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x30}}, 0x0)

762.867212ms ago: executing program 0 (id=4568):
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x13, r5, 0x4000000)
pipe(&(0x7f0000002740)) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r13, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0xc084) (async)
r14 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000000001010400000000000000000000000706001240fffe000058000e8014000180080001007f00000108000200ac14142514000180080001000a010100080002007f0000010c00028005000100010000000c000280050001003a0000001400018008000100ac1e000108000200ac14140f4f"], 0x74}, 0x1, 0x0, 0x0, 0x51}, 0x20000000)

478.86232ms ago: executing program 0 (id=4569):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe}, @IPSET_ATTR_HASHSIZE={0xffffffffffffff83}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x400}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}]}, 0x70}}, 0x0)

410.146569ms ago: executing program 5 (id=4570):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_START_NAN(r0, 0x0, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

342.21655ms ago: executing program 3 (id=4571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a001b000c0002006e6c3830323131"], 0x20}}, 0x0) (rerun: 32)
recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

286.316174ms ago: executing program 5 (id=4572):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x3}, &(0x7f00000001c0)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={<r5=>0x0, 0x1a, "4cf80e8a8ce997a39d719ad33c0d669021f5fcb0e925ae74f285"}, &(0x7f00000000c0)=0x22)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xf9a3d000)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x7, 0x200, 0xce00, 0x7f, 0xee52, 0x6e, 0xed1, r5}, &(0x7f0000000140)=0x20)

170.57161ms ago: executing program 0 (id=4573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01, 0x9000000}, 0x0)

170.169451ms ago: executing program 3 (id=4574):
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000001900000095000000000000000000000010000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

122.017863ms ago: executing program 1 (id=4575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x2e58d4b13e6fccb4)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

100.055715ms ago: executing program 0 (id=4576):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
poll(&(0x7f0000000040), 0x55, 0x0)

14.807596ms ago: executing program 5 (id=4577):
r0 = socket(0x22, 0x2, 0x2)
getpeername$unix(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

11.041632ms ago: executing program 3 (id=4578):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x29}}, &(0x7f0000000480)='GPL\x00'}, 0x90)

0s ago: executing program 2 (id=4579):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140f, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x1)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001)
recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000a80)={{r0}, 0x1, 0x1, 0x9})

kernel console output (not intermixed with test programs):

ad+0x1ad/0x2e0
[  426.128659][T15308]  genl_rcv+0x28/0x40
[  426.128678][T15308]  netlink_unicast+0x82f/0x9e0
[  426.128712][T15308]  ? __pfx_netlink_unicast+0x10/0x10
[  426.128741][T15308]  ? netlink_sendmsg+0x642/0xb30
[  426.128767][T15308]  ? skb_put+0x11b/0x210
[  426.128790][T15308]  netlink_sendmsg+0x805/0xb30
[  426.128831][T15308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.128866][T15308]  ? aa_sock_msg_perm+0xf1/0x1d0
[  426.128899][T15308]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  426.128926][T15308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.128958][T15308]  __sock_sendmsg+0x219/0x270
[  426.128988][T15308]  ____sys_sendmsg+0x505/0x830
[  426.129015][T15308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  426.129045][T15308]  ? import_iovec+0x74/0xa0
[  426.129071][T15308]  ___sys_sendmsg+0x21f/0x2a0
[  426.129095][T15308]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.129156][T15308]  ? __fget_files+0x2a/0x420
[  426.129186][T15308]  ? __fget_files+0x3a0/0x420
[  426.129228][T15308]  __x64_sys_sendmsg+0x19b/0x260
[  426.129252][T15308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  426.129284][T15308]  ? __pfx_ksys_write+0x10/0x10
[  426.129308][T15308]  ? rcu_is_watching+0x15/0xb0
[  426.129334][T15308]  ? do_syscall_64+0xbe/0x3b0
[  426.129368][T15308]  do_syscall_64+0xfa/0x3b0
[  426.129395][T15308]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.129421][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.129441][T15308]  ? clear_bhb_loop+0x60/0xb0
[  426.129466][T15308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.129485][T15308] RIP: 0033:0x7f574a18ebe9
[  426.129503][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.129522][T15308] RSP: 002b:00007f574b014038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.129544][T15308] RAX: ffffffffffffffda RBX: 00007f574a3b5fa0 RCX: 00007f574a18ebe9
[  426.129566][T15308] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  426.129579][T15308] RBP: 00007f574b014090 R08: 0000000000000000 R09: 0000000000000000
[  426.129592][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.129604][T15308] R13: 00007f574a3b6038 R14: 00007f574a3b5fa0 R15: 00007ffd97de7288
[  426.129638][T15308]  </TASK>
[  426.620171][T15316] netlink: 'syz.0.3081': attribute type 7 has an invalid length.
[  426.766056][T15321] ip6gretap1: entered promiscuous mode
[  426.861342][T15274] chnl_net:caif_netlink_parms(): no params data found
[  426.978873][T15330] lo: entered promiscuous mode
[  427.020079][T15330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.349082][ T5866] Bluetooth: hci5: command tx timeout
[  427.420677][T15274] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.428453][T15274] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.436399][T15274] bridge_slave_0: entered allmulticast mode
[  427.444862][T15274] bridge_slave_0: entered promiscuous mode
[  427.455032][T15274] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.463051][T15274] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.470885][T15274] bridge_slave_1: entered allmulticast mode
[  427.479208][T15274] bridge_slave_1: entered promiscuous mode
[  427.557495][T15353] bridge_slave_1: left allmulticast mode
[  427.564301][T15353] bridge_slave_1: left promiscuous mode
[  427.594490][T15353] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.623995][T15353] bridge_slave_0: left allmulticast mode
[  427.641372][T15353] bridge_slave_0: left promiscuous mode
[  427.647192][T15353] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.835893][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.877065][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.987426][T15372] syzkaller1: entered promiscuous mode
[  427.997337][T15372] syzkaller1: entered allmulticast mode
[  428.084575][T15274] team0: Port device team_slave_0 added
[  428.169552][T15274] team0: Port device team_slave_1 added
[  428.348641][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.355643][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.396611][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.462611][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.480666][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.522414][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.648668][T15398] syzkaller0: entered promiscuous mode
[  428.667599][T15398] syzkaller0: entered allmulticast mode
[  428.906160][T15274] hsr_slave_0: entered promiscuous mode
[  428.943784][T15274] hsr_slave_1: entered promiscuous mode
[  428.960448][T15274] debugfs: 'hsr0' already exists in 'hsr'
[  428.976419][T15274] Cannot create hsr debugfs directory
[  429.381267][ T5866] Bluetooth: hci5: command tx timeout
[  429.556431][T15454] __nla_validate_parse: 10 callbacks suppressed
[  429.556466][T15454] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3118'.
[  429.950326][T15274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.185421][T15274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.316865][T15274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.342899][T15480] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.3127'.
[  430.358313][T15480] netlink: zone id is out of range
[  430.363696][T15480] netlink: zone id is out of range
[  430.371080][T15480] netlink: zone id is out of range
[  430.376399][T15480] netlink: zone id is out of range
[  430.382041][T15480] netlink: zone id is out of range
[  430.397130][T15480] netlink: zone id is out of range
[  430.404190][T15480] netlink: zone id is out of range
[  430.419472][T15480] netlink: zone id is out of range
[  430.472787][T15274] bond0: (slave netdevsim0): Releasing backup interface
[  430.521160][T15274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.576519][T15488] bond0: (slave bond_slave_0): Releasing backup interface
[  430.602979][T15488] bond0: (slave bond_slave_1): Releasing backup interface
[  430.619552][T15488] team0: Port device team_slave_0 removed
[  430.631693][T15488] team0: Port device team_slave_1 removed
[  430.639368][T15488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.646783][T15488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.658883][T15488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.666573][T15488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.052007][T15274] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  431.098751][T15274] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  431.121878][T15506] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3135'.
[  431.160076][T15274] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  431.204969][T15274] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  431.302097][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'.
[  431.458174][ T5866] Bluetooth: hci5: command tx timeout
[  431.494436][T15274] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.551777][T15274] 8021q: adding VLAN 0 to HW filter on device team0
[  431.573387][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.580594][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.621718][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.628918][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.672363][T15525] tipc: Started in network mode
[  431.677422][T15525] tipc: Node identity d2536c67a01f, cluster identity 4711
[  431.685636][T15525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.700691][T15525] syzkaller0: entered promiscuous mode
[  431.706289][T15525] syzkaller0: entered allmulticast mode
[  431.731645][T15527] vlan1: entered promiscuous mode
[  431.736796][T15527] bridge0: entered promiscuous mode
[  431.786904][T15525] tipc: Resetting bearer <eth:syzkaller0>
[  431.874721][T15524] tipc: Resetting bearer <eth:syzkaller0>
[  431.903402][T15524] tipc: Disabling bearer <eth:syzkaller0>
[  432.260916][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3145'.
[  432.276011][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  432.324279][T15548] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  432.338475][T15546] netlink: 'syz.3.3146': attribute type 1 has an invalid length.
[  432.473582][T15557] FAULT_INJECTION: forcing a failure.
[  432.473582][T15557] name failslab, interval 1, probability 0, space 0, times 0
[  432.508319][T15557] CPU: 0 UID: 0 PID: 15557 Comm: syz.1.3148 Not tainted syzkaller #0 PREEMPT(full) 
[  432.508349][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  432.508362][T15557] Call Trace:
[  432.508371][T15557]  <TASK>
[  432.508381][T15557]  dump_stack_lvl+0x189/0x250
[  432.508411][T15557]  ? __pfx____ratelimit+0x10/0x10
[  432.508439][T15557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.508463][T15557]  ? __pfx__printk+0x10/0x10
[  432.508507][T15557]  should_fail_ex+0x414/0x560
[  432.508539][T15557]  should_failslab+0xa8/0x100
[  432.508571][T15557]  __kmalloc_cache_noprof+0x70/0x3d0
[  432.508598][T15557]  ? sctp_add_bind_addr+0x8c/0x370
[  432.508630][T15557]  sctp_add_bind_addr+0x8c/0x370
[  432.508661][T15557]  sctp_copy_local_addr_list+0x30b/0x4e0
[  432.508691][T15557]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  432.508717][T15557]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  432.508745][T15557]  ? sctp_v6_is_any+0x64/0x80
[  432.508775][T15557]  ? sctp_copy_one_addr+0x93/0x360
[  432.508804][T15557]  sctp_bind_addr_copy+0xb3/0x3c0
[  432.508831][T15557]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  432.508858][T15557]  sctp_connect_new_asoc+0x2e0/0x690
[  432.508892][T15557]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  432.508921][T15557]  ? __local_bh_enable_ip+0x12d/0x1c0
[  432.508950][T15557]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  432.508974][T15557]  ? security_sctp_bind_connect+0x7e/0x2e0
[  432.509004][T15557]  sctp_sendmsg+0x155c/0x2810
[  432.509047][T15557]  ? __pfx_sctp_sendmsg+0x10/0x10
[  432.509081][T15557]  ? aa_sk_perm+0x81e/0x950
[  432.509116][T15557]  ? __pfx_aa_sk_perm+0x10/0x10
[  432.509149][T15557]  ? sock_rps_record_flow+0x19/0x410
[  432.509176][T15557]  ? inet_sendmsg+0x2f4/0x370
[  432.509205][T15557]  __sock_sendmsg+0x19c/0x270
[  432.509240][T15557]  __sys_sendto+0x3bd/0x520
[  432.509273][T15557]  ? __pfx___sys_sendto+0x10/0x10
[  432.509300][T15557]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  432.509343][T15557]  ? __fget_files+0x3a0/0x420
[  432.509385][T15557]  ? ksys_write+0x22a/0x250
[  432.509414][T15557]  ? __pfx_ksys_write+0x10/0x10
[  432.509437][T15557]  ? rcu_is_watching+0x15/0xb0
[  432.509464][T15557]  __x64_sys_sendto+0xde/0x100
[  432.509498][T15557]  do_syscall_64+0xfa/0x3b0
[  432.509526][T15557]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.509554][T15557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.509574][T15557]  ? clear_bhb_loop+0x60/0xb0
[  432.509599][T15557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.509618][T15557] RIP: 0033:0x7f574a18ebe9
[  432.509637][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.509655][T15557] RSP: 002b:00007f574b014038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  432.509677][T15557] RAX: ffffffffffffffda RBX: 00007f574a3b5fa0 RCX: 00007f574a18ebe9
[  432.509692][T15557] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  432.509705][T15557] RBP: 00007f574b014090 R08: 0000200000000000 R09: 000000000000001c
[  432.509718][T15557] R10: 0000000004000850 R11: 0000000000000246 R12: 0000000000000002
[  432.509730][T15557] R13: 00007f574a3b6038 R14: 00007f574a3b5fa0 R15: 00007ffd97de7288
[  432.509764][T15557]  </TASK>
[  432.867871][T15562] nbd: couldn't find a device at index -373156329
[  433.087524][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.494298][T15274] veth0_vlan: entered promiscuous mode
[  433.529782][T15274] veth1_vlan: entered promiscuous mode
[  433.557695][ T5866] Bluetooth: hci5: command tx timeout
[  433.663748][T15274] veth0_macvtap: entered promiscuous mode
[  433.686056][T15274] veth1_macvtap: entered promiscuous mode
[  433.749946][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.759850][T15592] sctp: [Deprecated]: syz.2.3156 (pid 15592) Use of int in maxseg socket option.
