last executing test programs:

3.314923567s ago: executing program 3 (id=2617):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001d40)="e2", 0x1}], 0x1}, 0x40)
close(r4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x90}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x6, 'dvmrp1\x00', {0x6a9}, 0x6c})

3.082332091s ago: executing program 3 (id=2622):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6", 0x11}], 0x1, 0x0, 0x0, 0xd0}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f0000000180)=[{r1, 0x2}, {r1}], 0x2, 0x7f)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

2.84087478s ago: executing program 1 (id=2627):
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000180)={'a', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16, @ANYBLOB="07020000000000000000010000002c01088044"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
r10 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r11 = getpid()
write$cgroup_pid(r10, &(0x7f0000000180)=r11, 0x12)
write$cgroup_pid(r5, &(0x7f0000000200)=r11, 0x12)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0x4}, {0xffff, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000085}, 0x20040054)

2.821325307s ago: executing program 3 (id=2628):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0x800020000000005)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000140)=0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140), 0x3}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x81)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000002060102000000000000000007000005050004000100000005000100070000000c000780080006000000000005000500020000000900020073797a300000000014000300686173683a69702c706f72742c6970002540e4417c3ba1ee647fc9dab85dacfdc38ddda1b18d9a178fbd869a991db504f9dcfa7d"], 0x58}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="31e49bf163bbb711bb138ad50941b7b1ce0301000000fddbdf2509000000080003001f8855df69b208f7e4c920b054c916e9a854c14d99eaae0552d3e9beab4cf54f25ee277fc7daec94030fd690cb49de7343d894cbc3605dfdf338a926c86cbd8544f5bd0eb083181839ba4da0dac1e34318e77e390d645ea22c53e037e38c583353424ed3c6bb03ddae5421000000000000000000000000000044985c619979679723a4bb249fb279aaf209761bdfd35a9f81118577f85e892174cddfa12a6d99384d82d96515cd548c7aee85593fdf18128c55846f300838d8360000000000000000", @ANYRES32=0x0, @ANYBLOB="ffcfaaec600ac21b70da95e35283610117b0f291e9dd4ce409a0c466c843933a2e2b8d277f86e2ae2d43a6cd8b"], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4)

1.984170817s ago: executing program 1 (id=2634):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000008c0)=[{&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x4, 0x400, 0x800}}], 0x20, 0x4800}], 0x1, 0x5)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x36bc290f}]}, 0x2c}}, 0x8800)

1.79574616s ago: executing program 3 (id=2637):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xba}, 0x8)
sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.795078463s ago: executing program 1 (id=2638):
r0 = socket$inet(0x2, 0x3, 0xa)
getsockopt$sock_buf(r0, 0x1, 0x27, &(0x7f00000002c0)=""/202, &(0x7f0000000040)=0xca)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000009000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x2e, &(0x7f0000000480)=0x7fff, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001980)={0x64, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x64}}, 0x20000010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1ff, 0x9, 0xd, 0x392, 0x4}, &(0x7f0000000040)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x78, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x196}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x31}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x78}}, 0x4000040)
r8 = socket(0x25, 0x5, 0x0)
recvfrom$ax25(r8, 0x0, 0x0, 0x2063, 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040864}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x14, 0x32, 0x400}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.647194065s ago: executing program 4 (id=2641):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000040300800000000000000000090300000000005f5f61"], 0x0, 0x52}, 0x28)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x20, 0x301, 0x70bd25, 0x25dfdbf6, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000804)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)

1.53441413s ago: executing program 1 (id=2644):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000b16ddb0ab11812ca8e22407b30bda31538d091d074746a606573a6ed0e398fdc2b7bfa8b8de0529f462d61aca2b92af1f05f266ed1e373ba9f57449a556b485da2d93ad4e6940ab457a58ba5042d730c58af826fa3b4526988fc016626a1701ca65d14fde9260f4f82fabddbdb02c5582c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$inet(0x2, 0x3, 0x21)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20048004)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r5, 0x0, 0x0)
socket(0x22, 0x2, 0x2)
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000000), 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000005c0), 0x10)
recvmmsg(r6, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x80, 0x0)
ioctl$SIOCGSTAMP(r6, 0x8906, 0x0)

1.438990996s ago: executing program 0 (id=2645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='bond\x00', 0x40003, &(0x7f00000000c0)={@align=0x35d8, {0x800, 0xe39c, 0x9}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)})
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0)

1.339072863s ago: executing program 4 (id=2646):
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x0, 0x3, 0x8]}, &(0x7f00000000c0)=0x44) (async)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x0, 0x3, 0x8]}, &(0x7f00000000c0)=0x44)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000304000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) (async)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60680, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
unshare(0x0) (async)
unshare(0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_netdev_private(r2, 0x8911, &(0x7f0000000180)="85a075f4353a")
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0011fe0a3ccfd56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a37d6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54f19b02"], 0x0) (async)
syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0011fe0a3ccfd56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a37d6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54f19b02"], 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000304fdf7ffff0000000000000000", @ANYRES32, @ANYBLOB="c0080000a04d06002800128009000100766574680000000018010280140001000000", @ANYRES16=r1, @ANYBLOB="7d372e0d7f8163630400"], 0x50}, 0x1, 0xba01, 0x0, 0x40000}, 0x4800)
unshare(0x100)
socket(0x1f, 0x80000, 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xf9, 0x9, 0x25, @mcast1, @mcast1, 0x1, 0x8000, 0x4, 0xfffffffe}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xf9, 0x9, 0x25, @mcast1, @mcast1, 0x1, 0x8000, 0x4, 0xfffffffe}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70fd3a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x24000010)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)

1.338494823s ago: executing program 2 (id=2647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x9, 0x81, 0x17}, 0x6)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0)

1.290132827s ago: executing program 4 (id=2648):
socket$kcm(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00')
socket$pppl2tp(0x18, 0x1, 0x1)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf9d438b8536a2d93ae43402d16aa7b3bdd88734d79507bdb31e6296febfe773f6d2a13fa7713b84a1e71cb94def6dce4d2fb414ccf9608c9efffc82ac4a72947f58caeb040266fe5f6a213b6455af4207a381d1be32ab05f4b2563ab9872bc59d0be4ab0000000000000000", @ANYRES32=0x0, @ANYBLOB="08200400000004001400350076657468315f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdd25060000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x30008010)
socket(0x2, 0x80805, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x396525e7}]}]}]}, 0xd0}}, 0x0)

1.247797534s ago: executing program 2 (id=2649):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x108}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x4000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2", 0x75, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

1.106436777s ago: executing program 0 (id=2650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040)
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @remote, @bcast, @bcast, @default, @netrom, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x40000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000200)=0xe8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0x9, 0xc}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44808}, 0x86)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)={0x1c, 0x33, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x25}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @default, r5})

1.051309234s ago: executing program 2 (id=2651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f00000000c0)=0x6, 0x4)
bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)

968.69352ms ago: executing program 0 (id=2652):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)

906.446459ms ago: executing program 4 (id=2653):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x9, [@union={0x8, 0x4, 0x0, 0x5, 0x1, 0x6, [{0x8, 0x0, 0x4}, {0x10, 0x5, 0x9}, {0x10, 0x0, 0x4}, {0x8, 0x4, 0xbce1}]}, @const={0x6}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0xb, 0x2}, {0x5, 0x1}, {0xd, 0x5}, {0xc, 0x5}, {0x8, 0x2}, {0x3, 0x1}]}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x1000, 0x1}, {0xd, 0x7f}, {0xc, 0x9b}, {0xa}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x2e, 0x5f, 0x5f, 0x30]}}, &(0x7f00000001c0)=""/99, 0xd9, 0x63, 0x1, 0x3, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x3c, 0x200, 0x28031, 0xffffffffffffffff, 0x5, '\x00', r0, r1, 0x3, 0x0, 0x5, 0x6, @value=r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @jmp={0x5, 0x0, 0x3, 0x2, 0x4, 0xc, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0xaff, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x28, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r2, r3, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f00000007c0)=[{0x5, 0x1, 0xf, 0x1}, {0x5, 0x5, 0x1, 0x8}, {0x1, 0x4, 0x6, 0x8}, {0x4, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xf, 0x5}], 0x10, 0xfff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000006100401f00000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b1af8bf00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x0, 0x80000, 0x4)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4000000)

863.569211ms ago: executing program 0 (id=2654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x67f1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20008800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0)

843.441767ms ago: executing program 4 (id=2655):
syz_emit_ethernet(0x12, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@generic={0x802e}}}, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="366e5bb415cdd9fa00"/28], 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x24, r3, 0xf2ba78998b52ca37, 0x70bd2c, 0x25dfdbfa, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xdf}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), 0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x4, 0x7, 0x6, 0x800, 0x200]}, &(0x7f0000000080)=0x54)

766.288939ms ago: executing program 2 (id=2656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x50, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}, @extra_flags={0x8, 0x18, 0x3}]}, 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a000010000000000200012800800010067747000140002800800030055000000080001"], 0x40}}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4097, 0x1001}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1}}], 0x3, 0x20, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = getpid()
r4 = gettid()
r5 = getgid()
sendmsg$netlink(r2, &(0x7f0000000300)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000001440)={0x170, 0x29, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@generic="d45ce0e0579e89da05a96c62aa1331fb3352caa0d5977d6736bbe060293cc8a355942afd1dff4428b8ea972ccfed22a84fd81484a113e909dcbe11014b8922e691", @generic="0c061d17eadf90c54b2737ef64023ab231a12d93b89a1e63f9a0399993e8ecab9fff65b21f6c78ad27fd9a7e661e66a6bd82babaaf718875c65b8bfcd448fae88ad0f58e5194d4e3de520d937908e163bc35caf7a91934e5792dce5d77d8f8c598fc78d4bb17ce2225b31f7fe0f3b66841b193bc126ee834f00c0531142b17ee7843b8134a8adf0df43eda29557593c3c32880d72cb7d0436d9a2003e209a38e1f7f79ae5d3bddee241105ddbcc8d810bd7293f27c491d4dc89436fc781679355863b00744eb2ba55ae0edc967c45a12", @nested={0xc, 0xa2, 0x0, 0x1, [@typed={0x8, 0x13b, 0x0, 0x0, @fd=r0}]}, @generic="c455ceb25cc533c1054421452147bcb5efb3557e35ec51dfbfd1b1342bcd2d6a8e3cdf7a87b4de5b5dab3e5afa2cf87e", @typed={0x7, 0x14a, 0x0, 0x0, @str=' \x01\x00'}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r3}]}, 0x170}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x20, 0x40000040}, 0x4008010)

565.426383ms ago: executing program 1 (id=2657):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200003600008500000083000000bf0900000000000055090100000000009500000000000000181100008cadb516fe74a87e26ecac1a3c0d3bc566554d00000003e2", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10)
bind$tipc(r1, 0x0, 0x0)

536.224602ms ago: executing program 0 (id=2658):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', <r1=>0x0, 0x1, 0x80, 0x2f8a2c38, 0x7fc, {{0x16, 0x4, 0x0, 0x26, 0x58, 0x65, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ssrr={0x89, 0x23, 0xc9, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0x11, [@rand_addr=0x64010100, @empty, @multicast1, @rand_addr=0x64010101, @empty, @broadcast, @rand_addr=0x64010102]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {0xfffe}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x63}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x2f8a2c38, 0x7fc, {{0x16, 0x4, 0x0, 0x26, 0x58, 0x65, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ssrr={0x89, 0x23, 0xc9, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0x11, [@rand_addr=0x64010100, @empty, @multicast1, @rand_addr=0x64010101, @empty, @broadcast, @rand_addr=0x64010102]}]}}}}}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {0xfffe}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x63}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async)

483.11038ms ago: executing program 3 (id=2659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x10000004, 0x6c}, @in6=@remote, {0x200000000, 0x8000, 0x0, 0x0, 0x0, 0x7d48, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

421.92236ms ago: executing program 1 (id=2660):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000680)=""/4096, &(0x7f0000000140)=0x1000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x279e, 0x0, 0x0, 0x0, 0x1ff}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x4, 0x6, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x40001}, @ldst={0x1, 0x2, 0x3, 0x6, 0x2, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000001840)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x1, 0x1, 0x6, 0x7}, {0x4, 0x4, 0x10, 0x5}, {0x2, 0x5, 0xa, 0x2}, {0x3, 0x2, 0x8, 0x4}, {0x5, 0x4, 0x5, 0x2}, {0x4, 0x1, 0x8, 0x1}, {0x5, 0x5, 0x1}], 0x10, 0x4}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000017c0)={@ifindex=r2, 0x37, 0x0, 0x7ff, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001800)={r4, r7, 0x25, 0x10, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r9})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x78, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0x6a}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

412.588276ms ago: executing program 3 (id=2661):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x58e, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf25060000001400020020010000000000000000002e0000040114000300fe88000000000000000000000000010000000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a73685f00"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)

303.315181ms ago: executing program 2 (id=2662):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

298.761414ms ago: executing program 0 (id=2663):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x2}, {0xffe0}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448)
ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
connect$rds(r7, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10)
r8 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r12, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x13, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x2b, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x48040)

