last executing test programs:

6.514488673s ago: executing program 4 (id=2943):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0xb)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x9, 0x8}, 0x20)
write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x65, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x88, 0x2}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}, {"66bfb3932d8e9ecd07f03026b59b2a758b63041010e93ad92dc16d1f89d0275afd57adefffdbf3c01d9b57e22f3f6f68976e774bc2a5cff5cd"}}}}, 0x73)

6.093198391s ago: executing program 4 (id=2948):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0)
r2 = socket(0x23, 0x80000, 0x40)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1cd60000c0df4658db32ec7c07f8c3fec6", @ANYRES16=r5, @ANYBLOB="04002abd7000fcdbdf250300000008000600e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r6})

5.848064766s ago: executing program 4 (id=2951):
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000180)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r5, &(0x7f0000000040)='4\x00', 0x2, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

5.650831912s ago: executing program 4 (id=2954):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890c, 0x0)

5.528089298s ago: executing program 4 (id=2957):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

5.266273397s ago: executing program 4 (id=2959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x800)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x3, 'bond0\x00', {0x9}, 0xa})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) (async)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x800) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x3, 'bond0\x00', {0x9}, 0xa}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)

2.126495371s ago: executing program 0 (id=2992):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x814)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "540c00871bc5ba33a57ada11172aeeca"}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x4008091)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

2.044656601s ago: executing program 1 (id=2993):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd28, 0x25dfdbfd, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) (async, rerun: 64)
r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'})
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={<r5=>0x0}, &(0x7f00000000c0)=0xc) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x81}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xbd}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x4c}}, 0x0) (async)
connect$netrom(r3, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@getqdisc={0x24, 0x26, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)

1.778723227s ago: executing program 1 (id=2994):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf256800000008000300", @ANYRES32=r4, @ANYBLOB="3200c7"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.710584848s ago: executing program 0 (id=2995):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r2, 0x8008b705, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b32, &(0x7f0000000040))

1.618424324s ago: executing program 1 (id=2997):
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
ioctl$sock_proto_private(r3, 0x89e2, &(0x7f0000000040))

1.453047577s ago: executing program 0 (id=3000):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="0000000007100100200012800b0001006d61637365630000100002800c0001f3feffffffffffffff0500100002000000"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r6 = socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="06000004", @ANYRES16=r2, @ANYBLOB="ffff2abd7000f8dbdf25030000001c000680080003000a01010008000700", @ANYRES32=r4, @ANYBLOB="050002000600000034000680050002001000000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="060001000a000000060005004e23000008000700", @ANYRES32=r4, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRESHEX=r5, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES8=r2], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1800000010c0954ba90e8190ed2a26820a8e5300"/35], 0x18}}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000000}, 0x8) (async)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYRES32=r6], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a\x00\x00\x00!\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r14 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async)
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r12, @ANYRES32=r15, @ANYRESOCT=r14], 0x48}}, 0x40000) (async)
r16 = socket$inet6_sctp(0xa, 0x801, 0x84)
r17 = socket$caif_stream(0x25, 0x1, 0x1)
getpeername(r17, &(0x7f0000000440)=@nfc, &(0x7f0000000240)=0x80) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) (async)
shutdown(r16, 0x1) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r16, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) (async)
sendmsg$GTP_CMD_DELPDP(r12, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

1.351866067s ago: executing program 1 (id=3002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)

1.30243406s ago: executing program 3 (id=3003):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000000c0)=0x1) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) (async, rerun: 64)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64)
getsockopt$ax25_int(r2, 0x101, 0xc, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0}) (async)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={<r6=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0x1d, 0x6, 0x2, 0x531, 0x4c, 0x6, 0x5d}, &(0x7f0000000200)=0x9c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e24, @multicast1}}, [0x7f, 0x7, 0x7ff, 0xc8422c8, 0x4, 0x80, 0xfffffffffffffff7, 0x618, 0x3, 0x68, 0x6, 0x2, 0x6, 0x3, 0x2e1cfcb6]}, &(0x7f00000003c0)=0x100) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r5, &(0x7f0000000800)="468ea009", 0x0}, 0x20) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x7, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1.301959317s ago: executing program 2 (id=3004):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'})
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)

1.192574198s ago: executing program 0 (id=3005):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500006c00000000002f90787f000001e0000001248081000002000000877ed14f2694a0c33b837f1a5210000800000086dd0100fffb0de0080088be00000000100060000100000000000000080022ebfffffffc200000000200000000000000000000000800655800000000"], 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x0, 0x0, 0xffffffff, 0x338, 0x218, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @empty, 0x0, 0xff, 'veth0_to_hsr\x00', 'vlan1\x00', {}, {}, 0x4, 0x3, 0x5}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x7}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@multicast1, @ipv4=@remote, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010100, 0xff000000, 0xff, 'gretap0\x00', 'bond0\x00', {}, {}, 0x2, 0x1, 0x6}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}, @common=@set={{0x40}, {{0x2, [0x7, 0x0, 0x7, 0x2, 0x4, 0x6], 0x1, 0x3}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @rand_addr=0x64010102, @loopback, @port=0x4e23, @port=0x4e20}}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@limit={{0x48}, {0x1, 0x8, 0x8, 0x400, 0x5, 0x40, 0x9}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@remote, @ipv4=@empty, @gre_key=0xfffa, @gre_key=0x1}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ipvlan1\x00', 'wg0\x00', {0xff}, {0xff}, 0x33, 0x2, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0xa, [0x2f, 0x13, 0x6, 0x32, 0x6, 0x25, 0x20, 0x15, 0x3f, 0x1e, 0x31, 0x7, 0x15, 0x35, 0x2f, 0x1c], 0x1, 0xe, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
vmsplice(r5, &(0x7f0000000900)=[{&(0x7f0000000440)="ac6b80d53873f4b35e75dbf57ccf7e8e75", 0x11}, {&(0x7f0000000700)="40711d68611735f03b9fa5f8bbf7875ffb197e1c6db670a69bb2dd69d60085", 0x1f}], 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x8000, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0)
r10 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f00000004c0)=0x9, 0x12)

1.14832461s ago: executing program 1 (id=3006):
syz_emit_ethernet(0x1167, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x1, [0x698, 0x33c, 0xd63, 0xa9a]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
unshare(0x6020400)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r1, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
socketpair(0x28, 0x81000, 0x7fffffff, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x20)

990.389969ms ago: executing program 2 (id=3007):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0xffff, 0x6}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={<r6=>r5, 0x4, 0x4, 0x101, 0xfffb, 0x8c, 0x6, 0x1ff, {0x0, @in6={{0xa, 0x4e23, 0xd37, @mcast2, 0x76d}}, 0x0, 0x4, 0x5, 0x8000, 0x100009}}, &(0x7f0000000240)=0xb0) (async)
socket(0x21, 0x803, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={<r7=>r1, 0x6, 0x7605a454, 0x3})
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xe}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r8}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x4, 0xffffffffffffffff, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41100, 0x24, '\x00', r10, 0x0, r7, 0x8, &(0x7f0000000580)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xa, 0x1, 0x81d}, 0x10, 0x289c7, r2, 0x4, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x1, 0xe, 0x6}, {0x4, 0x1, 0xf, 0x9}, {0x3, 0x2, 0xc, 0xa}, {0x3, 0x4, 0x4, 0x8}], 0x10, 0x7ff}, 0x94) (async)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x40050) (async)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r11, &(0x7f0000000100)=@abs={0x27}, 0x6e)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async)
getsockname$packet(r12, 0x0, &(0x7f0000000040)) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x200}, &(0x7f00000002c0)=0x8) (async)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000000a100000008001280040001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x54)
r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname(r14, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000003c0)=0x80)

969.044266ms ago: executing program 3 (id=3008):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000001c0)={<r2=>0x0, 0x7bd, 0x6, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000005c0)={r2, 0x2, 0x1, [0x6, 0x2, 0xd2, 0x8000000000000000, 0x7], [0x4b9, 0x6, 0xbbda, 0x7, 0x9, 0x0, 0xfffffffffffffff9, 0x6, 0x5, 0x1, 0x3, 0x1521, 0x3, 0x9, 0x4, 0x4, 0x0, 0x1, 0x8, 0x6, 0x2, 0x9abc, 0xfffffffffffffff9, 0x8, 0x5de0, 0x8, 0x81, 0x7, 0x4, 0x9, 0xe, 0x1, 0x8, 0x0, 0x4, 0x5, 0x9, 0x6, 0x800, 0x3, 0x9, 0x7, 0x1, 0x5, 0xf80, 0x100000000, 0x8, 0x8, 0x7, 0x8, 0x5, 0x6, 0xfffffffffffffffc, 0x80, 0x7, 0xf, 0xffffffffffffc488, 0xffffffffffffc372, 0x2, 0x2, 0x1, 0xffffffffffffff43, 0x1000, 0x4, 0x100000001, 0x100000000, 0x7, 0x9, 0x800, 0x3, 0x8, 0x7, 0x830c, 0x6, 0x935, 0x5, 0x3ff, 0x7, 0xffffffff, 0x4, 0x0, 0x6, 0x5, 0x0, 0x2, 0x818, 0x7fffffff, 0x8, 0xf0b, 0x6, 0x400, 0x9, 0xb, 0x20000000000, 0x0, 0x5, 0x4, 0x8001, 0x1, 0xfffffffffffffff7, 0x5, 0x7, 0x1, 0x3, 0x4, 0x78, 0x8, 0x2, 0xa6e, 0x0, 0x8000, 0x8b7, 0x7fffffffffffffff, 0x2, 0x7, 0x7fffffffffffffff, 0x8, 0x8, 0xda, 0x8, 0x8]})
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r3, &(0x7f0000000000)="b892d60d79265b0555f218d2", 0xc)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x3, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000000c0)=0x40, 0x4)

814.753008ms ago: executing program 3 (id=3009):
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100000}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

758.431633ms ago: executing program 1 (id=3010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}], 0x1, 0x400c404)
sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
ppoll(&(0x7f00000000c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x20004808)
recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x9d39}], 0x1, 0x12141, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
recvfrom$rxrpc(r3, &(0x7f0000000580)=""/185, 0xb9, 0x100, &(0x7f00000003c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @local, 0x1}}, 0x24)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf251400000005000b000100000008000200010000800800150009000000080003008000000008001600010001000c00018008000100", @ANYRES32=r4, @ANYBLOB="f8af7fa0c0ab6a4205152c4450af3ea00f77136fc2782e0a20f2d3179807f957ba453a76aef55b2687ce5d4a583eeeef69701afad651bdf6eb6c6317d43461cd4d3b4be52ab1dbf92f4e029255ccb440ac9603f17793cd81a332b1919fd4f58a273cc5e893c901197879"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x44004)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a3000000000140000001100010000"], 0xf0}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
close(0x3)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

758.161927ms ago: executing program 2 (id=3011):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)

669.299912ms ago: executing program 2 (id=3012):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9c, 0x2, 0x7f, 0x9, 0xfff, 0x9}}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

372.086218ms ago: executing program 3 (id=3013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) (async)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r6) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) (async)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='team_slave_1\x00', 0x10) (async)
sendto$inet6(r7, 0x0, 0x0, 0x2000c000, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

262.537804ms ago: executing program 2 (id=3014):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0)
sendto$inet(r0, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x80089}, 0x0)

207.88035ms ago: executing program 0 (id=3015):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) (async)
socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32)
ppoll(&(0x7f0000000600)=[{r0, 0x101}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
recvfrom(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800)
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async)
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x9300}, @val={0x1, 0x80, 0x5, 0x8, 0x43, 0xa0}, @eth={@link_local, @random="e2ef2b7a4e17", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @generic={0x339, 0x6007, 0x6, 0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}}, 0x34)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800ef01000000004d8000000a140000fe010000002400001400050000000000000000000000000000000001360e78e20ad383540ecb12d52d"], 0x30}, 0x1, 0x11}, 0x20000080)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)={0x6, 0x15, '\x00', [@calipso={0x7, 0x48, {0xf2e6e575294cec2f, 0x10, 0x7, 0x2, [0xb400000000000000, 0x8, 0x4, 0x7fffffffffffffff, 0x9a2, 0x53b, 0x6, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x8, {0x0, 0x0, 0x3, 0x4}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x8000, [0x5aa, 0x2791, 0x5, 0x6, 0x800, 0x2, 0x6, 0xfffffffffffffff9, 0x211]}}, @ra={0x5, 0x2, 0x8}]}, 0xb8)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3}, 0xc)

160.030572ms ago: executing program 2 (id=3016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x7, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r8, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r5, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0)

98.639049ms ago: executing program 3 (id=3017):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)

48.050981ms ago: executing program 3 (id=3018):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'pimreg1\x00'})
getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000240))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x8004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000280)=@newtaction={0x120, 0x30, 0x80b, 0x70bd27, 0x0, {}, [{0x10c, 0x1, [@m_mpls={0x108, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x81}]}, {0xd4, 0x6, "2f6a792f69d30ba6c93621843e2e541250b55d675a85042a6126e68abed3404e4c01e66459d939b281bdcffd9eaf9840db83b4da97dcc4325554b7330cdd337163b0601dbf272b4721e4e4302f810da2c35f534a64d6aef5d7af2e0a050bbd6b883fa543401e3d8a5336728cfb41c08118a562ad045cd91422d8d045d0852bc2a104a626728f0708b68ef1578e8e4b8d496babb71b9212b6bdbf9c70420cb1973ee4443e033e965f502b30dd1da3e91112b06db7ce3887cf234684bc01d03901a821b1a990c5fb441d9987368548b854"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x9e34d8abf12bb532}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8011)

