last executing test programs:

9.711818369s ago: executing program 1 (id=2910):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r0) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async)
sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0x41, 0x0, 0xfffffffffffffe54) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)

9.528955312s ago: executing program 1 (id=2914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0xfffffffc, 0x25dfdbfa, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x24000010)

9.384524123s ago: executing program 1 (id=2919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r3, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x80, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700000000f008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000000000000a20000000000a05000000000000000000050000002c000000030a010100000000000000000100000040000000060a010400000000000000000500000000000000140a010800000000000000000100000a000003400000000f000000000e0a010800000000000000000300000100000440000000010000044000000001140000001100010000000000000000000000000a00000000000000"], 0xb4}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0x3, 0x4, 0xfffffffe}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x1ffffd, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xd, 0xc40, 0x7fffffff, 0x0, 0x10, 0x9, 0x16, 0x6, 0xca11, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$igmp(0x2, 0x3, 0x2)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8884}, 0x4000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={<r10=>0x0, 0x8}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r10, 0x5}, 0x8)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810)
ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f00000001c0)={0x26, 0x8dc})

9.044437826s ago: executing program 1 (id=2926):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xda9}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e", 0x17}], 0x5}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40)

8.872330828s ago: executing program 1 (id=2928):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xfffffffffffffffc}, 0x2}}, 0xb8}}, 0x0) (async)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f0000000300)=""/196, 0x9})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

8.600457374s ago: executing program 1 (id=2930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000000c2f9)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003"], 0x2c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0x24, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000000c2f9) (async)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003"], 0x2c}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0x24, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async)

4.713138384s ago: executing program 0 (id=2963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x12, 0xb, 0x101, 0x70bd27, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@typed={0xc, 0x145, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010008000000140000004600002400000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c)

4.337368321s ago: executing program 0 (id=2968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

4.11184729s ago: executing program 0 (id=2969):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e22, 0xe0000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80000001}}, 0x0, 0x0, 0x50, 0x0, "0573dd660093f2c9cfab16ed22362c42a6c74d104350a0d4604a05f28f500699d6078b7c90648c05363ebe0a836cf1453773658893ad2d10bb5c3038ad66ee1a7914d8a417ec02583dcbae0dbf410939"}, 0xd8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x30, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7f214193, 0x65}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1e}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000001)
sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001)
r11 = socket(0x2c, 0x3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r12, &(0x7f0000000140), &(0x7f0000000080)=@udp=r11}, 0x20)
r13 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r13, 0x1}, 0x20)
recvmsg$unix(r5, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000009c0)={0x7, 'vxcan1\x00', {0x3}, 0x5})
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000000)=""/99, 0x63}], 0x2}, 0x2000)

3.819333254s ago: executing program 3 (id=2971):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001100)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='^\x00', 0x0, &(0x7f0000000040)={@align=0x91, {0xad, 0x7, 0x4, 0x1}}, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, {[0x8, 0x8, 0x0, 0x9]}, 0x1, 0x1000, &(0x7f0000000100)=""/4096})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={<r1=>0x0, 0x68, &(0x7f0000001180)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x202}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0xc6e, 0x1, @private1, 0x1}]}, &(0x7f0000001240)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001280)={<r2=>r1, 0x6000}, &(0x7f00000012c0)=0x8) (async)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000001300)={0x10001, 0xa007}) (async)
r3 = accept$netrom(r0, &(0x7f0000001340)={{}, [@remote, @default, @netrom, @null, @null, @default, @rose, @rose]}, &(0x7f00000013c0)=0x48)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000001400)={0x0, 0x2, 0x6}) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001440)={<r5=>0x0, 0x1ff, 0x2, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001840)={<r6=>0x0, "85a1d0ab1b258ea0e3c43a415797fcea"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002840)={0x2, 0x1, {0x0, @struct={0x10001, 0x6}, 0x0, 0x7ff, 0x4, 0x3ff, 0x6e39, 0xe940000000000000, 0xd4, @struct={0x2}, 0x7, 0x4, [0x100000001, 0xfffffffffffffff0, 0x8, 0x5, 0x9, 0x7fff]}, {0x6, @struct={0x3, 0x9}, r5, 0x400, 0xfffffffffffffffb, 0x5, 0x5, 0x9, 0x0, @struct={0x0, 0x10000000}, 0x9, 0x2, [0x9, 0x0, 0xee, 0x8, 0x7, 0x2]}, {0x8, @struct={0x4, 0xac46170}, r6, 0x3, 0x0, 0xb, 0x2, 0xbc, 0x29, @usage=0x7fffffffffffffff, 0x5, 0x0, [0x7, 0x1, 0xd3f1, 0x3, 0x16, 0x6]}, {0xfffffffffffffff8, 0xc62, 0x9be2}})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002c40)={<r7=>r3, 0x4, 0x401, 0x8})
ioctl$XFS_IOC_ERROR_INJECTION(r7, 0x40085874, &(0x7f0000002c80)={r4, 0x7}) (async)
syz_extract_tcp_res$synack(&(0x7f0000002cc0)={<r8=>0x41424344}, 0x1, 0x0)
write$tun(r7, &(0x7f0000002d00)={@val, @void, @ipv6=@tcp={0x0, 0x6, "90e505", 0x29a, 0x6, 0xff, @mcast2, @loopback, {[@dstopts={0x2c, 0xc, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xf, 0x59, "d4468a8f5779ecc741979b0a4fd206dd54fbd7b4cd8cfd2c744b277934ba234348159834473584568ecd38d8bf16e2db9e5a65c85c31a0a180d047ffd4e1931fc6436498309449f7d2876381c1e99617fa3064286f416cc8f1"}, @ra={0x5, 0x2, 0x1ff}]}, @srh={0x3b, 0x8, 0x4, 0x4, 0x5, 0x40, 0xb, [@private0, @mcast1, @remote, @mcast1]}, @dstopts={0xff, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @fragment={0xc, 0x0, 0x2, 0x0, 0x0, 0xa, 0x64}, @routing={0x3b, 0x4, 0x2, 0x1, 0x0, [@remote, @private0]}, @routing={0x3c, 0xe, 0x0, 0x0, 0x0, [@loopback, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback]}], {{0x4e23, 0x4e21, r8, 0x41424344, 0x0, 0x0, 0x6, 0x80, 0x47, 0x0, 0x80, {[@sack_perm={0x4, 0x2}]}}, {"a4fb3743c938d63265a30676994f0a223ed83c88dff99a89696682ad62ddab1d995b0673530e4a561089863597974eea2d0fed9063908597e6754a40ef1624f4e03e8ffcce06e9b6bf0b1f7d7a455fb91195c4128a69603572c4fd1a4bc6efb818c627c383a98a12f6280e3b9be8b5ebe6ae42fb61163810be49dc786ee8d7d7acfcccc385812d0e75f07b7ff20ef14d121363b316f2199c08037b10617a13bc43cec79731fb4db67c90d99f72b1190b230014af570685926ce15ba979dcdce8f7be58321ba56029d74ff2d3b474b97da53f6a410f1c4d953ee30438857c1e1a2d870bec0088ca4a68f3828ee9465b913388"}}}}}, 0x2c6) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000003000)={r2, 0x4}, &(0x7f0000003040)=0x8) (async)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000003080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f00000030c0)={0x0, <r11=>0x0, "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", "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"}) (rerun: 32)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000040c0)={r11}) (async)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000050c0)={0x0, 0x8, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @multicast, @broadcast, @broadcast, @local]})
ioctl$XFS_IOC_GETBMAPX(r7, 0xc0205838, &(0x7f0000005100)={0xfffffffffffffffa, 0x9, 0x7, 0x800, 0xd, 0x4, 0x6})
bind(r7, &(0x7f0000005140)=@rc={0x1f, @none, 0xe4}, 0x80) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x54, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x54}}, 0x4000000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000055c0)={r0, 0xe0, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000005300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000005340)=[0x0, 0x0], &(0x7f0000005380)=[0x0], 0x0, 0xba, &(0x7f00000053c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000005400), &(0x7f0000005440), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000005480)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000005680)={'ip6_vti0\x00', &(0x7f0000005600)={'syztnl2\x00', r13, 0x4, 0xf7, 0xfd, 0x2, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x40, 0x80, 0x5047, 0xfffff246}})
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000005780)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005740)={&(0x7f0000005700)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x27f}]}, 0x28}}, 0x20048016) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000057c0)=0x200010, 0x4) (async)
ioctl$int_in(r7, 0x5421, &(0x7f0000005800)=0x7)

3.537630779s ago: executing program 3 (id=2973):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000200)=0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x2, @local, 0x5}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000001080)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x808000}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x8}, &(0x7f0000000040)=0x8)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)

3.284162647s ago: executing program 3 (id=2976):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
close(r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
listen(r3, 0x3)
ppoll(&(0x7f0000000280)=[{r3, 0xc0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r1, &(0x7f0000000280)=ANY=[], 0xc2)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @broadcast}, 0xa, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

