last executing test programs:

9.996357016s ago: executing program 3 (id=11740):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
socket(0x8, 0x1, 0x7) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
shutdown(r0, 0x0) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

9.697236539s ago: executing program 3 (id=11743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600010a}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd45a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x24004040) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040044)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x88}}, 0x2004008c) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_IE={0x6e, 0x2a, [@mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x3}, @dsss={0x3, 0x1, 0x95}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x7c, 0xab}}, @dsss={0x3, 0x1, 0x9d}, @erp={0x2a, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0x4}}, @random={0x7, 0xc, "f0bf17904401e0bd135ee551"}, @preq={0x82, 0x3b, {{0x0, 0x1, 0x1}, 0x7, 0xdf, 0x4, @device_a, 0xc, @void, 0x8, 0x7fff, 0x3, [{{0x1}, @broadcast, 0x33b}, {{0x1, 0x0, 0x1}, @broadcast, 0xd}, {{}, @device_a, 0x2}]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008804}, 0x44000004) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000006c0)='dctcp\x00', 0x6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x404c041)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000900)) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=<r11=>0x0)
sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x24}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b40)={'gretap0\x00', <r13=>0x0, 0x20, 0x8, 0x7, 0x2, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @local, {[@cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}]}}}}}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x7f, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000ec0)={'sit0\x00', <r15=>0x0, 0x700, 0x7, 0x8, 0x5, {{0x1b, 0x4, 0x3, 0x1, 0x6c, 0x67, 0x0, 0x41, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, {[@generic={0x83, 0xe, "1d22c5433a6c3d67ee7b45b1"}, @noop, @generic={0x94, 0x5, "dbaaab"}, @noop, @timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x1, [{@broadcast, 0x1ff}, {@loopback, 0x5f}, {@local, 0x25}]}, @rr={0x7, 0x27, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @loopback, @local, @empty, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000fc0)={<r16=>0x0, @multicast1, @loopback}, &(0x7f0000001000)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'syztnl1\x00', <r17=>0x0, 0x4, 0x9, 0x9, 0x9, 0x22, @loopback, @loopback, 0x1, 0x7800, 0x4, 0x3}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'sit0\x00', &(0x7f0000001100)={'syztnl2\x00', <r18=>0x0, 0x8, 0x8000, 0x7, 0x3, {{0x48, 0x4, 0x0, 0x2, 0x120, 0x66, 0x0, 0x10, 0x4, 0x0, @local, @remote, {[@noop, @generic={0x7, 0xa, "8b7d07a197106e09"}, @rr={0x7, 0x27, 0x30, [@private=0xa010102, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @multicast2, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x71, 0x2, [{0x0, 0xe, "a2d5eb40ba4b6d157536dbf4"}, {0x6, 0xd, "785f9367dc466951a48b77"}, {0x0, 0x2}, {0x1, 0xe, "b901f19e7c39cb922c17b59d"}, {0x6, 0xf, "98e40f21ce04a48cc717399faa"}, {0x6, 0x11, "101e605e88ec4e4252bbce4966b3bc"}, {0x0, 0x4, "2d02"}, {0x6, 0xb, "4086c0b43bc2c9885e"}, {0x1, 0x7, "668750a553"}, {0x0, 0xa, "b24fb9b93f9923ce"}]}, @timestamp_prespec={0x44, 0x3c, 0x74, 0x3, 0x9, [{@multicast2, 0xb6a}, {@local, 0x1}, {@broadcast, 0x9}, {@multicast2, 0x5}, {@local, 0x4}, {@local, 0x4}, {@multicast2, 0x93a}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x1, [0x6, 0x9c]}, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x5, "651921"}, {0x6, 0xf, "73c1412f448810ab4924cd2662"}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001300)={'ip6tnl0\x00', &(0x7f0000001280)={'ip6_vti0\x00', <r19=>0x0, 0x29, 0x2, 0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x7800, 0x7800, 0x7f, 0x3}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001f40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d00)={0x1dc, r12, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe260cd50f39fcb4c}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x2040}, 0x20000000)

8.993688381s ago: executing program 3 (id=11749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x88, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @from_mac=@device_b}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SSID={0x4}]}, 0x88}}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000300))
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x1, 0x1, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f00000003c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000380)=0xb)

8.561034254s ago: executing program 3 (id=11759):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff, 0x1, [0x6]}, 0xa)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4079, 0xfef}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/261, 0x105}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000100)=""/147, 0x93}], 0x9}, 0x81}], 0x3, 0x2140, 0x0)

7.513933852s ago: executing program 3 (id=11783):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket(0x14, 0x2, 0x4)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x61e0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

7.32448665s ago: executing program 3 (id=11787):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)

4.340924358s ago: executing program 4 (id=11859):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc)

4.185143054s ago: executing program 4 (id=11863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0512800b00010062726964676500000c0402800500160001400000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.159342178s ago: executing program 4 (id=11864):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4584a8b1308f11954b3a", 0xa)

4.086588469s ago: executing program 4 (id=11865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x1000c000)

3.920350217s ago: executing program 4 (id=11867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
r3 = socket(0x2, 0x2, 0x0)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@base={0x12, 0x7d, 0x8, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r5, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r3}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={<r8=>r7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20)
recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0)
sendmmsg$unix(r3, &(0x7f00000008c0)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000440)="8eae5fa58a599ae9a4839ee839606ca92110931cb0d4d111529338369d08b010f02e5c8ba9286cac4b1a6f7c2ddebbbe6390839d8dcb247962c74a88f37dd5ba4365aebb6dc6d61751e64953675fd3361301066154965b5360f5e8a46e791badeb828c", 0x63}, {&(0x7f00000004c0)="a8315da7be18f8834efc4c20d6367fb1544dc1bc481cdd50770a623d4113b5f36596de4379540518b795d0db082e985b86d57f1e2d7ff274e9cafe36ae33d75228049bf8bc7cff183dd6b2c9603ce18b51f7b8eacbde3d9db8c14aa847ebb9642236fedff8efe51cd2237ce73a1132c00b2397bbfdc17b4c8ea2e59e8e80c718b3f83430491e701be8448b4361ca6ab09d5c56cb54f926d5e580fa75b5f8cd3872e9a1dbc7026e6d6e1b1a75e0b4826043a5bd3d6b9e0c10bf9c608ba03f6fd2e58f99", 0xc3}, {&(0x7f00000005c0)="2e008ef6270d66072cfd8a4c3c8fe3d262c1e74bea3f8384fbbd1a48e50d64638d4169cb81a3b88964545e5905fdfeb5b5b1b97c89b46c94ade2e9b10e0607512d19ed99303823b3c448ca15c7e567ed89a1b9a716aaee9fdabfb313f206ba878750192b12990d0d4ab7e0cb7eda608a171da620a05cf3b013d371d044", 0x7d}, {&(0x7f0000000640)="6c690d6d916b833176213d8ad88caf31d8bb18bc51a44e7ff55372842bc0baebde1b1aa48d30626c374e39cc5ae0cdbf2f5dab7044bfb607db224d7c24ab7f15c1eb90ec6eecf6ee836d311e1b7b83b0b519eb7e2d2a6f72119f44b89f12430d7d2e59964d133efd2b1fd1a848c50300b7cfd08c5076f87bee9c987a7305fc8646ca96e75ad641cc915e0a417bdc6b910857ffd2e243b424057532ac", 0x9c}, {&(0x7f00000007c0)="6e8cd60957ecd5487471d47747d1b72c01e062a5f779e04942e2ff3e03dda4e53716225bda8c1dd01d697ef33c44473ca559dd29ddc88cc3ccdc30f41530376195cb44601c379a487b6bfe3816db3d8eae045c0b5d90c0547bd420ce31b2c72ec7eaea54ba22a6be47476f27d1c52c436d168816f9f01d0550f51f539a3197a5a8b426b864dd27dbcd314aa1344074dd983c56257de2ce4318609de5170fd335d3d7", 0xa2}, {&(0x7f0000000b40)="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", 0x1000}], 0x6, &(0x7f0000000880)=[@rights={{0x38, 0x1, 0x1, [r8, r7, r4, r4, r9, r3, r3, r4, r3, r2]}}], 0x38}}], 0x1, 0x80)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
pipe(&(0x7f0000000000)={<r12=>0xffffffffffffffff})
bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94)
openat$cgroup_ro(r12, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)

3.109549597s ago: executing program 4 (id=11881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7ef80}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r2], 0x2c}}, 0x0) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) (async)
close(r5) (async)
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000140)) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4043, 0x8000}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x40000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fdffffff000000000000000072169a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4044)

1.498385384s ago: executing program 2 (id=11899):
r0 = socket(0x6, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000200000000000071109100000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100000001400020029bd7000a2dbdf25262ff487a88da4fb1030623eefa14c940d7fe83795bb050fd0dcfd0ba210c18a1376178a6e44147431edf2a28d4eac63639366529d19b54bb6cbc0d69b2fb58ec166a77c0cbde4f227f69cda8a43b1984f4bcd8cc1296ccf23103cb8ac8974cfb0df9edb1d612b0c24d7c79183a0b42ea358845964e5103eb9574d184b42727b1e6f656b993c8c7f1ec3f9d6d5ab2b8cdcbe9261220fe2bc35e7814dfdc643bd9ccfa0a6b27d6a5b3a0e7bc4972e89bb44e25683ccfa67c3e08ac44e54823efcce1a2af65540fffe11a9acc99f2b2e6deaf8369411b7ab069c71273d878ab924518d7373cc0390a763edf2b71c5f6be8c521cfcc4115ea27b86e4325a1faafeef466a454431eacbe62e5df0e77436db306ef64717a26195574a015e92ecfc78ec6f3471719528f6e83dcbd5bec93eee77387ae19d948f232f0a328112afb8a7d1bbdd5d14cb1e66ca2957e4c5cd0b39a3c9e13f115294135f155e775f475d0db9f509101189399"], 0x10}, 0x1, 0x0, 0x0, 0x24040000}, 0x1)

1.376300343s ago: executing program 2 (id=11901):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x18, 0x0, 0x0, 0x0)

1.232352625s ago: executing program 2 (id=11903):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000a400128009000100766c616e00000000940002800600010002000000100003800c000100d72300007f0000000c0002000100000010000000100003800c00010000f0ffff07000002400003800c00010008000000da0000000c00010009000000050000000c0001000c000000040000000c00010003000000810000000c000100f7ffffff00e037030c0002001200000016000000100003800c000100000000008000000008000500", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.059432151s ago: executing program 2 (id=11904):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x58, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x9, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x1b, [0x0, 0x0, 0x1000, 0x2]}}]}]}, 0x58}}, 0x0)

975.604862ms ago: executing program 0 (id=11906):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$unix(0x1, 0x5, 0x0)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021602030200000029bd090000dbdf25", @ANYRES64=r1], 0x10}}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
setsockopt$sock_int(r5, 0x1, 0x1a, &(0x7f0000000240), 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xfffa, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x40000)

879.579315ms ago: executing program 0 (id=11907):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_create1(0x0)
socket$kcm(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000200))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'pimreg1\x00', {0x8}, 0x6})

743.666225ms ago: executing program 0 (id=11909):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)=""/84, &(0x7f0000000040)=0x54)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0xe000, @void}}}}}}}}, 0x32)

656.02588ms ago: executing program 1 (id=11910):
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

520.092809ms ago: executing program 0 (id=11911):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xe9}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002da", 0x25}, {&(0x7f0000002d00)="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", 0xd63}], 0x7}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40)

456.937951ms ago: executing program 1 (id=11912):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f00000001c0), 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_emit_ethernet(0xea, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x18c, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf24}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5418}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4)

362.919738ms ago: executing program 1 (id=11913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdfa72bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a40000000000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4008890}, 0x24000840) (async)
r1 = socket(0x1e, 0x805, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000)
connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x412d80, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'wlan0\x00', @remote})

