last executing test programs:

3.938829292s ago: executing program 1 (id=2475):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0)

3.766103044s ago: executing program 1 (id=2477):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r8, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
recvmsg$unix(r4, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x3)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

2.904088092s ago: executing program 2 (id=2483):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
accept4$inet(r5, 0x0, 0x0, 0x80000)
shutdown(r5, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r6, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b)
sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2.291787764s ago: executing program 3 (id=2488):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a)
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "7671d94e03f2922fb300949a1f979b2bc858e46dc09ae343", "6c9e88922b11bfce4b18a72cd2520212c9f4d7a6976b257660e3901aab1a508b"}}}}}}, 0x0)

2.042441798s ago: executing program 1 (id=2490):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0xb, 0x8}, &(0x7f0000000180)={0x100000001, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x4, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000080100000000000000d2038d840000000000000000"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

1.976318868s ago: executing program 2 (id=2491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xf, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcb62c"}}}}, 0x3a)

1.918487799s ago: executing program 3 (id=2492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1, 0xa, 0x2005, 0x81, 0x9, 0x7fff, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20020070}, 0x40)

1.760112717s ago: executing program 2 (id=2494):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000060c9efe5e210b3d33b3a1185d4ed9c3ffc87212b5e00bf70f0e6c0d502f97a140a15433b5527ca51efd8c142d25195ffbc3beb2fe74aa991d1c1c837469f80c0c21677d9e21fc9572fac7db32f7385d58224ee996fbb1b3a3f7096274f27a1b3ed916468273939e3815111f2d7d808d9ee33251eb4d60e9a7e46917b909ae15eaec576e056cb6c20e195cd42"], 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
unshare(0x40020000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340))
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'})
socket$kcm(0x2, 0x1, 0x84)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

1.724965551s ago: executing program 1 (id=2495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0xffff, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010100, @broadcast}, "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"}}, 0xfce)

1.674382501s ago: executing program 4 (id=2496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x34}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07022cbd7000fbdbdf251b00000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32, @ANYBLOB="715fec71b4c61371667c334dbb84d5ba67dfa0f4e88bfde35d7e56572d83b168c8c74231cdac8e83b13d02c91e5a95f2939f98648209f9db457b15e00c5bb08a2d317fc1a5a3e6ec66302f505c6aa77769d2f02766b50e325d6ebd3f8052a3f481d0ceda081efa9a358bbb58c69305"], 0x2c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x607, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x810)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001900010028bd7000fedbdf251d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0xd4)

1.496435079s ago: executing program 3 (id=2497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x54}}, 0x0)

1.439544891s ago: executing program 0 (id=2498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)

1.306647908s ago: executing program 4 (id=2499):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006300fbff6500000000000000160000000000000038"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

1.30139894s ago: executing program 3 (id=2500):
unshare(0x400)
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x20000010)

1.22610917s ago: executing program 1 (id=2501):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4044045)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003540)=""/103, 0x67}, {&(0x7f00000024c0)=""/4056, 0xfd8}, {&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000000240)=""/185, 0xb9}], 0x5}, 0x12000)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
listen(r2, 0x5)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f0000000c000000070000000500000040320000", @ANYRES32=0x1, @ANYBLOB="c5714a4a55f199418b45d46deefed3b63c390700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000500"/21], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x24, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x57, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x9, 0xa, 0xfffffffffffffffc, 0x1}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xe1, &(0x7f0000000300)=""/225, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r5, r6, r7], &(0x7f00000006c0)=[{0x4, 0x1, 0xe, 0x7}, {0x5, 0x1, 0xa}, {0x5, 0x3, 0xd, 0x5}], 0x10, 0x3, @void, @value}, 0x94)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$alg(0x26, 0x5, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8)

1.179577464s ago: executing program 0 (id=2502):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000440)='>', 0x1, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x15}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000284a4a622fb564500004e23e3f58e76110165f450c71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000000000000000200000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.132246877s ago: executing program 4 (id=2503):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000001c0)="080060820c3f1b048e5039a8d98f70", 0xf}], 0x2)

1.075567412s ago: executing program 0 (id=2504):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

969.880421ms ago: executing program 3 (id=2505):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40)

858.362582ms ago: executing program 2 (id=2506):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

685.245147ms ago: executing program 0 (id=2507):
r0 = socket(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, 0x0, 0x4000801)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000a40)=0x1, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)

602.298249ms ago: executing program 3 (id=2508):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0xb, 0x8}, &(0x7f0000000180)={0x100000001, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x4, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000080100000000000000d2038d840000000000000000"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

601.806865ms ago: executing program 4 (id=2509):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x34}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07022cbd7000fbdbdf251b00000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32, @ANYBLOB="715fec71b4c61371667c334dbb84d5ba67dfa0f4e88bfde35d7e56572d83b168c8c74231cdac8e83b13d02c91e5a95f2939f98648209f9db457b15e00c5bb08a2d317fc1a5a3e6ec66302f505c6aa77769d2f02766b50e325d6ebd3f8052a3f481d0ceda081efa9a358bbb58c69305"], 0x2c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x607, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x810)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001900010028bd7000fedbdf251d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0xd4)

601.555757ms ago: executing program 2 (id=2510):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x18}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008840)

463.969699ms ago: executing program 2 (id=2511):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r9, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
recvmsg$unix(r5, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

406.224253ms ago: executing program 0 (id=2512):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004)

325.328227ms ago: executing program 4 (id=2513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x78, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}]}, 0x78}}, 0x0)

117.907909ms ago: executing program 1 (id=2514):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

851.55µs ago: executing program 0 (id=2515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28cb7f229db6c"}}}}, 0xfcf)

0s ago: executing program 4 (id=2516):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000060c9efe5e210b3d33b3a1185d4ed9c3ffc87212b5e00bf70f0e6c0d502f97a140a15433b5527ca51efd8c142d25195ffbc3beb2fe74aa991d1c1c837469f80c0c21677d9e21fc9572fac7db32f7385d58224ee996fbb1b3a3f7096274f27a1b3ed916468273939e3815111f2d7d808d9ee33251eb4d60e9a7e46917b909ae15eaec576e056cb6c20e195cd42"], 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
unshare(0x40020000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340))
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'})
socket$kcm(0x2, 0x1, 0x84)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

kernel console output (not intermixed with test programs):

- 0
[  329.843595][T10813] geneve2: entered promiscuous mode
[  329.867285][T10813] geneve2: entered allmulticast mode
[  330.253589][T10833] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1329'.
[  331.593174][T10865] netlink: 'syz.0.1336': attribute type 12 has an invalid length.
[  331.606372][T10864] netlink: 'syz.4.1339': attribute type 1 has an invalid length.
[  331.614174][T10864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1339'.
[  331.761915][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'.
[  331.777832][T10868] netlink: 'syz.3.1340': attribute type 12 has an invalid length.
[  331.836319][T10869] macvtap1: entered promiscuous mode
[  331.841770][T10869] vlan0: entered promiscuous mode
[  331.848284][T10869] macvtap1: entered allmulticast mode
[  331.857187][T10869] vlan0: entered allmulticast mode
[  331.867594][T10869] veth0_vlan: entered allmulticast mode
[  331.897792][T10869] vlan0: left allmulticast mode
[  331.902884][T10869] veth0_vlan: left allmulticast mode
[  331.908864][T10869] vlan0: left promiscuous mode
[  331.941385][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'.
[  332.096758][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'.
[  332.234159][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'.
[  332.246084][T10884] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1342'.
[  332.251076][T10882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1343'.
[  332.843945][T10897] 8021q: adding VLAN 0 to HW filter on device bond2
[  332.908052][T10903] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  333.047270][T10893] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1345'.
[  333.062019][T10915] netlink: 'syz.2.1349': attribute type 1 has an invalid length.
[  333.098213][T10915] netlink: 'syz.2.1349': attribute type 2 has an invalid length.
[  334.238967][T10935] netlink: 'syz.3.1353': attribute type 12 has an invalid length.
[  334.610693][T10936] netlink: 'syz.0.1362': attribute type 303 has an invalid length.
[  334.669056][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'.
[  334.966439][T10950] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1355'.
[  334.989699][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  335.093033][T10952] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.166844][T10952] bond0: (slave team0): Releasing backup interface
[  335.173437][T10952] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  335.343009][T10952] bond0: (slave wlan1): Releasing backup interface
[  335.440804][T10959] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  335.497441][T10952] bond3: (slave ip6gre2): Releasing backup interface
[  335.535559][T10952] ip6gre2: left promiscuous mode
[  336.007850][T10965] tipc: New replicast peer: 255.255.255.255
[  336.014466][T10965] tipc: Enabled bearer <udp:syz2>, priority 10
[  336.229812][T10973] vxcan3: entered allmulticast mode
[  336.306482][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  336.774721][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  337.071584][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'.
[  337.191493][T11006] netlink: 'syz.0.1367': attribute type 3 has an invalid length.
[  337.208093][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  337.657007][T11015] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.665281][T11015] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.684008][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  337.728576][T11015] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.756191][T11015] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.780522][T11015] geneve2: entered promiscuous mode
[  337.781854][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'.
[  338.005727][T11028] netlink: 'syz.2.1374': attribute type 12 has an invalid length.
[  338.037476][T11026] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  338.101946][T11032] __nla_validate_parse: 2 callbacks suppressed
[  338.101967][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'.
[  338.225388][T11035] netlink: 'syz.2.1376': attribute type 12 has an invalid length.
[  338.364112][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'.
[  338.431613][T11042] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  338.458579][T11042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1378'.
[  338.491345][T11040] : entered promiscuous mode
[  338.764749][T11049] IPv6: NLM_F_REPLACE set, but no existing node found!
[  338.912786][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'.
[  339.005796][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  339.039446][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  339.093968][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  339.182686][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  339.194805][T11063] netlink: 'syz.0.1387': attribute type 12 has an invalid length.
[  339.201127][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  339.403531][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'.
[  339.490129][T11072] netlink: 'syz.0.1389': attribute type 12 has an invalid length.
[  339.871778][T11078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.903702][T11084] batman_adv: batadv0: Adding interface: ip6gretap3
[  339.910733][T11084] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  339.939749][T11084] batman_adv: batadv0: Interface activated: ip6gretap3
[  339.963352][T11086] netlink: 'syz.4.1394': attribute type 12 has an invalid length.
[  340.105146][T11093] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.129215][T11096] bond2: (slave bond3): Releasing backup interface
[  340.521163][T11110] netlink: 'syz.3.1399': attribute type 12 has an invalid length.
[  340.622951][T11117] xt_hashlimit: max too large, truncated to 1048576
[  341.640940][T11136] tap0: tun_chr_ioctl cmd 1074025677
[  341.654414][T11136] tap0: linktype set to 0
[  341.737910][T11104] netlink: 'syz.2.1397': attribute type 4 has an invalid length.
[  341.825324][T11142] netlink: 'syz.1.1408': attribute type 12 has an invalid length.
[  342.644303][T11169] netlink: 'syz.2.1413': attribute type 12 has an invalid length.
[  342.941840][T11162] sctp: [Deprecated]: syz.0.1412 (pid 11162) Use of int in max_burst socket option.
[  342.941840][T11162] Use struct sctp_assoc_value instead
[  343.168433][T11182] netlink: 'syz.1.1418': attribute type 7 has an invalid length.
[  343.185602][T11182] netlink: 'syz.1.1418': attribute type 8 has an invalid length.
[  343.198311][T11184] Bluetooth: MGMT ver 1.23
[  343.215749][T11162] __nla_validate_parse: 6 callbacks suppressed
[  343.215770][T11162] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1412'.
[  343.257667][T11162] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1412'.
[  343.274219][T11162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1412'.
[  343.363637][T11187] netlink: 'syz.3.1419': attribute type 12 has an invalid length.
[  344.468858][T11217] Cannot find set identified by id 2 to match
[  344.499309][T11214] xt_CT: No such helper "pptp"
[  344.730995][T11221] sctp: [Deprecated]: syz.4.1425 (pid 11221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.730995][T11221] Use struct sctp_sack_info instead
[  344.859042][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'.
[  344.875827][T11224] netlink: 'syz.0.1426': attribute type 1 has an invalid length.
[  345.181083][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'.
[  345.192066][T11212] lo speed is unknown, defaulting to 1000
[  345.263788][T11225] syz_tun: entered allmulticast mode
[  345.281916][T11212] lo speed is unknown, defaulting to 1000
[  345.288849][T11218] syz_tun: left allmulticast mode
[  345.320481][T11212] lo speed is unknown, defaulting to 1000
[  345.407078][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'.
[  345.441614][T11212] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98
[  345.466702][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'.
[  345.569855][T11237] netlink: 'syz.4.1431': attribute type 12 has an invalid length.
[  345.603546][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'.
[  345.652600][T11212] lo speed is unknown, defaulting to 1000
[  345.672140][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1430'.
[  345.701373][T11241] Bluetooth: MGMT ver 1.23
[  345.805524][T11234] syzkaller0: entered promiscuous mode
[  345.821650][T11234] syzkaller0: entered allmulticast mode
[  345.847444][T11212] lo speed is unknown, defaulting to 1000
[  345.880774][T11212] lo speed is unknown, defaulting to 1000
[  345.910960][T11212] lo speed is unknown, defaulting to 1000
[  346.071247][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1434'.
[  348.032943][T11243] lo speed is unknown, defaulting to 1000
[  348.103557][T11212] lo speed is unknown, defaulting to 1000
[  348.140929][T11212] lo speed is unknown, defaulting to 1000
[  348.314941][T11261] __nla_validate_parse: 1 callbacks suppressed
[  348.314963][T11261] netlink: 550 bytes leftover after parsing attributes in process `syz.0.1436'.
[  348.513536][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'.
[  349.112360][T11288] netlink: 'syz.0.1443': attribute type 12 has an invalid length.
[  349.288511][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  349.298076][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'.
[  349.323626][T11290] netlink: 'syz.2.1444': attribute type 14 has an invalid length.
[  349.345944][T11290] netlink: 'syz.2.1444': attribute type 11 has an invalid length.
[  349.565604][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'.
[  349.831776][T11302] lo speed is unknown, defaulting to 1000
[  350.149279][T11310] netlink: 550 bytes leftover after parsing attributes in process `syz.4.1450'.
[  350.215188][T11312] lo speed is unknown, defaulting to 1000
[  350.338134][T11315] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  350.505761][T11321] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  350.717550][T11315] lo speed is unknown, defaulting to 1000
[  351.057512][T11331] netlink: 'syz.4.1454': attribute type 16 has an invalid length.
[  351.065404][T11331] netlink: 'syz.4.1454': attribute type 17 has an invalid length.
[  351.291388][T11331] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.303471][T11331] 8021q: adding VLAN 0 to HW filter on device team0
[  351.312389][T11331] batman_adv: batadv0: Interface activated: 
0!