0s ago: executing program 0 (id=3019):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xffffffff)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x400, 0x6, 0x7d6e, 0x2, 0x842, 0x7, 0xf6c}, 0x20) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x400, 0x6, 0x7d6e, 0x2, 0x842, 0x7, 0xf6c}, 0x20)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r4}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

macvtap failed to register rx_handler
[  159.109563][ T8928] tipc: Started in network mode
[  159.127844][ T8928] tipc: Node identity 10001, cluster identity 4711
[  159.147227][ T8928] tipc: Node number set to 65537
[  159.192687][ T8934] netlink: 'syz.1.764': attribute type 33 has an invalid length.
[  160.285408][ T8991] syz.3.780 uses old SIOCAX25GETINFO
[  160.593168][ T9006] netlink: 'syz.1.784': attribute type 33 has an invalid length.
[  161.086623][ T9029] syzkaller0: entered promiscuous mode
[  161.105189][ T9029] syzkaller0: entered allmulticast mode
[  161.370988][ T9051] __nla_validate_parse: 7 callbacks suppressed
[  161.371010][ T9051] netlink: 14 bytes leftover after parsing attributes in process `syz.1.794'.
[  161.527720][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.796'.
[  161.596699][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'.
[  161.654331][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'.
[  161.692078][ T9022] infiniband syz1: set down
[  161.705971][ T9022] infiniband syz1: added ipvlan0
[  161.732397][  T775] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.754001][  T775] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.837381][ T9022] RDS/IB: syz1: added
[  161.840130][  T775] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.842172][ T9022] smc: adding ib device syz1 with port count 1
[  161.867258][ T9022] smc:    ib device syz1 port 1 has no pnetid
[  161.885524][  T775] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.177680][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'.
[  162.259162][ T9087] raw_sendmsg: syz.2.804 forgot to set AF_INET. Fix it!
[  162.377133][ T9095] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  162.410381][ T9095] IPVS: set_ctl: invalid protocol: 20551 0.0.4.1:0
[  162.668584][ T9108] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  162.688989][ T9108] netlink: 'syz.2.810': attribute type 4 has an invalid length.
[  162.696707][ T9108] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.810'.
[  162.708895][ T9109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'.
[  162.832424][ T9111] sctp: [Deprecated]: syz.3.811 (pid 9111) Use of int in max_burst socket option.
[  162.832424][ T9111] Use struct sctp_assoc_value instead
[  163.042544][ T9124] netlink: 'syz.4.815': attribute type 10 has an invalid length.
[  163.106167][ T9124] 8021q: adding VLAN 0 to HW filter on device team0
[  163.156101][ T9124] bond0: (slave team0): Enslaving as an active interface with an up link
[  163.224077][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[  163.627556][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'.
[  164.088337][ T9167] xt_NFQUEUE: number of total queues is 0
[  164.119580][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'.
[  164.258938][ T9184] !��: renamed from bond_slave_0 (while UP)
[  164.602968][ T9196] sctp: [Deprecated]: syz.4.832 (pid 9196) Use of int in max_burst socket option deprecated.
[  164.602968][ T9196] Use struct sctp_assoc_value instead
[  164.986597][ T9220] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  165.121470][ T9221] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  165.148017][ T9221] delete_channel: no stack
[  165.835268][ T9251] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.873033][ T9257] tipc: Enabled bearer <eth:ipvlan1>, priority 2
[  165.948103][ T9268] netlink: 'syz.2.855': attribute type 1 has an invalid length.
[  166.259803][ T9279] syzkaller1: entered promiscuous mode
[  166.285668][ T9279] syzkaller1: entered allmulticast mode
[  166.450729][ T9292] netlink: 'syz.4.863': attribute type 39 has an invalid length.
[  166.848851][ T9307] netlink: 'syz.0.866': attribute type 63 has an invalid length.
[  166.871203][ T9307] netlink: 'syz.0.866': attribute type 63 has an invalid length.
[  166.893531][ T9307] __nla_validate_parse: 13 callbacks suppressed
[  166.893551][ T9307] netlink: 830 bytes leftover after parsing attributes in process `syz.0.866'.
[  166.969061][ T9307] netlink: 750 bytes leftover after parsing attributes in process `syz.0.866'.
[  167.014611][ T7324] tipc: Node number set to 1596408101
[  167.018966][ T9317] sock: sock_timestamping_bind_phc: sock not bind to device
[  167.132286][ T9321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.152575][ T9321] syzkaller0: entered promiscuous mode
[  167.159330][ T9321] syzkaller0: entered allmulticast mode
[  167.215655][ T9325] netlink: 'syz.3.873': attribute type 1 has an invalid length.
[  167.222246][ T9321] tipc: Resetting bearer <eth:syzkaller0>
[  167.268553][ T9314] tipc: Resetting bearer <eth:syzkaller0>
[  167.341681][ T9314] tipc: Disabling bearer <eth:syzkaller0>
[  167.609540][ T9346] Cannot find add_set index 0 as target
[  167.619473][ T9346] netlink: 'syz.4.879': attribute type 10 has an invalid length.
[  167.639847][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  167.658329][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  167.668851][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  167.677812][ T9349] netlink: 'syz.2.880': attribute type 83 has an invalid length.
[  167.688107][ T9346] bond0: (slave wlan1): Opening slave failed
[  167.733432][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.600433][ T9375] netlink: 'syz.4.889': attribute type 1 has an invalid length.
[  168.808666][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'.
[  169.128213][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'.
[  169.315493][ T9405] bridge1: entered promiscuous mode
[  169.322673][ T9405] bridge1: entered allmulticast mode
[  169.436320][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'.
[  169.587748][ T9421] netlink: 84 bytes leftover after parsing attributes in process `syz.4.900'.
[  169.655031][ T9427] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  170.187241][ T9444] netlink: 76 bytes leftover after parsing attributes in process `syz.1.907'.
[  170.270721][ T9449] macvtap1: entered promiscuous mode
[  170.276170][ T9449] vlan0: entered promiscuous mode
[  170.306085][ T9449] macvtap1: entered allmulticast mode
[  170.312954][ T9449] vlan0: entered allmulticast mode
[  170.318532][ T9449] veth0_vlan: entered allmulticast mode
[  170.428527][ T9451] macvtap2: entered promiscuous mode
[  170.441107][ T9451] macvtap2: entered allmulticast mode
[  170.621639][ T9470] bridge0: port 1(batadv1) entered blocking state
[  170.657432][ T9470] bridge0: port 1(batadv1) entered disabled state
[  170.678089][ T9470] batadv1: entered allmulticast mode
[  170.718918][ T9470] batadv1: entered promiscuous mode
[  171.088321][  T775] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  171.097917][  T775] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  171.400680][ T9513] netlink: 'syz.0.930': attribute type 1 has an invalid length.
[  171.444649][ T9513] xt_TPROXY: Can be used only with -p tcp or -p udp
[  171.454911][ T9503] x_tables: ip_tables: icmp match: only valid for protocol 1
[  171.468302][ T9522] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.470892][ T9513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  171.497591][ T9527] xt_TPROXY: Can be used only with -p tcp or -p udp
[  171.732295][ T7341] IPVS: starting estimator thread 0...
[  171.837158][ T9541] IPVS: using max 28 ests per chain, 67200 per kthread
[  172.083333][ T9551] x_tables: unsorted underflow at hook 2
[  172.191595][ T9553] __nla_validate_parse: 43 callbacks suppressed
[  172.191617][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'.
[  172.206946][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'.
[  172.308379][ T9570] netlink: 'syz.4.942': attribute type 4 has an invalid length.
[  172.359896][ T9571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.944'.
[  173.679614][ T9583] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  173.689585][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.948'.
[  174.282225][ T9615] syzkaller0: entered promiscuous mode
[  174.329446][ T9615] syzkaller0: entered allmulticast mode
[  174.417720][ T9625] syz_tun: entered allmulticast mode
[  174.424641][ T9625] syz_tun: left allmulticast mode
[  174.485460][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'.
[  174.946020][ T9654] syzkaller0: entered promiscuous mode
[  174.974656][ T9654] syzkaller0: entered allmulticast mode
[  174.986455][ T9649] sock: sock_timestamping_bind_phc: sock not bind to device
[  175.167511][ T9669] syzkaller0: entered promiscuous mode
[  175.173152][ T9669] syzkaller0: entered allmulticast mode
[  175.188778][ T9670] C: renamed from lo
[  175.250252][ T9663] syzkaller0: left promiscuous mode
[  175.255656][ T9663] syzkaller0: left allmulticast mode
[  175.322470][ T9680] openvswitch: netlink: Flow actions attr not present in new flow.
[  175.350991][ T9681] netlink: 5 bytes leftover after parsing attributes in process `syz.1.974'.
[  175.367236][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'.
[  175.397452][ T9681] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  175.417175][ T7319] IPVS: starting estimator thread 0...
[  175.517757][ T9687] IPVS: using max 27 ests per chain, 64800 per kthread
[  175.653199][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.979'.
[  175.881259][ T9703] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.985'.
[  175.930162][ T3543] tipc: Subscription rejected, illegal request
[  176.087766][ T9715] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[  176.109484][ T9715] netlink: 136 bytes leftover after parsing attributes in process `syz.0.988'.
[  176.119686][ T9715] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[  176.432124][ T9725] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  176.581493][ T9729] bridge_slave_1: left allmulticast mode
[  176.615886][ T9729] bridge_slave_1: left promiscuous mode
[  176.624850][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.636427][ T9729] bridge_slave_0: left allmulticast mode
[  176.642981][ T9729] bridge_slave_0: left promiscuous mode
[  176.649215][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.673382][ T9742] netlink: 'syz.4.996': attribute type 4 has an invalid length.
[  176.727668][ T9745] netlink: 'syz.4.996': attribute type 4 has an invalid length.
[  176.856297][ T9751] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  177.887463][ T9795] __nla_validate_parse: 3 callbacks suppressed
[  177.887483][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  178.017826][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  178.404807][ T9820] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  178.450208][ T9820] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1013'.
[  178.750329][ T9825] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1016'.
[  179.267388][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'.
[  179.608828][ T9859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1027'.
[  179.758484][ T9866] batadv_slave_0: entered promiscuous mode
[  179.794587][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'.
[  179.875142][ T9870] macsec0: entered promiscuous mode
[  179.886927][ T9870] macsec0: entered allmulticast mode
[  180.047637][ T9865] batadv_slave_0: left promiscuous mode
[  180.053271][ T9878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'.
[  180.252562][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.350076][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'.
[  180.478748][ T9894] syzkaller0: entered promiscuous mode
[  180.514541][ T9894] syzkaller0: entered allmulticast mode
[  180.716691][ T9909] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  180.800580][ T9907] tipc: Disabling bearer <eth:ipvlan1>
[  181.041912][ T9910] bond4: (slave bridge4): making interface the new active one
[  181.057559][ T9910] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  181.209637][ T9926] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1047'.
[  181.411290][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.439568][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.466523][ T9938] netlink: 'syz.4.1050': attribute type 16 has an invalid length.
[  181.487623][ T9938] netlink: 'syz.4.1050': attribute type 17 has an invalid length.
[  181.672571][ T9938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.703273][ T9956] sctp: [Deprecated]: syz.1.1056 (pid 9956) Use of int in maxseg socket option.
[  181.703273][ T9956] Use struct sctp_assoc_value instead
[  181.772108][ T9937] gretap0: entered promiscuous mode
[  181.803849][ T9959] 0��{X��: renamed from gretap0
[  181.864184][ T9959] 0��{X��: left promiscuous mode
[  181.896833][ T9959] 0��{X��: entered allmulticast mode
[  181.940110][ T9959] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  182.340539][ T9983] netlink: 'syz.1.1060': attribute type 3 has an invalid length.
[  183.460448][T10041] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  183.468823][T10040] netlink: 'syz.4.1077': attribute type 1 has an invalid length.
[  183.499526][T10041] : renamed from hsr0
[  183.529819][T10045] 
: renamed from bridge_slave_0
[  183.931413][T10067] __nla_validate_parse: 10 callbacks suppressed
[  183.931434][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'.
[  184.374327][T10086] netlink: 'syz.1.1092': attribute type 1 has an invalid length.
[  184.415010][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  184.596191][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1094'.
[  184.682445][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1094'.
[  185.406390][T10152] netlink: 'syz.4.1112': attribute type 62 has an invalid length.
[  185.433177][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'.
[  185.468152][T10147] netlink: 'syz.4.1112': attribute type 26 has an invalid length.
[  185.542454][T10157] sctp: [Deprecated]: syz.3.1116 (pid 10157) Use of int in max_burst socket option.
[  185.542454][T10157] Use struct sctp_assoc_value instead
[  185.562721][T10157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  186.523765][T10228] team0: Device ip6gre2 is of different type
[  186.721374][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  186.776565][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  186.908286][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  186.938294][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  187.040129][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  187.102719][T10261] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �&��%����Q�0Sæj��ʫ�����}
[  187.784780][T10299] block nbd0: Unsupported socket: should be TCP or UNIX.
[  188.126836][T10312] batman_adv: batadv0: Interface deactivated: dummy0
[  188.177645][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.192976][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.253067][T10195] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.262894][T10195] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.274841][T10195] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.283910][T10195] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.292817][T10195] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.301526][T10195] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.310202][T10195] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.318996][T10195] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.430840][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  212.567887][T10319] netlink: 'syz.1.1149': attribute type 11 has an invalid length.
[  212.594057][T10322] __nla_validate_parse: 130 callbacks suppressed
[  212.594077][T10322] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1150'.
[  212.606963][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  212.660311][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1152'.
[  212.899154][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'.
[  212.920842][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'.
[  213.302057][T10364] netlink: 'syz.4.1160': attribute type 1 has an invalid length.
[  213.333300][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'.
[  213.378759][T10366] netlink: 'syz.3.1163': attribute type 3 has an invalid length.
[  213.386709][T10366] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1163'.