295.901351ms ago: executing program 0 (id=11914):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', <r2=>0x0, 0x1, 0x80, 0x3ff, 0x9, {{0x29, 0x4, 0x3, 0x3d, 0xa4, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x14, 0x3, [{0x0, 0x6, "1f4ef87d"}, {0x0, 0x8, "f3ac82311162"}]}, @rr={0x7, 0x23, 0x53, [@multicast2, @broadcast, @multicast2, @empty, @rand_addr=0x64010101, @empty, @multicast1, @local]}, @timestamp_prespec={0x44, 0x44, 0xa2, 0x3, 0x6, [{@rand_addr=0x64010101, 0x7}, {@broadcast, 0xc}, {@multicast2, 0x27f1}, {@local, 0x1}, {@local, 0x40}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@private=0xa010101, 0x8}, {@multicast1, 0x3}]}, @timestamp={0x44, 0xc, 0xaf, 0x0, 0x2, [0x3, 0xfffffff9]}, @lsrr={0x83, 0x7, 0x76, [@dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r1, 0x32fac289e70d8a4d, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1512}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={<r3=>r0, 0x8, 0x8, 0x400}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r4=>0x0)
sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000380)=@nfc={0x27, r4, 0x0, 0x2}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000400)="8fa1b34df229ec4bfbc094c55fd1d749d8bd5d2652f16622025840db1566b0081c86a83ffe4d0c8a8f9519f75236ac2d9a038da4aa0a241a44c6cff6acff0d97dc83dc3106ae7719baf0ca24adb87cd9b06bdff1a26b88c09b01c13df900844703e99bfc2c48074744c3e8aa4df7fa0085458008d3e8f7d8d0a4ae55259354ff0bccc6ebb9d51482607a49c7cb4d48624da2cc0c01c89018684742c4ff27df7821", 0xa1}, {&(0x7f00000004c0)="f3a441df710f6254e69d23f6f6d8a366d0dea62bf4a6f519d0c11f903c3e967e85f71080e4294e19a96161e842f8e025ce3e23d65daf39c8b16aabaf0856e60e66c8c076a9bbbc53488cf5f1bde4077f82d1f8f00d6a081b0ae72a34093df93bff47968b62d34bb7a2008bbb90eca31a49401de0f87df2a628cf0659174429211d1eb3a7c1e66275b74a312c3350529af4aed34ca2baeb4fd86233ab79a2c33fd3e76059cc07cc53bb922a9182536ae803913b3c713d47f1483f25fd78d39652ac3148716b7cb70b15228094ad96b7a3973b54eed26d8a175097be65f6bdf709", 0xe0}, {&(0x7f00000005c0)="0bdf3e8f62dfb6a230570cd2ae0c0dbec9fc8453eae87c", 0x17}, {&(0x7f0000000600)="4a1f7f19c7c3f64af23303e1c4480239fcc6c9a12c5e1521f7d33c2dee99dae8d48e48d7221d52b221d1acc5ed425a8b6e1314ca67255c9a02d9eb20b8cce083", 0x40}, {&(0x7f0000000640)="5990628bfa16197c687dabaaca8fa4a8fd630ebbcdd5c55fb03efed506875ec55b0eda3f9beec5d8fcb8a0e77f75aa1301d4e46fd52209f45bce3e54284182f980db7214d4a62c612baefd13c57580d927c62c34d771518aad132f0234f0da23820c6acf4dbe7cb5fd07f68182f00ef0759fc27483eb897de6f933ba3336a15d12efdd36fd0603a7c32088febad6f9e84413544bc9ac57cd72c62b9c1a56d5b5f1a3c5e484ec64dd4dfdc558688462a114580b5bd2af343c61ec4e7eb4343dd95d842778b9c6a900a3655545781f3cc1eba1875ef70c2f2c03650b4cebd5f8f311a973a2d809a1203328ef1e1f68dc6131cffaedf76077f6401aec4e26515acde9dfe986d6e3caa539681b1a824f6690dbeaa9cbd23dda19a347f5cc4d726f984c3f437fcb2f29acfdd334f4ada9ed2ea4023acfe59108959a1b48dc2616f4300b1254c999243bb355bdb7804c08665038a3b2d0c40e6fddcbd75e066aab84e6a1e83cd5ef94c49917a304ece63b6f5cf47afc773a55da869c283bffbf7c2b0e370b2b2548cfa32c7e72b4c4a6d650ea9e2fd0d5b3efac2b76c979a042e4f71607f8ba16322c210f17a4f35fec6cf0c964c5f0689f6f3b3d3f81a93ffa2cc4358975b2d7629e02f0cf8c7dd1d21e1d406a98c198b601b7f13fc862ce190e72e9f33313f3daaf17454f83fab9e2a279902e6697460f6320f2b8f28de5dc1672115248dada2c86c356ade24a445af90066daa8a8e50b29cdb321ce755b65a2ce7f589ee0f4bd0640bcddec4a2fc9133c11c4aa5464769e6b579a97ad1dc93bf2c551c155ecf0b63dce82dc76d44b392bbe97316eeecc720f5c6c229e3adadc1bc0e19b2eace6de8ad85a778128950e53814aafa30aaab5f474d715780b744401ca6bcfb99766ff2dd63f3d10bb756a902ce21b7b004752c4fffbbcc7dd0529d0d0c61044a47cdf50d8d974dc3e15c2bd1edd332c918783b7cf2247a6284fc69073d5ce943d271b24394536032c2f081c39d54bea36c3ec1ce9e90246b107737b2f3048cfbe9eb9a97b12c8c71da412f7b7fc487fdc9f327c8a0c7b1f1410b7586a33f44a1c3274406ef07d4af6693fb887695ea4ac8a60c22542fb61ff7997d25eea012162acb42a70187714ed7ba164b921e0fdd700ed334321e8393505c2064dba384d2d6e18be9f7f8ab5cc86a59d23944baf4c4d67ad7ee86f2b9c26a506149d81b845d1961848c4873d2189416cf7aa8a6701eac1f72e205044ce9b05a6a0c08d2f6e39d461f1480c0a26b56273a5cda69e9f286e94c7f1881a36d1699a9b3f37e5142583051abdb23d13e66c7a087378e109b2ecbd1caf387b46ea9aa95f061a081c264b1cce7227338d64bf2384eed246ce9201a2c1618136c3a95a1754440070320567199a5b9ec7ed87575d1a5f001e83ae4be41f448b680a019c29feafb75eb109c141932f00db0c810181bc30245ce98b6eb280f09abd44222e7541fc1c36074b8c5091b1c0cc341d96d83df6ab99d76463a669397a452dfbee8a57ed34d3d787183382c71ba21bd87e5235b3527e5d918f0b77910d6f92e3f8b6ef6c6f26dbd211be5b6033b38596260be1bd4667c36e9f49391739e3a2c358c0c5968a7e25082a7dd41a6a800de2d7176b4a15f2a60ca52cfc88f62ad362a827c46622928f55663d17a4675c656ffc2832cdad25b18734df713c5bed17f0012c5ba4a225c7e73dc41894306011553d1cf30eaa24b3d11ac0f4e3eb33a8d1658a8f54a869accec0d7e1fe713cab2d3987f970c001b784ca661457227ccc165728232aa3a59b62ff23be9420c97ecdbfba0631dc49e535c09064dbd5282ad31174568bc5618305b0a7f8b6f4c6ed4d3f674a8de752f9f367763a94f771d4a799c50885c66938900ddeb8320098ea40f3a586a06d11720a03a240fee730b2d331e98629fe6eb1d1d2fefcf5dc03d9d29b80204d101bb03c95360056c2322c1d6984f5e3dea81378990f61b12b275e442712e1a593627f123b6e9ebd54a085d0e925d2a3974360becb44ab863ec3b079ffccbb10166ee0f703e42586cf04830a7611c6b385f2f7479f7da3f9797c76585cf9d7e60ba40f88df6be469d8fffc17fbdddd803d185d88320b0801ee12e80a440b5735f247921b6287c96a19a70d15c7d5c63055d4263a8ae423c79436623991609c9b0bad5787201cd3f60f67b418761ec1203af86f31518f028b0e638de9f7966328d193f484a7720979ecb770476493ac4bfe1957600d02d1d95be4f92c05b32508a4491883752d23439a0b998669f1553dfe1e1a344b96d140d9f4b1b355ee19ab86e8fa1f8452ee96b220260747dd7c3c8317663d8d27e7c123f650c2f5a67ba07db50d771e0349dcf659234dce7fff16796be99746bd36ba60707904231ed92421f5d5f0ca43d6b9f6d1a6a92fef382a37f141f1b55e455939559ba91558ce0c1b49619691d994dddc1c3fce19228f616530ac3a05b4864fe9e6e1d32e6728f273e32502b42f94ff2bc1749031097279c8829df958792c31c67e170a3df9a37456065b5b1afb217eb4ac266466ec043ec0d395954c39b0035721bdf134692c6b45eec989f14672edbfb734f27487ea0b927e62b45c89717ab598e4aacf5e046c4cb69e22c72159f45528fb505428dec9ad3fac17a733c2440d18d8594170233186e453dac4af71a76903c8c328ab79de0c0aedaac77c09e25d9f6e656f926b648e7d0bceb3c7bcde32f89eea88fd2c420ab5461a56d7354975e19916f2551f6c27eb75ec3a86bb1deb1243aaedaa48d793d3c6a7eec638b2bcd0a34229503d4946e82dd727b6b5088c6673042e0b3badb52ec1faa6f38ac0043b6067e0fbc722c4e443e7a8a472daef6fb7caf9000ac036d3a2f04760b5d2c2db3a745ced1988e8a97aa0dd7efffc364a898e1b04ad29664d4efad8bdf59bfb2b05835d3dd30fe3d05c740131a289025338b8cf11ea6a84a276fc95fa476100a7c179fecbbcdd522599c43c25f38a22c3aeac80968f594073f02807eae9ee2ab7628cb1f0c4ea7605c6cc347a2ad2abc1304e7703915e29f615a569c73b800af6edbf598cd44b72008f941cd0f5f59acde7d3f91bdd697de6de18d085a118c32b24a39ead06d08b2238bb48791bcf540f67030848931e8b411fc0830bc694129dc698990655cebf8df24bf9dd5dead3e3d8eb1fa68dc061ad26bafe0e77d9fedc2968abaaabb863c2a5e0fdefd0811927892fe6e011408dae7c89a5de5fd24a6874dae9d2252cb50cc46c331d19aba368856a649517507a2a9a2fff22d73952d1f39fe6ea10c872c8e4dfd46d9bd2b73afa1ea5ec9f383f8f0a622987808c70e4276620f8045d4da9a42a2b29f972227538f3827045855ff01ef23e6956ba093acdeca6230ae55f9bce0b2428699e9b511bc879b52f85be0b9a1206e47d81f369b364b8a46ed64df37f06ecdcb5fa383fe96146439767c9d4b5eb1d8d4bab8e7f77b732fd87291f1c09a53a2a79f640be7c79cb7c76b310373adfef0abd28e72d68a8742c791a02df1ce470f5b33098da60ef4413e562d9ac38bac802c0ba8a4248477d8a0a1c3e6c7bd982bbedaad19cc6b166d8ecb66da9ddfcb733394562b33e7b84054d392c029ab61061fc4be48e13618431aab9ff7cb3b2336cd0d67b47aaaebba1de5e38a701c2e6b52a64a0c5d622aa2197c5f634c38ad25e2da00d18a1db1a6d0f641d8277b2079b626ffc27ae20672ab83a31f09aec8be1fbbb4e5de994e09cf92d2ed991fb713d658c0492c8e9f0534c7133ad96a6c919c365caa0d579064cc512551a809c44a86e80d42b228376a30ef379c3ef1401333db5a2f9b8e72d0321ea8c6399f21010186d6e3c2cf74dc157c89c104410902418a4aea24a2d6a9067edb9d6046e5919dc69ea187cdfab058aa310188586abab76be268699ba7b195e57626841558abdf85a88721542625af488031c854b5f23d3b0d6f63f655f6ca977d9a6642576d2028e54cab746c31723d87a4cc31ec2d6f60ee8ab27ac68da006946f1c7ad909157a3b95432ca5548613f0b5e6200d15e8e2940c92e81cc56dafa889c15c179a2e047c8964788bc2bad9d12990c1c91666dadd8700197f38d566e46f55dce09a48c9f24d3c74d29f8ec7357c809901e4977b75ef831aed3001cbf3a188d6a1464eb7ba0c4bf7a66a58505a2607ca924c434de65fc92427b7a005c9c1eee1a3efaa6602adaec3b58728880daaa55d75b67cb21a73c29d21b57a7b6646b1b6938fac2b4f5ca6bc3e3991625f854e90a53d79acfd29e7d34841adcd7968f1f716260a6aefd0fe8e0fe1281282c18535fe3d56987daff294840ea8414a40cc2c075d81a146e526f0be1d620b9af1385532f34fbeabbbc732b723d3226b89730331375078ee9499a6cbf4d3cd9167fab8fb0504be1e6029baf556065a0ac8638e5bbbe0860c6077b9459b90c47a46599cdf4b2e742fb0612cc8d0964daa0ad4f1c7d8eb1513cebd186c99d4655eafaa8903ad97a08e6ce8283ee0856251b598bf04549ad177d341adcd06bc613f3fda25fc94205f993429fd9e8760aa2881913834486343105131df96c34b5324c370a79fb39b6f4bd146ecdd752a0b75a6ca6c715c1f4cfb37025192667c9db64fa11e482fc5f8c55ca43710fa8ac6c3f79f02db3c1586ffbf521f3d8930e559b85a420a5a01548a8b6f715e41ffd0d8bc50a6470fb43d7c406f7760997b22124e91c53e48e7dc8b7b980da9c49c3da90b482df6d0c9ee603379c1f31fde0423e3d1ddcdf8a342d15820315861ea59f4158d4364da9abd354fc44fe0a49e868bd32d298098e6fde56066cda010230e5ed098a0fa0f7403c0db24cd6e3b1e2df2663cb12f3749d9afd64973960c9078d47b2a73822917d345c1998d7cc504762847e595c4ed473ede0abb5e732aa654eb009bf1c02a98acd90dbca5b0596131c3c9436a4eab1340ca106ab1086c2a2fc28a905131e88d9dac8856198c5c4c5f78064fcc5108c7952c7e51ff81a422703f3f16526496e77ff511545aa1795ad4eccbc2214f2e8a0bd6b8d379c6dd9efaa738aa0e21a4b01402395f150886da0d8b8e19c65cc3b1ceb14edd813ceb14e168c4052554ea7427293227c6373b26ebc2e79bfd6b707db7084806c213a0dd576d25dae803d8639313dfd6301280746d1b794b7b70cb73086d37d4484e88e5d8d7480f2487123a2de31c6124eb122bce0f9735dba439ce1fcf880ddbf1415d89a765797df87fa0286e397d157879ca21e0cf34258896d736436f8c9ee3731f1f4e9bd63141b573439f55c400fa03ff209b449d6b3cfeaec85d3a3a758656a70b3c98cb1b4339c0371f7728d74aecc188cf6d03a40ed9991c0a84a0850a01be9e1500b54420ebda4f687e1c2ef63e1551a0096512e684e670b41f1ef2d2021373568df40669b2619a5d18886a3d1230b3ce27d049c1cd040be549262c9a22824fa445fa8b127c00ad05b3906ff7b978cb2119e25d551ae33983dd6948c0c201fad351fa772970f76d665a67444b4486370fb767e532152cfe1e8351347212514d296c2f927b34f8ff48ccbf44e1c9baf827791d3d6d6eeec5997b1a0ae9774fc4c957c53cac6e182e533959f0ebcf45817d793347769bb281709e7ac57752c3ce476e02990013541c8607bf6d3372099ae26bb556da38a358b4061374112d125e0133f5876aa0f26f938207a8b09474a9717949ea428d13700d58faced3eb5595f3e9e095cd26bcdeed94121d4a1e87d", 0x1000}, {&(0x7f0000001640)="67a31682aa85a13cc9f49ac92f0524bfb254d7f21cf8e60b4df4c3333e73ca9e842a18cf32baac7c990d66731f33e6e8912225f6aa0844b62a278d6820a45e4124b83ea013d1b67b322141a29a80a476c46e43c9ad85ad8280ab21ba6eeb6a5733995b37cde1649d43e21da4f3d6fb9c59989e2293f277da859bb4c1fdcdb43328c562cf3ba3e165dec3ff6ab23cc3cae6227e19607f7c1415146105312bc654520ad1a2520765a0b6d9", 0xaa}], 0x6, &(0x7f0000001780)}, 0x400c8) (async)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xead2, '\x00', 0x0, r3, 0x4, 0x5, 0x4}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r3, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x14, 0x9640, 0x5, 0x5, 0x0, r3, 0x5, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b40)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x6, '\x00', r2, r3, 0x0, 0x5, 0x1}, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0xb, &(0x7f0000001880)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x88}, @jmp={0x5, 0x1, 0xd, 0x2, 0x8, 0xfffffffffffffff8, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit], &(0x7f0000001900)='syzkaller\x00', 0xffff6aac, 0x9b, &(0x7f0000001940)=""/155, 0x41100, 0x22, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001a00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x2, 0xf, 0x8, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001bc0)=[r3, r6, r3, r7, r8], &(0x7f0000001c00)=[{0x4, 0x4, 0x9}, {0x1, 0x5, 0xc, 0xa}], 0x10, 0x80000001}, 0x94) (async, rerun: 32)
ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000001d00)=0x2) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d80)={&(0x7f0000001d40)='rpcgss_svc_authenticate\x00', r9, 0x0, 0x3}, 0x18)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000001dc0)=""/33, &(0x7f0000001e00)=0x21)
r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000001e40), &(0x7f0000001ec0)=0x6e, 0x800)
ioctl$FIBMAP(r10, 0x1, &(0x7f0000001f00)=0x6) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001f80), r0)
sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x44, r12, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x80) (async)
getsockname$l2tp6(r3, &(0x7f00000020c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002100)=0x20)
sendmsg$nl_route(r3, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000002240)) (async)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xffffffffffffffaf)
shutdown(r10, 0x1) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000002380)=@assoc_value, &(0x7f00000023c0)=0x8) (async, rerun: 64)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002400)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f0000002480)=""/173, 0xad}], 0x1, &(0x7f0000002580)=""/85, 0x55}, 0x2) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x70, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x110}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x900}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x133}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x259}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x601}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x4)

209.33805ms ago: executing program 1 (id=11915):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)

163.375126ms ago: executing program 0 (id=11916):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x2, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
shutdown(r5, 0x2)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) (async, rerun: 32)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)="fc") (async)
ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080))
r7 = socket(0x2d, 0x2, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async, rerun: 32)
r9 = socket(0x2000000000000021, 0x2, 0x2) (rerun: 32)
shutdown(r9, 0x2)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448ca, 0x0)
shutdown(r9, 0x2) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018da645ee070000000500004638611900000000001ae54a1d9983ffff364e4732cdcc6c3d6eed17c3c7a4b09043f394a8713e3ee9524ee8c8344380b039692af2c00af92b17031cebbf91a63eccbf503c4f3ee28a205a", @ANYRES32=0x0, @ANYBLOB="0c0099000000000043000000"], 0x28}}, 0x0)

146.654471ms ago: executing program 1 (id=11917):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'r\x00'}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', <r1=>0x0, 0x2f, 0xdf, 0x5d, 0xb3f, 0x68, @local, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x8000, 0xa, 0x7fb}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x65}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x91, &(0x7f00000001c0)=""/145, 0x41100, 0x45, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x7}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x7, 0x5}, 0x10, 0x18a08, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xdb51}, 0x94)

105.099926ms ago: executing program 2 (id=11918):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x28}}, 0x84)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0], 0x0, 0x77, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000001240)}}, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