[  351.329416][T11331] batadv0: mtu less than device minimum
[  351.355036][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.367243][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.379525][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.391854][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.403970][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.416340][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.428439][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.440747][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.452843][T11331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  351.646410][T11335] netlink: 'syz.2.1455': attribute type 12 has an invalid length.
[  351.804498][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'.
[  351.971524][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'.
[  352.004728][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'.
[  352.100320][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'.
[  352.177285][T11346] sctp: [Deprecated]: syz.3.1460 (pid 11346) Use of int in max_burst socket option.
[  352.177285][T11346] Use struct sctp_assoc_value instead
[  353.144219][T11371] netlink: 'syz.0.1468': attribute type 12 has an invalid length.
[  353.217452][T11365] pimreg3: entered allmulticast mode
[  353.243664][T11365] netlink: 'syz.4.1466': attribute type 1 has an invalid length.
[  353.299387][T11375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  353.331980][T11369] __nla_validate_parse: 5 callbacks suppressed
[  353.332000][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1466'.
[  354.027344][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'.
[  354.506718][T11405] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1476'.
[  354.533339][T11406] sctp: [Deprecated]: syz.3.1478 (pid 11406) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.533339][T11406] Use struct sctp_sack_info instead
[  354.621100][T11406] batadv_slave_0: left promiscuous mode
[  354.675412][T11406] hsr0: left promiscuous mode
[  354.695042][T11406] hsr0: left allmulticast mode
[  354.706001][T11406] hsr_slave_0: left allmulticast mode
[  354.712342][T11406] hsr_slave_1: left allmulticast mode
[  354.746053][T11406] bridge1: left promiscuous mode
[  354.752166][T11406] vlan2: left allmulticast mode
[  354.757424][T11406] veth1: left allmulticast mode
[  354.779861][T11406] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.790048][T11406] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.826175][T11406] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.855974][T11406] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.954786][T11406] geneve2: left promiscuous mode
[  355.085141][T11416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 50462 - 0
[  355.125052][T11416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46123 - 0
[  355.174114][T11425] bridge0: port 3(erspan0) entered blocking state
[  355.182627][T11425] bridge0: port 3(erspan0) entered disabled state
[  355.192975][T11425] erspan0: entered allmulticast mode
[  355.200982][T11425] erspan0: entered promiscuous mode
[  355.207878][T11425] bridge0: port 3(erspan0) entered blocking state
[  355.214923][T11425] bridge0: port 3(erspan0) entered forwarding state
[  355.228872][T11428] netlink: 'syz.3.1482': attribute type 12 has an invalid length.
[  355.262109][T11416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 50462 - 0
[  355.276040][T11416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46123 - 0
[  355.316892][T11429] erspan0: left allmulticast mode
[  355.322015][T11429] erspan0: left promiscuous mode
[  355.336625][T11429] bridge0: port 3(erspan0) entered disabled state
[  355.523768][T11416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 50462 - 0
[  355.544416][T11416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46123 - 0
[  355.693979][T11416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 50462 - 0
[  355.725167][T11416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46123 - 0
[  355.767796][T11443] netlink: 'syz.2.1483': attribute type 303 has an invalid length.
[  355.827211][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'.
[  356.049464][T11416] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 46123 - 0
[  356.058308][T11416] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 50462 - 0
[  356.145714][T11416] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 46123 - 0
[  356.161108][T11416] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 50462 - 0
[  356.202466][T11416] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 46123 - 0
[  356.230420][T11416] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 50462 - 0
[  356.423574][T11416] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 46123 - 0
[  356.494525][T11416] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 50462 - 0
[  356.535251][T11461] netlink: 'syz.2.1490': attribute type 10 has an invalid length.
[  356.573978][T11461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1490'.
[  356.591414][T11456] syzkaller1: entered promiscuous mode
[  356.615269][T11456] syzkaller1: entered allmulticast mode
[  356.676692][T11461] net_ratelimit: 12 callbacks suppressed
[  356.676715][T11461] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  356.773332][T11463] lo speed is unknown, defaulting to 1000
[  356.825585][T11454] netlink: 'syz.3.1488': attribute type 1 has an invalid length.
[  356.865263][T11461] lo speed is unknown, defaulting to 1000
[  356.875779][T11454] netlink: 'syz.3.1488': attribute type 2 has an invalid length.
[  357.291543][T11471] lo speed is unknown, defaulting to 1000
[  357.917195][T11484] netlink: 'syz.4.1495': attribute type 12 has an invalid length.
[  358.352137][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'.
[  358.447073][T11501] ªªªªªª: renamed from lo (while UP)
[  358.601091][T11496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1497'.
[  358.692353][T11504] bond0: (slave bridge0): Releasing backup interface
[  358.755265][T11504] batman_adv: batadv0: Interface deactivated: 
0!

[  358.763899][T11504] batman_adv: batadv0: Removing interface: 
0!

