last executing test programs:

5.61944758s ago: executing program 4 (id=3194):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x6, 0x6, 0x4000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x9}, 0x50)
socket(0x10, 0x803, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x115, &(0x7f00000005c0)={@broadcast, @empty, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x1e, 0x4, 0x1, 0x6, 0x103, 0x64, 0x0, 0x18, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4c, 0xa3, 0x1, 0x0, [{@remote, 0xce1}, {@remote, 0x3ff}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@local, 0x9}, {@private=0xa010101, 0x4}, {@empty, 0x80000000}, {@local, 0x8}, {@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x17, 0x12, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}]}}, {0x1e, 0xee, 0x0, @broadcast, "f00f0715901d54c50f0dbd1fc4fe8da01969c8f4b4002d4602f5bc67add28a4b656e79ea6a01a965fe83f18324849482d7178ff43a41d0e27a5c4fddf5ae5a2b8e7cbfacfe2c29e0136da886998c0f83eba5b5b603afd3bd580e13b13ee07ff0be28a5d6ad72efdf1510a496f7aa01143881098b3aa43941604ec08cad0caebadc45de"}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})
pipe(&(0x7f0000000040))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0)

5.408164038s ago: executing program 4 (id=3198):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}})

4.972250426s ago: executing program 4 (id=3203):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x715076167876ede7)
sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000200))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/183, 0xb7}], 0x2}, 0x9e9f}], 0x2, 0x0, 0x0)

4.044356262s ago: executing program 4 (id=3217):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33630f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc879147d8e5268249409001e0c0c9bd429f3d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6", 0xcd}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f", 0xb2}, {&(0x7f00000011c0)="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", 0x359}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="5300138e06d44d863d4eedd1", 0xc}], 0x1, 0x0, 0x0, 0x900}, 0x0)

3.891084487s ago: executing program 4 (id=3219):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

3.334481453s ago: executing program 3 (id=3223):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

3.256209573s ago: executing program 1 (id=3224):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
listen(r2, 0x3)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
unshare(0x24020400)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0xc000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
accept$alg(r7, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

2.703214535s ago: executing program 1 (id=3225):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, [], "caa7c1b7f4c336af"}}}}}}}, 0x0)

2.646571737s ago: executing program 1 (id=3226):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfff, 0x2, @rand_addr=' \x01\x00', @mcast2, 0x8040, 0x80, 0x4, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r5, 0x101, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20004884}, 0x4008000)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x53)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @remote}})
ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @random="880fccdf3864"}, 0x38, {0x2, 0x2, @broadcast}, 'ip6gre0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, 0x0, 0x24044884)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0)

2.491151655s ago: executing program 3 (id=3227):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x715076167876ede7)
sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000200))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/183, 0xb7}], 0x2}, 0x9e9f}], 0x2, 0x0, 0x0)

1.727484297s ago: executing program 0 (id=3229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x20000000, 0x0, {{}, {0x0, 0x4000}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

1.655934716s ago: executing program 0 (id=3230):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000080}, 0x800)

1.63859462s ago: executing program 2 (id=3231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0xd5f810af1735f624}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000440)={0xf8, 0x24, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xe8, 0x6e, 0x0, 0x1, [@generic="f535ddd9f0500c832d54b020017ca27e3ec7e9a3135b6b29ebfa2b84b340c8d871e9b6bcfcd128defb68fb1548a6b5cb1d48d0cbc2dac7c73ff129177e77e01c1be3185b88efc283a994a13100f7ae9f5d383ab34eaf401bd438b7d48be85c487f0d6bd4b46b1bb1474c63a4888a79a2f3da641f56eb9988ddfbba48bb65d2b9f1f3b25c0fa5a13595", @nested={0x4, 0x83}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="ab27ca9cf0a301502506d626c963ddfc7076400794eab24cb707765b9ddd863ed23b41ce2b80a8bdabcff428f027fe8f99ca9490c5aac3074bccf0"]}]}, 0xf8}], 0x1, 0x0, 0x0, 0x80}, 0x41)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2)
recvmmsg(r8, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0)
getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00000000000000000c000008001900", @ANYBLOB="06a4000000230000"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844)
r9 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

1.515539078s ago: executing program 3 (id=3232):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x21}, 0x20000814)
recvmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010161, 0x0)

1.288321968s ago: executing program 3 (id=3233):
unshare(0x480)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)

1.287685831s ago: executing program 0 (id=3234):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c4000006800e9780000000004fd6dfeba13bddb7256b6"], 0x1c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x75f, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x9a, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x3, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "2567a2cba4445c093fe1c104757fd7504aceef28ceab502a88b99d1735806300", 0x3, 0x24e4, 0x0, 0x401}, 0x3c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

1.169469208s ago: executing program 2 (id=3235):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
listen(r2, 0x3)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
unshare(0x24020400)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0xc000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
accept$alg(r7, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

1.132088871s ago: executing program 3 (id=3236):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="a6d4b111dd1e0121f73c19692e90cce3d998ec0d799d6617e7a06fceb76d7a90ecd652784ded32c806a6f9c166875f32d37356ea022a55970ff37c01fc6825966a5be9eca080a5e7ef497741fea0f403dd05143f3cac5da93be32a631d671987be01824051652abef402fc17ef3f10665636993365a5d7113999a850f741a2c690d1b32cb6ca3869532e585a64709ec6e37afae6f782738327d6c2817acf703f81", 0xa1}], 0x1}}], 0x1, 0x715076167876ede7)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r2, 0x1)
shutdown(r2, 0x0)
pipe(&(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/183, 0xb7}], 0x2}, 0x9e9f}], 0x2, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x33, 0x107, 0x0, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x18, 0x0, 0x0, @binary='\vv2'}]}]}, 0x30}}, 0x4010)

813.749953ms ago: executing program 2 (id=3237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

806.552067ms ago: executing program 4 (id=3238):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14)
close(0x3)
r4 = accept(r0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0)
connect$unix(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

639.064481ms ago: executing program 2 (id=3239):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x5e8, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)

582.964315ms ago: executing program 1 (id=3240):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000045c0)=@newqdisc={0x87c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x850, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PTAB={0x404, 0x3, [0x514, 0x2, 0x2, 0xf, 0x1, 0x2, 0x1c, 0x9, 0x4, 0x6, 0xbe, 0x7, 0x3, 0x6, 0x3, 0x3, 0x2ea6, 0x2, 0xff2, 0x2, 0x7, 0x1ff, 0x7fffffff, 0xfff, 0x5, 0x100, 0xfffffffc, 0x0, 0x6, 0xa9, 0xc3c, 0x8, 0x5, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x40, 0x4, 0x4a3e, 0xe, 0xf181, 0x0, 0x4, 0x8, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x5, 0x1, 0xc, 0x4, 0x0, 0x80000001, 0x2, 0x7, 0x5, 0x100, 0x6, 0x2, 0x1, 0x0, 0x800, 0x7fffffff, 0x8, 0x4, 0x3, 0x9, 0x1ff, 0x2, 0x4, 0x2, 0x4, 0x1f1, 0x5, 0x4, 0xa564, 0xd3a4, 0xf, 0x4, 0x4, 0x9, 0x0, 0xc0, 0x3, 0x7, 0x80, 0x400, 0x200, 0x6, 0x9, 0x2, 0x0, 0x0, 0x5, 0x2, 0x5, 0x1, 0xffffffff, 0x9, 0x1, 0x401, 0xffffffff, 0x1, 0x0, 0x2, 0x1000, 0xdfc0, 0x8, 0x6, 0x3, 0xfffffff9, 0x6, 0x3cda, 0x5, 0xffffffff, 0x5, 0x8000, 0x80000001, 0xf61, 0x5, 0x9d59f5f, 0x0, 0xff, 0x10001, 0xfffffffe, 0x2, 0x4, 0x3, 0xfffffffb, 0x7ff, 0xc4a3, 0x0, 0x0, 0x93fa, 0x10000, 0x0, 0x8, 0x2, 0xfffffff9, 0x8, 0x5, 0x281, 0x6, 0x10000, 0x5, 0x1, 0x31db, 0x6, 0x4, 0x1, 0x8, 0x401, 0x9, 0xfffffff8, 0xfffff801, 0x0, 0x65b, 0x6, 0x6, 0xffff, 0x2d0a0f73, 0xc1000000, 0xa0, 0x4, 0x7179, 0x5, 0x0, 0x9, 0x9, 0x3f, 0x40000000, 0x4, 0x8db, 0x1000, 0x6, 0xd59, 0xffff, 0x7fffffff, 0x80, 0x0, 0x8000, 0xd7c9, 0xc, 0x10, 0x3, 0xe8, 0x5, 0x4, 0x1eecdbc0, 0x0, 0x2, 0x1000, 0x9, 0x7, 0x6, 0x4, 0xe, 0xffff, 0x933, 0x7, 0x1c66fe06, 0xdea, 0x5, 0x8, 0x80, 0x5, 0x4, 0x8, 0x101, 0x401, 0x6, 0x850, 0x171eaf8c, 0x7, 0x100, 0xd6d, 0x9, 0x1ff, 0xfffffffe, 0xfbb, 0x6, 0x81, 0x7, 0x10001, 0x4, 0x80000001, 0x10, 0xc, 0x9, 0x4, 0x6, 0x7, 0x5, 0x7, 0xfff, 0x7fff, 0x3, 0x1, 0x8, 0x1, 0x6, 0xd52, 0x7, 0xfe, 0x7, 0x2, 0x5342, 0x6, 0x6, 0x6, 0x1, 0x8, 0x6]}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0xf038, 0x1, 0x1, 0x40, 0x54, 0x1ff, 0x40, 0xd1, 0x1, 0x9, 0x8, 0x7dc, 0x1, 0x1, 0x1, 0x8, 0x6, 0x5, 0x3, 0x2, 0x7fff, 0xfffffffc, 0x2, 0x3, 0xffff, 0x5, 0x5, 0x400, 0xfffffffe, 0x6, 0x8, 0x0, 0x1, 0x8001, 0x7, 0xfffffffb, 0x3, 0x6, 0x4f251e72, 0x401, 0x1, 0x0, 0x80000001, 0xc, 0x6b3, 0x3, 0xdff, 0x1, 0xe0000, 0x7fffffff, 0x0, 0x0, 0x76b, 0xfffff9a4, 0x3b3a, 0xf, 0x1, 0x5, 0x2, 0x8001, 0xff, 0x80, 0xb3e8, 0x0, 0x3, 0x7fffffff, 0x8, 0x3, 0x5, 0xae0, 0x9, 0x3, 0x24ce, 0x2, 0x1969c21, 0x4, 0x1, 0x1, 0x3, 0xb17e, 0x1, 0x8, 0x6, 0x1ff, 0x0, 0xffff, 0x40, 0x1daf, 0xd, 0x80000001, 0x2, 0x2, 0x81, 0x4ee, 0x6, 0x3, 0xfffffff8, 0x7, 0x6bf8, 0x1, 0x200, 0x1d, 0x9, 0x7, 0xc, 0x800, 0x4, 0xb7, 0x823e, 0x100, 0x7, 0x439, 0x2, 0x4, 0xbb, 0x8, 0x4c, 0x6, 0x8, 0x3ff, 0x10, 0xfff, 0x9, 0xa01, 0x0, 0x50, 0x6, 0x5, 0x9, 0x0, 0x5, 0x684, 0xb, 0x4, 0xf, 0x8, 0x7, 0xe21, 0xfffffffc, 0xa, 0x1, 0x7, 0x6, 0x18b54000, 0xb, 0x5, 0x4, 0x1, 0x8, 0x7, 0xffff8001, 0x57, 0x2e7, 0x3, 0x400, 0xffffffff, 0x9, 0xb, 0x92, 0x80, 0xa, 0x9, 0x5, 0x40, 0x7ff, 0x1, 0x1, 0xff, 0x0, 0xd, 0x3, 0x4, 0x80000000, 0x8, 0x10, 0xffffffff, 0x7, 0x7443, 0xef86, 0x2, 0x7f, 0x7, 0xfffffffb, 0x0, 0xac8a, 0x100, 0xae, 0x48, 0x1, 0x1, 0x5, 0x5, 0x7, 0x9, 0xa, 0x1ff, 0x20000, 0xb, 0x8, 0xcc, 0x2, 0x5, 0x7, 0xea000000, 0x1, 0x0, 0x0, 0x4, 0x1fac0, 0x0, 0x58, 0x9, 0x1ff, 0x1ec0c3a9, 0x89bc, 0xfff, 0x9, 0x5c87, 0x5, 0x8, 0x4, 0x8, 0x2, 0xbd0, 0xe29, 0x6, 0x0, 0x3, 0x1, 0x9, 0x3, 0x1000, 0x9, 0xffffc58b, 0x7, 0x10000, 0x2, 0xb3, 0x221, 0x1, 0x9, 0x8001, 0x3, 0x1, 0x56, 0x2, 0xa9, 0x2e, 0x3, 0x1, 0x7, 0xff, 0xb, 0xb9f, 0xfffffff7]}]}}]}, 0x87c}}, 0x4000080)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

530.896679ms ago: executing program 2 (id=3241):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

384.851763ms ago: executing program 2 (id=3242):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x715076167876ede7)
sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000200))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/183, 0xb7}], 0x2}, 0x9e9f}], 0x2, 0x0, 0x0)

261.955245ms ago: executing program 0 (id=3243):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f00000010c0)}], 0x2}}], 0x1, 0x4000000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8994, &(0x7f0000000580)={'bond0\x00'})

192.565026ms ago: executing program 3 (id=3244):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getpeername(r0, 0x0, &(0x7f0000000000))

134.29476ms ago: executing program 1 (id=3245):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

112.254634ms ago: executing program 0 (id=3246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0xd5f810af1735f624}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000440)={0xf8, 0x24, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xe8, 0x6e, 0x0, 0x1, [@generic="f535ddd9f0500c832d54b020017ca27e3ec7e9a3135b6b29ebfa2b84b340c8d871e9b6bcfcd128defb68fb1548a6b5cb1d48d0cbc2dac7c73ff129177e77e01c1be3185b88efc283a994a13100f7ae9f5d383ab34eaf401bd438b7d48be85c487f0d6bd4b46b1bb1474c63a4888a79a2f3da641f56eb9988ddfbba48bb65d2b9f1f3b25c0fa5a13595", @nested={0x4, 0x83}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="ab27ca9cf0a301502506d626c963ddfc7076400794eab24cb707765b9ddd863ed23b41ce2b80a8bdabcff428f027fe8f99ca9490c5aac3074bccf0"]}]}, 0xf8}], 0x1, 0x0, 0x0, 0x80}, 0x41)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0)
getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00000000000000000c000008001900", @ANYBLOB="06a4000000230000"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844)
r8 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