3.176088713s ago: executing program 0 (id=2978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async)

2.921368067s ago: executing program 4 (id=2980):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x58b301, 0x0)

2.797543823s ago: executing program 4 (id=2981):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000000061110a0d0000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}})
socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0xa0c, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xfff1}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x9dc, 0x2, [@TCA_FLOW_EMATCHES={0x9d0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa4, 0x0, 0x0, 0x0, {{0x3, 0x0, 0xfff8}, "d28abdbbefd397110cd7505e07d53cfdadf9ab3609effa7cf3a2a34bb4e52918cf93412c5330f201769e002b73a89e3141fe7eb33a2fa85914d18024317945a982503c8f7596d5b5009e0aa56dbf431b4f683cccb8dce784b8c6261168cb3c0822976ab056e3357f6f0e762b168324fc83904c2ff704be744cac643e235ea1475f92e373970b1a89f570a1b8b9a02e6b32531bbeca"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x99, 0x8, 0x3}, {0x3, 0x0, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x40, 0x2, 0x4}, {0x0, 0x6, 0x2, "53bf26e56805"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x951}, {0x8, 0x1, 0x9, 0xcd9}}}]}, @TCA_EMATCH_TREE_LIST={0x318, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x524}, "64f682ecdffd0cb6a2d95065411cc62b7a759e26072a67cc373ad18ce689be9c3ccbbfd7a6cb12b506c13d8b72f05a8aa846f0aa84048dd3ab612355f8fe05dd59fabb9a35ee8f5dcbd5abaaad6afd2e7553d3667fb82465a2420d1f9b19cbf1526ca74073"}}, @TCF_EM_CONTAINER={0xf4, 0x3, 0x0, 0x0, {{0x8000, 0x0, 0x4}, "e108a3a9df56d99af1d2e696a2f092438c16b20f18a702d558cf1fa5a90853811acf3bf06a69b0075d2097f971a7828f8d02ddc91e2c41883685e41adc9747b40e74766ca7576209b546473e22c992db29fb472b2183cf0a72c91210fb231034d22cd782e0b12fe1686af0bef4c95adebc8cd5c7a0c44b1057259636c484a882c17ca77db7771847ae009059ef082c0b7ad412a10e1adc651b37eb7e99c4706ee743b7b298b537318ef99e3c74a38799d96222866b95e802c8c7a1480657aa0df1709c092a1eea7244db77050472ac8c96fd962f47dcd7aef6cade48a32f4bf9dc23f2147f7eb1"}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="16a0915a"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="fe652d9f2d70a20891f6", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x42, 0x2}, {0x1000, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3f22a8", @TCF_META_TYPE_VAR="3910", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="3a1926c89b", @TCF_META_TYPE_VAR='h-', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="7e573e2484"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x100}, {0x6, 0x0, 0x0, 0x3, 0x3, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0xffff}, {{0x2, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1ff}, {0x8000, 0x7, 0x8, 0x2, 0x9, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x9}, {0x2, 0x6, 0x2}}}, @TCF_EM_CONTAINER={0xa4, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x9}, "6ee8b4bf395cf4f2ceaaccdba007801eb6d28b5e59f9a5db220af229debee7a4774be72c52e0997112bff9e548a0f14071ce26f04545674b56b66a19d4c5e08db10f04bae1cf359483949a5cc814a07bf0828802e30297c0dd6dfc1670a37afb797270595beb66f4f2ab81d4c626abd28aafd8c42cf8ae9bf18b091159e9e22d807535687948ed120a969c12a959c7e0692df8b9c67e"}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x1e0e, 0x4, 0x9e}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0x0, 0xca, 0x2}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="484ae74df3c029", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="ac", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f646023c88"]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x400, 0x8, 0xb827}, {0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x8}, {0x3, 0x3, 0x9, 0x6, 0x2, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x2}, {0x3, 0x0, 0xd}}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x1, 0x0, 0xc2d}, "19ac5824ab67d07eb1c73c9f5fbce2cd380d06eebea80706a6408308985655a2e1524094a4cd014af4ed3f86503ccea8c9b14e7e72c961a58f59b44bb135cb6b4f9493753922161a1975bbd28e4238bec49cf1e73a52f23a83b4dca6405d5dd29fcf2a4625953dc4cbbae4bc49039e60e666e2ee1df343433adde1c39e7cbd961a993a099452f51e85e273a0a8bf390671e4a19f249f008083ac5b6d72ef8000ceaf05fcb9113963050c0ce04edd18892ba2e084d637d054cf60e8827950b6cb73708e5212"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x9, 0x10, 0xfff, 0x6, 0xd, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x48, 0x7, 0xffff}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x8000, 0x8b1, 0x8a, 0x5, 0x7, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xe00c, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x6}, {0x5, 0x3}}}]}}, @TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0xb, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="7531cb460dac", @TCF_META_TYPE_VAR="de16c893bb", @TCF_META_TYPE_VAR="9906ccc4", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='^', @TCF_META_TYPE_VAR="95eca862", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="200b2a95", @TCF_META_TYPE_VAR="7aab6b2cf7f517", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="7e17f4942dfdd1b675", @TCF_META_TYPE_VAR='3']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x92, 0x2}, {0x5, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9d, 0x8, 0x1}, {0xadc, 0x67}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0xc, @TCF_META_TYPE_VAR="4a8fbed029", @TCF_META_TYPE_VAR="6ea56391dd"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7f, 0x2}, {0x990b, 0x4}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="4dc9002c", @TCF_META_TYPE_VAR="2cccfd4fa51aa6e0"]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="5668206b9e"]}]}}, @TCF_EM_IPT={0x164, 0x1, 0x0, 0x0, {{0x100, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0xda, 0x5, "f2023d835d36451c10e36adae5e881d7aa867e89e2e94e2ebea0062f96595af60b07f37e0152936016fc14437eed5fcec29b1cacca6bfcdd13cdc665a8e67b35154b06ff7ad99c727e1fce94bbc1c9f4f1bd1fca47ffd4a829af33a8ce3f57f5957148e03079aacfeb100ff85b8f84cda6c75b65ac8d7f527141d4a88ce2d15f2d83e9998bddd9c25d2833eb800c2bc77786ef76580b21d90c7461541951f4d257388c4eeb1b6caa5a0bebb0d918194ea5807fff4b03146c67d7eb8bbb2cfba93c88e9dcd357d33cdc680505eee288ecf393ea52dfc8"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x64, 0x5, "94942dbe7b57282758844ceb15131004f66df998f141ffcf6c521b35b79b05bf1de79ddb874f46cb747aa8f8a4766bddd3dbab76e857f016f25be90cb6c04f1244073fbb9558a6d2f3d33cc0b1b0b49ba321729da1d41ef671f5c5a75820380f"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x21c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb4, 0x2, 0x0, 0x0, {{0x400, 0x0, 0x8e}, "2893d3d9018070b2df0c74c0eb9c2110ce30e4f98be7a9d10d527cdca783fb4ec1b4ce814049779be8d35491e928078893a8b246bdacf1224e2dbb2c455d199ed5f1ae11ef268ab15a33b326f7012bf549852bc4d4ccfa83878381aa9e4494b5620b0995c7534ee54995d3a9090e49f20cf0e5a04705d502d3210c35f245c6be2de22971570d203c5d1e48ebc04ed86f937ac8dd6fa2dfd8a805989cf4da29be1cf513da595459"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x53}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR='S', @TCF_META_TYPE_VAR="4a64c4"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="0507f110629012e8", @TCF_META_TYPE_INT=0x93fc, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0xb}, {0xffff, 0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x7fff, 0x3, 0x8, 0x2, 0x1, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0x100, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xf}, "bdf728c25b031b49457c338b6272805cde0cbc0f0b5e1564ad6229bc5a218da3350ad4a6ed4a81ac1c64a4b1c6761bb4100a9e8bd66216b1afdf66b92192cbcabc9a6285e28b7a434e2765fafee6e34f84e27059ae9144cda639d612c0aad15aa54a343127b56403c045acac4ea3e37960a85b8663bce2df58c15e8cde46351720054bd2d44287f86ee04d1f87e0acc4821dbfdb2d2e3015465ca5c3bfa23fbc7e91554cf0eef6788afcbfcf126c65d23b46289bcdc26b995bbf9c5e851cb5e654c0910b026b56ac911b8b3acaa9f5077d5b9e13cdb41f13bfa2cea230cacd0ba5db78a4d87d0a7a18764e932e2f85ea975d"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x2, 0x100}, {0x4, 0x7, 0x2, "97c3fc8b39e07d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0xa0c}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r6, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030201000000000000000000"], 0x48}}, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007000000000000190780a010102ac1414aa04009078000000004500000000000000003200000000000000000000440c0001ac1414bb01ac1414c3cdb079113f0000000000000000ffffffff00"/119], 0x0)
r9 = accept(r6, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
shutdown(r9, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r9}, 0x47)
recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2.639582398s ago: executing program 2 (id=2983):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x5537c000)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb)
setsockopt$inet6_tcp_int(r1, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x5537c000) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4) (async)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async)