[  358.778666][T11504] bridge_slave_0: left allmulticast mode
[  358.813418][T11504] bridge_slave_0: left promiscuous mode
[  358.847342][T11504] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.931762][T11504] bridge_slave_1: left allmulticast mode
[  358.982346][T11504] bridge_slave_1: left promiscuous mode
[  359.041205][T11504] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.189871][T11504] bond0: (slave bond_slave_0): Releasing backup interface
[  359.242354][T11504] bond0: (slave bond_slave_1): Releasing backup interface
[  359.261820][T11504] team_slave_1: left promiscuous mode
[  359.326207][T11504] team0: Port device team_slave_1 removed
[  359.338773][T11504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.347158][T11504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.357137][T11504] bond1: left promiscuous mode
[  359.363775][T11504] team0: Port device bond1 removed
[  359.371361][T11504] bond2: (slave ip6erspan0): Releasing active interface
[  359.378799][T11504] ip6erspan0: left allmulticast mode
[  359.389354][T11504] bond3: (slave veth3): Releasing backup interface
[  359.400202][T11504] bond4: left promiscuous mode
[  359.407713][T11504] team0: Port device bond4 removed
[  359.414570][T11504] bond5: (slave ip6gre1): Releasing backup interface
[  359.422303][T11504] ip6gre1: left promiscuous mode
[  359.432765][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'.
[  359.538803][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'.
[  359.628276][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1501'.
[  359.862291][T11534] bridge3: entered allmulticast mode
[  359.911107][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  360.070255][T11541] sctp: [Deprecated]: syz.1.1505 (pid 11541) Use of int in max_burst socket option.
[  360.070255][T11541] Use struct sctp_assoc_value instead
[  360.072357][T11545] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.316116][T11552] netlink: 'syz.2.1508': attribute type 12 has an invalid length.
[  360.571377][T11557] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1510'.
[  360.691065][T11557] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  360.767311][T11555] lo speed is unknown, defaulting to 1000
[  360.775806][T11565] netlink: 'syz.3.1512': attribute type 1 has an invalid length.
[  360.785799][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1511'.
[  360.814295][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'.
[  360.897188][T11570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'.
[  360.939954][T11557] lo speed is unknown, defaulting to 1000
[  362.100260][T11582] netlink: 'syz.3.1513': attribute type 1 has an invalid length.
[  362.117482][T11583] macvlan3: entered promiscuous mode
[  362.123596][T11583] bridge0: entered promiscuous mode
[  362.131364][T11583] bridge0: port 1(macvlan3) entered blocking state
[  362.142849][T11583] bridge0: port 1(macvlan3) entered disabled state
[  362.155360][T11583] macvlan3: entered allmulticast mode
[  362.182816][T11583] bridge0: entered allmulticast mode
[  362.208930][T11586] netlink: 'syz.2.1523': attribute type 10 has an invalid length.
[  362.271112][T11583] macvlan3: left allmulticast mode
[  362.314964][T11583] bridge0: left allmulticast mode
[  362.348880][T11583] bridge0: left promiscuous mode
[  362.522840][T11586] batadv0: entered promiscuous mode
[  362.528586][T11586] batadv0: entered allmulticast mode
[  362.535740][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.639870][T11586] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  363.381870][T11596] netlink: 'syz.2.1516': attribute type 12 has an invalid length.
[  363.699392][T11604] __nla_validate_parse: 5 callbacks suppressed
[  363.699413][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'.
[  364.535685][T11610] lo speed is unknown, defaulting to 1000
[  364.723602][T11617] netlink: 'syz.3.1521': attribute type 12 has an invalid length.
[  365.522150][T11632] netlink: 'syz.2.1526': attribute type 11 has an invalid length.
[  365.530226][T11632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1526'.
[  365.619343][T11633] netlink: 'syz.2.1526': attribute type 1 has an invalid length.
[  365.988081][T11633] netlink: 'syz.2.1526': attribute type 1 has an invalid length.
[  366.077545][T11540] Set syz1 is full, maxelem 65536 reached
[  366.244599][T11637] sit0: entered promiscuous mode
[  366.280523][T11637] netlink: 'syz.1.1527': attribute type 1 has an invalid length.
[  366.306753][T11637] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1527'.
[  366.430530][T11644] siw: device registration error -23
[  366.696624][T11652] netlink: 'syz.4.1530': attribute type 1 has an invalid length.
[  366.721632][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'.
[  366.729008][T11652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1530'.
[  366.941128][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'.
[  366.976577][T11656] wireguard0: entered promiscuous mode
[  367.056395][T11656] wireguard0: entered allmulticast mode
[  367.314754][T11657] lo speed is unknown, defaulting to 1000
[  367.609524][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'.
[  368.054947][T11680] netlink: 'syz.0.1538': attribute type 4 has an invalid length.
[  368.335256][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'.
[  368.588318][T11683] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  368.738549][   T30] audit: type=1800 audit(1747659665.813:12): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1537" name="cgroup.controllers" dev="tmpfs" ino=1676 res=0 errno=0
[  368.919260][T11664] syz.2.1533: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  368.956452][T11664] CPU: 0 UID: 0 PID: 11664 Comm: syz.2.1533 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  368.956494][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  368.956511][T11664] Call Trace:
[  368.956524][T11664]  <TASK>
[  368.956534][T11664]  dump_stack_lvl+0x189/0x250
[  368.956578][T11664]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.956611][T11664]  ? __pfx__printk+0x10/0x10
[  368.956635][T11664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.956659][T11664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.956685][T11664]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  368.956713][T11664]  warn_alloc+0x214/0x310
[  368.956755][T11664]  ? __pfx_warn_alloc+0x10/0x10
[  368.956808][T11664]  ? __get_vm_area_node+0x28f/0x300
[  368.956849][T11664]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[  368.956881][T11664]  ? do_syscall_64+0xf6/0x210
[  368.956942][T11664]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  368.956975][T11664]  ? __kasan_kmalloc_large+0x1a/0xa0
[  368.957009][T11664]  ? rcu_is_watching+0x15/0xb0
[  368.957032][T11664]  ? hash_netport_create+0x358/0xfe0
[  368.957064][T11664]  ? hash_netport_create+0x358/0xfe0
[  368.957094][T11664]  __kvmalloc_node_noprof+0x3a0/0x5e0
[  368.957126][T11664]  ? hash_netport_create+0x358/0xfe0
[  368.957159][T11664]  ? hash_netport_create+0x2fe/0xfe0
[  368.957197][T11664]  hash_netport_create+0x358/0xfe0
[  368.957240][T11664]  ? __nla_parse+0x40/0x60
[  368.957268][T11664]  ? __pfx_hash_netport_create+0x10/0x10
[  368.957304][T11664]  ip_set_create+0xa97/0x1940
[  368.957329][T11664]  ? ip_set_create+0x4a2/0x1940
[  368.957368][T11664]  ? __pfx_ip_set_create+0x10/0x10
[  368.957436][T11664]  nfnetlink_rcv_msg+0xb4a/0x1130
[  368.957463][T11664]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  368.957510][T11664]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  368.957590][T11664]  netlink_rcv_skb+0x21c/0x490
[  368.957623][T11664]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  368.957648][T11664]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  368.957695][T11664]  ? apparmor_capable+0x137/0x1b0
[  368.957728][T11664]  ? bpf_lsm_capable+0x9/0x20
[  368.957759][T11664]  ? security_capable+0x7e/0x2e0
[  368.957800][T11664]  nfnetlink_rcv+0x273/0x2530
[  368.957828][T11664]  ? kernel_text_address+0xa5/0xe0
[  368.957859][T11664]  ? __kernel_text_address+0xd/0x40
[  368.957888][T11664]  ? unwind_get_return_address+0x4d/0x90
[  368.957915][T11664]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  368.957940][T11664]  ? arch_stack_walk+0xfc/0x150
[  368.957984][T11664]  ? stack_trace_save+0x9c/0xe0
[  368.958011][T11664]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  368.958032][T11664]  ? stack_depot_save_flags+0x40/0x910
[  368.958066][T11664]  ? kasan_save_track+0x4f/0x80
[  368.958089][T11664]  ? kasan_save_track+0x3e/0x80
[  368.958123][T11664]  ? __lock_acquire+0xaac/0xd20
[  368.958185][T11664]  ? __lock_acquire+0xaac/0xd20
[  368.958228][T11664]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.958266][T11664]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.958296][T11664]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.958334][T11664]  netlink_unicast+0x758/0x8d0
[  368.958376][T11664]  netlink_sendmsg+0x805/0xb30
[  368.958440][T11664]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.958477][T11664]  ? aa_sock_msg_perm+0x94/0x160
[  368.958507][T11664]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  368.958532][T11664]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.958566][T11664]  __sock_sendmsg+0x219/0x270
[  368.958595][T11664]  ____sys_sendmsg+0x505/0x830
[  368.958636][T11664]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.958681][T11664]  ? import_iovec+0x74/0xa0
[  368.958718][T11664]  ___sys_sendmsg+0x21f/0x2a0
[  368.958754][T11664]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.958837][T11664]  ? __fget_files+0x2a/0x420
[  368.958867][T11664]  ? __fget_files+0x3a0/0x420
[  368.958911][T11664]  __x64_sys_sendmsg+0x19b/0x260
[  368.958948][T11664]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  368.959004][T11664]  ? do_syscall_64+0xba/0x210
[  368.959034][T11664]  do_syscall_64+0xf6/0x210
[  368.959061][T11664]  ? clear_bhb_loop+0x60/0xb0
[  368.959090][T11664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.959112][T11664] RIP: 0033:0x7fd10378e969
[  368.959134][T11664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.959153][T11664] RSP: 002b:00007fd10469c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.959176][T11664] RAX: ffffffffffffffda RBX: 00007fd1039b6160 RCX: 00007fd10378e969
[  368.959192][T11664] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  368.959206][T11664] RBP: 00007fd103810ab1 R08: 0000000000000000 R09: 0000000000000000
[  368.959219][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.959232][T11664] R13: 0000000000000000 R14: 00007fd1039b6160 R15: 00007ffc5e286818
[  368.959269][T11664]  </TASK>
[  368.959288][T11664] Mem-Info:
[  369.465492][T11664] active_anon:11437 inactive_anon:0 isolated_anon:0
[  369.465492][T11664]  active_file:1378 inactive_file:39936 isolated_file:0
[  369.465492][T11664]  unevictable:768 dirty:344 writeback:0
[  369.465492][T11664]  slab_reclaimable:10768 slab_unreclaimable:120897
[  369.465492][T11664]  mapped:31720 shmem:1674 pagetables:793
[  369.465492][T11664]  sec_pagetables:0 bounce:0
[  369.465492][T11664]  kernel_misc_reclaimable:0
[  369.465492][T11664]  free:1314300 free_pcp:321 free_cma:0
[  369.538510][T11686] batadv_slave_1: left promiscuous mode
[  369.583270][T11686] vlan1: left promiscuous mode
[  369.601239][T11686] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  369.624535][T11686] vlan1: left allmulticast mode
[  369.643864][T11686] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  369.706998][T11664] Node 0 active_anon:51948kB inactive_anon:0kB active_file:5512kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133280kB dirty:1472kB writeback:0kB shmem:11460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12220kB pagetables:3172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  369.741705][T11686] bond3: left promiscuous mode
[  369.763023][T11686] vxcan1: left allmulticast mode
[  369.765835][T11664] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  369.800925][T11686] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 46123 - 0
[  369.810899][T11664] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  369.843478][T11686] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 46123 - 0
[  369.851775][T11664] lowmem_reserve[]: 0 2503 2503 2503 2503
[  369.859198][T11664] Node 0 DMA32 free:1321176kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:53540kB inactive_anon:0kB active_file:5512kB inactive_file:159448kB unevictable:1536kB writepending:1472kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:5108kB local_pcp:2880kB free_cma:0kB
[  369.899180][T11664] lowmem_reserve[]:
[  369.899188][T11686] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 46123 - 0
[  369.899199][T11664]  0
[  369.903697][T11664]  0 0 0 0
[  369.919012][T11686] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 46123 - 0
[  369.928899][T11664] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  369.964651][T11664] lowmem_reserve[]: 0 0 0 0 0
[  369.971467][T11686] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 50462 - 0
[  369.981788][T11686] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 50462 - 0
[  369.993051][T11686] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 50462 - 0
[  370.002721][T11664] Node 1 Normal free:3911508kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  370.040506][T11686] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 50462 - 0
[  370.046862][T11664] lowmem_reserve[]: 0 0 0 0 0
[  370.054377][T11686] geneve2: left promiscuous mode
[  370.063166][T11686] geneve2: left allmulticast mode
[  370.081934][T11664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  370.104111][T11704] netlink: 'syz.3.1544': attribute type 4 has an invalid length.
[  370.115787][T11693] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1542'.
[  370.118885][T11664] Node 0 DMA32: 0*4kB 596*8kB (UE) 261*16kB (UE) 651*32kB (UE) 128*64kB (UME) 184*128kB (UME) 186*256kB (UM) 86*512kB (UME) 34*1024kB (UME) 3*2048kB (UME) 274*4096kB (UM) = 1316432kB
[  370.209651][T11688] lo speed is unknown, defaulting to 1000
[  370.216400][T11664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  370.238782][T11664] Node 1 Normal: 187*4kB (UME) 57*8kB (UME) 40*16kB (UME) 213*32kB (UME) 104*64kB (UME) 25*128kB (UME) 15*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3911508kB
[  370.373768][T11664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  370.385425][T11664] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  370.396513][T11664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  370.410589][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[  370.422477][T11664] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  370.444406][T11664] 45531 total pagecache pages
[  370.453336][T11664] 0 pages in swap cache
[  370.458367][T11664] Free swap  = 124996kB
[  370.462561][T11664] Total swap = 124996kB
[  370.474116][T11664] 2097051 pages RAM
[  370.480229][T11664] 0 pages HighMem/MovableOnly
[  370.493365][T11664] 424397 pages reserved
[  370.501847][T11664] 0 pages cma reserved
[  370.665139][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'.
[  370.710192][T11722] No such timeout policy "syz0"
[  370.818973][T11723] netlink: 'syz.0.1550': attribute type 12 has an invalid length.
[  370.945398][T11727] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  371.241954][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.261734][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.667022][T11747] siw: device registration error -23
[  371.906375][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'.
[  371.974286][T11752] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.275252][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'.
[  372.340964][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'.
[  372.396774][T11764] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  372.470655][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'.
[  372.527745][T11764] lo speed is unknown, defaulting to 1000
[  372.584216][T11762] lo speed is unknown, defaulting to 1000
[  373.416221][T11784] sctp: [Deprecated]: syz.0.1565 (pid 11784) Use of int in max_burst socket option.
[  373.416221][T11784] Use struct sctp_assoc_value instead
[  374.054786][T11802] lo speed is unknown, defaulting to 1000
[  374.449267][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  374.463262][T11810] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  374.470792][T11810] batman_adv: batadv0: Removing interface: ip6gretap3
[  374.929861][T11815] tipc: Can't bind to reserved service type 0