20.62737ms ago: executing program 1 (id=3247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

0s ago: executing program 0 (id=3248):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000880)="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", 0x3f7}, {&(0x7f0000001880)="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", 0x3ec}], 0x2}}], 0x1, 0x4000000)

kernel console output (not intermixed with test programs):

ocess `syz.3.2023'.
[  426.282604][T13060] sch_tbf: burst 5 is lower than device bridge10 mtu (1514) !
[  426.446094][T13065] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.495520][T13065] 8021q: adding VLAN 0 to HW filter on device team0
[  426.546405][T13065] batman_adv: batadv0: Interface activated: team0
[  426.624255][T13065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.677424][T13068] xt_hashlimit: size too large, truncated to 1048576
[  426.944699][T13079] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2032'.
[  427.106135][T13082] xt_hashlimit: size too large, truncated to 1048576
[  427.807619][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'.
[  427.875990][T13104] sch_tbf: burst 5 is lower than device bridge14 mtu (1514) !
[  428.140169][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2042'.
[  428.149558][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2042'.
[  428.167106][T13108] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2042'.
[  428.176985][T13108] netlink: zone id is out of range
[  428.184937][T13108] netlink: zone id is out of range
[  428.215029][T13108] netlink: zone id is out of range
[  428.225147][T13108] netlink: zone id is out of range
[  428.226454][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'.
[  428.240828][T13108] netlink: zone id is out of range
[  428.255246][T13108] netlink: zone id is out of range
[  428.265055][T13108] netlink: zone id is out of range
[  428.272217][T13108] netlink: zone id is out of range
[  428.279705][T13108] netlink: zone id is out of range
[  428.407350][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'.
[  428.417602][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2040'.
[  428.427081][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'.
[  428.436780][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2040'.
[  428.558557][T13123] xt_hashlimit: size too large, truncated to 1048576
[  429.472253][T13137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  430.682984][T13156] sch_tbf: burst 5 is lower than device bridge11 mtu (1514) !
[  430.811189][T13158] bridge15: port 1(veth11) entered blocking state
[  430.819856][T13158] bridge15: port 1(veth11) entered disabled state
[  430.827044][T13158] veth11: entered allmulticast mode
[  430.843139][T13158] veth11: entered promiscuous mode
[  430.851233][T13159] veth0_to_bond: left allmulticast mode
[  430.862642][T13159] bridge15: port 2(veth0_to_bond) entered blocking state
[  430.869852][T13159] bridge15: port 2(veth0_to_bond) entered disabled state
[  430.877382][T13159] veth0_to_bond: entered allmulticast mode
[  430.885655][T13159] veth0_to_bond: entered promiscuous mode
[  430.959575][T13160] vlan0: entered allmulticast mode
[  430.968772][T13160] veth1: entered allmulticast mode
[  430.977111][T13160] bridge15: port 3(vlan0) entered blocking state
[  430.983885][T13160] bridge15: port 3(vlan0) entered disabled state
[  430.994661][T13160] vlan0: entered promiscuous mode
[  430.999707][T13160] veth1: entered promiscuous mode
[  431.074197][T13165] sch_tbf: burst 5 is lower than device bridge16 mtu (1514) !
[  431.478275][T13183] rdma_rxe: rxe_newlink: failed to add lo
[  431.674775][T13193] net_ratelimit: 4061 callbacks suppressed
[  431.674797][T13193] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  431.743871][T13186] openvswitch: netlink: Flow actions attr not present in new flow.
[  431.804970][T13189] bond0: (slave bridge0): Releasing backup interface
[  431.815330][T13189] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  431.864963][T13189] bridge0 (unregistering): left promiscuous mode
[  431.957242][T13195] macsec1: entered promiscuous mode
[  431.964771][T13195] macsec1: entered allmulticast mode
[  432.012023][T13193] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.361767][T13193] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.426546][T13193] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.582052][T13211] wireguard0: entered promiscuous mode
[  432.610051][T13211] wireguard0: entered allmulticast mode
[  432.716168][T13205] __nla_validate_parse: 6 callbacks suppressed
[  432.716187][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'.
[  433.279144][T13225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2069'.
[  433.290331][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'.
[  434.339371][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  434.519312][T13231] batman_adv: batadv0: Interface deactivated: team0
[  434.643029][T13231] macsec1: left promiscuous mode
[  434.672435][T13231] macsec1: left allmulticast mode
[  434.697699][T13243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.801166][T13255] sch_tbf: burst 5 is lower than device bridge17 mtu (1514) !
[  435.665114][T13279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.724103][T13279] netlink: 'syz.0.2084': attribute type 10 has an invalid length.
[  435.732127][T13279] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  435.885066][T13284] netlink: 'syz.1.2085': attribute type 9 has an invalid length.
[  435.914658][T13284] netlink: 'syz.1.2085': attribute type 6 has an invalid length.
[  436.511697][T13296] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  436.736065][T13301] netlink: 'syz.4.2089': attribute type 39 has an invalid length.
[  436.860965][T13304] xt_hashlimit: size too large, truncated to 1048576
[  437.533439][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  437.554363][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  437.605566][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  437.664726][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  437.739514][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  438.646511][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'.
[  438.693551][ T1325] wlan1: Trigger new scan to find an IBSS to join
[  438.722945][T13333] siw: device registration error -23
[  439.793834][T13348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2102'.
[  439.871707][T13350] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  439.879494][T13350] netlink: 'syz.1.2103': attribute type 2 has an invalid length.
[  440.134642][T13361] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  440.353607][T13369] xt_hashlimit: size too large, truncated to 1048576
[  440.774757][T13378] tipc: New replicast peer: 255.255.255.255
[  440.792346][T13378] tipc: Enabled bearer <udp:syz2>, priority 10
[  440.976997][T13378] vxcan3: entered allmulticast mode
[  441.153352][T13384] netlink: 'syz.0.2112': attribute type 10 has an invalid length.
[  441.192042][T13384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2112'.
[  441.243853][T13384] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  441.446885][T13387] netlink: 'syz.3.2113': attribute type 3 has an invalid length.
[  442.543576][T13411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2119'.
[  442.903549][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'.
[  443.012575][T13419] sch_tbf: burst 5 is lower than device bridge19 mtu (1514) !
[  443.545316][T13431] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  443.682931][T13439] vxcan1: entered allmulticast mode
[  443.693197][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2129'.
[  443.732601][T10295] wlan1: Trigger new scan to find an IBSS to join
[  443.865485][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2129'.
[  444.048220][T13449] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  444.061686][T13449] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  444.094079][T13449] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  444.258879][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'.
[  444.315536][T13458] sch_tbf: burst 5 is lower than device bridge18 mtu (1514) !
[  444.328829][T13459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2135'.
[  444.618556][T13467] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  444.657941][T10295] wlan1: Creating new IBSS network, BSSID 0a:00:00:00:00:00
[  446.673900][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'.
[  447.942832][T13518] sch_tbf: burst 5 is lower than device bridge23 mtu (1514) !
[  448.186568][T13530] xt_hashlimit: size too large, truncated to 1048576
[  448.222780][T13532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'.
[  448.264297][T13532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'.
[  448.277757][T13536] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  448.472071][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'.
[  449.352876][T13554] IPVS: Scheduler module ip_vs_sip not found
[  449.487226][T13565] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  449.506843][T13565] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  449.508295][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'.
[  449.537960][T13567] sch_tbf: burst 5 is lower than device bridge0 mtu (1514) !
[  450.046851][T13573] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2164'.
[  450.203018][T13577] netlink: 'syz.4.2165': attribute type 9 has an invalid length.
[  450.211024][T13577] netlink: 'syz.4.2165': attribute type 6 has an invalid length.
[  450.266770][T13581] xt_hashlimit: size too large, truncated to 1048576
[  450.524602][T13573] bond0 (unregistering): Released all slaves
[  450.884941][T13596] syz.1.2169 (13596) used obsolete PPPIOCDETACH ioctl
[  451.042073][T13606] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  451.429024][T13615] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2186'.
[  451.783899][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'.
[  452.099296][T13625] sch_tbf: burst 5 is lower than device bridge12 mtu (1514) !
[  452.282195][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'.
[  452.334874][T13634] xt_hashlimit: size too large, truncated to 1048576
[  452.546522][T13644] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  452.629425][T13649] syzkaller1: entered promiscuous mode
[  452.643530][T13649] syzkaller1: entered allmulticast mode
[  452.701170][T13653] dummy0: left allmulticast mode
[  452.720251][T13653] dummy0: left promiscuous mode
[  452.752819][T13653] bridge0: port 1(dummy0) entered disabled state
[  452.810784][T13653] veth0_to_bond: left allmulticast mode
[  452.835020][T13653] veth0_to_bond: left promiscuous mode
[  452.840888][T13653] bridge15: port 2(veth0_to_bond) entered disabled state
[  452.865399][T13653] bond3: (slave gretap1): Releasing active interface
[  452.907287][T13653] bond4: (slave bridge10): Releasing backup interface
[  452.939314][T13653] bond5: (slave ip6gretap1): Releasing backup interface
[  452.958909][T13653] bond5: (slave ip6gretap1): the permanent HWaddr of slave - de:11:fd:fc:63:18 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  452.978761][T13661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2188'.
[  453.002771][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'.
[  453.025728][T13653] bond5: (slave veth9): Releasing backup interface
[  453.056216][T13653] veth11: left allmulticast mode
[  453.061235][T13653] veth11: left promiscuous mode
[  453.101912][T13653] bridge15: port 1(veth11) entered disabled state
[  453.123752][T13653] vlan0: left promiscuous mode
[  453.128563][T13653] veth1: left promiscuous mode
[  453.134211][T13653] bridge15: port 3(vlan0) entered disabled state
[  453.410473][T13667] __nla_validate_parse: 2 callbacks suppressed
[  453.410492][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'.
[  453.431829][T13670] !
: renamed from dummy0 (while UP)
[  453.491859][T13673] sch_tbf: burst 5 is lower than device bridge24 mtu (1514) !
[  453.555269][T13677] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  454.962147][T13708] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2195'.
[  454.980292][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'.
[  455.100402][T13708] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2195'.
[  455.115210][T13708] gretap0: entered promiscuous mode
[  456.134339][T13732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2202'.
[  456.192624][T13732] netlink: 'syz.4.2202': attribute type 29 has an invalid length.
[  456.652265][T13743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.744668][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'.
[  456.828459][T13743] siw: device registration error -23
[  457.048656][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'.
[  458.792736][T13761] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2210'.
[  458.884454][T13778] netlink: 'syz.2.2213': attribute type 1 has an invalid length.
[  458.892416][T13778] netlink: 'syz.2.2213': attribute type 2 has an invalid length.
[  459.050624][T13780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2215'.
[  459.651567][T13788] netlink: 'syz.2.2217': attribute type 10 has an invalid length.
[  459.660931][T13788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2217'.
[  459.779765][T13788] bridge0: port 1(
0!
) entered blocking state
[  459.796010][T13788] bridge0: port 1(
0!
) entered disabled state
[  459.815106][T13788] !
: entered allmulticast mode
[  459.866507][T13788] !
: entered promiscuous mode
[  459.875635][T13788] bridge0: port 1(
0!
) entered blocking state
[  459.882015][T13788] bridge0: port 1(
0!
) entered forwarding state
[  460.917171][T13807] rdma_rxe: rxe_newlink: failed to add lo
[  461.075273][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'.
[  461.298620][T13811] sch_tbf: burst 5 is lower than device bridge20 mtu (1514) !
[  461.445572][T13817] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  461.565125][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'.
[  461.591756][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'.
[  461.600745][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'.
[  462.343197][T13835] macsec0: entered promiscuous mode
[  462.423258][T13835] macsec0: entered allmulticast mode
[  463.458857][T13868] bridge0: port 1(
0!
) entered disabled state
[  463.502687][T13868] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  463.672688][T13876] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2235'.
[  463.689666][T13868] bridge14: left promiscuous mode
[  463.721433][T13868] bridge14: left allmulticast mode
[  463.727691][T13868] xfrm1: left promiscuous mode
[  463.751645][T13868] xfrm1: left allmulticast mode
[  463.818272][T13881] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  464.003852][T13868] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  464.226463][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'.
[  464.730760][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'.
[  464.807925][T13905] sch_tbf: burst 5 is lower than device bridge19 mtu (1514) !
[  464.910808][T13907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2240'.
[  465.077951][T13897] xt_CT: No such helper "snmp"
[  465.612076][T13918] netlink: 'syz.4.2242': attribute type 1 has an invalid length.
[  465.641107][T13918] netlink: 'syz.4.2242': attribute type 2 has an invalid length.
[  466.565593][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'.
[  466.814087][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'.
[  467.059549][T13931] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  467.467496][T13942] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  467.652458][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'.
[  467.878869][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2262'.
[  467.889830][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2262'.
[  467.991723][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2262'.
[  468.000778][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2262'.
[  468.383024][T13964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.667827][T13973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16
[  469.356208][T13985] __nla_validate_parse: 2 callbacks suppressed
[  469.356230][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2258'.
[  470.075773][T14000] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  470.110290][T14002] tc_dump_action: action bad kind
[  470.529834][T14005] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  471.094562][T14012] macsec0: entered promiscuous mode
[  471.123000][T14012] macsec0: entered allmulticast mode
[  471.491872][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  471.824156][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'.
[  471.903936][T14033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2271'.
[  471.926250][T14036] netlink: 'syz.1.2272': attribute type 4 has an invalid length.
[  472.253591][T14049] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  472.527432][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  472.622501][T14056] netlink: 'syz.1.2279': attribute type 10 has an invalid length.