2.481377476s ago: executing program 2 (id=2984):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000040)={0xf, 0x7, 0x1, 0x8001})
bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4)
mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r0, 0xcedd5000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r3, r2, 0x0, 0x2)

2.320724445s ago: executing program 2 (id=2985):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0xa1c, 0x79, 0xffffffbe, 0x41058, 0x1, 0x7, '\x00', r0, r1, 0x3, 0x2, 0x1000001, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x47, &(0x7f0000000700)={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xab, 0x0, "1ae1", "9fec4a", 0xf9, "0dc747a639d712f6259f0da9ee218b18f40ac5ed180c997ba502ef0ea7ca167cb998d53e545847ee654fc1c8"}}}}}, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0)
socket(0x10, 0x2, 0x7ff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f40800003858627e428e9cbde1f300c96445abfae1eb3f297720d9c04c0c6a295a294b829192bfa98bb770ae2af9da6f2617f8f1851e3b65a7ce3184427439f7144300a347937ea9c77c8c571e69bcf3cfad2210", @ANYRES16=r7, @ANYBLOB="010000001ffa9ed4f8d466a0000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

879.099509ms ago: executing program 3 (id=2986):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008000700f3"], 0x3c}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r0, 0x0, 0x9, 0x0) (async)
close(0x3)

850.933706ms ago: executing program 0 (id=2987):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0xed, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f00"], 0xd4}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0)
write(r0, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x4c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48)
connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10)
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000080)={0x3, 0x1000000000000004, 0x100, 0xd7, 0x1})

712.474855ms ago: executing program 2 (id=2988):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
accept4(r0, &(0x7f0000000040)=@pptp, &(0x7f00000000c0)=0x80, 0x94274fcbc53319c) (async)
accept4(r0, &(0x7f0000000040)=@pptp, &(0x7f00000000c0)=0x80, 0x94274fcbc53319c)

612.878246ms ago: executing program 3 (id=2989):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25180000000c0006000100000001000000280030801c0001800c00050099ef000000000000080001000000000079adbd040400038005000200"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)

577.674055ms ago: executing program 2 (id=2990):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

528.594993ms ago: executing program 4 (id=2991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r2, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)={@dev={0xac, 0x14, 0x14, 0x3a}, @local, 0x1, 0x8, [@multicast1, @private=0xa010102, @empty, @multicast1, @remote, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, 0x30)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe7}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x844) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) (async)
ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000000300))

299.010582ms ago: executing program 4 (id=2992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x40440c3)

252.54578ms ago: executing program 2 (id=2993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x42f, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="f3ade86a8c19"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="fe5baceb5db4471a5e95b67e900f1f6a24a203518ffb948289ce1f672adc7a855c974c94a211d35984549a8e7c387df5c926c43bb7d9aced05ca0d9a7044f8abc4e37d7fa9b1037177f7fe48e5", 0x4d}, {&(0x7f0000000280)="4ee42c0f521dd60397ebdc7cdbd2e83f36e52ffba7ed4b94d54db4dca6f833ca4edd50063985464428a99cbb92e2f31e1b0e54873309d9547be6f6c6768dbf9087eef9048b3bae6336700899513bafa50f183c67c04eaa6624d636854a75024a9223e8e961ca0232270ef73d409282a00b1ac41a718af47d268b91e294e1b30f649bd82d9dbf2e9e479a30b981249b30e86bbe735b1b464b43d4994cbdd607ceffa91b7a55a6ec0fe026da14c2a0f1695086b4", 0xb3}, {&(0x7f0000000340)="543a48e24cb65d9ee867f0", 0xb}, {&(0x7f0000000480)="29eb79f1e6a5b9c7b01904c65e3943f8249a9b3e64dc215b9d2260cccc06d9272a815d432222a43f4b231d2c0b5e750a8b23e455fe863360d3ae3eadf1db088e7e5b74c7e54aa754155062b3f3875d78e149c5b0f6a2ebf240b27500667d993a897e5bed0b13c71178348d0424d74d4add4c82acde07779f4fcf9d7b2124c2b69e71da4be0cc8fd7e2f5cb521eebb8329a203fab1f0c2677023db66d34c89b0bd6a4b8bd4fd10e22f32e7b958705c4855b63aa96a0218a35aa0288a5813bb4c33a66c17fe63b4525a8a45c00674df02509bf64544e6e1e4af32a471e911e5a27bd002b6df9cf4f", 0xe7}, {&(0x7f0000000600)="f5b19ebcb36da348724d8273f2da7ff10de006bb2620769a260e8448da7d9673a9ffdde6fe847e556d8d2fee6a4273fdcd6bf20c29138aba62b9e41a43bff74b1906acd9df1f63f1860e403b94b9e440b29ece660c91078c119f7345d5e1f37cfb3d099ec66642c676d35d9bc9376334ba8755f7d9ed7475cb4f7e150916cfba37d298b3113b4c5cd8df41a6a1444af629562ae81304248a3a8877eca2e8e3487a625e9f", 0xa4}, {&(0x7f00000006c0)="a1e35243df14759c27a91a374bfa0a507123d697fc880149ea7cec5364c443f921398e0a03aeb41a26f8c972d70bfe0aa2a8d2403ddc1c179d21a4b4d5c3e8cc14bb3c65dc02bbb26835e3ee60527b60b8229ac457086f85a3d05736cd851a7567674f4330559a3a", 0x68}, {&(0x7f0000000740)="d587a51538a57b9a5c79b1336d019219fbcad698ab6a184c9a152a6e5e4a830d9bb6139b43adf3b42860a7eb660f2eb6d7b07f852ed106a58e7d660196fe1919b0c75434c54f0066351b4f5759d6aa022582dffe9d5cc65a82c0fc3380dce4ec642985f051bbb75c7817637a5167fb19c098effe870fb4302ba071a738308603d871db3cbda9a0fa", 0x88}, {&(0x7f0000000800)="ed68672235b5a0f39e2709e0380eab4c769722f66c3d672d23c7dc69c89dea3429c5fedb9da195c3dc541621197882eec8b4bfeae369ec9f4dc1540e44a1d11527e9a82a1ca1bf22e94a8d4f87dab7dc2cebb51943c9768c6159a7609c09f5b4e5b07dbb53cfa793ec9c9f6342a7ebce0aad3c11051fd2d95bbf2e24b621515248c8b63c768d990c0179e23c1cbbe6af5b36f5a71355af8e10ff6ce9fe88df3ad313bb4aea5b8bdc1d5aa802422246aa9b16ad2ebfd431d73c85593e0075dd430ba68cb0b7d66435f77d389d82da28f6cf4867b6b0be4ca35598c36a4aa25d3d93a629dbc1d2", 0xe6}, {&(0x7f0000000900)="45bf49e6", 0x4}], 0x9, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x4000080}], 0x1, 0x20000800)
bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x0, r6, 0xc, r1}, 0x10)

152.268032ms ago: executing program 0 (id=2994):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafbabf3bd80af82e0fac38c2205eaa7d2", 0x1e}], 0x1)

151.986161ms ago: executing program 4 (id=2995):
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

138.565099ms ago: executing program 3 (id=2996):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001440), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000)

0s ago: executing program 4 (id=2997):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4)
sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd2c, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800)

kernel console output (not intermixed with test programs):