[  374.941351][T11815] sctp: [Deprecated]: syz.2.1573 (pid 11815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.941351][T11815] Use struct sctp_sack_info instead
[  375.080869][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'.
[  375.137778][T11820] sctp: [Deprecated]: syz.2.1573 (pid 11820) Use of int in max_burst socket option deprecated.
[  375.137778][T11820] Use struct sctp_assoc_value instead
[  375.492166][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'.
[  375.523458][T11821] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  375.668930][T11827] lo speed is unknown, defaulting to 1000
[  376.114329][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'.
[  376.214199][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'.
[  376.540242][T11838] lo speed is unknown, defaulting to 1000
[  376.655195][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[  378.913589][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  379.149999][T11864] syz.2.1582 (11864) used obsolete PPPIOCDETACH ioctl
[  379.330591][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'.
[  379.552692][T11824] Set syz1 is full, maxelem 65536 reached
[  379.572131][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'.
[  379.685016][T11876] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  379.814858][T11876] lo speed is unknown, defaulting to 1000
[  380.295157][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'.
[  380.982286][T11897] lo speed is unknown, defaulting to 1000
[  381.103387][T11904] netlink: 'syz.4.1592': attribute type 27 has an invalid length.
[  381.933967][T11911] bridge0: port 1(erspan0) entered blocking state
[  381.963725][T11911] bridge0: port 1(erspan0) entered disabled state
[  381.991644][T11911] erspan0: entered allmulticast mode
[  382.000308][T11913] netlink: 'syz.1.1594': attribute type 10 has an invalid length.
[  382.019054][T11911] erspan0: entered promiscuous mode
[  382.027098][T11913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1594'.
[  382.042120][T11915] erspan0: left allmulticast mode
[  382.049937][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'.
[  382.059310][T11915] erspan0: left promiscuous mode
[  382.064599][T11915] bridge0: port 1(erspan0) entered disabled state
[  382.076177][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  382.106215][T11913] bridge2: port 1(dummy0) entered blocking state
[  382.123214][T11913] bridge2: port 1(dummy0) entered disabled state
[  382.130006][T11913] dummy0: entered allmulticast mode
[  382.471349][T11913] lo speed is unknown, defaulting to 1000
[  382.471408][T11929] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  382.671964][T11929] lo speed is unknown, defaulting to 1000
[  382.949317][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1600'.
[  382.992945][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1600'.
[  383.003941][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1600'.
[  383.046401][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1600'.
[  383.113461][T11941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1601'.
[  383.131961][T11935] lo speed is unknown, defaulting to 1000
[  383.202511][T11941] lo speed is unknown, defaulting to 1000
[  383.368164][T11948] netlink: 'syz.0.1603': attribute type 9 has an invalid length.
[  383.398745][T11948] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.1603'.
[  383.959447][T11954] netlink: 'syz.2.1605': attribute type 12 has an invalid length.
[  384.510077][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  384.553796][T11969] x_tables: duplicate underflow at hook 3
[  384.614677][T11970] netlink: 'syz.2.1609': attribute type 5 has an invalid length.
[  384.732027][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'.
[  384.954887][T11972] lo speed is unknown, defaulting to 1000
[  385.665179][T11999] netlink: 'syz.4.1613': attribute type 16 has an invalid length.
[  385.755745][T11999] netlink: 'syz.4.1613': attribute type 17 has an invalid length.
[  385.853925][T11999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.938114][T12005] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  386.038183][T12002] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  386.072313][T12005] lo speed is unknown, defaulting to 1000
[  386.315677][T12012] netlink: 'syz.1.1617': attribute type 12 has an invalid length.
[  386.332086][T12008] lo speed is unknown, defaulting to 1000
[  386.722713][T12018] xt_TCPMSS: Only works on TCP SYN packets
[  386.756991][T12018] xt_connbytes: Forcing CT accounting to be enabled
[  386.763915][T12018] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  387.081372][T12023] warn_alloc: 1 callbacks suppressed
[  387.081397][T12023] syz.4.1620: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  387.196121][T12023] CPU: 0 UID: 0 PID: 12023 Comm: syz.4.1620 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  387.196153][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  387.196167][T12023] Call Trace:
[  387.196176][T12023]  <TASK>
[  387.196186][T12023]  dump_stack_lvl+0x189/0x250
[  387.196226][T12023]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.196258][T12023]  ? __pfx__printk+0x10/0x10
[  387.196280][T12023]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  387.196305][T12023]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  387.196330][T12023]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  387.196358][T12023]  warn_alloc+0x214/0x310
[  387.196392][T12023]  ? __pfx___schedule+0x10/0x10
[  387.196423][T12023]  ? __pfx_warn_alloc+0x10/0x10
[  387.196454][T12023]  ? kasan_save_track+0x4f/0x80
[  387.196480][T12023]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  387.196507][T12023]  ? xskq_create+0x56/0x170
[  387.196530][T12023]  ? __x64_sys_setsockopt+0x18b/0x220
[  387.196558][T12023]  ? do_syscall_64+0xf6/0x210
[  387.196582][T12023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.196626][T12023]  __vmalloc_node_range_noprof+0x125/0x12c0
[  387.196695][T12023]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  387.196732][T12023]  ? __kasan_kmalloc+0x93/0xb0
[  387.196768][T12023]  vmalloc_user_noprof+0x74/0x80
[  387.196801][T12023]  ? xskq_create+0xbf/0x170
[  387.196823][T12023]  xskq_create+0xbf/0x170
[  387.196862][T12023]  xsk_init_queue+0xb0/0x110
[  387.196889][T12023]  xsk_setsockopt+0x43f/0x710
[  387.196915][T12023]  ? __pfx_xsk_setsockopt+0x10/0x10
[  387.196954][T12023]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  387.196980][T12023]  ? __pfx_xsk_setsockopt+0x10/0x10
[  387.197004][T12023]  do_sock_setsockopt+0x257/0x3e0
[  387.197039][T12023]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  387.197068][T12023]  ? __fget_files+0x2a/0x420
[  387.197104][T12023]  ? __fget_files+0x3a0/0x420
[  387.197148][T12023]  ? __fget_files+0x2a/0x420
[  387.197188][T12023]  __x64_sys_setsockopt+0x18b/0x220
[  387.197228][T12023]  do_syscall_64+0xf6/0x210
[  387.197255][T12023]  ? clear_bhb_loop+0x60/0xb0
[  387.197281][T12023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.197302][T12023] RIP: 0033:0x7fc084d8e969
[  387.197322][T12023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.197341][T12023] RSP: 002b:00007fc082bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  387.197365][T12023] RAX: ffffffffffffffda RBX: 00007fc084fb5fa0 RCX: 00007fc084d8e969
[  387.197382][T12023] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  387.197395][T12023] RBP: 00007fc084e10ab1 R08: 0000000000000004 R09: 0000000000000000
[  387.197408][T12023] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.197422][T12023] R13: 0000000000000000 R14: 00007fc084fb5fa0 R15: 00007ffd55df3ce8
[  387.197458][T12023]  </TASK>
[  387.200883][T12023] Mem-Info:
[  387.554441][T12023] active_anon:15019 inactive_anon:0 isolated_anon:0
[  387.554441][T12023]  active_file:1395 inactive_file:39944 isolated_file:0
[  387.554441][T12023]  unevictable:768 dirty:553 writeback:0
[  387.554441][T12023]  slab_reclaimable:10966 slab_unreclaimable:114107
[  387.554441][T12023]  mapped:32320 shmem:4249 pagetables:773
[  387.554441][T12023]  sec_pagetables:0 bounce:0
[  387.554441][T12023]  kernel_misc_reclaimable:0
[  387.554441][T12023]  free:1316556 free_pcp:1511 free_cma:0
[  387.635937][T12023] Node 0 active_anon:61076kB inactive_anon:0kB active_file:5580kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130080kB dirty:2208kB writeback:0kB shmem:16260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:2992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  387.735527][T12023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  387.853215][T12023] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  387.908156][T12035] __nla_validate_parse: 1 callbacks suppressed
[  387.908176][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'.
[  387.954752][T12023] lowmem_reserve[]: 0 2503 2503 2503 2503
[  387.977870][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1623'.
[  388.012978][T12023] Node 0 DMA32 free:1337256kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:66524kB inactive_anon:0kB active_file:5648kB inactive_file:159480kB unevictable:1536kB writepending:2248kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:3104kB local_pcp:2588kB free_cma:0kB
[  388.108389][ T5834] Bluetooth: hci0: command tx timeout
[  388.172050][T12023] lowmem_reserve[]: 0 0 0 0 0
[  388.177158][T12023] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  388.204058][T12023] lowmem_reserve[]: 0 0 0 0 0
[  388.208986][T12023] Node 1 Normal free:3910988kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:496kB free_cma:0kB
[  388.326014][T12023] lowmem_reserve[]: 0 0 0 0 0
[  388.330839][T12023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  388.386562][T12023] Node 0 DMA32: 13*4kB (UM) 31*8kB (UME) 10*16kB (ME) 831*32kB (UME) 403*64kB (UE) 276*128kB (UME) 176*256kB (UM) 85*512kB (UME) 37*1024kB (UME) 5*2048kB (UME) 272*4096kB (UM) = 1338988kB
[  388.464558][T12023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  388.490692][T12023] Node 1 Normal: 57*4kB (UME) 57*8kB (UME) 40*16kB (UME) 213*32kB (UME) 104*64kB (UME) 25*128kB (UME) 15*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910988kB
[  388.562511][T12023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  388.610729][T12023] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  388.657672][T12023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  388.681807][T12039] can: request_module (can-proto-0) failed.
[  388.701975][T12023] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  388.734397][T12023] 42765 total pagecache pages
[  388.758179][T12023] 0 pages in swap cache
[  388.762403][T12023] Free swap  = 124996kB
[  388.772597][T12046] smc: net device bond0 applied user defined pnetid SYZ0
[  388.796259][T12023] Total swap = 124996kB
[  388.800491][T12023] 2097051 pages RAM
[  388.845372][T12023] 0 pages HighMem/MovableOnly
[  388.862045][T12023] 424397 pages reserved
[  388.883846][T12023] 0 pages cma reserved
[  388.895673][T12045] lo speed is unknown, defaulting to 1000
[  389.271074][T12059] xt_hashlimit: size too large, truncated to 1048576
[  389.738877][T12069] set match dimension is over the limit!
[  390.055462][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1630'.
[  390.093622][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'.
[  390.423994][T12082] sctp: [Deprecated]: syz.2.1634 (pid 12082) Use of int in max_burst socket option.
[  390.423994][T12082] Use struct sctp_assoc_value instead
[  390.473026][T12084] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  390.484591][T12082] IPVS: stopping backup sync thread 12084 ...
[  390.788021][T12089] netlink: 'syz.1.1636': attribute type 12 has an invalid length.
[  390.992004][T12092] batadv0: left promiscuous mode
[  390.997505][T12092] batadv0: left allmulticast mode
[  391.057934][T12092] bond3: left promiscuous mode
[  391.082029][T12092] batadv1: left promiscuous mode
[  391.108053][T12092] batadv1: left allmulticast mode
[  391.148731][T12092] vlan2: left promiscuous mode
[  391.153577][T12092] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  391.196326][T12092] vlan2: left allmulticast mode
[  391.204329][T12092] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  391.222507][T12092] xfrm1: left promiscuous mode
[  391.235234][T12092] xfrm1: left allmulticast mode
[  391.271833][T12092] bridge3: left allmulticast mode
[  391.410345][T12101] lo speed is unknown, defaulting to 1000
[  391.547411][T12107] netlink: 'syz.2.1641': attribute type 9 has an invalid length.
[  391.565959][T12107] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.1641'.
[  391.873258][ T5833] block nbd2: Receive control failed (result -32)
[  391.930401][T12114] lo speed is unknown, defaulting to 1000
[  392.696591][T12127] sit0: left promiscuous mode
[  392.889097][T12136] ipt_ECN: cannot use operation on non-tcp rule
[  393.005305][T12127] bridge0: port 1(gretap0) entered blocking state
[  393.026681][T12127] bridge0: port 1(gretap0) entered disabled state
[  393.033358][T12127] gretap0: entered allmulticast mode
[  393.086111][T12127] gretap0: entered promiscuous mode
[  393.596952][T12145] netlink: 'syz.3.1648': attribute type 12 has an invalid length.
[  393.684604][T12147] netlink: 'syz.4.1649': attribute type 12 has an invalid length.
[  394.057758][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  394.226401][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'.
[  394.979010][T10717] udevd[10717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  395.040854][T10715] udevd[10715]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  395.061773][T12155] hsr0: left allmulticast mode
[  395.076746][T12155] hsr_slave_0: left allmulticast mode
[  395.083106][T12155] hsr_slave_1: left allmulticast mode
[  395.101175][T12155] hsr0: left promiscuous mode
[  395.353645][T12156] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.427382][T12156] 8021q: adding VLAN 0 to HW filter on device team0
[  395.457085][T12156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.497574][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'.
[  395.529384][T12170] block nbd0: must specify backend
[  395.575346][T12166] lo speed is unknown, defaulting to 1000
[  395.843662][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'.
[  396.329204][T12189] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1658'.
[  397.091110][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'.
[  397.129108][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'.
[  397.317805][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'.
[  397.361396][T12205] hsr_slave_0: left promiscuous mode
[  397.415270][T12205] hsr_slave_1: left promiscuous mode
[  397.583038][T12202] veth9: entered allmulticast mode
[  397.589356][T12202] bridge0: port 2(veth9) entered blocking state
[  397.595975][T12202] bridge0: port 2(veth9) entered disabled state
[  397.613436][T12202] veth9: entered promiscuous mode
[  397.706687][T12209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.749993][T12197] lo speed is unknown, defaulting to 1000
[  398.054743][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'.
[  398.337495][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'.
[  398.599876][T12237] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  398.618020][   T30] audit: type=1800 audit(1747659695.733:13): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1673" name="memory.events" dev="tmpfs" ino=1821 res=0 errno=0
[  398.673102][   T30] audit: type=1804 audit(1747659695.783:14): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1673" name="memory.events" dev="tmpfs" ino=1821 res=1 errno=0
[  398.732120][T12244] netlink: zone id is out of range
[  398.737847][T12244] netlink: zone id is out of range
[  398.785685][T12240] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.922533][T12237] veth11: entered promiscuous mode
[  398.937948][T12237] bond3: (slave veth11): Enslaving as a backup interface with a down link
[  398.973382][T12238] gretap0: left allmulticast mode
[  398.991191][T12238] gretap0: left promiscuous mode
[  399.034770][T12238] bridge0: port 1(gretap0) entered disabled state
[  399.055065][T12238] dummy0: left allmulticast mode
[  399.074814][T12238] bridge2: port 1(dummy0) entered disabled state
[  399.103275][T12238] veth9: left promiscuous mode
[  399.110114][T12238] bridge0: port 2(veth9) entered disabled state
[  399.133839][T12238] bond3: (slave veth11): Releasing backup interface
[  399.224454][T12253] lo speed is unknown, defaulting to 1000
[  399.492339][T12262] netlink: 'syz.3.1678': attribute type 11 has an invalid length.
[  399.517125][T12262] __nla_validate_parse: 3 callbacks suppressed