[  433.759850][T15592] Use struct sctp_assoc_value instead
[  433.855358][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.865245][T15598] FAULT_INJECTION: forcing a failure.
[  433.865245][T15598] name failslab, interval 1, probability 0, space 0, times 0
[  433.895588][T15598] CPU: 1 UID: 0 PID: 15598 Comm: syz.3.3160 Not tainted syzkaller #0 PREEMPT(full) 
[  433.895618][T15598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  433.895632][T15598] Call Trace:
[  433.895641][T15598]  <TASK>
[  433.895650][T15598]  dump_stack_lvl+0x189/0x250
[  433.895682][T15598]  ? __pfx____ratelimit+0x10/0x10
[  433.895714][T15598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  433.895740][T15598]  ? __pfx__printk+0x10/0x10
[  433.895787][T15598]  should_fail_ex+0x414/0x560
[  433.895823][T15598]  should_failslab+0xa8/0x100
[  433.895858][T15598]  __kmalloc_cache_noprof+0x70/0x3d0
[  433.895889][T15598]  ? sctp_add_bind_addr+0x8c/0x370
[  433.895933][T15598]  sctp_add_bind_addr+0x8c/0x370
[  433.895967][T15598]  sctp_copy_local_addr_list+0x30b/0x4e0
[  433.896001][T15598]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  433.896030][T15598]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  433.896059][T15598]  ? sctp_v6_is_any+0x64/0x80
[  433.896091][T15598]  ? sctp_copy_one_addr+0x93/0x360
[  433.896122][T15598]  sctp_bind_addr_copy+0xb3/0x3c0
[  433.896150][T15598]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  433.896179][T15598]  sctp_connect_new_asoc+0x2e0/0x690
[  433.896215][T15598]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  433.896246][T15598]  ? __local_bh_enable_ip+0x12d/0x1c0
[  433.896276][T15598]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  433.896302][T15598]  ? security_sctp_bind_connect+0x7e/0x2e0
[  433.896335][T15598]  sctp_sendmsg+0x155c/0x2810
[  433.896393][T15598]  ? __pfx_sctp_sendmsg+0x10/0x10
[  433.896435][T15598]  ? aa_sk_perm+0x81e/0x950
[  433.896467][T15598]  ? __pfx_aa_sk_perm+0x10/0x10
[  433.896496][T15598]  ? sock_rps_record_flow+0x19/0x410
[  433.896522][T15598]  ? inet_sendmsg+0x2f4/0x370
[  433.896549][T15598]  __sock_sendmsg+0x19c/0x270
[  433.896576][T15598]  __sys_sendto+0x3bd/0x520
[  433.896607][T15598]  ? __pfx___sys_sendto+0x10/0x10
[  433.896631][T15598]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  433.896676][T15598]  ? __fget_files+0x3a0/0x420
[  433.896713][T15598]  ? ksys_write+0x22a/0x250
[  433.896742][T15598]  ? __pfx_ksys_write+0x10/0x10
[  433.896764][T15598]  ? rcu_is_watching+0x15/0xb0
[  433.896789][T15598]  __x64_sys_sendto+0xde/0x100
[  433.896822][T15598]  do_syscall_64+0xfa/0x3b0
[  433.896848][T15598]  ? lockdep_hardirqs_on+0x9c/0x150
[  433.896873][T15598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.896892][T15598]  ? clear_bhb_loop+0x60/0xb0
[  433.896921][T15598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.896939][T15598] RIP: 0033:0x7f9b6d18ebe9
[  433.896957][T15598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.896975][T15598] RSP: 002b:00007f9b6df17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  433.896995][T15598] RAX: ffffffffffffffda RBX: 00007f9b6d3b5fa0 RCX: 00007f9b6d18ebe9
[  433.897010][T15598] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  433.897022][T15598] RBP: 00007f9b6df17090 R08: 0000200000000000 R09: 000000000000001c
[  433.897035][T15598] R10: 0000000004000850 R11: 0000000000000246 R12: 0000000000000002
[  433.897047][T15598] R13: 00007f9b6d3b6038 R14: 00007f9b6d3b5fa0 R15: 00007ffe224ca8d8
[  433.897077][T15598]  </TASK>
[  434.228660][ T6091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.300843][T15606] netlink: 'syz.0.3162': attribute type 1 has an invalid length.
[  434.308929][T15606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3162'.
[  434.322799][ T6091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.381006][ T6091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.443515][T15610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3166'.
[  434.496591][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.605970][T15610] netlink: 'syz.3.3166': attribute type 12 has an invalid length.
[  434.627824][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.636428][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.649464][T15617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3167'.
[  434.906929][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.920741][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.626056][T15655] netlink: 'syz.1.3177': attribute type 1 has an invalid length.
[  435.718046][T15657] net_ratelimit: 219 callbacks suppressed
[  435.718071][T15657] openvswitch: netlink: Unknown key attributes 2
[  435.741095][T15659] netlink: 'syz.4.3179': attribute type 18 has an invalid length.
[  435.800857][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.839046][   T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.872516][   T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.917489][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  435.930204][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  435.941053][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  435.954384][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  435.968191][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  436.008292][ T5860] syz_tun (unregistering): left allmulticast mode
[  436.015752][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3181'.
[  436.031529][ T5860] syz_tun (unregistering): left promiscuous mode
[  436.047011][ T5860] bridge0: port 3(syz_tun) entered disabled state
[  436.097357][   T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.209040][T15663] lo speed is unknown, defaulting to 1000
[  436.614247][   T37] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  436.621938][T15696] 8021q: VLANs not supported on ip_vti0
[  436.666576][T15690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.679724][T15688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.801592][T15705] sit0: entered promiscuous mode
[  436.823591][T15705] netlink: 'syz.3.3193': attribute type 1 has an invalid length.
[  436.844032][T15705] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3193'.
[  437.016449][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'.
[  437.104788][T15718] netlink: 'syz.3.3197': attribute type 4 has an invalid length.
[  437.341004][T15663] chnl_net:caif_netlink_parms(): no params data found
[  437.583465][T15663] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.599058][T15663] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.613682][T15663] bridge_slave_0: entered allmulticast mode
[  437.627427][T15663] bridge_slave_0: entered promiscuous mode
[  437.645514][T15663] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.653126][T15663] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.661429][T15663] bridge_slave_1: entered allmulticast mode
[  437.676620][T15663] bridge_slave_1: entered promiscuous mode
[  438.007888][T15753] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20002
[  438.028136][ T5866] Bluetooth: hci0: command tx timeout
[  438.094965][T15663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.109251][T15663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.222089][T15663] team0: Port device team_slave_0 added
[  438.250750][T15663] team0: Port device team_slave_1 added
[  438.323789][T15663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.343189][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.390363][T15663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.436908][T15663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.447394][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.485459][T15663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.785912][T15663] hsr_slave_0: entered promiscuous mode
[  438.832748][T15663] hsr_slave_1: entered promiscuous mode
[  438.841085][T15663] debugfs: 'hsr0' already exists in 'hsr'
[  438.846852][T15663] Cannot create hsr debugfs directory
[  438.917934][T15783] bridge0: port 1(veth0_to_bridge) entered blocking state
[  438.932477][T15783] bridge0: port 1(veth0_to_bridge) entered disabled state
[  438.959875][T15783] veth0_to_bridge: entered allmulticast mode
[  438.970511][T15783] veth0_to_bridge: entered promiscuous mode
[  438.997291][T15786] netlink: 'syz.3.3218': attribute type 11 has an invalid length.
[  439.029062][T15786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3218'.
[  439.589465][T15663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.614057][T15663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  439.757243][T15822] delete_channel: no stack
[  439.793716][T15663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.818919][T15663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  439.925996][T15828] wg1: entered promiscuous mode
[  440.026834][T15663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.054884][T15663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  440.098172][ T5866] Bluetooth: hci0: command tx timeout
[  440.170147][T15848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3234'.
[  440.184793][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  440.210818][T15663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.236151][T15663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  440.356204][T15853] raw_sendmsg: syz.0.3236 forgot to set AF_INET. Fix it!
[  440.569410][T15859] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3238'.
[  440.593726][T15663] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  440.632599][T15663] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  440.671176][T15868] netlink: 'syz.1.3241': attribute type 3 has an invalid length.
[  440.672671][T15663] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  440.749317][T15663] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  441.109454][T15663] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.156136][T15663] 8021q: adding VLAN 0 to HW filter on device team0
[  441.186631][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.193846][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.246851][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.254076][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.600920][T15905] FAULT_INJECTION: forcing a failure.
[  441.600920][T15905] name failslab, interval 1, probability 0, space 0, times 0
[  441.647499][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.3.3251 Not tainted syzkaller #0 PREEMPT(full) 
[  441.647536][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  441.647550][T15905] Call Trace:
[  441.647560][T15905]  <TASK>
[  441.647570][T15905]  dump_stack_lvl+0x189/0x250
[  441.647602][T15905]  ? __pfx____ratelimit+0x10/0x10
[  441.647635][T15905]  ? __pfx_dump_stack_lvl+0x10/0x10
[  441.647662][T15905]  ? __pfx__printk+0x10/0x10
[  441.647710][T15905]  should_fail_ex+0x414/0x560
[  441.647747][T15905]  should_failslab+0xa8/0x100
[  441.647781][T15905]  __kmalloc_cache_noprof+0x70/0x3d0
[  441.647811][T15905]  ? sctp_add_bind_addr+0x8c/0x370
[  441.647845][T15905]  sctp_add_bind_addr+0x8c/0x370
[  441.647879][T15905]  sctp_copy_local_addr_list+0x30b/0x4e0
[  441.647911][T15905]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  441.647939][T15905]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  441.647970][T15905]  ? sctp_v6_is_any+0x64/0x80
[  441.648000][T15905]  ? sctp_copy_one_addr+0x93/0x360
[  441.648039][T15905]  sctp_bind_addr_copy+0xb3/0x3c0
[  441.648074][T15905]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  441.648104][T15905]  sctp_connect_new_asoc+0x2e0/0x690
[  441.648141][T15905]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  441.648181][T15905]  ? __local_bh_enable_ip+0x12d/0x1c0
[  441.648214][T15905]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  441.648240][T15905]  ? security_sctp_bind_connect+0x7e/0x2e0
[  441.648273][T15905]  sctp_sendmsg+0x155c/0x2810
[  441.648322][T15905]  ? __pfx_sctp_sendmsg+0x10/0x10
[  441.648360][T15905]  ? aa_sk_perm+0x81e/0x950
[  441.648397][T15905]  ? __pfx_aa_sk_perm+0x10/0x10
[  441.648434][T15905]  ? sock_rps_record_flow+0x19/0x410
[  441.648467][T15905]  ? inet_sendmsg+0x2f4/0x370
[  441.648499][T15905]  __sock_sendmsg+0x19c/0x270
[  441.648532][T15905]  __sys_sendto+0x3bd/0x520
[  441.648569][T15905]  ? __pfx___sys_sendto+0x10/0x10
[  441.648599][T15905]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  441.648646][T15905]  ? __fget_files+0x3a0/0x420
[  441.648694][T15905]  ? ksys_write+0x22a/0x250
[  441.648726][T15905]  ? __pfx_ksys_write+0x10/0x10
[  441.648751][T15905]  ? rcu_is_watching+0x15/0xb0
[  441.648778][T15905]  __x64_sys_sendto+0xde/0x100
[  441.648813][T15905]  do_syscall_64+0xfa/0x3b0
[  441.648842][T15905]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.648870][T15905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.648891][T15905]  ? clear_bhb_loop+0x60/0xb0
[  441.648917][T15905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.648938][T15905] RIP: 0033:0x7f9b6d18ebe9
[  441.648958][T15905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.648977][T15905] RSP: 002b:00007f9b6df17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  441.649002][T15905] RAX: ffffffffffffffda RBX: 00007f9b6d3b5fa0 RCX: 00007f9b6d18ebe9
[  441.649019][T15905] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  441.649033][T15905] RBP: 00007f9b6df17090 R08: 0000200000000000 R09: 000000000000001c
[  441.649048][T15905] R10: 0000000004000850 R11: 0000000000000246 R12: 0000000000000002
[  441.649063][T15905] R13: 00007f9b6d3b6038 R14: 00007f9b6d3b5fa0 R15: 00007ffe224ca8d8
[  441.649100][T15905]  </TASK>
[  442.148132][T15663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.178035][ T5866] Bluetooth: hci0: command tx timeout
[  442.303613][T15663] veth0_vlan: entered promiscuous mode
[  442.319673][T15663] veth1_vlan: entered promiscuous mode
[  442.385844][T15663] veth0_macvtap: entered promiscuous mode
[  442.414273][T15663] veth1_macvtap: entered promiscuous mode
[  442.494167][T15663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.526478][T15663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.599633][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.612522][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.642720][T15930] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  442.675344][T15932] netlink: 'syz.3.3259': attribute type 10 has an invalid length.