d4 (unregistering): Released all slaves
[  172.630329][ T9582] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  172.690503][ T9582] bond1 (unregistering): Released all slaves
[  172.935450][ T9600] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  173.129922][ T9608] lo speed is unknown, defaulting to 1000
[  173.547259][ T9624] bond3: (slave bridge0): Device is not bonding slave
[  173.603227][ T9624] bond3: option active_slave: invalid value (bridge0)
[  173.614743][ T9624] bond3 (unregistering): Released all slaves
[  173.934159][ T5901] IPVS: starting estimator thread 0...
[  173.979972][ T9647] lo speed is unknown, defaulting to 1000
[  174.034383][ T9648] IPVS: using max 28 ests per chain, 67200 per kthread
[  174.227727][ T9661] netlink: 'syz.0.1104': attribute type 1 has an invalid length.
[  174.253982][ T9661] __nla_validate_parse: 12 callbacks suppressed
[  174.254002][ T9661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1104'.
[  174.628497][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  174.690651][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'.
[  174.717865][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'.
[  174.789075][ T9675] bond3: entered promiscuous mode
[  174.795426][ T9675] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.834221][ T9678] macvlan3: entered promiscuous mode
[  174.853470][ T9678] macvlan3: entered allmulticast mode
[  174.870996][ T9678] bond3: (slave macvlan3): Opening slave failed
[  174.897659][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  174.975109][ T9687] tipc: Started in network mode
[  174.982122][ T9687] tipc: Node identity e0000001, cluster identity 4711
[  174.991990][ T9687] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  175.003574][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'.
[  175.239959][ T9698] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1118'.
[  175.277287][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'.
[  175.296628][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'.
[  175.473849][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.612264][ T9722] xt_l2tp: missing protocol rule (udp|l2tpip)
[  175.785107][ T9713] bond1: entered promiscuous mode
[  175.801265][ T9713] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.846486][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.891548][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1125'.
[  175.907152][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.918474][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.943475][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.951873][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  175.961887][ T9713] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  176.191094][ T9737] xt_SECMARK: invalid mode: 9
[  176.504490][ T9752] chnl_net:caif_netlink_parms(): no params data found
[  176.559741][   T49] tipc: Subscription rejected, illegal request
[  176.715723][ T9765] batadv1: entered allmulticast mode
[  176.724215][ T9766] validate_nla: 27 callbacks suppressed
[  176.724234][ T9766] netlink: 'syz.3.1139': attribute type 1 has an invalid length.
[  176.740042][ T9766] netlink: 'syz.3.1139': attribute type 2 has an invalid length.
[  176.758140][ T9766] netlink: 'syz.3.1139': attribute type 2 has an invalid length.
[  176.766351][ T9766] netlink: 'syz.3.1139': attribute type 2 has an invalid length.
[  176.892125][ T9772] batadv1: entered allmulticast mode
[  176.928974][ T9779] IPVS: set_ctl: invalid protocol: 33 0.0.0.3:20004
[  176.970960][ T9783] xt_TCPMSS: Only works on TCP SYN packets
[  176.996594][ T9783] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.223551][ T9800] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  177.379099][ T9804] bond4: Removing last arp target with arp_interval on
[  177.503891][ T9813] pim6reg1: entered promiscuous mode
[  177.509271][ T9813] pim6reg1: entered allmulticast mode
[  177.636292][ T9823] syzkaller0: entered promiscuous mode
[  177.656073][ T9823] syzkaller0: entered allmulticast mode
[  178.027857][ T9843] openvswitch: netlink: Invalid VLAN frame
[  178.191083][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.228037][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.234085][ T9860] netlink: 'syz.2.1164': attribute type 16 has an invalid length.
[  178.244612][ T9860] netlink: 'syz.2.1164': attribute type 17 has an invalid length.
[  178.276148][ T9861] netlink: 'syz.0.1165': attribute type 62 has an invalid length.
[  178.380312][ T9860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.523559][ T9861] nbd1: detected capacity change from 0 to 63
[  178.567941][ T5830] block nbd1: Receive control failed (result -104)
[  178.576576][ T5834] block nbd1: Receive control failed (result -32)
[  178.620401][ T9874] netlink: 'syz.1.1172': attribute type 9 has an invalid length.
[  178.630774][ T9874] netlink: 'syz.1.1172': attribute type 11 has an invalid length.
[  178.638761][ T9874] netlink: 'syz.1.1172': attribute type 12 has an invalid length.
[  178.980433][ T9893] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  179.535097][ T9929] __nla_validate_parse: 17 callbacks suppressed
[  179.535119][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'.
[  179.617483][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'.
[  179.824992][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'.
[  179.948923][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'.
[  179.958818][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'.
[  180.105546][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'.
[  180.206231][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'.
[  180.293290][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1208'.
[  180.410539][ T9981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1209'.
[  180.496381][ T9976] syzkaller1: entered promiscuous mode
[  180.501956][ T9976] syzkaller1: entered allmulticast mode
[  181.057283][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'.
[  181.585956][T10045] team0 (unregistering): Port device team_slave_0 removed
[  181.634035][T10045] team0 (unregistering): Port device team_slave_1 removed
[  181.714510][T10047] bond4: entered promiscuous mode
[  181.739710][T10047] bond4: entered allmulticast mode
[  181.745906][T10047] 8021q: adding VLAN 0 to HW filter on device bond4
[  182.038721][T10034] lo speed is unknown, defaulting to 1000
[  182.320950][T10083] validate_nla: 4 callbacks suppressed
[  182.320970][T10083] netlink: 'syz.4.1240': attribute type 10 has an invalid length.
[  182.354821][T10083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.550532][T10089] netlink: 'syz.4.1243': attribute type 2 has an invalid length.
[  182.572704][T10089] netlink: 'syz.4.1243': attribute type 2 has an invalid length.
[  183.800041][T10137] "syz.2.1256" (10137) uses obsolete ecb(arc4) skcipher
[  184.063695][T10158] hsr_slave_0: left promiscuous mode
[  184.100926][T10158] hsr_slave_1: left promiscuous mode
[  184.207776][T10172] netlink: 'syz.4.1263': attribute type 1 has an invalid length.
[  184.248088][T10172] bond5: entered promiscuous mode
[  184.253854][T10172] bond5: entered allmulticast mode
[  184.286123][T10172] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.319686][T10175] macvlan2: entered promiscuous mode
[  184.340261][T10175] macvlan2: entered allmulticast mode
[  184.371524][T10175] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  184.694178][T10196] __nla_validate_parse: 12 callbacks suppressed
[  184.694198][T10196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'.
[  184.970462][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'.
[  184.988329][T10204] macvlan0: left promiscuous mode
[  185.004282][T10207] Unsupported ieee802154 address type: 0
[  185.012385][T10204] netlink: 'syz.4.1270': attribute type 1 has an invalid length.
[  185.032867][T10204] netlink: 'syz.4.1270': attribute type 2 has an invalid length.
[  185.052122][T10207] Unsupported ieee802154 address type: 0
[  185.060081][T10207] Unsupported ieee802154 address type: 0
[  185.083734][   T36] wlan1: Trigger new scan to find an IBSS to join
[  185.389745][T10237] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1282'.
[  185.914876][T10259] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  185.945906][T10259] bond2 (unregistering): Released all slaves
[  186.234164][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'.
[  186.360111][T10279] vcan0: tx address claim with different name
[  186.366894][T10267] team0 (unregistering): Port device team_slave_0 removed
[  186.387523][T10267] team0 (unregistering): Port device team_slave_1 removed
[  186.426021][T10275] netlink: 'syz.1.1296': attribute type 1 has an invalid length.
[  186.468754][T10266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.516475][T10283] batadv_slave_0: entered promiscuous mode
[  186.632124][T10288] tipc: Started in network mode
[  186.637685][T10288] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  186.651699][T10288] tipc: Enabled bearer <eth:vlan0>, priority 24
[  186.658672][T10282] batadv_slave_0: left promiscuous mode
[  186.858454][T10293] syzkaller0: entered promiscuous mode
[  186.872679][T10293] syzkaller0: entered allmulticast mode
[  187.028963][T10297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1305'.
[  187.078666][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'.
[  187.101253][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  187.144390][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'.
[  187.186515][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  187.217475][T10303] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  187.239079][T10305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1308'.
[  187.253069][T10306] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.262248][T10306] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.515020][T10313] lo speed is unknown, defaulting to 1000
[  187.755056][T10324] netlink: 'syz.4.1316': attribute type 1 has an invalid length.
[  187.762948][ T5943] tipc: Node number set to 10005162
[  187.879720][T10331] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  187.899678][T10332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.191921][T10341] pim6reg527: entered allmulticast mode
[  188.568410][   T30] audit: type=1800 audit(1775228408.544:5): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1324" name="memory.events" dev="tmpfs" ino=1400 res=0 errno=0
[  188.671330][T10370] openvswitch: netlink: IP tunnel dst address not specified
[  188.986543][T10382] netlink: 'syz.4.1332': attribute type 4 has an invalid length.
[  189.557291][T10407] bond5: entered allmulticast mode
[  189.567827][T10407] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  190.042720][   T49] wlan1: Trigger new scan to find an IBSS to join
[  190.175832][T10441] __nla_validate_parse: 7 callbacks suppressed