[  472.660955][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2279'.
[  472.786734][T14056] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  473.247630][T14076] netlink: 'syz.1.2283': attribute type 13 has an invalid length.
[  473.277501][T14076] netlink: 'syz.1.2283': attribute type 17 has an invalid length.
[  473.319885][T14076] gretap0: refused to change device tx_queue_len
[  473.351496][T14076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  474.016108][T14087] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  474.044508][T14087] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  474.066911][T14087] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2286'.
[  474.740927][T14100] netlink: 'syz.3.2292': attribute type 13 has an invalid length.
[  475.871018][T14117] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  475.885057][T14118] netlink: 'syz.3.2293': attribute type 4 has an invalid length.
[  476.525046][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'.
[  476.667141][T14130] sch_tbf: burst 5 is lower than device bridge22 mtu (1514) !
[  476.845895][T14132] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.895507][T14132] bridge0: port 1(
0!
) entered blocking state
[  476.902139][T14132] bridge0: port 1(
0!
) entered forwarding state
[  476.928131][T14132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.001660][T14136] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2300'.
[  478.059584][T14158] netlink: 'syz.1.2307': attribute type 12 has an invalid length.
[  478.073225][T14158] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2307'.
[  479.405629][T14199] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  479.421858][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'.
[  479.502349][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2317'.
[  480.632671][T14220] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.646039][T14220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.393241][T14235] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  481.456073][T14235] Bluetooth: hci0: Opcode 0x080f failed: -22
[  481.558576][T14237] bridge0: port 1(macvlan2) entered blocking state
[  481.591883][T14237] bridge0: port 1(macvlan2) entered disabled state
[  481.612282][T14237] macvlan2: entered allmulticast mode
[  481.617705][T14237] veth0: entered allmulticast mode
[  481.653411][T14237] macvlan2: entered promiscuous mode
[  482.805567][T14264] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2333'.
[  482.816592][T14264] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2333'.
[  483.373362][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'.
[  483.491757][ T5155] Bluetooth: hci0: command tx timeout
[  483.499120][T14292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17
[  485.370930][T14323] gretap0: left promiscuous mode
[  485.392698][T14323] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  485.410777][T14326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2348'.
[  485.949654][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'.
[  487.087078][T14364] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  487.162042][T14371] wireguard0: entered promiscuous mode
[  487.173314][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'.
[  487.254657][T14371] wireguard0: entered allmulticast mode
[  487.361277][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2364'.
[  487.393302][T14389] netlink: 'syz.4.2363': attribute type 7 has an invalid length.
[  487.492616][ T5155] Bluetooth: hci3: command 0x0405 tx timeout
[  487.905777][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2366'.
[  487.997168][T14407] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  488.035749][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2368'.
[  489.039975][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'.
[  489.554580][T14439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  489.641716][T14445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  489.746817][T14439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.234136][T14447] bridge0: port 1(
0!
) entered disabled state
[  490.316666][T14447] macsec0: left promiscuous mode
[  490.328955][T14447] macsec0: left allmulticast mode
[  490.498145][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'.
[  490.848013][T14467] !
: left allmulticast mode
[  490.858736][T14467] !
: left promiscuous mode
[  490.868844][T14467] bridge0: port 1(
0!
) entered disabled state
[  490.884861][T14467] batman_adv: batadv0: Removing interface: virt_wifi0
[  490.905462][T14467] batman_adv: batadv0: Removing interface: ip6gretap1
[  491.006833][T14472] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.018631][T14472] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  491.414915][T14483] netlink: 'syz.4.2382': attribute type 4 has an invalid length.
[  491.809181][T14494] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  492.867406][T14519] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18
[  493.115324][T14525] xt_hashlimit: size too large, truncated to 1048576
[  493.265737][T14533] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  493.545538][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'.
[  493.624606][T14543] netlink: 'syz.2.2396': attribute type 10 has an invalid length.
[  493.673624][T14543] openvswitch: netlink: Flow key attr not present in new flow.
[  494.023505][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2399'.
[  494.323447][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2401'.
[  494.646121][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'.
[  494.754519][T14580] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  494.763096][T14580] netlink: 'syz.1.2404': attribute type 2 has an invalid length.
[  494.909617][T14579] sch_tbf: burst 5 is lower than device bridge13 mtu (1514) !
[  495.576486][T14596] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2409'.
[  495.927687][T14604] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  496.270686][T14609] netlink: 'syz.1.2413': attribute type 1 has an invalid length.
[  496.311452][T14609] netlink: 'syz.1.2413': attribute type 2 has an invalid length.
[  497.262382][T14625] netlink: 'syz.1.2417': attribute type 1 has an invalid length.
[  497.283569][T14625] netlink: 'syz.1.2417': attribute type 2 has an invalid length.
[  497.562173][T14632] netlink: 'syz.4.2419': attribute type 10 has an invalid length.
[  498.332232][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'.
[  498.454489][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'.
[  498.793924][T14645] sch_tbf: burst 5 is lower than device bridge20 mtu (1514) !
[  498.795668][T14650] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  499.535376][T14672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19
[  499.724096][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'.
[  499.760393][T14679] sch_tbf: burst 5 is lower than device bridge14 mtu (1514) !
[  499.819544][T14681] netlink: 'syz.0.2432': attribute type 1 has an invalid length.
[  499.833392][T14681] netlink: 'syz.0.2432': attribute type 2 has an invalid length.
[  500.077172][T14688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2434'.
[  500.471779][T14700] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  501.217731][T14718] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  501.511565][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'.
[  501.563297][T14726] xt_TCPMSS: Only works on TCP SYN packets
[  501.583148][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'.
[  502.155621][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'.
[  502.174848][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2447'.
[  502.194430][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'.
[  502.217067][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'.
[  502.538203][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'.
[  502.786848][T14752] sch_tbf: burst 5 is lower than device bridge24 mtu (1514) !
[  503.132416][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  503.167091][T14762] netlink: 'syz.4.2454': attribute type 13 has an invalid length.
[  503.617902][T14770] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  504.001161][T14759] xt_hashlimit: size too large, truncated to 1048576
[  504.634849][T14787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  504.666768][T14794] xt_hashlimit: size too large, truncated to 1048576
[  504.694962][T14794] xt_hashlimit: overflow, try lower: 3/0
[  504.739714][T14794] Unsupported ieee802154 address type: 0
[  506.126325][T14824] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  506.502836][T14819] bridge0: port 1(
0!
) entered disabled state
[  506.596930][T14819] erspan0: left allmulticast mode
[  506.615163][T14819] macvtap0: left promiscuous mode
[  506.620248][T14819] macvtap0: left allmulticast mode
[  506.632943][T14819] veth9: left promiscuous mode
[  506.679371][T14819] vlan0: left allmulticast mode
[  506.691435][T14819] veth1: left allmulticast mode
[  506.801236][T14831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20
[  507.198562][T14850] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  507.419711][T14854] __nla_validate_parse: 2 callbacks suppressed
[  507.419729][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'.
[  507.587990][T14859] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20003
[  507.594593][T14860] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2477'.
[  507.610286][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'.
[  507.799459][T14865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'.
[  507.938562][T14869] netlink: 'syz.3.2479': attribute type 1 has an invalid length.
[  507.960702][T14869] netlink: 'syz.3.2479': attribute type 2 has an invalid length.
[  508.334460][T14877] Cannot find add_set index 4 as target
[  509.251435][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  509.978355][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'.
[  510.008971][T14903] sch_tbf: burst 5 is lower than device bridge16 mtu (1514) !
[  510.733901][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'.
[  511.418664][T14925] netlink: 'syz.4.2494': attribute type 13 has an invalid length.
[  511.426957][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2493'.
[  511.687319][T14926] sch_tbf: burst 5 is lower than device bridge15 mtu (1514) !
[  511.839117][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'.
[  511.868918][T14932] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2495'.
[  512.139589][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.278039][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.362387][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.513338][T14932] xt_hashlimit: size too large, truncated to 1048576
[  512.541750][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  513.505011][T14950] siw: device registration error -23
[  513.606143][T14953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21
[  514.081758][T14971] batman_adv: batadv0: Removing interface: team0
[  514.152470][T14968] netlink: 'syz.0.2501': attribute type 10 has an invalid length.
[  514.225923][T14971] bond6: (slave veth0_to_bond): Releasing active interface
[  514.256674][T14971] bond5: left allmulticast mode
[  514.271878][T14971] bond5: left promiscuous mode
[  514.285891][T14971] bridge0: port 1(bond5) entered disabled state
[  514.293736][T14976] netlink: 'syz.4.2503': attribute type 1 has an invalid length.
[  514.847354][T14968] bond0: (slave wlan1): refused to change device type
[  515.000417][T14985] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2504'.
[  515.032268][T14985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.052356][T14979] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  515.092318][ T1340] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  515.112623][T14980] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.188150][T14991] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  515.203909][T14981] veth7: entered promiscuous mode
[  515.216580][T14981] bond1: (slave veth7): Enslaving as a backup interface with a down link
[  515.230188][T14982] macvlan2: left allmulticast mode
[  515.236648][T14982] macvlan2: left promiscuous mode
[  515.242398][T14982] bridge0: port 1(macvlan2) entered disabled state
[  515.253782][ T1325] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  515.265976][T14982] bond1: (slave ip6gretap1): Removing an active aggregator
[  515.274768][T14982] bond1: (slave ip6gretap1): Releasing active interface
[  515.284471][T14982] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 0a:43:99:eb:6b:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  515.325508][T14982] bond1: (slave veth7): Releasing backup interface
[  516.078085][T15009] erspan0: left promiscuous mode
[  516.159561][T15009] 8021q: adding VLAN 0 to HW filter on device team0
[  516.184327][T15009] bridge0: port 1(
0!
) entered blocking state
[  516.191794][T15009] bridge0: port 1(
0!
) entered listening state
[  516.204510][T15009] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  516.907568][T15023] can: request_module (can-proto-3) failed.
[  517.172103][T15030] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  517.772913][T15040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22
[  517.981055][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  518.771566][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  518.854765][T15036] bridge0: port 1(
0!
) entered disabled state
[  518.902543][T15047] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  518.940767][T15047] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  518.981490][T15047] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  519.137046][T15064] netlink: 'syz.0.2524': attribute type 1 has an invalid length.
[  519.312894][T15069] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  519.322478][T15075] netlink: 'syz.1.2525': attribute type 1 has an invalid length.
[  519.346175][T15075] netlink: 'syz.1.2525': attribute type 2 has an invalid length.
[  519.377378][T15064] 8021q: adding VLAN 0 to HW filter on device bond7
[  519.384160][ T1340] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  519.443823][T15069] veth1: entered promiscuous mode
[  519.469506][T15069] bond7: (slave veth1): Enslaving as a backup interface with a down link
[  519.512274][ T3538] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  519.536245][T15064] bond7: (slave ip6gretap1): Removing an active aggregator
[  519.546172][T15064] bond7: (slave ip6gretap1): Releasing backup interface
[  519.558824][T15064] bond7: (slave ip6gretap1): the permanent HWaddr of slave - c6:12:33:33:84:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  519.596049][T15064] bond7: (slave veth1): Releasing backup interface
[  519.773776][T15077] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  519.783862][T15077] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2526'.
[  519.794859][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2526'.
[  520.184423][T15090] netlink: 'syz.0.2527': attribute type 5 has an invalid length.
[  521.641834][T15112] netlink: 'syz.1.2536': attribute type 1 has an invalid length.
[  521.800657][T15115] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  521.826047][T15121] netlink: 'syz.3.2534': attribute type 1 has an invalid length.
[  521.835670][T15121] netlink: 'syz.3.2534': attribute type 2 has an invalid length.
[  521.849161][ T3538] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  521.850861][T15117] 8021q: adding VLAN 0 to HW filter on device bond4
[  521.863996][T15122] netlink: 'syz.4.2537': attribute type 1 has an invalid length.
[  521.892356][T15122] netlink: 'syz.4.2537': attribute type 2 has an invalid length.
[  521.924700][T15112] veth11: entered promiscuous mode
[  521.952997][T15112] bond4: (slave veth11): Enslaving as a backup interface with a down link
[  521.973539][T15115] bond4: (slave ip6gretap2): Removing an active aggregator
[  521.985767][T15115] bond4: (slave ip6gretap2): Releasing backup interface
[  522.002129][T15115] bond4: (slave ip6gretap2): the permanent HWaddr of slave - 5e:91:d1:29:33:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  522.044058][T15115] bond4: (slave veth11): Releasing backup interface
[  522.182278][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'.
[  522.227110][T15123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'.
[  522.657407][T15132] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2539'.
[  522.719352][T15138] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  523.097029][T15145] netlink: 'syz.3.2541': attribute type 1 has an invalid length.
[  523.125703][T15145] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2541'.
[  523.149278][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'.
[  523.365033][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'.
[  524.668235][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2548'.
[  524.745886][T15166] sch_tbf: burst 5 is lower than device bridge26 mtu (1514) !
[  525.002681][T15177] xt_hashlimit: size too large, truncated to 1048576
[  525.094841][T15182] netlink: 'syz.4.2550': attribute type 1 has an invalid length.