[  442.684970][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.961328][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.985343][T15948] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  443.002374][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'.
[  443.040598][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'.
[  443.104597][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.146332][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.294248][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.305142][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.353576][T15961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.511060][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'.
[  443.526593][T15971] bridge_slave_1: left allmulticast mode
[  443.532381][T15971] bridge_slave_1: left promiscuous mode
[  443.541771][T15971] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.556204][T15971] bridge_slave_0: left allmulticast mode
[  443.588342][T15971] bridge_slave_0: left promiscuous mode
[  443.618327][T15971] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.395551][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  444.408801][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  444.416839][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  444.426083][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  444.434061][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  444.469252][ T6114] tipc: Node number set to 1917611111
[  444.562022][ T1149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.720056][T16010] .: renamed from veth1_vlan (while UP)
[  444.735755][T16013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3279'.
[  444.862969][ T1149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.940152][T16019] netlink: 'syz.4.3281': attribute type 1 has an invalid length.
[  445.011011][ T1149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.130060][T15998] lo speed is unknown, defaulting to 1000
[  445.471683][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.980083][T16043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3286'.
[  446.135783][ T1149] veth0_to_bridge: left allmulticast mode
[  446.159724][ T1149] veth0_to_bridge: left promiscuous mode
[  446.175218][ T1149] bridge0: port 1(veth0_to_bridge) entered disabled state
[  446.398580][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'.
[  446.501863][ T5866] Bluetooth: hci1: command tx timeout
[  447.064680][ T1149] dvmrp1 (unregistering): left allmulticast mode
[  447.760982][ T1149] bond0 (unregistering): Released all slaves
[  448.281874][ T1149] bond1 (unregistering): Released all slaves
[  448.480241][ T1149] team0: Port device bond2 removed
[  448.487157][ T1149] bond2 (unregistering): Released all slaves
[  448.577771][ T5866] Bluetooth: hci1: command tx timeout
[  448.664695][ T1149] tipc: Disabling bearer <eth:syzkaller0>
[  448.751224][ T1149] tipc: Disabling bearer <udp:syz2>
[  448.780797][ T1149] tipc: Left network mode
[  448.858412][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3292'.
[  448.918920][T16071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.357878][T15998] chnl_net:caif_netlink_parms(): no params data found
[  449.844966][T16003] Set syz1 is full, maxelem 65536 reached
[  449.942505][T16097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.991572][T16115] netlink: 'syz.2.3299': attribute type 10 has an invalid length.
[  450.038614][T16103] syzkaller0: entered promiscuous mode
[  450.044154][T16103] syzkaller0: entered allmulticast mode
[  450.170704][T16097] tipc: Resetting bearer <eth:syzkaller0>
[  450.206327][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.256614][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'.
[  450.271217][T16115] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  450.303554][T16101] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3297'.
[  450.319968][T15998] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.346800][T15998] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.375822][T15998] bridge_slave_0: entered allmulticast mode
[  450.446602][T15998] bridge_slave_0: entered promiscuous mode
[  450.499307][T16103] bridge0: port 1(
) entered blocking state
[  450.505540][T16103] bridge0: port 1(
) entered forwarding state
[  450.657927][ T5866] Bluetooth: hci1: command tx timeout
[  450.685867][T16096] tipc: Resetting bearer <eth:syzkaller0>
[  450.770616][T16096] tipc: Disabling bearer <eth:syzkaller0>
[  450.837065][T15998] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.876902][T15998] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.887821][T15998] bridge_slave_1: entered allmulticast mode
[  450.904675][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'.
[  450.918765][T15998] bridge_slave_1: entered promiscuous mode
[  450.966776][ T1149] hsr_slave_0: left promiscuous mode
[  450.977190][ T1149] hsr_slave_1: left promiscuous mode
[  451.024652][ T1149] veth1_macvtap: left promiscuous mode
[  451.039133][ T1149] veth0_macvtap: left promiscuous mode
[  451.969007][  T164] smc: removing ib device syz0
[  452.253599][ T6114] lo speed is unknown, defaulting to 1000
[  452.301542][ T6114] syz0: Port: 1 Link DOWN
[  452.353872][T15998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.434341][T15998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.533999][T16169] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3313'.
[  452.653991][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'.
[  452.740541][ T5866] Bluetooth: hci1: command tx timeout
[  452.781511][T15998] team0: Port device team_slave_0 added
[  452.815053][T15998] team0: Port device team_slave_1 added
[  452.911721][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'.
[  452.950531][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'.
[  453.268330][T15998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.296808][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.381819][T15998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.470792][T16189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.571109][T16207] tipc: Resetting bearer <eth:syzkaller0>
[  453.577293][T16193] syzkaller0: entered promiscuous mode
[  453.606860][T16193] syzkaller0: entered allmulticast mode
[  453.691086][T16178] tipc: Resetting bearer <eth:syzkaller0>
[  453.839244][T16178] tipc: Disabling bearer <eth:syzkaller0>
[  453.935333][T15998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.958039][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.996758][T15998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.007950][T16211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3322'.
[  454.129847][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'.
[  454.298992][T16229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3325'.
[  454.784210][T16248] netlink: 'syz.4.3334': attribute type 1 has an invalid length.
[  454.809083][T16248] netlink: 'syz.4.3334': attribute type 4 has an invalid length.
[  454.824995][T15998] hsr_slave_0: entered promiscuous mode
[  454.833945][T16248] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3334'.
[  454.872559][T15998] hsr_slave_1: entered promiscuous mode
[  454.893438][T15998] debugfs: 'hsr0' already exists in 'hsr'
[  454.918596][T15998] Cannot create hsr debugfs directory
[  455.473813][T16267] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  455.490895][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3340'.
[  455.531439][T16267] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3339'.
[  455.844419][T16274] dummy0: entered promiscuous mode
[  455.929184][T16276] sctp: [Deprecated]: syz.2.3344 (pid 16276) Use of int in maxseg socket option.
[  455.929184][T16276] Use struct sctp_assoc_value instead
[  456.468700][T16288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.511321][T16283] tipc: Resetting bearer <eth:syzkaller0>
[  456.518382][T16283] tap0: tun_chr_ioctl cmd 1074025672
[  456.523727][T16283] tap0: ignored: set checksum disabled
[  456.764037][T16292] syzkaller0: entered promiscuous mode
[  456.800648][T16292] syzkaller0: entered allmulticast mode
[  456.871174][T16277] tipc: Resetting bearer <eth:syzkaller0>
[  456.918513][   T30] audit: type=1107 audit(1755799830.881:4): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>����%�NBcҤ�� ��&��6��|ċV�E����g�\�(���b�`��"��5j���$����8�o�T|����M,n���"3��yJ8u~��Ҹ/A���1`���f��������2��#_n=�k�������d��m������?�vA[޴���l�'
[  456.968788][T16277] tipc: Disabling bearer <eth:syzkaller0>
[  457.008781][T16320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.269168][ T1149] IPVS: stop unused estimator thread 0...
[  458.173336][T16367] netlink: 'syz.2.3363': attribute type 10 has an invalid length.
[  458.495564][ T1149] bond3 (unregistering): (slave geneve2): Releasing active interface
[  458.849146][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.861160][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.872655][ T1149] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  458.884096][ T1149] bond0 (unregistering): Released all slaves
[  458.982317][ T1149] bond1 (unregistering): Released all slaves
[  459.000469][ T1149] bond2 (unregistering): Released all slaves
[  459.096098][ T1149] bond3 (unregistering): Released all slaves
[  459.192051][ T1149] bond4 (unregistering): (slave veth5): Releasing active interface
[  459.202938][ T1149] bond4 (unregistering): Released all slaves
[  459.273282][T16367] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  459.482974][T16375] __nla_validate_parse: 7 callbacks suppressed
[  459.482996][T16375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3367'.
[  459.484039][ T1149] tipc: Disabling bearer <udp:syz1>
[  459.520040][ T1149] tipc: Left network mode
[  459.535049][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3368'.
[  459.544754][T16373] team0: Device gtp0 is of different type
[  459.595267][T16375] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.604361][T16375] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.621297][ T1149] IPVS: stopping master sync thread 12887 ...
[  459.883587][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'.
[  459.987438][T16393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3372'.
[  460.279651][T15998] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  460.447320][T15998] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  460.492323][T15998] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  460.531364][T15998] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  460.853421][ T1149] hsr_slave_0: left promiscuous mode
[  460.876110][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.906797][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.113050][ T1149] vlan0: left allmulticast mode
[  461.145166][ T1149] veth0_vlan: left allmulticast mode
[  461.168326][ T1149] vlan0: left promiscuous mode
[  461.187308][ T1149] veth1_macvtap: left promiscuous mode
[  461.226943][ T1149] veth0_macvtap: left promiscuous mode
[  461.243896][ T1149] veth1_vlan: left promiscuous mode
[  461.288351][ T1149] veth0_vlan: left promiscuous mode
[  461.622816][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'.
[  463.555885][T16427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  463.811652][T16499] netlink: 'syz.1.3386': attribute type 1 has an invalid length.
[  463.886090][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3386'.
[  463.917105][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3388'.
[  463.942834][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'.
[  464.003774][T16499] 8021q: adding VLAN 0 to HW filter on device bond2
[  464.071876][T16520] netlink: 'syz.4.3391': attribute type 1 has an invalid length.
[  464.186845][T16514] bond2 (unregistering): Released all slaves
[  464.320926][T16522] bond1: (slave bridge2): making interface the new active one
[  464.330822][T16522] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  464.355258][T15998] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.385660][T15998] 8021q: adding VLAN 0 to HW filter on device team0
[  464.454796][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.462037][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.579122][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.586441][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.685418][ T1149] IPVS: stop unused estimator thread 0...
[  465.331020][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.377924][T16562] bridge0: port 3(syz_tun) entered blocking state
[  465.386922][T16562] bridge0: port 3(syz_tun) entered disabled state
[  465.405561][T16562] syz_tun: entered allmulticast mode
[  465.419170][T16562] syz_tun: entered promiscuous mode
[  465.425066][T16562] bridge0: port 3(syz_tun) entered blocking state
[  465.431637][T16562] bridge0: port 3(syz_tun) entered forwarding state
[  465.471892][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3402'.
[  465.599902][T15998] veth0_vlan: entered promiscuous mode
[  465.669893][T15998] veth1_vlan: entered promiscuous mode
[  465.673136][T16571] netlink: 'syz.2.3405': attribute type 1 has an invalid length.
[  465.775579][T15998] veth0_macvtap: entered promiscuous mode
[  465.806086][T16575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3406'.
[  465.834484][T15998] veth1_macvtap: entered promiscuous mode
[  465.877483][T16577] netlink: 'syz.3.3407': attribute type 2 has an invalid length.
[  465.903506][T16580] netlink: 'syz.4.3408': attribute type 83 has an invalid length.
[  465.905712][T16577] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3407'.
[  465.929305][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.961301][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.015106][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.044929][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.097812][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.135970][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.351249][T16593] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.358548][T16593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.366133][T16593] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.373371][T16593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.492853][T16593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.531580][T16590] lo speed is unknown, defaulting to 1000
[  466.566993][T16590] lo speed is unknown, defaulting to 1000
[  466.597277][T16604] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3416'.
[  466.622672][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.634846][T16590] lo speed is unknown, defaulting to 1000
[  466.651999][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.765477][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.776282][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.106275][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'.
[  467.235753][T16621] syzkaller0: entered promiscuous mode
[  467.246641][T16621] syzkaller0: entered allmulticast mode
[  467.323774][T16590] infiniband syz0: set active
[  467.346631][T16590] infiniband syz0: added lo
[  467.370769][T16590] syz0: rxe_create_cq: returned err = -12
[  467.398157][T16590] infiniband syz0: Couldn't create ib_mad CQ
[  467.405539][T16590] infiniband syz0: Couldn't open port 1
[  467.470675][T16590] RDS/IB: syz0: added
[  467.481619][T16590] smc: adding ib device syz0 with port count 1
[  467.499536][T16590] smc:    ib device syz0 port 1 has pnetid 
[  468.121574][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'.
[  468.131480][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'.
[  469.139050][ T8754] lo speed is unknown, defaulting to 1000
[  469.146193][T16637] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3426'.
[  469.172775][    T9] lo speed is unknown, defaulting to 1000
[  469.214425][T16590] lo speed is unknown, defaulting to 1000
[  469.783731][T16669] netlink: 'syz.0.3434': attribute type 1 has an invalid length.
[  469.791999][T16669] netlink: 'syz.0.3434': attribute type 3 has an invalid length.
[  469.799935][T16669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3434'.
[  469.827828][  T980] IPVS: starting estimator thread 0...
[  469.879017][T16670] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  469.933568][T16674] IPVS: using max 27 ests per chain, 64800 per kthread
[  470.058737][T16682] x_tables: ip_tables: udp match: only valid for protocol 17
[  470.120654][T16590] lo speed is unknown, defaulting to 1000
[  470.370887][T16695] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3441'.