39.4948ms ago: executing program 1 (id=11919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f00000003c0)={'veth1_vlan\x00', 0x101, 0x6}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2020008}, 0xc, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28010000080a01010000000000000000050000000c000340000000000000000524000580080002400000000108000140000089170800014000000032080001400000000808000a40000000010900010073797a31000000000900020073797a310000000008000b4000000001bc000740b8669f25673e2cb5cfbc0794f42b0962dc45114c3de5a64a5f12db6488339bd3e0c5203f45a78fccb453e078a15a48060dbff8b32169560a2309804bce93a5ca7a6a6ed5787f9394a8c2bc565208e9395a7cb0f41fb04b3e3d2c23096cf20096f9fd2471b3b25eff64a41f3589d3c79bcabf4f5bdceb7837625ffedd4000952828085dffb90ad19b82c242c1cc7d03e194b898c9c2e1afb97ee6e38fff94bf95901317e3e3fa4c93a90655596e1b26bc49a39a273c3ad547e0010000180a0104000000000000000007000004080007400000000188010380b80003801400010076657468315f746f5f626174616476001400010076657468315f766972745f776966690014000100776c616e3100000000000000000000001400010070696d726567000000000000000000001400010069703665727370616e30000000000000140001007465616d300000000000000000000000140001006272696467655f736c6176655f3000001400010076657468315f746f5f626f6e6400000014000100726f7365300000000000000000000000180003801400010076657468305f746f5f7465616d00000008000140000000000800024000000006a40003801400010062726964676530000000000000000000140001006772657461703000000000000000000014000100766972745f776966693000000000000014000100766c616e31000000000000000000000014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140001006272696467655f736c6176655f310000140001006970365f7674693000000000000000000c00054000000000000000040c00054000000000000000020900020073797a30000000000900020073797a32000000000c000540000000000000000554010000080a01080000000000000000000000080c00064000000000000000044c000580080001400000002e080001400000002708000140000022f008000240000000000800024000000000080002400000000008000240000000010800024000000003080001400000003bb90007403d76506dfa84214a9347a4706b85a2e2aad3123ed2b4d146aef536a4ec4748bcd505520483c10d2c954eabc97347611226a884495f8ffaaf58d9f599a2486679701c25f700a1bfde5ce80f9b43d5bc2a222a2e3cc3777856a6810c7ff6661c667ccc18b80b1f3f2539120d7c8dfd8defe38bfb4097ead64de7be526997ae89dabbb74d881d10e6096df04c72aa0c0f6904734fc00032c787325e02fa0aaa61321de1c84c457f56b69cb80e000000080009400000000208000b400000000208000b40000000030c000640000000000000000508000b400000000320000000120a03000000000000000000070000010900020073797a3200000000b40000000b0a0103000000000000000001000008080005400000001e98000d40cb4ef6cdd80e78052edd8bfa655eeeb905112a60e04d4c6d12811fdf83df880e7b46efcbd34737675e5ea78ee9c8a1452e587c607a6bd5e2d6b4f57d92aaa617a53346f45315c7f3efa2e3d16f736142b2e0c294fcc3a7e69a052e2d5c63aea17188f84eccd23629c7d3a13f8282e0a48ada4134e5005417100b87ae8c6bb75c82db238cd6cfc254d50f0c9bf25891b8094e0bc564010000000a01040000000000000000000000040900010073797a31000000005c000600ce2440c3b846ce8348a063103efad842f3a37213fec32a4c7a3b59621d42d5916af6a08d25acec2312813e73aefb97589afb2e29af5b02b1f6ed428b803442750fc8a9dcf6440b2dc30f41b55c2eb787aa693b1d0347c4b880000600c3bf61030860954ae9a18b3105495984ad8cf6892388d275d6bd44d8bac5f8ed9ecb16144253e88cbd7855624b81ef0617969c520082c4ff1d87464fb7a7959b6a1a000bbf5fd8b7aa9dc3b422a32444a7f1a7176680440c63bca05733b01e70da36bf33c2c1133349506f57eb9f117d8ffc64cfdad62d67cd872c3168000600eabfcfac8bec77ff3e495f6ad0e75f8a5b8bbb027f83c381c334af01bdd0f9c9b02b7dffb97cffd9bb2f41b9ae3bd68c77a95a66cfa83effeeec2e4fe1e2b0e3f0e5bd0bd29350ed8b196350095dc4c9f99a98cf0e1f41f34a8ab92e524df4530aeed0682c000000180a05000000000000000000010000070c00054000000000000000030c0005400000000000000001c4020000090a01020000000000000000ab00000808000340000000030900020073797a3100000000940109800800014000000001080001400000008008000140fffffffd2c0102804c00018008000140000100000800014000000001080001400000c492080001400000000808000140000000f808000140000000ff080001400001000008000140000000020800014000003fe41c000180080001407fffffff080001400000adc50800014000000a034400018008000140000000080800014000000000080001400000000708000140000000030800014000000004080001400000000208000140000000ff08000140000000402c000180080001400000000808000140000009d708000140000001000800014000008001080001400000001234000180080001400000000208000140000000000800014000000004080001400000000e080001400000000608000140000000091c00018008000140000000020800014000007fff08000140000000084c0002801c0001800800014000000009080001400000020008000140000000072c000180080001400000000108000140000000070800014000000800080001400000000008000140000000070900020073797a3100000000d00012802c000180090001007866726d000000001c0002800800024000000005050003000100000005000300020000002800018007000100637400001c00028008000440000000030800044000000000080002400000000e100001800a00010071756f7461000000380001800c000100636f756e74657200280002800c00024000000000000000010c00024000000000000000080c0002400000000000000009100001800a0001006d61746368000000200001800e000100627974656f726465720000000c000280080005400000009508000640000000000800034000000110080005400000003f08000a40000000000c000b4000000000000000ff140000001100010000000000000000000a00000a"], 0x9ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xa}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@bridge_getlink={0x138, 0x12, 0x0, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x5a090, 0x44006}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_AF_SPEC={0xe4, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0xffff}, {0x8, 0x1c, 0x0, 0x0, 0x10000}, {0x8, 0x16, 0x0, 0x0, 0x8000}, {0x8, 0x4, 0x0, 0x0, 0x1}, {0x8, 0x17, 0x0, 0x0, 0xbb8d}, {0x8, 0x18}]}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}]}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x4}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x3, 0x0, 0x0, 0x2}, {0x8, 0x16, 0x0, 0x0, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x8}, {0x8, 0x5, 0x0, 0x0, 0x8}, {0x8, 0x1a, 0x0, 0x0, 0x8}, {0x8, 0x2, 0x0, 0x0, 0xb02}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}, @AF_BRIDGE={0x4}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x14fae}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "023822257571cf"}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)

0s ago: executing program 2 (id=11920):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4da, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5785}}], 0x18}}], 0x2, 0x4c040)

kernel console output (not intermixed with test programs):