199.630299ms ago: executing program 2 (id=2664):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000017140197"], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'bridge_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r13)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=@deltclass={0x1148, 0x29, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x6, 0xc}, {0xfff1, 0xffe0}}, [@c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_HDR={0x1f, 0x3, "26cfba2952b584017068f881cb1bba5248b84d63bc4d389101552d"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0xf}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xf}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x56}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x71}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa2abe31b6889ab11, 0xfff1}}]}}, @c_cbq={{0x8}, {0x1064, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x7, 0x5, 0xe, 0x5, 0x40}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0x3}, 0x9, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x80, 0x23, 0x10001, 0x2, 0x0, 0x7, 0x7, 0x80000001, 0x3, 0x0, 0xa, 0x1, 0x400, 0x2, 0xf, 0x21, 0x71d, 0x6, 0x7, 0x9, 0x8, 0xffffffff, 0x7f, 0x101, 0xd, 0x81, 0x9, 0x9a17, 0xfff, 0x1, 0xfff, 0x283, 0x58, 0x6, 0xfffffffe, 0x7, 0x5, 0x6, 0x200, 0xffffff01, 0x80, 0x6, 0xff, 0x1, 0x87, 0x8, 0x0, 0x5, 0x10001, 0x9, 0x9, 0x6, 0x4, 0x9ad1, 0x5, 0x7fffffff, 0x3, 0xa, 0x7f, 0x7, 0x6, 0x10001, 0x5, 0x7f, 0x6, 0xfffffc01, 0x8, 0x8, 0x3, 0x1, 0x9, 0x8, 0x6, 0x80000000, 0x2, 0xfff, 0x10000, 0x3, 0x19bf668e, 0x9, 0x8, 0x80000000, 0x8000, 0x80000001, 0x2, 0x10000, 0x7ff, 0x81, 0x5, 0x2, 0x1, 0xca, 0x3, 0x7, 0x0, 0x5, 0x8, 0x7fff, 0xc13607f3, 0xfffffffc, 0x0, 0x1, 0x6, 0x8, 0x0, 0x2, 0xffff, 0x79, 0x4, 0x30, 0xfffffffd, 0x0, 0x7, 0x7, 0x48, 0xff, 0x6, 0x7fffffff, 0x7fff, 0x0, 0x6, 0x5, 0x3, 0x80000001, 0x0, 0x1, 0x0, 0x7fffffff, 0x9, 0x7, 0xfffffffe, 0x6, 0x1, 0x4, 0x10000, 0xe, 0x1, 0xaacc, 0x98, 0xfffffff8, 0xc6, 0x3, 0xffffffff, 0x2a15, 0x7f, 0xa, 0x0, 0xbe00, 0x7, 0x1, 0x4, 0xffffffff, 0x5, 0x1, 0x7, 0x7fff, 0x3, 0xff, 0x2, 0x8000, 0x4000, 0x4, 0x80000001, 0x5, 0xf66, 0x7, 0x4, 0x0, 0x6, 0xd, 0x3, 0x9, 0x0, 0x8, 0x80000001, 0x917c, 0xfffffffa, 0x6bc, 0x4, 0x10, 0x5, 0xc, 0x0, 0x4, 0x2, 0x9, 0x7, 0x40, 0x831, 0x4, 0x3, 0x6, 0x2, 0x80000001, 0x407f, 0x9, 0xfffffffe, 0xfffffff7, 0x80000000, 0xe5, 0x5, 0x100, 0x6, 0x4, 0x0, 0x80000000, 0x9, 0x5, 0x8, 0x8, 0x2fc8, 0x0, 0x5, 0x3, 0x8001, 0x1, 0x896, 0x9, 0x7, 0x7fff, 0x4, 0x10, 0x0, 0x23, 0x6, 0x6, 0x9, 0x80, 0x4, 0xec02, 0x3, 0xd39, 0x7fffffff, 0xe70d, 0x2, 0x401, 0x7ff, 0x20000, 0x6, 0x80000000, 0x8, 0x87a, 0x1, 0x1954, 0x58dd, 0xfffffff8, 0x3774, 0x2, 0x7f, 0x2, 0x4, 0x9, 0x7, 0x8, 0x6, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x8, 0x4, 0xbf, 0x3, 0x9, 0x203, 0x2, 0x3, 0xd37, 0x8, 0xb2a, 0x2, 0x1, 0x5, 0x1, 0x11, 0x5, 0x0, 0x5, 0x2, 0xfff, 0x4, 0x8, 0x1410, 0x0, 0x3, 0x5, 0x66, 0x1, 0x8, 0xf57c, 0x9, 0x1, 0x5, 0x4, 0x0, 0x0, 0x1, 0x7f, 0x40, 0x0, 0x402d, 0x9, 0x5, 0x1, 0x2, 0x1, 0x9, 0x0, 0x4, 0x2, 0x1, 0x3ff, 0x7f, 0x0, 0x6, 0xc, 0xfffffffc, 0x10000, 0xffffffe0, 0x45e7, 0x6, 0x4, 0x1, 0x400, 0x4, 0x0, 0x8, 0x8, 0x8000, 0x7fffffff, 0x40, 0x7, 0x81, 0x8f, 0xa, 0x20ed, 0x0, 0xffffffff, 0x9, 0x0, 0x9, 0xfffffff2, 0x8000, 0x7, 0x8, 0x1, 0x3, 0x5, 0xfffffffc, 0x81, 0x8, 0x7fffffff, 0x8, 0x1, 0x0, 0xffffffff, 0x7, 0x9, 0x9, 0x0, 0x80000000, 0xfffffff8, 0x4, 0x4, 0x6, 0x9, 0xffffff7a, 0x6, 0x10001, 0x0, 0xa2, 0x9, 0x0, 0x8d8, 0xf41, 0x6, 0x69a0, 0x4, 0x400, 0x8000, 0xfffffff8, 0x800, 0x5, 0x6, 0xfffffff3, 0x3, 0x8, 0x6bc6f49, 0x1, 0x6, 0x1, 0x1, 0x8, 0x9, 0xfffff000, 0xd137, 0x3, 0x1, 0x7, 0x7626, 0x8, 0x8, 0x7, 0x100, 0x3, 0x0, 0xf, 0x10, 0x4, 0x800, 0x9c, 0x0, 0x8673, 0x6, 0x1e094000, 0x3, 0x9, 0xd, 0x800, 0x5, 0x10, 0x3, 0xc703, 0xf0, 0xb, 0x80, 0x1, 0x2, 0x1, 0xfffffff7, 0x3, 0x6, 0x8001, 0x1, 0x9d, 0x2, 0x2, 0x4, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x0, 0x95, 0x0, 0x9, 0x0, 0x7f, 0xcea5, 0x9, 0x1ff, 0x6, 0xfffff33d, 0x2, 0xfffffff7, 0x34500000, 0x8001, 0x400, 0x1, 0x0, 0xfffffffa, 0x3, 0x1, 0x4, 0x3, 0xff, 0x4, 0xaa09, 0xf083, 0x6, 0x0, 0x3, 0xfffffff7, 0x1ff, 0x6, 0x3, 0x2, 0x4, 0x6, 0xfffffffd, 0x8, 0x7, 0xe, 0xa23, 0x40, 0x8, 0x3, 0x8, 0x7, 0x27, 0x8, 0x1ff, 0x8, 0x8, 0x48c0, 0x3, 0x4, 0x2, 0x7, 0x1, 0x7, 0x81, 0x1, 0x7, 0x401, 0x3, 0x7, 0x80000000, 0x8, 0x9]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5c, 0x5, 0x7, 0x4, 0x25f7, 0x200}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x5, 0x5a, 0x4, 0x1, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x4, 0x80000000, 0x58, 0x2, 0x3, 0xa51, 0x1, 0xdc7, 0x200, 0x9, 0x9, 0x10, 0x0, 0x7f, 0x100, 0x400, 0x1, 0x5, 0x7, 0x6, 0x5, 0x9, 0x3, 0x7, 0x4, 0x1, 0xfffffff8, 0x1, 0x101, 0x7, 0xe, 0x800, 0x6, 0x1, 0x400, 0x81, 0x9, 0x2, 0x8, 0x8, 0xff, 0x7, 0x0, 0xee4f, 0x7ff, 0x0, 0xfff, 0x7fff, 0x80, 0x0, 0xffffffff, 0x5, 0x1, 0x7, 0x6, 0x7, 0x7, 0x80000000, 0x6, 0x4be4, 0x9, 0x4, 0x0, 0x400, 0x55a, 0x88f, 0x7, 0x8c4, 0x10000, 0xfff, 0x6, 0x1ff, 0x9, 0xa, 0xffff, 0xffff, 0x5, 0x0, 0xe1, 0x9, 0x8, 0x1004000, 0xa6b, 0x8c5, 0x8, 0x7b, 0x12, 0x9, 0x9, 0x9, 0x3, 0x7d5, 0x2, 0x1, 0x4, 0x5, 0x5262fc55, 0x8, 0x4c, 0x7, 0x9f3a, 0xfffffffc, 0x2, 0x3, 0x2, 0x3, 0x2, 0x400, 0xd, 0x5, 0x6, 0x55, 0x81, 0x7, 0x80000000, 0x40, 0x1, 0x800, 0x2, 0xffffff7f, 0xff19, 0x223, 0x1, 0x8001, 0x4, 0x9, 0xef, 0x5, 0x200, 0xff, 0x9, 0x800, 0x80, 0x1, 0xffffffff, 0x6, 0x8, 0xc, 0x72d, 0x3, 0x8ed, 0x7fff, 0xf, 0x7, 0x9, 0x40, 0x9, 0xc, 0x2, 0x2, 0x225293c4, 0x4, 0x1ff, 0x2, 0x1, 0x8, 0xc0b5, 0xfff, 0x9, 0x0, 0x0, 0x5032, 0x166b, 0x5, 0x5, 0x4, 0x415e, 0x395, 0x7464, 0xffff8000, 0x3ff, 0x2, 0x0, 0x7, 0x2, 0x4, 0x1ff, 0x5, 0x4, 0x8, 0x6, 0x3, 0x3, 0x1, 0x6, 0x7, 0x800, 0x8000, 0x81, 0x5, 0x8, 0x1, 0x6, 0xf9, 0x400, 0x8, 0xffffffff, 0x2, 0xfc, 0x8, 0x9, 0x8, 0xfffffffb, 0x6, 0x1, 0x4, 0x7, 0x2, 0x3, 0x7e2, 0x8e, 0x6, 0x10001, 0x40, 0x3, 0x80000001, 0x2, 0x2, 0x7, 0x2, 0x9, 0x0, 0x0, 0x4e, 0x8, 0x6, 0x7fff, 0x8, 0xb81, 0x6b8, 0x2, 0x3000, 0x200, 0x8dd, 0x6, 0x2, 0x2, 0x9, 0x4, 0xfff, 0x3, 0x1, 0x7, 0x4, 0xfffff814, 0x4, 0x9, 0xb772, 0x7, 0x898, 0x0, 0x400, 0x10001, 0x2, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xe3, 0x137d762f, 0x2, 0x0, 0x7, 0x5, 0xb, 0xfffffff7, 0x5, 0x5, 0x8, 0x8, 0xfd, 0x200, 0x35ae, 0x100, 0x80000001, 0x2, 0x45d, 0x4b9, 0x3, 0x3ff, 0x1, 0x4, 0xfffffffd, 0x7, 0x7, 0x3, 0x2, 0x0, 0x4, 0x1ff, 0xd, 0x3, 0x610a, 0x7ff, 0x3, 0x100, 0x329, 0x0, 0x1, 0x3, 0x9, 0xe07, 0x8, 0x101, 0x6, 0x80, 0x8000, 0x81, 0x1, 0x58f, 0x0, 0x2, 0x2, 0x5, 0x6, 0x8, 0x76, 0xc181168, 0x0, 0xc20, 0x81, 0x6, 0xc, 0x6, 0x2, 0x3ff, 0xb9, 0xffff, 0x2, 0x8d, 0x1, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x0, 0x4, 0x3, 0x1, 0x8, 0x81, 0x8, 0x8, 0x2, 0xff00000, 0x96, 0x8, 0x1, 0x8, 0x6, 0x6, 0x10, 0x1, 0x200, 0x0, 0x3, 0x6, 0x6, 0x8, 0x8, 0x1, 0x400, 0x8c, 0x9, 0xffffffa5, 0xb1, 0x8795, 0x7, 0x10001, 0xc00, 0xc, 0x3c3ebe78, 0xff7, 0xffffffff, 0x4, 0x9cca, 0x10, 0x7, 0x8, 0x5, 0xfff, 0x5, 0x1, 0x7, 0x166, 0x8, 0xfffffffc, 0x3, 0x4, 0x6, 0x1, 0x9, 0x8, 0x1, 0x3, 0x6, 0x7, 0x6, 0x7, 0x2, 0xffff, 0x1000, 0x3, 0x7, 0x3, 0x6, 0x46, 0x1, 0x8, 0xfffffffe, 0x2902c3da, 0x6, 0x2, 0x4, 0x3, 0x6, 0x1, 0x0, 0x2, 0x3, 0x8, 0x6, 0x6, 0x0, 0x8001, 0x3, 0x7, 0x3, 0x80000000, 0xff, 0x6, 0x4, 0xff, 0x0, 0x7, 0x3, 0x100, 0x7a5, 0x6, 0x8, 0x9, 0x8, 0x1, 0xff, 0xd87, 0x40, 0x1, 0x7fffffff, 0x8000, 0xfffffffb, 0x6, 0x7, 0x8000, 0x8001, 0x4, 0x6, 0x32e, 0x8, 0xff800000, 0x3, 0xff, 0x0, 0x8, 0x40, 0x3, 0xffffffff, 0x5, 0x2, 0x68, 0xa00, 0x10001, 0x7, 0x45, 0x2, 0x7fff, 0x7, 0x5, 0x3, 0x2, 0x401, 0xfffffffb, 0x7, 0xf6f, 0x1, 0xa45e, 0x0, 0x3, 0x1, 0x7, 0xa, 0xc2, 0x7ff, 0x3, 0xfffffff9, 0x1, 0x1, 0xfff, 0x2, 0x10000, 0xb2, 0x401, 0x1b, 0xffff, 0x6, 0x2, 0x6, 0x5, 0x9, 0x10, 0x401, 0x7, 0x2, 0x5]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xfff2}, 0x8, 0x5}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x1148}, 0x1, 0x0, 0x0, 0x80}, 0x804)

0s ago: executing program 4 (id=2665):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080000000", @ANYRES32, @ANYRES32=0x0], 0x50)
r1 = epoll_create1(0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x68000005}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)

kernel console output (not intermixed with test programs):