[  525.102803][T15182] netlink: 'syz.4.2550': attribute type 2 has an invalid length.
[  525.218749][T15184] 8021q: adding VLAN 0 to HW filter on device bond5
[  525.234315][T15184] bridge0: port 1(bond5) entered blocking state
[  525.241822][T15184] bridge0: port 1(bond5) entered disabled state
[  525.248514][T15184] bond5: entered allmulticast mode
[  525.256910][T15184] bond5: entered promiscuous mode
[  525.300061][T15184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'.
[  525.325592][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'.
[  525.387007][T15189] netlink: 'syz.2.2553': attribute type 13 has an invalid length.
[  525.544682][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'.
[  525.742327][T15199] batadv1: entered promiscuous mode
[  525.751578][T15199] batadv1: entered allmulticast mode
[  525.894941][T15205] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  526.295310][T15207] wireguard0: entered promiscuous mode
[  526.327722][T15207] wireguard0: entered allmulticast mode
[  526.388487][T15216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  526.424741][T15209] wg1: entered promiscuous mode
[  526.430859][T15209] wg1: entered allmulticast mode
[  526.556009][T15220] veth11: left promiscuous mode
[  526.602884][T15223] netlink: 'syz.3.2560': attribute type 4 has an invalid length.
[  527.399983][T15238] xt_cgroup: path and classid specified
[  527.411638][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  527.421790][T15238] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004
[  527.498779][T15238] netlink: zone id is out of range
[  527.514462][T15238] netlink: zone id is out of range
[  527.519800][T15238] netlink: zone id is out of range
[  527.565054][T15238] netlink: zone id is out of range
[  527.570204][T15238] netlink: zone id is out of range
[  527.624520][T15238] netlink: zone id is out of range
[  527.629727][T15238] netlink: zone id is out of range
[  527.636812][T15240] netlink: 'syz.2.2563': attribute type 4 has an invalid length.
[  527.681536][T15238] netlink: zone id is out of range
[  527.692791][T15240] netlink: 'syz.2.2563': attribute type 2 has an invalid length.
[  527.716216][T15238] netlink: zone id is out of range
[  527.752393][T15238] netlink: zone id is out of range
[  527.969637][T15250] __nla_validate_parse: 3 callbacks suppressed
[  527.969657][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'.
[  528.096303][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'.
[  528.587700][T15261] netlink: 'syz.3.2568': attribute type 1 has an invalid length.
[  528.595724][T15261] netlink: 'syz.3.2568': attribute type 2 has an invalid length.
[  529.462213][T15280] xt_hashlimit: size too large, truncated to 1048576
[  531.213420][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  531.588268][T15303] veth1: left promiscuous mode
[  531.625308][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'.
[  531.649112][T15303] batadv1: left promiscuous mode
[  531.667362][T15303] batadv1: left allmulticast mode
[  533.092858][T15321] net_ratelimit: 14 callbacks suppressed
[  533.092878][T15321] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  533.405210][T15333] xt_hashlimit: size too large, truncated to 1048576
[  533.440929][T15335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2586'.
[  533.749916][T15341] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  533.894277][T15346] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  533.918858][T15346] netlink: 'syz.2.2588': attribute type 2 has an invalid length.
[  534.198932][T15348] xt_hashlimit: size too large, truncated to 1048576
[  534.285753][T15351] netlink: 'syz.0.2590': attribute type 1 has an invalid length.
[  534.301848][T15351] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2590'.
[  534.455890][T15355] IPVS: Error connecting to the multicast addr
[  534.628890][T15357] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2593'.
[  535.392398][T15372] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  535.846819][T15376] xt_cgroup: path and classid specified
[  535.881542][T15376] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004
[  535.930842][T15379] netlink: zone id is out of range
[  535.936179][T15379] netlink: zone id is out of range
[  535.941568][T15379] netlink: zone id is out of range
[  535.947408][T15379] netlink: zone id is out of range
[  535.958924][T15379] netlink: zone id is out of range
[  535.988914][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2598'.
[  536.003892][T15379] netlink: zone id is out of range
[  536.009067][T15379] netlink: zone id is out of range
[  536.056077][T15376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23
[  536.100389][T15381] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:0
[  536.122702][T15384] netlink: 'syz.2.2599': attribute type 4 has an invalid length.
[  536.163222][T15384] netlink: 'syz.2.2599': attribute type 2 has an invalid length.
[  536.199851][T15387] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2598'.
[  536.220613][T15387] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2598'.
[  536.518582][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2601'.
[  536.574482][T15393] bond3: (slave veth0_to_bond): Releasing active interface
[  537.068905][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2602'.
[  537.216148][T15393] bond0: (slave wlan1): Releasing backup interface
[  537.224107][T15393] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  537.235540][T15393] bond2: (slave ip6gretap1): Removing an active aggregator
[  537.274855][T15393] bond2: (slave ip6gretap1): Releasing backup interface
[  537.299508][T15393] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 96:1b:d2:df:33:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  537.369292][T15393] bond2: (slave veth3): Releasing backup interface
[  537.381083][T15393] bond3: (slave veth5): Releasing active interface
[  537.467775][T15425] sctp: [Deprecated]: syz.1.2604 (pid 15425) Use of int in max_burst socket option deprecated.
[  537.467775][T15425] Use struct sctp_assoc_value instead
[  537.600080][T15428] xt_hashlimit: size too large, truncated to 1048576
[  537.929302][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'.
[  539.147883][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'.
[  539.288776][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'.
[  540.458027][T15487] netlink: 'syz.0.2629': attribute type 1 has an invalid length.
[  540.547831][T15491] netlink: 'syz.0.2629': attribute type 1 has an invalid length.
[  541.052976][T15495] xt_hashlimit: size too large, truncated to 1048576
[  542.082049][T15519] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  542.106729][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2630'.
[  542.132332][T15520] netlink: 'syz.0.2626': attribute type 27 has an invalid length.
[  542.190133][T15521] vlan1: entered promiscuous mode
[  542.211733][T15521] bridge0: entered promiscuous mode
[  542.245739][T15521] vlan1: entered allmulticast mode
[  542.256283][T15519] xt_TPROXY: Can be used only with -p tcp or -p udp
[  542.281515][T15521] bridge0: entered allmulticast mode
[  542.431818][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2628'.
[  542.467917][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2628'.
[  542.501282][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2628'.
[  542.546980][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2628'.
[  542.795970][T15513] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2624'.
[  543.767817][T15556] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2634'.
[  544.030778][T15561] hsr2: left promiscuous mode
[  545.546281][T15600] netlink: 'syz.3.2644': attribute type 12 has an invalid length.
[  545.554398][T15600] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2644'.
[  545.705231][T15606] Bluetooth: MGMT ver 1.23
[  545.762601][T15596] net_ratelimit: 16 callbacks suppressed
[  545.762623][T15596] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  546.005762][T15618] xt_hashlimit: size too large, truncated to 1048576
[  546.570812][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2649'.
[  546.770139][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'.
[  546.911110][T15635] sch_tbf: burst 5 is lower than device bridge27 mtu (1514) !
[  547.072737][T15647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.220784][T15641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.369143][T15645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.374693][T15650] 8021q: adding VLAN 0 to HW filter on device bond4
[  547.386484][T15650] bridge0: port 1(bond4) entered blocking state
[  547.393674][T15650] bridge0: port 1(bond4) entered disabled state
[  547.400331][T15650] bond4: entered allmulticast mode
[  547.413541][T15650] bond4: entered promiscuous mode
[  547.480510][T15656] 8021q: adding VLAN 0 to HW filter on device bond6
[  547.488673][T15656] bridge0: port 2(bond6) entered blocking state
[  547.495428][T15656] bridge0: port 2(bond6) entered disabled state
[  547.502270][T15656] bond6: entered allmulticast mode
[  547.532814][T15656] bond6: entered promiscuous mode
[  547.849146][T15670] bridge21: entered promiscuous mode
[  547.854832][T15670] bridge21: entered allmulticast mode
[  547.867237][T15670] team0: Port device bridge21 added
[  547.879128][T15669] xt_hashlimit: size too large, truncated to 1048576
[  547.893413][T15670] rdma_rxe: rxe_newlink: failed to add macvlan1
[  548.119686][T15681] xt_CT: No such helper "snmp"
[  548.366055][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2667'.
[  548.661247][T15697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  549.228060][T15709] 8021q: adding VLAN 0 to HW filter on device bond2
[  549.237480][T15709] bridge0: port 1(bond2) entered blocking state
[  549.245962][T15709] bridge0: port 1(bond2) entered disabled state
[  549.259855][T15709] bond2: entered allmulticast mode
[  549.280154][T15709] bond2: entered promiscuous mode
[  549.313091][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2670'.
[  549.317009][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2673'.
[  549.469671][T15718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'.
[  549.547944][T15721] syzkaller1: entered promiscuous mode
[  549.553604][T15721] syzkaller1: entered allmulticast mode
[  549.829681][T15737] syzkaller0: create flow: hash 2025315240 index 1
[  549.942441][   T60] syzkaller0: tun_net_xmit 76
[  549.957287][   T60] syzkaller0: tun_net_xmit 48
[  549.965513][   T10] syzkaller0: tun_net_xmit 76
[  550.009941][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2678'.
[  550.015339][   T10] syzkaller0: tun_net_xmit 76
[  550.108025][T15729] syzkaller0: delete flow: hash 2025315240 index 1
[  550.169700][T15751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'.
[  550.376561][T15758] netlink: 'syz.3.2678': attribute type 2 has an invalid length.
[  551.861043][T15758] : entered promiscuous mode
[  552.069067][T15769] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  552.119551][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'.
[  552.977089][T15788] pim6reg1: entered promiscuous mode
[  553.018789][T15788] pim6reg1: entered allmulticast mode
[  553.112900][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2690'.
[  553.122500][T15791] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2690'.
[  553.139252][T15791] netlink: 'syz.0.2690': attribute type 6 has an invalid length.
[  553.155210][T15791] netlink: 'syz.0.2690': attribute type 5 has an invalid length.
[  553.181664][T15791] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2690'.
[  553.273935][T15793] netlink: 'syz.0.2690': attribute type 16 has an invalid length.
[  553.284195][T15793] netlink: 'syz.0.2690': attribute type 17 has an invalid length.
[  553.320981][T15793] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.354218][T15793] 8021q: adding VLAN 0 to HW filter on device team0
[  553.368424][T15793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  553.603257][T15803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'.
[  553.636726][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2692'.
[  553.811880][T15802] netlink: 'syz.4.2694': attribute type 1 has an invalid length.
[  553.929968][T15792] syz.3.2685: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  554.022493][T15792] CPU: 0 UID: 0 PID: 15792 Comm: syz.3.2685 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) 
[  554.022522][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.022538][T15792] Call Trace:
[  554.022546][T15792]  <TASK>
[  554.022555][T15792]  dump_stack_lvl+0x189/0x250
[  554.022594][T15792]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.022625][T15792]  ? __pfx__printk+0x10/0x10
[  554.022646][T15792]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  554.022668][T15792]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  554.022690][T15792]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  554.022715][T15792]  warn_alloc+0x214/0x310
[  554.022745][T15792]  ? __pfx_warn_alloc+0x10/0x10
[  554.022777][T15792]  ? __get_vm_area_node+0x28f/0x300
[  554.022796][T15792]  ? __do_replace+0xb4/0xaa0
[  554.022818][T15792]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  554.022840][T15792]  ? stack_depot_save_flags+0x40/0x900
[  554.022888][T15792]  ? translate_table+0x1b4d/0x1f90
[  554.022921][T15792]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  554.022949][T15792]  ? __do_replace+0xb4/0xaa0
[  554.022966][T15792]  vzalloc_noprof+0xb2/0xf0
[  554.022988][T15792]  ? __do_replace+0xb4/0xaa0
[  554.023008][T15792]  __do_replace+0xb4/0xaa0
[  554.023028][T15792]  ? __pfx_translate_table+0x10/0x10
[  554.023063][T15792]  ? __pfx___do_replace+0x10/0x10
[  554.023098][T15792]  ? _copy_from_user+0x94/0xb0
[  554.023139][T15792]  do_arpt_set_ctl+0xa2a/0xf10
[  554.023165][T15792]  ? __mutex_trylock_common+0x153/0x260
[  554.023187][T15792]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  554.023220][T15792]  ? rcu_is_watching+0x15/0xb0
[  554.023265][T15792]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  554.023293][T15792]  ? __pfx___mutex_lock+0x10/0x10
[  554.023330][T15792]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  554.023367][T15792]  ? aa_sk_perm+0x81e/0x950
[  554.023395][T15792]  ? __pfx_aa_sk_perm+0x10/0x10
[  554.023423][T15792]  nf_setsockopt+0x26c/0x290
[  554.023466][T15792]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  554.023490][T15792]  do_sock_setsockopt+0x257/0x3e0
[  554.023519][T15792]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  554.023549][T15792]  ? __fget_files+0x2a/0x420
[  554.023577][T15792]  __x64_sys_setsockopt+0x18b/0x220
[  554.023608][T15792]  do_syscall_64+0xfa/0x3b0
[  554.023629][T15792]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.023651][T15792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.023668][T15792]  ? clear_bhb_loop+0x60/0xb0
[  554.023690][T15792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.023713][T15792] RIP: 0033:0x7f585ed8e929
[  554.023730][T15792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.023746][T15792] RSP: 002b:00007f585fb35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  554.023764][T15792] RAX: ffffffffffffffda RBX: 00007f585efb6240 RCX: 00007f585ed8e929
[  554.023777][T15792] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  554.023787][T15792] RBP: 00007f585ee10b39 R08: 0000000000000068 R09: 0000000000000000
[  554.023798][T15792] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  554.023809][T15792] R13: 0000000000000000 R14: 00007f585efb6240 R15: 00007ffdcaf50b08
[  554.023836][T15792]  </TASK>
[  554.034413][T15792] Mem-Info:
[  554.359008][T15792] active_anon:14451 inactive_anon:0 isolated_anon:0
[  554.359008][T15792]  active_file:1538 inactive_file:40041 isolated_file:0
[  554.359008][T15792]  unevictable:768 dirty:434 writeback:0
[  554.359008][T15792]  slab_reclaimable:12281 slab_unreclaimable:245879
[  554.359008][T15792]  mapped:37204 shmem:8022 pagetables:1117
[  554.359008][T15792]  sec_pagetables:0 bounce:0
[  554.359008][T15792]  kernel_misc_reclaimable:0
[  554.359008][T15792]  free:1150290 free_pcp:16442 free_cma:0
[  554.371899][T15802] bond3 (unregistering): Released all slaves
[  554.405188][T15792] Node 0 active_anon:58104kB inactive_anon:0kB active_file:6152kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149116kB dirty:1736kB writeback:0kB shmem:30752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12924kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  554.444466][T15792] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  554.497382][T15792] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.721378][T15792] lowmem_reserve[]: 0 2500 2502 2502 2502
[  554.727342][T15792] Node 0 DMA32 free:669488kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69904kB inactive_anon:0kB active_file:6152kB inactive_file:158128kB unevictable:1536kB writepending:1736kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:42860kB local_pcp:18552kB free_cma:0kB
[  554.806037][T15792] lowmem_reserve[]: 0 0 1 1 1
[  554.810810][T15792] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  554.863546][T15792] lowmem_reserve[]: 0 0 0 0 0