[  399.517144][T12262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1678'.
[  399.564381][T12265] netlink: 'syz.3.1678': attribute type 1 has an invalid length.
[  399.600076][T12265] netlink: 'syz.3.1678': attribute type 1 has an invalid length.
[  399.874318][T12260] lo speed is unknown, defaulting to 1000
[  399.898955][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'.
[  400.005064][T12276] netlink: 'syz.0.1680': attribute type 10 has an invalid length.
[  400.111252][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  400.137703][T12280] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1680'.
[  400.180003][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'.
[  401.074685][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[  401.153373][T12303] xt_TCPMSS: Only works on TCP SYN packets
[  401.163284][T12306] netlink: 'syz.0.1688': attribute type 1 has an invalid length.
[  401.254313][T12311] veth9: entered promiscuous mode
[  402.043331][T12328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1692'.
[  402.093761][T12328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  402.561900][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'.
[  402.813927][T12344] lo speed is unknown, defaulting to 1000
[  402.976128][T12346] IPVS: Scheduler module ip_vs_sip not found
[  402.992713][T12350] IPVS: length: 24 != 16106127384
[  403.178044][T12361] netlink: 'syz.0.1701': attribute type 12 has an invalid length.
[  403.298624][T12367] netlink: 'syz.4.1702': attribute type 13 has an invalid length.
[  403.434591][T12358] syzkaller0: entered promiscuous mode
[  403.477349][T12358] syzkaller0: entered allmulticast mode
[  403.497343][T12359] netlink: 'syz.3.1700': attribute type 6 has an invalid length.
[  404.375489][T12367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.913792][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'.
[  406.400246][T12370] lo speed is unknown, defaulting to 1000
[  406.870461][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1710'.
[  407.255313][T12406] xt_CT: No such helper "pptp"
[  407.303851][T12408] 8021q: adding VLAN 0 to HW filter on device bond4
[  407.319060][T12408] team0: Port device bond4 added
[  407.325760][T12413] netlink: 'syz.3.1712': attribute type 2 has an invalid length.
[  407.392002][T12422] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  407.418082][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'.
[  407.427413][T12422] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1713'.
[  407.935345][T12436] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  408.067758][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'.
[  408.146175][T12440] lo speed is unknown, defaulting to 1000
[  408.262733][T12447] lo speed is unknown, defaulting to 1000
[  408.321900][T12444] lo speed is unknown, defaulting to 1000
[  408.330099][T12446] lo speed is unknown, defaulting to 1000
[  408.592414][T12462] No such timeout policy "syz1"
[  409.059500][T12473] xt_hashlimit: size too large, truncated to 1048576
[  409.125136][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1728'.
[  409.586308][T12475] lo speed is unknown, defaulting to 1000
[  409.777321][T12483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1730'.
[  410.307681][T12499] netlink: 'syz.4.1736': attribute type 1 has an invalid length.
[  410.372621][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'.
[  410.426761][T12502] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1736'.
[  410.456028][T12504] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1735'.
[  410.471554][T12499] bond6: entered promiscuous mode
[  410.477291][T12499] 8021q: adding VLAN 0 to HW filter on device bond6
[  410.496152][T12500] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1735'.
[  410.567731][T12502] batadv2: entered promiscuous mode
[  410.573010][T12502] batadv2: entered allmulticast mode
[  410.705537][T12495] pim6reg1: entered promiscuous mode
[  410.712085][T12495] pim6reg1: entered allmulticast mode
[  410.810465][T12508] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1738'.
[  411.073664][T12512] can: request_module (can-proto-3) failed.
[  411.117159][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'.
[  411.313442][T12520] lo speed is unknown, defaulting to 1000
[  411.608663][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1743'.
[  411.674253][T12531] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1743'.
[  411.793529][T12535] syzkaller0: entered allmulticast mode
[  411.815811][T12531] syzkaller0 (unregistering): left allmulticast mode
[  412.680989][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  412.734163][T12564] veth9: left allmulticast mode
[  412.756104][T12564] veth11: left promiscuous mode
[  412.826676][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  413.136300][T12574] netlink: 'syz.1.1749': attribute type 2 has an invalid length.
[  413.341303][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'.
[  413.411300][T12579] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  413.503816][T12589] batadv_slave_1: entered allmulticast mode
[  413.734051][T12598] netlink: 'syz.3.1756': attribute type 32 has an invalid length.
[  413.743118][T12598] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  414.007194][T12598] lo: entered promiscuous mode
[  414.012224][T12598] tunl0: entered promiscuous mode
[  414.066183][T12598] gre0: entered promiscuous mode
[  414.076171][T12598] gretap0: entered promiscuous mode
[  414.112518][T12598] ip_vti0: entered promiscuous mode
[  414.144028][T12598] ip6_vti0: entered promiscuous mode
[  414.178704][T12598] sit0: entered promiscuous mode
[  414.200751][T12598] ip6tnl0: entered promiscuous mode
[  414.231799][T12598] ip6gre0: entered promiscuous mode
[  414.270310][T12598] ip6gretap0: entered promiscuous mode
[  414.287590][T12598] vcan0: entered promiscuous mode
[  414.337150][T12598] team0: entered promiscuous mode
[  414.358576][T12598] bond4: entered promiscuous mode
[  414.387189][T12598] nlmon0: entered promiscuous mode
[  414.392700][T12598] caif0: entered promiscuous mode
[  414.446347][T12598] vxcan0: entered promiscuous mode
[  414.465952][T12598] vxcan1: entered promiscuous mode
[  414.546251][T12598] veth0: entered promiscuous mode
[  414.551766][T12598] wg1: entered promiscuous mode
[  414.619871][T12598] wg2: entered promiscuous mode
[  414.636142][T12598] veth0_to_bridge: entered promiscuous mode
[  414.652820][T12598] bridge_slave_0: entered promiscuous mode
[  414.669238][T12598] veth1_to_bridge: entered promiscuous mode
[  414.675573][T12598] bridge_slave_1: entered promiscuous mode
[  414.726515][T12598] veth1_to_bond: entered promiscuous mode
[  414.732519][T12598] bond_slave_1: entered promiscuous mode
[  414.786501][T12598] veth0_to_team: entered promiscuous mode
[  414.809834][T12598] team_slave_0: entered promiscuous mode
[  414.836106][T12598] veth1_to_team: entered promiscuous mode
[  414.848104][T12598] team_slave_1: entered promiscuous mode
[  414.867599][T12598] veth0_to_batadv: entered promiscuous mode
[  414.873770][T12598] batadv_slave_0: entered promiscuous mode
[  414.910734][T12598] xfrm0: entered promiscuous mode
[  414.948906][T12598] veth0_to_hsr: entered promiscuous mode
[  414.954962][T12598] veth1_to_hsr: entered promiscuous mode
[  414.976835][T12598] hsr0: entered promiscuous mode
[  414.996291][T12598] veth1_virt_wifi: entered promiscuous mode
[  415.002456][T12598] veth0_virt_wifi: entered promiscuous mode
[  415.046376][T12598] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  415.053878][T12598] veth1_macvtap: entered promiscuous mode
[  415.106247][T12598] veth0_macvtap: entered promiscuous mode
[  415.112274][T12598] macsec0: entered promiscuous mode
[  415.138373][T12598] geneve0: entered promiscuous mode
[  415.143835][T12598] geneve1: entered promiscuous mode
[  415.224761][T12598] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  415.235755][T12598] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  415.253479][T12598] hsr1: entered promiscuous mode
[  415.259121][T12598] team1: entered promiscuous mode
[  415.264422][T12598] syztnl2: entered promiscuous mode
[  415.280868][T12598] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode
[  415.296381][T12598] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode
[  415.314053][T12598] bridge1: entered promiscuous mode
[  415.324368][T12598] vxlan0: entered promiscuous mode
[  415.428804][T12598] batadv1: entered promiscuous mode
[  415.434367][T12598] bond1: entered promiscuous mode
[  415.470314][T12598] veth2: entered promiscuous mode
[  415.475626][T12598] veth3: entered promiscuous mode
[  415.506208][T12598] vlan2: entered promiscuous mode
[  415.511667][T12598] macvlan2: entered promiscuous mode
[  415.536799][T12598] ip6gretap1: entered promiscuous mode
[  415.542485][T12598] dvmrp1: entered promiscuous mode
[  415.558598][T12598] vlan3: entered promiscuous mode
[  415.568564][T12598] batadv0: entered promiscuous mode
[  415.579643][T12598] bridge0: entered promiscuous mode
[  415.591776][T12598] syztnl1: entered promiscuous mode
[  415.604037][T12598] netdevsim netdevsim3 eth0: entered promiscuous mode
[  415.620563][T12598] netdevsim netdevsim3 eth1: entered promiscuous mode
[  415.636987][T12598] netdevsim netdevsim3 eth2: entered promiscuous mode
[  415.650799][T12598] netdevsim netdevsim3 eth3: entered promiscuous mode
[  415.676104][T12598] bond2: entered promiscuous mode
[  415.681362][T12598] bond3: entered promiscuous mode
[  415.689252][T12598] syztnl0: entered promiscuous mode
[  415.694781][T12598] geneve2: entered promiscuous mode
[  415.701674][T12598] batadv2: entered promiscuous mode
[  415.712136][T12598] team0: Port device bond4 removed
[  415.718382][T12598] bond5: entered promiscuous mode
[  415.746874][T12617] __nla_validate_parse: 2 callbacks suppressed
[  415.746897][T12617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1760'.
[  415.794344][T12618] ªªªªªª: renamed from lo
[  415.870416][T12615] lo speed is unknown, defaulting to 1000
[  415.915251][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'.
[  415.945027][T12625] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  416.028946][T12625] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  416.132231][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'.
[  416.813456][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'.
[  417.094761][T12645] netlink: 'syz.2.1767': attribute type 10 has an invalid length.
[  417.298936][T12652] lo speed is unknown, defaulting to 1000
[  417.396658][T12654] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1768'.
[  417.946570][T12664] IPVS: length: 78 != 8
[  418.225465][T12667] lo speed is unknown, defaulting to 1000
[  418.588239][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'.
[  418.981025][T12686] pimreg: entered allmulticast mode
[  419.031747][T12688] 8021q: VLANs not supported on pimreg
[  419.140608][T12686] netlink: 'syz.4.1775': attribute type 1 has an invalid length.
[  419.184616][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'.
[  419.251773][T12692] netlink: 'syz.3.1776': attribute type 10 has an invalid length.
[  419.270542][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1776'.
[  419.336444][T12697] macvlan0: entered promiscuous mode
[  419.361896][T12697] bridge0: port 1(macvlan0) entered blocking state
[  419.401396][T12697] bridge0: port 1(macvlan0) entered disabled state
[  419.417248][T12697] macvlan0: entered allmulticast mode
[  419.438708][T12697] bridge0: entered allmulticast mode
[  419.462601][T12697] macvlan0: left allmulticast mode
[  419.474577][T12697] bridge0: left allmulticast mode
[  419.545375][T12688] pimreg: left allmulticast mode
[  419.769277][T12700] lo speed is unknown, defaulting to 1000
[  419.828036][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'.
[  419.988400][T12706] lo speed is unknown, defaulting to 1000
[  420.398598][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1782'.
[  420.995532][T12728] syzkaller1: entered promiscuous mode
[  421.005342][T12728] syzkaller1: entered allmulticast mode
[  421.061375][T12731] lo speed is unknown, defaulting to 1000
[  421.634042][T12747] __nla_validate_parse: 3 callbacks suppressed
[  421.634065][T12747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1789'.
[  421.764078][T12746] syzkaller0: entered promiscuous mode
[  421.895674][T12746] syzkaller0: entered allmulticast mode
[  421.985386][T12755] xt_ecn: cannot match TCP bits for non-tcp packets
[  422.271941][T12757] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  422.346139][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  422.907176][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  423.234388][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1793'.
[  423.386441][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  423.652099][T12769] netlink: 'syz.0.1793': attribute type 2 has an invalid length.
[  424.430819][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  425.476038][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  426.288699][T12769] : entered promiscuous mode
[  426.484981][T12776] batadv_slave_1: left allmulticast mode
[  426.497408][T12776] veth3: left promiscuous mode
[  426.503158][T12776] bond5: left promiscuous mode
[  426.516095][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  426.556393][T12776] bond6: left promiscuous mode
[  426.562093][T12776] batadv2: left promiscuous mode
[  426.586227][T12776] batadv2: left allmulticast mode
[  426.631441][T12784] netlink: 'syz.1.1795': attribute type 1 has an invalid length.
[  426.690120][T12785] syzkaller1: entered promiscuous mode
[  426.695702][T12785] syzkaller1: entered allmulticast mode
[  426.738442][T12783] lo speed is unknown, defaulting to 1000
[  427.163845][T12793] lo speed is unknown, defaulting to 1000
[  427.481595][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  427.556199][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  428.513023][T12821] xt_ecn: cannot match TCP bits for non-tcp packets
[  428.586054][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  428.807088][T12826] netlink: 'syz.1.1808': attribute type 1 has an invalid length.
[  428.946287][T12826] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1808'.
[  429.248855][T12834] lo speed is unknown, defaulting to 1000
[  429.354478][T12840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  429.502964][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  429.625986][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  429.804751][T12853] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  429.813546][T12841] 8021q: adding VLAN 0 to HW filter on device bond6
[  429.842028][T12848] 8021q: adding VLAN 0 to HW filter on device bond6
[  429.853779][T12848] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  429.866944][T12848] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  430.094566][T12854] lo speed is unknown, defaulting to 1000
[  430.666010][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  431.712578][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.750104][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  433.409002][T12894] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  433.448191][T12875] lo speed is unknown, defaulting to 1000
[  433.640294][T12890] lo speed is unknown, defaulting to 1000
[  433.701279][T12888] lo speed is unknown, defaulting to 1000
[  433.773993][T12908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.794983][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'.
[  433.804381][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  433.959146][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'.
[  434.193533][T12915] lo speed is unknown, defaulting to 1000
[  434.208933][T12919] smc: net device bond0 erased user defined pnetid SYZ0
[  434.312601][T12920] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  434.323350][T12920] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1826'.
[  434.356529][T12920] xt_hashlimit: invalid interval
[  434.826019][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  434.920174][T12930] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  435.110843][T12933] vxcan1: entered allmulticast mode
[  435.180222][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'.
[  435.362404][T12943] openvswitch: netlink: Flow key attr not present in new flow.
[  435.479403][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  435.499130][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1831'.
[  435.581936][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1831'.