[  470.580186][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'.
[  470.939202][T16590] lo speed is unknown, defaulting to 1000
[  471.434506][T16741] openvswitch: netlink: IPv6 tunnel dst address is zero
[  471.523790][ T5866] block nbd0: Receive control failed (result -32)
[  471.529045][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3451'.
[  471.565356][T16745] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  471.795003][T16590] lo speed is unknown, defaulting to 1000
[  471.806873][T16752] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3454'.
[  471.924414][T16756] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3456'.
[  472.163667][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'.
[  472.206805][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'.
[  472.444498][ T5937] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/1
[  472.461996][ T5937] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22
[  472.517298][T16590] lo speed is unknown, defaulting to 1000
[  472.639741][T16778] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  472.807930][T16789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'.
[  472.812274][T16788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3467'.
[  472.894708][T16788] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.903585][T16788] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.049918][T16590] lo speed is unknown, defaulting to 1000
[  473.097482][T16798] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3470'.
[  473.200966][T16805] ieee802154 phy1 wpan1: encryption failed: -22
[  473.331247][T16809] syzkaller1: entered promiscuous mode
[  473.337237][T16809] syzkaller1: entered allmulticast mode
[  473.396377][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'.
[  473.746111][T16838] netlink: 'syz.4.3477': attribute type 1 has an invalid length.
[  473.862560][T16590] lo speed is unknown, defaulting to 1000
[  474.130742][T16850] sctp: [Deprecated]: syz.4.3480 (pid 16850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  474.130742][T16850] Use struct sctp_sack_info instead
[  474.578389][T16590] lo speed is unknown, defaulting to 1000
[  474.726967][T16867] netlink: 'syz.4.3485': attribute type 11 has an invalid length.
[  474.814674][T16873] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  474.968434][T16879] netlink: 'syz.3.3490': attribute type 1 has an invalid length.
[  474.991476][T16879] veth1_macvtap: left promiscuous mode
[  475.009361][T16884] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  475.155511][T16884] 8021q: adding VLAN 0 to HW filter on device bond3
[  475.183429][T16879] tipc: Enabled bearer <eth:vlan1>, priority 12
[  475.336004][T16889] bond3: (slave geneve2): making interface the new active one
[  475.355103][T16889] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  475.523073][T16904] bridge_slave_0: left allmulticast mode
[  475.587311][T16904] bridge_slave_0: left promiscuous mode
[  475.619144][T16904] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.648817][T16904] bridge_slave_1: left allmulticast mode
[  475.661880][T16904] bridge_slave_1: left promiscuous mode
[  475.667943][T16904] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.685958][T16904] bond0: (slave bond_slave_0): Releasing backup interface
[  475.716695][T16904] bond0: (slave bond_slave_1): Releasing backup interface
[  475.737491][T16904] team0: Port device team_slave_0 removed
[  475.780253][T16904] team0: Port device team_slave_1 removed
[  475.792148][T16904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.800074][T16904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.811614][T16904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.827292][T16904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.897691][T16921] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  475.909562][T16921] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode
[  475.933597][T16921] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode
[  475.973522][T16921] tipc: Resetting bearer <eth:syzkaller0>
[  476.090991][T16933] __nla_validate_parse: 7 callbacks suppressed
[  476.091012][T16933] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3503'.
[  476.246419][T16939] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3506'.
[  476.300257][T16939] netlink: 'syz.3.3506': attribute type 1 has an invalid length.
[  476.328609][T16939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3506'.
[  476.748490][T16964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3513'.
[  476.810129][T16966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'.
[  476.866160][T16971] netlink: 'syz.0.3514': attribute type 11 has an invalid length.
[  476.932505][T16971] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3514'.
[  477.262666][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'.
[  477.294148][T16990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3518'.
[  477.466298][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'.
[  477.507787][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'.
[  477.753523][T17008] netlink: 'syz.4.3526': attribute type 16 has an invalid length.
[  477.763594][T17011] macvtap1: entered allmulticast mode
[  478.264377][T17035] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003
[  478.325118][T17036] netlink: 'syz.4.3535': attribute type 11 has an invalid length.
[  478.714266][T17058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  479.255211][T17075] netlink: 'syz.0.3544': attribute type 1 has an invalid length.
[  479.278106][T17075] netlink: 'syz.0.3544': attribute type 3 has an invalid length.
[  479.298078][T17075] NCSI netlink: No device for ifindex 131080
[  480.381329][T17112] veth1_macvtap: entered promiscuous mode
[  480.415008][T17112] veth1_macvtap: left promiscuous mode
[  480.733301][T17123] netlink: 'syz.2.3554': attribute type 1 has an invalid length.
[  482.150378][T17160] netlink: 'syz.4.3566': attribute type 11 has an invalid length.
[  482.176087][T17160] __nla_validate_parse: 15 callbacks suppressed
[  482.176110][T17160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3566'.
[  482.298350][T17165] sctp: [Deprecated]: syz.3.3567 (pid 17165) Use of int in max_burst socket option.
[  482.298350][T17165] Use struct sctp_assoc_value instead
[  482.485377][T17169] syzkaller0: entered allmulticast mode
[  482.736779][T17172] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3572'.
[  483.308514][T17194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3573'.
[  483.779134][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'.
[  484.133494][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3579'.
[  484.264457][T17221] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3581'.
[  484.282780][T17228] netlink: zone id is out of range
[  484.313442][T17228] netlink: zone id is out of range
[  484.321107][T17228] netlink: zone id is out of range
[  484.340111][T17228] netlink: zone id is out of range
[  484.357663][T17228] netlink: zone id is out of range
[  484.376193][T17228] netlink: zone id is out of range
[  484.396628][T17228] netlink: zone id is out of range
[  484.424456][T17228] netlink: zone id is out of range
[  484.430069][T17228] netlink: zone id is out of range
[  484.447794][T17228] netlink: zone id is out of range
[  484.588169][T17237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3584'.
[  484.603278][T17236] tipc: Started in network mode
[  484.608609][T17236] tipc: Node identity 66117c1d8101, cluster identity 4711
[  484.616040][T17236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.645812][T17236] syzkaller0: entered promiscuous mode
[  484.663391][T17236] syzkaller0: entered allmulticast mode
[  484.772251][T17243] syz.1.3588: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  484.809000][T17243] CPU: 1 UID: 0 PID: 17243 Comm: syz.1.3588 Not tainted syzkaller #0 PREEMPT(full) 
[  484.809048][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  484.809082][T17243] Call Trace:
[  484.809091][T17243]  <TASK>
[  484.809103][T17243]  dump_stack_lvl+0x189/0x250
[  484.809141][T17243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.809181][T17243]  ? __pfx__printk+0x10/0x10
[  484.809213][T17243]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  484.809257][T17243]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  484.809288][T17243]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  484.809331][T17243]  warn_alloc+0x214/0x310
[  484.809365][T17243]  ? stack_depot_save_flags+0x40/0x860
[  484.809398][T17243]  ? __pfx_warn_alloc+0x10/0x10
[  484.809434][T17243]  ? kasan_save_track+0x4f/0x80
[  484.809462][T17243]  ? xskq_create+0x56/0x170
[  484.809488][T17243]  ? xsk_init_queue+0xb0/0x110
[  484.809516][T17243]  ? xsk_setsockopt+0x4dc/0x8d0
[  484.809539][T17243]  ? do_sock_setsockopt+0x179/0x1b0
[  484.809591][T17243]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  484.809610][T17243]  ? do_syscall_64+0xfa/0x3b0
[  484.809651][T17243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.809683][T17243]  __vmalloc_node_range_noprof+0x125/0x12f0
[  484.809752][T17243]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  484.809794][T17243]  ? __kasan_kmalloc+0x93/0xb0
[  484.809829][T17243]  vmalloc_user_noprof+0xad/0xf0
[  484.809861][T17243]  ? xskq_create+0xbf/0x170
[  484.809891][T17243]  xskq_create+0xbf/0x170
[  484.809924][T17243]  xsk_init_queue+0xb0/0x110
[  484.809992][T17243]  xsk_setsockopt+0x4dc/0x8d0
[  484.810023][T17243]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.810051][T17243]  ? __pfx_aa_sk_perm+0x10/0x10
[  484.810088][T17243]  ? aa_sock_opt_perm+0xff/0x1b0
[  484.810118][T17243]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  484.810143][T17243]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.810172][T17243]  do_sock_setsockopt+0x179/0x1b0
[  484.810212][T17243]  __x64_sys_setsockopt+0x13f/0x1b0
[  484.810241][T17243]  do_syscall_64+0xfa/0x3b0
[  484.810272][T17243]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.810333][T17243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.810357][T17243]  ? clear_bhb_loop+0x60/0xb0
[  484.810395][T17243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.810419][T17243] RIP: 0033:0x7f574a18ebe9
[  484.810440][T17243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.810461][T17243] RSP: 002b:00007f574b014038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  484.810485][T17243] RAX: ffffffffffffffda RBX: 00007f574a3b5fa0 RCX: 00007f574a18ebe9
[  484.810502][T17243] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  484.810515][T17243] RBP: 00007f574a211e19 R08: 0000000000000004 R09: 0000000000000000
[  484.810530][T17243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.810544][T17243] R13: 00007f574a3b6038 R14: 00007f574a3b5fa0 R15: 00007ffd97de7288
[  484.810581][T17243]  </TASK>
[  484.813134][T17243] Mem-Info:
[  485.170001][T17243] active_anon:5107 inactive_anon:0 isolated_anon:0
[  485.170001][T17243]  active_file:3798 inactive_file:40007 isolated_file:0
[  485.170001][T17243]  unevictable:768 dirty:147 writeback:0
[  485.170001][T17243]  slab_reclaimable:11784 slab_unreclaimable:131590
[  485.170001][T17243]  mapped:29748 shmem:1358 pagetables:1690
[  485.170001][T17243]  sec_pagetables:0 bounce:0
[  485.170001][T17243]  kernel_misc_reclaimable:0
[  485.170001][T17243]  free:1155551 free_pcp:18535 free_cma:0
[  485.263800][T17248] tipc: Resetting bearer <eth:syzkaller0>
[  485.281897][T17243] Node 0 active_anon:20328kB inactive_anon:0kB active_file:15192kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118992kB dirty:588kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13624kB pagetables:6584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  485.299054][T17233] tipc: Resetting bearer <eth:syzkaller0>
[  485.326052][T17243] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  485.412308][T17243] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  485.413088][T17233] tipc: Disabling bearer <eth:syzkaller0>
[  485.457149][T17243] lowmem_reserve[]: 0 2497 2499 2499 2499
[  485.477621][T17243] Node 0 DMA32 free:710816kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20484kB inactive_anon:0kB active_file:15192kB inactive_file:158248kB unevictable:1536kB writepending:588kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:55520kB local_pcp:38032kB free_cma:0kB
[  485.531448][T17243] lowmem_reserve[]: 0 0 1 1 1
[  485.536259][T17243] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  485.569434][T17243] lowmem_reserve[]: 0 0 0 0 0
[  485.647954][T17243] Node 1 Normal free:3896016kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:7808kB free_cma:0kB
[  485.695442][T17260] bond0: (slave wlan1): Releasing backup interface
[  485.761161][T17243] lowmem_reserve[]: 0 0 0 0 0
[  485.766362][T17243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  485.793706][T17243] Node 0 DMA32: 1*4kB (E) 0*8kB 4*16kB (UE) 15*32kB (ME) 3*64kB (ME) 2*128kB (E) 1*256kB (E) 1*512kB (E) 4*1024kB (UM) 2*2048kB (UE) 171*4096kB (M) = 710372kB
[  485.817901][T17269] veth0_to_batadv: entered promiscuous mode
[  485.828109][T17269] veth0_to_batadv: entered allmulticast mode
[  485.860897][T17243] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  485.926256][T17243] Node 1 Normal: 198*4kB (UE) 49*8kB (UME) 45*16kB (UME) 73*32kB (UME) 35*64kB (UME) 5*128kB (UM) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896016kB
[  485.999345][T17243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  486.038080][T17243] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  486.064789][T17243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  486.087310][T17243] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  486.126298][T17243] 45159 total pagecache pages
[  486.142312][T17243] 0 pages in swap cache
[  486.146544][T17243] Free swap  = 124996kB
[  486.183777][T17243] Total swap = 124996kB
[  486.194256][T17243] 2097051 pages RAM
[  486.198920][T17243] 0 pages HighMem/MovableOnly
[  486.203881][T17243] 425656 pages reserved
[  486.210570][T17243] 0 pages cma reserved
[  486.359525][T17294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3600'.
[  486.571595][T17305] tipc: New replicast peer: 255.255.255.255
[  486.594266][T17305] tipc: Enabled bearer <udp:s>, priority 10
[  486.739884][T17315] syzkaller1: entered promiscuous mode
[  486.745465][T17315] syzkaller1: entered allmulticast mode
[  486.856746][T17322] netlink: 'syz.2.3607': attribute type 10 has an invalid length.
[  486.889788][T17319] netlink: 'syz.1.3606': attribute type 1 has an invalid length.