[  554.891573][T15792] Node 1 Normal free:3908300kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17572kB local_pcp:7808kB free_cma:0kB
[  554.949657][T15792] lowmem_reserve[]: 0 0 0 0 0
[  554.961598][T15792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  554.982055][T15817] netlink: 'syz.0.2697': attribute type 1 has an invalid length.
[  554.995207][T15792] Node 0 DMA32: 5*4kB (UME) 97*8kB (E) 109*16kB (UME) 2544*32kB (UME) 1076*64kB (UE) 360*128kB (UME) 241*256kB (UM) 160*512kB (UME) 117*1024kB (UME) 5*2048kB (UM) 48*4096kB (UM) = 669164kB
[  555.014598][T15817] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2697'.
[  555.027000][T15817] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  555.034438][T15792] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  555.047769][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'.
[  555.061741][T15792] Node 1 Normal: 157*4kB (U) 43*8kB (UME) 48*16kB (UME) 94*32kB (UME) 41*64kB (UME) 8*128kB (UME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 950*4096kB (M) = 3908300kB
[  555.085395][T15792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.096823][T15792] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.124310][T15792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  555.191425][T15792] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  555.220430][T15792] 51563 total pagecache pages
[  555.277817][T15792] 0 pages in swap cache
[  555.289122][T15792] Free swap  = 124996kB
[  555.305404][T15792] Total swap = 124996kB
[  555.309674][T15792] 2097051 pages RAM
[  555.334374][T15792] 0 pages HighMem/MovableOnly
[  555.339990][T15792] 424709 pages reserved
[  555.361762][T15792] 0 pages cma reserved
[  557.310025][T15854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'.
[  557.317911][T15852] netlink: 'syz.1.2708': attribute type 1 has an invalid length.
[  557.328864][T15852] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2708'.
[  557.351991][T15852] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  557.359666][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'.
[  557.452745][T15857] netlink: 'syz.2.2707': attribute type 1 has an invalid length.
[  557.477263][T15857] netlink: 'syz.2.2707': attribute type 2 has an invalid length.
[  557.562265][T15860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'.
[  557.582781][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2709'.
[  557.629116][T15860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'.
[  557.662009][T15860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'.
[  557.797716][T15866] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  557.946826][T15868] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2712'.
[  557.957491][T15868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2712'.
[  557.966923][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2712'.
[  558.220286][T15876] validate_nla: 1 callbacks suppressed
[  558.220304][T15876] netlink: 'syz.2.2716': attribute type 1 has an invalid length.
[  558.284123][T15874] 8021q: adding VLAN 0 to HW filter on device team0
[  558.305335][T15874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  558.315908][T15878] netlink: 'syz.2.2716': attribute type 2 has an invalid length.
[  558.386083][T15876] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.610143][T15901] netlink: 'syz.3.2722': attribute type 303 has an invalid length.
[  562.125084][T15965] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  562.195466][T15968] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  562.265504][T15969] netlink: 'syz.3.2738': attribute type 39 has an invalid length.
[  562.329762][T15965] __nla_validate_parse: 6 callbacks suppressed
[  562.329780][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2737'.
[  562.810838][T15979] netlink: 'syz.0.2740': attribute type 1 has an invalid length.
[  562.819093][T15979] netlink: 'syz.0.2740': attribute type 2 has an invalid length.
[  562.861681][T15976] nbd: socks must be embedded in a SOCK_ITEM attr
[  562.899446][T15976] block nbd0: shutting down sockets
[  563.020959][T15974] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  563.073884][T15974] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  563.238047][T15983] 8021q: adding VLAN 0 to HW filter on device bond3
[  563.331615][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  563.637922][T16001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'.
[  563.648791][T16002] openvswitch: netlink: Message has 20 unknown bytes.
[  563.662614][T16003] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  563.670432][T16003] netlink: 'syz.2.2745': attribute type 2 has an invalid length.
[  563.684634][T16002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.441728][T15991] xt_CT: No such helper "snmp"
[  564.628022][T16014] netlink: 'syz.4.2749': attribute type 1 has an invalid length.
[  564.636140][T16014] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2749'.
[  564.851232][T16018] netlink: 'syz.4.2750': attribute type 1 has an invalid length.
[  564.860644][T16018] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.2750'.
[  564.876124][T16019] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  564.924031][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'.
[  565.085097][ T5155] Bluetooth: hci3: link tx timeout
[  565.090272][ T5155] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  565.140447][T16026] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2761'.
[  565.177517][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2751'.
[  565.236290][T16026] bond4: left allmulticast mode
[  565.242125][T16026] bond4: left promiscuous mode
[  565.247331][T16026] bridge0: port 1(bond4) entered disabled state
[  566.001480][   T30] audit: type=1800 audit(1750929664.688:5): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2755" name="memory.events" dev="tmpfs" ino=2944 res=0 errno=0
[  566.095742][   T30] audit: type=1804 audit(1750929664.778:6): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2755" name="memory.events" dev="tmpfs" ino=2944 res=1 errno=0
[  566.201104][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'.
[  566.227230][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'.
[  566.375622][T16044] ip6t_srh: unknown srh invflags 4449
[  566.690946][T16048] netlink: 'syz.0.2757': attribute type 1 has an invalid length.
[  566.726831][T16048] netlink: 'syz.0.2757': attribute type 2 has an invalid length.
[  567.163851][T16057] netlink: 'syz.3.2762': attribute type 1 has an invalid length.
[  567.172987][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  567.174459][T16055] netlink: 'syz.4.2759': attribute type 27 has an invalid length.
[  567.268276][T16057] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2762'.
[  567.386388][T16062] 8021q: adding VLAN 0 to HW filter on device team0
[  567.420267][T16062] bridge0: port 1(
0!
) entered blocking state
[  567.426662][T16062] bridge0: port 1(
0!
) entered listening state
[  567.438459][T16062] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  567.647363][T16067] __nla_validate_parse: 1 callbacks suppressed
[  567.647383][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'.
[  567.708920][T16067] sch_tbf: burst 5 is lower than device bridge17 mtu (1514) !
[  567.997781][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'.
[  568.345547][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'.
[  568.410148][T16084] netlink: 'syz.3.2770': attribute type 1 has an invalid length.
[  568.421130][T16084] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2770'.
[  568.452873][T16086] geneve0: entered allmulticast mode
[  568.830849][T16086] vxcan3: entered allmulticast mode
[  569.092957][T16098] 8021q: adding VLAN 0 to HW filter on device bond7
[  569.100205][T16098] bridge0: port 3(bond7) entered blocking state
[  569.107872][T16098] bridge0: port 3(bond7) entered disabled state
[  569.114975][T16098] bond7: entered allmulticast mode
[  569.125325][T16098] bond7: entered promiscuous mode
[  569.138362][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2773'.
[  569.148965][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2773'.
[  569.407840][T16112] netlink: 'syz.3.2774': attribute type 1 has an invalid length.
[  569.416525][T16112] netlink: 'syz.3.2774': attribute type 2 has an invalid length.
[  570.193440][T16126] pim6reg1: entered promiscuous mode
[  570.198836][T16126] pim6reg1: entered allmulticast mode
[  570.284893][T16128] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  570.400000][T16126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2778'.
[  570.455508][T16126] bond5 (unregistering): Released all slaves
[  570.810218][T16114] syz.1.2776: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  570.838272][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.1.2776 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) 
[  570.838302][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  570.838316][T16114] Call Trace:
[  570.838325][T16114]  <TASK>
[  570.838345][T16114]  dump_stack_lvl+0x189/0x250
[  570.838383][T16114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.838414][T16114]  ? __pfx__printk+0x10/0x10
[  570.838443][T16114]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.838466][T16114]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.838509][T16114]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  570.838535][T16114]  warn_alloc+0x214/0x310
[  570.838566][T16114]  ? __pfx_warn_alloc+0x10/0x10
[  570.838600][T16114]  ? __get_vm_area_node+0x28f/0x300
[  570.838623][T16114]  ? __do_replace+0xb4/0xaa0
[  570.838646][T16114]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  570.838668][T16114]  ? stack_depot_save_flags+0x40/0x900
[  570.838729][T16114]  ? translate_table+0x1b4d/0x1f90
[  570.838762][T16114]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  570.838791][T16114]  ? __do_replace+0xb4/0xaa0
[  570.838808][T16114]  vzalloc_noprof+0xb2/0xf0
[  570.838829][T16114]  ? __do_replace+0xb4/0xaa0
[  570.838848][T16114]  __do_replace+0xb4/0xaa0
[  570.838868][T16114]  ? __pfx_translate_table+0x10/0x10
[  570.838907][T16114]  ? __pfx___do_replace+0x10/0x10
[  570.838935][T16114]  ? _copy_from_user+0x94/0xb0
[  570.838960][T16114]  do_arpt_set_ctl+0xa2a/0xf10
[  570.838981][T16114]  ? __mutex_trylock_common+0x153/0x260
[  570.839005][T16114]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  570.839040][T16114]  ? rcu_is_watching+0x15/0xb0
[  570.839086][T16114]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  570.839115][T16114]  ? __pfx___mutex_lock+0x10/0x10
[  570.839139][T16114]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  570.839162][T16114]  ? aa_sk_perm+0x81e/0x950
[  570.839190][T16114]  ? __pfx_aa_sk_perm+0x10/0x10
[  570.839221][T16114]  nf_setsockopt+0x26c/0x290
[  570.839251][T16114]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  570.839277][T16114]  do_sock_setsockopt+0x257/0x3e0
[  570.839322][T16114]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  570.839373][T16114]  ? __fget_files+0x2a/0x420
[  570.839406][T16114]  __x64_sys_setsockopt+0x18b/0x220
[  570.839450][T16114]  do_syscall_64+0xfa/0x3b0
[  570.839476][T16114]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.839500][T16114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.839521][T16114]  ? clear_bhb_loop+0x60/0xb0
[  570.839547][T16114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.839566][T16114] RIP: 0033:0x7f999798e929
[  570.839585][T16114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.839604][T16114] RSP: 002b:00007f9998724038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  570.839624][T16114] RAX: ffffffffffffffda RBX: 00007f9997bb6160 RCX: 00007f999798e929
[  570.839640][T16114] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  570.839652][T16114] RBP: 00007f9997a10b39 R08: 0000000000000068 R09: 0000000000000000
[  570.839665][T16114] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  570.839679][T16114] R13: 0000000000000000 R14: 00007f9997bb6160 R15: 00007fff53e91e38
[  570.839712][T16114]  </TASK>
[  570.839792][T16114] Mem-Info:
[  571.032244][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'.
[  571.079496][T16114] active_anon:14805 inactive_anon:0 isolated_anon:0
[  571.079496][T16114]  active_file:1538 inactive_file:40047 isolated_file:0
[  571.079496][T16114]  unevictable:768 dirty:441 writeback:0
[  571.079496][T16114]  slab_reclaimable:12485 slab_unreclaimable:243008
[  571.079496][T16114]  mapped:39428 shmem:7117 pagetables:1090
[  571.079496][T16114]  sec_pagetables:0 bounce:0
[  571.079496][T16114]  kernel_misc_reclaimable:0
[  571.079496][T16114]  free:1157621 free_pcp:14101 free_cma:0
[  571.219479][T16114] Node 0 active_anon:59220kB inactive_anon:0kB active_file:6152kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161812kB dirty:1764kB writeback:0kB shmem:26932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13080kB pagetables:4316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  571.254854][T16114] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  571.322409][T16114] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  571.383361][T16114] lowmem_reserve[]: 0 2500 2502 2502 2502
[  571.386045][T16142] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  571.389172][T16114] Node 0 DMA32 free:701292kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55268kB inactive_anon:0kB active_file:6152kB inactive_file:158152kB unevictable:1536kB writepending:1764kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:28236kB local_pcp:15884kB free_cma:0kB
[  571.505905][T16114] lowmem_reserve[]: 0 0 1 1 1
[  571.510681][T16114] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  571.629584][T16114] lowmem_reserve[]: 0 0 0 0 0
[  571.674727][T16114] Node 1 Normal free:3908584kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17284kB local_pcp:9764kB free_cma:0kB
[  571.765584][T16114] lowmem_reserve[]: 0 0 0 0 0
[  571.783869][T16114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  571.791245][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'.
[  571.848770][T16114] Node 0 DMA32: 2300*4kB (UME) 1471*8kB (UM) 422*16kB (UME) 1680*32kB (UM) 1170*64kB (UME) 334*128kB (UME) 267*256kB (UM) 172*512kB (UME) 120*1024kB (UME) 15*2048kB (UM) 43*4096kB (UM) = 685256kB
[  571.918089][T16114] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  571.955523][T16114] Node 1 Normal: 156*4kB (U) 43*8kB (UME) 48*16kB (UME) 99*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 950*4096kB (M) = 3908584kB
[  571.999666][T16114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.100573][T16114] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.152327][T16114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.196451][T16114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.207930][T16163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2785'.
[  572.233054][T16114] 45839 total pagecache pages
[  572.252947][T16114] 0 pages in swap cache
[  572.293747][T16114] Free swap  = 124996kB
[  572.301917][T16114] Total swap = 124996kB
[  572.309528][T16114] 2097051 pages RAM
[  572.361484][T16114] 0 pages HighMem/MovableOnly
[  572.379367][T16114] 424709 pages reserved
[  572.391727][T16114] 0 pages cma reserved
[  572.469599][T16170] 8021q: adding VLAN 0 to HW filter on device bond4
[  572.695592][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'.
[  572.716021][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'.
[  573.176010][T16177] tipc: Resetting bearer <ib:ip6gre0>
[  573.238575][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2791'.
[  573.248503][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2791'.
[  573.258268][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2791'.
[  573.266838][T16177] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  573.268096][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2791'.
[  573.423326][T16195] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  573.684482][T16210] netlink: 'syz.3.2794': attribute type 12 has an invalid length.
[  573.701774][T16210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2794'.
[  574.521999][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'.
[  574.901852][T16247] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  575.378791][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'.
[  575.752984][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2806'.
[  576.054620][T16288] netlink: 'syz.3.2808': attribute type 1 has an invalid length.
[  576.067357][T16288] netlink: 'syz.3.2808': attribute type 2 has an invalid length.
[  576.149981][T16291] xt_CT: You must specify a L4 protocol and not use inversions on it
[  576.438936][T16296] bridge0: failed insert local address into bridge forwarding table
[  577.818492][T16318] __nla_validate_parse: 5 callbacks suppressed
[  577.818512][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'.
[  577.997018][T16323] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  578.155196][T16324] 8021q: adding VLAN 0 to HW filter on device bond7
[  578.220087][T16331] netlink: 'syz.0.2821': attribute type 1 has an invalid length.
[  578.359773][T16331] bond8: entered promiscuous mode
[  578.419502][T16331] 8021q: adding VLAN 0 to HW filter on device bond8