ibute type 3 has an invalid length.
[  617.019077][ T5725] netlink: 'syz.3.9352': attribute type 3 has an invalid length.
[  617.027893][ T5723] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  617.027972][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  617.046566][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  617.059820][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  617.068510][ T5723] openvswitch: netlink: Duplicate key (type 0).
[  617.078741][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  617.086829][ T5719] bond0: entered promiscuous mode
[  617.098846][ T5719] bond_slave_0: entered promiscuous mode
[  617.111666][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  617.118991][ T5719] bond_slave_1: entered promiscuous mode
[  617.142639][ T5719] bond0: left promiscuous mode
[  617.151655][ T5719] bond_slave_0: left promiscuous mode
[  617.171013][ T5861] Bluetooth: hci2: command tx timeout
[  617.178038][ T5719] bond_slave_1: left promiscuous mode
[  617.352671][ T5726] hsr0 speed is unknown, defaulting to 1000
[  617.547709][ T5753] netlink: 'syz.1.9362': attribute type 4 has an invalid length.
[  617.563292][ T5753] netlink: 'syz.1.9362': attribute type 4 has an invalid length.
[  617.860907][ T5726] chnl_net:caif_netlink_parms(): no params data found
[  617.879876][ T5764] netlink: 'syz.1.9363': attribute type 25 has an invalid length.
[  617.919763][ T5764] __nla_validate_parse: 6 callbacks suppressed
[  617.919783][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9363'.
[  618.032519][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.039810][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.057235][ T5726] bridge_slave_0: entered allmulticast mode
[  618.064681][ T5726] bridge_slave_0: entered promiscuous mode
[  618.115653][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.127968][ T5794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9372'.
[  618.140366][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.147743][ T5726] bridge_slave_1: entered allmulticast mode
[  618.165030][ T5726] bridge_slave_1: entered promiscuous mode
[  618.220761][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.248342][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.260540][ T5802] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9373'.
[  618.278580][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9373'.
[  618.288161][ T5804] netlink: 'syz.4.9374': attribute type 10 has an invalid length.
[  618.327718][ T5804] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  618.343090][ T5726] team0: Port device team_slave_0 added
[  618.353037][T28665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.354769][ T5726] team0: Port device team_slave_1 added
[  618.381330][T28665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.440256][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.463616][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.492214][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.506525][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9376'.
[  618.522048][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.529024][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.572176][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.789534][ T5726] hsr_slave_0: entered promiscuous mode
[  618.798283][ T5726] hsr_slave_1: entered promiscuous mode
[  618.804899][ T5726] debugfs: 'hsr0' already exists in 'hsr'
[  618.810836][ T5726] Cannot create hsr debugfs directory
[  618.823342][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9379'.
[  618.928772][ T5834] netlink: 'syz.1.9383': attribute type 21 has an invalid length.
[  618.952474][ T5834] netlink: 'syz.1.9383': attribute type 22 has an invalid length.
[  618.985760][ T5834] netlink: 'syz.1.9383': attribute type 23 has an invalid length.
[  619.017936][ T5834] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9383'.
[  619.078740][ T5847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.119576][ T5839] hsr0 speed is unknown, defaulting to 1000
[  619.170196][ T5861] Bluetooth: hci5: command tx timeout
[  619.184042][ T5726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  619.204480][ T5726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  619.224558][ T5726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  619.250337][ T5861] Bluetooth: hci2: command tx timeout
[  619.259273][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9386'.
[  619.298993][ T5726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  619.319242][ T5726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  619.349412][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9392'.
[  619.351988][ T5726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  619.395858][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9392'.
[  619.438814][ T5726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  619.472450][ T5726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  619.497089][ T5726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  619.614013][ T5726] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  619.624377][ T5726] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  619.636520][ T5726] netdevsim netdevsim0  (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  619.919029][ T5726] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  619.962937][ T5726] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  620.010375][ T5920] syz.1.9402: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  620.043121][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.1.9402 Not tainted syzkaller #0 PREEMPT(full) 
[  620.043153][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  620.043168][ T5920] Call Trace:
[  620.043176][ T5920]  <TASK>
[  620.043186][ T5920]  dump_stack_lvl+0x189/0x250
[  620.043216][ T5920]  ? __pfx_dump_stack_lvl+0x10/0x10
[  620.043240][ T5920]  ? __pfx__printk+0x10/0x10
[  620.043267][ T5920]  ? lock_release+0x4b/0x3e0
[  620.043301][ T5920]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  620.043327][ T5920]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  620.043353][ T5920]  warn_alloc+0x214/0x310
[  620.043389][ T5920]  ? __pfx_warn_alloc+0x10/0x10
[  620.043423][ T5920]  ? __get_vm_area_node+0x28f/0x300
[  620.043452][ T5920]  ? packet_set_ring+0x6f4/0x2350
[  620.043478][ T5920]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  620.043526][ T5920]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  620.043557][ T5920]  ? alloc_pages_mpol+0x3cd/0x4a0
[  620.043587][ T5920]  ? packet_set_ring+0x6f4/0x2350
[  620.043611][ T5920]  vzalloc_noprof+0xb2/0xf0
[  620.043640][ T5920]  ? packet_set_ring+0x6f4/0x2350
[  620.043665][ T5920]  packet_set_ring+0x6f4/0x2350
[  620.043701][ T5920]  ? __pfx_packet_set_ring+0x10/0x10
[  620.043721][ T5920]  ? lock_acquire+0x5f/0x360
[  620.043752][ T5920]  ? rcu_is_watching+0x15/0xb0
[  620.043772][ T5920]  ? lock_release+0x4b/0x3e0
[  620.043802][ T5920]  ? __might_fault+0xb0/0x130
[  620.043830][ T5920]  ? __might_fault+0xcc/0x130
[  620.043859][ T5920]  ? _copy_from_user+0x94/0xb0
[  620.043886][ T5920]  packet_setsockopt+0xc5a/0x12c0
[  620.043913][ T5920]  ? __pfx_packet_setsockopt+0x10/0x10
[  620.043935][ T5920]  ? file_init_path+0x3b/0x590
[  620.043975][ T5920]  ? aa_sk_perm+0x81e/0x950
[  620.044005][ T5920]  ? rcu_is_watching+0x15/0xb0
[  620.044028][ T5920]  ? __pfx_aa_sk_perm+0x10/0x10
[  620.044056][ T5920]  ? lock_release+0x4b/0x3e0
[  620.044085][ T5920]  ? __se_sys_futex+0x36f/0x400
[  620.044111][ T5920]  ? aa_sock_opt_perm+0xff/0x1b0
[  620.044131][ T5920]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  620.044155][ T5920]  ? __pfx_packet_setsockopt+0x10/0x10
[  620.044180][ T5920]  do_sock_setsockopt+0x17c/0x1b0
[  620.044205][ T5920]  __x64_sys_setsockopt+0x13f/0x1b0
[  620.044229][ T5920]  do_syscall_64+0xfa/0x3b0
[  620.044261][ T5920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.044283][ T5920]  ? clear_bhb_loop+0x60/0xb0
[  620.044308][ T5920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.044328][ T5920] RIP: 0033:0x7feed0b8ebe9
[  620.044348][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  620.044367][ T5920] RSP: 002b:00007feecedd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  620.044390][ T5920] RAX: ffffffffffffffda RBX: 00007feed0db6090 RCX: 00007feed0b8ebe9
[  620.044407][ T5920] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000008
[  620.044420][ T5920] RBP: 00007feed0c11e19 R08: 000000000000001c R09: 0000000000000000
[  620.044435][ T5920] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  620.044450][ T5920] R13: 00007feed0db6128 R14: 00007feed0db6090 R15: 00007ffe2847c858
[  620.044475][ T5920]  </TASK>
[  620.044500][ T5920] Mem-Info:
[  620.217413][ T5936] veth0_to_bridge: entered promiscuous mode
[  620.246747][ T5920] active_anon:4379 inactive_anon:0 isolated_anon:0
[  620.246747][ T5920]  active_file:3016 inactive_file:40049 isolated_file:0
[  620.246747][ T5920]  unevictable:768 dirty:59 writeback:0
[  620.246747][ T5920]  slab_reclaimable:14413 slab_unreclaimable:207911
[  620.246747][ T5920]  mapped:30069 shmem:1358 pagetables:1216
[  620.246747][ T5920]  sec_pagetables:0 bounce:0
[  620.246747][ T5920]  kernel_misc_reclaimable:0
[  620.246747][ T5920]  free:1206336 free_pcp:16969 free_cma:0
[  620.294241][ T5726] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  620.297345][ T5920] Node 0 active_anon:17516kB inactive_anon:0kB active_file:12064kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120276kB dirty:232kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19828kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  620.467885][ T5920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  620.498593][ T5920] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  620.528665][ T5920] lowmem_reserve[]: 0 2497 2499 2499 2499
[  620.536155][ T5726] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  620.540042][ T5920] Node 0 DMA32 free:913984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17468kB inactive_anon:0kB active_file:12064kB inactive_file:158424kB unevictable:1536kB writepending:228kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:55056kB local_pcp:14564kB free_cma:0kB
[  620.586691][ T5920] lowmem_reserve[]: 0 0 1 1 1
[  620.608170][ T5920] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  620.652332][ T5920] lowmem_reserve[]: 0 0 0 0 0
[  620.657213][ T5920] Node 1 Normal free:3895988kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12520kB local_pcp:0kB free_cma:0kB
[  620.689243][ T5920] lowmem_reserve[]: 0 0 0 0 0
[  620.694772][ T5920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  620.697790][ T5925] veth0_to_bridge: left promiscuous mode
[  620.710130][ T5920] Node 0 DMA32: 822*4kB (UME) 721*8kB (UM) 209*16kB (UM) 70*32kB (UME) 74*64kB (UME) 97*128kB (UM) 82*256kB (UM) 42*512kB (UM) 10*1024kB (UM) 11*2048kB (ME) 197*4096kB (UM) = 913968kB
[  620.733466][ T5920] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  620.753267][ T5920] Node 1 Normal: 205*4kB (UM) 70*8kB (UME) 51*16kB (UME) 197*32kB (UME) 44*64kB (UME) 11*128kB (UME) 7*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3895988kB
[  620.788670][ T5920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  620.818762][ T5920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  620.828529][ T5920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  620.839200][ T5920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  620.860220][ T5920] 44419 total pagecache pages
[  620.865010][ T5920] 0 pages in swap cache
[  620.869320][ T5920] Free swap  = 124996kB
[  620.874390][ T5920] Total swap = 124996kB
[  620.878661][ T5920] 2097051 pages RAM
[  620.889828][ T5920] 0 pages HighMem/MovableOnly
[  620.895303][ T5920] 425660 pages reserved
[  620.900570][ T5920] 0 pages cma reserved
[  620.972843][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.067619][ T5726] 8021q: adding VLAN 0 to HW filter on device team0
[  621.203355][T28667] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.210624][T28667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.226754][T28667] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.233927][T28667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.250947][ T5861] Bluetooth: hci5: command tx timeout
[  621.738655][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.748586][ T6008] validate_nla: 6 callbacks suppressed
[  621.748605][ T6008] netlink: 'syz.4.9425': attribute type 1 has an invalid length.
[  621.769331][ T6008] netlink: 'syz.4.9425': attribute type 6 has an invalid length.
[  621.789680][ T6005] syz_tun: entered allmulticast mode
[  621.808623][ T6008] netlink: 'syz.4.9425': attribute type 6 has an invalid length.
[  621.829815][ T6008] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  621.855329][ T6005] syz_tun: left allmulticast mode
[  621.930203][ T5726] veth0_vlan: entered promiscuous mode
[  621.983190][ T5726] veth1_vlan: entered promiscuous mode
[  622.082317][ T5726] veth0_macvtap: entered promiscuous mode
[  622.114124][ T5726] veth1_macvtap: entered promiscuous mode
[  622.174449][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.209954][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.249157][ T6038] netlink: 'syz.4.9434': attribute type 21 has an invalid length.
[  622.259955][ T6038] netlink: 'syz.4.9434': attribute type 1 has an invalid length.
[  622.317918][T28664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.359088][T28672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.380222][T28672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.402661][T28672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.431557][ T6045] pim6reg1: entered promiscuous mode
[  622.442298][ T6045] pim6reg1: entered allmulticast mode
[  622.693564][ T6072] "syz.2.9442" (6072) uses obsolete ecb(arc4) skcipher
[  622.707141][T28671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.725749][T28671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.814902][T28668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.831807][T28668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.855713][ T6082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  622.876584][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[  622.917232][ T6081] tipc: Disabling bearer <eth:syzkaller0>
[  622.933972][ T6091] __nla_validate_parse: 12 callbacks suppressed
[  622.933993][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9345'.
[  622.970962][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9345'.
[  622.980405][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9345'.
[  623.179369][ T6107] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  623.322275][ T6123] bond0: entered allmulticast mode
[  623.330568][ T5861] Bluetooth: hci5: command tx timeout
[  623.346590][ T6123] bond_slave_0: entered allmulticast mode
[  623.356288][ T6123] bond_slave_1: entered allmulticast mode
[  623.590985][ T6138] veth0: entered promiscuous mode
[  623.627949][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9457'.
[  623.639184][ T6137] veth0: left promiscuous mode
[  623.706541][ T6144] netlink: 'syz.3.9459': attribute type 16 has an invalid length.
[  623.738971][ T6144] netlink: 'syz.3.9459': attribute type 17 has an invalid length.
[  623.811487][ T6144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  623.857778][ T6158] netlink: zone id is out of range
[  623.871017][ T6158] netlink: zone id is out of range
[  623.884152][ T6158] netlink: zone id is out of range
[  623.911794][ T6158] netlink: zone id is out of range
[  623.924950][ T6158] netlink: zone id is out of range
[  623.944194][ T6158] netlink: zone id is out of range
[  623.960235][ T6158] netlink: zone id is out of range
[  623.966285][ T6158] netlink: zone id is out of range
[  624.068878][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9466'.
[  624.156723][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9465'.
[  624.304309][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9472'.
[  624.381295][ T6198] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  624.409813][ T6194] netlink: 'syz.2.9473': attribute type 16 has an invalid length.
[  624.450324][ T6194] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9473'.
[  624.477403][ T6209] netlink: 'syz.4.9476': attribute type 2 has an invalid length.
[  624.504790][ T6209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9476'.
[  624.571986][ T6215] netlink: 'syz.0.9481': attribute type 13 has an invalid length.
[  624.618238][ T6221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9482'.
[  625.068837][ T6220] geneve2: left promiscuous mode
[  625.074045][ T6220] geneve2: left allmulticast mode
[  625.106545][ T6228] C: renamed from team_slave_0 (while UP)
[  625.128890][T28659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[  625.178829][T28659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[  625.231951][T28659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[  625.264573][T28659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[  625.378086][ T6260] gretap0: entered promiscuous mode
[  625.392602][ T6260] gretap0: left promiscuous mode
[  625.410910][ T5861] Bluetooth: hci5: command tx timeout
[  625.825943][ T6298] veth0: entered promiscuous mode
[  625.832347][ T6297] veth0: left promiscuous mode
[  626.063977][ T6314] veth5: entered allmulticast mode
[  626.773040][ T6343] syz_tun: entered allmulticast mode
[  627.041948][ T6368] validate_nla: 6 callbacks suppressed
[  627.041981][ T6368] netlink: 'syz.0.9527': attribute type 10 has an invalid length.
[  627.104676][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.108521][ T6369] sctp: [Deprecated]: syz.0.9527 (pid 6369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  627.108521][ T6369] Use struct sctp_sack_info instead
[  627.112236][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.178807][ T6369] sctp: [Deprecated]: syz.0.9527 (pid 6369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  627.178807][ T6369] Use struct sctp_sack_info instead
[  627.274695][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.281895][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.289354][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.296511][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.313948][ T6368] bridge0: entered allmulticast mode
[  627.325139][ T6368] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  627.346152][ T6382] tipc: Started in network mode
[  627.353345][ T6382] tipc: Node identity 3a7dab4deda2, cluster identity 4711
[  627.372913][ T6382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.388342][ T6379] netlink: 'syz.4.9530': attribute type 1 has an invalid length.
[  627.508233][ T6382] tipc: Disabling bearer <eth:syzkaller0>
[  627.884064][ T6429] netlink: 'syz.2.9546': attribute type 1 has an invalid length.
[  627.999674][ T6438] netlink: 'syz.3.9547': attribute type 10 has an invalid length.
[  628.012708][ T6438] __nla_validate_parse: 21 callbacks suppressed
[  628.012729][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9547'.
[  628.054990][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9551'.
[  628.139483][ T6450] netlink: 'syz.2.9554': attribute type 3 has an invalid length.
[  628.209911][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9555'.
[  628.223284][ T6452] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.9555'.
[  628.357045][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9558'.
[  628.618235][ T6477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9563'.
[  628.737445][ T6489] IPVS: Error joining to the multicast group
[  629.085251][ T6517] C: renamed from team_slave_0 (while UP)
[  629.118590][ T6517] netlink: 'syz.0.9577': attribute type 1 has an invalid length.
[  629.133524][ T6517] net_ratelimit: 26 callbacks suppressed
[  629.133545][ T6517] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  629.277547][ T6533] netlink: 'syz.2.9583': attribute type 9 has an invalid length.
[  629.313209][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9583'.
[  629.358736][ T6539] netlink: 'syz.3.9586': attribute type 1 has an invalid length.
[  629.405585][ T6539] 8021q: adding VLAN 0 to HW filter on device bond3
[  629.432999][ T6539] 8021q: adding VLAN 0 to HW filter on device bond3
[  629.447348][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9587'.
[  629.448048][ T6539] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  629.474868][ T6547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9588'.
[  629.481592][ T6539] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  629.514847][ T6548] veth7: entered promiscuous mode
[  629.525414][ T6548] bond3: (slave veth7): Enslaving as an active interface with a down link
[  629.546280][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9586'.
[  629.641643][ T6559] netlink: 'syz.2.9590': attribute type 13 has an invalid length.
[  629.866017][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0
[  629.923956][ T6559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  629.946125][ T6574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.954162][ T6571] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode
[  629.962191][ T6571] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode
[  630.053639][ T6578] unknown channel width for channel at 909000KHz?
[  630.061062][ T6578] unknown channel width for channel at 909000KHz?
[  630.098542][ T6581] netlink: 'syz.2.9597': attribute type 17 has an invalid length.
[  630.102704][ T6578] unknown channel width for channel at 909000KHz?
[  630.117748][ T6581] gretap0: entered promiscuous mode
[  630.135620][ T6581] gretap0: left promiscuous mode
[  630.183320][ T6592] C: renamed from lo (while UP)
[  630.253751][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1
[  630.388968][ T6602] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  630.416115][T28661] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  630.746193][ T6637] openvswitch: netlink: Key type 85 is out of range max 32
[  630.962504][ T6662] 8021q: VLANs not supported on caif0
[  631.062708][ T5903] tipc: Node number set to 2886997162
[  631.221126][ T6673] nbd3: detected capacity change from 0 to 127
[  631.276261][ T5861] block nbd3: Receive control failed (result -32)
[  631.321934][ T6687] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  631.495568][ T6700] 8021q: adding VLAN 0 to HW filter on device bond2
[  631.516118][ T6700] bond2: (slave gretap1): making interface the new active one
[  631.525599][ T6700] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  631.602718][T27903] hid-generic 0005:16BF:5505.0006: unknown main item tag 0x0
[  631.655646][T27903] hid-generic 0005:16BF:5505.0006: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  632.428847][ T6765] tipc: Started in network mode
[  632.440236][ T6765] tipc: Node identity d620e814b88e, cluster identity 4711
[  632.447542][ T6765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  632.476087][ T6765] syzkaller0: entered promiscuous mode
[  632.495864][ T6765] syzkaller0: entered allmulticast mode
[  632.592696][ T6773] tipc: Resetting bearer <eth:syzkaller0>
[  632.625587][ T6763] tipc: Resetting bearer <eth:syzkaller0>
[  632.646633][ T6763] tipc: Disabling bearer <eth:syzkaller0>