[  486.921128][T17319] netlink: 'syz.1.3606': attribute type 1 has an invalid length.
[  487.225995][T17328] syzkaller0: entered promiscuous mode
[  487.250921][T17328] syzkaller0: entered allmulticast mode
[  487.541664][T17350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3611'.
[  487.708372][ T5937] tipc: Node number set to 1184990212
[  487.760810][T17357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3614'.
[  490.221422][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'.
[  490.689582][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'.
[  490.922985][T17398] net_ratelimit: 15 callbacks suppressed
[  490.923008][T17398] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  491.131142][T17422] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  491.409291][T17437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3635'.
[  491.491266][T17437] netlink: 'syz.4.3635': attribute type 2 has an invalid length.
[  491.538322][T17437] netlink: 'syz.4.3635': attribute type 2 has an invalid length.
[  491.746902][T17443] bridge2: the hash_elasticity option has been deprecated and is always 16
[  491.789297][T17455] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3640'.
[  491.816420][T17455] gretap0: entered promiscuous mode
[  491.857873][T17457] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3640'.
[  491.888316][T17457] 0��{X��: renamed from gretap0
[  491.929497][T17457] 0��{X��: left promiscuous mode
[  491.934585][T17457] 0��{X��: entered allmulticast mode
[  492.000562][T17457] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  492.122914][T17471] netlink: 'syz.0.3645': attribute type 1 has an invalid length.
[  492.277410][  T164] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  492.336333][T17482] netlink: 'syz.2.3643': attribute type 10 has an invalid length.
[  493.064075][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'.
[  493.108462][T17506] netlink: 'syz.0.3649': attribute type 26 has an invalid length.
[  493.178795][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'.
[  493.478572][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3656'.
[  493.491712][T17527] Bluetooth: MGMT ver 1.23
[  493.543543][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'.
[  493.713465][T17524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3656'.
[  493.793206][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'.
[  493.831353][T17546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3662'.
[  493.844203][T17524] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3656'.
[  493.854809][T17546] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  493.863143][T17546] bridge0: port 3(syz_tun) entered disabled state
[  493.869864][T17546] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.877552][T17546] bridge0: port 1(
) entered disabled state
[  493.892656][T17524] netlink: 'syz.2.3656': attribute type 2 has an invalid length.
[  493.902649][T17524] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3656'.
[  494.150657][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3665'.
[  495.221556][T17624] netlink: 'syz.2.3680': attribute type 7 has an invalid length.
[  495.379179][T17634] netlink: 'syz.1.3683': attribute type 4 has an invalid length.
[  495.737444][T17651] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  496.015959][T17665] syzkaller1: entered promiscuous mode
[  496.029928][T17665] syzkaller1: entered allmulticast mode
[  496.157595][T17675] delete_channel: no stack
[  496.438923][T17689] syzkaller1: entered promiscuous mode
[  496.467178][T17689] syzkaller1: entered allmulticast mode
[  496.476644][T17694] openvswitch: netlink: Actions may not be safe on all matching packets
[  496.560084][T17695] tipc: Started in network mode
[  496.566092][T17695] tipc: Node identity f27dd25f3815, cluster identity 4711
[  496.604272][T17695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.637342][T17699] tipc: Started in network mode
[  496.642619][T17699] tipc: Node identity , cluster identity 4711
[  496.649685][T17699] tipc: Failed to set node id, please configure manually
[  496.657294][T17699] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  496.673289][T17699] netlink: 'syz.4.3699': attribute type 10 has an invalid length.
[  496.682505][T17703] syzkaller0: entered promiscuous mode
[  496.689701][T17703] syzkaller0: entered allmulticast mode
[  496.704296][T17695] tipc: Resetting bearer <eth:syzkaller0>
[  496.734567][T17699] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  496.850661][T17691] tipc: Resetting bearer <eth:syzkaller0>
[  496.881776][T17691] tipc: Disabling bearer <eth:syzkaller0>
[  497.257173][T17729] netlink: 'syz.0.3708': attribute type 1 has an invalid length.
[  497.344294][T17729] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  497.436779][T17745] netlink: 'syz.3.3712': attribute type 1 has an invalid length.
[  497.478120][T17745] netlink: 'syz.3.3712': attribute type 3 has an invalid length.
[  497.493964][T17745] NCSI netlink: No device for ifindex 131080
[  497.521234][T17750] sctp: [Deprecated]: syz.1.3714 (pid 17750) Use of int in maxseg socket option.
[  497.521234][T17750] Use struct sctp_assoc_value instead
[  497.587482][T17751] netlink: 'syz.4.3713': attribute type 10 has an invalid length.
[  497.599317][T17751] batadv0: entered promiscuous mode
[  497.606670][T17751] batadv0: entered allmulticast mode
[  497.614568][T17751] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  498.083669][T17786] __nla_validate_parse: 41 callbacks suppressed
[  498.083692][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'.
[  498.121408][T17787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3727'.
[  498.286246][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  498.311659][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'.
[  498.455152][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'.
[  498.501641][T17803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3731'.
[  498.535794][T17807] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3732'.
[  498.541876][T17803] gretap1: entered promiscuous mode
[  498.550784][T17803] gretap1: entered allmulticast mode
[  498.842444][T17819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3737'.
[  499.063166][T17824] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  499.362307][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'.
[  499.439607][T17836] wg1: entered promiscuous mode
[  499.509118][T17838] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  499.620720][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'.
[  499.940397][T17863] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  500.494363][T17890] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  500.535427][T17890] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  501.624573][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  502.475949][T17948] tipc: Started in network mode
[  502.504182][T17948] tipc: Node identity 2280ab39250f, cluster identity 4711
[  502.536005][T17948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  502.559743][T17955] syzkaller0: entered promiscuous mode
[  502.579720][T17955] syzkaller0: entered allmulticast mode
[  502.876334][T17962] tipc: Resetting bearer <eth:syzkaller0>
[  502.946702][T17947] tipc: Resetting bearer <eth:syzkaller0>
[  503.099699][T17947] tipc: Disabling bearer <eth:syzkaller0>
[  503.413656][T17981] __nla_validate_parse: 7 callbacks suppressed
[  503.413675][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3781'.
[  503.551400][T17985] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.3782'.
[  503.575600][T17985] openvswitch: netlink: Message has 5 unknown bytes.
[  503.600602][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'.
[  503.614571][T17990] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.3782'.
[  503.632931][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'.
[  503.658141][T17990] openvswitch: netlink: Message has 5 unknown bytes.
[  504.393839][T18016] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  504.621067][T18023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3794'.
[  504.933573][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'.
[  505.001916][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'.
[  505.442794][T18055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.451939][T18055] syzkaller0: entered promiscuous mode
[  505.459224][T18055] syzkaller0: entered allmulticast mode
[  505.535696][T18055] tipc: Resetting bearer <eth:syzkaller0>
[  505.564832][T18054] tipc: Resetting bearer <eth:syzkaller0>
[  505.659233][T18054] tipc: Disabling bearer <eth:syzkaller0>
[  506.236793][T18080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3813'.
[  506.280486][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'.
[  506.524763][T18093] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  506.554622][T17794] Set syz1 is full, maxelem 65536 reached
[  506.698470][T18099] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  507.023871][T18112] netlink: 'syz.3.3824': attribute type 2 has an invalid length.
[  507.256585][T18122] netlink: 'syz.2.3827': attribute type 2 has an invalid length.
[  507.282039][T18122] nbd: must specify at least one socket
[  507.796471][T18133] dvmrp1: entered allmulticast mode
[  508.042287][T18144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.065619][T18144] syzkaller0: entered promiscuous mode
[  508.098603][T18144] syzkaller0: entered allmulticast mode
[  508.128473][T18147] 8021q: VLANs not supported on lo
[  508.244418][T18148] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.270716][T18151] tipc: Resetting bearer <eth:syzkaller0>
[  508.310793][T18143] tipc: Resetting bearer <eth:syzkaller0>
[  508.346166][T18166] netlink: 'syz.4.3838': attribute type 3 has an invalid length.
[  508.409176][T18143] tipc: Disabling bearer <eth:syzkaller0>
[  508.576895][T18179] netlink: 'syz.1.3839': attribute type 1 has an invalid length.
[  508.612204][T18179] netlink: 'syz.1.3839': attribute type 2 has an invalid length.
[  508.655771][T18179] __nla_validate_parse: 6 callbacks suppressed
[  508.655793][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'.
[  509.456145][T18216] tipc: Can't bind to reserved service type 0
[  509.782299][T18224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.806772][T18227] syzkaller0: entered promiscuous mode
[  509.840132][T18227] syzkaller0: entered allmulticast mode
[  510.073177][T18224] tipc: Resetting bearer <eth:syzkaller0>
[  510.144912][T18220] tipc: Resetting bearer <eth:syzkaller0>
[  510.259358][T18220] tipc: Disabling bearer <eth:syzkaller0>
[  510.491711][T18255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3858'.
[  510.504780][T18255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'.
[  510.704112][T18263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3861'.
[  510.740400][T18265] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3862'.
[  510.764327][T18270] IPVS: length: 118 != 24
[  510.775184][T18265] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3862'.
[  510.816090][T18268] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3863'.
[  511.119108][T18280] openvswitch: netlink: Multiple metadata blocks provided
[  511.185130][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3868'.
[  511.255071][T18281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3867'.
[  511.268484][T18281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.275916][T18281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.353140][T18281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.370586][T18281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.407207][T18281] bond0: (slave batadv0): Releasing backup interface
[  511.779374][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'.
[  512.219556][T18324] netlink: 'syz.2.3881': attribute type 1 has an invalid length.
[  512.451143][T18324] bond1 (unregistering): Released all slaves
[  512.840313][T18345] netlink: 'syz.1.3887': attribute type 4 has an invalid length.
[  514.922948][T18418] __nla_validate_parse: 2 callbacks suppressed
[  514.922971][T18418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3907'.
[  515.255339][T18426] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  515.295169][T18428] FAULT_INJECTION: forcing a failure.
[  515.295169][T18428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.330252][T18428] CPU: 0 UID: 0 PID: 18428 Comm: syz.4.3911 Not tainted syzkaller #0 PREEMPT(full) 
[  515.330282][T18428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  515.330296][T18428] Call Trace:
[  515.330304][T18428]  <TASK>
[  515.330314][T18428]  dump_stack_lvl+0x189/0x250
[  515.330344][T18428]  ? __pfx____ratelimit+0x10/0x10
[  515.330372][T18428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.330397][T18428]  ? __pfx__printk+0x10/0x10
[  515.330425][T18428]  ? __might_fault+0xb0/0x130
[  515.330466][T18428]  should_fail_ex+0x414/0x560
[  515.330499][T18428]  _copy_from_user+0x2d/0xb0
[  515.330525][T18428]  ___sys_sendmsg+0x158/0x2a0
[  515.330549][T18428]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.330616][T18428]  ? __fget_files+0x2a/0x420
[  515.330646][T18428]  ? __fget_files+0x3a0/0x420
[  515.330698][T18428]  __x64_sys_sendmsg+0x19b/0x260
[  515.330721][T18428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  515.330751][T18428]  ? __pfx_ksys_write+0x10/0x10
[  515.330773][T18428]  ? rcu_is_watching+0x15/0xb0
[  515.330797][T18428]  ? do_syscall_64+0xbe/0x3b0
[  515.330829][T18428]  do_syscall_64+0xfa/0x3b0
[  515.330854][T18428]  ? lockdep_hardirqs_on+0x9c/0x150
[  515.330879][T18428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.330898][T18428]  ? clear_bhb_loop+0x60/0xb0
[  515.330921][T18428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.330939][T18428] RIP: 0033:0x7fb51af8ebe9
[  515.330957][T18428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.330974][T18428] RSP: 002b:00007fb51bd32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  515.330994][T18428] RAX: ffffffffffffffda RBX: 00007fb51b1b5fa0 RCX: 00007fb51af8ebe9
[  515.331008][T18428] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  515.331019][T18428] RBP: 00007fb51bd32090 R08: 0000000000000000 R09: 0000000000000000
[  515.331031][T18428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.331042][T18428] R13: 00007fb51b1b6038 R14: 00007fb51b1b5fa0 R15: 00007ffcdb561ec8
[  515.331073][T18428]  </TASK>
[  515.358255][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3913'.
[  515.572039][T18437] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  515.642405][T18437] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  515.665841][T18437] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3915'.
[  516.065472][T18452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3920'.
[  516.331358][T18466] netlink: 'syz.2.3925': attribute type 24 has an invalid length.
[  516.355491][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'.
[  516.389644][T18186] Set syz1 is full, maxelem 65536 reached
[  516.440934][T18467] syz_tun (unregistering): left allmulticast mode
[  516.452586][T18471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3926'.
[  516.492508][T18467] syz_tun (unregistering): left promiscuous mode
[  516.496805][T18475] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3927'.
[  516.501401][T18467] bridge0: port 3(syz_tun) entered disabled state
[  516.533198][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'.