[  190.175852][T10441] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1350'.
[  190.545980][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'.
[  190.555730][T10445] netlink: 'syz.4.1351': attribute type 1 has an invalid length.
[  190.933707][T10471] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1357'.
[  191.003957][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.147601][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  191.173137][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  191.198134][T10481] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  191.271646][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  191.493955][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  191.517601][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  191.538930][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  191.558776][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  194.445734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  209.164307][ T5157] block nbd1: Connection timed out, retrying (0/2 alive)
[  209.172227][ T5157] block nbd1: Connection timed out, retrying (0/2 alive)
[  209.180410][ T5157] block nbd1: Connection timed out, retrying (0/2 alive)
[  209.189300][   T25] block nbd1: Dead connection, failed to find a fallback
[  209.198340][ T5157] block nbd1: Connection timed out, retrying (0/2 alive)
[  209.205775][   T25] block nbd1: shutting down sockets
[  209.212085][   T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.224005][   T25] Buffer I/O error on dev nbd1, logical block 1, async page read
[  209.232167][   T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.241781][   T25] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.249718][   T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.259998][   T25] Buffer I/O error on dev nbd1, logical block 3, async page read
[  209.268118][   T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.277647][   T25] Buffer I/O error on dev nbd1, logical block 2, async page read
[  209.287442][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.298079][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.306250][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.316591][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read
[  209.324613][ T5841] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.334200][ T5841] Buffer I/O error on dev nbd1, logical block 2, async page read
[  209.342091][ T5841] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.352362][ T5841] Buffer I/O error on dev nbd1, logical block 3, async page read
[  209.360279][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.369980][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.378447][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  209.388130][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read
[  209.396775][ T5841] ldm_validate_partition_table(): Disk read failed.
[  209.405267][ T5841] Dev nbd1: unable to read RDB block 0
[  209.411713][ T5841]  nbd1: unable to read partition table
[  209.422312][ T5841] ldm_validate_partition_table(): Disk read failed.
[  209.429508][ T5841] Dev nbd1: unable to read RDB block 0
[  209.436217][ T5841]  nbd1: unable to read partition table
[  211.887252][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  211.892466][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  211.896119][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  211.905972][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  214.727026][T10498] syzkaller0: entered promiscuous mode
[  214.733093][T10513] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1370'.
[  214.751211][T10498] syzkaller0: entered allmulticast mode
[  214.791356][T10514] netlink: 'syz.4.1368': attribute type 6 has an invalid length.
[  215.022660][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'.
[  215.033601][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1373'.
[  215.742778][ T5826] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  215.786930][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  215.786959][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  215.786970][ T5826] Call Trace:
[  215.786978][ T5826]  <TASK>
[  215.786987][ T5826]  dump_stack_lvl+0xe8/0x150
[  215.787021][ T5826]  dump_header+0xd3/0x4c0
[  215.787047][ T5826]  oom_kill_process+0x3ab/0x970
[  215.787073][ T5826]  out_of_memory+0x106c/0x1410
[  215.787094][ T5826]  ? percpu_ref_put+0x19/0x180
[  215.787120][ T5826]  ? __pfx___mutex_lock+0x10/0x10
[  215.787155][ T5826]  ? __pfx_out_of_memory+0x10/0x10
[  215.787173][ T5826]  ? do_raw_spin_unlock+0xf5/0x210
[  215.787204][ T5826]  try_charge_memcg+0xc53/0x1560
[  215.787247][ T5826]  ? __pfx_try_charge_memcg+0x10/0x10
[  215.787283][ T5826]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  215.787311][ T5826]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  215.787338][ T5826]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  215.787366][ T5826]  __swap_cache_prepare_and_add+0xe8/0x760
[  215.787404][ T5826]  ? page_rmappable_folio+0x9a/0x170
[  215.787438][ T5826]  swap_cache_alloc_folio+0xf1/0x240
[  215.787472][ T5826]  swap_cluster_readahead+0x369/0x690
[  215.787498][ T5826]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  215.787531][ T5826]  ? get_vma_policy+0x27b/0x3c0
[  215.787560][ T5826]  swapin_readahead+0x196/0xc50
[  215.787597][ T5826]  ? __pfx_swapin_readahead+0x10/0x10
[  215.787617][ T5826]  ? swap_table_get+0x1e/0x260
[  215.787644][ T5826]  ? swap_table_get+0x1e/0x260
[  215.787669][ T5826]  ? swap_table_get+0x1e/0x260
[  215.787698][ T5826]  ? swap_table_get+0x216/0x260
[  215.787726][ T5826]  ? swap_cache_get_folio+0x513/0x520
[  215.787762][ T5826]  do_swap_page+0x56f/0x5a20
[  215.787813][ T5826]  ? do_swap_page+0x127/0x5a20
[  215.787839][ T5826]  ? __pfx_do_swap_page+0x10/0x10
[  215.787865][ T5826]  ? __pte_offset_map+0x1ae/0x240
[  215.787888][ T5826]  ? pte_offset_map_rw_nolock+0xea/0x160
[  215.787910][ T5826]  handle_mm_fault+0x12d2/0x3310
[  215.787955][ T5826]  ? handle_mm_fault+0xee/0x3310
[  215.787993][ T5826]  ? __pfx_handle_mm_fault+0x10/0x10
[  215.788021][ T5826]  ? lock_vma_under_rcu+0x45a/0x500
[  215.788070][ T5826]  do_user_addr_fault+0xa73/0x1340
[  215.788104][ T5826]  ? rcu_is_watching+0x15/0xb0
[  215.788133][ T5826]  ? trace_page_fault_user+0x84/0x210
[  215.788161][ T5826]  exc_page_fault+0x6a/0xc0
[  215.788186][ T5826]  asm_exc_page_fault+0x26/0x30
[  215.788204][ T5826] RIP: 0033:0x7fd17a55d04e
[  215.788224][ T5826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  215.788239][ T5826] RSP: 002b:00007fffdda20fd8 EFLAGS: 00010246
[  215.788256][ T5826] RAX: 0000000000000000 RBX: 000055558f01e500 RCX: 00007fd17a55d04e
[  215.788269][ T5826] RDX: 00007fffdda21030 RSI: 0000000000000000 RDI: 0000000000000000
[  215.788280][ T5826] RBP: 00007fffdda2109c R08: 0000000000000000 R09: 0000000000000000
[  215.788291][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  215.788301][ T5826] R13: 00000000000927c0 R14: 0000000000034958 R15: 00007fffdda210f0
[  215.788332][ T5826]  </TASK>
[  215.788340][ T5826] memory: usage 307200kB, limit 307200kB, failcnt 419
[  216.119580][ T5826] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0
[  216.142806][ T5826] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  216.174969][ T5826] Memory cgroup stats for /syz4:
[  216.183034][ T5826] cache 0
[  216.199093][ T5826] rss 0
[  216.202090][ T5826] rss_huge 0
[  216.207481][ T5826] shmem 0
[  216.210470][ T5826] mapped_file 0
[  216.214725][ T5826] dirty 0
[  216.217720][ T5826] writeback 0
[  216.221040][ T5826] workingset_refault_anon 0
[  216.227723][ T5826] workingset_refault_file 0
[  216.232270][ T5826] swap 241664
[  216.270524][ T5826] swapcached 241664
[  216.290150][ T5826] pgpgin 20087
[  216.306395][ T5826] pgpgout 20087
[  216.309934][ T5826] pgfault 45031
[  216.320734][ T5826] pgmajfault 2
[  216.334678][ T5826] inactive_anon 0
[  216.338378][ T5826] active_anon 0
[  216.341865][ T5826] inactive_file 0
[  216.356607][ T5826] active_file 0
[  216.360319][ T5826] unevictable 0
[  216.364276][ T5826] hierarchical_memory_limit 314572800
[  216.369693][ T5826] hierarchical_memsw_limit 9223372036854771712
[  216.383697][ T5826] total_cache 0
[  216.387224][ T5826] total_rss 0
[  216.398096][ T5826] total_rss_huge 0
[  216.401895][ T5826] total_shmem 0
[  216.405948][ T5826] total_mapped_file 0
[  216.410103][ T5826] total_dirty 0
[  216.420634][ T5826] total_writeback 0
[  216.430741][ T5826] total_workingset_refault_anon 0
[  216.436664][ T5826] total_workingset_refault_file 0
[  216.448415][ T5826] total_swap 241664
[  216.452452][ T5826] total_swapcached 241664
[  216.457308][ T5826] total_pgpgin 20087
[  216.461317][ T5826] total_pgpgout 20087
[  216.465970][ T5826] total_pgfault 45031
[  216.470005][ T5826] total_pgmajfault 2
[  216.481187][ T5826] total_inactive_anon 0
[  216.491737][ T5826] total_active_anon 0
[  216.502198][ T5826] total_inactive_file 0
[  216.506851][ T5826] total_active_file 0
[  216.517600][ T5826] total_unevictable 0
[  216.521631][ T5826] anon_cost 0
[  216.525683][ T5826] file_cost 0
[  216.529007][ T5826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1368,pid=10501,uid=0
[  216.552012][ T5826] Memory cgroup out of memory: Killed process 10514 (syz.4.1368) total-vm:110892kB, anon-rss:1264kB, file-rss:31020kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  217.619311][T10529] geneve2: entered promiscuous mode
[  217.629491][T10529] geneve2: entered allmulticast mode
[  217.708690][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.725783][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.765105][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.807841][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.205427][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'.
[  218.214859][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'.
[  218.336813][T10563] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1380'.
[  218.353996][T10563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1380'.
[  218.629189][T10578] tipc: Failed to remove unknown binding: 66,0,0/0:861750437/861750438
[  218.704005][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1381'.
[  218.832773][T10596] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1390'.
[  218.890805][T10591] bond6: (slave bond_slave_1): Device is not our slave
[  218.900607][T10591] bond6: option active_slave: invalid value (bond_slave_1)
[  218.913467][T10591] bond6 (unregistering): Released all slaves
[  218.998761][T10602] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1391'.
[  219.189447][T10594] pim6reg1: entered promiscuous mode
[  219.196810][T10594] pim6reg1: entered allmulticast mode
[  219.477575][T10625] ieee802154 phy1 wpan1: encryption failed: -22
[  219.847411][T10641] __nla_validate_parse: 4 callbacks suppressed