[  213.511388][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'.
[  213.695966][T10383] syzkaller0: entered promiscuous mode
[  213.711586][T10383] syzkaller0: entered allmulticast mode
[  213.887255][T10391] SET target dimension over the limit!
[  213.896305][T10392] netlink: 'syz.2.1173': attribute type 10 has an invalid length.
[  213.921515][T10392] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  214.201376][T10405] tipc: New replicast peer: 255.255.255.255
[  214.219469][T10405] tipc: Enabled bearer <udp:syz2>, priority 10
[  214.263847][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  214.274504][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'.
[  214.982386][T10448] syzkaller0: entered promiscuous mode
[  214.995293][T10448] syzkaller0: entered allmulticast mode
[  215.082525][T10452] bond2: Unable to set down delay as MII monitoring is disabled
[  215.093404][T10452] bond2 (unregistering): Released all slaves
[  215.173658][T10455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.185308][T10448] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  215.288792][T10468] netlink: 'syz.0.1195': attribute type 1 has an invalid length.
[  215.430655][T10474] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.438985][ T7319] tipc: Node number set to 3663492040
[  215.469149][T10474] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.809308][T10496] netlink: 'syz.0.1203': attribute type 5 has an invalid length.
[  216.730829][T10545] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  216.747704][T10545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.348483][T10563] syzkaller0: entered promiscuous mode
[  217.355696][T10563] syzkaller0: entered allmulticast mode
[  217.516129][T10582] bond0: (slave bridge_slave_1): Releasing backup interface
[  217.554587][T10587] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  217.889496][T10597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  217.896962][T10597] IPv6: NLM_F_CREATE should be set when creating new route
[  217.904278][T10597] IPv6: NLM_F_CREATE should be set when creating new route
[  217.978638][T10597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.343719][T10597] netlink: 'syz.2.1231': attribute type 13 has an invalid length.
[  218.873345][T10623] __nla_validate_parse: 12 callbacks suppressed
[  218.873366][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'.
[  220.724768][T10654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.746490][T10659] syzkaller0: entered promiscuous mode
[  220.762032][T10659] syzkaller0: entered allmulticast mode
[  220.798925][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'.
[  220.824333][T10665] ip6tnl0: Caught tx_queue_len zero misconfig
[  220.884266][T10659] tipc: Resetting bearer <eth:syzkaller0>
[  221.143626][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  221.392114][T10653] tipc: Resetting bearer <eth:syzkaller0>
[  221.414775][T10653] tipc: Disabling bearer <eth:syzkaller0>
[  221.517772][T10693] netlink: 'syz.2.1248': attribute type 4 has an invalid length.
[  221.529231][T10694] netlink: 'syz.2.1248': attribute type 4 has an invalid length.
[  221.610782][T10696] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1249'.
[  221.641438][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'.
[  221.738339][T10696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1249'.
[  221.764777][T10705] netlink: 'syz.3.1252': attribute type 1 has an invalid length.
[  221.790720][T10705] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1252'.
[  222.010315][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'.
[  222.028846][T10720] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1256'.
[  222.043130][T10720] Driver unsupported XDP return value 0 on prog  (id 287) dev N/A, expect packet loss!
[  222.220644][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'.
[  222.281433][T10733] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  222.319485][T10742] netlink: 'syz.4.1262': attribute type 21 has an invalid length.
[  222.329029][T10730] netlink: 'syz.0.1260': attribute type 5 has an invalid length.
[  222.952048][T10766] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20001
[  223.098518][T10772] ieee802154 phy0 wpan0: encryption failed: -22
[  223.246921][T10778] sctp: [Deprecated]: syz.1.1276 (pid 10778) Use of int in maxseg socket option.
[  223.246921][T10778] Use struct sctp_assoc_value instead
[  223.257772][T10783] netlink: 'syz.4.1278': attribute type 28 has an invalid length.
[  223.286904][T10783] netlink: 'syz.4.1278': attribute type 3 has an invalid length.
[  223.302581][T10778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.321957][T10778] syzkaller0: entered promiscuous mode
[  223.333005][T10778] syzkaller0: entered allmulticast mode
[  223.427808][T10777] tipc: Resetting bearer <eth:syzkaller0>
[  223.483750][T10777] tipc: Disabling bearer <eth:syzkaller0>
[  223.610221][T10795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.687890][T10795] tipc: Disabling bearer <eth:syzkaller0>
[  223.885572][T10810] __nla_validate_parse: 9 callbacks suppressed
[  223.885592][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'.
[  223.917187][T10810] netlink: 'syz.2.1284': attribute type 7 has an invalid length.
[  223.925008][T10810] netlink: 'syz.2.1284': attribute type 8 has an invalid length.
[  223.955847][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  224.322518][T10834] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.338314][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  224.362707][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  224.838050][T10862] netlink: 'syz.1.1302': attribute type 3 has an invalid length.
[  224.889640][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'.
[  225.099660][T10877] netlink: 'syz.1.1306': attribute type 4 has an invalid length.
[  225.161669][T10881] netlink: 'syz.3.1307': attribute type 58 has an invalid length.
[  225.200675][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1307'.
[  225.454894][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'.
[  225.475374][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'.
[  225.484820][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'.
[  225.505099][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'.
[  225.757558][T10910] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  226.081736][T10915] bond5: (slave gretap1): making interface the new active one
[  226.131521][T10915] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  226.464190][T10934] netlink: 'syz.3.1320': attribute type 1 has an invalid length.
[  226.508908][T10934] netlink: 'syz.3.1320': attribute type 2 has an invalid length.
[  226.924583][T10962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.934631][T10965] netlink: 'syz.3.1331': attribute type 1 has an invalid length.
[  227.098927][T10970] netlink: 'syz.1.1332': attribute type 39 has an invalid length.
[  227.330748][T10980] bridge0: port 3(ipvlan2) entered blocking state
[  227.363366][T10980] bridge0: port 3(ipvlan2) entered disabled state
[  227.381134][T10980] ipvlan2: entered allmulticast mode
[  227.401146][T10980] bridge0: entered allmulticast mode
[  227.410703][T10980] ipvlan2: left allmulticast mode
[  227.416077][T10980] bridge0: left allmulticast mode
[  227.710527][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.983018][T11010] 8021q: VLANs not supported on ip6gre0
[  228.595805][T11043] wg1 speed is unknown, defaulting to 1000
[  228.602990][T11043] wg1 speed is unknown, defaulting to 1000
[  228.611702][T11043] wg1 speed is unknown, defaulting to 1000
[  228.630725][T11043] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  228.668168][T11043] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  228.794579][T11043] wg1 speed is unknown, defaulting to 1000
[  228.812920][T11043] wg1 speed is unknown, defaulting to 1000
[  228.838958][T11043] wg1 speed is unknown, defaulting to 1000
[  228.872202][T11043] wg1 speed is unknown, defaulting to 1000
[  228.901587][T11043] wg1 speed is unknown, defaulting to 1000
[  228.984247][T11058] __nla_validate_parse: 10 callbacks suppressed
[  228.984268][T11058] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.1361'.
[  229.121063][T11067] validate_nla: 2 callbacks suppressed
[  229.121084][T11067] netlink: 'syz.3.1362': attribute type 1 has an invalid length.
[  229.249623][T11074] xt_hashlimit: size too large, truncated to 1048576
[  229.310801][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'.
[  229.328860][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'.
[  229.888920][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'.
[  230.120535][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'.
[  230.319757][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'.
[  230.384159][T11120] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  230.626594][T11132] xt_CT: No such helper "syz1"
[  230.641657][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  230.668255][T11132] netlink: 'syz.3.1382': attribute type 30 has an invalid length.
[  230.744725][T10197] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  230.767496][T10197] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  230.796698][T10197] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  230.927215][T10197] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  230.952920][T11149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.962304][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'.
[  231.025400][T11155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.042932][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'.
[  231.063218][T11151] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  231.082391][T11151] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  231.091870][T11151] gretap0: entered promiscuous mode
[  231.098947][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'.
[  231.109078][T11151] gretap0: entered allmulticast mode
[  231.259796][T11165] netlink: 'syz.1.1393': attribute type 1 has an invalid length.
[  231.311231][T11165] 8021q: adding VLAN 0 to HW filter on device bond6
[  232.007745][T11200] netlink: 'syz.3.1405': attribute type 29 has an invalid length.
[  232.044733][T11204] netlink: 'syz.3.1405': attribute type 29 has an invalid length.
[  232.153896][T11212] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.228001][T11212] Bluetooth: MGMT ver 1.23
[  232.379356][T11216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.401724][T11216] syzkaller0: entered promiscuous mode
[  232.410502][T11216] syzkaller0: entered allmulticast mode
[  232.430364][ T5847] Bluetooth: hci3: command tx timeout
[  232.476232][T11216] tipc: Resetting bearer <eth:syzkaller0>
[  232.493625][T11216] Cannot find del_set index 49151 as target
[  232.542831][T11218] Cannot find del_set index 49151 as target
[  232.605194][T11214] tipc: Resetting bearer <eth:syzkaller0>
[  232.699005][T11214] tipc: Disabling bearer <eth:syzkaller0>
[  233.645418][T11286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.675607][T11289] openvswitch: netlink: nsh attr 60 is out of range max 3
[  233.700894][T11289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.739674][T11289] xt_CT: You must specify a L4 protocol and not use inversions on it
[  234.185842][T11317] __nla_validate_parse: 5 callbacks suppressed
[  234.185863][T11317] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1427'.
[  234.186894][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'.
[  234.429635][T11331] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1434'.
[  234.460536][T11331] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1434'.
[  236.530628][T11388] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1445'.
[  236.634373][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'.
[  236.685608][T10195] smc: removing ib device syz1
[  236.753878][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'.
[  237.198692][T11405] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  237.280635][T11408] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1451'.
[  237.741469][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'.
[  237.766327][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'.
[  238.163293][T11445] x_tables: duplicate underflow at hook 1
[  238.237341][T11455] bridge_slave_0: invalid flags given to default FDB implementation
[  238.328728][T11456] veth0_macvtap: left promiscuous mode
[  238.449442][T11463] block nbd0: Unsupported socket: should be TCP or UNIX.
[  238.492885][T11458] netlink: 'syz.4.1464': attribute type 1 has an invalid length.
[  238.690741][T11467] netlink: 'syz.2.1468': attribute type 10 has an invalid length.
[  238.712989][T11467] veth0_virt_wifi: entered allmulticast mode
[  238.761226][T11467] team0: Port device veth0_virt_wifi added
[  238.972244][T11475] bond0: entered promiscuous mode
[  238.988495][T11475] bond_slave_0: entered promiscuous mode
[  239.003870][T11475] bond_slave_1: entered promiscuous mode
[  239.027873][T11475] team0: entered promiscuous mode
[  239.033098][T11475] team_slave_0: entered promiscuous mode
[  239.047813][T11475] team_slave_1: entered promiscuous mode
[  239.075076][T11475] batadv0: entered promiscuous mode
[  239.094502][T11475] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  239.113830][T11475] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  239.143145][T11475] 8021q: adding VLAN 0 to HW filter on device hsr1
[  239.161207][T11480] ������Z7nz>RA�: Caught tx_queue_len zero misconfig
[  239.170796][T11484] sctp: [Deprecated]: syz.1.1473 (pid 11484) Use of int in max_burst socket option.
[  239.170796][T11484] Use struct sctp_assoc_value instead
[  239.519825][T11492] bond4: Removing last arp target with arp_interval on
[  239.988931][T11519] __nla_validate_parse: 4 callbacks suppressed
[  239.988950][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'.
[  240.037847][T11519] openvswitch: netlink: Key type 132 is out of range max 32
[  240.242563][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'.
[  241.012685][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[  241.056489][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[  241.184536][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'.
[  241.217966][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'.
[  241.821118][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1502'.
[  241.838467][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'.
[  241.883334][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1504'.
[  241.903377][T11585] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1504'.
[  241.911865][T11589] netlink: 'syz.3.1506': attribute type 1 has an invalid length.
[  241.936833][T11585] netlink: 'syz.2.1504': attribute type 9 has an invalid length.
[  242.121269][T11593] bond5: (slave gretap1): making interface the new active one
[  242.132934][T11593] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  242.162750][T11589] 8021q: adding VLAN 0 to HW filter on device bond5
[  242.179457][T11607] veth0: entered promiscuous mode
[  242.326370][T11610] Cannot find add_set index 2 as target
[  242.936840][T11598] veth0: left promiscuous mode
[  243.140567][T11647] netlink: 'syz.4.1525': attribute type 39 has an invalid length.
[  243.179695][T11644] netlink: 'syz.0.1524': attribute type 4 has an invalid length.
[  243.207550][T11644] `: renamed from bond0
[  243.302921][T11649] netlink: zone id is out of range
[  243.314085][T11649] netlink: zone id is out of range
[  243.319434][T11649] netlink: zone id is out of range
[  243.334066][T11649] netlink: zone id is out of range
[  243.341799][T11649] netlink: zone id is out of range
[  243.358401][T11649] netlink: zone id is out of range
[  243.363721][T11649] netlink: zone id is out of range
[  243.369941][T11649] netlink: zone id is out of range
[  243.375154][T11649] netlink: zone id is out of range
[  244.160963][T11700] xt_CT: You must specify a L4 protocol and not use inversions on it
[  244.442646][T11719] netlink: 'syz.4.1545': attribute type 1 has an invalid length.
[  244.451452][T11719] netlink: 'syz.4.1545': attribute type 4 has an invalid length.
[  244.644787][T11721] team0: Device gtp1 is of different type
[  244.735988][T11723] batadv1: entered allmulticast mode
[  245.171620][T11744] __nla_validate_parse: 8 callbacks suppressed
[  245.171640][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1555'.
[  245.250852][T11744] vlan0: entered promiscuous mode
[  245.255963][T11744] bridge0: entered promiscuous mode