ss `syz.3.746'.
[  156.384203][ T8978] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  156.553384][ T8979] tipc: Resetting bearer <eth:syzkaller0>
[  156.647186][ T8979] tipc: Disabling bearer <eth:syzkaller0>
[  156.852727][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'.
[  156.866070][ T9015] netem: change failed
[  156.900844][ T9019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  156.968391][ T5834] Bluetooth: hci4: link tx timeout
[  156.974109][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.974429][ T9019] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  156.988243][ T5834] Bluetooth: hci4: link tx timeout
[  156.995534][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.098448][ T9029] netlink: 'syz.3.758': attribute type 9 has an invalid length.
[  157.107351][ T9029] netlink: 'syz.3.758': attribute type 11 has an invalid length.
[  157.140809][ T9029] netlink: 'syz.3.758': attribute type 12 has an invalid length.
[  157.144048][ T9019] bond2: entered promiscuous mode
[  157.152268][ T9029] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.758'.
[  157.164074][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'.
[  157.168746][ T9019] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.442223][ T9051] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  157.479352][ T9051] sctp: [Deprecated]: syz.3.762 (pid 9051) Use of int in max_burst socket option.
[  157.479352][ T9051] Use struct sctp_assoc_value instead
[  157.620414][ T9063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.646168][ T9063] syzkaller0: entered promiscuous mode
[  157.656834][ T9063] syzkaller0: entered allmulticast mode
[  157.672373][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'.
[  157.736871][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[  157.912636][ T9073] tipc: Resetting bearer <eth:syzkaller0>
[  157.942963][ T9080] netlink: 'syz.4.770': attribute type 29 has an invalid length.
[  157.964267][ T9080] netlink: 'syz.4.770': attribute type 29 has an invalid length.
[  158.001202][ T9082] wlan1 speed is unknown, defaulting to 1000
[  158.114524][ T9085] netlink: 'syz.4.771': attribute type 30 has an invalid length.
[  158.255846][ T9085] bond4: option arp_missed_max: invalid value (0)
[  158.279234][ T9085] bond4: option arp_missed_max: allowed values 1 - 255
[  158.306678][ T9085] bond4 (unregistering): Released all slaves
[  158.640068][   T24] tipc: Node number set to 2529714808
[  158.658501][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'.
[  158.821023][ T9062] tipc: Resetting bearer <eth:syzkaller0>
[  158.905715][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'.
[  158.953562][ T9062] tipc: Disabling bearer <eth:syzkaller0>
[  159.048983][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  159.260174][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'.
[  159.307596][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'.
[  159.325727][ T9135] wlan1 speed is unknown, defaulting to 1000
[  159.474207][ T9151] xt_hashlimit: overflow, rate too high: 0
[  159.570617][ T9143] geneve2: entered promiscuous mode
[  159.575876][ T9143] geneve2: entered allmulticast mode
[  159.938777][ T9179] netlink: 'syz.2.797': attribute type 11 has an invalid length.
[  160.074570][ T9177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.332760][ T9192] bond3: entered allmulticast mode
[  160.351951][ T9177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.384816][ T9196] vlan3: entered promiscuous mode
[  160.391941][ T9196] geneve1: entered promiscuous mode
[  160.397462][ T9196] vlan3: entered allmulticast mode
[  160.404746][ T9196] geneve1: entered allmulticast mode
[  160.494278][ T9208] vlan0: entered promiscuous mode
[  160.499787][ T9208] geneve1: entered promiscuous mode
[  160.505368][ T9208] vlan0: entered allmulticast mode
[  160.515429][ T9208] geneve1: entered allmulticast mode
[  160.562789][ T9177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.604453][ T9203] syzkaller1: entered promiscuous mode
[  160.614018][ T9203] syzkaller1: entered allmulticast mode
[  161.037552][ T9177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.086449][ T9224] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  161.104653][ T9224] bond2 (unregistering): Released all slaves
[  161.133224][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  161.420932][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.442722][ T9241] __nla_validate_parse: 10 callbacks suppressed
[  161.442740][ T9241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.813'.
[  161.467644][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.529665][ T9243] netlink: 1 bytes leftover after parsing attributes in process `syz.1.814'.
[  161.544510][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.556419][ T9243] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.558870][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.568979][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'.
[  161.801146][ T9263] netlink: 'syz.3.820': attribute type 1 has an invalid length.
[  162.061919][ T9283] sctp: [Deprecated]: syz.2.823 (pid 9283) Use of int in max_burst socket option deprecated.
[  162.061919][ T9283] Use struct sctp_assoc_value instead
[  162.421638][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.429413][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.518060][ T9278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.533362][ T9278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.598840][ T9297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.829'.
[  162.611191][ T9278] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  162.630580][ T9286] ip6gre1: entered allmulticast mode
[  162.671828][ T9287] team0 (unregistering): Port device team_slave_0 removed
[  162.711727][ T9287] team0 (unregistering): Port device team_slave_1 removed
[  162.794952][ T1011] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.828580][ T1011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.848415][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.868033][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.893478][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.925543][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.970774][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.991667][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.012689][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'.
[  163.026757][ T9316] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  163.051004][ T9312] netlink: 'syz.3.831': attribute type 30 has an invalid length.
[  163.061332][ T9316] netlink: 'syz.2.833': attribute type 2 has an invalid length.
[  163.078877][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  163.095230][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'.
[  163.108065][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.118737][   T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.127739][ T9312] netlink: 'syz.3.831': attribute type 30 has an invalid length.
[  163.178245][   T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.187063][   T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.318794][ T9323] syzkaller0: entered promiscuous mode
[  163.340594][ T9323] syzkaller0: entered allmulticast mode
[  163.467022][ T9338] netlink: 'syz.3.840': attribute type 11 has an invalid length.
[  166.462601][ T9380] vxcan1: entered promiscuous mode
[  166.471090][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'.
[  166.535781][ T9377] syzkaller0: entered promiscuous mode
[  166.541447][ T9377] syzkaller0: entered allmulticast mode
[  166.880665][ T9408] wlan1 speed is unknown, defaulting to 1000
[  167.567722][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  167.606092][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  167.710124][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.868'.
[  167.786288][ T9446] Cannot find del_set index 1 as target
[  167.810351][ T9447] sctp: [Deprecated]: syz.2.871 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.810351][ T9447] Use struct sctp_sack_info instead
[  167.840299][ T9447] sctp: [Deprecated]: syz.2.871 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.840299][ T9447] Use struct sctp_sack_info instead
[  168.052625][ T9457] x_tables: duplicate underflow at hook 2
[  168.074278][ T9455] bridge4: entered promiscuous mode
[  168.158356][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'.
[  168.167447][ T9462] block nbd0: not configured, cannot reconfigure
[  168.214568][ T9470] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  169.237088][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'.
[  169.296038][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'.
[  169.308780][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  169.333111][ T9515] netlink: 'syz.4.891': attribute type 12 has an invalid length.
[  169.341736][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  169.361916][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  169.384539][ T3437] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.384683][ T9515] netlink: 'syz.4.891': attribute type 12 has an invalid length.
[  169.408329][ T3437] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.441739][ T3437] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.479140][ T3437] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.586784][ T9530] : entered promiscuous mode
[  169.781963][ T9542] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.800962][ T9542] 8021q: adding VLAN 0 to HW filter on device batadv1
[  169.812480][ T9542] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  170.148272][ T9573] netlink: zone id is out of range
[  170.153727][ T9573] netlink: zone id is out of range
[  170.162129][ T9574] batadv_slave_1: entered promiscuous mode
[  170.171882][ T9573] netlink: zone id is out of range
[  170.177031][ T9573] netlink: zone id is out of range
[  170.187278][ T9573] netlink: zone id is out of range
[  170.193403][ T9573] netlink: zone id is out of range
[  170.199016][ T9573] netlink: zone id is out of range
[  170.207009][ T9573] netlink: zone id is out of range
[  170.252350][ T9573] netlink: zone id is out of range
[  170.263625][ T9572] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.412693][ T9590] syzkaller0: entered promiscuous mode
[  170.418891][ T9590] syzkaller0: entered allmulticast mode
[  170.520163][ T9594] netlink: 'syz.4.913': attribute type 10 has an invalid length.
[  170.895058][ T9622] 
: renamed from bond_slave_0 (while UP)
[  170.933126][ T9622] tipc: Started in network mode
[  170.958312][ T9622] tipc: Node identity d20ff1d993d5, cluster identity 4711
[  170.989765][ T9622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.994890][ T9624] xt_CT: No such helper "netbios-ns"
[  171.103341][ T9622] syzkaller0: entered promiscuous mode
[  171.109138][ T9622] syzkaller0: entered allmulticast mode
[  171.115989][ T9622] tipc: Resetting bearer <eth:syzkaller0>
[  171.185934][ T9622] tipc: Resetting bearer <eth:syzkaller0>
[  172.673882][ T9622] tipc: Disabling bearer <eth:syzkaller0>
[  172.682557][ T9634] tc_dump_action: action bad kind
[  172.739458][  T794] tipc: Node number set to 1104867801
[  172.746239][ T9669] netlink: 'syz.3.928': attribute type 3 has an invalid length.
[  172.758516][ T9669] netlink: 'syz.3.928': attribute type 3 has an invalid length.
[  172.830300][ T9679] ip6gretap0: entered promiscuous mode
[  173.132402][ T9696] __nla_validate_parse: 14 callbacks suppressed
[  173.132422][ T9696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.934'.
[  173.522067][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'.
[  174.219551][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'.
[  174.301017][ T9765] net_ratelimit: 136 callbacks suppressed
[  174.301036][ T9765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.423479][ T9769] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.957'.
[  174.621253][ T9778] vlan0: entered promiscuous mode
[  174.694118][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'.
[  174.724082][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'.
[  174.813327][ T9785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.961'.
[  175.222545][   T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.238741][   T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.247003][   T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.287958][   T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.342865][ T9801] sctp: [Deprecated]: syz.4.967 (pid 9801) Use of int in max_burst socket option deprecated.
[  175.342865][ T9801] Use struct sctp_assoc_value instead
[  175.446656][ T9801] wlan1 speed is unknown, defaulting to 1000
[  175.745586][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.968'.
[  175.875391][ T9830] netlink: 'syz.4.972': attribute type 15 has an invalid length.
[  175.901459][ T9834] syzkaller0: entered promiscuous mode
[  175.907026][ T9834] syzkaller0: entered allmulticast mode
[  175.918241][ T9827] wlan1 speed is unknown, defaulting to 1000
[  176.119063][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'.
[  176.128041][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'.
[  176.407876][ T9861] netlink: 'syz.2.984': attribute type 23 has an invalid length.
[  176.898902][ T9879] netlink: 'syz.4.989': attribute type 5 has an invalid length.
[  176.943176][ T9871] ipvlan0: entered promiscuous mode
[  176.952596][ T9871] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  176.961560][ T9871] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  177.079671][ T9887] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.165999][ T9899] netlink: 'syz.1.995': attribute type 28 has an invalid length.
[  177.237934][ T9899] netlink: 'syz.1.995': attribute type 3 has an invalid length.
[  177.693647][ T9927] wlan1 speed is unknown, defaulting to 1000
[  177.939070][ T9950] netlink: 'syz.4.1008': attribute type 13 has an invalid length.
[  178.007705][ T9955] netlink: 'syz.3.1006': attribute type 1 has an invalid length.
[  178.203312][ T9965] __nla_validate_parse: 12 callbacks suppressed
[  178.203329][ T9965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1010'.
[  178.258633][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'.
[  178.342560][ T9968] bridge_slave_1: left allmulticast mode
[  178.362446][ T9968] bridge_slave_1: left promiscuous mode
[  178.401356][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.455529][ T9968] bridge_slave_0: left allmulticast mode
[  178.469371][ T9968] bridge_slave_0: left promiscuous mode
[  178.503974][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.527245][ T9980] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20004
[  178.878583][ T9997] netlink: 'syz.4.1020': attribute type 1 has an invalid length.
[  178.965181][T10001] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  178.969498][T10002] netlink: 'syz.3.1021': attribute type 1 has an invalid length.
[  178.976543][T10001] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  179.005892][ T9990] wlan1 speed is unknown, defaulting to 1000
[  179.021362][ T9997] bond4: (slave gretap1): making interface the new active one
[  179.029971][T10002] x_tables: duplicate underflow at hook 1
[  179.030100][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'.
[  179.051442][ T9997] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  179.105824][T10006] netlink: 616 bytes leftover after parsing attributes in process `syz.1.1022'.
[  179.115372][T10003] netlink: 'syz.3.1021': attribute type 1 has an invalid length.
[  179.267897][T10008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.299743][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1026'.
[  179.356564][T10009] pim6reg: entered allmulticast mode
[  179.462128][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'.
[  179.516114][T10027] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1027'.
[  179.568596][T10027] netlink: 170 bytes leftover after parsing attributes in process `syz.1.1027'.
[  179.824665][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  179.965820][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1031'.
[  179.992388][T10038] pim6reg1: entered promiscuous mode
[  180.001841][T10038] pim6reg1: entered allmulticast mode
[  180.085215][T10056] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  180.131069][T10056] 