[  435.604704][   T30] audit: type=1800 audit(1747659732.713:15): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1827" name="cgroup.controllers" dev="tmpfs" ino=1860 res=0 errno=0
[  435.656464][T12943] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  435.747447][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'.
[  435.783805][T12949] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.866014][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  436.020208][T12951] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  436.159251][T12951] lo speed is unknown, defaulting to 1000
[  436.352052][T12956] lo speed is unknown, defaulting to 1000
[  436.906052][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  437.289075][T12989] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  437.334259][   T30] audit: type=1800 audit(1747659734.443:16): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1840" name=C001 dev="tmpfs" ino=1873 res=0 errno=0
[  437.373202][T12986] lo speed is unknown, defaulting to 1000
[  437.404234][T12992] netlink: 550 bytes leftover after parsing attributes in process `syz.1.1841'.
[  437.933709][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1842'.
[  437.946007][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  438.461636][T12996] lo speed is unknown, defaulting to 1000
[  438.600918][T13015] bridge2: entered promiscuous mode
[  438.616059][T13015] bridge2: entered allmulticast mode
[  438.626838][T13015] team0: Port device bridge2 added
[  438.986093][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  439.846262][T13035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.882209][T13037] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  440.031190][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  440.557950][T13047] __nla_validate_parse: 1 callbacks suppressed
[  440.557969][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'.
[  440.577340][T13047] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.608099][T13049] netlink: 'syz.1.1852': attribute type 303 has an invalid length.
[  440.633055][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'.
[  440.644652][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'.
[  440.968851][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'.
[  441.066252][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  441.185629][T13062] netlink: 'syz.0.1859': attribute type 12 has an invalid length.
[  441.549263][T13075] No such timeout policy "syz0"
[  441.567434][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'.
[  441.624737][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  442.106014][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  442.552662][T13092] !
: renamed from dummy0
[  442.628069][T13095] lo speed is unknown, defaulting to 1000
[  442.666332][T13097] smc: net device bond0 applied user defined pnetid SYZ0
[  442.737899][T13097] smc: net device bond0 erased user defined pnetid SYZ0
[  443.123106][T13098] lo speed is unknown, defaulting to 1000
[  443.145998][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  443.215786][T13100] lo speed is unknown, defaulting to 1000
[  444.126948][T13120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1873'.
[  444.186021][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  445.226016][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  445.765202][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'.
[  446.266022][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  446.742928][T13147] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  446.751852][T13147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1877'.
[  447.035714][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'.
[  447.306054][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  447.576694][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'.
[  447.826617][T13164] netlink: 30 bytes leftover after parsing attributes in process `syz.1.1880'.
[  447.837916][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  448.129637][T13173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1883'.
[  448.346260][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  448.365117][T13026] Set syz1 is full, maxelem 65536 reached
[  448.729973][T13190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  448.807743][T13186] netlink: 'syz.4.1887': attribute type 1 has an invalid length.
[  448.870896][T13186] 8021q: adding VLAN 0 to HW filter on device bond7
[  448.911965][T13191] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  449.103724][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'.
[  449.242272][T13186] vlan3: entered allmulticast mode
[  449.296378][T13186] veth1: entered allmulticast mode
[  449.343410][T13186] bond7: (slave vlan3): Opening slave failed
[  449.386150][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  449.475291][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'.
[  449.485253][T13200] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  449.741735][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'.
[  449.864331][T13212] lo speed is unknown, defaulting to 1000
[  450.244819][T13229] lo: left promiscuous mode
[  450.253761][T13229] tunl0: left promiscuous mode
[  450.261484][T13229] gre0: left promiscuous mode
[  450.273644][T13229] gretap0: left promiscuous mode
[  450.306308][T13229] ip_vti0: left promiscuous mode
[  450.340782][T13229] ip6_vti0: left promiscuous mode
[  450.386585][T13229] sit0: left promiscuous mode
[  450.416487][T13229] ip6tnl0: left promiscuous mode
[  450.426116][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  450.455374][T13229] ip6gre0: left promiscuous mode
[  450.513895][T13229] ip6gretap0: left promiscuous mode
[  450.559349][T13229] vcan0: left promiscuous mode
[  450.614414][T13229] team0: left promiscuous mode
[  450.620222][T13229] nlmon0: left promiscuous mode
[  450.625406][T13229] caif0: left promiscuous mode
[  450.630526][T13229] vxcan0: left promiscuous mode
[  450.635658][T13229] vxcan1: left promiscuous mode
[  450.640794][T13229] veth0: left promiscuous mode
[  450.646235][T13229] wg1: left promiscuous mode
[  450.651058][T13229] wg2: left promiscuous mode
[  450.656112][T13229] veth0_to_bridge: left promiscuous mode
[  450.663978][T13229] bridge_slave_0: left promiscuous mode
[  450.670081][T13229] veth1_to_bridge: left promiscuous mode
[  450.676305][T13229] bridge_slave_1: left promiscuous mode
[  450.682174][T13229] veth1_to_bond: left promiscuous mode
[  450.688006][T13229] bond_slave_1: left promiscuous mode
[  450.693687][T13229] veth0_to_team: left promiscuous mode
[  450.699520][T13229] team_slave_0: left promiscuous mode
[  450.705253][T13229] veth1_to_team: left promiscuous mode
[  450.711059][T13229] team_slave_1: left promiscuous mode
[  450.716892][T13229] veth0_to_batadv: left promiscuous mode
[  450.723048][T13229] batadv_slave_0: left promiscuous mode
[  450.729191][T13229] xfrm0: left promiscuous mode
[  450.734288][T13229] veth0_to_hsr: left promiscuous mode
[  450.740368][T13229] veth1_to_hsr: left promiscuous mode
[  450.746441][T13229] hsr0: left promiscuous mode
[  450.751473][T13229] veth1_virt_wifi: left promiscuous mode
[  450.757494][T13229] veth0_virt_wifi: left promiscuous mode
[  450.763454][T13229] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  450.770735][T13229] veth1_macvtap: left promiscuous mode
[  450.776712][T13229] veth0_macvtap: left promiscuous mode
[  450.782413][T13229] macsec0: left promiscuous mode
[  450.787786][T13229] geneve0: left promiscuous mode
[  450.792954][T13229] geneve1: left promiscuous mode
[  450.805774][T13229] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  450.816125][T13229] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  450.823671][T13229] hsr1: left promiscuous mode
[  450.846561][T13229] team1: left promiscuous mode
[  450.876396][T13229] syztnl2: left promiscuous mode
[  450.899961][T13229] mac80211_hwsim hwsim13 wlan2: left promiscuous mode
[  450.929543][T13229] mac80211_hwsim hwsim14 wlan3: left promiscuous mode
[  450.975733][T13229] bridge1: left promiscuous mode
[  451.013394][T13229] vxlan0: left promiscuous mode
[  451.019555][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'.
[  451.047824][T13229] batadv1: left promiscuous mode
[  451.066158][T13229] bond1: left promiscuous mode
[  451.093551][T13229] veth2: left promiscuous mode
[  451.116150][T13229] veth3: left promiscuous mode
[  451.137094][T13229] vlan2: left promiscuous mode
[  451.142384][T13229] macvlan2: left promiscuous mode
[  451.158557][T13229] ip6gretap1: left promiscuous mode
[  451.169909][T13229] dvmrp1: left promiscuous mode
[  451.180052][T13229] vlan3: left promiscuous mode
[  451.190624][T13229] batadv0: left promiscuous mode
[  451.206575][T13229] bridge0: left promiscuous mode
[  451.211983][T13229] syztnl1: left promiscuous mode
[  451.236114][T13229] bond2: left promiscuous mode
[  451.241211][T13229] bond3: left promiscuous mode
[  451.266761][T13229] syztnl0: left promiscuous mode
[  451.271984][T13229] geneve2: left promiscuous mode
[  451.277731][T13229] batadv2: left promiscuous mode
[  451.282906][T13229] bond4: left promiscuous mode
[  451.288015][T13229] bond5: left promiscuous mode
[  451.294828][T13229] bridge2: left promiscuous mode
[  451.311873][T13229] bridge2: left allmulticast mode
[  451.407838][T13246] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  451.466593][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  451.511246][T13215] 8021q: adding VLAN 0 to HW filter on device bond5
[  451.536860][T13254] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  451.662149][T13257] syz.1.1901: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  451.687095][T13257] CPU: 1 UID: 0 PID: 13257 Comm: syz.1.1901 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  451.687125][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.687139][T13257] Call Trace:
[  451.687148][T13257]  <TASK>
[  451.687159][T13257]  dump_stack_lvl+0x189/0x250
[  451.687201][T13257]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.687234][T13257]  ? __pfx__printk+0x10/0x10
[  451.687257][T13257]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  451.687282][T13257]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  451.687309][T13257]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  451.687337][T13257]  warn_alloc+0x214/0x310
[  451.687370][T13257]  ? __pfx___schedule+0x10/0x10
[  451.687398][T13257]  ? __pfx_warn_alloc+0x10/0x10
[  451.687431][T13257]  ? kasan_save_track+0x4f/0x80
[  451.687456][T13257]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  451.687484][T13257]  ? xskq_create+0x56/0x170
[  451.687507][T13257]  ? __x64_sys_setsockopt+0x18b/0x220
[  451.687536][T13257]  ? do_syscall_64+0xf6/0x210
[  451.687559][T13257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.687594][T13257]  __vmalloc_node_range_noprof+0x125/0x12c0
[  451.687666][T13257]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  451.687711][T13257]  ? __kasan_kmalloc+0x93/0xb0
[  451.687748][T13257]  vmalloc_user_noprof+0x74/0x80
[  451.687781][T13257]  ? xskq_create+0xbf/0x170
[  451.687803][T13257]  xskq_create+0xbf/0x170
[  451.687830][T13257]  xsk_init_queue+0xb0/0x110
[  451.687855][T13257]  xsk_setsockopt+0x43f/0x710
[  451.687881][T13257]  ? __pfx_xsk_setsockopt+0x10/0x10
[  451.687916][T13257]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  451.687942][T13257]  ? __pfx_xsk_setsockopt+0x10/0x10
[  451.687966][T13257]  do_sock_setsockopt+0x257/0x3e0
[  451.688001][T13257]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  451.688030][T13257]  ? __fget_files+0x2a/0x420
[  451.688067][T13257]  ? __fget_files+0x3a0/0x420
[  451.688095][T13257]  ? __fget_files+0x2a/0x420
[  451.688137][T13257]  __x64_sys_setsockopt+0x18b/0x220
[  451.688177][T13257]  do_syscall_64+0xf6/0x210
[  451.688205][T13257]  ? clear_bhb_loop+0x60/0xb0
[  451.688232][T13257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.688253][T13257] RIP: 0033:0x7f1f9118e969
[  451.688274][T13257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.688293][T13257] RSP: 002b:00007f1f91f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  451.688315][T13257] RAX: ffffffffffffffda RBX: 00007f1f913b5fa0 RCX: 00007f1f9118e969
[  451.688331][T13257] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  451.688344][T13257] RBP: 00007f1f91210ab1 R08: 0000000000000004 R09: 0000000000000000
[  451.688357][T13257] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.688370][T13257] R13: 0000000000000000 R14: 00007f1f913b5fa0 R15: 00007fff06c9b428
[  451.688407][T13257]  </TASK>
[  451.688416][T13257] Mem-Info:
[  451.986441][T13257] active_anon:11380 inactive_anon:0 isolated_anon:0
[  451.986441][T13257]  active_file:1412 inactive_file:39969 isolated_file:0
[  451.986441][T13257]  unevictable:768 dirty:564 writeback:0
[  451.986441][T13257]  slab_reclaimable:11018 slab_unreclaimable:124375
[  451.986441][T13257]  mapped:30388 shmem:1635 pagetables:752
[  451.986441][T13257]  sec_pagetables:0 bounce:0
[  451.986441][T13257]  kernel_misc_reclaimable:0
[  451.986441][T13257]  free:1303217 free_pcp:6888 free_cma:0
[  452.040733][T13257] Node 0 active_anon:45520kB inactive_anon:0kB active_file:5648kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121552kB dirty:2252kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12716kB pagetables:3008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.072808][T13260] 8021q: adding VLAN 0 to HW filter on device team0
[  452.095549][T13257] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.128767][T13260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  452.196170][T13257] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  452.239554][T13257] lowmem_reserve[]: 0 2503 2503 2503 2503
[  452.245777][T13257] Node 0 DMA32 free:1285896kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:44612kB inactive_anon:0kB active_file:5648kB inactive_file:159580kB unevictable:1536kB writepending:2252kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:28476kB local_pcp:13820kB free_cma:0kB
[  452.270880][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  452.301316][T13257] lowmem_reserve[]: 0 0 0 0 0
[  452.307074][T13257] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  452.369739][T13257] lowmem_reserve[]: 0 0 0 0 0
[  452.376122][T13257] Node 1 Normal free:3911484kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  452.428813][T13257] lowmem_reserve[]: 0 0 0 0 0
[  452.433636][T13257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  452.448425][T13257] Node 0 DMA32: 278*4kB (UM) 786*8kB (UME) 284*16kB (UME) 310*32kB (UME) 416*64kB (UME) 331*128kB (UME) 194*256kB (UME) 79*512kB (UM) 47*1024kB (UME) 10*2048kB (UME) 253*4096kB (UM) = 1285864kB
[  452.457590][T13254] lo speed is unknown, defaulting to 1000
[  452.475273][T13273] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.482229][T13257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  452.496561][T13257] Node 1 Normal: 181*4kB (UME) 57*8kB (UME) 40*16kB (UME) 213*32kB (UME) 104*64kB (UME) 25*128kB (UME) 15*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3911484kB
[  452.515586][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  452.523275][T13257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.554728][T13272] netlink: 'syz.2.1906': attribute type 10 has an invalid length.
[  452.555448][T13263] lo speed is unknown, defaulting to 1000
[  452.564266][T13272] veth1_macvtap: left promiscuous mode
[  452.578418][T13272] team0: Device veth1_macvtap failed to register rx_handler
[  452.580267][T13257] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  452.631997][T13257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  452.643534][T13257] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  452.653564][T13272] netlink: 'syz.2.1906': attribute type 11 has an invalid length.
[  452.662107][T13272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1906'.
[  452.683019][T13257] 42788 total pagecache pages
[  452.688383][T13257] 0 pages in swap cache
[  452.692576][T13257] Free swap  = 124996kB
[  452.697469][T13257] Total swap = 124996kB
[  452.701661][T13257] 2097051 pages RAM
[  452.706817][T13257] 0 pages HighMem/MovableOnly
[  452.711649][T13257] 424397 pages reserved
[  452.716406][T13257] 0 pages cma reserved
[  452.894453][T13282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  453.374615][T13292] netlink: 'syz.2.1912': attribute type 303 has an invalid length.
[  453.396381][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'.
[  453.546012][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  453.571410][T13299] macsec1: entered promiscuous mode