[  245.304116][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'.
[  245.325392][T11748] dvmrp0: left allmulticast mode
[  245.521276][T11759] syz.0.1561: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  245.564548][T11762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1559'.
[  245.579276][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.0.1561 Not tainted syzkaller #0 PREEMPT(full) 
[  245.579303][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  245.579313][T11759] Call Trace:
[  245.579321][T11759]  <TASK>
[  245.579329][T11759]  dump_stack_lvl+0x189/0x250
[  245.579360][T11759]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  245.579391][T11759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.579416][T11759]  ? __pfx__printk+0x10/0x10
[  245.579437][T11759]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  245.579462][T11759]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  245.579496][T11759]  warn_alloc+0x214/0x310
[  245.579531][T11759]  ? __pfx_warn_alloc+0x10/0x10
[  245.579569][T11759]  ? __get_vm_area_node+0x28f/0x300
[  245.579595][T11759]  ? xskq_create+0xbf/0x170
[  245.579624][T11759]  __vmalloc_node_range_noprof+0x690/0x12d0
[  245.579688][T11759]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  245.579719][T11759]  ? __kasan_kmalloc+0x93/0xb0
[  245.579754][T11759]  vmalloc_user_noprof+0xad/0xf0
[  245.579778][T11759]  ? xskq_create+0xbf/0x170
[  245.579802][T11759]  xskq_create+0xbf/0x170
[  245.579829][T11759]  xsk_init_queue+0xb0/0x110
[  245.579857][T11759]  xsk_setsockopt+0x57b/0x8d0
[  245.579884][T11759]  ? __pfx_xsk_setsockopt+0x10/0x10
[  245.579912][T11759]  ? __pfx_aa_sk_perm+0x10/0x10
[  245.579942][T11759]  ? aa_sock_opt_perm+0xff/0x1b0
[  245.579972][T11759]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  245.579990][T11759]  ? __pfx_xsk_setsockopt+0x10/0x10
[  245.580015][T11759]  do_sock_setsockopt+0x17c/0x1b0
[  245.580040][T11759]  __x64_sys_setsockopt+0x13f/0x1b0
[  245.580066][T11759]  do_syscall_64+0xfa/0xfa0
[  245.580091][T11759]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.580116][T11759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.580135][T11759]  ? clear_bhb_loop+0x60/0xb0
[  245.580159][T11759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.580177][T11759] RIP: 0033:0x7f3f00b8f6c9
[  245.580195][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.580219][T11759] RSP: 002b:00007f3f01a9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  245.580240][T11759] RAX: ffffffffffffffda RBX: 00007f3f00de5fa0 RCX: 00007f3f00b8f6c9
[  245.580254][T11759] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  245.580266][T11759] RBP: 00007f3f00c11f91 R08: 0000000000000004 R09: 0000000000000000
[  245.580277][T11759] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.580289][T11759] R13: 00007f3f00de6038 R14: 00007f3f00de5fa0 R15: 00007ffe19650fa8
[  245.580326][T11759]  </TASK>
[  245.580334][T11759] Mem-Info:
[  245.791852][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'.
[  245.810486][T11759] active_anon:5860 inactive_anon:0 isolated_anon:0
[  245.810486][T11759]  active_file:3014 inactive_file:39931 isolated_file:0
[  245.810486][T11759]  unevictable:768 dirty:47 writeback:0
[  245.810486][T11759]  slab_reclaimable:11151 slab_unreclaimable:99116
[  245.810486][T11759]  mapped:29219 shmem:1359 pagetables:1181
[  245.810486][T11759]  sec_pagetables:0 bounce:0
[  245.810486][T11759]  kernel_misc_reclaimable:0
[  245.810486][T11759]  free:1321273 free_pcp:17454 free_cma:0
[  245.940743][T11759] Node 0 active_anon:23440kB inactive_anon:0kB active_file:12056kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116876kB dirty:188kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13652kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  245.989845][T11759] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  246.022251][T11772] veth7: entered allmulticast mode
[  246.031003][T11759] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  246.175280][T11759] lowmem_reserve[]: 0 2505 2505 2505 2505
[  246.212085][T11759] Node 0 DMA32 free:1377388kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23316kB inactive_anon:0kB active_file:12056kB inactive_file:159528kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:47504kB local_pcp:26048kB free_cma:0kB
[  246.320069][T11759] lowmem_reserve[]: 0 0 0 0 0
[  246.335216][T11759] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  246.369121][T11759] lowmem_reserve[]: 0 0 0 0 0
[  246.374442][T11759] Node 1 Normal free:3895672kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19088kB local_pcp:8080kB free_cma:0kB
[  246.409473][T11759] lowmem_reserve[]: 0 0 0 0 0
[  246.417768][T11759] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  246.442638][T11759] Node 0 DMA32: 624*4kB (UM) 152*8kB (UME) 89*16kB (UME) 213*32kB (UM) 33*64kB (UME) 25*128kB (UME) 9*256kB (UM) 11*512kB (UM) 13*1024kB (UME) 12*2048kB (UME) 321*4096kB (UM) = 1377904kB
[  246.462053][T11759] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  246.499575][T11759] Node 1 Normal: 194*4kB (UM) 42*8kB (UME) 32*16kB (UME) 87*32kB (UME) 33*64kB (UME) 4*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895672kB
[  246.557849][T11759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  246.579517][T11759] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  246.604370][T11759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  246.633312][T11759] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  246.656626][T11759] 44300 total pagecache pages
[  246.668416][T11759] 0 pages in swap cache
[  246.674838][T11759] Free swap  = 124996kB
[  246.694407][T11759] Total swap = 124996kB
[  246.700030][T11759] 2097051 pages RAM
[  246.703912][T11759] 0 pages HighMem/MovableOnly
[  246.716462][T11759] 424119 pages reserved
[  246.724465][T11759] 0 pages cma reserved
[  246.947812][T11826] netlink: 'syz.4.1578': attribute type 14 has an invalid length.
[  247.021319][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'.
[  247.051956][T10202] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.064309][T10202] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.094739][T10202] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.124678][T10202] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.294753][T11839] ipvlan0: entered promiscuous mode
[  247.525408][T11852] netlink: 'syz.1.1586': attribute type 1 has an invalid length.
[  247.550031][T11852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1586'.
[  247.570829][T11852] SET target dimension over the limit!
[  247.578140][T11852] netlink: 'syz.1.1586': attribute type 11 has an invalid length.
[  247.613268][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'.
[  247.945377][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1591'.
[  248.041298][T11889] netlink: 'syz.3.1593': attribute type 1 has an invalid length.
[  248.109094][T11892] macsec0: entered promiscuous mode
[  248.114890][T11892] macsec0: entered allmulticast mode
[  248.161058][T11889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1593'.
[  248.226303][T11895] 8021q: adding VLAN 0 to HW filter on device bond7
[  248.256533][T11895] bond6: (slave bond7): making interface the new active one
[  248.279344][T11895] bond6: (slave bond7): Enslaving as an active interface with an up link
[  248.293252][T11892] veth1_macvtap: entered allmulticast mode
[  248.307785][T11892] macsec0: left promiscuous mode
[  248.313089][T11892] macsec0: left allmulticast mode
[  248.318357][T11892] veth1_macvtap: left allmulticast mode
[  248.332682][T11889] 8021q: adding VLAN 0 to HW filter on device bond6
[  248.575561][T11912] nbd: must specify a device to reconfigure
[  248.746527][T11924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1604'.
[  249.149815][T11941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.188940][T11942] tipc: Resetting bearer <eth:syzkaller0>
[  249.227706][T11940] tipc: Disabling bearer <eth:syzkaller0>
[  250.091239][T11990] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  250.316042][T12000] __nla_validate_parse: 6 callbacks suppressed
[  250.316064][T12000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1629'.
[  250.476933][T12008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.498766][T12008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.654914][T12008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.668134][T12008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.751578][T12027] netlink: 'syz.4.1637': attribute type 17 has an invalid length.
[  250.796419][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'.
[  250.811600][T12034] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1637'.
[  250.857655][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'.
[  250.884003][T12008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.905360][T12008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.936227][T12034] team0: No ports can be present during mode change
[  251.036682][T12008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  251.072435][T12008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.360264][T10197] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  251.368935][T10197] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.442007][T12058] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002
[  251.502324][T10190] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  251.513584][T10190] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.532261][T10190] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  251.557343][T10190] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.634516][T10190] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  251.676288][T10190] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.689439][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'.
[  251.699411][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'.
[  252.003732][T12086] pimreg: left allmulticast mode
[  252.240208][T12094] netlink: 'syz.0.1652': attribute type 29 has an invalid length.
[  252.277281][T12097] netlink: 'syz.0.1652': attribute type 29 has an invalid length.
[  252.438948][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1654'.
[  252.542937][T12113] net_ratelimit: 3 callbacks suppressed
[  252.543005][T12113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.870733][T12128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.879707][T12128] syzkaller0: entered promiscuous mode
[  252.888189][T12128] syzkaller0: entered allmulticast mode
[  252.940592][T12128] syzkaller0: mtu less than device minimum
[  252.953002][T12126] tipc: Resetting bearer <eth:syzkaller0>
[  252.980212][T12126] tipc: Disabling bearer <eth:syzkaller0>
[  253.243553][T12149] bridge0: port 2(syz_tun) entered blocking state
[  253.252826][T12149] bridge0: port 2(syz_tun) entered disabled state
[  253.286420][T12149] syz_tun: entered allmulticast mode
[  253.336415][T12149] syz_tun: entered promiscuous mode
[  253.385205][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'.
[  253.459313][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'.
[  253.653608][T12175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1677'.
[  254.320901][T12209] IPVS: set_ctl: invalid protocol: 92 172.30.0.3:20002
[  254.706861][T12235] netlink: 'syz.0.1697': attribute type 2 has an invalid length.
[  254.758994][T12236] netlink: 'syz.0.1697': attribute type 2 has an invalid length.
[  255.154581][T12266] team0: Caught tx_queue_len zero misconfig
[  255.556657][T12285] __nla_validate_parse: 9 callbacks suppressed
[  255.556678][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'.
[  255.579837][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'.
[  255.599577][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1707'.
[  255.763281][T12293] sit0: Caught tx_queue_len zero misconfig
[  255.875862][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.563280][T12328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.583567][T12328] syzkaller0: entered promiscuous mode
[  256.607155][T12328] syzkaller0: entered allmulticast mode
[  256.638864][T12328] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  256.703405][T12328] tipc: Resetting bearer <eth:syzkaller0>
[  256.723168][T12327] tipc: Resetting bearer <eth:syzkaller0>
[  256.764737][T12327] tipc: Disabling bearer <eth:syzkaller0>
[  256.981756][T12350] netlink: 'syz.2.1722': attribute type 39 has an invalid length.
[  256.996692][T12346] SET target dimension over the limit!
[  257.096393][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1726'.
[  257.225734][T12366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.283078][T12368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1728'.
[  257.391308][T12371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.426380][T12371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  257.579434][T12371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.605657][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1736'.
[  257.625667][T12371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  257.730427][T12371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.744673][T12371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  257.849197][T12371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.878590][T12371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  257.928238][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'.
[  257.939008][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'.
[  257.950163][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'.
[  257.978320][T12414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.034669][T10195] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.045023][T10195] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  258.071272][T10195] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.080694][T10195] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  258.113796][T10195] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.123824][T10195] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  258.150899][ T6977] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.160051][ T6977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  259.042838][T12469] syzkaller1: entered promiscuous mode
[  259.054330][T12469] syzkaller1: entered allmulticast mode
[  259.092710][T12470] netlink: 'syz.4.1754': attribute type 21 has an invalid length.
[  259.108771][T12470] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1754'.
[  259.668178][T12511] netlink: 'syz.0.1766': attribute type 10 has an invalid length.
[  259.700657][T12511] batadv0: entered allmulticast mode
[  259.726134][T12515] netlink: 'syz.0.1766': attribute type 10 has an invalid length.
[  259.735420][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.770984][T12511] `: (slave batadv0): Enslaving as an active interface with an up link
[  259.798794][T12515] batadv0: entered promiscuous mode
[  259.831182][T12515] `: (slave batadv0): Releasing backup interface
[  259.873823][T12515] bridge0: port 3(batadv0) entered blocking state
[  259.888853][T12515] bridge0: port 3(batadv0) entered disabled state
[  259.925099][T12516] xt_addrtype: ipv6 does not support BROADCAST matching
[  260.287227][T10190] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  260.296730][T10190] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  260.367613][T12544] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004
[  260.648595][T12559] netlink: 'syz.3.1777': attribute type 2 has an invalid length.
[  261.215650][T12589] __nla_validate_parse: 7 callbacks suppressed
[  261.215671][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'.
[  261.224733][T12590] x_tables: duplicate underflow at hook 2
[  261.255285][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1788'.
[  261.256038][T12590] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  261.355920][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'.
[  261.548118][T12597] hsr_slave_0 (unregistering): left promiscuous mode
[  261.872487][T12627] tipc: MTU too low for tipc bearer
[  262.138868][T12641] geneve1: entered allmulticast mode
[  262.531282][T12662] syzkaller0: entered promiscuous mode
[  262.544552][T12662] syzkaller0: entered allmulticast mode
[  262.588773][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'.
[  263.240031][T12701] netem: change failed
[  263.258986][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'.
[  263.517969][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'.
[  263.568110][T12712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1817'.