: renamed from bond_slave_0
[  180.458452][T10081] xt_TCPMSS: Only works on TCP SYN packets
[  180.942111][T10111] wlan1 speed is unknown, defaulting to 1000
[  180.983703][T10105] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  181.054044][T10121] trusted_key: syz.4.1054 sent an empty control message without MSG_MORE.
[  181.104816][T10122] syzkaller0: entered promiscuous mode
[  181.126470][T10122] syzkaller0: entered allmulticast mode
[  181.439795][T10131] syzkaller1: entered promiscuous mode
[  181.465541][T10131] syzkaller1: entered allmulticast mode
[  182.074723][T10157] bond2: option arp_all_targets: invalid value (129)
[  182.473655][T10157] bond2 (unregistering): Released all slaves
[  182.789940][T10192] wg1 speed is unknown, defaulting to 1000
[  182.799067][T10192] wg1 speed is unknown, defaulting to 1000
[  182.805849][T10192] wg1 speed is unknown, defaulting to 1000
[  182.873129][T10192] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.937781][T10192] wg1 speed is unknown, defaulting to 1000
[  182.967167][T10192] wg1 speed is unknown, defaulting to 1000
[  182.985839][T10192] wg1 speed is unknown, defaulting to 1000
[  183.018628][T10192] wg1 speed is unknown, defaulting to 1000
[  183.042323][T10192] wg1 speed is unknown, defaulting to 1000
[  183.055048][T10211] nbd: illegal input index -1113835520
[  183.212106][T10224] xt_nat: multiple ranges no longer supported
[  183.235366][T10227] __nla_validate_parse: 6 callbacks suppressed
[  183.235384][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'.
[  183.318337][T10232] ip6tnl0: Caught tx_queue_len zero misconfig
[  183.464127][T10242] validate_nla: 4 callbacks suppressed
[  183.464144][T10242] netlink: 'syz.1.1081': attribute type 3 has an invalid length.
[  183.483446][T10242] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1081'.
[  183.573275][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'.
[  183.585306][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'.
[  183.613894][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'.
[  183.852507][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'.
[  184.091581][T10271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1091'.
[  184.247784][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  184.326820][T10278] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1093'.
[  184.348797][T10283] netlink: 'syz.0.1094': attribute type 5 has an invalid length.
[  184.360886][T10278] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1093'.
[  184.371183][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  184.419005][T10283] veth3: entered promiscuous mode
[  184.430462][T10278] netlink: 'syz.4.1093': attribute type 3 has an invalid length.
[  184.500489][T10286] netlink: 'syz.1.1097': attribute type 13 has an invalid length.
[  185.108474][   T29] audit: type=1804 audit(1771502518.791:6): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1105" name="/newroot/204/memory.events" dev="tmpfs" ino=1062 res=1 errno=0
[  185.135045][   T29] audit: type=1800 audit(1771502518.791:7): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="memory.events" dev="tmpfs" ino=1062 res=0 errno=0
[  185.246915][T10311] wlan1 speed is unknown, defaulting to 1000
[  185.254631][T10312] tipc: Invalid UDP bearer configuration
[  185.254680][T10312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  185.281842][T10311] wg1 speed is unknown, defaulting to 1000
[  185.599264][T10317] IPv6: Can't replace route, no match found
[  185.623693][T10318] netlink: 'syz.3.1109': attribute type 19 has an invalid length.
[  186.002133][T10336] 8021q: VLANs not supported on lo
[  186.106695][T10344] veth0_to_bond: Caught tx_queue_len zero misconfig
[  186.172480][T10344] syzkaller0: entered promiscuous mode
[  186.191120][T10344] syzkaller0: entered allmulticast mode
[  186.237695][T10344] tunl0: Caught tx_queue_len zero misconfig
[  186.322788][T10344] tc_dump_action: action bad kind
[  186.809192][ T5822] Bluetooth: hci4: command 0x0406 tx timeout
[  186.917556][T10380] netlink: 'syz.2.1128': attribute type 1 has an invalid length.
[  187.309922][T10395] lo: Caught tx_queue_len zero misconfig
[  187.491849][T10404] syzkaller0: entered promiscuous mode
[  187.507829][T10404] syzkaller0: entered allmulticast mode
[  187.833748][ T1011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.848784][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.873391][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.890559][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.983321][T10432] netlink: 'syz.2.1144': attribute type 10 has an invalid length.
[  188.023792][T10432] syz_tun: entered promiscuous mode
[  188.043476][T10432] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  188.244383][T10441] wlan1 speed is unknown, defaulting to 1000
[  188.346024][T10441] wg1 speed is unknown, defaulting to 1000
[  188.369164][T10445] __nla_validate_parse: 9 callbacks suppressed
[  188.369182][T10445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1147'.
[  188.477661][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'.
[  188.667492][T10452] wlan1 speed is unknown, defaulting to 1000
[  188.686590][T10452] wg1 speed is unknown, defaulting to 1000
[  188.937022][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'.
[  189.009944][T10460] bridge_slave_1: left allmulticast mode
[  189.029177][T10460] bridge_slave_1: left promiscuous mode
[  189.035112][T10460] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.037020][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.052441][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.084078][T10460] bridge_slave_0: left allmulticast mode
[  189.094106][T10460] bridge_slave_0: left promiscuous mode
[  189.111657][T10460] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.222656][T10478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1157'.
[  189.244344][T10478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1157'.
[  189.262563][T10488] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  189.271972][T10478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1157'.
[  189.391940][T10495] netlink: 'syz.2.1160': attribute type 1 has an invalid length.
[  189.432271][T10495] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1160'.
[  189.445607][T10495] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1160'.
[  189.455417][T10495] netlink: 'syz.2.1160': attribute type 1 has an invalid length.
[  189.463379][T10495] netlink: 'syz.2.1160': attribute type 8 has an invalid length.
[  189.472136][T10488] syzkaller0: entered promiscuous mode
[  189.477810][T10488] syzkaller0: entered allmulticast mode
[  189.477847][T10495] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1160'.
[  189.789293][T10522] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  189.819787][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'.
[  189.856024][T10521] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.892097][T10521] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  189.927123][T10521] bond0: (slave gre0): Error -95 calling set_mac_address
[  189.945156][T10522] team0: Port device netdevsim0 added
[  190.011769][T10514] wlan1 speed is unknown, defaulting to 1000
[  190.059710][T10514] wg1 speed is unknown, defaulting to 1000
[  190.327401][T10555] bridge0: entered allmulticast mode
[  191.189137][T10603] netlink: 'syz.0.1181': attribute type 16 has an invalid length.
[  191.197182][T10603] netlink: 'syz.0.1181': attribute type 17 has an invalid length.
[  191.211333][ T5141] Bluetooth: hci1: command 0x0406 tx timeout
[  191.217396][ T5141] Bluetooth: hci3: command 0x0406 tx timeout
[  191.223795][ T5826] Bluetooth: hci0: command 0x0406 tx timeout
[  191.231862][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  191.367393][ T5884] wg1 speed is unknown, defaulting to 1000
[  191.912585][T10627] xt_CONNSECMARK: invalid mode: 253
[  192.328010][T10654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.562899][T10663] openvswitch: netlink: Invalid VLAN frame
[  192.585429][T10665] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0
[  193.146477][T10691] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  193.186439][T10691] bond6 (unregistering): Released all slaves
[  193.281920][T10693] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  193.294453][T10693] bond6 (unregistering): Released all slaves
[  193.451862][T10708] __nla_validate_parse: 8 callbacks suppressed
[  193.451880][T10708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1207'.
[  193.535033][T10715] netlink: 'syz.4.1209': attribute type 39 has an invalid length.
[  193.689240][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'.
[  193.921507][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'.
[  193.943580][T10738] netlink: 'syz.1.1217': attribute type 82 has an invalid length.
[  193.962630][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'.
[  194.349291][T10763] netlink: 'syz.1.1223': attribute type 21 has an invalid length.
[  194.357225][T10763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1223'.
[  194.419403][T10760] nbd0: detected capacity change from 0 to 127
[  194.420043][T10763] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  194.486196][T10777] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1228'.
[  194.548542][T10779] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  194.581173][T10777] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1228'.
[  194.697154][T10788] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  194.779483][T10788] 8021q: adding VLAN 0 to HW filter on device bond6
[  194.816071][T10797] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1232'.
[  195.023715][T10798] netlink: 'syz.4.1234': attribute type 1 has an invalid length.
[  195.031887][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.052322][ T5830] block nbd0: Receive control failed (result -104)
[  195.111952][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'.
[  195.148046][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'.
[  195.432990][T10825] openvswitch: netlink: Message has 16 unknown bytes.
[  195.801437][T10846] syzkaller0: entered promiscuous mode
[  195.807009][T10846] syzkaller0: entered allmulticast mode
[  196.001563][   T29] audit: type=1804 audit(1771502529.691:8): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1251" name="/newroot/265/memory.events" dev="tmpfs" ino=1377 res=1 errno=0
[  196.023932][   T29] audit: type=1800 audit(1771502529.691:9): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1251" name="memory.events" dev="tmpfs" ino=1377 res=0 errno=0
[  196.200136][T10864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.216449][T10864] syzkaller0: entered promiscuous mode
[  196.223473][T10864] syzkaller0: entered allmulticast mode
[  196.486371][T10876] xt_CT: No such helper "netbios-ns"
[  196.877535][T10900] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  196.962973][T10900] bond7: (slave gretap1): making interface the new active one
[  196.971816][T10900] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  197.033898][T10900] vlan1: entered allmulticast mode
[  197.049569][T10900] bond7: entered allmulticast mode
[  197.054750][T10900] gretap1: entered allmulticast mode
[  197.067816][T10900] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  197.102058][T10863] tipc: Resetting bearer <eth:syzkaller0>
[  197.145955][T10863] tipc: Disabling bearer <eth:syzkaller0>
[  197.770024][ T5163] block nbd0: Connection timed out, retrying (0/1 alive)
[  197.777793][ T5163] block nbd0: Connection timed out, retrying (0/1 alive)
[  197.785937][ T5163] block nbd0: Connection timed out, retrying (0/1 alive)
[  197.793453][ T5163] block nbd0: Connection timed out, retrying (0/1 alive)
[  197.800977][ T5163] block nbd0: Dead connection, failed to find a fallback
[  197.809508][ T5163] block nbd0: shutting down sockets
[  197.815045][ T5163] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  197.825805][ T5163] Buffer I/O error on dev nbd0, logical block 3, async page read
[  197.833762][ T5163] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  197.843760][ T5163] Buffer I/O error on dev nbd0, logical block 2, async page read
[  197.854681][ T5163] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  197.867452][ T5163] Buffer I/O error on dev nbd0, logical block 1, async page read
[  197.875402][ T5163] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  197.885048][ T5163] Buffer I/O error on dev nbd0, logical block 0, async page read
[  197.894181][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  197.915956][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[  197.965990][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  198.018904][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.026731][ T5840] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  198.036409][ T5840] Buffer I/O error on dev nbd0, logical block 2, async page read
[  198.044256][ T5840] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  198.056240][ T5840] Buffer I/O error on dev nbd0, logical block 3, async page read
[  198.067026][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  198.080450][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[  198.088846][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  198.141391][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[  198.144067][T10969] netlink: 'syz.3.1283': attribute type 1 has an invalid length.
[  198.161267][ T5840] ldm_validate_partition_table(): Disk read failed.
[  198.206774][ T5840] Dev nbd0: unable to read RDB block 0
[  198.230303][ T5840]  nbd0: unable to read partition table
[  198.246804][T10969] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.283941][ T5840] ldm_validate_partition_table(): Disk read failed.
[  198.310718][T10982] bond2 (unregistering): Released all slaves
[  198.325914][ T5840] Dev nbd0: unable to read RDB block 0
[  198.345064][ T5840]  nbd0: unable to read partition table
[  198.490350][T10982] __nla_validate_parse: 9 callbacks suppressed
[  198.490368][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'.
[  198.614485][T10982] veth1_macvtap: left promiscuous mode
[  198.644751][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1292'.
[  198.662624][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'.
[  198.704450][T11008] netlink: 'syz.2.1293': attribute type 1 has an invalid length.
[  198.792804][T11008] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  198.797855][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1294'.
[  198.997454][T11018] netlink: 'syz.4.1295': attribute type 12 has an invalid length.
[  199.041743][T11018] netlink: 'syz.4.1295': attribute type 29 has an invalid length.
[  199.082386][T11018] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1295'.
[  199.105959][T11022] netlink: 'syz.4.1295': attribute type 12 has an invalid length.
[  199.137644][T11022] netlink: 'syz.4.1295': attribute type 29 has an invalid length.
[  199.188314][T11022] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1295'.
[  199.361870][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'.
[  199.395041][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'.
[  199.454445][T11046] geneve2: entered promiscuous mode
[  199.459979][T11046] geneve2: entered allmulticast mode
[  199.467783][   T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 53441 - 0
[  199.489727][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[  199.528251][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[  199.559220][T11052] validate_nla: 1 callbacks suppressed
[  199.559237][T11052] netlink: 'syz.2.1305': attribute type 4 has an invalid length.
[  199.601457][   T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 53441 - 0
[  199.626633][   T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 53441 - 0
[  199.659807][T11063] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  199.768746][   T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 53441 - 0
[  199.885789][T11079] syzkaller0: entered promiscuous mode
[  199.913722][T11079] syzkaller0: entered allmulticast mode
[  200.148225][T11098] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0
[  200.172093][T11099] Bluetooth: MGMT ver 1.23
[  200.237209][   T29] audit: type=1800 audit(1771502533.921:10): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1318" name="memory.events" dev="tmpfs" ino=1432 res=0 errno=0
[  200.523818][T11115] wlan1 speed is unknown, defaulting to 1000
[  200.581508][T11126] netlink: 'syz.2.1326': attribute type 1 has an invalid length.
[  200.637754][T11126] bond8: entered promiscuous mode
[  200.643562][T11126] 8021q: adding VLAN 0 to HW filter on device bond8
[  200.688152][T11115] wg1 speed is unknown, defaulting to 1000
[  200.990290][T11150] syzkaller0: entered promiscuous mode
[  201.016248][T11150] syzkaller0: entered allmulticast mode
[  201.682109][T11192] pim6reg1: entered promiscuous mode
[  201.692016][T11192] pim6reg1: entered allmulticast mode
[  201.708603][T11193] netlink: 'syz.0.1343': attribute type 1 has an invalid length.
[  202.013700][T11206] bond1: invalid ARP target 0.0.0.0 specified for addition
[  202.021072][T11206] bond1: option arp_ip_target: invalid value (0)
[  202.121108][T11206] bond1 (unregistering): Released all slaves
[  203.034134][T11277] netlink: 'syz.3.1364': attribute type 1 has an invalid length.
[  203.140233][ T5830] block nbd1: Receive control failed (result -32)
[  203.171818][T11279] bond2: (slave bridge1): making interface the new active one
[  203.189192][T11279] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  203.257869][T11277] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  203.276222][T11279] macvlan2: entered promiscuous mode
[  203.282140][T11279] macvlan2: entered allmulticast mode
[  203.288959][T11279] bond2: entered promiscuous mode
[  203.294212][T11279] bridge1: entered promiscuous mode
[  203.302061][T11279] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  203.316970][T11279] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  203.335777][T11279] bond2: left promiscuous mode
[  203.351865][T11279] bridge1: left promiscuous mode
[  203.682469][T11301] __nla_validate_parse: 7 callbacks suppressed
[  203.682487][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1368'.
[  203.836732][T11315] raw_sendmsg: syz.0.1372 forgot to set AF_INET. Fix it!
[  204.492006][T11349] netlink: 'syz.4.1384': attribute type 1 has an invalid length.
[  204.511947][T11349] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1384'.
[  204.530572][T11349] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1384'.
[  205.333686][T11382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1391'.
[  205.866173][T11410] syzkaller0: entered promiscuous mode