[  516.838692][T18486] syzkaller0: refused to change device tx_queue_len
[  516.956540][T18497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.971708][T18497] syzkaller0: entered promiscuous mode
[  517.008801][T18497] syzkaller0: entered allmulticast mode
[  517.062150][T18497] tipc: Resetting bearer <eth:syzkaller0>
[  517.082776][T18508] netlink: 'syz.3.3931': attribute type 17 has an invalid length.
[  517.111489][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3932'.
[  517.129514][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3931'.
[  517.179723][T18496] tipc: Resetting bearer <eth:syzkaller0>
[  517.254871][T18496] tipc: Disabling bearer <eth:syzkaller0>
[  517.336096][T18508] 0��{X��: entered promiscuous mode
[  517.345267][T18508] 0��{X��: left promiscuous mode
[  518.098804][T18542] bridge0: port 1(bridge_slave_0) entered listening state
[  518.311625][ T6091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.358635][ T6091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.458110][ T6091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.488006][ T6091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.687390][ T6091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.738892][ T6091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.890421][ T6091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.904611][ T6091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.131189][T18567] netlink: 'syz.0.3950': attribute type 14 has an invalid length.
[  519.611589][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  519.628624][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  519.642254][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  519.652212][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  519.666084][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  520.230118][ T6091] dvmrp1 (unregistering): left allmulticast mode
[  520.671397][ T6091] bond1 (unregistering): (slave bridge2): Releasing active interface
[  521.001452][ T6091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.026288][ T6091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.052021][ T6091] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  521.063942][ T6091] bond0 (unregistering): Released all slaves
[  521.081887][ T6091] bond1 (unregistering): Released all slaves
[  521.222784][T18578] lo speed is unknown, defaulting to 1000
[  521.298531][ T6091] tipc: Left network mode
[  521.338105][T18590] __nla_validate_parse: 4 callbacks suppressed
[  521.338126][T18590] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3959'.
[  521.364767][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3957'.
[  521.707732][ T5866] Bluetooth: hci2: command tx timeout
[  522.345834][T18630] netlink: 'syz.2.3963': attribute type 27 has an invalid length.
[  522.974848][ T6091] hsr_slave_0: left promiscuous mode
[  523.006646][ T6091] hsr_slave_1: left promiscuous mode
[  523.017306][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.047044][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.082997][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.097536][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.159313][ T6091] veth1_macvtap: left promiscuous mode
[  523.164906][ T6091] veth0_macvtap: left promiscuous mode
[  523.189081][ T6091] .: left promiscuous mode
[  523.193967][ T6091] veth0_vlan: left promiscuous mode
[  523.271938][T18650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3967'.
[  523.523105][T18523] Set syz1 is full, maxelem 65536 reached
[  523.599717][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'.
[  523.790307][ T5866] Bluetooth: hci2: command tx timeout
[  523.854071][ T6091] team0 (unregistering): Port device team_slave_1 removed
[  523.900367][ T6091] team0 (unregistering): Port device team_slave_0 removed
[  524.314292][T18654] netlink: 'syz.1.3969': attribute type 33 has an invalid length.
[  524.474966][T18578] chnl_net:caif_netlink_parms(): no params data found
[  524.546834][T18669] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3971'.
[  524.571220][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'.
[  524.786873][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'.
[  524.820783][T18682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'.
[  524.911141][T18578] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.919467][T18578] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.926785][T18578] bridge_slave_0: entered allmulticast mode
[  524.936447][T18578] bridge_slave_0: entered promiscuous mode
[  524.951942][T18685] netlink: 'syz.1.3975': attribute type 4 has an invalid length.
[  525.015497][T18578] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.028279][T18689] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3976'.
[  525.045502][T18689] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  525.063303][T18578] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.092932][T18578] bridge_slave_1: entered allmulticast mode
[  525.117971][T18578] bridge_slave_1: entered promiscuous mode
[  525.216397][T18697] netlink: 'syz.3.3978': attribute type 21 has an invalid length.
[  525.309740][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'.
[  525.351425][T18578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.391834][T18578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.606179][T18578] team0: Port device team_slave_0 added
[  525.672910][T18578] team0: Port device team_slave_1 added
[  525.787093][T18578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.801339][T18578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.850022][T18578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.874698][ T5880] Bluetooth: hci2: command tx timeout
[  525.933710][T18578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.943378][T18578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.981393][T18578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.125244][T18578] hsr_slave_0: entered promiscuous mode
[  526.135431][T18578] hsr_slave_1: entered promiscuous mode
[  526.142612][T18578] debugfs: 'hsr0' already exists in 'hsr'
[  526.148838][T18578] Cannot create hsr debugfs directory
[  526.510512][T18734] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  526.649743][T18736] __nla_validate_parse: 5 callbacks suppressed
[  526.649766][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'.
[  526.805209][T18736] bond5: entered promiscuous mode
[  526.847698][T18736] bond5: entered allmulticast mode
[  526.868212][T18736] 8021q: adding VLAN 0 to HW filter on device bond5
[  526.888925][T18749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3987'.
[  526.944226][T18749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3987'.
[  527.290987][T18736] bond5 (unregistering): Released all slaves
[  527.414775][T18760] netlink: 'syz.0.3990': attribute type 9 has an invalid length.
[  527.485594][T18578] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  527.513973][T18578] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  527.538623][T18764] netlink: 'syz.3.3991': attribute type 10 has an invalid length.
[  527.552766][T18578] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  527.616186][T18578] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  527.712034][T18763] bond0: (slave wlan1): Releasing backup interface
[  527.870748][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3994'.
[  527.938459][ T5870] Bluetooth: hci2: command 0x0419 tx timeout
[  527.995129][T18769] veth0_to_bridge: entered promiscuous mode
[  528.053808][T18787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3995'.
[  528.085830][T18696] Set syz1 is full, maxelem 65536 reached
[  528.110358][T18768] veth0_to_bridge: left promiscuous mode
[  528.171700][T18578] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.272824][T18578] 8021q: adding VLAN 0 to HW filter on device team0
[  528.334005][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  528.357420][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.364683][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.365418][T18801] netlink: 'syz.1.3997': attribute type 10 has an invalid length.
[  528.384996][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3999'.
[  528.410442][T18804] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  528.422986][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.429316][T18803] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3997'.
[  528.430191][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.447211][T18797] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3999'.
[  528.661027][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'.
[  528.663515][T18578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  528.717964][T18812] geneve2: entered promiscuous mode
[  528.723349][T18812] geneve2: entered allmulticast mode
[  529.191950][T18846] netlink: 'syz.0.4008': attribute type 10 has an invalid length.
[  529.301804][ T5870] Bluetooth: hci3: command 0x0406 tx timeout
[  529.428760][T18858] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  529.543363][T18578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.900074][T18877] veth5: entered allmulticast mode
[  529.935080][T18877] nbd: nbd0 already in use
[  530.021044][ T5880] Bluetooth: hci2: command 0x0419 tx timeout
[  530.215947][T18889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.449754][T18897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.496048][T18907] syzkaller0: entered promiscuous mode
[  530.513572][T18907] syzkaller0: entered allmulticast mode
[  530.543692][T18904] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  530.660590][T18897] tipc: Resetting bearer <eth:syzkaller0>
[  530.736177][T18893] tipc: Resetting bearer <eth:syzkaller0>
[  530.884905][T18893] tipc: Disabling bearer <eth:syzkaller0>
[  531.005463][T18578] veth0_vlan: entered promiscuous mode
[  531.099450][T18578] veth1_vlan: entered promiscuous mode
[  531.231917][T18578] veth0_macvtap: entered promiscuous mode
[  531.270590][T18578] veth1_macvtap: entered promiscuous mode
[  531.333781][T18578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.428530][T18578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.476103][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.514505][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.564970][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.596282][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.767814][T18958] __nla_validate_parse: 11 callbacks suppressed
[  531.767837][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4036'.
[  531.789594][T18958] netlink: 'syz.0.4036': attribute type 7 has an invalid length.
[  531.834414][T18958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4036'.
[  531.849652][T18961] !��1d�^����: renamed from bond_slave_0
[  531.948770][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.988409][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.116766][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.148492][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.510629][T18986] netlink: 'syz.5.3945': attribute type 1 has an invalid length.
[  532.722828][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3945'.
[  532.752883][T18996] veth3: entered promiscuous mode
[  532.779617][T19007] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3945'.
[  532.920125][T18990] netlink: 'syz.3.4045': attribute type 3 has an invalid length.
[  533.199602][ T5232] udevd[5232]: worker [18529] terminated by signal 33 (Unknown signal 33)
[  533.225338][ T5232] udevd[5232]: worker [18529] failed while handling '/kernel/sunrpc/rpc-clients/clnt-2'
[  533.633990][T19041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4059'.
[  533.677777][T19041] tipc: Invalid UDP bearer configuration
[  533.677933][T19041] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  533.730313][T19041] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  534.063225][T19057] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  534.451879][T19068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  534.749803][T19090] netlink: 'syz.3.4074': attribute type 7 has an invalid length.
[  534.773785][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'.
[  534.850398][T19090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.987690][T19103] openvswitch: netlink: IPv4 tun info is not correct
[  535.067903][T19104] netlink: 'syz.0.4077': attribute type 11 has an invalid length.
[  535.082750][T19104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4077'.
[  535.119835][T19106] netlink: 18 bytes leftover after parsing attributes in process `syz.5.4080'.
[  535.591435][T19114] infiniband syz!: set active
[  535.596269][T19114] infiniband syz!: added team_slave_0
[  535.649298][T19114] RDS/IB: syz!: added
[  535.657549][T19114] smc: adding ib device syz! with port count 1
[  535.663756][T19114] smc:    ib device syz! port 1 has pnetid 
[  535.988665][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4089'.
[  536.115602][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'.
[  536.233125][T19146] lo speed is unknown, defaulting to 1000
[  536.853975][T19170] __nla_validate_parse: 2 callbacks suppressed
[  536.853997][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'.
[  537.270591][T19186] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  537.336337][T19187] net veth1_virt_wifi .: renamed from virt_wifi0
[  537.757131][T19207] netlink: 'syz.5.4108': attribute type 27 has an invalid length.
[  537.886525][T19212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4109'.
[  538.943562][T19251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4123'.
[  539.085496][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4124'.
[  539.315079][T19265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4128'.
[  539.460604][T19270] syzkaller0: entered promiscuous mode
[  539.478268][T19270] syzkaller0: entered allmulticast mode
[  539.525877][T19270] tipc: New replicast peer: 255.255.255.255
[  539.537851][ T5870] Bluetooth: hci4: command 0x0406 tx timeout
[  539.551059][T19270] tipc: Enabled bearer <udp:syz2>, priority 10
[  539.573308][T19270] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  539.961504][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'.
[  540.000058][T19291] veth0_to_bond: entered allmulticast mode
[  540.028568][T19292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  540.043000][T19292] syzkaller0: entered promiscuous mode
[  540.049030][T19292] syzkaller0: entered allmulticast mode
[  540.113569][T19292] syzkaller0: mtu greater than device maximum
[  540.122690][T19290] tipc: Resetting bearer <eth:syzkaller0>
[  540.166515][T19290] tipc: Disabling bearer <eth:syzkaller0>
[  540.363879][T19302] netlink: 'syz.5.4140': attribute type 1 has an invalid length.
[  540.398175][T19302] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4140'.
[  540.988297][T19328] netlink: 'syz.3.4147': attribute type 58 has an invalid length.
[  540.996162][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4147'.
[  541.028209][T19327] Bluetooth: MGMT ver 1.23
[  541.117981][  T980] tipc: Node number set to 3876617245
[  541.639866][T19344] netlink: 'syz.3.4153': attribute type 1 has an invalid length.
[  541.698211][T19344] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4153'.
[  541.818010][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'.
[  541.867427][T19347] bond6: entered promiscuous mode
[  541.873752][T19347] bond6: entered allmulticast mode
[  541.880426][T19347] 8021q: adding VLAN 0 to HW filter on device bond6
[  541.918354][T19352] tipc: Started in network mode
[  541.923278][T19352] tipc: Node identity 42dc30beea3, cluster identity 4711
[  541.958213][T19352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.989029][T19352] syzkaller0: entered promiscuous mode
[  541.996047][T19352] syzkaller0: entered allmulticast mode
[  542.129480][T19354] tipc: Resetting bearer <eth:syzkaller0>
[  542.198907][T19349] tipc: Resetting bearer <eth:syzkaller0>
[  542.218404][T19366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4161'.
[  542.331285][T19349] tipc: Disabling bearer <eth:syzkaller0>
[  542.401325][T19375] netlink: 'syz.3.4163': attribute type 21 has an invalid length.
[  542.446184][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'.
[  542.456805][T19375] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4163'.
[  542.606724][T19385] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4165'.
[  542.678188][T19383] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4165'.
[  542.733025][T19375] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4163'.
[  543.011800][T19401] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4169'.
[  543.213661][T19406] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4172'.
[  543.226095][T19408] openvswitch: netlink: Missing valid actions attribute.
[  543.253513][T19406] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4172'.
[  543.272291][T19408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.295629][T19406] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4172'.