[  263.663806][T12719] xt_CT: You must specify a L4 protocol and not use inversions on it
[  264.140329][T12753] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  264.286615][T12760] geneve2: left promiscuous mode
[  264.320643][T12760] vlan2: left promiscuous mode
[  264.366478][ T6977] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.376018][ T6977] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20002 - 0
[  264.401297][ T6977] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.426848][ T6977] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20002 - 0
[  264.448827][ T6977] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.473482][ T6977] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20002 - 0
[  264.482658][ T6977] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.491889][ T6977] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20002 - 0
[  264.712829][T12774] sch_fq: defrate 0 ignored.
[  264.756123][T12776] SET target dimension over the limit!
[  264.788229][T12776] tipc: Started in network mode
[  264.793433][T12776] tipc: Node identity e24f76b5170c, cluster identity 4711
[  264.805534][T12776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.814517][T12776] syzkaller0: entered promiscuous mode
[  264.820813][T12776] syzkaller0: entered allmulticast mode
[  264.842064][T12776] tipc: Resetting bearer <eth:syzkaller0>
[  264.849811][T12776] xt_recent: Unsupported userspace flags (000000b1)
[  264.853647][T12779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1837'.
[  264.865890][T12775] tipc: Resetting bearer <eth:syzkaller0>
[  264.882402][T12775] tipc: Disabling bearer <eth:syzkaller0>
[  264.902021][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'.
[  265.031353][T12784] netlink: 'syz.4.1839': attribute type 12 has an invalid length.
[  265.050297][T12784] netlink: 'syz.4.1839': attribute type 29 has an invalid length.
[  265.067907][T12784] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1839'.
[  265.099644][T12784] netlink: 'syz.4.1839': attribute type 2 has an invalid length.
[  265.120798][T12784] netlink: 'syz.4.1839': attribute type 3 has an invalid length.
[  265.372261][T12799] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  265.483974][T12802] syzkaller0: entered promiscuous mode
[  265.500614][T12802] syzkaller0: entered allmulticast mode
[  265.941693][T12821] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003
[  266.685446][T12862] __nla_validate_parse: 4 callbacks suppressed
[  266.685471][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1861'.
[  266.770487][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1862'.
[  266.783159][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'.
[  266.824290][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'.
[  266.888348][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'.
[  267.028392][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[  267.030011][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[  267.049461][T12876] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1866'.
[  267.064999][T12886] tipc: Can't bind to reserved service type 2
[  267.087416][T12882] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1866'.
[  267.196574][T12897] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1870'.
[  267.286145][T12897] bond8 (unregistering): Released all slaves
[  267.387792][ T5847] Bluetooth: hci0: command tx timeout
[  267.814341][T12926] ieee802154 phy0 wpan0: encryption failed: -22
[  267.843798][T12928] xt_CT: You must specify a L4 protocol and not use inversions on it
[  268.152058][T12951] bridge6: entered promiscuous mode
[  268.157938][T12951] bridge6: entered allmulticast mode
[  268.165279][T12952] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  268.221404][T12952] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  268.243326][T12952] bond7 (unregistering): Released all slaves
[  268.525291][T12979] netlink: 'syz.0.1893': attribute type 5 has an invalid length.
[  268.559449][T12980] netlink: 'syz.0.1893': attribute type 5 has an invalid length.
[  290.107905][ T7319] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec
[  293.326683][T13010] __nla_validate_parse: 5 callbacks suppressed
[  293.326705][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  293.396009][T13017] bond5: entered allmulticast mode
[  293.413164][T13023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1902'.
[  293.423963][T13017] 8021q: adding VLAN 0 to HW filter on device bond5
[  293.436696][T13017] bridge0: port 3(bond5) entered blocking state
[  293.444784][T13017] bridge0: port 3(bond5) entered disabled state
[  293.460630][T13017] bond5: entered promiscuous mode
[  293.663269][T13035] macvtap1: entered allmulticast mode
[  293.669911][T13035] veth0_macvtap: entered allmulticast mode
[  293.776725][T13043] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1914'.
[  293.921751][T13048] netlink: 'syz.3.1916': attribute type 1 has an invalid length.
[  293.981065][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  294.000103][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'.
[  294.202981][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'.
[  294.249510][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'.
[  294.255360][T13068] syzkaller0: entered promiscuous mode
[  294.264267][T13068] syzkaller0: entered allmulticast mode
[  294.279520][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'.
[  294.551865][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'.
[  294.565101][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'.
[  294.870180][T13107] netlink: 'syz.3.1934': attribute type 7 has an invalid length.
[  294.879744][T13108] netlink: 'syz.0.1933': attribute type 1 has an invalid length.
[  294.952596][T13108] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.976051][T13116] vlan0: entered promiscuous mode
[  294.981321][T13116] bond0: entered promiscuous mode
[  294.986618][T13116] vlan0: entered allmulticast mode
[  294.992503][T13116] bond0: entered allmulticast mode
[  295.020398][T13107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.052725][T13108] bond0: (slave gretap1): making interface the new active one
[  295.060703][T13108] gretap1: entered promiscuous mode
[  295.070169][T13108] gretap1: entered allmulticast mode
[  295.076893][T13108] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96
[  295.089407][T13108] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  295.129819][T13107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.225644][T13107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.350279][T13107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.497855][   T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.530679][   T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.549684][   T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.583126][T13131] openvswitch: netlink: nsh attribute has 65492 unknown bytes.
[  295.592586][   T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.601092][T13131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.626209][T13135] netlink: 'syz.1.1943': attribute type 12 has an invalid length.
[  295.662175][T13135] bond7: option primary_reselect: invalid value (255)
[  295.674623][T13135] bond7 (unregistering): Released all slaves
[  295.950953][T13157] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  296.015272][T13164] netlink: 'syz.0.1946': attribute type 10 has an invalid length.
[  296.035092][T13164] team0: Port device geneve0 added
[  296.052223][T10190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.074984][T10190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.106187][T10190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.119264][T10190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.196885][T13174] openvswitch: netlink: Missing key (keys=40, expected=100)
[  296.783453][T13204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.810400][T13210] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003
[  297.095251][T13229] netlink: 'syz.2.1971': attribute type 63 has an invalid length.
[  297.112636][T13229] netlink: 'syz.2.1971': attribute type 63 has an invalid length.
[  297.130176][T13230] netlink: 'syz.4.1972': attribute type 11 has an invalid length.
[  297.802706][T13269] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  297.843082][T13272] batman_adv: batadv0: Adding interface: macsec2
[  297.861511][T13272] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.891557][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.903250][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.914047][T13272] batman_adv: batadv0: Interface activated: macsec2
[  298.465634][T13302] netlink: 'syz.1.1994': attribute type 16 has an invalid length.
[  298.474132][T13302] netlink: 'syz.1.1994': attribute type 4 has an invalid length.
[  298.488567][T13304] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.506531][T13304] bond0: (slave rose0): Enslaving as an active interface with an up link
[  298.741592][T13318] __nla_validate_parse: 15 callbacks suppressed
[  298.741617][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'.
[  298.952166][T13334] netlink: 'syz.2.1998': attribute type 13 has an invalid length.
[  298.953696][T13333] netlink: 528 bytes leftover after parsing attributes in process `syz.4.2002'.
[  298.969941][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'.
[  299.141769][T13338] macvtap1: entered promiscuous mode
[  299.169253][T13338] macvtap1: entered allmulticast mode
[  299.185138][T13344] netlink: 'syz.1.2003': attribute type 21 has an invalid length.
[  299.250059][T13343] ipvlan2: entered promiscuous mode
[  299.356937][T13344] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  299.405713][T13344] bond7 (unregistering): Released all slaves
[  299.806130][T13382] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  299.806750][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'.
[  299.829951][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'.
[  299.842092][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'.
[  299.856637][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'.
[  299.883890][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'.
[  300.212948][T13406] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  300.235419][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'.
[  300.247435][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'.
[  300.259797][T13406] bond7 (unregistering): Released all slaves
[  300.421315][T13418] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  300.435113][T13418] bond6 (unregistering): Released all slaves
[  300.812984][T13444] lo: entered promiscuous mode
[  300.829756][T13444] tunl0: entered promiscuous mode
[  300.855101][T13444] gre0: entered promiscuous mode
[  300.882337][T13444] gretap0: entered promiscuous mode
[  300.908090][T13444] erspan0: entered promiscuous mode
[  300.938534][T13444] ip_vti0: entered promiscuous mode
[  300.961894][T13444] ip6_vti0: entered promiscuous mode
[  300.978416][T13444] sit0: entered promiscuous mode
[  300.984089][T13444] ip6tnl0: entered promiscuous mode
[  300.992456][T13444] ip6gre0: entered promiscuous mode
[  301.009130][T13444] ip6gretap0: entered promiscuous mode
[  301.015105][T13444] vcan0: entered promiscuous mode
[  301.024762][T13444] dummy0: entered promiscuous mode
[  301.030366][T13444] nlmon0: entered promiscuous mode
[  301.035900][T13444] caif0: entered promiscuous mode
[  301.042178][T13444] veth0: entered promiscuous mode
[  301.048046][T13444] veth1: entered promiscuous mode
[  301.053446][T13444] wg0: entered promiscuous mode
[  301.063608][T13444] wg1: entered promiscuous mode
[  301.073731][T13444] wg2: entered promiscuous mode
[  301.094036][T13444] veth0_to_bridge: entered promiscuous mode
[  301.101040][T13444] veth1_to_bridge: entered promiscuous mode
[  301.119993][T13444] veth0_to_bond: entered promiscuous mode
[  301.128183][T13444] veth1_to_bond: entered promiscuous mode
[  301.134372][T13444] veth0_to_team: entered promiscuous mode
[  301.141514][T13444] veth1_to_team: entered promiscuous mode
[  301.149088][T13444] veth0_to_batadv: entered promiscuous mode
[  301.155472][T13444] batadv_slave_0: entered promiscuous mode
[  301.163097][T13444] veth1_to_batadv: entered promiscuous mode
[  301.169862][T13444] batadv_slave_1: entered promiscuous mode
[  301.176143][T13444] xfrm0: entered promiscuous mode
[  301.182270][T13444] veth1_to_hsr: entered promiscuous mode
[  301.188691][T13444] hsr0: entered promiscuous mode
[  301.194200][T13444] veth1_virt_wifi: entered promiscuous mode
[  301.201092][T13444] veth0_virt_wifi: entered promiscuous mode
[  301.207827][T13444] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  301.215686][T13444] macvtap0: entered promiscuous mode
[  301.222092][T13444] macsec0: entered promiscuous mode
[  301.229111][T13444] geneve0: entered promiscuous mode
[  301.234767][T13444] geneve1: entered promiscuous mode
[  301.240336][T13444] geneve1: left allmulticast mode
[  301.248032][T13444] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  301.255415][T13444] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  301.263218][T13444] vxlan0: entered promiscuous mode
[  301.268833][T13444] veth2: entered promiscuous mode
[  301.274371][T13444] veth3: entered promiscuous mode
[  301.279918][T13444] netdevsim netdevsim4 eth0: entered promiscuous mode
[  301.287750][T13444] netdevsim netdevsim4 eth1: entered promiscuous mode
[  301.294848][T13444] netdevsim netdevsim4 eth2: entered promiscuous mode
[  301.302319][T13444] netdevsim netdevsim4 eth3: entered promiscuous mode
[  301.310788][T13444] ;: entered promiscuous mode
[  301.315874][T13444] bond1: entered promiscuous mode
[  301.322210][T13444] bridge1: entered promiscuous mode
[  301.328171][T13444] veth4: entered promiscuous mode
[  301.333508][T13444] veth5: entered promiscuous mode
[  301.339232][T13444] bridge2: entered promiscuous mode
[  301.344727][T13444] macsec1: entered promiscuous mode
[  301.350447][T13444] syztnl0: entered promiscuous mode
[  301.355905][T13444] syztnl2: entered promiscuous mode
[  301.363339][T13444] hsr1: entered promiscuous mode
[  301.371033][T13444] bond2: entered promiscuous mode
[  301.376378][T13444] ip6tnl1: entered promiscuous mode
[  301.382318][T13444] ip6gretap1: entered promiscuous mode
[  301.388130][T13444] mac80211_hwsim hwsim9 t: entered promiscuous mode
[  301.396666][T13444] @: entered promiscuous mode
[  301.406305][T13444] bridge3: entered promiscuous mode
[  301.413969][T13444] bond3: entered promiscuous mode
[  301.419542][T13444] ipip0: entered promiscuous mode
[  301.425608][T13444] bridge4: entered promiscuous mode
[  301.433367][T13444] bond4: entered promiscuous mode
[  301.439724][T13444] bridge5: entered promiscuous mode
[  301.448364][T13444] wireguard0: entered promiscuous mode
[  301.454477][T13444] sit1: entered promiscuous mode
[  301.460782][T13444] gtp0: entered promiscuous mode
[  301.466126][T13444] batman_adv: batadv0: Interface deactivated: macsec2
[  301.473799][T13444] macsec2: entered promiscuous mode
[  301.480770][T13444] macsec3: entered promiscuous mode
[  301.488601][T13444] ip6gre1: entered promiscuous mode
[  301.515861][T10190] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.529185][T10190] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.549667][T10190] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.576397][T10190] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.075400][T13501] sctp: [Deprecated]: syz.4.2036 (pid 13501) Use of int in maxseg socket option.
[  302.075400][T13501] Use struct sctp_assoc_value instead
[  302.299705][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.325739][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.336892][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.384813][T13513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  302.419547][T13528] bridge0: the hash_elasticity option has been deprecated and is always 16
[  302.472471][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.510761][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.536147][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.593991][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.604649][T13513] hsr0 speed is unknown, defaulting to 1000
[  302.803734][T13548] netlink: 'syz.2.2048': attribute type 19 has an invalid length.
[  302.972434][T13558] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  303.382063][T13578] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  303.481972][T13583] syzkaller0: entered promiscuous mode