[  205.873590][T11410] syzkaller0: entered allmulticast mode
[  206.136526][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'.
[  206.196487][T11423] wlan1 speed is unknown, defaulting to 1000
[  206.222862][T11423] wg1 speed is unknown, defaulting to 1000
[  206.357112][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'.
[  206.586106][T11444] Bluetooth: MGMT ver 1.23
[  206.724104][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'.
[  206.776471][T11457] openvswitch: netlink: Duplicate key (type 21).
[  206.949557][T11465] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  207.409501][T11476] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  207.636716][T11480] syzkaller0: entered promiscuous mode
[  207.650243][T11480] syzkaller0: entered allmulticast mode
[  207.657414][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  208.448485][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  208.502315][T11495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1422'.
[  208.920952][T11500] netlink: 'syz.3.1424': attribute type 2 has an invalid length.
[  209.511228][T11517] can: request_module (can-proto-0) failed.
[  209.765630][T11525] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1431'.
[  209.806986][T11530] wlan1 speed is unknown, defaulting to 1000
[  209.816082][T11531] wlan1 speed is unknown, defaulting to 1000
[  209.823588][T11530] wg1 speed is unknown, defaulting to 1000
[  209.862436][T11531] wg1 speed is unknown, defaulting to 1000
[  210.253305][T11549] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.310574][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.312851][T11551] x_tables: duplicate entry at hook 2
[  210.330364][T11549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.368652][T11549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.392244][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.470951][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  210.508902][T11555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.530907][T11555] syzkaller0: entered promiscuous mode
[  210.539207][T11555] syzkaller0: entered allmulticast mode
[  210.627513][T11555] tipc: Resetting bearer <eth:syzkaller0>
[  210.671879][T11554] tipc: Resetting bearer <eth:syzkaller0>
[  210.711360][T11554] tipc: Disabling bearer <eth:syzkaller0>
[  211.091175][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  211.100233][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'.
[  211.114648][T11589] netlink: 'syz.0.1447': attribute type 18 has an invalid length.
[  211.499037][T11610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1453'.
[  211.555610][T11606] team0 (unregistering): Port device team_slave_0 removed
[  211.645066][T11606] team0 (unregistering): Port device team_slave_1 removed
[  211.686582][T11606] team0 (unregistering): Port device netdevsim0 removed
[  213.447983][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.468980][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.486369][T11662] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  214.131659][ T5830] block nbd2: Receive control failed (result -107)
[  214.306702][T11705] wlan1 speed is unknown, defaulting to 1000
[  214.327507][T11705] wg1 speed is unknown, defaulting to 1000
[  214.900812][T11740] __nla_validate_parse: 8 callbacks suppressed
[  214.900838][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'.
[  215.004365][T11745] netlink: 'syz.4.1491': attribute type 2 has an invalid length.
[  215.012434][T11749] netlink: 'syz.2.1489': attribute type 10 has an invalid length.
[  215.116147][T11758] xt_TCPMSS: Only works on TCP SYN packets
[  215.268541][T11767] sctp: [Deprecated]: syz.1.1495 (pid 11767) Use of int in max_burst socket option.
[  215.268541][T11767] Use struct sctp_assoc_value instead
[  215.416876][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  215.459187][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'.
[  215.482193][T11776] macvtap1: entered promiscuous mode
[  215.487632][T11776] bridge0: entered promiscuous mode
[  215.547365][T11776] macvtap1: entered allmulticast mode
[  215.565962][T11776] bridge0: port 1(macvtap1) entered blocking state
[  215.581737][T11776] bridge0: port 1(macvtap1) entered disabled state
[  215.639216][T11776] bridge0: left promiscuous mode
[  215.764014][T11788] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  215.788921][T11791] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  215.886695][T11794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1501'.
[  215.998486][T11802] dvmrp0: entered allmulticast mode
[  216.043876][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'.
[  216.053061][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'.
[  216.072111][T11812] IPVS: set_ctl: invalid protocol: 158 10.1.1.0:20001
[  216.084918][T11809] gretap0: entered promiscuous mode
[  216.095227][T11809] gretap0: left promiscuous mode
[  218.829965][T11794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  219.032722][T11846] netlink: 'syz.4.1509': attribute type 21 has an invalid length.
[  219.041052][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1512'.
[  219.065111][T11846] IPv6: NLM_F_CREATE should be specified when creating new route
[  219.094840][T11846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.102130][T11846] IPv6: NLM_F_CREATE should be set when creating new route
[  219.109563][T11846] IPv6: NLM_F_CREATE should be set when creating new route
[  219.116919][T11846] IPv6: NLM_F_CREATE should be set when creating new route
[  219.381083][T11880] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.464135][T11889] wlan1 speed is unknown, defaulting to 1000
[  219.481116][T11894] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1519'.
[  219.511635][T11889] wg1 speed is unknown, defaulting to 1000
[  219.740015][T11905] tap0: tun_chr_ioctl cmd 2147767507
[  219.896344][T11913] netlink: 'syz.2.1525': attribute type 16 has an invalid length.
[  219.910701][T11913] netlink: 'syz.2.1525': attribute type 17 has an invalid length.
[  220.051765][T11913] syz_tun: left promiscuous mode
[  220.068297][T11913] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.081589][T11913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.110902][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'.
[  220.217053][T11924] netlink: 'syz.0.1531': attribute type 10 has an invalid length.
[  220.491728][T11942] wlan1 speed is unknown, defaulting to 1000
[  220.510699][T11942] wg1 speed is unknown, defaulting to 1000
[  220.693141][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'.
[  220.847818][T11954] xt_CT: No such helper "snmp_trap"
[  221.078842][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  221.104740][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  221.545516][T11991] xt_bpf: check failed: parse error
[  221.655711][T11993] wlan1 speed is unknown, defaulting to 1000
[  221.664112][T11993] wg1 speed is unknown, defaulting to 1000
[  221.889307][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  221.996118][T12006] team0: Port device erspan0 added
[  222.056393][T12006] team0: Port device erspan0 removed
[  222.103887][T12006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  222.291388][T12024] tipc: Enabled bearer <udp:s>, priority 10
[  222.763366][T12049] netlink: 'syz.3.1568': attribute type 4 has an invalid length.
[  222.842210][T12050] wlan1 speed is unknown, defaulting to 1000
[  222.855978][T12050] wg1 speed is unknown, defaulting to 1000
[  223.162540][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1573'.
[  223.408415][ T7250] tipc: Node number set to 1947550202
[  223.588830][T12100] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1580'.
[  223.704285][T12106] xt_nfacct: accounting object `syz0' does not exist
[  223.892255][T12115] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004
[  223.912764][T12112] syzkaller0: entered promiscuous mode
[  223.920218][T12112] syzkaller0: entered allmulticast mode
[  223.952847][T12118] wlan1 speed is unknown, defaulting to 1000
[  223.962161][T12118] wg1 speed is unknown, defaulting to 1000
[  224.317428][T12136] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1589'.
[  224.808415][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  224.814707][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  226.555610][T12101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  226.676736][T12142] rdma_op ffff888054fb39f0 conn xmit_rdma 0000000000000000
[  226.742506][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'.
[  226.776578][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'.
[  226.777614][T12148] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  226.933268][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'.
[  226.957152][T12162] netem: incorrect ge model size
[  226.979745][T12162] netem: change failed
[  226.996009][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'.
[  227.018042][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'.
[  227.043341][T12162] netlink: 'syz.0.1595': attribute type 6 has an invalid length.
[  227.251472][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  227.286441][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  227.389591][T12174] wlan1 speed is unknown, defaulting to 1000
[  227.396026][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  227.410136][T12174] wg1 speed is unknown, defaulting to 1000
[  227.425061][T12184] wlan1 speed is unknown, defaulting to 1000
[  227.432521][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1598'.
[  227.474155][T12184] wg1 speed is unknown, defaulting to 1000
[  227.489915][T12177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1598'.
[  227.609585][T12191] siw: device registration error -23
[  227.685017][T12186] wlan1 speed is unknown, defaulting to 1000
[  227.695150][T12186] wg1 speed is unknown, defaulting to 1000
[  227.695251][T12194] netlink: 'syz.3.1605': attribute type 4 has an invalid length.
[  228.246595][T12212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.452194][T12212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.564033][T12212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.691001][T12212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.883420][T12247] wlan1 speed is unknown, defaulting to 1000
[  228.895870][T12247] wg1 speed is unknown, defaulting to 1000
[  229.056665][   T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.100465][T12260] Cannot find del_set index 4 as target
[  229.157203][ T1011] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.286841][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.328458][T12265] wlan1 speed is unknown, defaulting to 1000
[  229.334517][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.386792][T12265] wg1 speed is unknown, defaulting to 1000
[  229.572153][T12289] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  229.639745][T12280] ip6gre1: entered allmulticast mode
[  229.732276][T12299] netlink: 'syz.2.1628': attribute type 11 has an invalid length.
[  229.815842][T12290] syzkaller0: entered promiscuous mode
[  229.840838][T12290] syzkaller0: entered allmulticast mode
[  229.951417][T12304] Cannot find del_set index 4 as target
[  229.954536][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  230.115635][T12313] netlink: 'syz.1.1633': attribute type 5 has an invalid length.
[  230.514809][T12319] wlan1 speed is unknown, defaulting to 1000
[  230.520672][T12324] netlink: 'syz.3.1637': attribute type 2 has an invalid length.
[  230.531137][T12319] wg1 speed is unknown, defaulting to 1000
[  230.725905][T12331] wlan1 speed is unknown, defaulting to 1000
[  230.881100][T12331] wg1 speed is unknown, defaulting to 1000
[  230.930193][T12344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  231.371762][T12372] netlink: 'syz.3.1650': attribute type 2 has an invalid length.
[  231.423807][T12365] wlan1 speed is unknown, defaulting to 1000
[  231.456284][T12365] wg1 speed is unknown, defaulting to 1000
[  231.585707][T12373] tipc: Can't bind to reserved service type 0
[  231.608635][T12383] netlink: 'syz.3.1652': attribute type 11 has an invalid length.
[  232.102034][T12411] syzkaller0: entered promiscuous mode
[  232.107544][T12411] syzkaller0: entered allmulticast mode
[  232.244249][T12419] netlink: 'syz.2.1662': attribute type 2 has an invalid length.
[  232.347027][T12423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.355919][T12422] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  232.499794][T12435] __nla_validate_parse: 3 callbacks suppressed
[  232.499812][T12435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'.
[  232.563707][T12423] tipc: Disabling bearer <eth:syzkaller0>
[  232.570966][T12435] nbd: must specify at least one socket
[  232.580608][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'.
[  232.589803][T12429] nbd: must specify a size in bytes for the device
[  232.600484][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'.
[  232.611828][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'.
[  232.809518][T12449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'.
[  232.915270][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'.
[  232.925159][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'.
[  232.945443][T12452] SET target dimension over the limit!
[  232.986246][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  233.204863][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1677'.
[  233.407414][T12481] wlan1 speed is unknown, defaulting to 1000
[  233.423601][T12481] wg1 speed is unknown, defaulting to 1000
[  233.466227][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'.
[  234.870674][T12573] syzkaller0: entered promiscuous mode
[  234.918235][T12573] syzkaller0: entered allmulticast mode
[  234.948020][T12579] netlink: 'syz.4.1699': attribute type 1 has an invalid length.
[  235.122561][T12589] bond6: (slave geneve3): making interface the new active one
[  235.167151][T12589] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  235.224453][   T35] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  235.244045][   T35] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  235.280192][T12579] 8021q: adding VLAN 0 to HW filter on device bond6
[  235.307087][   T35] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  235.326345][   T35] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  235.347616][T12605] syz.3.1705 (12605) used obsolete PPPIOCDETACH ioctl
[  235.444703][T12601] wlan1 speed is unknown, defaulting to 1000
[  235.455107][T12601] wg1 speed is unknown, defaulting to 1000
[  235.814963][T12626] syzkaller1: entered promiscuous mode
[  235.821006][T12626] syzkaller1: entered allmulticast mode
[  235.897888][T12629] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.926847][T12629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.063733][T12639] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20002
[  236.087570][T12629] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.097876][T12629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.145582][T12635] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  236.164411][T12635] bond2 (unregistering): Released all slaves
[  236.286773][T12629] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.356744][T12629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.443454][T12650] erspan1: entered promiscuous mode
[  236.470213][T12650] erspan1: entered allmulticast mode
[  236.500850][T12629] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.538147][T12629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.757566][T12646] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000
[  236.786778][   T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.798431][   T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.806889][   T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.816450][   T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.870124][T12670] bridge3: port 1(ip6gretap1) entered blocking state
[  236.876963][T12670] bridge3: port 1(ip6gretap1) entered disabled state
[  236.886282][T12670] ip6gretap1: entered allmulticast mode
[  236.908603][T12670] ip6gretap1: entered promiscuous mode
[  236.916807][   T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.934919][   T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.966088][   T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.976422][   T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.029698][T12670] bridge3: port 2(veth11) entered blocking state
[  237.036161][T12670] bridge3: port 2(veth11) entered disabled state
[  237.051236][T12670] veth11: entered allmulticast mode
[  237.065552][T12670] veth11: entered promiscuous mode
[  237.076279][T12670] bridge3: port 2(veth11) entered blocking state
[  237.082909][T12670] bridge3: port 2(veth11) entered forwarding state
[  237.553514][   T35] bridge3: port 2(veth11) entered disabled state
[  237.603154][T12714] __nla_validate_parse: 19 callbacks suppressed
[  237.603171][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'.
[  237.864376][T12735] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16)
[  237.874143][T12735] openvswitch: netlink: Message has 8 unknown bytes.
[  237.920929][T12738] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16)
[  237.945878][T12738] openvswitch: netlink: Message has 8 unknown bytes.
[  238.034961][T12744] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) !
[  238.047013][T12737] syzkaller0: entered promiscuous mode
[  238.052621][T12737] syzkaller0: entered allmulticast mode
[  238.134121][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'.
[  238.160416][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'.
[  238.163340][T12743] vlan1: entered promiscuous mode
[  238.174878][T12743] bridge0: entered promiscuous mode
[  238.253837][T12745] syzkaller0: entered promiscuous mode
[  238.274026][T12745] syzkaller0: entered allmulticast mode
[  238.325205][T12755] batman_adv: batadv0: Adding interface: dummy0
[  238.348898][T12755] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.378964][T12755] batman_adv: batadv0: Interface activated: dummy0
[  238.432293][T12766] netlink: 'syz.1.1744': attribute type 1 has an invalid length.
[  238.453457][T12768] netlink: 'syz.2.1742': attribute type 7 has an invalid length.
[  238.454756][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'.
[  238.480621][T12768] netlink: 'syz.2.1742': attribute type 8 has an invalid length.
[  238.638409][T12772] nbd3: detected capacity change from 0 to 127
[  238.649966][ T5830] block nbd3: Receive control failed (result -104)
[  238.725289][T12777] wlan1 speed is unknown, defaulting to 1000
[  238.754754][T12777] wg1 speed is unknown, defaulting to 1000
[  238.877555][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  238.931223][T12779] wlan1 speed is unknown, defaulting to 1000