[  578.576038][T16333] 8021q: adding VLAN 0 to HW filter on device bond9
[  578.605806][T16333] bond8: (slave bond9): making interface the new active one
[  578.622750][T16333] bond9: entered promiscuous mode
[  578.639055][T16333] bond8: (slave bond9): Enslaving as an active interface with an up link
[  578.829247][T16343] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  578.852094][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'.
[  578.899455][T16343] bridge0: entered promiscuous mode
[  578.908865][T16343] bridge0: entered allmulticast mode
[  578.934701][T16348] netlink: 'syz.4.2823': attribute type 1 has an invalid length.
[  578.942661][T16348] netlink: 'syz.4.2823': attribute type 2 has an invalid length.
[  578.960161][T16343] team0: Port device bridge0 added
[  579.127391][T16352] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2826'.
[  579.235820][T16352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2826'.
[  579.278725][T16352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2826'.
[  579.294625][T16352] netlink: 'syz.2.2826': attribute type 3 has an invalid length.
[  579.346772][T16352] xt_CT: You must specify a L4 protocol and not use inversions on it
[  579.386304][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.409662][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.500893][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2828'.
[  579.663342][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'.
[  579.813670][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'.
[  579.981484][T16375] sch_tbf: burst 0 is lower than device bridge27 mtu (1514) !
[  580.114212][T16380] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  580.114340][T16379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2835'.
[  581.303982][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'.
[  581.825619][T16404] netlink: 'syz.2.2839': attribute type 1 has an invalid length.
[  581.834241][T16404] netlink: 'syz.2.2839': attribute type 2 has an invalid length.
[  582.264956][T16409] netlink: 'syz.1.2840': attribute type 1 has an invalid length.
[  582.273409][T16409] netlink: 'syz.1.2840': attribute type 2 has an invalid length.
[  582.612885][    C0] bridge0: port 1(
0!
) entered learning state
[  583.031846][T16431] __nla_validate_parse: 1 callbacks suppressed
[  583.031865][T16431] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2848'.
[  583.069620][T16432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.226277][T16432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.323711][T16429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.416781][T16440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2849'.
[  583.513005][T16450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2851'.
[  583.526015][T16444] 8021q: adding VLAN 0 to HW filter on device bond8
[  583.534083][T16444] bridge0: port 4(bond8) entered blocking state
[  583.540720][T16444] bridge0: port 4(bond8) entered disabled state
[  583.548056][T16444] bond8: entered allmulticast mode
[  583.564509][T16444] bond8: entered promiscuous mode
[  583.572116][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  583.625756][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2851'.
[  584.400250][T16473] smc: net device bond0 erased user defined pnetid SYZ2
[  584.422214][T16473] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  584.443787][T16474] netlink: 'syz.0.2858': attribute type 1 has an invalid length.
[  584.454690][T16474] netlink: 'syz.0.2858': attribute type 2 has an invalid length.
[  584.609652][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'.
[  584.892975][T16475] bond0 (unregistering): Released all slaves
[  584.948097][T16485] 8021q: VLANs not supported on ipvlan1
[  585.223147][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2862'.
[  585.348564][T16499] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  585.371536][T16491] netlink: 'syz.2.2862': attribute type 4 has an invalid length.
[  586.004154][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'.
[  586.112514][T16491] bridge0: port 1(
0!
) entered disabled state
[  586.227420][T16505] batman_adv: batadv0: Adding interface: macvlan2
[  586.241840][T16505] batman_adv: batadv0: The MTU of interface macvlan2 is too small (216) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.270154][T16505] batman_adv: batadv0: Interface activated: macvlan2
[  586.331858][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'.
[  587.135665][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2870'.
[  587.194512][T16537] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  587.199113][T16541] netlink: 'syz.0.2871': attribute type 11 has an invalid length.
[  587.269862][T16541] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2871'.
[  587.293177][T16543] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (39785) !
[  587.333514][T16542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.514683][T16538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.759593][T16538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.783087][T16554] netlink: 'syz.3.2872': attribute type 10 has an invalid length.
[  587.821065][T16554] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  587.858847][T16554] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  588.347862][T16579] netlink: 'syz.3.2875': attribute type 27 has an invalid length.
[  588.762771][T16585] __nla_validate_parse: 3 callbacks suppressed
[  588.762789][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'.
[  589.265240][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'.
[  589.402789][T16600] netlink: 'syz.0.2880': attribute type 1 has an invalid length.
[  589.467286][T16604] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2880'.
[  589.580611][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2883'.
[  589.600857][T16609] rdma_rxe: rxe_newlink: failed to add macvlan1
[  589.679784][T16594] bond2: left allmulticast mode
[  589.716376][T16614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2880'.
[  589.732213][T16594] bond2: left promiscuous mode
[  589.737341][T16594] bridge0: port 1(bond2) entered disabled state
[  590.004822][T16600] bond10: entered promiscuous mode
[  590.019614][T16600] 8021q: adding VLAN 0 to HW filter on device bond10
[  590.037069][T16603] bridge18: entered promiscuous mode
[  590.046469][T16603] bridge18: entered allmulticast mode
[  590.113071][T16604] batadv2: entered promiscuous mode
[  590.118501][T16604] batadv2: entered allmulticast mode
[  590.129724][T16604] 8021q: adding VLAN 0 to HW filter on device batadv2
[  590.141224][T16604] bond10: (slave batadv2): making interface the new active one
[  590.155513][T16604] bond10: (slave batadv2): Enslaving as an active interface with an up link
[  590.235038][T16613] sch_tbf: burst 5 is lower than device bridge28 mtu (1514) !
[  590.582458][T16631] syz.0.2888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  590.653058][T16631] CPU: 0 UID: 0 PID: 16631 Comm: syz.0.2888 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) 
[  590.653089][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  590.653101][T16631] Call Trace:
[  590.653110][T16631]  <TASK>
[  590.653120][T16631]  dump_stack_lvl+0x189/0x250
[  590.653159][T16631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.653194][T16631]  ? __pfx__printk+0x10/0x10
[  590.653217][T16631]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  590.653240][T16631]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  590.653265][T16631]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  590.653290][T16631]  warn_alloc+0x214/0x310
[  590.653314][T16631]  ? stack_depot_save_flags+0x40/0x900
[  590.653345][T16631]  ? __pfx_warn_alloc+0x10/0x10
[  590.653371][T16631]  ? kasan_save_track+0x4f/0x80
[  590.653403][T16631]  ? xskq_create+0x56/0x170
[  590.653425][T16631]  ? xsk_init_queue+0xb0/0x110
[  590.653444][T16631]  ? xsk_setsockopt+0x43f/0x710
[  590.653462][T16631]  ? do_sock_setsockopt+0x257/0x3e0
[  590.653489][T16631]  ? __x64_sys_setsockopt+0x18b/0x220
[  590.653514][T16631]  ? do_syscall_64+0xfa/0x3b0
[  590.653542][T16631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.653573][T16631]  __vmalloc_node_range_noprof+0x125/0x12f0
[  590.653630][T16631]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  590.653660][T16631]  ? __kasan_kmalloc+0x93/0xb0
[  590.653683][T16631]  vmalloc_user_noprof+0xad/0xf0
[  590.653706][T16631]  ? xskq_create+0xbf/0x170
[  590.653730][T16631]  xskq_create+0xbf/0x170
[  590.653757][T16631]  xsk_init_queue+0xb0/0x110
[  590.653783][T16631]  xsk_setsockopt+0x43f/0x710
[  590.653807][T16631]  ? __pfx_xsk_setsockopt+0x10/0x10
[  590.653828][T16631]  ? __lock_acquire+0xab9/0xd20
[  590.653876][T16631]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  590.653903][T16631]  ? __pfx_xsk_setsockopt+0x10/0x10
[  590.653927][T16631]  do_sock_setsockopt+0x257/0x3e0
[  590.653960][T16631]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  590.653996][T16631]  ? __fget_files+0x2a/0x420
[  590.654028][T16631]  __x64_sys_setsockopt+0x18b/0x220
[  590.654066][T16631]  do_syscall_64+0xfa/0x3b0
[  590.654090][T16631]  ? lockdep_hardirqs_on+0x9c/0x150
[  590.654115][T16631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.654136][T16631]  ? clear_bhb_loop+0x60/0xb0
[  590.654161][T16631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.654182][T16631] RIP: 0033:0x7f5eb1b8e929
[  590.654203][T16631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.654221][T16631] RSP: 002b:00007f5eb2a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  590.654244][T16631] RAX: ffffffffffffffda RBX: 00007f5eb1db6080 RCX: 00007f5eb1b8e929
[  590.654260][T16631] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  590.654273][T16631] RBP: 00007f5eb1c10b39 R08: 0000000000000004 R09: 0000000000000000
[  590.654286][T16631] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.654300][T16631] R13: 0000000000000000 R14: 00007f5eb1db6080 R15: 00007ffd5dbf33f8
[  590.654334][T16631]  </TASK>
[  590.655684][T16631] Mem-Info:
[  590.977902][T16631] active_anon:11994 inactive_anon:0 isolated_anon:0
[  590.977902][T16631]  active_file:1555 inactive_file:40055 isolated_file:0
[  590.977902][T16631]  unevictable:768 dirty:571 writeback:0
[  590.977902][T16631]  slab_reclaimable:12659 slab_unreclaimable:239538
[  590.977902][T16631]  mapped:39593 shmem:4248 pagetables:1127
[  590.977902][T16631]  sec_pagetables:0 bounce:0
[  590.977902][T16631]  kernel_misc_reclaimable:0
[  590.977902][T16631]  free:1176859 free_pcp:18056 free_cma:0
[  591.036222][T16631] Node 0 active_anon:47976kB inactive_anon:0kB active_file:6220kB inactive_file:160020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158572kB dirty:2284kB writeback:0kB shmem:15456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13200kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  591.086215][T16631] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  591.143660][T16631] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  591.211571][T16631] lowmem_reserve[]: 0 2500 2502 2502 2502
[  591.218468][T16631] Node 0 DMA32 free:787460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47824kB inactive_anon:0kB active_file:6220kB inactive_file:158184kB unevictable:1536kB writepending:2284kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:55508kB local_pcp:26988kB free_cma:0kB
[  591.257167][T16640] netlink: 'syz.3.2889': attribute type 1 has an invalid length.
[  591.265736][T16640] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2889'.
[  591.296101][T16631] lowmem_reserve[]: 0 0 1 1 1
[  591.306230][T16631] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  591.343982][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'.
[  591.389544][T16631] lowmem_reserve[]: 0 0 0 0 0
[  591.437044][T16631] Node 1 Normal free:3908584kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17284kB local_pcp:9764kB free_cma:0kB
[  591.512089][T16631] lowmem_reserve[]: 0 0 0 0 0
[  591.522671][T16631] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  591.536131][T16631] Node 0 DMA32: 2400*4kB (UM) 2612*8kB (UME) 1075*16kB (UM) 2174*32kB (UME) 1209*64kB (UM) 420*128kB (UM) 289*256kB (UM) 185*512kB (UME) 129*1024kB (UME) 13*2048kB (UM) 52*4096kB (UM) = 788816kB
[  591.555886][T16631] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  591.569579][T16631] Node 1 Normal: 156*4kB (U) 43*8kB (UME) 48*16kB (UME) 99*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 950*4096kB (M) = 3908584kB
[  591.589273][T16631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  591.599127][T16631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  591.608734][T16631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  591.618517][T16631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  591.634195][T16631] 45855 total pagecache pages
[  591.639371][T16631] 0 pages in swap cache
[  591.644211][T16631] Free swap  = 124996kB
[  591.648381][T16631] Total swap = 124996kB
[  591.654397][T16631] 2097051 pages RAM
[  591.658226][T16631] 0 pages HighMem/MovableOnly
[  591.684131][T16631] 424709 pages reserved
[  591.696022][T16631] 0 pages cma reserved
[  591.739502][T16648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2890'.
[  591.758387][T16648] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2890'.
[  591.771178][T16648] netlink: 'syz.3.2890': attribute type 6 has an invalid length.
[  591.784479][T16648] netlink: 'syz.3.2890': attribute type 5 has an invalid length.
[  591.794703][T16648] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2890'.
[  591.808107][T16652] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.847558][T16652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.865658][T16648] netlink: 'syz.3.2890': attribute type 16 has an invalid length.
[  591.874479][T16648] netlink: 'syz.3.2890': attribute type 17 has an invalid length.
[  591.919079][T16648] erspan0: entered promiscuous mode
[  591.950943][T16648] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.959892][T16648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.984153][T16655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  592.317602][T16657] wg1: left promiscuous mode
[  592.323740][T16657] wg1: left allmulticast mode
[  592.351681][T16657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  592.786455][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.825178][T16670] sch_tbf: burst 5 is lower than device bridge17 mtu (1514) !
[  592.961192][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.132606][T16673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.620025][T16679] netlink: 'syz.3.2900': attribute type 303 has an invalid length.
[  593.636399][T16695] netlink: 'syz.4.2901': attribute type 1 has an invalid length.
[  593.677813][T16695] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  593.780305][T16697] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  593.784557][T16699] netlink: 'syz.2.2902': attribute type 4 has an invalid length.
[  594.001239][T16706] __nla_validate_parse: 4 callbacks suppressed
[  594.001256][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'.
[  594.377192][T16717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  594.429015][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'.
[  594.645401][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.690925][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.791040][T16728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.828723][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'.
[  594.922197][T16730] 8021q: adding VLAN 0 to HW filter on device team0
[  594.986085][T16730] bridge0: port 1(
0!
) entered blocking state
[  594.992446][T16730] bridge0: port 1(
0!
) entered listening state
[  595.048196][T16738] netlink: 'syz.1.2911': attribute type 1 has an invalid length.
[  595.090573][T16730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  595.137299][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'.
[  595.193368][T16732] sch_tbf: burst 5 is lower than device bridge18 mtu (1514) !
[  595.385467][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'.
[  595.421262][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'.
[  595.807803][T16743] xt_CT: You must specify a L4 protocol and not use inversions on it
[  595.882779][T16750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  595.925748][T16755] geneve0: entered allmulticast mode
[  596.061816][T16755] vxcan1: entered allmulticast mode
[  597.008488][T16774] 8021q: adding VLAN 0 to HW filter on device team0
[  597.020410][T16774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  597.185134][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2923'.
[  597.380679][T16792] netlink: 'syz.2.2927': attribute type 1 has an invalid length.
[  597.389878][T16792] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2927'.
[  597.412192][T16792] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  597.459090][T16794] netlink: 'syz.4.2925': attribute type 1 has an invalid length.
[  597.513924][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'.
[  597.615109][T16794] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  597.727933][T16803] tipc: Can't bind to reserved service type 0