[  303.487943][T13583] syzkaller0: entered allmulticast mode
[  303.855508][T13609] __nla_validate_parse: 10 callbacks suppressed
[  303.855531][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2066'.
[  305.244757][T13609] geneve2: entered promiscuous mode
[  305.342338][T13628] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  305.376902][T13630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2072'.
[  305.444201][T13628] block nbd0: Unsupported socket: should be TCP or UNIX.
[  305.507805][T13638] netlink: 'syz.0.2073': attribute type 21 has an invalid length.
[  305.539291][T13640] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2075'.
[  305.553046][T13641] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  305.556857][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'.
[  305.628714][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'.
[  305.640521][T13644] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2076'.
[  305.845434][T13661] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2080'.
[  306.174708][T13677] netlink: 'syz.4.2086': attribute type 30 has an invalid length.
[  306.232219][T13678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2086'.
[  306.274763][T13680] netlink: 294 bytes leftover after parsing attributes in process `syz.0.2087'.
[  306.288244][T13680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.381923][T13677] netlink: 'syz.4.2086': attribute type 1 has an invalid length.
[  306.389971][T13677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2086'.
[  306.461921][T13691] netlink: 'syz.0.2091': attribute type 1 has an invalid length.
[  306.469267][T13693] syzkaller0: entered promiscuous mode
[  306.475190][T13693] syzkaller0: entered allmulticast mode
[  306.571592][T13696] syz_tun: entered allmulticast mode
[  306.808042][T13712] netlink: 'syz.3.2097': attribute type 7 has an invalid length.
[  306.835097][T13712] netlink: 'syz.3.2097': attribute type 7 has an invalid length.
[  306.959244][T13721] netlink: 'syz.4.2104': attribute type 16 has an invalid length.
[  306.968019][T13721] netlink: 'syz.4.2104': attribute type 17 has an invalid length.
[  306.976783][T13721] lo: left promiscuous mode
[  307.007518][T13721] tunl0: left promiscuous mode
[  307.016232][T13721] gre0: left promiscuous mode
[  307.038521][T13721] gretap0: left promiscuous mode
[  307.061827][T13721] erspan0: left promiscuous mode
[  307.089674][T13721] ip_vti0: left promiscuous mode
[  307.093629][T13728] delete_channel: no stack
[  307.096305][T13721] ip6_vti0: left promiscuous mode
[  307.109824][T13721] sit0: left promiscuous mode
[  307.131498][T13721] ip6tnl0: left promiscuous mode
[  307.149451][T13721] ip6gre0: left promiscuous mode
[  307.156553][T13721] ip6gretap0: left promiscuous mode
[  307.159453][T13732] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.200176][T13721] vcan0: left promiscuous mode
[  307.216783][T13721] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.242403][T13721] 8021q: adding VLAN 0 to HW filter on device team0
[  307.258194][T13721] dummy0: left promiscuous mode
[  307.263715][T13721] batman_adv: batadv0: Interface activated: dummy0
[  307.270704][T13721] batadv0: mtu less than device minimum
[  307.278310][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.290665][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.302825][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.314111][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.325337][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.336580][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.348261][T13721] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  307.373681][T13721] nlmon0: left promiscuous mode
[  307.389059][T13721] caif0: left promiscuous mode
[  307.406851][T13695] syz_tun: left allmulticast mode
[  307.755518][T13765] block nbd0: Unsupported socket: should be TCP or UNIX.
[  307.983494][T13770] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  308.000296][T13770] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  308.282095][T13780] netlink: 'syz.3.2122': attribute type 1 has an invalid length.
[  308.310242][T13776] syzkaller0: entered promiscuous mode
[  308.315916][T13776] syzkaller0: entered allmulticast mode
[  308.449562][T13788] xt_policy: too many policy elements
[  308.469411][T13788] netlink: 'syz.0.2124': attribute type 39 has an invalid length.
[  308.551586][T13793] delete_channel: no stack
[  310.056066][T13797] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.323890][T13816] syzkaller0: entered promiscuous mode
[  310.330908][T13816] syzkaller0: entered allmulticast mode
[  310.833132][T13852] xt_connbytes: Forcing CT accounting to be enabled
[  310.840228][T13852] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.988899][T13836] syzkaller0: entered promiscuous mode
[  312.002706][T13836] syzkaller0: entered allmulticast mode
[  312.045112][T13848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.107729][T13832] tipc: Resetting bearer <eth:syzkaller0>
[  312.129914][T13857] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[  312.175413][T13832] tipc: Disabling bearer <eth:syzkaller0>
[  312.552746][T13879] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  312.591736][T13879] netlink: 'syz.0.2142': attribute type 4 has an invalid length.
[  312.627214][T13879] __nla_validate_parse: 3 callbacks suppressed
[  312.627247][T13879] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2142'.
[  312.691441][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'.
[  312.930221][T13900] netlink: 'syz.4.2152': attribute type 11 has an invalid length.
[  313.022616][T13911] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2151'.
[  313.623758][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  313.633789][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'.
[  313.749818][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'.
[  314.004304][T13961] netlink: 'syz.3.2163': attribute type 4 has an invalid length.
[  314.038127][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  314.059754][T13968] netlink: 'syz.1.2166': attribute type 2 has an invalid length.
[  314.080836][T13968] netlink: 'syz.1.2166': attribute type 2 has an invalid length.
[  314.098984][T13971] netlink: 'syz.1.2166': attribute type 2 has an invalid length.
[  314.218851][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'.
[  314.320885][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'.
[  314.436775][T13988] SET target dimension over the limit!
[  314.482709][T13995] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  314.501798][T13994] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  314.502119][T13993] tipc: Invalid UDP bearer configuration
[  314.519826][T13993] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  314.578668][T13997] syzkaller0: entered promiscuous mode
[  314.584203][T13997] syzkaller0: entered allmulticast mode
[  314.800484][T14015] netlink: 'syz.1.2181': attribute type 10 has an invalid length.
[  314.841524][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2181'.
[  314.872180][T14015] batadv0: entered promiscuous mode
[  314.887988][T14020] netlink: 'syz.1.2181': attribute type 21 has an invalid length.
[  314.897456][T14015] batadv0: entered allmulticast mode
[  314.908571][T14015] bridge0: port 4(batadv0) entered blocking state
[  314.938884][T14015] bridge0: port 4(batadv0) entered disabled state
[  315.051069][T10202] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  315.060438][T10202] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  315.337664][T14049] tipc: Trying to set illegal importance in message
[  315.497630][T14058] Cannot find del_set index 49151 as target
[  315.658531][T14069] net_ratelimit: 13 callbacks suppressed
[  315.658553][T14069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.750036][T14079] vlan4: entered promiscuous mode
[  315.755229][T14079] bond0: entered promiscuous mode
[  315.761036][T14079] !��: entered promiscuous mode
[  315.766212][T14079] bond_slave_1: entered promiscuous mode
[  315.818693][T14071] wg2: entered promiscuous mode
[  315.834779][T14071] wg2: entered allmulticast mode
[  316.184860][T14096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.253373][T14104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.345971][T14096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.362736][T14096] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  316.489635][T14112] netlink: 'syz.4.2207': attribute type 2 has an invalid length.
[  316.879835][T14133] batadv1: entered allmulticast mode
[  316.928432][T14134] !
: renamed from dummy0
[  317.681221][T14191] __nla_validate_parse: 8 callbacks suppressed
[  317.681242][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2232'.
[  317.711874][T14193] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2231'.
[  317.711978][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  317.747408][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  319.057225][T10192] batman_adv: batadv0: IGMP Querier appeared
[  319.063251][T10192] batman_adv: batadv0: MLD Querier appeared
[  337.587649][T14236] openvswitch: netlink: Message has 536 unknown bytes.
[  337.637350][T14236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.639222][T14233] netlink: 'syz.1.2245': attribute type 1 has an invalid length.
[  337.833864][T14256] syzkaller0: entered promiscuous mode
[  337.839613][T14256] syzkaller0: entered allmulticast mode
[  337.910600][T14257] pim6reg527: entered allmulticast mode
[  337.923032][T14262] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  337.990194][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'.
[  338.160860][T14283] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2257'.
[  338.170737][T14285] netlink: 'syz.2.2258': attribute type 1 has an invalid length.
[  338.183735][T14286] netlink: 'syz.2.2258': attribute type 1 has an invalid length.
[  338.183882][T14283] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  338.214857][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2257'.
[  338.416589][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'.
[  338.495328][T14305] dummy0 (unregistering): left allmulticast mode
[  338.503891][T14305] dummy0 (unregistering): left promiscuous mode
[  338.511583][T14305] bridge0: port 3(dummy0) entered disabled state
[  338.660331][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'.
[  338.675239][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'.
[  338.685569][T14319] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  338.743208][T14326] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2270'.
[  338.754515][T14326] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  338.843094][T14333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.851528][T14333] syzkaller0: entered promiscuous mode
[  338.857650][T14333] syzkaller0: entered allmulticast mode
[  338.887513][T14333] tipc: Resetting bearer <eth:syzkaller0>
[  338.896657][T14332] tipc: Resetting bearer <eth:syzkaller0>
[  338.912850][T14332] tipc: Disabling bearer <eth:syzkaller0>
[  339.186525][T14349] netlink: 'syz.0.2277': attribute type 3 has an invalid length.
[  339.209061][T14354] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2280'.
[  339.235740][T14348] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2277'.
[  339.264836][T14348] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2277'.
[  339.293145][T14361] erspan0: entered promiscuous mode
[  339.315876][T14361] erspan0: entered allmulticast mode
[  339.330728][T14360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.363348][T14360] tipc: Resetting bearer <eth:syzkaller0>
[  339.404867][T14358] tipc: Disabling bearer <eth:syzkaller0>
[  339.528938][T14378] bond0: Caught tx_queue_len zero misconfig
[  339.550924][T14368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.591381][T14373] tipc: Enabled bearer <udp:syz0>, priority 10
[  339.681917][T14386] syzkaller0: entered promiscuous mode
[  339.688084][T14386] syzkaller0: entered allmulticast mode
[  339.750761][T14386] tipc: Trying to set illegal importance in message
[  339.803678][T14390] IPVS: length: 239 != 24
[  340.321036][T14409] netlink: 'syz.1.2299': attribute type 2 has an invalid length.
[  340.781309][T14448] bond2: entered allmulticast mode
[  340.787907][T14448] 8021q: adding VLAN 0 to HW filter on device bond2
[  341.180748][T14448] x_tables: duplicate underflow at hook 1
[  341.204857][T14468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.218497][T14468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.950323][T14479] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  343.278051][T14517] netlink: 'syz.2.2332': attribute type 10 has an invalid length.
[  343.318230][T14522] netlink: 'syz.1.2333': attribute type 12 has an invalid length.
[  343.586496][T14535] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  343.784696][T14513] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  343.801838][T14542] __nla_validate_parse: 12 callbacks suppressed
[  343.801859][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2342'.
[  344.218897][T14558] netlink: 'syz.2.2346': attribute type 10 has an invalid length.
[  344.281857][T14571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.289793][T14571] syzkaller0: entered promiscuous mode
[  344.295378][T14571] syzkaller0: entered allmulticast mode
[  344.328243][T14571] tipc: Resetting bearer <eth:syzkaller0>
[  344.379308][T14576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2350'.
[  344.512720][T14570] tipc: Resetting bearer <eth:syzkaller0>
[  344.567612][T14570] tipc: Disabling bearer <eth:syzkaller0>
[  344.722603][T14594] netlink: 'syz.3.2355': attribute type 11 has an invalid length.
[  344.849352][T14596] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2356'.
[  344.903495][T14598] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2356'.
[  345.075787][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'.
[  345.112109][T14612] vlan4: entered promiscuous mode
[  345.117774][T14612] bridge0: entered promiscuous mode
[  345.498500][T14634] netlink: 'syz.3.2368': attribute type 1 has an invalid length.
[  345.550965][T14634] 8021q: adding VLAN 0 to HW filter on device bond9
[  345.600357][T14645] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  345.654309][T14643] bond9: (slave geneve3): making interface the new active one
[  345.666002][T14643] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  345.712637][T14645] 8021q: adding VLAN 0 to HW filter on device bond5
[  345.729381][T10202] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.748843][T10202] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.785660][T14653] netlink: 'syz.1.2366': attribute type 9 has an invalid length.
[  345.810270][T14653] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2366'.
[  345.823394][T14647] bond5: (slave geneve2): making interface the new active one
[  345.853921][T14647] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  345.881047][T10202] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.898185][T10202] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.091422][T14670] x_tables: duplicate underflow at hook 2
[  346.120478][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2377'.
[  346.522738][T14692] syzkaller1: entered promiscuous mode
[  346.557520][T14692] syzkaller1: entered allmulticast mode
[  346.804341][T14709] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2390'.
[  346.881851][T14713] 8021q: adding VLAN 0 to HW filter on device bond6
[  347.137435][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2398'.
[  347.168070][T14735] unsupported nlmsg_type 40
[  347.246304][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'.
[  347.471541][T14752] netlink: 'syz.0.2399': attribute type 10 has an invalid length.
[  347.495522][T14752] xt_socket: unknown flags 0xe4
[  347.989590][T14778] syzkaller0: refused to change device tx_queue_len
[  348.312879][T14800] x_tables: duplicate underflow at hook 2
[  348.620558][T14816] netlink: 'syz.4.2423': attribute type 1 has an invalid length.
[  348.763434][T14823] netlink: 'syz.4.2426': attribute type 1 has an invalid length.
[  348.910279][T14833] __nla_validate_parse: 4 callbacks suppressed
[  348.910301][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'.
[  349.106013][T14847] ip6t_srh: unknown srh match flags  4000
[  349.168671][T14850] netlink: 'syz.4.2430': attribute type 1 has an invalid length.
[  349.169679][T14852] netlink: 'syz.1.2433': attribute type 1 has an invalid length.
[  349.335368][T14867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2437'.