[  238.953551][T12779] wg1 speed is unknown, defaulting to 1000
[  239.246577][T12795] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  239.285770][T12796] ip6gretap2: entered promiscuous mode
[  239.393669][T12805] nbd: must specify a size in bytes for the device
[  239.412470][T12804] wlan1 speed is unknown, defaulting to 1000
[  239.457007][T12804] wg1 speed is unknown, defaulting to 1000
[  239.670456][T12811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.736828][T12812] netlink: 'syz.4.1755': attribute type 1 has an invalid length.
[  239.760733][T12811] syzkaller0: entered promiscuous mode
[  239.766731][T12811] syzkaller0: entered allmulticast mode
[  239.773794][T12811] tipc: Resetting bearer <eth:syzkaller0>
[  239.826231][T12811] bond7: (slave geneve4): making interface the new active one
[  239.836096][T12811] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  239.847518][ T3437] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20004 - 0
[  239.866997][ T3437] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0
[  239.880009][T12810] tipc: Resetting bearer <eth:syzkaller0>
[  240.214045][T12830] netlink: 'syz.3.1761': attribute type 28 has an invalid length.
[  240.223547][T12830] openvswitch: netlink: Actions may not be safe on all matching packets
[  241.357466][T12810] tipc: Disabling bearer <eth:syzkaller0>
[  241.370492][ T3437] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0
[  241.379976][ T3437] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0
[  241.494534][T12844] openvswitch: netlink: Actions may not be safe on all matching packets
[  241.522634][ T5955] tipc: Node number set to 3421719155
[  241.539370][    T9] wlan1 speed is unknown, defaulting to 1000
[  241.701198][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'.
[  241.782458][T12856] wlan1 speed is unknown, defaulting to 1000
[  241.800404][T12856] wg1 speed is unknown, defaulting to 1000
[  242.196327][T12892] team0: Port device syz_tun added
[  242.792159][T12915] 8021q: VLANs not supported on syzkaller1
[  242.801880][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'.
[  242.810975][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'.
[  244.799583][T12863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.979880][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1785'.
[  245.101721][T12936] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1788'.
[  245.178483][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'.
[  245.322638][T12945] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  245.406699][T12945] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  245.473174][T12941] macvlan2: entered promiscuous mode
[  245.481039][T12941] macvlan2: entered allmulticast mode
[  245.499840][T12941] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  245.600644][T12961] wlan1 speed is unknown, defaulting to 1000
[  245.610433][T12961] wg1 speed is unknown, defaulting to 1000
[  245.687476][   T29] audit: type=1804 audit(1771502579.371:11): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1797" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1719 res=1 errno=0
[  245.732293][   T29] audit: type=1800 audit(1771502579.371:12): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1797" name="cgroup.controllers" dev="tmpfs" ino=1719 res=0 errno=0
[  245.765922][T12967] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  245.988450][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'.
[  246.192105][T12989] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.340194][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'.
[  246.380296][T12989] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.381551][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'.
[  246.447036][T12998] dvmrp1: tun_chr_ioctl cmd 2147767506
[  246.495299][T12989] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.596868][T12989] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.874207][T13007] syzkaller0: entered promiscuous mode
[  246.883705][T13007] syzkaller0: entered allmulticast mode
[  246.893484][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.915563][ T3437] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.939596][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.962617][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.015189][T13018] sctp: [Deprecated]: syz.4.1811 (pid 13018) Use of int in maxseg socket option.
[  247.015189][T13018] Use struct sctp_assoc_value instead
[  247.365756][T13030] 
: entered promiscuous mode
[  247.371014][T13030] bond_slave_1: entered promiscuous mode
[  247.379893][T13030] vlan0: entered promiscuous mode
[  247.385095][T13030] bond0: entered promiscuous mode
[  247.397089][T13030] bond3: entered promiscuous mode
[  247.753884][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1820'.
[  249.183040][T13036] vlan2: entered promiscuous mode
[  249.188509][T13036] vlan2: entered allmulticast mode
[  249.193684][T13036] bridge0: entered allmulticast mode
[  249.342026][T13090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1830'.
[  249.363619][T13090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1830'.
[  249.396912][T13090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1830'.
[  249.408854][T13095] lo speed is unknown, defaulting to 1000
[  249.414665][T13095] lo speed is unknown, defaulting to 1000
[  249.434671][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'.
[  249.443813][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'.
[  249.453395][T13098] openvswitch: netlink: Invalid VLAN frame
[  249.467564][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'.
[  249.476544][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'.
[  249.541616][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'.
[  249.615834][T13095] lo speed is unknown, defaulting to 1000
[  249.684262][T13095] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  249.820147][T13095] lo speed is unknown, defaulting to 1000
[  249.827045][T13095] lo speed is unknown, defaulting to 1000
[  249.842166][T13095] lo speed is unknown, defaulting to 1000
[  249.850690][T13095] lo speed is unknown, defaulting to 1000
[  249.858851][T13095] lo speed is unknown, defaulting to 1000
[  250.114349][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1846'.
[  250.248649][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1847'.
[  250.863909][T13165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.878386][   T29] audit: type=1800 audit(1771502584.571:13): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1848" name="memory.events" dev="tmpfs" ino=2047 res=0 errno=0
[  250.975105][T13169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.185052][T13177] 8021q: adding VLAN 0 to HW filter on device bond10
[  251.344497][T13184] IPv6: NLM_F_CREATE should be specified when creating new route
[  251.352615][T13184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.359898][T13184] IPv6: NLM_F_CREATE should be set when creating new route
[  251.367347][T13184] IPv6: NLM_F_CREATE should be set when creating new route
[  251.374614][T13184] IPv6: NLM_F_CREATE should be set when creating new route
[  251.385781][T13184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.165367][T13192] netlink: 'syz.2.1859': attribute type 13 has an invalid length.
[  252.436640][T13225] netlink: Unknown conntrack attr (0)
[  252.536406][T13186] Cannot find add_set index 2 as target
[  252.720896][T13234] netlink: 'syz.4.1870': attribute type 1 has an invalid length.
[  252.987268][T13258] bond0: (slave rose0): Error: Device can not be enslaved while up
[  254.176626][T13140] Set syz1 is full, maxelem 65536 reached
[  255.039028][T13275] 8021q: VLANs not supported on lo
[  255.046020][T13265] wg1 speed is unknown, defaulting to 1000
[  255.055959][T13265] lo speed is unknown, defaulting to 1000
[  255.216229][T13279] __nla_validate_parse: 10 callbacks suppressed
[  255.216247][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'.
[  255.360798][T13292] netlink: 'syz.3.1885': attribute type 2 has an invalid length.
[  255.418781][T13297] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.1887'.
[  255.540555][T13306] netlink: 'syz.1.1889': attribute type 1 has an invalid length.
[  255.636883][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'.
[  255.659451][T13312] geneve5: entered promiscuous mode
[  255.665624][T13312] geneve5: entered allmulticast mode
[  255.694009][T13317] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1892'.
[  255.702900][T13304] 8021q: adding VLAN 0 to HW filter on device bond3
[  255.887059][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1895'.
[  255.903484][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1895'.
[  255.932141][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'.
[  256.064377][T13334] netlink: 'syz.4.1897': attribute type 1 has an invalid length.
[  256.083022][T13336] netlink: 'syz.1.1898': attribute type 2 has an invalid length.
[  256.152727][T13334] bond8: entered promiscuous mode
[  256.158770][T13334] 8021q: adding VLAN 0 to HW filter on device bond8
[  256.327369][T13344] wg1 speed is unknown, defaulting to 1000
[  256.342992][T13344] lo speed is unknown, defaulting to 1000
[  256.466649][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'.
[  256.847302][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1911'.
[  257.197169][T13401] wg1 speed is unknown, defaulting to 1000
[  257.205418][T13401] lo speed is unknown, defaulting to 1000
[  259.327464][T13361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.514737][T13423] syzkaller0: entered promiscuous mode
[  259.518035][T13429] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1920'.
[  259.538844][T13423] syzkaller0: entered allmulticast mode
[  260.058777][T13440] netlink: 'syz.0.1924': attribute type 10 has an invalid length.
[  260.066735][T13452] wg1 speed is unknown, defaulting to 1000
[  260.076235][T13452] lo speed is unknown, defaulting to 1000
[  260.159889][T13455] netlink: 'syz.1.1930': attribute type 2 has an invalid length.
[  260.313378][T13468] __nla_validate_parse: 2 callbacks suppressed
[  260.313396][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'.
[  260.337146][T13468] bridge_slave_0: default FDB implementation only supports local addresses
[  260.449792][T13479] "syz.1.1936" (13479) uses obsolete ecb(arc4) skcipher
[  260.534244][T13478] wg1 speed is unknown, defaulting to 1000
[  260.674158][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  260.687131][T13478] lo speed is unknown, defaulting to 1000
[  260.977520][T13490] wg1 speed is unknown, defaulting to 1000
[  261.073574][T13505] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1946'.
[  261.076885][T13509] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  261.090194][T13505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1946'.
[  261.099942][T13490] lo speed is unknown, defaulting to 1000
[  261.174804][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1949'.
[  261.479617][T13526] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  261.579252][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'.
[  261.625733][T13526] 8021q: adding VLAN 0 to HW filter on device bond4
[  261.650143][T13526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1954'.
[  261.663942][T13514] netlink: 'syz.2.1950': attribute type 12 has an invalid length.
[  261.677928][T13514] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1950'.
[  261.707351][T13524] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.762447][T13519] wg1 speed is unknown, defaulting to 1000
[  261.794845][T13524] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.860581][T13519] lo speed is unknown, defaulting to 1000
[  261.937675][T13555] x_tables: duplicate underflow at hook 3
[  261.966683][T13524] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.152021][T13559] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.166418][T13559] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.400225][T13524] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.470006][T13565] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1962'.
[  262.488328][T13565] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  262.805060][T13559] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.823597][T13559] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.932910][T13559] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.952101][T13559] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.007343][   T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.025035][T13559] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.038304][T13559] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.085791][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.136076][ T1011] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.202308][ T1338] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.255473][ T1338] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.268211][ T1338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.315195][ T1338] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.340980][ T1338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.423406][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.449399][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.486779][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.538189][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.608639][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  263.806850][T13606] netlink: 'syz.1.1972': attribute type 1 has an invalid length.
[  263.844883][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'.
[  263.855097][T13606] netlink: 'syz.1.1972': attribute type 1 has an invalid length.
[  263.962620][T13617] netlink: 'syz.4.1976': attribute type 13 has an invalid length.
[  264.267216][T13623] sctp: [Deprecated]: syz.3.1978 (pid 13623) Use of int in max_burst socket option.
[  264.267216][T13623] Use struct sctp_assoc_value instead
[  264.310314][T13624] tipc: Started in network mode
[  264.321739][T13624] tipc: Node identity 0e4b44c0c828, cluster identity 4711
[  264.342558][T13624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.355702][T13624] syzkaller0: entered promiscuous mode
[  264.362024][T13624] syzkaller0: entered allmulticast mode
[  264.435116][T13624] tipc: Resetting bearer <eth:syzkaller0>
[  264.454512][T13624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.588262][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.728293][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.868189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.008176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.148195][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.158873][T13622] tipc: Resetting bearer <eth:syzkaller0>
[  265.217190][T13622] tipc: Disabling bearer <eth:syzkaller0>
[  265.472519][T13679] __nla_validate_parse: 7 callbacks suppressed
[  265.472537][T13679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1995'.
[  265.487339][T13680] x_tables: unsorted entry at hook 1
[  265.534007][T13679] netlink: 'syz.2.1995': attribute type 4 has an invalid length.
[  265.703569][T13693] openvswitch: netlink: Message has -2 unknown bytes.
[  265.726946][T13693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.120942][T13717] openvswitch: netlink: Message has 572 unknown bytes.
[  266.152014][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.262985][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'.
[  266.264891][T13717] syzkaller0: entered promiscuous mode
[  266.328341][T13717] syzkaller0: entered allmulticast mode
[  266.596883][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'.
[  267.111120][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2014'.
[  267.122440][T13759] syzkaller0: entered promiscuous mode
[  267.127936][T13759] syzkaller0: entered allmulticast mode
[  267.170766][T13762] netlink: 'syz.1.2015': attribute type 4 has an invalid length.
[  267.300783][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'.
[  267.635691][T13773] wg1 speed is unknown, defaulting to 1000
[  267.669035][T13773] lo speed is unknown, defaulting to 1000
[  268.082406][T13803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2025'.
[  268.097547][T13803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2025'.
[  268.550547][T13818] netlink: 'syz.3.2027': attribute type 1 has an invalid length.
[  268.693253][T13818] bond4: entered promiscuous mode
[  268.719474][T13818] 8021q: adding VLAN 0 to HW filter on device bond4
[  268.870157][T13818] bond4: (slave bridge4): making interface the new active one
[  268.900409][T13818] bridge4: entered promiscuous mode
[  268.921448][T13818] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  269.000883][T13822] ipvlan2: entered promiscuous mode
[  269.033708][T13840] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2026'.
[  269.063443][T13822] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  269.135885][ T2237] block nbd3: Possible stuck request ffff888026c78000: control (read@0,1024B). Runtime 30 seconds
[  269.148157][ T2237] block nbd3: Possible stuck request ffff888026c78200: control (read@1024,1024B). Runtime 30 seconds
[  269.159421][ T2237] block nbd3: Possible stuck request ffff888026c78400: control (read@2048,1024B). Runtime 30 seconds
[  269.170902][ T2237] block nbd3: Possible stuck request ffff888026c78600: control (read@3072,1024B). Runtime 30 seconds
[  269.234796][T13848] syzkaller0: entered promiscuous mode
[  269.240486][T13848] syzkaller0: entered allmulticast mode
[  269.450734][T13851] netlink: 'syz.3.2033': attribute type 1 has an invalid length.
[  269.549119][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'.
[  269.559559][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'.
[  269.568574][T13855] openvswitch: netlink: Invalid VLAN frame
[  269.645970][T13860] netlink: 'syz.4.2035': attribute type 1 has an invalid length.
[  270.733598][T13851] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  270.743078][T13860] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  270.882510][T13869] __nla_validate_parse: 1 callbacks suppressed
[  270.882530][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'.
[  270.916731][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  270.935685][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'.
[  270.949180][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  270.958706][T13869] netlink: 'syz.4.2037': attribute type 6 has an invalid length.
[  270.967087][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.035786][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.045601][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.058845][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.143140][T13873] macvtap2: entered promiscuous mode