[  632.811069][ T6788] veth0: entered promiscuous mode
[  632.852914][ T6788] veth0: left promiscuous mode
[  632.907149][ T6795] validate_nla: 3 callbacks suppressed
[  632.907170][ T6795] netlink: 'syz.0.9659': attribute type 1 has an invalid length.
[  632.930611][ T6795] netlink: 'syz.0.9659': attribute type 3 has an invalid length.
[  632.938503][ T6795] NCSI netlink: No device for ifindex 131080
[  633.211340][ T6812] bond2: entered promiscuous mode
[  633.216822][ T6812] bond2: entered allmulticast mode
[  633.230643][ T6816] __nla_validate_parse: 8 callbacks suppressed
[  633.230664][ T6816] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9665'.
[  633.254402][ T6812] 8021q: adding VLAN 0 to HW filter on device bond2
[  633.334830][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9667'.
[  633.344411][ T6821] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  633.362798][ T6821] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9667'.
[  633.402558][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9668'.
[  633.440919][ T6824] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  633.488539][ T6824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  633.549007][ T6832] netlink: 'syz.2.9670': attribute type 1 has an invalid length.
[  633.635489][ T6839] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9674'.
[  633.654452][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1
[  633.656333][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9674'.
[  633.732053][ T6842] bond1: (slave gretap1): making interface the new active one
[  633.740948][ T6842] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  634.079788][ T6874] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9684'.
[  634.428643][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9692'.
[  634.679384][ T6917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9695'.
[  634.988958][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9702'.
[  635.172538][ T6955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  635.386764][ T6972] gretap0: entered promiscuous mode
[  635.957188][ T7012] netlink: 'syz.4.9724': attribute type 10 has an invalid length.
[  635.970659][ T7012] bridge0: port 3(team0) entered blocking state
[  635.985290][ T7012] bridge0: port 3(team0) entered disabled state
[  635.992722][ T7012] team0: entered allmulticast mode
[  635.997922][ T7012] team_slave_0: entered allmulticast mode
[  636.012888][ T7012] team_slave_1: entered allmulticast mode
[  636.023316][ T7017] netlink: 'syz.4.9724': attribute type 83 has an invalid length.
[  636.039197][ T7012] team0: entered promiscuous mode
[  636.046424][ T7012] team_slave_0: entered promiscuous mode
[  636.067234][ T7017] netlink: 'syz.4.9724': attribute type 1 has an invalid length.
[  636.070886][ T7012] team_slave_1: entered promiscuous mode
[  636.081815][ T7012] bridge0: port 3(team0) entered blocking state
[  636.088174][ T7012] bridge0: port 3(team0) entered forwarding state
[  636.277722][ T7026] netlink: 'syz.4.9728': attribute type 1 has an invalid length.
[  636.335208][ T7026] bond3: (slave bridge2): making interface the new active one
[  636.344055][ T7026] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  636.543399][ T7044] netlink: 'syz.1.9732': attribute type 21 has an invalid length.
[  636.568912][ T7044] netlink: 'syz.1.9732': attribute type 3 has an invalid length.
[  636.594096][ T7052] vlan2: entered promiscuous mode
[  636.808031][ T7067] netlink: 'syz.0.9742': attribute type 8 has an invalid length.
[  636.955578][ T7075] hsr0 speed is unknown, defaulting to 1000
[  637.559806][ T7112] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode
[  637.944287][ T7149] netlink: 'syz.4.9762': attribute type 2 has an invalid length.
[  638.144601][ T7153] netlink: 'syz.0.9765': attribute type 1 has an invalid length.
[  638.170285][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.187027][ T7157] netlink: 'syz.3.9768': attribute type 1 has an invalid length.
[  638.199653][ T7157] netlink: 'syz.3.9768': attribute type 1 has an invalid length.
[  638.263509][ T7157] netlink: 'syz.3.9768': attribute type 11 has an invalid length.
[  638.306327][ T7157] __nla_validate_parse: 15 callbacks suppressed
[  638.306348][ T7157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9768'.
[  638.419868][ T7171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  638.442265][ T7166] netlink: 'syz.3.9768': attribute type 10 has an invalid length.
[  638.459962][ T7171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  638.486631][ T7157] gre1: entered promiscuous mode
[  638.497292][ T7157] gre1: entered allmulticast mode
[  638.519044][ T7166] veth0_vlan: entered allmulticast mode
[  638.626184][ T7166] veth0_vlan: left promiscuous mode
[  638.638408][ T7166] veth0_vlan: entered promiscuous mode
[  638.656889][ T7166] team0: Device veth0_vlan failed to register rx_handler
[  638.660564][ T7183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.692592][ T7171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  638.896482][T28667] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  638.933899][T28667] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  638.957961][T28667] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  639.056279][ T7187] syzkaller0: entered allmulticast mode
[  639.065049][ T7189] syzkaller1: entered promiscuous mode
[  639.077255][ T7189] syzkaller1: entered allmulticast mode
[  639.085667][T28667] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  639.327105][ T7223] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  639.394637][ T7233] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9790'.
[  639.489340][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9793'.
[  639.529873][T28667] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  639.553490][ T7250] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  639.553790][ T7239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  639.602626][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9791'.
[  639.612123][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9791'.
[  640.587908][ T7295] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9801'.
[  640.663564][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9803'.
[  640.831005][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9810'.
[  640.840368][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9808'.
[  640.862000][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9809'.
[  640.954077][T19945] IPVS: starting estimator thread 0...
[  641.009784][ T7325] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  641.042755][ T7325] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  641.054370][ T7322] IPVS: using max 36 ests per chain, 86400 per kthread
[  641.401961][ T7356] syzkaller0: entered promiscuous mode
[  641.412531][ T7356] syzkaller0: entered allmulticast mode
[  641.496338][ T7356] geneve0: mtu greater than device maximum
[  641.815076][ T7392] team_slave_0: entered promiscuous mode
[  641.820844][ T7392] team_slave_1: entered promiscuous mode
[  641.848413][ T7392] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  642.339926][ T7425] netlink: 'syz.3.9845': attribute type 5 has an invalid length.
[  642.450129][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  642.525079][ T7444] team_slave_0: entered allmulticast mode
[  643.058513][ T7481] netlink: 'syz.4.9863': attribute type 2 has an invalid length.
[  643.128406][ T7490] netlink: 'syz.1.9867': attribute type 11 has an invalid length.
[  643.249198][ T7497] netlink: 'syz.4.9870': attribute type 2 has an invalid length.
[  643.307003][ T7504] openvswitch: netlink: IP tunnel dst address not specified
[  643.407942][ T7510] __nla_validate_parse: 9 callbacks suppressed
[  643.407962][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9871'.
[  643.424327][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9871'.
[  643.460449][ T7510] netlink: 'syz.0.9871': attribute type 7 has an invalid length.
[  643.512908][ T7522] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.9871'.
[  643.687069][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9876'.
[  643.711865][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9879'.
[  643.757280][ T7535] tipc: Invalid UDP bearer configuration
[  643.757328][ T7535] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  643.809082][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9880'.
[  643.842298][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.021446][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9883'.
[  644.043675][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.314852][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9889'.
[  644.557377][ T7588] team_slave_0: left promiscuous mode
[  644.576990][ T7588] team_slave_1: left promiscuous mode
[  644.661148][ T7588] team0 (unregistering): Port device team_slave_0 removed
[  644.702695][ T7588] team0 (unregistering): Port device team_slave_1 removed
[  644.757958][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9893'.
[  644.842900][ T7593] netem: change failed
[  644.879444][ T7590] tipc: Resetting bearer <eth:syzkaller0>
[  644.911337][ T7602] netlink: 'syz.4.9896': attribute type 10 has an invalid length.
[  644.925994][ T7601] netem: change failed
[  644.950671][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.964660][ T7602] bridge_slave_1: left allmulticast mode
[  644.987566][ T7602] bridge_slave_1: left promiscuous mode
[  645.004565][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.038739][ T7602] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  645.040627][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9897'.
[  645.197527][ T7607] netlink: 'syz.1.9899': attribute type 1 has an invalid length.
[  645.259676][ T7609] pim6reg: entered allmulticast mode
[  645.451412][ T7625] netlink: 'syz.2.9906': attribute type 39 has an invalid length.
[  645.676198][ T7641] tipc: Invalid UDP bearer configuration
[  645.676263][ T7641] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  645.791848][ T7647] netlink: 'syz.0.9909': attribute type 2 has an invalid length.
[  645.894837][ T7641] netlink: 'syz.0.9909': attribute type 3 has an invalid length.
[  645.974390][ T7641] bond3: entered promiscuous mode
[  646.002680][ T7641] bond3: entered allmulticast mode
[  646.027955][ T7641] 8021q: adding VLAN 0 to HW filter on device bond3
[  646.171967][ T7662] pimreg3: entered allmulticast mode
[  646.219271][ T7670] tipc: Cannot configure node identity twice
[  646.257654][ T7670] bond0: (slave bridge0): Releasing backup interface
[  646.277938][ T7670] bridge0: left allmulticast mode
[  646.304360][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.311737][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.331121][ T7670] bridge_slave_0: left allmulticast mode
[  646.337055][ T7670] bridge_slave_0: left promiscuous mode
[  646.343858][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.369495][ T7670] bridge_slave_1: left allmulticast mode
[  646.394672][ T7670] bridge_slave_1: left promiscuous mode
[  646.402058][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.428449][ T7670] bond0: (slave bond_slave_0): Releasing backup interface
[  646.440684][ T7670] bond_slave_0: left allmulticast mode
[  646.451629][ T7688] openvswitch: netlink: Unknown key attributes 2
[  646.491560][ T7670] bond0: (slave bond_slave_1): Releasing backup interface
[  646.509818][ T7670] bond_slave_1: left allmulticast mode
[  646.539099][ T7670] team0: Port device C removed
[  646.557500][ T7670] team0: Port device team_slave_1 removed
[  646.565048][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  646.572786][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.584159][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  646.592345][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_1
[  646.632741][ T7660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  646.657505][ T7686] sit0: entered promiscuous mode
[  646.669335][ T7686] netlink: 'syz.0.9915': attribute type 1 has an invalid length.
[  646.698380][ T7696] netlink: 'syz.2.9920': attribute type 29 has an invalid length.
[  646.843967][ T7709] syzkaller0: entered promiscuous mode
[  646.864036][ T7709] syzkaller0: entered allmulticast mode
[  646.876941][ T7708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.936697][ T7708] tipc: Resetting bearer <eth:syzkaller0>
[  646.954198][ T7707] tipc: Resetting bearer <eth:syzkaller0>
[  646.963124][ T7707] tipc: Disabling bearer <eth:syzkaller0>
[  646.979673][ T7717] bond4: (slave geneve3): making interface the new active one
[  646.988321][ T7717] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  647.004605][T28660] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  647.053362][T28660] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  647.063454][T28667] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  647.118542][T28659] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  647.492098][ T7754] hsr_slave_0: left promiscuous mode
[  647.534476][ T7754] hsr_slave_1: left promiscuous mode
[  647.675407][ T7770] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  647.882366][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.892547][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.508527][ T7827] __nla_validate_parse: 19 callbacks suppressed
[  648.508549][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9964'.
[  648.552240][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9963'.
[  648.795682][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9969'.
[  648.852535][ T5861] Bluetooth: hci5: command tx timeout
[  649.097130][ T7868] validate_nla: 4 callbacks suppressed
[  649.097149][ T7868] netlink: 'syz.4.9977': attribute type 2 has an invalid length.
[  649.150099][ T7868] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9977'.
[  649.179619][ T7868] nbd: must specify a device to reconfigure
[  649.282836][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9983'.
[  649.429120][ T7906] gre1: entered promiscuous mode
[  649.441904][ T7909] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  649.449084][ T7906] gre1: entered allmulticast mode
[  649.477508][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9988'.
[  649.498301][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9988'.
[  649.509742][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9988'.
[  649.524876][ T7914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9988'.
[  649.688913][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9995'.
[  649.745518][ T7934] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  650.027511][ T7964] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  650.158388][ T7974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.181418][ T7979] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  650.224200][ T7974] syzkaller0: entered promiscuous mode
[  650.242193][ T7974] syzkaller0: entered allmulticast mode
[  650.307469][ T7974] netem: incorrect ge model size
[  650.325276][ T7974] netem: change failed
[  650.351695][ T7979] tipc: Resetting bearer <eth:syzkaller0>
[  650.370744][ T7970] tipc: Resetting bearer <eth:syzkaller0>
[  650.426439][ T7970] tipc: Disabling bearer <eth:syzkaller0>
[  650.948980][ T8028] ip6gre2: entered allmulticast mode
[  651.244914][ T8057] netlink: 'syz.1.10031': attribute type 18 has an invalid length.
[  654.001638][ T8046] C: entered promiscuous mode
[  654.033807][ T8046] tunl0: entered promiscuous mode
[  654.073180][ T8046] gre0: entered promiscuous mode
[  654.111643][ T8046] gretap0: entered promiscuous mode
[  654.223662][ T8046] erspan0: entered promiscuous mode
[  654.235890][ T8046] ip_vti0: entered promiscuous mode
[  654.268029][T28662] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  654.389439][T28662] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  654.398941][T28662] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  654.425663][T28662] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  654.585911][ T8093] team0: Device wireguard1 is of different type
[  654.608385][ T8103] __nla_validate_parse: 7 callbacks suppressed
[  654.608406][ T8103] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10044'.
[  654.632519][ T8096] netlink: zone id is out of range
[  654.637807][ T8096] netlink: zone id is out of range
[  654.643192][ T8096] netlink: zone id is out of range
[  654.648338][ T8096] netlink: zone id is out of range
[  654.657999][ T8096] netlink: zone id is out of range
[  654.670771][ T8096] netlink: zone id is out of range
[  654.676141][ T8096] netlink: zone id is out of range
[  654.682659][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10044'.
[  654.716775][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10044'.
[  654.868154][ T8115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.898962][ T8115] team0: Device ip6gre1 is of different type
[  654.908395][ T8117] netlink: 'syz.0.10049': attribute type 1 has an invalid length.
[  654.969690][ T8117] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10049'.
[  654.985446][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10050'.
[  654.991683][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10048'.
[  655.031417][ T8124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  655.066372][ T8129] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10051'.
[  655.269040][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10055'.
[  655.295802][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10055'.
[  655.502565][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10060'.
[  656.419879][ T8204] hsr0 speed is unknown, defaulting to 1000
[  656.802163][ T8233] netlink: 'syz.0.10080': attribute type 10 has an invalid length.
[  656.812583][ T8234] netlink: 'syz.0.10080': attribute type 10 has an invalid length.
[  656.857187][ T8233] bridge_slave_1: entered allmulticast mode
[  656.869736][ T8233] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  657.079052][ T8248] netlink: 'syz.4.10086': attribute type 11 has an invalid length.
[  657.766521][ T8289] netlink: 'syz.0.10096': attribute type 1 has an invalid length.
[  657.989781][ T8300] netlink: 'syz.4.10101': attribute type 1 has an invalid length.
[  658.233526][ T8316] unknown channel width for channel at 909000KHz?
[  658.254087][ T8323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  658.509762][ T8338] netlink: 'syz.4.10114': attribute type 1 has an invalid length.
[  658.536383][ T8342] bond6 (unregistering): Released all slaves
[  658.571967][ T8338] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  658.627885][ T8356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.642080][ T8356] syzkaller0: entered promiscuous mode
[  658.647604][ T8356] syzkaller0: entered allmulticast mode
[  658.698097][ T8356] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  658.732936][ T8356] tipc: Resetting bearer <eth:syzkaller0>
[  658.749879][ T8352] tipc: Resetting bearer <eth:syzkaller0>
[  658.780187][ T8352] tipc: Disabling bearer <eth:syzkaller0>
[  658.934808][ T8377] syzkaller1: entered promiscuous mode
[  658.973266][ T8377] syzkaller1: entered allmulticast mode
[  659.056935][ T8387] ip6gre0: Master is either lo or non-ether device
[  659.090275][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  659.206017][ T8399] netlink: 'syz.1.10127': attribute type 10 has an invalid length.
[  659.282528][ T8399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  659.822351][ T8442] __nla_validate_parse: 13 callbacks suppressed
[  659.822372][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10141'.
[  660.085245][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10150'.
[  660.125935][ T8470] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  660.154560][ T8470] bond4: entered promiscuous mode
[  660.159636][ T8470] bond4: entered allmulticast mode
[  660.166068][ T8470] 8021q: adding VLAN 0 to HW filter on device bond4
[  660.167370][ T8474] openvswitch: netlink: IPv4 tun info is not correct
[  660.237260][ T8477] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.10153'.
[  660.265715][ T8474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  660.370601][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  660.380407][ T8484] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  660.416615][ T8484] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  660.444450][ T8490] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  660.457028][ T8490] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  660.526651][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10156'.
[  660.671460][ T8494] netlink: 'syz.2.10156': attribute type 1 has an invalid length.
[  660.685523][ T8494] netlink: 'syz.2.10156': attribute type 2 has an invalid length.
[  660.703314][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10156'.
[  660.814097][ T8507] bond5: entered promiscuous mode
[  660.819433][ T8507] bond5: entered allmulticast mode
[  660.827780][ T8507] 8021q: adding VLAN 0 to HW filter on device bond5
[  660.919637][ T8517] sch_fq: defrate 0 ignored.
[  660.937154][ T8516] netlink: 'syz.0.10161': attribute type 1 has an invalid length.
[  661.091535][ T8528] netlink: 'syz.2.10165': attribute type 17 has an invalid length.
[  661.116033][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10165'.
[  661.126694][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10165'.
[  661.158032][ T8535] netlink: 'syz.0.10168': attribute type 27 has an invalid length.
[  661.239564][ T8542] netlink: 'syz.2.10171': attribute type 10 has an invalid length.
[  661.356884][ T8554] syzkaller1: entered promiscuous mode
[  661.365159][ T8554] syzkaller1: entered allmulticast mode
[  661.433726][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10175'.
[  661.451843][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10175'.
[  661.551846][ T8566] IPv6: NLM_F_CREATE should be specified when creating new route
[  661.659198][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10180'.
[  661.807487][ T8587] netlink: 'syz.0.10185': attribute type 12 has an invalid length.
[  662.180321][ T8612] bridge_slave_0: left allmulticast mode
[  662.200458][ T8612] bridge_slave_0: left promiscuous mode
[  662.214012][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.215943][ T8616] netlink: 'syz.0.10194': attribute type 1 has an invalid length.
[  662.237757][ T8612] bridge_slave_1: left allmulticast mode
[  662.243797][ T8612] bridge_slave_1: left promiscuous mode
[  662.249692][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.269886][ T8612] bond0: (slave bond_slave_0): Releasing backup interface
[  662.295050][ T8612] bond0: (slave bond_slave_1): Releasing backup interface
[  662.348877][ T8612] team0: Port device C removed
[  662.382214][ T8612] team0: Port device team_slave_1 removed
[  662.398461][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  662.407097][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.416320][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  662.428832][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.454618][ T8612] bond3: (slave veth7): Releasing active interface
[  662.567088][ T8630] netlink: 'syz.0.10196': attribute type 13 has an invalid length.