[  219.847432][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'.
[  219.980048][T10654] netlink: 'syz.0.1406': attribute type 15 has an invalid length.
[  220.030973][T10657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'.
[  220.065427][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  220.090418][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'.
[  220.239475][T10664] ieee802154 phy1 wpan1: encryption failed: -22
[  220.249094][T10667] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1410'.
[  220.486753][T10684] netlink: 'syz.4.1416': attribute type 1 has an invalid length.
[  220.501461][T10685] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1414'.
[  220.576840][T10685] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1414'.
[  220.598706][T10686] bond7: (slave gretap1): making interface the new active one
[  220.607933][T10686] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  220.716665][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  220.732140][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  220.901618][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1419'.
[  220.933582][T10697] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1419'.
[  220.978358][T10697] gretap2: entered promiscuous mode
[  220.986426][T10697] gretap2: entered allmulticast mode
[  221.367339][T10716] bond1: Invalid ad_actor_system MAC address.
[  221.377301][T10716] bond1: option ad_actor_system: invalid value (1)
[  221.420845][T10716] bond1 (unregistering): Released all slaves
[  221.633297][T10733] netlink: 'syz.1.1430': attribute type 1 has an invalid length.
[  221.904401][T10732] syzkaller0: entered promiscuous mode
[  221.931406][T10732] syzkaller0: entered allmulticast mode
[  223.705373][T10746] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  223.962108][T10794] netlink: 'syz.1.1438': attribute type 39 has an invalid length.
[  224.333985][T10817] syzkaller1: entered promiscuous mode
[  224.339728][T10817] syzkaller1: entered allmulticast mode
[  224.340320][T10819] netlink: 'syz.3.1448': attribute type 1 has an invalid length.
[  225.004992][T10851] __nla_validate_parse: 9 callbacks suppressed
[  225.005014][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  225.142176][T10860] netlink: 'syz.1.1459': attribute type 9 has an invalid length.
[  225.553333][T10875] erspan0: entered allmulticast mode
[  225.567298][T10875] syzkaller0: entered promiscuous mode
[  225.584158][T10875] syzkaller0: entered allmulticast mode
[  225.678843][T10885] netlink: 'syz.0.1467': attribute type 32 has an invalid length.
[  225.693645][T10885] netlink: 776 bytes leftover after parsing attributes in process `syz.0.1467'.
[  225.818944][T10892] netlink: 13592 bytes leftover after parsing attributes in process `syz.2.1465'.
[  225.881260][T10896] netlink: 'syz.0.1469': attribute type 16 has an invalid length.
[  226.229882][T10908] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  226.308999][T10903] can: request_module (can-proto-0) failed.
[  226.454133][T10918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1474'.
[  226.658186][T10925] netlink: 'syz.0.1477': attribute type 3 has an invalid length.
[  226.672315][T10925] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1477'.
[  226.893966][T10933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1479'.
[  226.991407][T10939] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1482'.
[  227.008125][T10939] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1482'.
[  227.059157][T10938] veth3: entered allmulticast mode
[  227.074455][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'.
[  227.103458][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  227.964782][T10986] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  227.985339][T10986] netlink: 'syz.1.1495': attribute type 10 has an invalid length.
[  228.013317][T10986] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.020816][T10986] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.059782][T10986] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.067113][T10986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.074739][T10986] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.081991][T10986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.114848][T10986] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  228.288908][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.603478][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.762898][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.772302][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.781100][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.097750][T10999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.107189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.643318][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.654912][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.698042][T11059] syzkaller0: entered promiscuous mode
[  229.704155][T11059] syzkaller0: entered allmulticast mode
[  229.718275][T11059] netlink: 'syz.2.1517': attribute type 10 has an invalid length.
[  229.726525][T11059] dummy0: entered promiscuous mode
[  229.731915][T11059] batman_adv: batadv0: Interface deactivated: dummy0
[  229.747143][T11059] batman_adv: batadv0: Removing interface: dummy0
[  229.791528][T11059] bridge0: port 3(dummy0) entered blocking state
[  229.803884][T11059] bridge0: port 3(dummy0) entered disabled state
[  229.833820][T11059] dummy0: entered allmulticast mode
[  229.845300][T11059] bridge0: port 3(dummy0) entered blocking state
[  229.851853][T11059] bridge0: port 3(dummy0) entered forwarding state
[  230.068314][T11074] netlink: 'syz.4.1520': attribute type 11 has an invalid length.
[  230.077317][T11074] __nla_validate_parse: 12 callbacks suppressed
[  230.077334][T11074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1520'.
[  230.095484][T11077] netlink: 'syz.3.1521': attribute type 1 has an invalid length.
[  230.114917][T11077] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1521'.
[  230.156872][T11077] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1521'.
[  230.293703][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  230.393714][T11087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1527'.
[  230.537121][T11094] sctp: [Deprecated]: syz.4.1529 (pid 11094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.537121][T11094] Use struct sctp_sack_info instead
[  230.796059][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'.
[  231.210505][T11131] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1541'.
[  231.323576][T11138] netem: change failed
[  231.362317][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'.
[  231.467947][T11128] infiniband syz1: set down
[  231.472793][T11128] infiniband syz1: added ipvlan1
[  231.530879][T11128] RDS/IB: syz1: added
[  231.540525][T11128] smc: adding ib device syz1 with port count 1
[  231.548158][T11128] smc:    ib device syz1 port 1 has no pnetid
[  231.703566][T11156] syzkaller0: entered promiscuous mode
[  231.709520][T11156] syzkaller0: entered allmulticast mode
[  231.720161][T11156] syz_tun: entered allmulticast mode
[  231.727310][T11155] syz_tun: left allmulticast mode
[  232.347059][T11178] netlink: 'syz.3.1554': attribute type 1 has an invalid length.
[  232.370347][T11166] lo speed is unknown, defaulting to 1000
[  232.373003][T11178] netlink: 'syz.3.1554': attribute type 2 has an invalid length.
[  232.965964][T11191] syzkaller0: entered promiscuous mode
[  232.971690][T11191] syzkaller0: entered allmulticast mode
[  233.157564][T11199] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1561'.
[  233.189690][T11201] netlink: 'syz.4.1562': attribute type 1 has an invalid length.
[  233.199636][T11199] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  233.207834][T11200] netlink: 'syz.4.1562': attribute type 4 has an invalid length.
[  233.847493][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'.
[  233.883712][ T5888] net_ratelimit: 7 callbacks suppressed
[  233.883733][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.166039][T11231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1573'.
[  234.366399][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.458206][T11242] netlink: 'syz.2.1578': attribute type 6 has an invalid length.
[  234.473028][T11240] syzkaller0: entered promiscuous mode
[  234.478718][T11240] syzkaller0: entered allmulticast mode
[  234.666310][T11246] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  234.716742][T11246] bond2 (unregistering): Released all slaves
[  234.811625][T11251] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  234.927373][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.641915][T11304] x_tables: duplicate underflow at hook 1
[  235.753518][T11315] __nla_validate_parse: 5 callbacks suppressed
[  235.753539][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1596'.
[  235.976836][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.068133][T11324] syz.0.1599 uses old SIOCAX25GETINFO
[  236.099509][T11337] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1602'.
[  236.220410][T11326] veth0_vlan: left promiscuous mode
[  236.301826][T11326] veth1_macvtap: renamed from vlan1
[  236.557781][T11350] netlink: zone id is out of range
[  236.571904][T11350] netlink: zone id is out of range
[  236.582102][T11350] netlink: zone id is out of range
[  236.596165][T11350] netlink: zone id is out of range
[  236.611018][T11350] netlink: zone id is out of range
[  236.647804][T11346] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1606'.
[  236.666124][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1604'.
[  236.678323][T11354] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1608'.
[  236.693725][T11350] netlink: zone id is out of range
[  237.270922][T11397] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  237.398270][T11397] 8021q: adding VLAN 0 to HW filter on device bond4
[  237.430853][T11402] bond4: (slave geneve3): making interface the new active one
[  237.457611][T11408] netlink: 'syz.4.1619': attribute type 11 has an invalid length.
[  237.478736][T11408] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1619'.
[  237.515134][T11402] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  237.693706][T11417] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1625'.
[  237.786812][ T5487] veth0_vlan: entered promiscuous mode
[  237.911162][T11426] netlink: 'syz.1.1627': attribute type 11 has an invalid length.
[  237.938029][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  237.955631][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  238.013612][T11431] vlan2: entered allmulticast mode
[  238.019005][T11431] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  238.275837][T11442] tipc: Started in network mode
[  238.280785][T11442] tipc: Node identity a61f66e9889f, cluster identity 4711