[  271.158608][T13873] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  271.209400][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.263985][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'.
[  271.319077][T13888] bpq0: entered promiscuous mode
[  271.574636][T13909] netlink: 'syz.4.2047': attribute type 1 has an invalid length.
[  271.638856][T13911] xt_CONNSECMARK: invalid mode: 253
[  271.731474][T13884] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  271.771109][T13917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.907423][T13917] syzkaller0: entered promiscuous mode
[  271.913137][T13917] syzkaller0: entered allmulticast mode
[  271.920492][T13917] tipc: Resetting bearer <eth:syzkaller0>
[  271.927119][T13922] ip6gretap0: Device is already in use.
[  272.551216][T13916] tipc: Resetting bearer <eth:syzkaller0>
[  272.960038][T13962] xt_hashlimit: max too large, truncated to 1048576
[  272.980586][T13962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  273.133144][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  273.139952][T13966] netlink: 'syz.0.2060': attribute type 4 has an invalid length.
[  273.206807][T13971] netlink: 'syz.0.2060': attribute type 4 has an invalid length.
[  274.477453][T13916] tipc: Disabling bearer <eth:syzkaller0>
[  274.673727][T13978] syzkaller0: entered promiscuous mode
[  274.684637][T13978] syzkaller0: entered allmulticast mode
[  275.009399][T14012] netlink: zone id is out of range
[  275.022387][T14012] netlink: zone id is out of range
[  275.035800][T14012] netlink: zone id is out of range
[  275.041819][T14012] netlink: zone id is out of range
[  275.055872][T14012] netlink: zone id is out of range
[  275.070216][T14012] netlink: zone id is out of range
[  275.085829][T14012] netlink: zone id is out of range
[  275.091673][T14012] netlink: zone id is out of range
[  275.104639][T14012] netlink: zone id is out of range
[  275.117483][T14012] netlink: zone id is out of range
[  276.641015][T13992] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  276.653287][T13992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  276.668235][T13992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.786859][T14017] syzkaller1: tun_chr_ioctl cmd 1074025677
[  276.798822][T14017] syzkaller1: linktype set to 768
[  276.826706][ T5951] wg1 speed is unknown, defaulting to 1000
[  277.355060][T14042] netlink: 'syz.3.2079': attribute type 3 has an invalid length.
[  277.377052][T14042] netlink: 'syz.3.2079': attribute type 3 has an invalid length.
[  277.396518][T14046] netlink: 'syz.2.2083': attribute type 1 has an invalid length.
[  277.451318][T14042] netlink: 'syz.3.2079': attribute type 13 has an invalid length.
[  277.467018][T14042] __nla_validate_parse: 12 callbacks suppressed
[  277.467037][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2079'.
[  277.495368][T14048] syzkaller0: entered promiscuous mode
[  277.520074][T14048] syzkaller0: entered allmulticast mode
[  277.520185][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2083'.
[  277.792543][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2086'.
[  277.813089][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'.
[  277.839193][T14065] unsupported nlmsg_type 40
[  277.976942][T14074] netlink: 'syz.4.2088': attribute type 1 has an invalid length.
[  278.125441][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'.
[  278.537842][T14106] x_tables: duplicate underflow at hook 2
[  278.543988][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  278.633155][T14113] netlink: 'syz.4.2100': attribute type 89 has an invalid length.
[  278.744621][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'.
[  278.767230][T14120] netlink: 'syz.0.2101': attribute type 30 has an invalid length.
[  278.889300][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'.
[  278.909706][T14120] netlink: 'syz.0.2101': attribute type 30 has an invalid length.
[  279.006835][T14125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.025080][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2104'.
[  279.221272][T14151] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2105'.
[  279.264902][T14151] netlink: 'syz.0.2105': attribute type 11 has an invalid length.
[  279.334715][T14151] netlink: 'syz.0.2105': attribute type 1 has an invalid length.
[  279.342782][T14151] netlink: 'syz.0.2105': attribute type 7 has an invalid length.
[  279.565342][T14171] xt_CT: No such helper "pptp"
[  279.783229][T14163] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  279.824563][T14159] bond13: (slave gretap2): making interface the new active one
[  279.839501][T14159] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  279.878792][T14168] 8021q: adding VLAN 0 to HW filter on device bond13
[  279.930151][T14170] vlan3: entered promiscuous mode
[  279.935317][T14170] bond13: entered promiscuous mode
[  279.942833][T14170] gretap2: entered promiscuous mode
[  280.273709][T14196] 8021q: adding VLAN 0 to HW filter on device bond10
[  280.275957][T14199] x_tables: duplicate underflow at hook 4
[  280.326409][T14200] bond10: (slave veth11): Enslaving as an active interface with a down link
[  280.503518][T14196] bond10: (slave veth13): Enslaving as an active interface with a down link
[  281.818008][T14254] delete_channel: no stack
[  282.232897][T14280] net_ratelimit: 44 callbacks suppressed
[  282.233019][T14280] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  282.260976][T14280] ipvlan2: entered promiscuous mode
[  282.320036][T14277] block nbd4: server does not support multiple connections per device.
[  282.352445][T14277] block nbd4: shutting down sockets
[  282.668219][T14297] __nla_validate_parse: 15 callbacks suppressed
[  282.668237][T14297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2147'.
[  283.188232][T14291] validate_nla: 7 callbacks suppressed
[  283.188250][T14291] netlink: 'syz.1.2145': attribute type 2 has an invalid length.
[  283.322750][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2151'.
[  283.369249][T14310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2151'.
[  283.398241][T14310] openvswitch: netlink: Flow actions attr not present in new flow.
[  283.432944][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'.
[  283.433436][T14315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.456239][T14311] wg1 speed is unknown, defaulting to 1000
[  283.473017][T14311] lo speed is unknown, defaulting to 1000
[  283.490678][T14321] netlink: 'syz.4.2152': attribute type 1 has an invalid length.
[  283.492199][T14315] syzkaller0: entered promiscuous mode
[  283.513923][T14315] syzkaller0: entered allmulticast mode
[  283.585955][T14321] bond11: entered promiscuous mode
[  283.591368][T14321] bond11: entered allmulticast mode
[  283.597758][T14321] 8021q: adding VLAN 0 to HW filter on device bond11
[  283.609355][T14314] netlink: 'syz.1.2151': attribute type 3 has an invalid length.
[  283.617852][T14314] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2151'.
[  283.669450][T14315] tipc: Resetting bearer <eth:syzkaller0>
[  283.686636][T14321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2152'.
[  283.709770][T14333] netlink: 'syz.1.2155': attribute type 10 has an invalid length.
[  283.717969][T14312] tipc: Resetting bearer <eth:syzkaller0>
[  283.735673][T14312] tipc: Disabling bearer <eth:syzkaller0>
[  283.749832][T14333] veth1_vlan: entered allmulticast mode
[  283.756005][T14333] veth1_vlan: left promiscuous mode
[  283.763838][T14333] team0: Device veth1_vlan failed to register rx_handler
[  284.264033][T14369] netlink: 'syz.2.2165': attribute type 1 has an invalid length.
[  284.290445][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'.
[  284.817151][T14375] wg1 speed is unknown, defaulting to 1000
[  284.827560][T14375] lo speed is unknown, defaulting to 1000
[  285.604277][T14412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.619256][T14412] syzkaller0: entered promiscuous mode
[  285.643269][T14412] syzkaller0: entered allmulticast mode
[  285.716224][T14418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2177'.
[  285.736998][T14413] tipc: Resetting bearer <eth:syzkaller0>
[  285.750891][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'.
[  285.774073][T14418] netlink: 'syz.4.2177': attribute type 15 has an invalid length.
[  285.879843][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  285.904386][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.916302][T14423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.293789][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.361981][T14411] tipc: Resetting bearer <eth:syzkaller0>
[  286.410258][T14411] tipc: Disabling bearer <eth:syzkaller0>
[  286.505948][T14438] tipc: Invalid UDP bearer configuration
[  286.505998][T14438] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  287.220029][T14493] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001
[  287.252826][T14493] 
: renamed from bond_slave_0
[  287.985507][T14522] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  288.009629][T14522] team0: Device macvlan0 is already an upper device of the team interface
[  288.098848][T14557] netlink: 'syz.2.2206': attribute type 1 has an invalid length.
[  288.106616][T14557] __nla_validate_parse: 4 callbacks suppressed
[  288.106633][T14557] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2206'.
[  288.129084][T14557] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2206'.
[  288.345741][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'.
[  288.551916][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.613383][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[  288.839116][T14595] netlink: 'syz.4.2219': attribute type 1 has an invalid length.
[  288.867840][T14595] bond12: entered promiscuous mode
[  288.873906][T14595] 8021q: adding VLAN 0 to HW filter on device bond12
[  288.885472][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'.
[  288.895244][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'.
[  288.974419][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'.
[  289.286356][T14611] dvmrp1: tun_chr_ioctl cmd 2147767506
[  289.518218][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2227'.
[  289.613649][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'.
[  289.821625][T14642] wg1 speed is unknown, defaulting to 1000
[  289.852267][T14642] lo speed is unknown, defaulting to 1000
[  289.946456][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2229'.
[  290.315360][T14659] 8021q: adding VLAN 0 to HW filter on device bond13
[  290.336170][T14659] macsec1: entered promiscuous mode
[  290.341681][T14659] bond13: entered promiscuous mode
[  290.347123][T14659] macsec1: entered allmulticast mode
[  290.352693][T14659] bond13: entered allmulticast mode
[  290.375622][T14659] bond13: left allmulticast mode
[  290.384616][T14659] bond13: left promiscuous mode
[  290.453299][T14664] syzkaller0: entered promiscuous mode
[  290.458954][T14664] syzkaller0: entered allmulticast mode
[  291.119381][T14690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.169440][T14693] syzkaller0: entered promiscuous mode
[  291.187904][T14693] syzkaller0: entered allmulticast mode
[  291.221942][T14699] netlink: 'syz.1.2243': attribute type 1 has an invalid length.
[  291.330436][T14682] tipc: Resetting bearer <eth:syzkaller0>
[  291.437575][T14682] tipc: Disabling bearer <eth:syzkaller0>
[  291.803902][T14736] netlink: 'syz.4.2250': attribute type 1 has an invalid length.
[  291.920512][T14746] netlink: 'syz.4.2252': attribute type 1 has an invalid length.
[  292.982499][T14790] bridge0: entered promiscuous mode
[  293.013415][T14794] netlink: 'syz.0.2266': attribute type 5 has an invalid length.
[  293.257869][T14813] bond15: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  293.279883][T14813] bond15 (unregistering): Released all slaves
[  293.345380][T14822] __nla_validate_parse: 8 callbacks suppressed
[  293.345399][T14822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2272'.
[  293.833918][T14839] netlink: 984 bytes leftover after parsing attributes in process `syz.0.2278'.
[  293.844085][T14839] tc_dump_action: action bad kind
[  294.323429][T14858] syzkaller0: entered promiscuous mode
[  294.357865][T14858] syzkaller0: entered allmulticast mode
[  294.367992][T14863] dvmrp0: left allmulticast mode
[  294.382513][T14865] xt_TCPMSS: Only works on TCP SYN packets
[  294.388447][T14863] pimreg: left allmulticast mode
[  296.031432][T14887] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2292'.
[  296.056282][T14888] netlink: 'syz.3.2293': attribute type 1 has an invalid length.
[  296.079218][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2294'.
[  296.186520][T14900] netlink: 'syz.1.2296': attribute type 11 has an invalid length.
[  296.235552][T14897] 8021q: adding VLAN 0 to HW filter on device batadv1
[  296.302681][T14897] bond5: (slave batadv1): making interface the new active one
[  296.321659][T14897] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  296.344858][T14905] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  296.520941][T14905] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  296.654738][T14898] wg1 speed is unknown, defaulting to 1000
[  296.680312][T14898] lo speed is unknown, defaulting to 1000
[  296.681252][T14907] wg1 speed is unknown, defaulting to 1000
[  296.714780][T14917] wg1 speed is unknown, defaulting to 1000
[  296.714788][T14907] lo speed is unknown, defaulting to 1000
[  296.761113][T14917] lo speed is unknown, defaulting to 1000
[  296.975044][T14934] bridge_slave_0: entered promiscuous mode
[  296.987266][T14934] vlan0: entered promiscuous mode
[  297.035574][T14933] vlan0: entered promiscuous mode
[  297.412927][T14953] bridge_slave_0: invalid flags given to default FDB implementation
[  297.555813][T14972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2313'.
[  297.569748][T14972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2313'.
[  297.652316][T14969] wg1 speed is unknown, defaulting to 1000
[  297.671166][T14969] lo speed is unknown, defaulting to 1000
[  298.125152][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'.
[  298.184282][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'.
[  298.315943][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'.
[  298.352581][T15014] syzkaller0: entered promiscuous mode
[  298.369228][T15014] syzkaller0: entered allmulticast mode
[  298.395257][T15016] lo: Caught tx_queue_len zero misconfig
[  298.609272][T15031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2332'.
[  298.629597][T15030] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2331'.
[  298.647465][T15030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2331'.
[  298.673824][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'.
[  299.223191][ T2237] block nbd3: Possible stuck request ffff888026c78000: control (read@0,1024B). Runtime 60 seconds
[  299.235397][ T2237] block nbd3: Possible stuck request ffff888026c78200: control (read@1024,1024B). Runtime 60 seconds
[  299.246613][ T2237] block nbd3: Possible stuck request ffff888026c78400: control (read@2048,1024B). Runtime 60 seconds
[  299.257777][ T2237] block nbd3: Possible stuck request ffff888026c78600: control (read@3072,1024B). Runtime 60 seconds
[  300.477965][T15030] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  300.575938][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'.
[  300.829764][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2338'.
[  301.655136][T15098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2349'.
[  302.754284][T15116] netlink: 'syz.4.2355': attribute type 27 has an invalid length.
[  303.079956][T15139] syzkaller0: entered promiscuous mode
[  303.103511][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'.
[  303.129465][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'.
[  303.227698][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'.
[  303.262686][T15153] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  303.596236][T15173] wg1 speed is unknown, defaulting to 1000
[  303.617094][T15173] lo speed is unknown, defaulting to 1000
[  303.642173][T15167] __nla_validate_parse: 66 callbacks suppressed
[  303.642204][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  303.667033][T15176] FAULT_INJECTION: forcing a failure.
[  303.667033][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  303.712764][T15176] CPU: 0 UID: 0 PID: 15176 Comm: syz.3.2369 Not tainted syzkaller #0 PREEMPT(full) 
[  303.712793][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  303.712811][T15176] Call Trace:
[  303.712818][T15176]  <TASK>
[  303.712826][T15176]  dump_stack_lvl+0xe8/0x150
[  303.712862][T15176]  should_fail_ex+0x412/0x560
[  303.712889][T15176]  _copy_from_user+0x2d/0xb0
[  303.712907][T15176]  ___sys_sendmsg+0x1c6/0x360
[  303.712927][T15176]  ? __lock_acquire+0x6b5/0x2cf0
[  303.712948][T15176]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.712999][T15176]  ? __fget_files+0x2a/0x420
[  303.713025][T15176]  ? __fget_files+0x3a0/0x420
[  303.713048][T15176]  __x64_sys_sendmsg+0x1bd/0x2a0
[  303.713069][T15176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.713097][T15176]  ? __pfx_ksys_write+0x10/0x10
[  303.713124][T15176]  do_syscall_64+0x14d/0xf80
[  303.713143][T15176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.713157][T15176]  ? trace_irq_disable+0x37/0x100
[  303.713173][T15176]  ? clear_bhb_loop+0x40/0x90
[  303.713193][T15176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.713208][T15176] RIP: 0033:0x7f8eb3b9c629
[  303.713231][T15176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.713244][T15176] RSP: 002b:00007f8eb4a7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.713269][T15176] RAX: ffffffffffffffda RBX: 00007f8eb3e16090 RCX: 00007f8eb3b9c629
[  303.713281][T15176] RDX: 0000000000040040 RSI: 0000200000002cc0 RDI: 0000000000000006
[  303.713291][T15176] RBP: 00007f8eb4a7d090 R08: 0000000000000000 R09: 0000000000000000
[  303.713301][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.713311][T15176] R13: 00007f8eb3e16128 R14: 00007f8eb3e16090 R15: 00007ffc00c27de8
[  303.713335][T15176]  </TASK>
[  303.853138][T15162] netlink: 'syz.1.2367': attribute type 16 has an invalid length.
[  303.909782][T15162] netlink: 'syz.1.2367': attribute type 17 has an invalid length.
[  304.012309][T15162] tipc: Resetting bearer <eth:ip6gre0>
[  304.035059][T15162] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.046607][T15162] 8021q: adding VLAN 0 to HW filter on device team0
[  304.058699][T15162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.117870][T15184] wg1 speed is unknown, defaulting to 1000
[  304.125832][T15184] lo speed is unknown, defaulting to 1000
[  304.135353][T14552] bond0: (slave 
3
0