[  598.092836][T16806] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2930'.
[  598.204930][T16808] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  599.031245][T16819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.054058][T16819] netlink: 'syz.3.2933': attribute type 13 has an invalid length.
[  599.065571][T16819] netlink: 'syz.3.2933': attribute type 17 has an invalid length.
[  599.077254][T16819] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.105225][T16819] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  599.136039][T16823] netlink: 'syz.2.2934': attribute type 1 has an invalid length.
[  599.148260][T16823] __nla_validate_parse: 1 callbacks suppressed
[  599.148277][T16823] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2934'.
[  599.331499][ T5853] Bluetooth: hci3: command 0x0405 tx timeout
[  599.709620][T16840] netlink: 'syz.2.2936': attribute type 16 has an invalid length.
[  599.728941][T16840] netlink: 'syz.2.2936': attribute type 17 has an invalid length.
[  599.764760][T16840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  600.848033][T16845] bond8: (slave bond9): Releasing backup interface
[  600.860438][T16845] bond9: left promiscuous mode
[  600.877203][T16853] netlink: 'syz.4.2939': attribute type 13 has an invalid length.
[  600.974207][T16845] team0: Port device bridge0 removed
[  600.993989][T16845] bond10: (slave batadv2): Releasing active interface
[  601.311072][T16853] tipc: Resetting bearer <ib:ip6gre0>
[  601.642435][T16858] team0: Unable to change to the same mode the team is in
[  602.032108][T16881] netlink: 'syz.2.2945': attribute type 21 has an invalid length.
[  602.219980][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  602.266584][T16881] netlink: 'syz.2.2945': attribute type 6 has an invalid length.
[  602.299016][T16881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2945'.
[  602.389506][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  602.440829][T16892] bond0: entered promiscuous mode
[  602.448847][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  602.459806][T16892] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  602.552457][T16892] bond0: left promiscuous mode
[  603.135428][   T30] audit: type=1804 audit(1750929701.828:7): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2952" name="/newroot/603/memory.events" dev="tmpfs" ino=3172 res=1 errno=0
[  603.173885][   T30] audit: type=1800 audit(1750929701.828:8): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2952" name="memory.events" dev="tmpfs" ino=3172 res=0 errno=0
[  603.515420][T16914] netlink: 'syz.3.2954': attribute type 12 has an invalid length.
[  603.768543][T16919] netlink: 'syz.3.2956': attribute type 1 has an invalid length.
[  603.776728][T16919] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2956'.
[  604.054865][T16924] xt_hashlimit: size too large, truncated to 1048576
[  604.515061][T16930] netlink: 'syz.3.2960': attribute type 1 has an invalid length.
[  604.539005][T16930] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2960'.
[  604.557481][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'.
[  604.796358][T16937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2962'.
[  604.823276][T16937] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2962'.
[  604.880026][T16937] netlink: 'syz.3.2962': attribute type 6 has an invalid length.
[  604.880701][T16938] netlink: 'syz.3.2962': attribute type 16 has an invalid length.
[  604.888343][T16937] netlink: 'syz.3.2962': attribute type 5 has an invalid length.
[  604.904299][T16937] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2962'.
[  604.905322][T16938] netlink: 'syz.3.2962': attribute type 17 has an invalid length.
[  604.954442][T16940] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  604.970997][T16938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  605.222679][T16951] netlink: 'syz.0.2967': attribute type 1 has an invalid length.
[  605.232419][T16951] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2967'.
[  605.248085][T16951] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  605.609122][T16960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2972'.
[  605.760567][T16971] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  605.778469][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'.
[  605.814794][T16969] sch_tbf: burst 5 is lower than device bridge29 mtu (1514) !
[  605.977922][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  606.153904][T16981] netlink: 'syz.3.2979': attribute type 1 has an invalid length.
[  606.213435][T16985] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2979'.
[  606.366818][T16981] bond5: entered promiscuous mode
[  606.411110][   T30] audit: type=1800 audit(1750929705.068:9): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2971" name="cgroup.controllers" dev="tmpfs" ino=3194 res=0 errno=0
[  606.412878][T16981] 8021q: adding VLAN 0 to HW filter on device bond5
[  606.590420][T16985] batadv1: entered promiscuous mode
[  606.614874][T16985] batadv1: entered allmulticast mode
[  606.635466][T16985] 8021q: adding VLAN 0 to HW filter on device batadv1
[  606.658978][T16985] bond5: (slave batadv1): making interface the new active one
[  606.669154][T16985] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  607.090173][T17007] netlink: 'syz.1.2983': attribute type 6 has an invalid length.
[  607.099862][T17007] netlink: 'syz.1.2983': attribute type 5 has an invalid length.
[  607.166049][T17020] netlink: 'syz.1.2983': attribute type 16 has an invalid length.
[  607.388527][T17004] geneve0: left allmulticast mode
[  607.442012][T17004] bond8: left promiscuous mode
[  607.453493][T17004] bridge0: left promiscuous mode
[  607.461462][T17004] bridge0: left allmulticast mode
[  607.503145][T17004] bond10: left promiscuous mode
[  607.522285][T17004] batadv2: left promiscuous mode
[  607.527252][T17004] batadv2: left allmulticast mode
[  607.645037][T17020] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.693786][T17020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  607.805627][T17026] 8021q: adding VLAN 0 to HW filter on device team0
[  607.840127][T17026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  608.222831][T17048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  608.721672][T17063] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  608.850060][T17068] sch_tbf: burst 5 is lower than device bridge0 mtu (1514) !
[  609.463039][T17075] bridge0: port 1(
0!
) entered disabled state
[  609.514021][T17075] geneve0: left allmulticast mode
[  609.582752][T17083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  610.369858][T17101] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  610.782838][T17111] __nla_validate_parse: 11 callbacks suppressed
[  610.782858][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'.
[  611.000030][T17112] sch_tbf: burst 5 is lower than device bridge19 mtu (1514) !
[  611.292550][T17115] validate_nla: 1 callbacks suppressed
[  611.292569][T17115] netlink: 'syz.3.3017': attribute type 1 has an invalid length.
[  611.361863][T17115] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.3017'.
[  611.699763][T17120] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.740897][T17120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  612.306904][T17136] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  612.711977][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3027'.
[  612.780412][T17147] sch_tbf: burst 5 is lower than device bridge30 mtu (1514) !
[  612.850378][T17150] netlink: 'syz.4.3028': attribute type 1 has an invalid length.
[  612.896499][T17150] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.3028'.
[  612.948653][T17150] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  612.995736][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'.
[  613.061758][T17154] IPv6: Can't replace route, no match found
[  613.900176][T17185] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  614.249661][T17193] Cannot find add_set index 4 as target
[  614.268778][T17198] xt_hashlimit: size too large, truncated to 1048576
[  614.457593][T17207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3046'.
[  614.468541][T17207] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3046'.
[  614.500488][T17207] netlink: 'syz.1.3046': attribute type 6 has an invalid length.
[  614.521241][T17207] netlink: 'syz.1.3046': attribute type 5 has an invalid length.
[  614.564733][T17207] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3046'.
[  614.573989][T17208] netlink: 'syz.1.3046': attribute type 16 has an invalid length.
[  614.582664][T17208] netlink: 'syz.1.3046': attribute type 17 has an invalid length.
[  614.641622][T17208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  614.686216][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'.
[  614.718992][T17212] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  614.810161][T17215] sch_tbf: burst 5 is lower than device bridge20 mtu (1514) !
[  615.373864][T17236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3054'.
[  615.391642][T17236] netlink: 'syz.0.3054': attribute type 6 has an invalid length.
[  615.400548][T17236] netlink: 'syz.0.3054': attribute type 5 has an invalid length.
[  616.363147][T17277] __nla_validate_parse: 2 callbacks suppressed
[  616.363166][T17277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3066'.
[  616.389338][T17277] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3066'.
[  616.404196][T17277] netlink: 'syz.1.3066': attribute type 6 has an invalid length.
[  616.414351][T17277] netlink: 'syz.1.3066': attribute type 5 has an invalid length.
[  616.427808][T17264] netlink: 'syz.1.3066': attribute type 16 has an invalid length.
[  616.446675][T17277] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3066'.
[  616.462910][T17264] netlink: 'syz.1.3066': attribute type 17 has an invalid length.
[  616.563340][T17264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  616.593858][T17286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3071'.
[  616.611999][T17286] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3071'.
[  616.633144][T17286] netlink: 'syz.4.3071': attribute type 6 has an invalid length.
[  616.648680][T17286] netlink: 'syz.4.3071': attribute type 5 has an invalid length.
[  616.666937][T17286] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3071'.
[  616.718699][T17276] netlink: 'syz.4.3071': attribute type 16 has an invalid length.
[  616.726913][T17276] netlink: 'syz.4.3071': attribute type 17 has an invalid length.
[  616.780012][T17292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  616.816830][T17276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  617.177178][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3079'.
[  617.312693][T17314] netlink: 'syz.4.3083': attribute type 1 has an invalid length.
[  617.432478][T17320] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3083'.
[  617.661099][T17324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3083'.
[  617.866920][T17307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.020476][T17314] bond5: entered promiscuous mode
[  618.039493][T17314] 8021q: adding VLAN 0 to HW filter on device bond5
[  618.103129][T17320] batadv0: entered promiscuous mode
[  618.108374][T17320] batadv0: entered allmulticast mode
[  618.120961][T17320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.139090][T17320] bond5: (slave batadv0): making interface the new active one
[  618.148010][T17320] bond5: (slave batadv0): Enslaving as an active interface with an up link
[  618.378846][T17339] netlink: 'syz.1.3085': attribute type 1 has an invalid length.
[  618.746163][T17352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.836112][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3093'.
[  619.749057][T17374] xt_CT: You must specify a L4 protocol and not use inversions on it
[  619.995422][T17381] sch_tbf: burst 5 is lower than device bridge21 mtu (1514) !
[  621.491059][T17423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  621.996626][T17436] validate_nla: 2 callbacks suppressed
[  621.996645][T17436] netlink: 'syz.0.3122': attribute type 1 has an invalid length.
[  622.074939][T17441] __nla_validate_parse: 4 callbacks suppressed
[  622.074959][T17441] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3122'.
[  622.096855][T17436] bond11: entered promiscuous mode
[  622.102939][T17436] 8021q: adding VLAN 0 to HW filter on device bond11
[  622.143218][T17441] batadv3: entered promiscuous mode
[  622.149072][T17441] batadv3: entered allmulticast mode
[  622.214014][T17441] 8021q: adding VLAN 0 to HW filter on device batadv3
[  622.256160][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3126'.
[  622.278378][T17441] bond11: (slave batadv3): making interface the new active one
[  622.287940][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3126'.
[  622.300028][T17450] netlink: 'syz.4.3124': attribute type 1 has an invalid length.
[  622.318011][T17450] netlink: 'syz.4.3124': attribute type 2 has an invalid length.
[  622.332786][T17451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3122'.
[  622.349450][T17441] bond11: (slave batadv3): Enslaving as an active interface with an up link
[  622.636269][T17456] netlink: 'syz.2.3128': attribute type 1 has an invalid length.
[  622.644854][T17456] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.3128'.
[  622.736506][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'.
[  623.069675][T17462] 8021q: adding VLAN 0 to HW filter on device team0
[  623.119650][T17462] bridge0: port 1(
0!
) entered blocking state
[  623.126040][T17462] bridge0: port 1(
0!
) entered listening state
[  623.183114][T17470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'.
[  623.213499][T17472] netlink: 'syz.0.3132': attribute type 13 has an invalid length.
[  623.222079][T17472] netlink: 'syz.0.3132': attribute type 17 has an invalid length.
[  623.531942][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.601238][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.698813][T17484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.855062][T17462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  624.019314][T17472] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.063098][T17472] 8021q: adding VLAN 0 to HW filter on device team0
[  624.121870][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  624.417969][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3140'.
[  624.610020][T17496] tipc: Resetting bearer <ib:ip6gre0>
[  624.705382][T17496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  624.739189][T17504] sch_tbf: burst 5 is lower than device bridge30 mtu (1514) !
[  624.873502][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'.
[  624.907851][T17511] sch_tbf: burst 5 is lower than device bridge22 mtu (1514) !
[  625.389436][T17530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3147'.
[  625.418674][T17530] netlink: 'syz.2.3147': attribute type 6 has an invalid length.
[  625.451263][T17530] netlink: 'syz.2.3147': attribute type 5 has an invalid length.
[  625.486172][T17532] netlink: 'syz.2.3147': attribute type 16 has an invalid length.
[  625.494955][T17532] netlink: 'syz.2.3147': attribute type 17 has an invalid length.
[  625.834353][T17532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  627.701961][T17577] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  627.742873][T17578] __nla_validate_parse: 3 callbacks suppressed
[  627.742891][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'.
[  628.044445][T17590] validate_nla: 6 callbacks suppressed
[  628.044464][T17590] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  628.059010][T17590] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3172'.
[  628.070957][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'.
[  628.165065][T17596] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  628.237370][T17597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  628.322730][T17600] netlink: 'syz.0.3174': attribute type 1 has an invalid length.
[  628.330611][T17600] netlink: 'syz.0.3174': attribute type 2 has an invalid length.
[  628.516987][T17609] netlink: 'syz.1.3176': attribute type 1 has an invalid length.
[  628.524954][T17609] netlink: 'syz.1.3176': attribute type 2 has an invalid length.
[  628.588683][T17604] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3175'.
[  628.599135][T17604] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3175'.
[  628.609230][T17604] netlink: 'syz.4.3175': attribute type 6 has an invalid length.
[  628.617207][T17604] netlink: 'syz.4.3175': attribute type 5 has an invalid length.
[  628.632709][T17604] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3175'.
[  628.646180][T17604] netlink: 'syz.4.3175': attribute type 16 has an invalid length.
[  628.654443][T17604] netlink: 'syz.4.3175': attribute type 17 has an invalid length.
[  628.810089][T17604] 8021q: adding VLAN 0 to HW filter on device team0
[  628.825009][T17604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  629.362484][T17620] netlink: 'syz.4.3180': attribute type 1 has an invalid length.