[  543.364676][T19411] syzkaller1: entered promiscuous mode
[  543.394921][T19411] syzkaller1: entered allmulticast mode
[  543.460051][   T37] bond0: (slave bond_slave_0): interface is now down
[  543.495030][   T37] bond0: (slave bond_slave_1): interface is now down
[  543.596477][   T37] bond0: (slave bond_slave_0): interface is now down
[  543.621703][   T37] bond0: (slave bond_slave_1): interface is now down
[  543.657842][ T1149] bond0: (slave bond_slave_0): interface is now down
[  543.664801][ T1149] bond0: (slave bond_slave_1): interface is now down
[  543.709719][ T1149] bond0: now running without any active interface!
[  543.820841][T19436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.845539][T19436] syzkaller0: entered promiscuous mode
[  543.851320][T19439] netlink: 'syz.3.4181': attribute type 10 has an invalid length.
[  543.886560][T19436] syzkaller0: entered allmulticast mode
[  543.904448][T19439] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  543.934139][T19445] netlink: 'syz.0.4182': attribute type 2 has an invalid length.
[  544.051347][T19436] tipc: Resetting bearer <eth:syzkaller0>
[  544.087164][T19435] tipc: Resetting bearer <eth:syzkaller0>
[  544.156783][T19435] tipc: Disabling bearer <eth:syzkaller0>
[  544.196288][T19454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  544.626486][T19473] netlink: 'syz.0.4191': attribute type 6 has an invalid length.
[  544.839910][T19486] netlink: 'syz.3.4195': attribute type 10 has an invalid length.
[  544.899577][T19490] netlink: 'syz.3.4195': attribute type 10 has an invalid length.
[  544.908588][T19488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.941706][T19488] syzkaller0: entered promiscuous mode
[  544.950275][T19488] syzkaller0: entered allmulticast mode
[  545.214256][T19502] netlink: 'syz.3.4200': attribute type 1 has an invalid length.
[  545.334921][T19484] tipc: Resetting bearer <eth:syzkaller0>
[  545.421764][T19520] netlink: 'syz.5.4203': attribute type 10 has an invalid length.
[  545.436907][T19484] tipc: Disabling bearer <eth:syzkaller0>
[  546.137130][T19547] netlink: 'syz.3.4212': attribute type 16 has an invalid length.
[  546.202582][T19547] netlink: 'syz.3.4212': attribute type 17 has an invalid length.
[  546.251886][T19547] 0��{X��: left allmulticast mode
[  546.294737][T19547] sit0: left promiscuous mode
[  546.464645][T19547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  546.577707][T19566] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.863537][T19585] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  547.126840][T19596] ieee802154 phy1 wpan1: encryption failed: -22
[  547.202317][T19602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.669665][T19618] __nla_validate_parse: 6 callbacks suppressed
[  547.669688][T19618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4230'.
[  547.784338][   T37] bridge_slave_1: left allmulticast mode
[  547.804844][   T37] bridge_slave_1: left promiscuous mode
[  547.839706][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.914974][   T37] bridge_slave_0: left allmulticast mode
[  547.974746][   T37] bridge_slave_0: left promiscuous mode
[  547.992636][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.211315][T19654] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4234'.
[  548.243525][T19654] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4234'.
[  548.273256][T19654] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4234'.
[  548.597810][T19671] openvswitch: netlink: Flow actions attr not present in new flow.
[  548.901338][ T5880] Bluetooth: hci0: command tx timeout
[  549.353169][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.364292][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.375089][   T37] bond0 (unregistering): Released all slaves
[  549.472284][T19657] syzkaller0: entered promiscuous mode
[  549.483158][T19657] syzkaller0: entered allmulticast mode
[  549.531839][T19679] netlink: 'syz.2.4236': attribute type 10 has an invalid length.
[  549.628412][T19681] netlink: 'syz.2.4236': attribute type 10 has an invalid length.
[  549.636288][T19681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4236'.
[  549.673564][   T37] tipc: Left network mode
[  550.255409][T19706] dvmrp0: entered allmulticast mode
[  550.330303][T19706] dvmrp0: left allmulticast mode
[  550.801283][T19732] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.764988][   T37] hsr_slave_0: left promiscuous mode
[  551.780514][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.793564][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.804212][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.828536][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.865228][   T37] veth1_macvtap: left promiscuous mode
[  551.873982][   T37] veth0_macvtap: left promiscuous mode
[  552.032539][   T37] pim6reg (unregistering): left allmulticast mode
[  552.189932][T19793] can: request_module (can-proto-4) failed.
[  552.644633][   T37] team0 (unregistering): Port device team_slave_1 removed
[  552.743119][   T37] team0 (unregistering): Port device team_slave_0 removed
[  552.842866][T19815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4270'.
[  553.412785][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4272'.
[  553.442766][T19823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4272'.
[  553.458079][T19826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4273'.
[  553.477438][T19823] netlink: 'syz.1.4272': attribute type 6 has an invalid length.
[  553.494261][T19823] netlink: 'syz.1.4272': attribute type 5 has an invalid length.
[  553.512651][T19823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4272'.
[  553.546341][T19832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4273'.
[  553.653539][T19835] netlink: 'syz.2.4277': attribute type 5 has an invalid length.
[  553.681091][T19836] netlink: 'syz.3.4276': attribute type 2 has an invalid length.
[  553.701941][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'.
[  553.789877][T19846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4280'.
[  554.159588][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4283'.
[  554.266025][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'.
[  554.362709][T19872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.558955][T19872] tipc: Disabling bearer <eth:syzkaller0>
[  555.308268][T19921] openvswitch: netlink: Flow actions attr not present in new flow.
[  555.459841][T19925] C: renamed from lo (while UP)
[  556.308035][T19953] nbd1: detected capacity change from 0 to 127
[  556.336073][ T5880] block nbd1: Receive control failed (result -32)
[  556.358338][T18860] block nbd1: Dead connection, failed to find a fallback
[  556.365667][T18860] block nbd1: shutting down sockets
[  556.397775][T18860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.417722][T18860] Buffer I/O error on dev nbd1, logical block 0, async page read
[  556.425755][T18860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.463568][T18860] Buffer I/O error on dev nbd1, logical block 1, async page read
[  556.512309][T18860] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.557294][T18860] Buffer I/O error on dev nbd1, logical block 2, async page read
[  556.609583][T18860] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.656695][T18860] Buffer I/O error on dev nbd1, logical block 3, async page read
[  556.711972][T18860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.770723][T18860] Buffer I/O error on dev nbd1, logical block 0, async page read
[  556.803719][T18860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.838564][T19987] netlink: 'syz.1.4314': attribute type 29 has an invalid length.
[  556.852116][T18860] Buffer I/O error on dev nbd1, logical block 1, async page read
[  556.875285][T18860] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.894623][T18860] Buffer I/O error on dev nbd1, logical block 2, async page read
[  556.913079][T18860] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.932503][T19990] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  556.952359][T18860] Buffer I/O error on dev nbd1, logical block 3, async page read
[  556.969644][T18860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.017110][T18860] Buffer I/O error on dev nbd1, logical block 0, async page read
[  557.087722][T18860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.108710][T18860] Buffer I/O error on dev nbd1, logical block 1, async page read
[  557.130282][T18860] ldm_validate_partition_table(): Disk read failed.
[  557.161105][T18860] Dev nbd1: unable to read RDB block 0
[  557.186875][T18860]  nbd1: unable to read partition table
[  557.246314][T18860] ldm_validate_partition_table(): Disk read failed.
[  557.279934][T18860] Dev nbd1: unable to read RDB block 0
[  557.301631][T18860]  nbd1: unable to read partition table
[  557.484269][T20012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.530041][T20012] syzkaller0: entered promiscuous mode
[  557.562457][T20012] syzkaller0: entered allmulticast mode
[  557.703142][T20012] tipc: Resetting bearer <eth:syzkaller0>
[  557.771533][T20009] tipc: Resetting bearer <eth:syzkaller0>
[  557.905910][T20009] tipc: Disabling bearer <eth:syzkaller0>
[  558.036806][T20042] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  558.232839][T20043] __nla_validate_parse: 10 callbacks suppressed
[  558.232860][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4324'.
[  558.823271][T19993] udevd[19993]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  558.910545][T18860] udevd[18860]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  559.569829][T20118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  559.630864][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'.
[  559.655412][T20123] ip6erspan0: entered promiscuous mode
[  559.664443][T20123] ip6erspan0: entered allmulticast mode
[  559.920977][T20134] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  559.931927][T20134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4343'.
[  559.947415][T20134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4343'.
[  559.974264][T20134] netlink: 'syz.2.4343': attribute type 12 has an invalid length.
[  560.011639][T20134] netlink: 'syz.2.4343': attribute type 29 has an invalid length.
[  560.056957][T20134] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4343'.
[  560.105307][T20134] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4343'.
[  560.150962][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4347'.
[  560.671561][T20172] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  560.762398][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4354'.
[  560.781690][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4354'.
[  560.811044][T20184] netlink: 'syz.5.4354': attribute type 15 has an invalid length.
[  560.854893][T20188] netlink: 'syz.5.4354': attribute type 11 has an invalid length.
[  560.903348][T20188] netlink: 'syz.5.4354': attribute type 11 has an invalid length.
[  560.923032][T20192] IPv6: sit1: Disabled Multicast RS
[  560.931568][T20188] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4354'.
[  560.949079][T20192] sit1: entered allmulticast mode
[  561.060581][T20202] netlink: 'syz.1.4363': attribute type 3 has an invalid length.
[  561.107872][T20187] nbd3: detected capacity change from 0 to 127
[  561.145142][ T5880] block nbd3: Receive control failed (result -32)
[  561.149434][T18860] block nbd3: Send control failed (result -32)
[  561.163593][T18860] block nbd3: Request send failed, requeueing
[  561.175899][   T55] block nbd3: Dead connection, failed to find a fallback
[  561.184198][   T55] block nbd3: shutting down sockets
[  561.199550][T18860] ldm_validate_partition_table(): Disk read failed.
[  561.211400][T18860] Dev nbd3: unable to read RDB block 0
[  561.220122][T18860]  nbd3: unable to read partition table
[  561.245437][T18860] ldm_validate_partition_table(): Disk read failed.
[  561.337667][T18860] Dev nbd3: unable to read RDB block 0
[  561.373290][T18860]  nbd3: unable to read partition table
[  561.412109][T18860] blk_print_req_error: 271 callbacks suppressed
[  561.412132][T18860] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.452315][T18860] buffer_io_error: 271 callbacks suppressed
[  561.452335][T18860] Buffer I/O error on dev nbd3, logical block 1, async page read
[  561.495054][T18860] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.536346][T18860] Buffer I/O error on dev nbd3, logical block 2, async page read
[  561.576604][T18860] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.629976][T18860] Buffer I/O error on dev nbd3, logical block 3, async page read
[  561.667329][T18860] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.678139][T20228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.713024][T18860] Buffer I/O error on dev nbd3, logical block 0, async page read
[  561.715788][T20228] syzkaller0: entered promiscuous mode
[  561.743529][T18860] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.757717][T20228] syzkaller0: entered allmulticast mode
[  561.764199][T18860] Buffer I/O error on dev nbd3, logical block 1, async page read
[  561.805924][T20231] veth1_macvtap: entered promiscuous mode
[  561.830703][T18860] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.862478][T18860] Buffer I/O error on dev nbd3, logical block 2, async page read
[  561.864127][T20231] veth1_macvtap: left promiscuous mode
[  561.871838][T18860] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.938373][T18860] Buffer I/O error on dev nbd3, logical block 3, async page read
[  561.953454][T18860] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.964484][T18860] Buffer I/O error on dev nbd3, logical block 0, async page read
[  561.973939][T18860] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  561.983348][T18860] Buffer I/O error on dev nbd3, logical block 1, async page read
[  561.992605][T18860] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  562.002077][T18860] Buffer I/O error on dev nbd3, logical block 2, async page read
[  562.047883][T20242] tipc: Resetting bearer <eth:syzkaller0>
[  562.058355][T20221] netlink: 'syz.2.4370': attribute type 12 has an invalid length.
[  562.082731][T20221] netlink: 'syz.2.4370': attribute type 29 has an invalid length.
[  562.132045][T20219] tipc: Resetting bearer <eth:syzkaller0>
[  562.182954][T20219] tipc: Disabling bearer <eth:syzkaller0>
[  563.043981][T20295] netlink: 'syz.0.4388': attribute type 153 has an invalid length.
[  563.064244][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  563.774846][T20322] __nla_validate_parse: 7 callbacks suppressed
[  563.774870][T20322] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4395'.
[  563.820184][T20322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.860033][T20331] sctp: [Deprecated]: syz.2.4397 (pid 20331) Use of int in max_burst socket option deprecated.
[  563.860033][T20331] Use struct sctp_assoc_value instead
[  564.085223][T20347] netlink: 'syz.5.4402': attribute type 2 has an invalid length.
[  564.357623][T20355] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  564.378094][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4403'.
[  565.050476][T20383] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4413'.
[  565.169191][T20394] delete_channel: no stack
[  565.196034][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.203633][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.274130][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.323342][T20391] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  565.375988][T20391] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  565.444456][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.453799][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.462789][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.471443][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.490245][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.508842][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.530457][T20391] ip6gretap0 speed is unknown, defaulting to 1000
[  565.774816][T20411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4420'.