[  662.681135][ T8630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  662.728250][ T8643] netlink: 'syz.0.10196': attribute type 6 has an invalid length.
[  663.079718][ T8676] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  664.513490][ T8717] ip6tnl1: left promiscuous mode
[  664.518894][ T8717] veth7: left promiscuous mode
[  664.546616][ T8717] bond4: left promiscuous mode
[  664.617619][T28665] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.672027][T28665] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.750252][T28665] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.759196][T28665] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.788855][ T8775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.789770][ T8778] ksmbd: Unknown IPC event: 3, ignore.
[  665.192575][ T8808] __nla_validate_parse: 13 callbacks suppressed
[  665.192595][ T8808] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10239'.
[  665.336545][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.373665][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10243'.
[  665.401798][ T8820] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  665.419665][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.422614][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10247'.
[  665.440447][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10245'.
[  665.457813][ T8828] netlink: 'syz.1.10247': attribute type 11 has an invalid length.
[  665.467693][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10247'.
[  665.526380][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10250'.
[  665.537560][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10245'.
[  665.579149][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10245'.
[  665.608942][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10245'.
[  665.623283][ T8843] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.10249'.
[  665.854181][ T8863] validate_nla: 5 callbacks suppressed
[  665.854199][ T8863] netlink: 'syz.4.10259': attribute type 10 has an invalid length.
[  665.854974][ T8855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.902170][ T8863] dummy0: entered promiscuous mode
[  665.910835][ T8863] dummy0: entered allmulticast mode
[  665.916853][ T8863] team0: Port device dummy0 added
[  665.960425][ T8855] syzkaller0: entered promiscuous mode
[  665.965956][ T8855] syzkaller0: entered allmulticast mode
[  666.005032][ T8876] atomic_op ffff8880273bd198 conn xmit_atomic 0000000000000000
[  666.088352][ T8855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  666.118210][ T8854] tipc: Resetting bearer <eth:syzkaller0>
[  666.149585][ T8854] tipc: Disabling bearer <eth:syzkaller0>
[  666.621888][ T8925] hsr0 speed is unknown, defaulting to 1000
[  666.702160][ T8941] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  667.596978][ T9003] netlink: 'syz.4.10301': attribute type 7 has an invalid length.
[  667.913873][ T9023] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  668.593545][ T9073] netlink: 'syz.0.10324': attribute type 1 has an invalid length.
[  668.621342][ T9073] 8021q: adding VLAN 0 to HW filter on device bond6
[  669.190464][ T9115] 0ªî{X¹¦: renamed from gretap0
[  669.199630][ T9115] 0ªî{X¹¦: entered allmulticast mode
[  669.222001][ T9115] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  670.178934][ T9143] veth1_to_bond: entered allmulticast mode
[  670.197158][ T9143] veth1_to_bond (unregistering): left allmulticast mode
[  670.368541][ T9160] netlink: 'syz.1.10348': attribute type 1 has an invalid length.
[  670.377652][ T9160] netlink: 'syz.1.10348': attribute type 11 has an invalid length.
[  670.431198][ T9160] __nla_validate_parse: 122 callbacks suppressed
[  670.431220][ T9160] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10348'.
[  670.564020][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10355'.
[  670.576007][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10355'.
[  670.611204][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.925324][ T9207] tipc: Trying to set illegal importance in message
[  670.973285][ T9211] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10364'.
[  671.048708][ T9219] netlink: 348 bytes leftover after parsing attributes in process `syz.0.10367'.
[  671.197308][ T9231] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10371'.
[  671.414647][ T9249] net veth1_virt_wifi .: renamed from virt_wifi0
[  671.578123][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10382'.
[  671.757148][ T9264] hsr0 speed is unknown, defaulting to 1000
[  671.793729][ T9281] bond7: entered promiscuous mode
[  671.806913][ T9281] bond7: entered allmulticast mode
[  671.825792][ T9281] 8021q: adding VLAN 0 to HW filter on device bond7
[  671.846220][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10388'.
[  672.091378][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10381'.
[  672.172826][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10392'.
[  672.207068][ T9297] nbd: must specify a size in bytes for the device
[  672.661054][ T9320] C: renamed from lo (while UP)
[  673.062879][ T9359] netlink: 'syz.0.10408': attribute type 2 has an invalid length.
[  673.764402][ T9367] netlink: 'syz.3.10410': attribute type 21 has an invalid length.
[  674.382310][ T9420] netlink: 'syz.1.10428': attribute type 11 has an invalid length.
[  674.398911][ T9420] netlink: 'syz.1.10428': attribute type 11 has an invalid length.
[  674.761023][ T9434] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  674.829432][ T9434] dvmrp0: entered allmulticast mode
[  675.033513][ T9474] IPv6: sit2: Disabled Multicast RS
[  675.039598][ T9474] sit2: entered allmulticast mode
[  675.099059][ T9471] IPv6: sit2: Disabled Multicast RS
[  675.123493][ T9471] sit2: entered allmulticast mode
[  675.152788][ T9482] netlink: 'syz.1.10442': attribute type 21 has an invalid length.
[  675.169405][ T9482] netlink: 'syz.1.10442': attribute type 6 has an invalid length.
[  675.318732][ T9490] openvswitch: netlink: Message has 4 unknown bytes.
[  675.537321][ T9509] __nla_validate_parse: 20 callbacks suppressed
[  675.537342][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10450'.
[  675.556272][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10450'.
[  675.670926][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10456'.
[  675.749870][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10453'.
[  675.753797][ T9530] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003
[  675.802431][ T9534] netlink: 'syz.0.10458': attribute type 1 has an invalid length.
[  675.820239][ T9534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10458'.
[  675.985229][ T9551] vlan2: entered promiscuous mode
[  676.001095][ T9551] hsr_slave_1: entered promiscuous mode
[  676.021341][ T9551] vlan2: entered allmulticast mode
[  676.026603][ T9551] hsr_slave_1: entered allmulticast mode
[  676.071696][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10464'.
[  676.092856][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10463'.
[  676.326799][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10470'.
[  676.448140][ T9585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10474'.
[  676.498899][ T9587] 8021q: adding VLAN 0 to HW filter on device bond2
[  676.931354][ T9621] netlink: 'syz.1.10484': attribute type 21 has an invalid length.
[  676.939356][ T9621] netlink: 'syz.1.10484': attribute type 22 has an invalid length.
[  676.961632][ T9621] netlink: 'syz.1.10484': attribute type 23 has an invalid length.
[  676.977955][ T9621] netlink: 'syz.1.10484': attribute type 25 has an invalid length.
[  676.987263][ T9621] netlink: 'syz.1.10484': attribute type 26 has an invalid length.
[  677.024464][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10484'.
[  677.355896][ T9658] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  678.047986][ T9720] : entered promiscuous mode
[  678.974652][ T9798] validate_nla: 2 callbacks suppressed
[  678.974673][ T9798] netlink: 'syz.2.10531': attribute type 6 has an invalid length.
[  679.068475][ T9805] Unsupported ieee802154 address type: 0
[  679.156265][ T9809] bridge_slave_0: invalid flags given to default FDB implementation
[  679.284199][ T9823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.293007][ T9823] syzkaller0: entered promiscuous mode
[  679.298646][ T9823] syzkaller0: entered allmulticast mode
[  679.319614][ T9823] tipc: Resetting bearer <eth:syzkaller0>
[  679.344818][ T9822] tipc: Resetting bearer <eth:syzkaller0>
[  679.362574][ T9822] tipc: Disabling bearer <eth:syzkaller0>
[  679.612340][ T9851] netlink: 'syz.1.10552': attribute type 1 has an invalid length.
[  679.629900][ T9847] veth0_to_team: entered promiscuous mode
[  679.638720][ T9851] netlink: 'syz.1.10552': attribute type 1 has an invalid length.
[  679.650992][ T9847] veth0_to_team: entered allmulticast mode
[  679.818779][ T9871] netem: change failed
[  680.377160][ T9912] netlink: 'syz.4.10568': attribute type 11 has an invalid length.
[  680.386361][ T9912] netlink: 'syz.4.10568': attribute type 11 has an invalid length.
[  680.731008][ T9938] __nla_validate_parse: 19 callbacks suppressed
[  680.731029][ T9938] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10576'.
[  680.828606][ T9948] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10579'.
[  681.123678][ T9977] netlink: 'syz.0.10589': attribute type 11 has an invalid length.
[  681.141220][ T9977] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10589'.
[  681.259782][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10593'.
[  681.265354][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10591'.
[  681.278426][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10595'.
[  681.317893][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10591'.
[  681.358056][ T9999] pim6reg1: entered promiscuous mode
[  681.366451][ T9999] pim6reg1: entered allmulticast mode
[  681.544858][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10602'.
[  681.563171][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10602'.
[  681.739483][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10608'.
[  681.829890][T10037] geneve2: entered promiscuous mode
[  681.843737][T10037] geneve2: entered allmulticast mode
[  681.885025][T28648] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  681.939216][T28648] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  681.978468][T28648] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  682.002136][T28661] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  682.236923][T10075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.449216][T10086] netlink: 'syz.0.10621': attribute type 1 has an invalid length.
[  682.465998][T10086] netlink: 'syz.0.10621': attribute type 2 has an invalid length.
[  682.487209][T10086] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  682.505810][T10093] syzkaller1: entered promiscuous mode
[  682.513229][T10093] syzkaller1: entered allmulticast mode
[  682.604684][T10093] syzkaller0: entered promiscuous mode
[  682.612594][T10093] syzkaller0: entered allmulticast mode
[  682.627875][T10093] netlink: 'syz.3.10622': attribute type 2 has an invalid length.
[  682.987588][T10115] netlink: 'syz.4.10633': attribute type 3 has an invalid length.
[  683.585483][T10159] netlink: 'syz.1.10646': attribute type 16 has an invalid length.
[  683.641699][T10162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  683.661409][T10162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  683.699706][T10162] tipc: Resetting bearer <eth:syzkaller0>
[  684.470650][T10224] veth9: entered allmulticast mode
[  685.305470][T10290] netlink: 'syz.1.10682': attribute type 3 has an invalid length.
[  685.627383][T10310] netlink: 'syz.0.10683': attribute type 1 has an invalid length.
[  685.899838][T10327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  685.931405][T10329] netlink: 'syz.1.10692': attribute type 4 has an invalid length.
[  685.963465][T10329] block nbd1: Unsupported socket: shutdown callout must be supported.
[  685.975589][ T1304] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  686.017432][T10335] netlink: 'syz.3.10695': attribute type 1 has an invalid length.
[  686.031626][T10337] team0: Device vti0 is of different type
[  686.058253][T10335] netlink: 'syz.3.10695': attribute type 1 has an invalid length.
[  686.144310][T10344] netlink: 'syz.1.10698': attribute type 4 has an invalid length.
[  686.797150][T10398] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  686.985747][T10418] netlink: 'syz.2.10719': attribute type 1 has an invalid length.
[  686.991972][T10411] netlink: 'syz.3.10717': attribute type 6 has an invalid length.
[  687.094061][T10423] netlink: 'syz.0.10723': attribute type 10 has an invalid length.
[  687.513704][T10459] __nla_validate_parse: 33 callbacks suppressed
[  687.513725][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10733'.
[  687.588158][T10464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10735'.
[  687.691365][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10738'.
[  687.706832][T10472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10738'.
[  687.743288][T10472] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10738'.
[  687.802191][T10479] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  688.182094][T10508] netlink: 'syz.1.10748': attribute type 21 has an invalid length.
[  688.201067][T10508] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10748'.
[  688.352151][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10754'.
[  688.426325][T10515] nbd: nbd0 already in use
[  688.434782][T10515] block nbd0: NBD_DISCONNECT
[  688.444665][T10515] block nbd0: Send disconnect failed -32
[  688.451395][T10515] block nbd0: Send disconnect failed -32
[  688.457136][T10515] block nbd0: shutting down sockets
[  688.527285][T28648] bridge_slave_0: left allmulticast mode
[  688.534005][T28648] bridge_slave_0: left promiscuous mode
[  688.572031][T28648] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.855813][T28648] dvmrp0 (unregistering): left allmulticast mode
[  689.185564][T28648] bond1 (unregistering): Released all slaves
[  689.197056][T28648] bond2 (unregistering): Released all slaves
[  689.209634][T28648] bond3 (unregistering): Released all slaves
[  689.225032][T28648] bond4 (unregistering): Released all slaves
[  689.245152][T28648] bond5 (unregistering): (slave veth7): Releasing active interface
[  689.255310][T28648] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  689.271059][T28648] bond5 (unregistering): Released all slaves
[  689.284418][T28648] smc: removing net device bond0 with user defined pnetid SYZ2
[  689.292960][T28648] bond0 (unregistering): Released all slaves
[  689.303937][T28648] bond6 (unregistering): Released all slaves
[  689.316137][T28648] bond7 (unregistering): Released all slaves
[  689.328492][T10537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10757'.
[  689.345458][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10762'.
[  689.460621][T10572] nbd: couldn't find a device at index 2
[  689.476658][T28648] tipc: Disabling bearer <udp:s>
[  689.496444][T28648] tipc: Left network mode
[  689.506926][T10574] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10764'.
[  689.817171][T10601] IPv6: Can't replace route, no match found
[  689.956783][T10606] IPVS: Scheduler module ip_vs_sip not found
[  690.823010][T28648] hsr_slave_0: left promiscuous mode
[  690.839525][T28648] hsr_slave_1: left promiscuous mode
[  690.859365][T28648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.897902][T10663] validate_nla: 5 callbacks suppressed
[  690.897923][T10663] netlink: 'syz.2.10787': attribute type 39 has an invalid length.
[  691.073473][T28648] team0 (unregistering): Port device team_slave_1 removed
[  691.092371][T28648] team0 (unregistering): Port device team_slave_0 removed
[  691.195911][T10652] netdevsim netdevsim0: Direct firmware load for 	 failed with error -2
[  691.212385][T10652] netdevsim netdevsim0: Falling back to sysfs fallback for: 	
[  691.231284][T10680] 0ªî{X¹¦: entered promiscuous mode
[  691.236753][T10680] 0ªî{X¹¦: left allmulticast mode
[  691.254544][T10680] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  691.265970][T10680] 1ªî{X¹¦: left promiscuous mode
[  691.275953][T10680] 1ªî{X¹¦: entered allmulticast mode
[  691.285133][T10680] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  691.288818][T10685] netlink: 'syz.4.10798': attribute type 4 has an invalid length.
[  691.370826][T10687] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  691.788485][T10717] IPVS: stopping backup sync thread 7964 ...
[  692.028506][T10738] netlink: 'syz.0.10812': attribute type 4 has an invalid length.
[  692.208909][T10763] netlink: 'syz.3.10817': attribute type 26 has an invalid length.
[  692.399195][T10777] netlink: 'syz.1.10818': attribute type 178 has an invalid length.
[  692.789819][T10808] __nla_validate_parse: 13 callbacks suppressed
[  692.789840][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10828'.
[  692.975284][T10823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  693.067102][T10827] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.10835'.
[  693.135861][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10837'.
[  693.357762][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10843'.
[  693.401994][T10844] netlink: 'syz.1.10843': attribute type 39 has an invalid length.
[  693.413843][T10844] netlink: 'syz.1.10843': attribute type 1 has an invalid length.
[  693.509710][T10856] syzkaller1: entered promiscuous mode
[  693.537723][T28661] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18
[  693.558068][T10856] syzkaller1: entered allmulticast mode
[  693.626670][T10882] netlink: 'syz.3.10852': attribute type 6 has an invalid length.
[  693.639674][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10852'.
[  693.729296][T10888] hsr0 speed is unknown, defaulting to 1000
[  694.053324][T10907] netlink: 'syz.3.10857': attribute type 11 has an invalid length.
[  694.159212][T10911] hsr0 speed is unknown, defaulting to 1000
[  694.162268][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10859'.
[  694.181470][T10915] Bluetooth: MGMT ver 1.23
[  694.192421][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10859'.
[  694.337843][T10924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10863'.
[  694.481040][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10861'.
[  694.564270][T10944] sctp: [Deprecated]: syz.0.10867 (pid 10944) Use of int in max_burst socket option deprecated.
[  694.564270][T10944] Use struct sctp_assoc_value instead
[  694.582625][T10945] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  694.626515][T10944] netlink: 'syz.0.10867': attribute type 13 has an invalid length.
[  694.871975][T10970] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  694.919626][T10971] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10873'.
[  694.959588][T10976] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  695.137080][T10987] 8021q: adding VLAN 0 to HW filter on device bond5
[  695.171666][T10987] bond5: (slave veth9): Enslaving as an active interface with a down link
[  695.306410][T10994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  695.351425][T10987] veth11: entered promiscuous mode
[  695.359777][T10987] bond5: (slave veth11): Enslaving as an active interface with a down link
[  695.384684][T10999] vlan2: entered allmulticast mode
[  695.396372][T10999] bond5: entered allmulticast mode
[  695.407057][T10999] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  695.439032][T11005] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  695.969324][T11057] netlink: get zone limit has 8 unknown bytes
[  696.012413][T11058] netlink: get zone limit has 8 unknown bytes
[  696.285478][T27902] IPVS: starting estimator thread 0...
[  696.330104][T11087] validate_nla: 3 callbacks suppressed
[  696.330122][T11087] netlink: 'syz.3.10904': attribute type 49 has an invalid length.
[  696.351813][T11088] netlink: 'syz.3.10904': attribute type 49 has an invalid length.
[  696.390189][T11086] IPVS: using max 42 ests per chain, 100800 per kthread
[  696.687852][T11122] netlink: zone id is out of range
[  696.697452][T11122] netlink: zone id is out of range
[  696.702160][T11118] siw: device registration error -23
[  696.720502][T11122] netlink: zone id is out of range
[  696.728239][T11122] netlink: zone id is out of range
[  696.739473][T11122] netlink: zone id is out of range
[  696.755301][T11122] netlink: zone id is out of range
[  696.763181][T11122] netlink: zone id is out of range
[  696.768332][T11122] netlink: zone id is out of range
[  696.812489][T11122] netlink: zone id is out of range
[  696.828388][T11122] netlink: zone id is out of range
[  697.314959][T11181] xfrm0: entered promiscuous mode
[  697.339179][T11181] xfrm0: entered allmulticast mode
[  697.453497][T11183] nbd7: detected capacity change from 0 to 549764202496
[  697.470168][ T5862] block nbd7: Receive control failed (result -32)
[  697.809037][T11216] __nla_validate_parse: 18 callbacks suppressed
[  697.809060][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10945'.
[  697.872518][T11222] netlink: 'syz.2.10947': attribute type 58 has an invalid length.
[  697.893072][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10947'.
[  698.057556][T11240] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10953'.
[  698.093337][T11240] syzkaller0: entered promiscuous mode
[  698.109115][T11240] syzkaller0: entered allmulticast mode
[  698.218236][T11256] smc: net device erspan0 applied user defined pnetid SYZ0
[  698.242963][T11240] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10953'.
[  698.415714][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10962'.
[  698.438306][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10962'.
[  698.475795][T11276] netlink: 'syz.0.10963': attribute type 2 has an invalid length.
[  698.494834][T11272] bridge0: port 2(vlan2) entered blocking state
[  698.503118][T11276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10963'.
[  698.516649][T11272] bridge0: port 2(vlan2) entered disabled state
[  698.523448][T11272] vlan2: entered allmulticast mode
[  698.528703][T11276] nbd: must specify a device to reconfigure
[  698.535033][T11272] bridge0: entered allmulticast mode
[  698.560725][T11272] vlan2: left allmulticast mode
[  698.565739][T11272] bridge0: left allmulticast mode
[  698.628822][T11279] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10964'.
[  698.644428][T11287] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10968'.
[  698.783539][T11287] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10968'.
[  699.259718][T11336] veth13: entered allmulticast mode
[  699.285926][T11340] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  699.314589][T11340] 8021q: VLANs not supported on wg1
[  699.626715][T11362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  700.056325][T11389] netlink: 'syz.0.10993': attribute type 1 has an invalid length.
[  700.178727][T27902] IPVS: starting estimator thread 0...
[  700.280123][T11396] IPVS: using max 34 ests per chain, 81600 per kthread
[  700.708050][T11432] netlink: 'syz.2.11006': attribute type 33 has an invalid length.