[  349.348302][T14867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2437'.
[  349.365072][T14859] veth7: entered promiscuous mode
[  349.390938][T14852] syzkaller0: entered promiscuous mode
[  349.409724][T14852] syzkaller0: entered allmulticast mode
[  349.435337][T14867] gretap2: entered promiscuous mode
[  349.441571][T14867] gretap2: entered allmulticast mode
[  349.462666][T14852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.485559][T14851] tipc: Resetting bearer <eth:syzkaller0>
[  349.527710][T14851] tipc: Disabling bearer <eth:syzkaller0>
[  349.741467][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[  350.044684][T14910] netlink: 'syz.0.2449': attribute type 1 has an invalid length.
[  350.134257][T14910] 8021q: adding VLAN 0 to HW filter on device bond7
[  350.159284][T14911] bond7: (slave geneve3): making interface the new active one
[  350.168830][T14911] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  350.321556][T14925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.331871][T14925] syzkaller0: entered promiscuous mode
[  350.343589][T14925] syzkaller0: entered allmulticast mode
[  350.386549][T14924] tipc: Resetting bearer <eth:syzkaller0>
[  350.445851][T14924] tipc: Disabling bearer <eth:syzkaller0>
[  350.493887][T14934] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2454'.
[  350.510961][T14938] netlink: 'syz.1.2456': attribute type 1 has an invalid length.
[  350.707281][T14946] netlink: 'syz.0.2457': attribute type 83 has an invalid length.
[  350.753911][T14927] delete_channel: no stack
[  350.800197][T14949] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2460'.
[  351.047912][T14961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2465'.
[  351.164595][T14978] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  351.299452][T14983] netlink: 'syz.4.2471': attribute type 4 has an invalid length.
[  351.507140][T14996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2476'.
[  351.553643][T14998] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2475'.
[  351.859698][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2481'.
[  351.929707][T15015] netlink: 'syz.1.2482': attribute type 39 has an invalid length.
[  352.194890][T15027] netlink: 'syz.1.2488': attribute type 2 has an invalid length.
[  352.281705][T15031] netlink: 'syz.2.2490': attribute type 11 has an invalid length.
[  352.298518][T15027] 8021q: adding VLAN 0 to HW filter on device bond8
[  352.451146][T15040] syzkaller0: entered promiscuous mode
[  352.456774][T15040] syzkaller0: entered allmulticast mode
[  354.132447][T15153] __nla_validate_parse: 3 callbacks suppressed
[  354.132471][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'.
[  354.339254][T15170] sch_fq: defrate 0 ignored.
[  354.412526][T15177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  354.607211][T15190] validate_nla: 2 callbacks suppressed
[  354.607232][T15190] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  354.630253][T15190] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2528'.
[  354.639546][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  354.673479][T15194] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  354.697163][T15194] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2528'.
[  354.734080][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  354.916476][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'.
[  354.958985][T15214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2537'.
[  354.986660][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'.
[  355.111079][T15222] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  355.262135][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'.
[  355.368572][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2541'.
[  355.925596][T15259] syzkaller0: entered promiscuous mode
[  355.941051][T15259] syzkaller0: entered allmulticast mode
[  357.487805][T15269] geneve2: entered promiscuous mode
[  357.493191][T15269] geneve2: entered allmulticast mode
[  357.513698][ T6977] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  357.529804][ T6977] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  357.552097][ T6977] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  357.561305][ T6977] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  358.028771][T15319] sit0: entered promiscuous mode
[  358.046857][T15319] netlink: 'syz.0.2564': attribute type 1 has an invalid length.
[  358.070142][T15319] netlink: 'syz.0.2564': attribute type 1 has an invalid length.
[  358.168442][T15327] netlink: 'syz.1.2566': attribute type 8 has an invalid length.
[  358.297883][T15333] netlink: 'syz.2.2568': attribute type 33 has an invalid length.
[  358.331035][T15333] netlink: 'syz.2.2568': attribute type 10 has an invalid length.
[  358.523502][T15349] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  359.153504][T15390] netlink: 'syz.4.2585': attribute type 3 has an invalid length.
[  359.188328][T15390] netlink: 'syz.4.2585': attribute type 1 has an invalid length.
[  359.414613][T15403] __nla_validate_parse: 12 callbacks suppressed
[  359.414634][T15403] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2589'.
[  359.597874][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.610689][T15415] tipc: Failed to remove unknown binding: 66,1,1/0:1071991068/1071991070
[  359.653628][T15414] xfrm1: entered promiscuous mode
[  359.670983][T15414] xfrm1: entered allmulticast mode
[  359.686723][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.718175][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.744951][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.764607][T15424] sctp: [Deprecated]: syz.3.2594 (pid 15424) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.764607][T15424] Use struct sctp_sack_info instead
[  359.778063][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.833499][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.865551][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  359.890878][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'.
[  359.900373][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  360.618731][T15464] netlink: 'syz.3.2604': attribute type 4 has an invalid length.
[  360.688864][T15464] netlink: 'syz.3.2604': attribute type 4 has an invalid length.
[  360.889406][T15493] vlan0: entered allmulticast mode
[  360.894643][T15493] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  361.144224][T15499] netlink: 'syz.4.2614': attribute type 2 has an invalid length.
[  361.843528][T15550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.864813][T15548] syzkaller0: entered promiscuous mode
[  361.878309][T15548] syzkaller0: entered allmulticast mode
[  361.892650][T15552] netlink: 'syz.1.2630': attribute type 7 has an invalid length.
[  362.031829][T15561] netlink: 'syz.1.2633': attribute type 1 has an invalid length.
[  362.104571][T15554] vlan0 (unregistering): left allmulticast mode
[  362.113566][T15554] veth0_vlan (unregistering): left allmulticast mode
[  362.123736][T15554] vlan0 (unregistering): left promiscuous mode
[  362.247468][T15562] bridge0: port 3(veth0_to_bridge) entered blocking state
[  362.255078][T15562] bridge0: port 3(veth0_to_bridge) entered disabled state
[  362.298553][T15562] veth0_to_bridge: entered allmulticast mode
[  362.317108][T15562] veth0_to_bridge: entered promiscuous mode
[  362.395412][T15569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.567803][T15611] sctp: [Deprecated]: syz.1.2646 (pid 15611) Use of int in maxseg socket option.
[  363.567803][T15611] Use struct sctp_assoc_value instead
[  363.831885][T15628] netlink: 'syz.1.2652': attribute type 33 has an invalid length.
[  363.912849][T15638] netlink: 'syz.0.2647': attribute type 7 has an invalid length.
[  364.091175][T15642] sctp: [Deprecated]: syz.1.2653 (pid 15642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.091175][T15642] Use struct sctp_sack_info instead
[  364.230616][T15654] netlink: 'syz.2.2656': attribute type 5 has an invalid length.
[  364.366181][T15661] syzkaller0: entered promiscuous mode
[  364.372045][T15661] syzkaller0: entered allmulticast mode
[  364.696197][T15680] __nla_validate_parse: 68 callbacks suppressed
[  364.696220][T15680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2666'.
[  364.790121][   T30] audit: type=1107 audit(1762886961.938:2): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'�v����R�u"=������[J��[=
[  364.790121][   T30] xD�>�s	YX�<�ݥ�'
[  364.841880][T15689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.978459][T15698] x_tables: duplicate underflow at hook 1
[  365.096528][T15712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2676'.
[  365.483691][T15742] netlink: 'syz.4.2684': attribute type 1 has an invalid length.
[  365.492817][T15742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2684'.
[  365.587275][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'.
[  365.850880][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'.
[  365.861353][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'.
[  366.100690][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'.
[  366.474146][T15787] bond7: option arp_all_targets: invalid value (18446744073709551613)
[  366.488968][T15787] bond7 (unregistering): Released all slaves
[  366.502504][T15792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2699'.
[  366.848230][T15811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2704'.
[  366.926663][T15809] bond10 (unregistering): Released all slaves
[  367.226152][T15829] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2709'.
[  367.238982][T15834] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  367.592567][T15857] caif0: mtu less than device minimum
[  367.897429][T15872] openvswitch: netlink: Flow key attr not present in new flow.
[  368.057963][T15883] netlink: 'syz.0.2728': attribute type 1 has an invalid length.
[  368.145898][T15883] 8021q: adding VLAN 0 to HW filter on device bond8
[  368.275983][T15890] veth3: entered promiscuous mode
[  368.303115][T15890] bond8: (slave veth3): Enslaving as an active interface with a down link
[  368.313506][T15885] syzkaller0: entered promiscuous mode
[  368.319395][T15885] syzkaller0: entered allmulticast mode
[  368.334978][T15885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.409472][T15904] bridge_slave_1 (unregistering): left allmulticast mode
[  368.422782][T15904] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.520707][T15879] tipc: Resetting bearer <eth:syzkaller0>
[  368.560361][T15920] netlink: 'syz.2.2735': attribute type 2 has an invalid length.
[  368.560516][T15879] tipc: Disabling bearer <eth:syzkaller0>
[  369.043320][T15960] netlink: 'syz.4.2748': attribute type 21 has an invalid length.
[  369.790641][T16002] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  369.854026][T16006] __nla_validate_parse: 10 callbacks suppressed
[  369.854049][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2757'.
[  370.055271][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'.
[  370.065250][T16014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.100668][T16014] bridge0: port 3(batadv0) entered disabled state
[  370.215192][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2763'.
[  370.466821][T16037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.490801][T16037] syzkaller0: entered promiscuous mode
[  370.504532][T16037] syzkaller0: entered allmulticast mode
[  370.585769][T16041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2770'.
[  370.614760][T16045] team0: mtu less than device minimum
[  370.700374][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2772'.
[  370.775377][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'.
[  370.853031][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'.
[  370.865515][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2775'.
[  370.879687][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'.
[  370.889543][T16063] block nbd0: not configured, cannot reconfigure
[  371.261807][T16036] tipc: Resetting bearer <eth:syzkaller0>
[  371.321353][T16036] tipc: Disabling bearer <eth:syzkaller0>
[  371.661001][T16104] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2788'.
[  371.807584][T16106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.875818][T16106] syzkaller0: entered promiscuous mode
[  371.882592][T16106] syzkaller0: entered allmulticast mode
[  371.892840][T16106] tipc: Resetting bearer <eth:syzkaller0>
[  371.911559][T16112] dvmrp0: entered allmulticast mode
[  371.923151][T16112] openvswitch: netlink: Key type 1453 is out of range max 32
[  371.960723][T16127] veth0: entered promiscuous mode
[  371.994776][T16130] netlink: 'syz.4.2793': attribute type 2 has an invalid length.
[  372.042690][T16105] tipc: Resetting bearer <eth:syzkaller0>
[  373.479812][T16105] tipc: Disabling bearer <eth:syzkaller0>
[  373.493593][T16130] �9: entered promiscuous mode
[  373.499663][T16119] veth0: left promiscuous mode
[  373.980832][T16168] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  373.990929][T16169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  374.548135][T16194] block nbd0: server does not support multiple connections per device.
[  374.558684][T16194] block nbd0: shutting down sockets
[  374.584774][T16205] netlink: 'syz.3.2818': attribute type 11 has an invalid length.
[  374.801822][T16211] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  374.824147][T16211] bond7 (unregistering): Released all slaves
[  374.988904][T16215] macvtap1: entered promiscuous mode
[  374.998996][T16215] vlan0: entered promiscuous mode
[  375.004603][T16215] macvtap1: entered allmulticast mode
[  375.010393][T16215] vlan0: entered allmulticast mode
[  375.016460][T16215] veth0_vlan: entered allmulticast mode
[  375.188170][T16240] netlink: 'syz.1.2830': attribute type 1 has an invalid length.
[  375.261133][T16240] 8021q: adding VLAN 0 to HW filter on device bond9
[  375.890920][T16245] bond9: (slave veth5): Enslaving as an active interface with a down link
[  376.082664][T16240] veth7: entered promiscuous mode
[  376.100069][T16240] bond9: (slave veth7): Enslaving as an active interface with a down link
[  376.138380][T16248] vlan3: entered allmulticast mode
[  376.157266][T16248] bond9: entered allmulticast mode
[  376.164308][T16248] bond9: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  376.467578][T16263] __nla_validate_parse: 11 callbacks suppressed
[  376.467600][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2834'.
[  377.325762][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.338755][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.348516][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.356869][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.365681][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.397620][T16285] wg1 speed is unknown, defaulting to 1000
[  377.412490][T16285] hsr0 speed is unknown, defaulting to 1000
[  377.443493][T16292] wg1 speed is unknown, defaulting to 1000
[  377.465432][T16295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2846'.
[  377.523477][T16292] hsr0 speed is unknown, defaulting to 1000
[  377.577993][T16303] bond4: ARP target 1.0.0.0 is already present
[  377.584352][T16303] bond4: option arp_ip_target: invalid value (1)
[  377.596838][T16303] bond4 (unregistering): Released all slaves
[  377.663545][T16309] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2851'.
[  378.064584][T16330] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  378.077845][T16330] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  378.266608][ T1098] bridge0: port 4(batadv0) entered disabled state
[  378.291919][ T1098] bridge_slave_1: left promiscuous mode
[  378.307742][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.326786][ T1098] bridge_slave_0: left promiscuous mode
[  378.344285][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.455985][ T1098] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  378.693509][ T1098] bond5 (unregistering): (slave gretap1): Releasing active interface
[  379.377462][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.387132][ T5847] Bluetooth: hci4: command tx timeout
[  379.393786][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.403383][ T1098] bond0 (unregistering): Released all slaves
[  379.417529][ T1098] bond1 (unregistering): Released all slaves
[  379.431449][ T1098] bond2 (unregistering): Released all slaves
[  379.444527][ T1098] bond3 (unregistering): Released all slaves
[  379.553181][ T1098] bond4 (unregistering): Released all slaves