): link status definitely down, disabling slave
[  304.147689][T14552] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  304.159538][T14552] bond0: now running without any active interface!
[  304.276384][T15192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2374'.
[  304.703065][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'.
[  304.715305][T15209] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  304.904371][T15220] xt_cgroup: invalid path, errno=-2
[  305.046680][T15227] netlink: 'syz.3.2382': attribute type 10 has an invalid length.
[  305.130896][T15223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.150483][T15223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.230812][T15227] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  305.252282][T15227] team0: Failed to send options change via netlink (err -105)
[  305.284154][T15227] team0: Port device netdevsim0 added
[  305.308396][T15234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.433004][T15223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.451402][T15223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.502451][T15228] tipc: Disabling bearer <eth:syzkaller0>
[  305.646376][T15223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.668305][T15223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.749815][T14552] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  305.967202][T15223] team0: Port device netdevsim0 removed
[  305.977537][T15223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.989064][T15223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.012462][T15256] wg1 speed is unknown, defaulting to 1000
[  306.040130][T15256] lo speed is unknown, defaulting to 1000
[  306.173027][T14529] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.182172][T14529] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.216922][T15272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2393'.
[  306.245805][T14551] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.259631][T14551] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.312166][T14551] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.325950][T14551] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.387804][T14553] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  306.400518][T14553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.416206][T15274] wg1 speed is unknown, defaulting to 1000
[  306.424671][T15274] lo speed is unknown, defaulting to 1000
[  306.890919][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.898557][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.918359][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.925314][T15291] wg1 speed is unknown, defaulting to 1000
[  306.939186][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.947476][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.956516][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.966454][T15291] lo speed is unknown, defaulting to 1000
[  306.974339][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  306.993429][T15299] IPv6: addrconf: prefix option has invalid lifetime
[  307.168979][T15315] netlink: 'syz.0.2401': attribute type 2 has an invalid length.
[  307.177021][T15316] netlink: 'syz.0.2401': attribute type 2 has an invalid length.
[  307.862431][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'.
[  307.987521][T15337] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2407'.
[  308.001916][T15337] netlink: 'syz.4.2407': attribute type 9 has an invalid length.
[  308.012122][T15337] netlink: 'syz.4.2407': attribute type 10 has an invalid length.
[  308.037299][T15335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'.
[  308.200518][T15353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2409'.
[  308.842323][T15380] syzkaller0: entered promiscuous mode
[  308.848695][T15380] syzkaller0: entered allmulticast mode
[  309.297062][T15410] gtp0: entered promiscuous mode
[  309.303344][T15410] gtp0: entered allmulticast mode
[  309.310604][T15403] wg1 speed is unknown, defaulting to 1000
[  309.330710][T15403] lo speed is unknown, defaulting to 1000
[  309.496642][T15420] wg1 speed is unknown, defaulting to 1000
[  309.520299][T15420] lo speed is unknown, defaulting to 1000
[  309.660775][T15431] syzkaller0: entered promiscuous mode
[  309.666421][T15431] syzkaller0: entered allmulticast mode
[  310.009974][T15446] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.612547][T15470] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) !
[  310.626440][T15444] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2436'.
[  310.741480][T15476] netlink: 752 bytes leftover after parsing attributes in process `syz.0.2445'.
[  310.756344][T15476] netlink: 752 bytes leftover after parsing attributes in process `syz.0.2445'.
[  310.788207][T15476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2445'.
[  310.953314][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'.
[  310.967295][T15490] net_ratelimit: 25 callbacks suppressed
[  310.967311][T15490] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  311.274795][T15506] x_tables: duplicate underflow at hook 2
[  311.659316][T15522] netpci0: tun_chr_ioctl cmd 35108
[  311.664804][T15522] netpci0: tun_chr_ioctl cmd 1074025677
[  311.673338][T15522] netpci0: linktype set to 768
[  312.662869][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'.
[  312.700027][T15589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2473'.
[  312.734796][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'.
[  312.850407][T15600] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  313.026044][T15607] wg1 speed is unknown, defaulting to 1000
[  313.054921][T15607] lo speed is unknown, defaulting to 1000
[  313.138737][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.168460][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.176880][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.185072][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.193612][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.193877][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'.
[  313.209793][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.218403][T15623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2481'.
[  313.237917][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.258234][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.286766][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.317137][T15619] netlink: 'syz.4.2480': attribute type 3 has an invalid length.
[  313.643964][T15642] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  315.390511][T15670] syzkaller0: entered promiscuous mode
[  315.396102][T15670] syzkaller0: entered allmulticast mode
[  315.729024][T15701] nbd2: detected capacity change from 0 to 63
[  315.737418][ T5837] block nbd2: Dead connection, failed to find a fallback
[  317.135274][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.231491][T15707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.246480][T15699] syzkaller0: entered promiscuous mode
[  317.255374][T15699] syzkaller0: entered allmulticast mode
[  317.263854][T15720] __nla_validate_parse: 2 callbacks suppressed
[  317.263871][T15720] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2496'.
[  317.310262][T15720] tipc: Resetting bearer <eth:syzkaller0>
[  317.358514][T15720] tipc: Disabling bearer <eth:syzkaller0>
[  317.390431][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'.
[  317.455757][T15730] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.486353][T15730] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.525310][T15733] IPVS: Unknown mcast interface: vcan0
[  317.626935][T15737] bond1: entered promiscuous mode
[  317.654113][T15737] bond1: entered allmulticast mode
[  317.660140][T15737] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.669355][T15730] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.680407][T15730] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.714878][T15731] wg1 speed is unknown, defaulting to 1000
[  317.737972][T15731] lo speed is unknown, defaulting to 1000
[  317.821224][T15730] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.833343][T15730] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.834304][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'.
[  317.873933][T15752] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2510'.
[  317.910797][T15730] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.929902][T15730] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.966944][T15751] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.041668][T15761] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2514'.
[  318.106555][T15767] sctp: [Deprecated]: syz.4.2515 (pid 15767) Use of int in maxseg socket option.
[  318.106555][T15767] Use struct sctp_assoc_value instead
[  318.213065][T15781] xt_hashlimit: size too large, truncated to 1048576
[  318.263056][T14529] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.288077][T14529] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.318216][T14529] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.326442][T14529] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.344052][T15781] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  318.491708][T14520] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.509574][T14520] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.645434][T14529] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.655972][T15805] rdma_rxe: rxe_newlink: failed to add lo
[  318.667758][T14529] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.113344][T15836] lo: entered allmulticast mode
[  319.118632][T15834] validate_nla: 57 callbacks suppressed
[  319.118652][T15834] netlink: 'syz.3.2530': attribute type 1 has an invalid length.
[  319.177207][T15834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2530'.
[  319.279313][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'.
[  319.347179][T15852] netlink: 'syz.3.2534': attribute type 58 has an invalid length.
[  319.363671][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2534'.
[  320.633073][T15861] vxcan1: entered promiscuous mode
[  320.799646][T15875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'.
[  320.849671][T15875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'.
[  320.964377][T15887] wg1 speed is unknown, defaulting to 1000
[  320.983670][T15887] lo speed is unknown, defaulting to 1000
[  321.131811][T15895] netlink: 'syz.3.2543': attribute type 30 has an invalid length.
[  321.228883][T15895] bond6: option arp_missed_max: invalid value (0)
[  321.235473][T15895] bond6: option arp_missed_max: allowed values 1 - 255
[  321.248820][T15895] bond6 (unregistering): Released all slaves
[  321.801573][T15949] veth0: entered allmulticast mode
[  322.005411][T15963] syzkaller0: entered promiscuous mode
[  322.011552][T15963] syzkaller0: entered allmulticast mode
[  322.142847][T15969] tunl0: Caught tx_queue_len zero misconfig
[  324.743638][T15940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  324.788725][T15983] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  324.820097][ T5837] block nbd2: shutting down sockets
[  324.825635][ T5837] blk_print_req_error: 138 callbacks suppressed
[  324.825653][ T5837] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  324.893993][ T5837] buffer_io_error: 138 callbacks suppressed
[  324.894010][ T5837] Buffer I/O error on dev nbd2, logical block 0, async page read
[  324.918191][ T5837] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  324.950614][ T5837] Buffer I/O error on dev nbd2, logical block 1, async page read
[  324.970891][ T5837] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.003688][ T5837] Buffer I/O error on dev nbd2, logical block 2, async page read
[  325.028584][ T5837] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.050973][ T5837] Buffer I/O error on dev nbd2, logical block 3, async page read
[  325.054594][T15997] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  325.070189][ T5837] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.077476][T15999] netlink: 'syz.3.2568': attribute type 11 has an invalid length.
[  325.090491][ T5837] Buffer I/O error on dev nbd2, logical block 0, async page read
[  325.092038][T15997] openvswitch: netlink: Message has 16 unknown bytes.
[  325.105498][T15999] netlink: 'syz.3.2568': attribute type 4 has an invalid length.
[  325.107446][ T5837] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.119561][T15999] netlink: 'syz.3.2568': attribute type 5 has an invalid length.
[  325.157295][ T5837] Buffer I/O error on dev nbd2, logical block 1, async page read
[  325.162295][T15999] netlink: 'syz.3.2568': attribute type 6 has an invalid length.
[  325.174365][ T5837] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.187226][T15999] __nla_validate_parse: 5 callbacks suppressed
[  325.187244][T15999] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.2568'.
[  325.198966][ T5837] Buffer I/O error on dev nbd2, logical block 2, async page read
[  325.214893][T16001] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  325.243300][ T5837] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.256602][ T5837] Buffer I/O error on dev nbd2, logical block 3, async page read
[  325.262247][T16006] netlink: 'syz.3.2571': attribute type 13 has an invalid length.
[  325.267141][ T5837] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.286346][ T5837] Buffer I/O error on dev nbd2, logical block 0, async page read
[  325.295054][ T5837] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  325.304841][ T5837] Buffer I/O error on dev nbd2, logical block 1, async page read
[  325.313393][ T5837] ldm_validate_partition_table(): Disk read failed.
[  325.320915][ T5837] Dev nbd2: unable to read RDB block 0
[  325.327046][ T5837]  nbd2: unable to read partition table
[  325.344683][ T5837] ldm_validate_partition_table(): Disk read failed.
[  325.358918][ T5837] Dev nbd2: unable to read RDB block 0
[  325.372958][ T5837]  nbd2: unable to read partition table
[  325.401258][T16011] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2569'.
[  325.431838][T16011] netlink: 'syz.2.2569': attribute type 9 has an invalid length.
[  325.441802][T16011] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2569'.
[  325.465539][T16014] siw: device registration error -23
[  325.479351][T16011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2569'.
[  325.723047][T16026] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  325.843199][T16032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2575'.
[  325.927565][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'.
[  325.962538][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  325.972838][T16035] netlink: 38 bytes leftover after parsing attributes in process `syz.0.2576'.
[  326.519130][T16085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2588'.
[  326.624776][T16083] batadv0: left promiscuous mode
[  326.642041][T16083] veth3: left promiscuous mode
[  326.650893][T16083] geneve2: left promiscuous mode
[  326.661725][T16083] ip6gretap2: left promiscuous mode
[  326.673539][T16083] geneve5: left promiscuous mode
[  326.684520][T16083] bond8: left promiscuous mode
[  326.697705][T16083] bond11: left promiscuous mode
[  326.719654][T16083] bond12: left promiscuous mode
[  326.781264][T16081] team0: Device gtp1 is of different type
[  326.788442][T16097] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2592'.
[  327.257828][T16127] netlink: 'syz.1.2599': attribute type 39 has an invalid length.
[  327.318172][T16134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.113384][T16176] netlink: 'syz.3.2607': attribute type 13 has an invalid length.
[  328.121458][T16176] netlink: 'syz.3.2607': attribute type 11 has an invalid length.
[  328.124981][T16125] syzkaller0: entered promiscuous mode
[  328.135264][T16125] syzkaller0: entered allmulticast mode
[  329.291632][ T2237] block nbd3: Possible stuck request ffff888026c78000: control (read@0,1024B). Runtime 90 seconds
[  329.309420][ T2237] block nbd3: Possible stuck request ffff888026c78200: control (read@1024,1024B). Runtime 90 seconds
[  329.320539][ T2237] block nbd3: Possible stuck request ffff888026c78400: control (read@2048,1024B). Runtime 90 seconds
[  329.331591][ T2237] block nbd3: Possible stuck request ffff888026c78600: control (read@3072,1024B). Runtime 90 seconds
[  330.284548][T16226] __nla_validate_parse: 6 callbacks suppressed
[  330.284565][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'.
[  330.308720][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  330.349735][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  330.502201][T16241] xt_TPROXY: Can be used only with -p tcp or -p udp
[  331.223908][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2631'.
[  331.328708][T16271] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2632'.
[  331.554356][T16283] netlink: 'syz.4.2639': attribute type 4 has an invalid length.
[  331.590880][T16283] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2639'.
[  331.602263][T16290] xt_l2tp: invalid flags combination: 0
[  331.669588][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'.
[  331.730895][T16293] 8021q: adding VLAN 0 to HW filter on device bond15
[  331.743768][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'.
[  331.775950][T16293] macsec1: entered promiscuous mode
[  331.789093][T16293] bond15: entered promiscuous mode
[  331.794403][T16293] macsec1: entered allmulticast mode
[  331.801367][T16293] bond15: entered allmulticast mode
[  331.814845][T16293] bond15: left allmulticast mode
[  331.819957][T16293] bond15: left promiscuous mode
[  331.863255][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2644'.
[  332.013987][T16312] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  332.031377][T16312] bond2 (unregistering): Released all slaves
[  332.123415][T16325] tipc: Enabled bearer <eth:caif0>, priority 14
[  332.137315][T16325] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2649'.
[  332.137894][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2648'.
[  332.148288][T16325] 0ªX¹¦À: renamed from caif0
[  332.164597][T16325] tipc: Disabling bearer <eth:caif0>
[  332.181824][T16325] 0ªX¹¦À: entered allmulticast mode
[  332.187351][T16325] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  332.193268][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  332.234075][T16328] hsr0: entered promiscuous mode
[  332.244358][T16328] macvlan0: entered allmulticast mode
[  332.283541][T16328] hsr0: entered allmulticast mode
[  332.298609][T16328] hsr_slave_0: entered allmulticast mode
[  332.320006][T16328] netlink: 'syz.0.2650': attribute type 2 has an invalid length.
[  332.386989][T16333] bond14 (unregistering): Released all slaves
[  332.868890][T16360] netlink: 'syz.0.2658': attribute type 10 has an invalid length.
[  332.933125][T16360] team0: Device veth1_macvtap failed to register rx_handler
[  332.992252][T16367] netlink: 'syz.1.2660': attribute type 1 has an invalid length.
[  333.008551][T16364] netlink: 'syz.3.2661': attribute type 1 has an invalid length.
[  333.084263][T16367] bond5: entered promiscuous mode
[  333.090581][T16367] 8021q: adding VLAN 0 to HW filter on device bond5
[  333.152804][T16364] 8021q: adding VLAN 0 to HW filter on device bond7
[  333.183694][T16364] bond6: (slave bond7): making interface the new active one
[  333.238391][T16364] bond6: (slave bond7): Enslaving as an active interface with an up link
[  333.274135][T16386] 8021q: adding VLAN 0 to HW filter on device bond5
[  333.292727][T16386] bond5: (slave gre2): The slave device specified does not support setting the MAC address
[  333.303646][T16386] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  333.329485][T16386] bond5: (slave gre2): making interface the new active one
[  333.368539][T16386] gre2: entered promiscuous mode
[  333.375440][T16386] bond5: (slave gre2): Enslaving as an active interface with an up link
[  333.466499][T16377] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  333.511560][T14553] ------------[ cut here ]------------
[  333.517399][T14553] kernel BUG at net/core/skbuff.c:2306!
[  333.531134][T14553] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  333.537432][T14553] CPU: 1 UID: 0 PID: 14553 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) 
[  333.547070][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  333.557132][T14553] Workqueue: bond5 bond_resend_igmp_join_requests_delayed
[  333.564247][T14553] RIP: 0010:pskb_expand_head+0x12da/0x1320
[  333.570059][T14553] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 e7 c4 f8 e9 d3 f3 ff ff e8 27 c1 5b f8 90 <0f> 0b e8 1f c1 5b f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  333.589658][T14553] RSP: 0018:ffffc9001b377490 EFLAGS: 00010293
[  333.595721][T14553] RAX: ffffffff896879a9 RBX: ffff88806c2fd500 RCX: ffff888077a28000
[  333.603684][T14553] RDX: 0000000000000000 RSI: 0000000093c5b840 RDI: 0000000000000000
[  333.611650][T14553] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000004c
[  333.619701][T14553] R10: dffffc0000000000 R11: ffffffff8a263ad0 R12: dffffc0000000000
[  333.627666][T14553] R13: 0000000000000820 R14: 0000000093c5b840 R15: 00000000000006c0
[  333.635638][T14553] FS:  0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000
[  333.644566][T14553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  333.651152][T14553] CR2: 00007f30b4d84fa8 CR3: 000000003318e000 CR4: 00000000003526f0
[  333.659131][T14553] Call Trace:
[  333.662407][T14553]  <TASK>
[  333.665327][T14553]  ? neigh_connected_output+0x1ea/0x460
[  333.670867][T14553]  ? neigh_connected_output+0x1ea/0x460
[  333.676413][T14553]  ipgre_header+0xd5/0x350
[  333.680823][T14553]  ? __pfx_ipgre_header+0x10/0x10
[  333.685859][T14553]  neigh_connected_output+0x286/0x460
[  333.691227][T14553]  ? ip6_output+0x126/0x550
[  333.695734][T14553]  ip6_output+0x340/0x550
[  333.700056][T14553]  NF_HOOK+0xa2/0x3a0
[  333.704029][T14553]  ? NF_HOOK+0xf9/0x3a0
[  333.708174][T14553]  ? __pfx_NF_HOOK+0x10/0x10
[  333.712770][T14553]  ? __pfx_dst_output+0x10/0x10
[  333.717609][T14553]  ? lockdep_hardirqs_on+0x7a/0x110
[  333.722800][T14553]  ? __local_bh_enable_ip+0xd0/0x130
[  333.728174][T14553]  ? icmp6_dst_alloc+0x3a6/0x440
[  333.733124][T14553]  mld_sendpack+0x8b4/0xe40
[  333.737624][T14553]  ? __asan_memcpy+0x40/0x70
[  333.742211][T14553]  ? mld_sendpack+0x213/0xe40
[  333.746882][T14553]  ? __pfx_mld_sendpack+0x10/0x10
[  333.751917][T14553]  ? tls_dev_event+0x745/0xf00
[  333.756771][T14553]  ? mld_send_report+0xe0/0x380
[  333.761614][T14553]  ipv6_mc_netdev_event+0x1b7/0x5a0
[  333.766844][T14553]  notifier_call_chain+0x19d/0x3a0
[  333.771951][T14553]  call_netdevice_notifiers+0x90/0xd0
[  333.777314][T14553]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  333.783372][T14553]  ? process_scheduled_works+0xa0f/0x17a0
[  333.789090][T14553]  bond_resend_igmp_join_requests_delayed+0x61/0x170
[  333.795759][T14553]  ? process_scheduled_works+0xa0f/0x17a0
[  333.801481][T14553]  process_scheduled_works+0xaec/0x17a0
[  333.807047][T14553]  ? __pfx_process_scheduled_works+0x10/0x10
[  333.813035][T14553]  ? assign_work+0x3d5/0x5e0
[  333.817632][T14553]  worker_thread+0xa50/0xfc0
[  333.822223][T14553]  kthread+0x388/0x470
[  333.826310][T14553]  ? __pfx_worker_thread+0x10/0x10
[  333.831516][T14553]  ? __pfx_kthread+0x10/0x10
[  333.836122][T14553]  ret_from_fork+0x51e/0xb90
[  333.840722][T14553]  ? __pfx_ret_from_fork+0x10/0x10
[  333.845830][T14553]  ? __switch_to+0xc7d/0x1400
[  333.850500][T14553]  ? __pfx_kthread+0x10/0x10
[  333.855083][T14553]  ret_from_fork_asm+0x1a/0x30
[  333.859894][T14553]  </TASK>
[  333.862911][T14553] Modules linked in:
[  333.867731][T14553] ---[ end trace 0000000000000000 ]---
[  333.936732][T14553] RIP: 0010:pskb_expand_head+0x12da/0x1320
[  333.942893][T14553] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 e7 c4 f8 e9 d3 f3 ff ff e8 27 c1 5b f8 90 <0f> 0b e8 1f c1 5b f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  333.962885][T14553] RSP: 0018:ffffc9001b377490 EFLAGS: 00010293
[  333.969147][T14553] RAX: ffffffff896879a9 RBX: ffff88806c2fd500 RCX: ffff888077a28000
[  333.977412][T14553] RDX: 0000000000000000 RSI: 0000000093c5b840 RDI: 0000000000000000
[  333.985560][T14553] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000004c
[  333.993960][T14553] R10: dffffc0000000000 R11: ffffffff8a263ad0 R12: dffffc0000000000
[  334.002093][T14553] R13: 0000000000000820 R14: 0000000093c5b840 R15: 00000000000006c0
[  334.010313][T14553] FS:  0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000
[  334.019330][T14553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  334.025925][T14553] CR2: 0000200000001000 CR3: 0000000075e20000 CR4: 00000000003526f0
[  334.034093][T14553] Kernel panic - not syncing: Fatal exception
[  334.040312][T14553] Kernel Offset: disabled
[  334.044625][T14553] Rebooting in 86400 seconds..