[  629.370837][T17620] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.3180'.
[  629.411101][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'.
[  629.538661][T17630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3179'.
[  629.568581][T17630] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3179'.
[  629.657660][T17618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  629.852969][T17624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  630.393367][T17654] bond9: entered promiscuous mode
[  630.399045][T17654] 8021q: adding VLAN 0 to HW filter on device bond9
[  630.419460][T17654] batadv1: entered promiscuous mode
[  630.425103][T17654] batadv1: entered allmulticast mode
[  630.432359][T17654] 8021q: adding VLAN 0 to HW filter on device batadv1
[  630.441862][T17654] bond9: (slave batadv1): making interface the new active one
[  630.450714][T17654] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  631.550795][T17694] No such timeout policy "syz0"
[  632.426784][T17725] sch_tbf: burst 5 is lower than device bridge31 mtu (1514) !
[  633.094003][T17737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  633.177843][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.229293][T17750] validate_nla: 15 callbacks suppressed
[  633.229311][T17750] netlink: 'syz.3.3223': attribute type 1 has an invalid length.
[  633.275084][T17751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  633.297489][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.313921][T17755] __nla_validate_parse: 11 callbacks suppressed
[  633.313937][T17755] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3223'.
[  633.366855][T17750] bond6: entered promiscuous mode
[  633.375408][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.388626][T17750] 8021q: adding VLAN 0 to HW filter on device bond6
[  633.540947][T17755] batadv2: entered promiscuous mode
[  633.558597][T17755] batadv2: entered allmulticast mode
[  633.603643][T17755] 8021q: adding VLAN 0 to HW filter on device batadv2
[  633.633275][T17760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3223'.
[  633.654214][T17755] bond6: (slave batadv2): making interface the new active one
[  633.673825][T17755] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  634.106733][   T30] audit: type=1107 audit(1750929732.788:10): pid=17765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1�d��]:xJ�P@�cd$Jny��O�^�D�#�z'
[  634.302083][T17775] netlink: 'syz.0.3228': attribute type 1 has an invalid length.
[  634.363496][T17777] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3228'.
[  634.420998][T17775] bond12: entered promiscuous mode
[  634.426996][T17775] 8021q: adding VLAN 0 to HW filter on device bond12
[  634.444753][T17777] batadv4: entered promiscuous mode
[  634.450988][T17777] batadv4: entered allmulticast mode
[  634.465181][T17777] 8021q: adding VLAN 0 to HW filter on device batadv4
[  634.493639][T17777] bond12: (slave batadv4): making interface the new active one
[  634.519645][T17777] bond12: (slave batadv4): Enslaving as an active interface with an up link
[  634.613748][T17778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3228'.
[  635.028963][T17789] netlink: 'syz.2.3231': attribute type 1 has an invalid length.
[  635.048811][T17789] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.3231'.
[  635.084584][T17789] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  635.093676][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'.
[  635.465709][T17801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3234'.
[  635.475320][T17801] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3234'.
[  635.484950][T17801] netlink: 'syz.0.3234': attribute type 6 has an invalid length.
[  635.519940][T17801] netlink: 'syz.0.3234': attribute type 5 has an invalid length.
[  635.530007][T17801] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3234'.
[  635.570493][T17801] netlink: 'syz.0.3234': attribute type 16 has an invalid length.
[  635.588631][T17801] netlink: 'syz.0.3234': attribute type 17 has an invalid length.
[  635.720200][T17801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.742364][T17805] netlink: 'syz.3.3236': attribute type 1 has an invalid length.
[  635.750396][T17805] netlink: 'syz.3.3236': attribute type 2 has an invalid length.
[  635.813285][T17807] netlink: 'syz.2.3237': attribute type 1 has an invalid length.
[  636.037838][T17812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  636.045536][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'.
[  636.560606][T17832] ==================================================================
[  636.568777][T17832] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160
[  636.576695][T17832] Read of size 8 at addr ffff88807033f7b0 by task syz.1.3247/17832
[  636.584590][T17832] 
[  636.586917][T17832] CPU: 0 UID: 0 PID: 17832 Comm: syz.1.3247 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) 
[  636.586940][T17832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  636.586951][T17832] Call Trace:
[  636.586961][T17832]  <TASK>
[  636.586969][T17832]  dump_stack_lvl+0x189/0x250
[  636.586999][T17832]  ? __virt_addr_valid+0x1c8/0x5c0
[  636.587017][T17832]  ? rcu_is_watching+0x15/0xb0
[  636.587041][T17832]  ? __kasan_check_byte+0x12/0x40
[  636.587067][T17832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  636.587092][T17832]  ? rcu_is_watching+0x15/0xb0
[  636.587118][T17832]  ? lock_release+0x4b/0x3e0
[  636.587143][T17832]  ? __virt_addr_valid+0x1c8/0x5c0
[  636.587159][T17832]  ? __virt_addr_valid+0x4a5/0x5c0
[  636.587177][T17832]  print_report+0xd2/0x2b0
[  636.587198][T17832]  ? pause_parse_request+0x40/0x160
[  636.587234][T17832]  kasan_report+0x118/0x150
[  636.587252][T17832]  ? pause_parse_request+0x40/0x160
[  636.587274][T17832]  ? __pfx_pause_parse_request+0x10/0x10
[  636.587292][T17832]  pause_parse_request+0x40/0x160
[  636.587313][T17832]  ? __pfx_pause_parse_request+0x10/0x10
[  636.587332][T17832]  ethnl_default_set_doit+0x2c1/0xa40
[  636.587356][T17832]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  636.587377][T17832]  genl_family_rcv_msg_doit+0x215/0x300
[  636.587397][T17832]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  636.587419][T17832]  ? bpf_lsm_capable+0x9/0x20
[  636.587434][T17832]  ? security_capable+0x7e/0x2e0
[  636.587458][T17832]  genl_rcv_msg+0x60e/0x790
[  636.587475][T17832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  636.587488][T17832]  ? ref_tracker_free+0x63a/0x7d0
[  636.587510][T17832]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  636.587534][T17832]  ? __pfx_ref_tracker_free+0x10/0x10
[  636.587562][T17832]  netlink_rcv_skb+0x205/0x470
[  636.587583][T17832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  636.587598][T17832]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  636.587626][T17832]  ? down_read+0x1ad/0x2e0
[  636.587649][T17832]  genl_rcv+0x28/0x40
[  636.587674][T17832]  netlink_unicast+0x758/0x8d0
[  636.587697][T17832]  netlink_sendmsg+0x805/0xb30
[  636.587723][T17832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.587746][T17832]  ? aa_sock_msg_perm+0x94/0x160
[  636.587767][T17832]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  636.587788][T17832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.587810][T17832]  __sock_sendmsg+0x21c/0x270
[  636.587830][T17832]  ____sys_sendmsg+0x505/0x830
[  636.587857][T17832]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.587887][T17832]  ? import_iovec+0x74/0xa0
[  636.587904][T17832]  ___sys_sendmsg+0x21f/0x2a0
[  636.587929][T17832]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.587971][T17832]  ? __fget_files+0x2a/0x420
[  636.587989][T17832]  ? __fget_files+0x3a0/0x420
[  636.588011][T17832]  __x64_sys_sendmsg+0x19b/0x260
[  636.588037][T17832]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.588074][T17832]  ? rcu_is_watching+0x15/0xb0
[  636.588102][T17832]  ? do_syscall_64+0xbe/0x3b0
[  636.588125][T17832]  do_syscall_64+0xfa/0x3b0
[  636.588145][T17832]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.588164][T17832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.588180][T17832]  ? clear_bhb_loop+0x60/0xb0
[  636.588198][T17832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.588214][T17832] RIP: 0033:0x7f999798e929
[  636.588231][T17832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.588246][T17832] RSP: 002b:00007f9998766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.588264][T17832] RAX: ffffffffffffffda RBX: 00007f9997bb5fa0 RCX: 00007f999798e929
[  636.588277][T17832] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  636.588288][T17832] RBP: 00007f9997a10b39 R08: 0000000000000000 R09: 0000000000000000
[  636.588298][T17832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.588309][T17832] R13: 0000000000000000 R14: 00007f9997bb5fa0 R15: 00007fff53e91e38
[  636.588330][T17832]  </TASK>
[  636.588335][T17832] 
[  636.969750][T17832] Allocated by task 17832:
[  636.974154][T17832]  kasan_save_track+0x3e/0x80
[  636.978836][T17832]  __kasan_kmalloc+0x93/0xb0
[  636.983415][T17832]  __kmalloc_noprof+0x27a/0x4f0
[  636.988258][T17832]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  636.994323][T17832]  genl_family_rcv_msg_doit+0xb8/0x300
[  636.999776][T17832]  genl_rcv_msg+0x60e/0x790
[  637.004267][T17832]  netlink_rcv_skb+0x205/0x470
[  637.009031][T17832]  genl_rcv+0x28/0x40
[  637.013018][T17832]  netlink_unicast+0x758/0x8d0
[  637.017782][T17832]  netlink_sendmsg+0x805/0xb30
[  637.022556][T17832]  __sock_sendmsg+0x21c/0x270
[  637.027242][T17832]  ____sys_sendmsg+0x505/0x830
[  637.032008][T17832]  ___sys_sendmsg+0x21f/0x2a0
[  637.036692][T17832]  __x64_sys_sendmsg+0x19b/0x260
[  637.041625][T17832]  do_syscall_64+0xfa/0x3b0
[  637.046121][T17832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.052011][T17832] 
[  637.054338][T17832] The buggy address belongs to the object at ffff88807033f780
[  637.054338][T17832]  which belongs to the cache kmalloc-64 of size 64
[  637.068211][T17832] The buggy address is located 8 bytes to the right of
[  637.068211][T17832]  allocated 40-byte region [ffff88807033f780, ffff88807033f7a8)
[  637.082612][T17832] 
[  637.084928][T17832] The buggy address belongs to the physical page:
[  637.091338][T17832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7033f
[  637.100085][T17832] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  637.107618][T17832] page_type: f5(slab)
[  637.111597][T17832] raw: 00fff00000000000 ffff88801a4418c0 ffffea0000e24540 dead000000000005
[  637.120171][T17832] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[  637.128742][T17832] page dumped because: kasan: bad access detected
[  637.135153][T17832] page_owner tracks the page as allocated
[  637.140851][T17832] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14062, tgid 14061 (syz.3.2281), ts 473838843585, free_ts 466414353284
[  637.160285][T17832]  post_alloc_hook+0x240/0x2a0
[  637.165045][T17832]  get_page_from_freelist+0x21e4/0x22c0
[  637.170586][T17832]  __alloc_frozen_pages_noprof+0x181/0x370
[  637.176400][T17832]  alloc_pages_mpol+0x232/0x4a0
[  637.181239][T17832]  allocate_slab+0x8a/0x3b0
[  637.185738][T17832]  ___slab_alloc+0xbfc/0x1480
[  637.190403][T17832]  __kmalloc_noprof+0x305/0x4f0
[  637.195247][T17832]  hash_netport4_resize+0xa82/0x1b60
[  637.200525][T17832]  call_ad+0x44e/0xb00
[  637.204585][T17832]  ip_set_ad+0x791/0x930
[  637.208817][T17832]  nfnetlink_rcv_msg+0xb4a/0x1130
[  637.213832][T17832]  netlink_rcv_skb+0x205/0x470
[  637.218586][T17832]  nfnetlink_rcv+0x26a/0x2520
[  637.223251][T17832]  netlink_unicast+0x758/0x8d0
[  637.228012][T17832]  netlink_sendmsg+0x805/0xb30
[  637.232779][T17832]  __sock_sendmsg+0x21c/0x270
[  637.237447][T17832] page last free pid 49 tgid 49 stack trace:
[  637.243415][T17832]  __free_frozen_pages+0xc71/0xe70
[  637.248517][T17832]  ringbuf_map_free+0xc0/0x110
[  637.253277][T17832]  bpf_map_free_deferred+0xea/0x110
[  637.258472][T17832]  process_scheduled_works+0xae1/0x17b0
[  637.264021][T17832]  worker_thread+0x8a0/0xda0
[  637.268598][T17832]  kthread+0x70e/0x8a0
[  637.272656][T17832]  ret_from_fork+0x3f9/0x770
[  637.277240][T17832]  ret_from_fork_asm+0x1a/0x30
[  637.282003][T17832] 
[  637.284319][T17832] Memory state around the buggy address:
[  637.289929][T17832]  ffff88807033f680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  637.297974][T17832]  ffff88807033f700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  637.306039][T17832] >ffff88807033f780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  637.314088][T17832]                                      ^
[  637.319704][T17832]  ffff88807033f800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  637.327837][T17832]  ffff88807033f880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  637.335978][T17832] ==================================================================
[  637.353373][T17832] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  637.360604][T17832] CPU: 1 UID: 0 PID: 17832 Comm: syz.1.3247 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) 
[  637.372665][T17832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  637.382716][T17832] Call Trace:
[  637.385999][T17832]  <TASK>
[  637.388923][T17832]  dump_stack_lvl+0x99/0x250
[  637.393534][T17832]  ? __asan_memcpy+0x40/0x70
[  637.398131][T17832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  637.403333][T17832]  ? __pfx__printk+0x10/0x10
[  637.407924][T17832]  panic+0x2db/0x790
[  637.411832][T17832]  ? __pfx_panic+0x10/0x10
[  637.416261][T17832]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  637.422148][T17832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  637.428467][T17832]  ? print_memory_metadata+0x314/0x400
[  637.433926][T17832]  ? pause_parse_request+0x40/0x160
[  637.439128][T17832]  check_panic_on_warn+0x89/0xb0
[  637.444068][T17832]  ? pause_parse_request+0x40/0x160
[  637.449270][T17832]  end_report+0x78/0x160
[  637.453512][T17832]  kasan_report+0x129/0x150
[  637.458025][T17832]  ? pause_parse_request+0x40/0x160
[  637.463245][T17832]  ? __pfx_pause_parse_request+0x10/0x10
[  637.468886][T17832]  pause_parse_request+0x40/0x160
[  637.473919][T17832]  ? __pfx_pause_parse_request+0x10/0x10
[  637.479576][T17832]  ethnl_default_set_doit+0x2c1/0xa40
[  637.484959][T17832]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  637.491302][T17832]  genl_family_rcv_msg_doit+0x215/0x300
[  637.496874][T17832]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  637.502958][T17832]  ? bpf_lsm_capable+0x9/0x20
[  637.507644][T17832]  ? security_capable+0x7e/0x2e0
[  637.512594][T17832]  genl_rcv_msg+0x60e/0x790
[  637.517101][T17832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  637.522125][T17832]  ? ref_tracker_free+0x63a/0x7d0
[  637.527154][T17832]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  637.533061][T17832]  ? __pfx_ref_tracker_free+0x10/0x10
[  637.538458][T17832]  netlink_rcv_skb+0x205/0x470
[  637.543234][T17832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  637.548280][T17832]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  637.553588][T17832]  ? down_read+0x1ad/0x2e0
[  637.558021][T17832]  genl_rcv+0x28/0x40
[  637.562018][T17832]  netlink_unicast+0x758/0x8d0
[  637.566785][T17832]  netlink_sendmsg+0x805/0xb30
[  637.571560][T17832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.576872][T17832]  ? aa_sock_msg_perm+0x94/0x160
[  637.581835][T17832]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  637.587126][T17832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.592438][T17832]  __sock_sendmsg+0x21c/0x270
[  637.597123][T17832]  ____sys_sendmsg+0x505/0x830
[  637.601916][T17832]  ? __pfx_____sys_sendmsg+0x10/0x10
[  637.607220][T17832]  ? import_iovec+0x74/0xa0
[  637.611723][T17832]  ___sys_sendmsg+0x21f/0x2a0
[  637.616415][T17832]  ? __pfx____sys_sendmsg+0x10/0x10
[  637.621642][T17832]  ? __fget_files+0x2a/0x420
[  637.626248][T17832]  ? __fget_files+0x3a0/0x420
[  637.630932][T17832]  __x64_sys_sendmsg+0x19b/0x260
[  637.635883][T17832]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  637.641358][T17832]  ? rcu_is_watching+0x15/0xb0
[  637.646138][T17832]  ? do_syscall_64+0xbe/0x3b0
[  637.650820][T17832]  do_syscall_64+0xfa/0x3b0
[  637.655325][T17832]  ? lockdep_hardirqs_on+0x9c/0x150
[  637.660520][T17832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.666594][T17832]  ? clear_bhb_loop+0x60/0xb0
[  637.671269][T17832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.677163][T17832] RIP: 0033:0x7f999798e929
[  637.681577][T17832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.701178][T17832] RSP: 002b:00007f9998766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  637.709598][T17832] RAX: ffffffffffffffda RBX: 00007f9997bb5fa0 RCX: 00007f999798e929
[  637.717579][T17832] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  637.725569][T17832] RBP: 00007f9997a10b39 R08: 0000000000000000 R09: 0000000000000000
[  637.733721][T17832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  637.741691][T17832] R13: 0000000000000000 R14: 00007f9997bb5fa0 R15: 00007fff53e91e38
[  637.749667][T17832]  </TASK>
[  637.753061][T17832] Kernel Offset: disabled
[  637.757386][T17832] Rebooting in 86400 seconds..