[  238.323179][T11442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.440125][T11443] syzkaller0: entered promiscuous mode
[  238.473051][T11443] syzkaller0: entered allmulticast mode
[  238.479353][T11443] tipc: Resetting bearer <eth:syzkaller0>
[  238.530806][T11442] sit0: entered promiscuous mode
[  238.547143][T11442] netlink: 'syz.2.1632': attribute type 1 has an invalid length.
[  238.567279][T11442] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1632'.
[  238.712899][T11442] tipc: Resetting bearer <eth:syzkaller0>
[  239.087156][  T797] net_ratelimit: 52 callbacks suppressed
[  239.087177][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.886788][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.126909][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.161021][T11442] tipc: Disabling bearer <eth:syzkaller0>
[  240.187614][  T797] tipc: Node number set to 780166889
[  240.315208][T11494] netlink: 'syz.3.1644': attribute type 1 has an invalid length.
[  240.442812][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.525145][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.560256][T11498] netlink: 'syz.1.1642': attribute type 142 has an invalid length.
[  240.783471][T11527] __nla_validate_parse: 4 callbacks suppressed
[  240.783491][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  240.817198][T11527] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.824604][T11527] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.052096][T11544] netlink: 'syz.2.1652': attribute type 23 has an invalid length.
[  241.164013][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.486061][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'.
[  241.676126][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'.
[  241.780718][T11583] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1663'.
[  241.825793][T11586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1662'.
[  241.846814][T11578] sit0: left promiscuous mode
[  241.950373][T11578] bridge0: port 3(dummy0) entered disabled state
[  242.163414][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.176805][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.190917][T11592] netlink: 'syz.1.1664': attribute type 11 has an invalid length.
[  242.199942][T11592] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1664'.
[  242.345466][T11619] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1665'.
[  242.370054][T11578] vlan2: left allmulticast mode
[  242.387778][T11578] bridge0: left allmulticast mode
[  242.398292][T11578] hsr0: left allmulticast mode
[  242.407001][T11578] hsr_slave_0: left allmulticast mode
[  242.413710][T11578] hsr_slave_1: left allmulticast mode
[  242.419413][T11578] macvlan2: left allmulticast mode
[  242.429529][T11578] bond1: left promiscuous mode
[  242.482295][T11578] veth3: left allmulticast mode
[  242.507845][   T10] lo speed is unknown, defaulting to 1000
[  242.519887][   T10] syz2: Port: 1 Link DOWN
[  242.544397][T11628] lo speed is unknown, defaulting to 1000
[  242.550267][T11596] bond0: (slave rose0): Error: Device can not be enslaved while up
[  242.637338][ T9069] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.670297][ T9069] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.750370][ T9069] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.774073][ T9069] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.859488][T11645] ip6tnl0: entered promiscuous mode
[  242.879795][T11643] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  242.910718][T11642] ip6tnl0: left promiscuous mode
[  243.045267][T11652] macvlan0: entered promiscuous mode
[  243.062575][T11649] netlink: 'syz.3.1672': attribute type 11 has an invalid length.
[  243.070476][T11649] netlink: 'syz.3.1672': attribute type 11 has an invalid length.
[  243.102993][T11649] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1672'.
[  243.411394][T11670] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1678'.
[  243.473047][T11675] netlink: 'syz.4.1679': attribute type 3 has an invalid length.
[  243.493602][T11675] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1679'.
[  243.896836][T11703] netlink: 'syz.0.1688': attribute type 29 has an invalid length.
[  244.194935][T11712] netlink: 'syz.0.1691': attribute type 1 has an invalid length.
[  244.392079][T11724] team0: entered promiscuous mode
[  244.397327][T11724] team0: entered allmulticast mode
[  244.466628][T11732] netlink: 'syz.0.1697': attribute type 6 has an invalid length.
[  244.502930][T11732] netlink: 'syz.0.1697': attribute type 5 has an invalid length.
[  244.529168][T11729] bridge_slave_0 (unregistering): left allmulticast mode
[  244.559456][T11729] bridge_slave_0 (unregistering): left promiscuous mode
[  244.581346][T11729] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.821939][T11753] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  244.844159][T11754] syzkaller0: entered promiscuous mode
[  244.849796][T11754] syzkaller0: entered allmulticast mode
[  244.925585][T11752] netlink: 'syz.1.1701': attribute type 2 has an invalid length.
[  244.958111][T11758] Bluetooth: MGMT ver 1.23
[  245.592301][T11805] bond9: entered promiscuous mode
[  245.904477][T11831] __nla_validate_parse: 11 callbacks suppressed
[  245.904497][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'.
[  245.935635][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'.
[  246.237484][T11849] netlink: 'syz.2.1728': attribute type 4 has an invalid length.
[  246.521094][T11872] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1734'.
[  246.557705][T11872] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1734'.
[  246.900597][T11893] can: request_module (can-proto-0) failed.
[  247.002193][T11899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1742'.
[  247.038405][T11905] syzkaller1: entered promiscuous mode
[  247.045491][T11905] syzkaller1: entered allmulticast mode
[  247.082665][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  247.088902][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  247.307833][T11923] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1749'.
[  247.331095][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'.
[  247.417315][T11923] netlink: 'syz.4.1749': attribute type 1 has an invalid length.
[  247.432649][T11923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1749'.
[  247.461176][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1753'.
[  247.658715][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  247.724289][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[  248.009804][T11969] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  248.260617][T11981] netlink: 'syz.4.1768': attribute type 1 has an invalid length.
[  248.881399][T12019] netlink: 'syz.3.1775': attribute type 2 has an invalid length.
[  249.014042][ T9069] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  249.025432][ T9069] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.035725][ T9069] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  249.195475][T12031] syzkaller0: entered promiscuous mode
[  249.201011][T12031] syzkaller0: entered allmulticast mode
[  251.047279][T12080] netlink: 'syz.4.1790': attribute type 4 has an invalid length.
[  251.118501][T12085] __nla_validate_parse: 7 callbacks suppressed
[  251.118520][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  251.218131][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  251.623700][T12116] Illegal XDP return value 2927447439 on prog  (id 411) dev N/A, expect packet loss!
[  251.754156][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'.
[  251.772954][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'.
[  254.730662][T12149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1804'.
[  254.746201][T12149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1804'.
[  254.814602][T12151] netlink: 'syz.2.1805': attribute type 12 has an invalid length.
[  254.822948][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'.
[  254.858775][ T9069] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.867815][T12151] netlink: 'syz.2.1805': attribute type 12 has an invalid length.
[  254.880540][ T9069] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.921373][ T9069] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.923105][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'.
[  254.944075][ T9069] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.980212][T12156] netlink: 'syz.1.1808': attribute type 2 has an invalid length.
[  255.014137][T12156] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1808'.
[  255.335431][T12185] netlink: 'syz.3.1814': attribute type 83 has an invalid length.
[  255.364281][T12185] netlink: 'syz.3.1814': attribute type 2 has an invalid length.
[  255.372075][T12185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1814'.
[  255.905149][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  255.983865][T12230] netlink: 'syz.1.1827': attribute type 11 has an invalid length.
[  255.991906][T12230] netlink: 'syz.1.1827': attribute type 11 has an invalid length.
[  256.170870][T12243] netlink: 'syz.4.1831': attribute type 12 has an invalid length.
[  256.252256][T12243] netlink: 'syz.4.1831': attribute type 29 has an invalid length.
[  256.278126][T12243] __nla_validate_parse: 4 callbacks suppressed
[  256.278147][T12243] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1831'.
[  256.363053][T12243] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1831'.
[  256.685376][T12269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.785976][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  256.848307][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'.
[  256.970959][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'.
[  257.082672][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'.
[  257.266821][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'.
[  257.277140][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'.
[  257.286427][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'.
[  257.333917][T12291] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1843'.
[  258.420175][T12352] x_tables: duplicate underflow at hook 1
[  258.629017][T12357] 
s5ÿÿø: renamed from vlan1
[  259.858246][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.944565][T12437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.083877][   T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.110327][   T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.210166][T12453] netlink: 'syz.0.1887': attribute type 6 has an invalid length.
[  260.221981][T12453] netlink: 'syz.0.1887': attribute type 5 has an invalid length.
[  260.246343][T12439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  260.306358][   T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.320577][T12458] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  260.381996][T12446] syzkaller0: entered promiscuous mode