[  379.566622][ T1098] bond5 (unregistering): Released all slaves
[  379.671826][ T1098] bond6 (unregistering): Released all slaves
[  379.685497][ T1098] bond7 (unregistering): Released all slaves
[  379.785563][ T1098] bond8 (unregistering): Released all slaves
[  379.887588][ T1098] bond9 (unregistering): (slave veth5): Releasing active interface
[  379.898692][ T1098] bond9 (unregistering): (slave veth7): Releasing active interface
[  379.908446][ T1098] bond9 (unregistering): Released all slaves
[  379.945869][T16348] batadv0: entered promiscuous mode
[  379.969134][T16348] batadv0: left promiscuous mode
[  380.021948][T16292] chnl_net:caif_netlink_parms(): no params data found
[  380.193325][ T1098] tipc: Disabling bearer <udp:syz2>
[  380.217444][ T1098] tipc: Left network mode
[  380.233790][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'.
[  380.273731][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'.
[  380.331349][ T1098] IPVS: stopping backup sync thread 6832 ...
[  380.482372][T16292] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.496757][T16292] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.527553][T16292] bridge_slave_0: entered allmulticast mode
[  380.558621][T16292] bridge_slave_0: entered promiscuous mode
[  380.640383][T16292] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.650561][T16292] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.665527][T16292] bridge_slave_1: entered allmulticast mode
[  380.675507][T16292] bridge_slave_1: entered promiscuous mode
[  380.858013][T16396] syz_tun: entered allmulticast mode
[  380.872942][T16394] dvmrp6: entered allmulticast mode
[  380.885353][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.911281][T16394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.948923][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.006502][T16393] syz_tun: left allmulticast mode
[  381.289062][T16292] team0: Port device team_slave_0 added
[  381.324645][T16292] team0: Port device team_slave_1 added
[  381.421612][T16436] netlink: 'syz.2.2881': attribute type 8 has an invalid length.
[  381.468816][ T5847] Bluetooth: hci4: command tx timeout
[  381.734236][T16292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.751290][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.828305][T16292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.870840][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.887097][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.923898][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.055082][T16466] pim6reg: entered allmulticast mode
[  383.557056][ T5847] Bluetooth: hci4: command tx timeout
[  385.637122][ T5847] Bluetooth: hci4: command tx timeout
[  386.222955][T16292] hsr_slave_0: entered promiscuous mode
[  386.229677][T16292] hsr_slave_1: entered promiscuous mode
[  386.235883][T16292] debugfs: 'hsr0' already exists in 'hsr'
[  386.242303][T16292] Cannot create hsr debugfs directory
[  386.286616][T16480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.295136][T16481] syzkaller0: entered promiscuous mode
[  386.303575][T16481] syzkaller0: entered allmulticast mode
[  386.325927][T16493] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2894'.
[  386.403997][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'.
[  386.415479][ T1098] hsr_slave_1: left promiscuous mode
[  386.425336][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.436739][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.459617][ T1098] vlan0: left allmulticast mode
[  386.465960][ T1098] veth0_vlan: left allmulticast mode
[  386.472118][ T1098] vlan0: left promiscuous mode
[  387.568070][T16495] vlan0: entered allmulticast mode
[  387.573371][T16495] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  387.591720][ T7331] tipc: Node number set to 898570667
[  387.627944][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  387.710636][T16485] tipc: Disabling bearer <eth:syzkaller0>
[  387.746764][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2900'.
[  388.132297][ T1098] IPVS: stop unused estimator thread 0...
[  388.204201][T16533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2908'.
[  388.429475][T16546] netlink: 'syz.0.2911': attribute type 11 has an invalid length.
[  388.440417][T16548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.451709][T16546] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2911'.
[  388.680395][T16556] netlink: 'syz.2.2916': attribute type 1 has an invalid length.
[  388.824977][T16556] bond4: entered promiscuous mode
[  388.833648][T16556] macvlan0: entered promiscuous mode
[  388.842757][T16556] macvlan0: entered allmulticast mode
[  388.849062][T16556] bond4: entered allmulticast mode
[  388.855925][T16556] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  388.885562][T16556] bond4: left promiscuous mode
[  389.070366][T16579] x_tables: duplicate underflow at hook 3
[  389.197823][T16292] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  389.216109][T16292] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  389.271589][T16292] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  389.291973][T16292] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  389.376831][T16598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.575753][T16292] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.608742][T16292] 8021q: adding VLAN 0 to HW filter on device team0
[  389.631459][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.638916][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.680772][T10192] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.688053][T10192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.845185][T16627] netlink: 'syz.4.2934': attribute type 13 has an invalid length.
[  390.239425][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'.
[  390.277726][T16653] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  391.606545][T16647] syzkaller0: entered promiscuous mode
[  391.612317][T16647] syzkaller0: entered allmulticast mode
[  391.620432][T16653] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  391.622540][T16654] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  391.833221][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.972589][T16292] veth0_vlan: entered promiscuous mode
[  392.004344][T16673] netlink: 'syz.3.2944': attribute type 2 has an invalid length.
[  392.028837][T16292] veth1_vlan: entered promiscuous mode
[  392.125154][T16673] �9: entered promiscuous mode
[  392.199746][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2947'.
[  392.240314][T16292] veth0_macvtap: entered promiscuous mode
[  392.265720][T16292] veth1_macvtap: entered promiscuous mode
[  392.322071][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.364499][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.379109][T16693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.392603][T16693] syzkaller0: entered promiscuous mode
[  392.398636][T16693] syzkaller0: entered allmulticast mode
[  392.414922][T10195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.423845][T10195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.435555][T10195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.446505][T16693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  392.478434][T10195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.512537][T16693] tipc: Resetting bearer <eth:syzkaller0>
[  392.538587][T16692] tipc: Resetting bearer <eth:syzkaller0>
[  392.566671][T16692] tipc: Disabling bearer <eth:syzkaller0>
[  392.584499][T16700] netlink: 'syz.4.2951': attribute type 12 has an invalid length.
[  392.584665][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'.
[  392.619575][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'.
[  392.750608][T10195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.760690][T10195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.899800][T10195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.923801][T10195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.104384][T16723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2959'.
[  393.126030][T16723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2959'.
[  393.353560][T16734] vxcan1: tx address claim with dest, not broadcast
[  393.662437][T16748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.764133][T16748] syzkaller1: entered promiscuous mode
[  393.814528][T16748] syzkaller1: entered allmulticast mode
[  393.841981][T16753] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  393.861729][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'.
[  393.897633][T16751] syz_tun (unregistering): left allmulticast mode
[  393.904262][T16751] syz_tun (unregistering): left promiscuous mode
[  393.941423][T16751] bridge0: port 2(syz_tun) entered disabled state
[  393.961756][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2965'.
[  394.197804][ T5847] Bluetooth: hci4: command tx timeout
[  394.250432][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  394.261796][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  394.262757][T16762] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  394.276617][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.289220][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.300287][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  394.415037][T16763] wg1 speed is unknown, defaulting to 1000
[  394.424825][T16763] hsr0 speed is unknown, defaulting to 1000
[  394.492076][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[  394.504367][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'.
[  394.568650][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2970'.
[  395.279991][T16763] chnl_net:caif_netlink_parms(): no params data found
[  395.530877][T16819] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  395.615888][T16763] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.647470][T16763] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.667131][T16763] bridge_slave_0: entered allmulticast mode
[  395.692487][T16763] bridge_slave_0: entered promiscuous mode
[  395.732286][T16763] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.753848][T16763] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.778024][T16763] bridge_slave_1: entered allmulticast mode
[  395.797094][T16763] bridge_slave_1: entered promiscuous mode
[  395.922155][T16763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.952809][T16763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.351075][ T5836] Bluetooth: hci1: command tx timeout
[  396.437706][T16850] bond0 (unregistering): (slave 
1!��): Releasing backup interface
[  396.446275][T16850] !��: left promiscuous mode
[  396.454736][T16850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.464234][T16850] bond_slave_1: left promiscuous mode
[  396.472357][T16850] bond0 (unregistering): Released all slaves
[  396.494283][T16763] team0: Port device team_slave_0 added
[  396.526039][T16763] team0: Port device team_slave_1 added
[  396.634726][T16868] netlink: 'syz.0.2995': attribute type 21 has an invalid length.
[  396.680812][T16868] netlink: 'syz.0.2995': attribute type 21 has an invalid length.
[  396.699623][T16763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.706638][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.762580][T16763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.799614][T16763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.806671][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.882125][T16763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.191991][T16763] hsr_slave_0: entered promiscuous mode
[  397.212478][T16763] hsr_slave_1: entered promiscuous mode
[  397.240387][T16763] debugfs: 'hsr0' already exists in 'hsr'
[  397.257876][T16763] Cannot create hsr debugfs directory
[  397.348584][T16909] netlink: 'syz.1.3006': attribute type 62 has an invalid length.
[  397.375112][T16910] __nla_validate_parse: 5 callbacks suppressed
[  397.375135][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  397.735028][T16763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  397.944498][T16763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  397.989721][T16935] netlink: 'syz.3.3013': attribute type 13 has an invalid length.
[  398.065646][T16763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  398.139638][T16763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  398.325406][T16947] netlink: 'syz.2.3016': attribute type 2 has an invalid length.
[  398.347807][ T7324] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI
[  398.359764][ T7324] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]
[  398.368290][ T7324] CPU: 1 UID: 0 PID: 7324 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) 
[  398.377670][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  398.387791][ T7324] Workqueue: events l2cap_info_timeout
[  398.393277][ T7324] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  398.399171][ T7324] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e
[  398.418791][ T7324] RSP: 0018:ffffc9001b787788 EFLAGS: 00010202
[  398.424949][ T7324] RAX: dffffc0000000000 RBX: ffffffff891f0948 RCX: 4416121d96ff1800
[  398.433010][ T7324] RDX: 0000000000000000 RSI: ffffffff891f0948 RDI: 000000000000004c
[  398.440983][ T7324] RBP: ffffffff8a4ffbb5 R08: 0000000000000001 R09: 0000000000000000
[  398.448951][ T7324] R10: dffffc0000000000 R11: ffffffff8a4ffb70 R12: 0000000000000000
[  398.456924][ T7324] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  398.465172][ T7324] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  398.474125][ T7324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.480740][ T7324] CR2: 00007f2420565eb8 CR3: 0000000069894000 CR4: 00000000003526f0
[  398.488723][ T7324] Call Trace:
[  398.492004][ T7324]  <TASK>
[  398.494936][ T7324]  __kasan_check_byte+0x12/0x40
[  398.499796][ T7324]  lock_acquire+0x8d/0x360
[  398.504221][ T7324]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.509619][ T7324]  ? __cancel_work+0x254/0x2e0
[  398.514402][ T7324]  lock_sock_nested+0x48/0x100
[  398.519281][ T7324]  ? l2cap_sock_ready_cb+0x45/0x140
[  398.524482][ T7324]  l2cap_sock_ready_cb+0x45/0x140
[  398.529517][ T7324]  l2cap_conn_start+0x76d/0xe50
[  398.534554][ T7324]  ? __pfx_l2cap_conn_start+0x10/0x10
[  398.539931][ T7324]  ? __lock_acquire+0xab9/0xd20
[  398.544958][ T7324]  ? __pfx___mutex_lock+0x10/0x10
[  398.549992][ T7324]  ? process_scheduled_works+0x9ef/0x17b0
[  398.555756][ T7324]  l2cap_info_timeout+0x68/0xa0
[  398.560611][ T7324]  ? process_scheduled_works+0x9ef/0x17b0
[  398.566329][ T7324]  process_scheduled_works+0xae1/0x17b0
[  398.571884][ T7324]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.577896][ T7324]  worker_thread+0x8a0/0xda0
[  398.582497][ T7324]  kthread+0x711/0x8a0
[  398.586591][ T7324]  ? __pfx_worker_thread+0x10/0x10
[  398.591703][ T7324]  ? __pfx_kthread+0x10/0x10
[  398.596314][ T7324]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.601720][ T7324]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.606948][ T7324]  ? __pfx_kthread+0x10/0x10
[  398.611564][ T7324]  ret_from_fork+0x4bc/0x870
[  398.616345][ T7324]  ? __pfx_ret_from_fork+0x10/0x10
[  398.621485][ T7324]  ? __switch_to_asm+0x39/0x70
[  398.626267][ T7324]  ? __switch_to_asm+0x33/0x70
[  398.631061][ T7324]  ? __pfx_kthread+0x10/0x10
[  398.635704][ T7324]  ret_from_fork_asm+0x1a/0x30
[  398.640474][ T7324]  </TASK>
[  398.643493][ T7324] Modules linked in:
[  398.648786][ T7324] ---[ end trace 0000000000000000 ]---
[  398.654755][ T5836] Bluetooth: hci1: command tx timeout
[  398.661394][ T7324] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  398.669325][ T7324] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e
[  398.689849][ T7324] RSP: 0018:ffffc9001b787788 EFLAGS: 00010202
[  398.696023][ T7324] RAX: dffffc0000000000 RBX: ffffffff891f0948 RCX: 4416121d96ff1800
[  398.704693][ T7324] RDX: 0000000000000000 RSI: ffffffff891f0948 RDI: 000000000000004c
[  398.713001][ T7324] RBP: ffffffff8a4ffbb5 R08: 0000000000000001 R09: 0000000000000000
[  398.737031][ T7324] R10: dffffc0000000000 R11: ffffffff8a4ffb70 R12: 0000000000000000
[  398.745104][ T7324] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  398.766486][ T7324] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  398.776065][ T7324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.783124][ T7324] CR2: 00007fd27a26ae9c CR3: 000000000dd38000 CR4: 00000000003526f0
[  398.791782][ T7324] Kernel panic - not syncing: Fatal exception
[  398.798364][ T7324] Kernel Offset: disabled
[  398.802699][ T7324] Rebooting in 86400 seconds..