[  700.748578][T11435] netlink: 'syz.4.11007': attribute type 11 has an invalid length.
[  700.765340][T11435] netlink: 'syz.4.11007': attribute type 11 has an invalid length.
[  700.967343][T11448] netlink: 'syz.1.11011': attribute type 1 has an invalid length.
[  701.647055][T11534] sctp: [Deprecated]: syz.1.11024 (pid 11534) Use of struct sctp_assoc_value in delayed_ack socket option.
[  701.647055][T11534] Use struct sctp_sack_info instead
[  702.391367][T11592] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  702.477329][T11597] dummy0: left promiscuous mode
[  702.499067][T11597] dummy0: left allmulticast mode
[  702.512993][T11596] net_ratelimit: 6 callbacks suppressed
[  702.513014][T11596] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  702.540482][ T5903] hid-generic 0005:10CF:0009.0007: unknown main item tag 0x0
[  702.549042][ T5903] hid-generic 0005:10CF:0009.0007: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  702.552036][T11597] team0: Port device dummy0 removed
[  702.562674][T11605] netlink: 'syz.0.11049': attribute type 2 has an invalid length.
[  702.593993][T11606] xt_l2tp: unknown flags: 51
[  702.637385][T11597] batman_adv: batadv0: Adding interface: dummy0
[  702.660083][T11597] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.731925][T11611] netlink: 'syz.0.11050': attribute type 1 has an invalid length.
[  702.757319][T11597] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  702.918528][T11618] nft_compat: unsupported protocol 1
[  703.504963][T11647] netlink: 'syz.0.11064': attribute type 24 has an invalid length.
[  703.645483][T11662] netlink: 'syz.0.11068': attribute type 1 has an invalid length.
[  703.648284][T11661] __nla_validate_parse: 25 callbacks suppressed
[  703.648307][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11067'.
[  703.688594][T11662] 8021q: adding VLAN 0 to HW filter on device bond9
[  703.698056][T11667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11070'.
[  703.743978][T11662] bond9: (slave veth9): Enslaving as an active interface with a down link
[  703.789625][T11662] veth11: entered promiscuous mode
[  703.802766][T11662] bond9: (slave veth11): Enslaving as an active interface with a down link
[  703.814502][T11662] netlink: 38 bytes leftover after parsing attributes in process `syz.0.11068'.
[  703.830693][T11662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11068'.
[  704.408007][T11720] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  704.444396][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11083'.
[  704.475301][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11083'.
[  704.585311][T11730] netlink: 'syz.4.11087': attribute type 10 has an invalid length.
[  704.657681][T11737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  704.680552][T11737] syzkaller0: entered promiscuous mode
[  704.702447][T11737] syzkaller0: entered allmulticast mode
[  704.741606][T11737] tipc: Resetting bearer <eth:syzkaller0>
[  704.751866][T11750] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.11093'.
[  704.775898][T11736] tipc: Resetting bearer <eth:syzkaller0>
[  704.796467][T11736] tipc: Disabling bearer <eth:syzkaller0>
[  705.052968][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11098'.
[  705.061809][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11099'.
[  705.091648][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11098'.
[  705.255707][T11781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  705.294057][T11781] syzkaller0: entered promiscuous mode
[  705.307527][T11781] syzkaller0: entered allmulticast mode
[  705.336423][T11781] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  705.383627][T11782] tipc: Resetting bearer <eth:syzkaller0>
[  705.411475][T11780] tipc: Resetting bearer <eth:syzkaller0>
[  705.426810][T11780] tipc: Disabling bearer <eth:syzkaller0>
[  705.446445][T11798] : renamed from hsr0 (while UP)
[  705.464658][T11803] netlink: 'syz.4.11109': attribute type 5 has an invalid length.
[  705.494304][T11803] geneve3: entered promiscuous mode
[  705.499568][T11803] geneve3: entered allmulticast mode
[  705.514141][T28660] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[  705.526591][T28660] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[  705.546993][T28660] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[  705.579063][T28660] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0
[  706.801247][T11918] nbd: must specify at least one socket
[  707.177394][ T5862] Bluetooth: hci5: link tx timeout
[  707.183957][ T5862] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  707.294950][T11961] netlink: 'syz.3.11152': attribute type 5 has an invalid length.
[  707.314372][T11959] syzkaller1: entered promiscuous mode
[  707.340969][T11959] syzkaller1: entered allmulticast mode
[  707.458414][T11971] netlink: 'syz.0.11155': attribute type 1 has an invalid length.
[  707.467323][T11976] netlink: 'syz.1.11153': attribute type 2 has an invalid length.
[  707.622379][T11987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.731089][T11991] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  708.798289][T12015] tap0: tun_chr_ioctl cmd 1074025676
[  708.826628][T12015] tap0: owner set to 0
[  709.116626][T12045] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  709.165221][T12050] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  709.214603][T12054] netlink: 'syz.0.11180': attribute type 1 has an invalid length.
[  709.238139][T12059] __nla_validate_parse: 23 callbacks suppressed
[  709.238159][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11180'.
[  709.243685][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11180'.
[  709.247879][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11180'.
[  709.267084][T12061] netlink: 'syz.3.11182': attribute type 11 has an invalid length.
[  709.282318][T11956] Bluetooth: hci5: command 0x0406 tx timeout
[  709.285253][T12061] netlink: 'syz.3.11182': attribute type 11 has an invalid length.
[  709.306678][T12061] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11182'.
[  709.348547][T12054] 8021q: adding VLAN 0 to HW filter on device bond10
[  709.402721][T12067] netlink: 'syz.2.11185': attribute type 1 has an invalid length.
[  709.418126][T12055] bond10 (unregistering): Released all slaves
[  709.472627][T12067] 8021q: adding VLAN 0 to HW filter on device bond4
[  709.522164][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11185'.
[  709.532339][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11185'.
[  709.563091][T12079] bond4: (slave veth7): Enslaving as an active interface with a down link
[  709.653793][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11187'.
[  709.726021][T12094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11193'.
[  709.731728][T12089] pim6reg1: entered promiscuous mode
[  709.750162][T12089] pim6reg1: entered allmulticast mode
[  710.021589][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11196'.
[  710.035885][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11199'.
[  710.066380][T12118] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  710.067831][T12113] netlink: 'syz.0.11196': attribute type 24 has an invalid length.
[  710.079731][T12120] chnl_net:caif_netlink_parms(): no params data found
[  710.093674][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  710.111723][T12118] netlink: 'syz.2.11198': attribute type 1 has an invalid length.
[  710.162023][T12115] chnl_net:caif_netlink_parms(): no params data found
[  710.265017][T12118] 8021q: adding VLAN 0 to HW filter on device bond5
[  710.306092][T12126] 8021q: adding VLAN 0 to HW filter on device bond5
[  710.321857][T12126] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  710.343475][T12126] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  710.534242][T12151] team0: Device vti0 is of different type
[  710.666314][T12143] erspan0: entered promiscuous mode
[  710.673212][T12143] erspan0: entered allmulticast mode
[  710.714033][T12166] netlink: 'syz.0.11211': attribute type 1 has an invalid length.
[  711.016603][T12190] netlink: 'syz.0.11217': attribute type 8 has an invalid length.
[  711.362267][T12216] netlink: 'syz.0.11225': attribute type 7 has an invalid length.
[  711.477498][T12224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  711.506911][T12224] netlink: 'syz.3.11229': attribute type 1 has an invalid length.
[  711.975153][T12266] veth0: entered promiscuous mode
[  712.042731][T12271] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  712.390268][T12297] netlink: 'syz.4.11254': attribute type 6 has an invalid length.
[  712.405625][T12297] netlink: 'syz.4.11254': attribute type 6 has an invalid length.
[  712.780269][T12332] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  713.239813][T12371] macvlan3: entered allmulticast mode
[  713.246567][T12371] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  713.465300][T12392] netlink: 'syz.1.11281': attribute type 11 has an invalid length.
[  713.652744][T11956] Bluetooth: hci3: command 0x0406 tx timeout
[  714.328974][T12472] __nla_validate_parse: 31 callbacks suppressed
[  714.328996][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11307'.
[  714.577961][T12488] bridge_slave_0: left allmulticast mode
[  714.607864][T12488] bridge_slave_0: left promiscuous mode
[  714.623816][T12488] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.639430][T12499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11317'.
[  714.658029][T12488] bridge_slave_1: left allmulticast mode
[  714.664734][T12501] validate_nla: 56 callbacks suppressed
[  714.664753][T12501] netlink: 'syz.4.11319': attribute type 1 has an invalid length.
[  714.664802][T12501] netlink: 'syz.4.11319': attribute type 1 has an invalid length.
[  714.679130][T12488] bridge_slave_1: left promiscuous mode
[  714.679333][T12488] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.712006][T12488] bond0: (slave bond_slave_0): Releasing backup interface
[  714.728621][T12488] bond0: (slave bond_slave_1): Releasing backup interface
[  714.759003][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.772510][T12488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.781411][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.789236][T12488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.894265][T12495] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  714.968030][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11322'.
[  715.131337][T12531] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002
[  715.369548][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11332'.
[  715.390774][T12554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11335'.
[  715.444345][T12559] openvswitch: netlink: Tunnel attr 303 out of range max 16
[  715.548757][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11339'.
[  715.558705][T12570] netlink: 'syz.2.11339': attribute type 30 has an invalid length.
[  715.567264][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11339'.
[  715.614154][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11340'.
[  715.962331][T12589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11344'.
[  715.979315][T12598] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11346'.
[  716.125880][T12610] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  716.147589][T12610] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  716.166539][T12611] netlink: 'syz.2.11349': attribute type 1 has an invalid length.
[  716.222529][T12611] 8021q: adding VLAN 0 to HW filter on device bond6
[  716.294636][T12624] bond0: entered promiscuous mode
[  716.301057][T12624] bond_slave_0: entered promiscuous mode
[  716.307453][T12624] debugfs: 'hsr1' already exists in 'hsr'
[  716.314565][T12624] Cannot create hsr debugfs directory
[  716.320037][T12624] hsr1: entered promiscuous mode
[  716.696889][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  717.183233][T12684] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  717.196871][T12685] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  717.566478][T12716] gtp1: entered promiscuous mode
[  717.596828][T12716] gtp1: entered allmulticast mode
[  717.646547][T12725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  718.677654][T12746] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  718.771241][T11956] Bluetooth: hci4: command 0x0406 tx timeout
[  718.869338][T12762] netlink: 'syz.3.11396': attribute type 2 has an invalid length.
[  718.901931][T12770] netlink: 'syz.3.11396': attribute type 2 has an invalid length.
[  718.954036][T12772] netlink: 'syz.4.11399': attribute type 4 has an invalid length.
[  718.968843][T12772] wlan1: mtu less than device minimum
[  719.226800][T12789] veth0_to_bond: entered allmulticast mode
[  719.441645][T12803] __nla_validate_parse: 12 callbacks suppressed
[  719.441667][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11409'.
[  719.510901][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11411'.
[  719.563096][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11412'.
[  719.593246][T12810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  719.671986][T12820] netlink: 'syz.4.11416': attribute type 2 has an invalid length.
[  719.808249][T12834] netlink: 'syz.1.11417': attribute type 13 has an invalid length.
[  719.978507][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11425'.
[  719.989122][T12848] bond5: (slave veth9): Releasing active interface
[  720.018611][T12848] bond5: (slave veth9): the permanent HWaddr of slave - ee:e0:39:83:34:dc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  720.133546][T12848] bond5: (slave veth11): Releasing active interface
[  720.236979][T12876] netlink: 'syz.4.11432': attribute type 3 has an invalid length.
[  720.248132][T12877] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  720.267350][T12876] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11432'.
[  720.531114][T12890] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11436'.
[  720.578369][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11437'.
[  720.717464][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11441'.
[  721.013686][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11446'.
[  721.031944][T12917] netlink: 'syz.2.11444': attribute type 1 has an invalid length.
[  721.042491][T12917] nbd: error processing sock list
[  721.052632][T12917] block nbd9: shutting down sockets
[  721.119358][T12921] hsr_slave_1 (unregistering): left promiscuous mode
[  721.155628][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11448'.
[  721.442015][T12951] netlink: 'syz.4.11457': attribute type 11 has an invalid length.
[  721.638269][T12969] mac80211_hwsim hwsim73 wlan1: entered promiscuous mode
[  721.673355][T12969] mac80211_hwsim hwsim73 wlan1: entered allmulticast mode
[  721.876890][T12989] sctp: [Deprecated]: syz.0.11465 (pid 12989) Use of int in max_burst socket option deprecated.
[  721.876890][T12989] Use struct sctp_assoc_value instead
[  722.014893][T13005] sctp: [Deprecated]: syz.1.11467 (pid 13005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  722.014893][T13005] Use struct sctp_sack_info instead
[  722.019277][T13000] Can't find ip_set type 
[  722.051407][T12998] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  722.098789][T13009] pim6reg1: entered promiscuous mode
[  722.113543][T13009] pim6reg1: entered allmulticast mode
[  722.125285][T12991] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  722.142117][T13009] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  722.157825][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.236411][T13015] sctp: [Deprecated]: syz.2.11471 (pid 13015) Use of int in maxseg socket option.
[  722.236411][T13015] Use struct sctp_assoc_value instead
[  722.309189][T13023] netlink: 'syz.4.11474': attribute type 6 has an invalid length.
[  722.797555][T13061] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  723.219923][T13106] netlink: 'syz.2.11500': attribute type 17 has an invalid length.
[  723.414228][T13115] nbd: must specify at least one socket
[  723.896141][T11956] Bluetooth: hci1: command 0x0406 tx timeout
[  724.026491][T13127] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  724.209093][T13134] pim6reg: entered allmulticast mode
[  724.239327][T13134] pim6reg: left allmulticast mode
[  724.570663][T13166] netlink: 'syz.3.11517': attribute type 1 has an invalid length.
[  724.591154][T13166] __nla_validate_parse: 14 callbacks suppressed
[  724.591175][T13166] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.11517'.
[  724.672952][T13175] netlink: 'syz.1.11519': attribute type 1 has an invalid length.
[  724.799736][T13175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11519'.
[  724.801120][T13183] 8021q: adding VLAN 0 to HW filter on device bond4
[  724.824616][T13183] bond3: (slave bond4): making interface the new active one
[  724.837471][T13183] bond3: (slave bond4): Enslaving as an active interface with an up link
[  724.849557][T13175] bond3: entered promiscuous mode
[  724.859096][T13175] bond4: entered promiscuous mode
[  724.866262][T13175] bond3: entered allmulticast mode
[  724.876754][T13175] bond4: entered allmulticast mode
[  724.883079][T13175] 8021q: adding VLAN 0 to HW filter on device bond3
[  724.947240][T13186] can: request_module (can-proto-0) failed.
[  725.489117][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11527'.
[  725.527041][T13209] IPVS: Error connecting to the multicast addr
[  725.579798][T13208] team1: entered promiscuous mode
[  725.600055][T13208] team1: entered allmulticast mode
[  725.667255][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11530'.
[  725.712302][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11530'.
[  725.836519][T13219] hsr0 speed is unknown, defaulting to 1000
[  725.870228][T28665] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  726.534858][T13247] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  726.589900][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11539'.
[  726.606866][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11539'.
[  726.743061][T13258] netlink: 'syz.0.11542': attribute type 1 has an invalid length.
[  726.751415][T13258] netlink: 'syz.0.11542': attribute type 10 has an invalid length.
[  726.759348][T13258] netlink: 236 bytes leftover after parsing attributes in process `syz.0.11542'.
[  727.091832][T13293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11554'.
[  727.227776][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11556'.
[  727.319166][T13302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  727.519994][   T30] audit: type=1107 audit(1756045003.370:24): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='瘞’³+uÁ4Më¶&Óo¿(‰'@$]ÞÔæë³ A‡¶Æ¶ ³rëÝ/ñn<ÝѲã¡:'
[  727.715305][T13330] openvswitch: netlink: Multiple metadata blocks provided
[  727.792631][T13345] netlink: 'syz.0.11570': attribute type 16 has an invalid length.
[  727.982979][T13366] netlink: 'syz.4.11576': attribute type 20 has an invalid length.
[  728.004538][T13370] netlink: 'syz.0.11577': attribute type 11 has an invalid length.
[  728.068687][T13366] netlink: 'syz.4.11576': attribute type 20 has an invalid length.
[  728.089185][T28660] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  728.105096][T28660] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  728.126152][T28660] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  728.197711][T13377] vlan0: entered promiscuous mode
[  728.225448][T13377] vlan0: entered allmulticast mode
[  728.232252][T13384] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003
[  728.244203][T13377] hsr_slave_1: entered allmulticast mode
[  728.271904][T28660] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  728.539193][T13372] hsr0 speed is unknown, defaulting to 1000
[  728.832161][T13410] netlink: 'syz.2.11585': attribute type 1 has an invalid length.
[  729.095597][T13421] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  729.207618][T13428] netlink: 'syz.1.11591': attribute type 10 has an invalid length.
[  729.277151][T13428] veth1_macvtap: left promiscuous mode
[  729.609231][T13457] netlink: 'syz.4.11598': attribute type 1 has an invalid length.
[  729.645576][T13462] __nla_validate_parse: 11 callbacks suppressed
[  729.645598][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11600'.
[  729.660238][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11598'.
[  729.757432][T13476] batadv1: entered allmulticast mode
[  729.794237][T13479] smc: net device bond0 applied user defined pnetid SYZ2
[  729.803815][T13479] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11605'.
[  729.832937][T13479] smc: removing net device bond0 with user defined pnetid SYZ2
[  729.852025][T13479] bond0 (unregistering): Released all slaves
[  730.097279][T13492] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  730.409381][T13526] netlink: 'syz.4.11619': attribute type 1 has an invalid length.
[  730.428574][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11621'.
[  730.456208][T13531] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11621'.
[  730.469203][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11619'.
[  730.478486][T13531] netlink: 'syz.1.11621': attribute type 5 has an invalid length.
[  730.489842][T13526] 8021q: adding VLAN 0 to HW filter on device bond8
[  730.609779][T13543] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11622'.
[  730.641121][T13542] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11622'.
[  730.650759][T13545] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11625'.
[  730.812332][T13559] veth5: entered promiscuous mode
[  731.038729][T13579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11636'.
[  731.119672][T13585] veth0_to_bridge: entered promiscuous mode
[  731.505709][T13580] veth0_to_bridge: left promiscuous mode
[  731.557530][T11956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  731.600182][T11956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  731.610749][T11956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  731.621788][T11956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  731.630037][T11956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  731.697601][T13603] hsr0 speed is unknown, defaulting to 1000
[  731.977425][T13635] validate_nla: 4 callbacks suppressed
[  731.977446][T13635] netlink: 'syz.0.11653': attribute type 6 has an invalid length.
[  732.129199][T13603] chnl_net:caif_netlink_parms(): no params data found
[  732.265696][T13644] 0ªî{X¹¦: renamed from gretap0
[  732.292194][T13644] 0ªî{X¹¦: left promiscuous mode
[  732.297281][T13644] 0ªî{X¹¦: entered allmulticast mode
[  732.304610][T13644] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  732.330119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.370990][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.394135][T13603] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.409675][T13603] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.420107][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.428546][T13603] bridge_slave_0: entered allmulticast mode
[  732.437782][T13603] bridge_slave_0: entered promiscuous mode
[  732.470095][T13664] pimreg: entered allmulticast mode