[  565.859636][T20413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4420'.
[  565.969025][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4424'.
[  566.785961][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'.
[  566.811494][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4438'.
[  566.894140][ T1149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  566.936761][ T1149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  566.978807][ T1149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  567.015569][ T1149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  567.046950][T20476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4441'.
[  567.108351][T20472] nftables ruleset with unbound set
[  567.361096][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4446'.
[  567.423863][T20489] netlink: 'syz.0.4446': attribute type 15 has an invalid length.
[  567.571975][T20509] dvmrp0: entered allmulticast mode
[  567.644923][T20509] tls_set_device_offload_rx: netdev not found
[  567.798775][T20526] pim6reg1: entered promiscuous mode
[  567.813560][T20526] pim6reg1: entered allmulticast mode
[  568.263047][ T8753] IPVS: starting estimator thread 0...
[  568.377736][T20539] IPVS: using max 28 ests per chain, 67200 per kthread
[  568.844536][T20559] __nla_validate_parse: 1 callbacks suppressed
[  568.844556][T20559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4469'.
[  569.235913][T20579] netlink: 'syz.1.4472': attribute type 2 has an invalid length.
[  569.270246][T20579] netlink: 'syz.1.4472': attribute type 1 has an invalid length.
[  569.337429][T20581] netlink: 'syz.0.4474': attribute type 1 has an invalid length.
[  569.549164][T20597] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4477'.
[  569.588181][T20597] tun0: tun_chr_ioctl cmd 1074025675
[  569.593530][T20597] tun0: persist disabled
[  570.131122][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'.
[  570.219156][T20598] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.227302][T20598] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.400422][T20598] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  570.423603][    T9] lo speed is unknown, defaulting to 1000
[  570.440055][    T9] syz0: Port: 1 Link DOWN
[  570.469399][T20611] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  570.598545][T20640] netlink: 'syz.2.4486': attribute type 10 has an invalid length.
[  570.645187][ T8753] lo speed is unknown, defaulting to 1000
[  570.673452][T20645] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4486'.
[  570.689835][T20646] netlink: 'syz.0.4487': attribute type 16 has an invalid length.
[  570.707434][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'.
[  570.762842][T20640] team0: Port device dummy0 added
[  570.831214][T20644] syzkaller1: entered promiscuous mode
[  570.836741][T20644] syzkaller1: entered allmulticast mode
[  570.874219][T20652] sctp: [Deprecated]: syz.3.4489 (pid 20652) Use of int in maxseg socket option.
[  570.874219][T20652] Use struct sctp_assoc_value instead
[  570.965187][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'.
[  570.974686][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4489'.
[  570.984950][T20652] netlink: 'syz.3.4489': attribute type 30 has an invalid length.
[  571.114698][  T164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  571.169660][ T3509] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  571.236774][ T3509] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  571.267626][ T3509] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  571.710198][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.751747][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.206472][T20700] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4498'.
[  572.335043][T20706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4500'.
[  573.930122][T20762] lo speed is unknown, defaulting to 1000
[  574.911221][T20811] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  575.576694][T20833] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  575.872639][T20857] netlink: 'syz.3.4535': attribute type 62 has an invalid length.
[  575.889792][T20762] ip6gretap0 speed is unknown, defaulting to 1000
[  576.232779][T20617] IPVS: starting estimator thread 0...
[  576.280636][T20867] pim6reg: entered allmulticast mode
[  576.331825][T20869] pim6reg: left allmulticast mode
[  576.340874][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'.
[  576.352579][T20871] IPVS: using max 27 ests per chain, 64800 per kthread
[  576.368868][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'.
[  577.405884][T20905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4547'.
[  577.888800][T20917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4551'.
[  577.975169][T20921] netlink: 'syz.0.4553': attribute type 33 has an invalid length.
[  577.985303][T20920] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  578.003667][T20921] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4553'.
[  578.220350][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4555'.
[  578.664862][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4560'.
[  578.982506][T20956] IPVS: Unknown mcast interface: nicvf0
[  579.180167][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4565'.
[  579.209222][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'.
[  579.293745][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4565'.
[  579.441027][T20642] Set syz1 is full, maxelem 65536 reached
[  579.460603][T20958] 8021q: adding VLAN 0 to HW filter on device bond8
[  579.501148][T20958] bond7: (slave bond8): Enslaving as an active interface with an up link
[  579.592252][T20971] netlink: 'syz.2.4567': attribute type 12 has an invalid length.
[  579.600943][T20971] netlink: 'syz.2.4567': attribute type 29 has an invalid length.
[  579.619670][T20971] netlink: 'syz.2.4567': attribute type 2 has an invalid length.
[  579.647056][T20961] 8021q: adding VLAN 0 to HW filter on device bond7
[  579.945472][T20994] 
[  579.947858][T20994] ======================================================
[  579.954897][T20994] WARNING: possible circular locking dependency detected
[  579.961947][T20994] syzkaller #0 Not tainted
[  579.966384][T20994] ------------------------------------------------------
[  579.973422][T20994] syz.0.4576/20994 is trying to acquire lock:
[  579.979505][T20994] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  579.989055][T20994] 
[  579.989055][T20994] but task is already holding lock:
[  579.996451][T20994] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  580.006076][T20994] 
[  580.006076][T20994] which lock already depends on the new lock.
[  580.006076][T20994] 
[  580.016500][T20994] 
[  580.016500][T20994] the existing dependency chain (in reverse order) is:
[  580.025525][T20994] 
[  580.025525][T20994] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  580.033494][T20994]        lock_acquire+0x120/0x360
[  580.038547][T20994]        _raw_spin_lock_bh+0x36/0x50
[  580.043851][T20994]        nr_rt_ioctl+0x390/0xd50
[  580.048817][T20994]        sock_do_ioctl+0xdc/0x300
[  580.053854][T20994]        sock_ioctl+0x576/0x790
[  580.058745][T20994]        __se_sys_ioctl+0xfc/0x170
[  580.063868][T20994]        do_syscall_64+0xfa/0x3b0
[  580.068905][T20994]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.075337][T20994] 
[  580.075337][T20994] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  580.083341][T20994]        lock_acquire+0x120/0x360
[  580.088383][T20994]        _raw_spin_lock_bh+0x36/0x50
[  580.093681][T20994]        nr_rt_ioctl+0x193/0xd50
[  580.098631][T20994]        sock_do_ioctl+0xdc/0x300
[  580.103669][T20994]        sock_ioctl+0x576/0x790
[  580.108549][T20994]        __se_sys_ioctl+0xfc/0x170
[  580.113674][T20994]        do_syscall_64+0xfa/0x3b0
[  580.118736][T20994]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.125161][T20994] 
[  580.125161][T20994] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  580.132996][T20994]        validate_chain+0xb9b/0x2140
[  580.138304][T20994]        __lock_acquire+0xab9/0xd20
[  580.143526][T20994]        lock_acquire+0x120/0x360
[  580.148589][T20994]        _raw_spin_lock_bh+0x36/0x50
[  580.153903][T20994]        nr_rt_device_down+0xa9/0x720
[  580.159302][T20994]        nr_device_event+0x137/0x150
[  580.164611][T20994]        notifier_call_chain+0x1b3/0x3e0
[  580.170268][T20994]        __dev_notify_flags+0x18d/0x2e0
[  580.175824][T20994]        netif_change_flags+0xe8/0x1a0
[  580.181331][T20994]        dev_change_flags+0x130/0x260
[  580.186728][T20994]        dev_ioctl+0x7b4/0x1150
[  580.191599][T20994]        sock_do_ioctl+0x22c/0x300
[  580.196726][T20994]        sock_ioctl+0x576/0x790
[  580.201584][T20994]        __se_sys_ioctl+0xfc/0x170
[  580.206701][T20994]        do_syscall_64+0xfa/0x3b0
[  580.211753][T20994]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.218193][T20994] 
[  580.218193][T20994] other info that might help us debug this:
[  580.218193][T20994] 
[  580.228431][T20994] Chain exists of:
[  580.228431][T20994]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  580.228431][T20994] 
[  580.242270][T20994]  Possible unsafe locking scenario:
[  580.242270][T20994] 
[  580.249763][T20994]        CPU0                    CPU1
[  580.255137][T20994]        ----                    ----
[  580.260503][T20994]   lock(nr_neigh_list_lock);
[  580.265190][T20994]                                lock(&nr_node->node_lock);
[  580.272485][T20994]                                lock(nr_neigh_list_lock);
[  580.279697][T20994]   lock(nr_node_list_lock);
[  580.284312][T20994] 
[  580.284312][T20994]  *** DEADLOCK ***
[  580.284312][T20994] 
[  580.292464][T20994] 2 locks held by syz.0.4576/20994:
[  580.297665][T20994]  #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  580.306482][T20994]  #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  580.316505][T20994] 
[  580.316505][T20994] stack backtrace:
[  580.322402][T20994] CPU: 1 UID: 0 PID: 20994 Comm: syz.0.4576 Not tainted syzkaller #0 PREEMPT(full) 
[  580.322425][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  580.322437][T20994] Call Trace:
[  580.322446][T20994]  <TASK>
[  580.322455][T20994]  dump_stack_lvl+0x189/0x250
[  580.322482][T20994]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.322504][T20994]  ? __pfx__printk+0x10/0x10
[  580.322530][T20994]  ? print_lock_name+0xde/0x100
[  580.322556][T20994]  print_circular_bug+0x2ee/0x310
[  580.322578][T20994]  check_noncircular+0x134/0x160
[  580.322600][T20994]  validate_chain+0xb9b/0x2140
[  580.322621][T20994]  ? rt6_disable_ip+0x6b3/0x720
[  580.322649][T20994]  ? __lock_acquire+0xab9/0xd20
[  580.322677][T20994]  __lock_acquire+0xab9/0xd20
[  580.322706][T20994]  ? nr_rt_device_down+0xa9/0x720
[  580.322726][T20994]  lock_acquire+0x120/0x360
[  580.322752][T20994]  ? nr_rt_device_down+0xa9/0x720
[  580.322783][T20994]  ? nr_rt_device_down+0xa9/0x720
[  580.322803][T20994]  _raw_spin_lock_bh+0x36/0x50
[  580.322826][T20994]  ? nr_rt_device_down+0xa9/0x720
[  580.322846][T20994]  nr_rt_device_down+0xa9/0x720
[  580.322867][T20994]  ? do_raw_spin_unlock+0x122/0x240
[  580.322891][T20994]  nr_device_event+0x137/0x150
[  580.322910][T20994]  notifier_call_chain+0x1b3/0x3e0
[  580.322933][T20994]  __dev_notify_flags+0x18d/0x2e0
[  580.322951][T20994]  ? __pfx___dev_notify_flags+0x10/0x10
[  580.322967][T20994]  ? __dev_change_flags+0x4cc/0x6d0
[  580.322985][T20994]  ? __pfx___dev_change_flags+0x10/0x10
[  580.323002][T20994]  ? full_name_hash+0x92/0xe0
[  580.323025][T20994]  netif_change_flags+0xe8/0x1a0
[  580.323044][T20994]  dev_change_flags+0x130/0x260
[  580.323073][T20994]  dev_ioctl+0x7b4/0x1150
[  580.323100][T20994]  sock_do_ioctl+0x22c/0x300
[  580.323125][T20994]  ? __pfx_sock_do_ioctl+0x10/0x10
[  580.323145][T20994]  ? __lock_acquire+0xab9/0xd20
[  580.323177][T20994]  sock_ioctl+0x576/0x790
[  580.323199][T20994]  ? __pfx_sock_ioctl+0x10/0x10
[  580.323220][T20994]  ? __fget_files+0x2a/0x420
[  580.323247][T20994]  ? __fget_files+0x3a0/0x420
[  580.323274][T20994]  ? __fget_files+0x2a/0x420
[  580.323303][T20994]  ? bpf_lsm_file_ioctl+0x9/0x20
[  580.323326][T20994]  ? __pfx_sock_ioctl+0x10/0x10
[  580.323346][T20994]  __se_sys_ioctl+0xfc/0x170
[  580.323369][T20994]  do_syscall_64+0xfa/0x3b0
[  580.323394][T20994]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.323418][T20994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.323436][T20994]  ? clear_bhb_loop+0x60/0xb0
[  580.323456][T20994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.323473][T20994] RIP: 0033:0x7ffa7d58ebe9
[  580.323490][T20994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  580.323508][T20994] RSP: 002b:00007ffa7e406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  580.323527][T20994] RAX: ffffffffffffffda RBX: 00007ffa7d7b5fa0 RCX: 00007ffa7d58ebe9
[  580.323541][T20994] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000b
[  580.323553][T20994] RBP: 00007ffa7d611e19 R08: 0000000000000000 R09: 0000000000000000
[  580.323565][T20994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  580.323577][T20994] R13: 00007ffa7d7b6038 R14: 00007ffa7d7b5fa0 R15: 00007fff0b2a8ab8
[  580.323598][T20994]  </TASK>