[  453.582246][T13299] veth0_to_bridge: entered promiscuous mode
[  453.591582][T13299] macsec1: entered allmulticast mode
[  453.597061][T13299] veth0_to_bridge: entered allmulticast mode
[  453.605464][T13299] veth0_to_bridge: left allmulticast mode
[  453.615691][T13299] veth0_to_bridge: left promiscuous mode
[  454.012840][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'.
[  454.040638][T13311] wireguard0: entered promiscuous mode
[  454.049624][T13311] wireguard0: entered allmulticast mode
[  454.585986][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  454.784791][T13345] lo speed is unknown, defaulting to 1000
[  454.921929][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'.
[  454.949821][T13338] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  455.251561][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'.
[  455.397955][T13362] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  455.626056][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  456.119093][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'.
[  456.494120][T13379] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.567307][T13382] bond7: (slave veth0_to_bond): Releasing active interface
[  456.585210][T13391] netlink: 'syz.2.1937': attribute type 1 has an invalid length.
[  456.637165][T13393] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1937'.
[  456.666080][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  456.748302][T13391] bond5: entered promiscuous mode
[  456.753868][T13391] 8021q: adding VLAN 0 to HW filter on device bond5
[  456.798114][T13391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1937'.
[  456.884383][T13393] batadv3: entered promiscuous mode
[  456.890388][T13393] batadv3: entered allmulticast mode
[  456.899109][T13393] 8021q: adding VLAN 0 to HW filter on device batadv3
[  456.908628][T13393] bond5: (slave batadv3): making interface the new active one
[  456.917951][T13393] bond5: (slave batadv3): Enslaving as an active interface with an up link
[  457.090706][T13408] netlink: 'syz.3.1938': attribute type 1 has an invalid length.
[  457.186530][T13408] bond7: entered promiscuous mode
[  457.192388][T13408] 8021q: adding VLAN 0 to HW filter on device bond7
[  457.528887][T13426] macsec1: entered promiscuous mode
[  457.576225][T13429] xt_CT: You must specify a L4 protocol and not use inversions on it
[  457.706016][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  458.083357][T13434] lo speed is unknown, defaulting to 1000
[  458.145542][T13435] wireguard0: entered promiscuous mode
[  458.176519][T13435] wireguard0: entered allmulticast mode
[  458.402266][T13441] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  458.425349][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'.
[  458.478619][T13443] lo speed is unknown, defaulting to 1000
[  458.745983][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  459.786153][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  459.888207][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'.
[  460.055537][T13464] lo speed is unknown, defaulting to 1000
[  460.213389][T13470] lo speed is unknown, defaulting to 1000
[  460.427761][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'.
[  460.596857][T13474] 8021q: adding VLAN 0 to HW filter on device bond6
[  460.721852][T13476] 8021q: adding VLAN 0 to HW filter on device bond6
[  460.729452][T13476] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  460.741674][T13476] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  460.826004][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  460.895367][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1951'.
[  461.263023][T13494] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  461.545424][T13494] lo speed is unknown, defaulting to 1000
[  461.835057][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'.
[  461.866040][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  462.863081][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'.
[  462.906146][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  462.950044][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1963'.
[  462.980371][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1963'.
[  463.017902][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'.
[  463.046995][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1963'.
[  463.089937][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1963'.
[  463.096843][T13522] bond5: (slave batadv3): Releasing active interface
[  463.306959][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  463.357768][T13530] bond5: left promiscuous mode
[  463.364894][T13530] batadv3: left promiscuous mode
[  463.370563][T13530] batadv3: left allmulticast mode
[  463.392166][T13514] lo speed is unknown, defaulting to 1000
[  463.946090][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  464.017634][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'.
[  464.036912][T13546] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  464.582660][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'.
[  464.588328][T13562] macsec1: entered promiscuous mode
[  464.606166][T13562] veth0_to_bridge: entered promiscuous mode
[  464.613375][T13562] macsec1: entered allmulticast mode
[  464.626319][T13562] veth0_to_bridge: entered allmulticast mode
[  464.659213][T13562] veth0_to_bridge: left allmulticast mode
[  464.709393][T13562] veth0_to_bridge: left promiscuous mode
[  464.894550][T13576] netlink: 'syz.2.1980': attribute type 10 has an invalid length.
[  464.913406][T13576] team0: Port device syz_tun added
[  464.942680][T13571] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.986001][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  465.006908][T13564] team0: Port device bridge2 removed
[  465.022652][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  465.414795][T13592] dvmrp8: left allmulticast mode
[  465.639533][T13595] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  465.819951][T13608] macsec1: entered promiscuous mode
[  465.825241][T13608] veth0_to_bridge: entered promiscuous mode
[  465.832001][T13608] macsec1: entered allmulticast mode
[  465.841873][T13608] veth0_to_bridge: entered allmulticast mode
[  466.036040][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  466.329188][T13608] veth0_to_bridge: left allmulticast mode
[  466.335007][T13608] veth0_to_bridge: left promiscuous mode
[  466.533607][T13623] team0: Port device syz_tun removed
[  466.544650][T13623] 8021q: adding VLAN 0 to HW filter on device team0
[  466.569724][T13623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.662653][T13623] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  466.985633][T13626] lo speed is unknown, defaulting to 1000
[  467.066034][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  467.114298][T13638] __nla_validate_parse: 5 callbacks suppressed
[  467.114318][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'.
[  467.321274][T13644] IPv6: Can't replace route, no match found
[  467.505102][T13645] netlink: 550 bytes leftover after parsing attributes in process `syz.1.2001'.
[  468.063858][T13655] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.073440][T13655] 8021q: adding VLAN 0 to HW filter on device team0
[  468.106030][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  468.190543][T13655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.329518][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'.
[  468.977994][T13675] lo speed is unknown, defaulting to 1000
[  469.145961][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  469.259188][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  469.371489][T13682] lo speed is unknown, defaulting to 1000
[  469.920487][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  470.186032][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  470.312887][T13718] netlink: 550 bytes leftover after parsing attributes in process `syz.2.2022'.
[  470.422402][T13722] lo speed is unknown, defaulting to 1000
[  470.559410][T13722] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2023'.
[  470.664723][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2023'.
[  471.075257][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'.
[  471.226011][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  471.483173][T13757] netlink: 'syz.2.2036': attribute type 10 has an invalid length.
[  471.529617][T13743] macsec1: entered promiscuous mode
[  471.556033][T13743] veth0_to_bridge: entered promiscuous mode
[  471.599823][T13759] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2037'.
[  471.610106][T13743] macsec1: entered allmulticast mode
[  471.656706][T13743] veth0_to_bridge: entered allmulticast mode
[  471.743916][T13743] veth0_to_bridge: left allmulticast mode
[  471.751476][T13743] veth0_to_bridge: left promiscuous mode
[  471.871520][T13742] lo speed is unknown, defaulting to 1000
[  472.137950][T13776] __nla_validate_parse: 2 callbacks suppressed
[  472.137972][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2045'.
[  472.266015][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  472.275159][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2048'.
[  472.321305][T13774] lo speed is unknown, defaulting to 1000
[  472.386942][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2047'.
[  472.598783][T13791] lo speed is unknown, defaulting to 1000
[  472.725729][T13742] geneve0: entered promiscuous mode
[  472.737627][T13742] geneve0: entered allmulticast mode
[  472.772489][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'.
[  472.783816][T13793] lo speed is unknown, defaulting to 1000
[  473.058022][T13809] netlink: 'syz.2.2053': attribute type 9 has an invalid length.
[  473.066794][T13809] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.2053'.
[  473.305982][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  473.330142][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'.
[  474.171985][T13841] macsec1: entered promiscuous mode
[  474.213514][T13841] veth0_to_bridge: entered promiscuous mode
[  474.234823][T13841] macsec1: entered allmulticast mode
[  474.240568][T13841] veth0_to_bridge: entered allmulticast mode
[  474.260514][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'.
[  474.280625][T13841] veth0_to_bridge: left allmulticast mode
[  474.326572][T13841] veth0_to_bridge: left promiscuous mode
[  474.346104][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  474.702775][T13856] netlink: 'syz.2.2069': attribute type 9 has an invalid length.
[  474.710815][T13856] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.2069'.
[  474.753108][T13857] netlink: 'syz.1.2068': attribute type 1 has an invalid length.
[  474.818650][T13857] bond4: entered promiscuous mode
[  474.824181][T13857] 8021q: adding VLAN 0 to HW filter on device bond4
[  474.963951][T13857] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2068'.
[  475.095025][T13865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2068'.
[  475.230438][T13857] batadv1: entered promiscuous mode
[  475.246761][T13857] batadv1: entered allmulticast mode
[  475.253990][T13857] 8021q: adding VLAN 0 to HW filter on device batadv1
[  475.263874][T13857] bond4: (slave batadv1): making interface the new active one
[  475.276494][T13857] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  475.396119][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  475.856823][T13880] netlink: 'syz.2.2077': attribute type 9 has an invalid length.
[  476.134225][T13888] xt_l2tp: v2 sid > 0xffff: 262144
[  476.425994][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  476.471452][T13885] macsec1: entered promiscuous mode
[  476.486105][T13885] veth0_to_bridge: entered promiscuous mode
[  476.507481][T13885] macsec1: entered allmulticast mode
[  476.536237][T13885] veth0_to_bridge: entered allmulticast mode
[  476.587993][T13885] veth0_to_bridge: left allmulticast mode
[  476.613447][T13885] veth0_to_bridge: left promiscuous mode
[  477.035015][T13912] lo speed is unknown, defaulting to 1000
[  477.236937][T13921] __nla_validate_parse: 2 callbacks suppressed
[  477.236959][T13921] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2090'.
[  477.286227][T13921] netlink: zone id is out of range
[  477.327003][T13921] netlink: zone id is out of range
[  477.354544][T13921] netlink: zone id is out of range
[  477.363473][T13921] netlink: zone id is out of range
[  477.374268][T13921] netlink: zone id is out of range
[  477.390067][T13921] netlink: zone id is out of range
[  477.401313][T13921] netlink: zone id is out of range
[  477.631964][T13925] lo speed is unknown, defaulting to 1000
[  477.924845][T13932] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  478.207107][T13932] lo speed is unknown, defaulting to 1000
[  478.514150][T13930] lo speed is unknown, defaulting to 1000
[  478.795698][T13949] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.253895][T13962] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  479.445162][T13967] lo speed is unknown, defaulting to 1000
[  479.546151][    C1] net_ratelimit: 4061 callbacks suppressed
[  479.546172][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  479.585217][T13981] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2111'.
[  479.682711][T13969] lo speed is unknown, defaulting to 1000
[  480.586021][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  480.668301][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'.
[  480.782507][T14013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2118'.
[  480.845783][T13999] lo speed is unknown, defaulting to 1000
[  480.866214][T14013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2118'.
[  481.425543][T14035] lo speed is unknown, defaulting to 1000
[  481.636063][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  482.401087][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2114'.
[  482.666085][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  482.695560][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  482.878803][T14000] 8021q: adding VLAN 0 to HW filter on device bond9
[  482.968648][T14075] bond4: (slave batadv1): Releasing active interface
[  483.107508][T14068] lo speed is unknown, defaulting to 1000
[  483.545031][T14088] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  483.632379][T14094] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  483.706370][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  484.074779][T14094] lo speed is unknown, defaulting to 1000
[  484.147176][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'.
[  484.257552][T14093] lo speed is unknown, defaulting to 1000
[  484.408619][T14088] lo speed is unknown, defaulting to 1000
[  484.459143][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  484.708406][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'.
[  484.745975][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  484.939069][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'.
[  485.350327][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'.
[  485.622777][T14163] macsec1: entered promiscuous mode
[  485.628285][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  485.634897][T14163] veth0_to_bridge: entered promiscuous mode
[  485.641367][T14163] macsec1: entered allmulticast mode
[  485.649039][T14168] netlink: 'syz.0.2169': attribute type 9 has an invalid length.
[  485.661686][T14168] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.2169'.
[  485.676111][T14163] veth0_to_bridge: entered allmulticast mode
[  485.690153][T14163] veth0_to_bridge: left allmulticast mode
[  485.703456][T14163] veth0_to_bridge: left promiscuous mode
[  485.785981][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  486.072463][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'.
[  486.274661][T14183] bond7: left promiscuous mode
[  486.504627][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'.
[  486.776588][T14205] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  486.826167][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  487.102225][T14192] bond4: left promiscuous mode
[  487.135638][T14192] batadv1: left promiscuous mode
[  487.147278][T14192] batadv1: left allmulticast mode
[  487.315206][T14205] lo speed is unknown, defaulting to 1000
[  487.415215][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'.
[  487.425082][T14208] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  487.449550][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  487.486571][T14198] lo speed is unknown, defaulting to 1000
[  487.865981][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  488.092421][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'.