[  732.480898][T13603] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.488181][T13603] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.495711][T13603] bridge_slave_1: entered allmulticast mode
[  732.524672][T13603] bridge_slave_1: entered promiscuous mode
[  732.551580][T13616] Bluetooth: hci0: Opcode 0x080f failed: -4
[  732.660389][T28662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.699418][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.861094][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.931637][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.950112][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.055558][T13603] team0: Port device team_slave_0 added
[  733.080695][T13603] team0: Port device team_slave_1 added
[  733.155793][T13713] netlink: 'syz.0.11677': attribute type 2 has an invalid length.
[  733.185876][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.205411][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.233793][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.245492][T13711] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  733.286010][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.322317][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.369451][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  733.534849][T13603] hsr_slave_0: entered promiscuous mode
[  733.561107][T13603] hsr_slave_1: entered promiscuous mode
[  733.635948][T13779] netlink: 'syz.4.11687': attribute type 11 has an invalid length.
[  733.650545][ T5862] Bluetooth: hci0: command tx timeout
[  733.672604][T13780] netlink: 'syz.3.11688': attribute type 1 has an invalid length.
[  733.772058][T13780] 8021q: adding VLAN 0 to HW filter on device bond7
[  733.779703][T28665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.788539][T28665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.938897][T13799] team0: left allmulticast mode
[  733.956949][T13799] team_slave_0: left allmulticast mode
[  733.976101][T13799] team_slave_1: left allmulticast mode
[  733.998742][T13799] team0: left promiscuous mode
[  734.026151][T13799] team_slave_0: left promiscuous mode
[  734.049621][T13799] team_slave_1: left promiscuous mode
[  734.060886][T13799] bridge0: port 3(team0) entered disabled state
[  734.071018][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.073787][T13799] batman_adv: batadv0: Removing interface: dummy0
[  734.080616][T13802] nbd9: detected capacity change from 0 to 127
[  734.096714][T13799] bridge_slave_0: left allmulticast mode
[  734.104445][T13799] bridge_slave_0: left promiscuous mode
[  734.110283][T13799] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.124796][T13799] bond0: (slave bridge_slave_1): Releasing backup interface
[  734.137447][T13799] bond0: (slave bond_slave_0): Releasing backup interface
[  734.152708][T13799] bond0: (slave bond_slave_1): Releasing backup interface
[  734.172925][T13799] team0: Port device team_slave_0 removed
[  734.194320][T13799] team0: Port device team_slave_1 removed
[  734.202704][T13799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  734.213921][T13799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.228614][T13799] bond0: (slave wlan1): Releasing backup interface
[  734.240872][T13799] bond1: (slave veth3): Releasing active interface
[  734.257141][T13799] bond2: (slave gretap1): Releasing active interface
[  734.268434][T13799] bond3: (slave bridge2): Releasing active interface
[  734.288279][ T5862] block nbd9: Receive control failed (result -32)
[  734.501140][T13839] netlink: 'syz.0.11702': attribute type 10 has an invalid length.
[  734.526742][T13835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  734.556974][T13838] netlink: 'syz.0.11702': attribute type 10 has an invalid length.
[  734.575775][T13839] team0: Port device dummy0 added
[  734.583314][T13835] syzkaller0: entered promiscuous mode
[  734.588831][T13835] syzkaller0: entered allmulticast mode
[  734.645680][T13838] team0: Port device dummy0 removed
[  734.659116][T13838] dummy0: entered allmulticast mode
[  734.666071][T13838] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  734.696881][T13835] tipc: Resetting bearer <eth:syzkaller0>
[  734.724437][T13849] __nla_validate_parse: 17 callbacks suppressed
[  734.724460][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11705'.
[  734.741249][T13833] tipc: Resetting bearer <eth:syzkaller0>
[  734.797337][T13833] tipc: Disabling bearer <eth:syzkaller0>
[  734.843125][T13847] C: left promiscuous mode
[  734.847801][T13847] tunl0: left promiscuous mode
[  734.857189][T13847] gre0: left promiscuous mode
[  734.864821][T13847] gretap0: left promiscuous mode
[  734.871326][T13847] erspan0: left promiscuous mode
[  734.876518][T13847] ip_vti0: left promiscuous mode
[  734.945650][T13865] netlink: 'syz.1.11710': attribute type 4 has an invalid length.
[  734.996854][T13869] netlink: 'syz.1.11710': attribute type 4 has an invalid length.
[  735.111487][T13847] xfrm0: left promiscuous mode
[  735.168495][T13847] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  735.185575][T13847] veth3: left promiscuous mode
[  735.192111][T13847] gtp0: left promiscuous mode
[  735.198671][T13847] mac80211_hwsim hwsim66 syzkaller0: left promiscuous mode
[  735.438256][T13847] geneve2: left promiscuous mode
[  735.448848][T13847] geneve3: left promiscuous mode
[  735.476905][T13847] gtp1: left promiscuous mode
[  735.529744][T28662] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  735.575908][T28662] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  735.616315][T28662] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  735.644684][T28662] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 256 - 0
[  735.675054][T28662] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  735.721201][T28662] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  735.740512][T28662] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  735.740758][ T5862] Bluetooth: hci0: command 0x041b tx timeout
[  735.749522][T28662] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0
[  735.781571][T28662] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  735.795157][T28662] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  735.804524][T28662] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  735.817686][T28662] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0
[  735.826799][T28662] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  735.858829][T28662] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  735.890517][T28662] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  735.920092][T28662] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0
[  736.032232][T13903] netlink: 684 bytes leftover after parsing attributes in process `syz.0.11720'.
[  736.094431][T13603] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  736.121154][T13603] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  736.148542][T13603] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  736.177995][T13603] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  736.418010][T13935] netlink: 'syz.4.11725': attribute type 4 has an invalid length.
[  736.434720][T13935] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11725'.
[  736.545378][T13603] 8021q: adding VLAN 0 to HW filter on device bond0
[  736.617042][T13603] 8021q: adding VLAN 0 to HW filter on device team0
[  736.645888][T13944] vlan0: entered promiscuous mode
[  736.658966][T13944] bridge0: entered promiscuous mode
[  736.699045][T28659] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.706286][T28659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.719067][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11732'.
[  736.753551][T28659] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.760784][T28659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.769416][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11732'.
[  736.935322][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11734'.
[  736.991255][T13962] IPv6: sit2: Disabled Multicast RS
[  737.021941][T13962] sit2: entered allmulticast mode
[  737.093829][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11735'.
[  737.110795][T13964] netlink: 'syz.3.11735': attribute type 2 has an invalid length.
[  737.273637][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.417745][T13603] veth0_vlan: entered promiscuous mode
[  737.438939][T13603] veth1_vlan: entered promiscuous mode
[  737.496314][T13603] veth0_macvtap: entered promiscuous mode
[  737.512880][T13603] veth1_macvtap: entered promiscuous mode
[  737.554101][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  737.597780][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  737.648521][T28660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  737.665819][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11742'.
[  737.693061][T28660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  737.749537][T28660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  737.777144][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11742'.
[  737.787409][T28660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.810132][    C0] net_ratelimit: 1 callbacks suppressed
[  737.810152][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.827687][T11956] Bluetooth: hci0: command 0x041b tx timeout
[  737.872209][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11744'.
[  737.895174][T14012] netlink: 'syz.1.11745': attribute type 12 has an invalid length.
[  737.906198][T14012] netlink: 'syz.1.11745': attribute type 11 has an invalid length.
[  738.479119][T28668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.494003][T28668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.549517][T28657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.558544][T28657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.876261][T14058] netlink: 'syz.4.11756': attribute type 2 has an invalid length.
[  739.250535][T11956] Bluetooth: hci2: command 0x0406 tx timeout
[  739.890043][ T5862] Bluetooth: hci0: command 0x041b tx timeout
[  739.931829][T14128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  739.947769][T14128] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode
[  739.988721][T14133] IPVS: Unknown mcast interface: nicvf0
[  740.026056][T14134] IPVS: Unknown mcast interface: nicvf0
[  740.127563][T14133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  740.144786][T14152] openvswitch: netlink: IPv4 tun info is not correct
[  740.244677][T14160] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  740.257687][T14161] __nla_validate_parse: 14 callbacks suppressed
[  740.257707][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11790'.
[  740.288927][T14161] ªªªªªª: renamed from vlan0
[  740.319526][T14163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  740.363417][T14167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  740.459354][T14172] vcan0: entered allmulticast mode
[  740.469318][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11797'.
[  740.498938][T14172] vlan2: entered allmulticast mode
[  740.519010][T14172] bond_slave_0: entered allmulticast mode
[  740.606191][T14182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  740.607951][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.633685][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.668942][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.679208][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.689576][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.702631][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.719727][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.736585][T14179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11799'.
[  740.761757][T14185] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  741.034960][T14210] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  741.061494][T14230] tipc: Cannot configure node identity twice
[  741.428426][T14257] netlink: 'syz.0.11817': attribute type 30 has an invalid length.
[  741.661973][ T5937] IPVS: starting estimator thread 0...
[  741.751106][T14275] IPVS: using max 39 ests per chain, 93600 per kthread
[  741.981099][ T5862] Bluetooth: hci0: command 0x041b tx timeout
[  742.107691][T14309] netlink: 'syz.2.11831': attribute type 21 has an invalid length.
[  742.147897][T14313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  742.159764][T14313] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  742.191242][T14313] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  742.374520][T14329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11
[  742.416679][T14332] netlink: 'syz.0.11839': attribute type 1 has an invalid length.
[  742.426518][T14332] netlink: 'syz.0.11839': attribute type 1 has an invalid length.
[  742.598311][T14345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  742.605658][T14345] IPv6: NLM_F_CREATE should be set when creating new route
[  742.619637][T14347] netlink: 'syz.4.11844': attribute type 29 has an invalid length.
[  742.748084][T14359] mac80211_hwsim hwsim66 syzkaller0: left promiscuous mode
[  742.759552][T14359] mac80211_hwsim hwsim66 syzkaller0: left allmulticast mode
[  742.901614][T14369] bond0: Error: Cannot enslave bond to itself.
[  743.004002][T14378] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  743.309789][T14398] openvswitch: netlink: Actions may not be safe on all matching packets
[  743.561209][T14409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.779294][T14418] atomic_op ffff88807b5f7998 conn xmit_atomic 0000000000000000
[  744.159274][T14442] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  744.312373][T14446] rdma_rxe: rxe_newlink: failed to add vxcan1
[  744.428518][T14460] netlink: 'syz.0.11883': attribute type 2 has an invalid length.
[  744.440077][T14460] netlink: 'syz.0.11883': attribute type 2 has an invalid length.
[  744.831979][T11956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  744.839284][T11956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  744.848119][T11956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  744.857148][T11956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  744.866508][T11956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  744.947553][T14473] hsr0 speed is unknown, defaulting to 1000
[  745.316212][T14473] chnl_net:caif_netlink_parms(): no params data found
[  745.453374][T14473] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.468064][T14473] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.477366][T14473] bridge_slave_0: entered allmulticast mode
[  745.486772][T14473] bridge_slave_0: entered promiscuous mode
[  745.495726][T14473] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.504036][T14473] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.512426][T14473] bridge_slave_1: entered allmulticast mode
[  745.521489][T14473] bridge_slave_1: entered promiscuous mode
[  745.551024][T14505] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  745.568041][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  745.573910][T14508] __nla_validate_parse: 83 callbacks suppressed
[  745.573933][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11896'.
[  745.595312][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  745.606152][T14508] netlink: 272 bytes leftover after parsing attributes in process `syz.0.11896'.
[  745.616576][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11896'.
[  745.656294][T14505] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.663735][T14505] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.735122][T14505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  745.751657][T14505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  745.852035][T14505] vlan2: left allmulticast mode
[  745.857063][T14505] bond_slave_0: left allmulticast mode
[  745.897451][T28673] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  745.914740][T28673] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  745.945663][T14473] team0: Port device team_slave_0 added
[  745.958796][T28673] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  745.979026][T14473] team0: Port device team_slave_1 added
[  745.995182][T28673] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.061496][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  746.068943][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.098847][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  746.124383][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  746.131531][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.141919][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.169921][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.238451][T14525] netlink: 'syz.2.11903': attribute type 1 has an invalid length.
[  746.239383][T14473] hsr_slave_0: entered promiscuous mode
[  746.261236][T14473] hsr_slave_1: entered promiscuous mode
[  746.267547][T14473] debugfs: 'hsr0' already exists in 'hsr'
[  746.282466][T14473] Cannot create hsr debugfs directory
[  746.313468][T14525] 8021q: adding VLAN 0 to HW filter on device bond1
[  746.325482][T14528] vlan3: entered allmulticast mode
[  746.331825][T14528] veth1: entered allmulticast mode
[  746.459036][T14530] hsr0 speed is unknown, defaulting to 1000
[  746.696948][T14542] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11908'.
[  746.706832][T14542] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11908'.
[  746.852876][T14473] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  746.863690][T14473] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  746.873417][T14473] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  746.884128][T14473] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  746.927159][T14530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11904'.
[  746.937675][ T5862] Bluetooth: hci3: command tx timeout
[  746.958474][T14530] netlink: 'syz.2.11904': attribute type 13 has an invalid length.
[  747.007572][T14473] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.035830][T14473] 8021q: adding VLAN 0 to HW filter on device team0
[  747.053541][T28659] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.060719][T28659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.084639][T28659] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.091823][T28659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.333939][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11918'.
[  747.413091][ T1304] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  747.440813][T14581] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  747.452759][T14581] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  747.461200][T14581] CPU: 0 UID: 0 PID: 14581 Comm: syz.0.11916 Not tainted syzkaller #0 PREEMPT(full) 
[  747.470667][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  747.480727][T14581] RIP: 0010:klist_remove+0x14a/0x340
[  747.486029][T14581] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 5b b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 5b b3 f6 49 8b 44 24 58 48 89 44 24 08
[  747.505646][T14581] RSP: 0018:ffffc900048df940 EFLAGS: 00010202
[  747.511722][T14581] RAX: 000000000000000b RBX: ffff88805d72bc00 RCX: 0000000000000000
[  747.519695][T14581] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  747.527672][T14581] RBP: ffffc900048dfa40 R08: ffffffff8f89fe83 R09: 1ffffffff1f13fd0
[  747.535649][T14581] R10: dffffc0000000000 R11: fffffbfff1f13fd1 R12: 0000000000000000
[  747.543622][T14581] R13: 1ffff11008ee698c R14: ffff888047734c60 R15: dffffc0000000000
[  747.551599][T14581] FS:  00007f981fdd16c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  747.560530][T14581] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  747.567117][T14581] CR2: 00007f25538e56c0 CR3: 00000000422a0000 CR4: 00000000003526f0
[  747.575099][T14581] Call Trace:
[  747.578381][T14581]  <TASK>
[  747.581320][T14581]  ? __pfx_klist_remove+0x10/0x10
[  747.586383][T14581]  ? __pfx_kobject_move+0x10/0x10
[  747.591452][T14581]  ? do_raw_spin_unlock+0x122/0x240
[  747.596660][T14581]  ? get_device_parent+0x366/0x3a0
[  747.601776][T14581]  device_move+0x193/0x700
[  747.606202][T14581]  hci_conn_del_sysfs+0xb8/0x170
[  747.611149][T14581]  hci_conn_del+0xc33/0x11b0
[  747.615753][T14581]  hci_conn_hash_flush+0x191/0x230
[  747.620872][T14581]  hci_dev_close_sync+0xaef/0x1330
[  747.626037][T14581]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  747.631606][T14581]  ? do_raw_read_unlock+0x3d/0x80
[  747.636680][T14581]  hci_dev_close+0x108/0x200
[  747.641298][T14581]  sock_do_ioctl+0xd9/0x300
[  747.645824][T14581]  ? __pfx_sock_do_ioctl+0x10/0x10
[  747.650993][T14581]  ? do_futex+0x395/0x420
[  747.655350][T14581]  sock_ioctl+0x576/0x790
[  747.659685][T14581]  ? lock_release+0x4b/0x3e0
[  747.664288][T14581]  ? __pfx_sock_ioctl+0x10/0x10
[  747.669147][T14581]  ? __fget_files+0x2a/0x420
[  747.673749][T14581]  ? __fget_files+0x3a0/0x420
[  747.678439][T14581]  ? __fget_files+0x2a/0x420
[  747.683044][T14581]  ? bpf_lsm_file_ioctl+0x9/0x20
[  747.688007][T14581]  ? __pfx_sock_ioctl+0x10/0x10
[  747.692886][T14581]  __se_sys_ioctl+0xfc/0x170
[  747.697577][T14581]  do_syscall_64+0xfa/0x3b0
[  747.702109][T14581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.708179][T14581]  ? clear_bhb_loop+0x60/0xb0
[  747.712863][T14581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.718766][T14581] RIP: 0033:0x7f981ef8ebe9
[  747.723189][T14581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.742885][T14581] RSP: 002b:00007f981fdd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  747.751310][T14581] RAX: ffffffffffffffda RBX: 00007f981f1b6090 RCX: 00007f981ef8ebe9
[  747.759470][T14581] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000004c
[  747.767448][T14581] RBP: 00007f981f011e19 R08: 0000000000000000 R09: 0000000000000000
[  747.775422][T14581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  747.783395][T14581] R13: 00007f981f1b6128 R14: 00007f981f1b6090 R15: 00007ffc3cffd788
[  747.791382][T14581]  </TASK>
[  747.794418][T14581] Modules linked in:
[  747.801765][T14581] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  747.814779][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11919'.
[  747.830837][T14581] RIP: 0010:klist_remove+0x14a/0x340
[  747.836268][T14581] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 5b b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 5b b3 f6 49 8b 44 24 58 48 89 44 24 08
[  747.893284][T14581] RSP: 0018:ffffc900048df940 EFLAGS: 00010202
[  747.899550][T14581] RAX: 000000000000000b RBX: ffff88805d72bc00 RCX: 0000000000000000
[  747.949243][T14581] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  747.958878][T14581] RBP: ffffc900048dfa40 R08: ffffffff8f89fe83 R09: 1ffffffff1f13fd0
[  747.967714][T14581] R10: dffffc0000000000 R11: fffffbfff1f13fd1 R12: 0000000000000000
[  747.989103][T14581] R13: 1ffff11008ee698c R14: ffff888047734c60 R15: dffffc0000000000
[  747.999724][T14581] FS:  00007f981fdd16c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  748.019548][T14581] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  748.037170][T14581] CR2: 000000110c26eb09 CR3: 00000000422a0000 CR4: 00000000003526f0
[  748.046590][T14581] Kernel panic - not syncing: Fatal exception
[  748.053038][T14581] Kernel Offset: disabled
[  748.057391][T14581] Rebooting in 86400 seconds..