[  488.183388][T14236] macsec1: entered promiscuous mode
[  488.188979][T14236] veth0_to_bridge: entered promiscuous mode
[  488.195333][T14236] macsec1: entered allmulticast mode
[  488.202269][T14236] veth0_to_bridge: entered allmulticast mode
[  488.213323][T14236] veth0_to_bridge: left allmulticast mode
[  488.219735][T14236] veth0_to_bridge: left promiscuous mode
[  488.481399][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'.
[  488.669488][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'.
[  488.905977][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  489.519170][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'.
[  489.805740][T14298] lo speed is unknown, defaulting to 1000
[  489.871519][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2223'.
[  489.925317][T14301] lo speed is unknown, defaulting to 1000
[  489.946161][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  490.096551][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'.
[  490.229281][T14313] IPVS: Scheduler module ip_vs_sip not found
[  490.265292][T14319] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.867219][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2228'.
[  490.986051][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  491.317999][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'.
[  491.318106][T14347] Cannot find add_set index 0 as target
[  492.026211][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  493.066017][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  493.332233][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'.
[  494.106060][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  494.182469][T14413] macsec1: entered promiscuous mode
[  494.258374][T14413] veth0_to_bridge: entered promiscuous mode
[  494.292852][T14413] macsec1: entered allmulticast mode
[  494.339674][T14413] veth0_to_bridge: entered allmulticast mode
[  494.427481][T14413] veth0_to_bridge: left allmulticast mode
[  494.447090][T14413] veth0_to_bridge: left promiscuous mode
[  494.610021][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'.
[  494.638510][T14406] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  494.677873][T14414] smc: net device bond0 applied user defined pnetid SYZ0
[  494.728764][T14418] smc: net device bond0 erased user defined pnetid SYZ0
[  494.748992][T14408] lo speed is unknown, defaulting to 1000
[  495.146022][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  495.316854][T14428] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  495.621058][T14382] Set syz1 is full, maxelem 65536 reached
[  495.659332][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2265'.
[  495.717598][T14428] lo speed is unknown, defaulting to 1000
[  495.767076][T14441] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2267'.
[  495.777421][T14441] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  495.786259][T14441] openvswitch: netlink: Message has 13 unknown bytes.
[  496.185965][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  496.259870][T14455] tipc: Enabled bearer <eth:caif0>, priority 10
[  496.531408][T14460] lo speed is unknown, defaulting to 1000
[  496.587576][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'.
[  496.745040][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'.
[  496.745646][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'.
[  496.822489][T14482] bond0: option mode: unable to set because the bond device is up
[  497.148440][T14496] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2291'.
[  497.179590][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'.
[  497.236022][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  497.283712][T14498] lo speed is unknown, defaulting to 1000
[  497.315508][T14501] smc: net device bond0 applied user defined pnetid SYZ0
[  497.323947][T14501] smc: net device bond0 erased user defined pnetid SYZ0
[  497.501269][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.542535][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.655383][T14510] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  498.265976][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  498.391103][T14522] xt_CT: No such helper "snmp"
[  498.640705][T14533] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  498.745986][T14537] netlink: 'syz.0.2305': attribute type 9 has an invalid length.
[  498.768808][T14537] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.2305'.
[  499.306890][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  500.350624][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  501.412577][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  502.374050][T14507] Set syz1 is full, maxelem 65536 reached
[  502.435965][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  502.669050][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'.
[  503.466116][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  503.856062][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2321'.
[  503.880953][T14584] macsec1: entered promiscuous mode
[  503.891286][T14584] veth0_to_bridge: entered promiscuous mode
[  503.907321][T14584] macsec1: entered allmulticast mode
[  503.929947][T14584] veth0_to_bridge: entered allmulticast mode
[  503.950470][T14584] veth0_to_bridge: left allmulticast mode
[  503.961390][T14584] veth0_to_bridge: left promiscuous mode
[  503.970871][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2326'.
[  504.230766][T14602] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2328'.
[  504.323674][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'.
[  504.506064][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  504.794368][T14626] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  504.845159][T14626] lo speed is unknown, defaulting to 1000
[  504.923177][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'.
[  505.164971][T14640] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  505.251105][T14643] lo speed is unknown, defaulting to 1000
[  505.545972][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  505.844936][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'.
[  505.990633][T14664] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.542234][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  506.585966][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  506.755420][T14701] macsec1: entered promiscuous mode
[  506.765156][T14701] veth0_to_bridge: entered promiscuous mode
[  506.771492][T14701] macsec1: entered allmulticast mode
[  506.779356][T14701] veth0_to_bridge: entered allmulticast mode
[  506.840114][T14701] veth0_to_bridge: left allmulticast mode
[  506.861440][T14701] veth0_to_bridge: left promiscuous mode
[  506.917344][T14699] netlink: 'syz.3.2366': attribute type 12 has an invalid length.
[  506.937464][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2366'.
[  507.106092][T14717] netlink: 'syz.2.2375': attribute type 10 has an invalid length.
[  507.115254][T14717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2375'.
[  507.146960][T14717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.155681][T14717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.164207][T14717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.172801][T14717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.186469][T14717] team0: Port device geneve0 added
[  507.243884][T14720] macsec1: entered promiscuous mode
[  507.252802][T14720] veth0_to_bridge: entered promiscuous mode
[  507.317835][T14720] macsec1: entered allmulticast mode
[  507.323430][T14720] veth0_to_bridge: entered allmulticast mode
[  507.340091][T14720] veth0_to_bridge: left allmulticast mode
[  507.346932][T14720] veth0_to_bridge: left promiscuous mode
[  507.631818][T14738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2381'.
[  507.641086][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  507.890460][T14744] netlink: 'syz.1.2384': attribute type 9 has an invalid length.
[  508.675982][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  508.906173][T14765] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.914653][T14765] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.923722][T14765] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.936313][T14765] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.169306][T14780] macsec1: entered promiscuous mode
[  509.174739][T14780] veth0_to_bridge: entered promiscuous mode
[  509.182251][T14780] macsec1: entered allmulticast mode
[  509.187884][T14780] veth0_to_bridge: entered allmulticast mode
[  509.209318][T14780] veth0_to_bridge: left allmulticast mode
[  509.215204][T14780] veth0_to_bridge: left promiscuous mode
[  509.406103][T14787] __nla_validate_parse: 2 callbacks suppressed
[  509.406125][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2399'.
[  509.422498][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'.
[  509.494220][T14789] netlink: 'syz.2.2401': attribute type 12 has an invalid length.
[  509.716067][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  509.990214][T14816] netlink: 'syz.3.2411': attribute type 9 has an invalid length.
[  509.999972][T14816] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.2411'.
[  510.242599][T14824] netlink: 550 bytes leftover after parsing attributes in process `syz.4.2415'.
[  510.354141][T14826] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  510.745972][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  510.826472][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'.
[  511.373286][T14861] macsec1: entered promiscuous mode
[  511.386036][T14861] veth0_to_bridge: entered promiscuous mode
[  511.407304][T14861] macsec1: entered allmulticast mode
[  511.430247][T14861] veth0_to_bridge: entered allmulticast mode
[  511.475057][T14861] veth0_to_bridge: left allmulticast mode
[  511.492705][T14861] veth0_to_bridge: left promiscuous mode
[  511.743014][T14878] netlink: 'syz.0.2437': attribute type 12 has an invalid length.
[  511.785986][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  511.938261][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'.
[  512.002046][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'.
[  512.012893][T14887] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  512.234975][T14899] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  512.284523][T14899] lo speed is unknown, defaulting to 1000
[  512.346757][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  512.460223][T14907] netlink: 'syz.2.2450': attribute type 12 has an invalid length.
[  512.832325][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  513.876044][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  514.916095][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  515.285974][T14925] wg2: entered promiscuous mode
[  515.359307][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'.
[  515.473613][T14932] team0: Port device geneve0 removed
[  515.646154][T14944] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  515.858359][T14944] lo speed is unknown, defaulting to 1000
[  515.946056][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  516.486338][T14965] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  516.683303][T14972] lo speed is unknown, defaulting to 1000
[  516.911616][T14980] netlink: 'syz.2.2479': attribute type 12 has an invalid length.
[  516.985974][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  517.602164][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  517.999647][T15001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2485'.
[  518.035974][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  518.500044][T15015] syzkaller1: entered promiscuous mode
[  518.505753][T15015] syzkaller1: entered allmulticast mode
[  518.885340][T15022] lo speed is unknown, defaulting to 1000
[  518.886713][T15026] syzkaller1: entered promiscuous mode
[  518.935464][T15026] syzkaller1: entered allmulticast mode
[  519.066068][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  519.456702][T15047] vlan3: entered allmulticast mode
[  519.462407][T15047] bridge_slave_0: entered allmulticast mode
[  520.106138][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  520.560113][ T5834]  non-paged memory
[  520.564397][ T5834] list_del corruption, ffff88803293b300->next is LIST_POISON1 (dead000000000100)
[  520.576218][ T5834] ------------[ cut here ]------------
[  520.581751][ T5834] kernel BUG at lib/list_debug.c:58!
[  520.587275][ T5834] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  520.593558][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:4 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  520.605763][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  520.615852][ T5834] Workqueue: hci4 hci_conn_timeout
[  520.620991][ T5834] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  520.628054][ T5834] Code: 60 df c1 8b 48 89 de e8 f0 e3 68 fc 90 0f 0b 4c 89 e7 e8 85 6c 43 fd 48 c7 c7 c0 df c1 8b 48 89 de 4c 89 e2 e8 d3 e3 68 fc 90 <0f> 0b 4c 89 e7 e8 68 6c 43 fd 48 c7 c7 20 e0 c1 8b 48 89 de 4c 89
[  520.647704][ T5834] RSP: 0018:ffffc90004d17a20 EFLAGS: 00010246
[  520.653809][ T5834] RAX: 000000000000004e RBX: ffff88803293b300 RCX: 0df7ee1f9c25a700
[  520.661796][ T5834] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  520.669785][ T5834] RBP: ffffffff8a67cf50 R08: ffffc90004d17707 R09: 1ffff920009a2ee0
[  520.677765][ T5834] R10: dffffc0000000000 R11: fffff520009a2ee1 R12: dead000000000100
[  520.685745][ T5834] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  520.693724][ T5834] FS:  0000000000000000(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000
[  520.702659][ T5834] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  520.709247][ T5834] CR2: 00007f11169b6700 CR3: 0000000062504000 CR4: 00000000003526f0
[  520.717228][ T5834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  520.725230][ T5834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  520.733205][ T5834] Call Trace:
[  520.736488][ T5834]  <TASK>
[  520.739428][ T5834]  hci_cmd_sync_dequeue_once+0x24a/0x370
[  520.745079][ T5834]  hci_cancel_connect_sync+0xc8/0x120
[  520.750471][ T5834]  hci_abort_conn+0x191/0x330
[  520.755170][ T5834]  ? process_scheduled_works+0x9ec/0x17a0
[  520.760903][ T5834]  process_scheduled_works+0xade/0x17a0
[  520.766467][ T5834]  ? __pfx_process_scheduled_works+0x10/0x10
[  520.772460][ T5834]  worker_thread+0x8a0/0xda0
[  520.777066][ T5834]  kthread+0x711/0x8a0
[  520.781152][ T5834]  ? __pfx_worker_thread+0x10/0x10
[  520.786270][ T5834]  ? __pfx_kthread+0x10/0x10
[  520.790956][ T5834]  ? __pfx_kthread+0x10/0x10
[  520.795558][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  520.800766][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.805972][ T5834]  ? __pfx_kthread+0x10/0x10
[  520.810571][ T5834]  ret_from_fork+0x4b/0x80
[  520.815005][ T5834]  ? __pfx_kthread+0x10/0x10
[  520.819607][ T5834]  ret_from_fork_asm+0x1a/0x30
[  520.824385][ T5834]  </TASK>
[  520.827418][ T5834] Modules linked in:
[  520.831991][ T5834] ---[ end trace 0000000000000000 ]---
[  520.838655][ T5834] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  520.842791][T15080] lo speed is unknown, defaulting to 1000
[  520.845922][ T5834] Code: 60 df c1 8b 48 89 de e8 f0 e3 68 fc 90 0f 0b 4c 89 e7 e8 85 6c 43 fd 48 c7 c7 c0 df c1 8b 48 89 de 4c 89 e2 e8 d3 e3 68 fc 90 <0f> 0b 4c 89 e7 e8 68 6c 43 fd 48 c7 c7 20 e0 c1 8b 48 89 de 4c 89
[  520.872355][ T5834] RSP: 0018:ffffc90004d17a20 EFLAGS: 00010246
[  520.876712][T15081] syzkaller1: entered promiscuous mode
[  520.878601][ T5834] RAX: 000000000000004e RBX: ffff88803293b300 RCX: 0df7ee1f9c25a700
[  520.884442][T15081] syzkaller1: entered allmulticast mode
[  520.896000][ T5834] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  520.905766][ T5834] RBP: ffffffff8a67cf50 R08: ffffc90004d17707 R09: 1ffff920009a2ee0
[  520.914130][ T5834] R10: dffffc0000000000 R11: fffff520009a2ee1 R12: dead000000000100
[  520.923840][ T5834] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  520.932029][ T5834] FS:  0000000000000000(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000
[  520.941104][ T5834] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  520.947859][ T5834] CR2: 00007f11169b6700 CR3: 0000000062504000 CR4: 00000000003526f0
[  520.955979][ T5834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  520.964078][ T5834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  520.972224][ T5834] Kernel panic - not syncing: Fatal exception
[  520.978637][ T5834] Kernel Offset: disabled
[  520.982994][ T5834] Rebooting in 86400 seconds..