[  260.388129][T12446] syzkaller0: entered allmulticast mode
[  260.398033][T12458] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  260.549259][T12469] netlink: 'syz.0.1892': attribute type 11 has an invalid length.
[  261.000232][T12502] x_tables: duplicate underflow at hook 2
[  261.514632][T12539] __nla_validate_parse: 19 callbacks suppressed
[  261.514654][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1911'.
[  261.572203][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'.
[  261.688066][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'.
[  262.079419][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'.
[  262.119903][T12561] 8021q: adding VLAN 0 to HW filter on device bond11
[  262.166111][T12564] x_tables: duplicate underflow at hook 3
[  262.257281][T12568] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[  262.268274][T12564] lo speed is unknown, defaulting to 1000
[  262.361927][T12568] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1924'.
[  262.670743][T12591] netlink: 'syz.4.1928': attribute type 1 has an invalid length.
[  262.692085][T12592] xt_hashlimit: size too large, truncated to 1048576
[  264.002104][T12586] macsec1: entered promiscuous mode
[  264.114863][T12603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1930'.
[  264.376439][T12623] netlink: 'syz.4.1938': attribute type 2 has an invalid length.
[  264.388852][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'.
[  264.417263][T12623] !: entered promiscuous mode
[  264.443283][T12625] netlink: 'syz.4.1938': attribute type 2 has an invalid length.
[  264.451281][T12625] !: left promiscuous mode
[  264.560096][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1942'.
[  264.788475][T12648] : renamed from hsr0
[  264.831925][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'.
[  264.905326][T12656] netlink: 'syz.2.1950': attribute type 12 has an invalid length.
[  264.935424][T12656] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1950'.
[  264.945735][T12656] netlink: 'syz.2.1950': attribute type 9 has an invalid length.
[  264.956939][T12656] netlink: 'syz.2.1950': attribute type 11 has an invalid length.
[  264.965356][T12656] netlink: 'syz.2.1950': attribute type 12 has an invalid length.
[  264.977221][T12659] netlink: 'syz.0.1951': attribute type 1 has an invalid length.
[  265.042307][T12659] bond8: entered promiscuous mode
[  265.048743][T12659] 8021q: adding VLAN 0 to HW filter on device bond8
[  265.128690][T12664] bond8: (slave bridge4): making interface the new active one
[  265.175273][T12671] openvswitch: netlink: Missing valid actions attribute.
[  265.182391][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.197562][T12664] bridge4: entered promiscuous mode
[  265.205030][T12664] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  265.776240][T12700] lo speed is unknown, defaulting to 1000
[  265.986432][T12712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.007592][T12712] x_tables: ip6_tables: mh match: only valid for protocol 135
[  266.286649][T12706] lo speed is unknown, defaulting to 1000
[  266.320394][T12729] netlink: 'syz.4.1971': attribute type 1 has an invalid length.
[  266.375225][T12725] IPVS: ip_vs_edit_dest(): server weight less than zero
[  266.387899][T12730] IPVS: ip_vs_edit_dest(): server weight less than zero
[  266.536121][T12729] bond12: entered promiscuous mode
[  266.573602][T12729] 8021q: adding VLAN 0 to HW filter on device bond12
[  266.644680][T12735] bond12: (slave bridge3): making interface the new active one
[  266.652398][T12735] bridge3: entered promiscuous mode
[  266.661313][T12735] bridge3: left promiscuous mode
[  266.886420][T12746] __nla_validate_parse: 6 callbacks suppressed
[  266.886439][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'.
[  266.973068][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'.
[  267.233817][T12753] bond3: Removing last ns target with arp_interval on
[  267.287730][T12764] netlink: 'syz.3.1978': attribute type 3 has an invalid length.
[  267.387033][T12770] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1978'.
[  267.425114][T12780] netlink: 'syz.2.1980': attribute type 1 has an invalid length.
[  267.509241][T12780] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.529868][T12778] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  267.555354][T12780] bond4: entered promiscuous mode
[  267.563587][T12787] openvswitch: netlink: Multiple metadata blocks provided
[  267.571706][T12780] bond4: entered allmulticast mode
[  267.666309][T12792] openvswitch: netlink: IP tunnel dst address not specified
[  268.429599][T12831] block nbd2: Unsupported socket: should be TCP or UNIX.
[  268.450864][T12821] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  268.501372][T12821] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.515860][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.531134][T12821] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.573670][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'.
[  268.583892][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.631387][T12828] lo speed is unknown, defaulting to 1000
[  268.707968][T12839] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20000
[  268.722732][T12841] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20000
[  269.080528][T12847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.596254][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2002'.
[  269.919254][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  269.962600][T12877] openvswitch: netlink: Flow actions attr not present in new flow.
[  270.933812][T12893] bond9: Unable to set down delay as MII monitoring is disabled
[  270.977774][T12893] bond9 (unregistering): Released all slaves
[  271.262166][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'.
[  271.544991][T12924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2018'.
[  271.637559][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'.
[  272.045332][T12947] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2022'.
[  272.220780][T12946] 8021q: VLANs not supported on ip6gre0
[  272.706002][T12972] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  272.830519][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'.
[  272.857624][T12980] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2029'.
[  272.979463][T12980] netlink: 'syz.2.2029': attribute type 10 has an invalid length.
[  273.083322][T12995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'.
[  273.127675][T12980] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  273.228968][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'.
[  273.514811][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'.
[  273.607699][T13017] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  273.637669][T13017] bond0: (slave lo): Error: Device can not be enslaved while up
[  273.679084][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'.
[  273.787066][T13027] sctp: [Deprecated]: syz.0.2037 (pid 13027) Use of int in maxseg socket option.
[  273.787066][T13027] Use struct sctp_assoc_value instead
[  273.990455][T13043] netlink: 'syz.2.2043': attribute type 11 has an invalid length.
[  273.999277][T13043] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2043'.
[  274.234850][T13062] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2048'.
[  274.389323][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'.
[  274.579159][T13081] dvmrp0: entered allmulticast mode
[  274.585489][T13080] lo speed is unknown, defaulting to 1000
[  274.821605][T13093] sctp: [Deprecated]: syz.0.2057 (pid 13093) Use of int in max_burst socket option.
[  274.821605][T13093] Use struct sctp_assoc_value instead
[  276.601261][T13157] netlink: 'syz.2.2073': attribute type 4 has an invalid length.
[  276.903798][T13173] x_tables: duplicate underflow at hook 4
[  277.280063][T13210] __nla_validate_parse: 5 callbacks suppressed
[  277.280085][T13210] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2087'.
[  277.478179][T13221] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  277.497293][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2090'.
[  277.545124][T13221] 8021q: adding VLAN 0 to HW filter on device bond5
[  277.632113][T13222] bond9: entered promiscuous mode
[  277.641711][T13222] 8021q: adding VLAN 0 to HW filter on device bond9
[  277.686950][T13227] bond5: (slave veth7): Enslaving as an active interface with a down link
[  277.736176][T13221] bond5: (slave dummy0): making interface the new active one
[  277.758175][T13221] dummy0: entered promiscuous mode
[  277.765682][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'.
[  277.777622][T13221] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  277.797901][T13233] veth0: entered promiscuous mode
[  277.954000][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'.
[  277.966966][T13217] wg2: entered promiscuous mode
[  277.994157][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'.
[  278.051937][T13250] team0: Port device team_slave_0 removed
[  278.088727][T13255] : entered promiscuous mode
[  278.418562][T13274] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  278.427906][T13276] netlink: 'syz.3.2102': attribute type 4 has an invalid length.
[  278.449646][T13277] netlink: 'syz.3.2102': attribute type 4 has an invalid length.
[  278.670312][T13286] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  279.216143][T13308] netlink: 'syz.2.2114': attribute type 13 has an invalid length.
[  279.225415][T13308] netlink: 'syz.2.2114': attribute type 58 has an invalid length.
[  279.243704][T13308] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2114'.
[  279.270299][T13314] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2113'.
[  279.416961][T13320] bond5: (slave gretap0): Device is not bonding slave
[  279.435942][T13320] bond5: option active_slave: invalid value (gretap0)
[  279.444658][T13320] bond5 (unregistering): Released all slaves
[  279.559017][T13332] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2118'.
[  279.581641][T13332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2118'.
[  279.674538][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'.
[  279.810868][T13345] bond10: (slave vlan0): Enslaving as a backup interface with an up link
[  280.148272][T13375] netlink: 'syz.4.2129': attribute type 58 has an invalid length.
[  280.184005][T13365] syzkaller0: entered promiscuous mode
[  280.189542][T13365] syzkaller0: entered allmulticast mode
[  280.236672][T13378] netlink: 'syz.4.2131': attribute type 64 has an invalid length.
[  280.646663][T13390] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  282.388316][T13427] bridge8: entered promiscuous mode
[  282.403159][T13427] bridge8: entered allmulticast mode
[  282.434319][T13429] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  282.536055][T13429] bond13: Removing last arp target with arp_interval on
[  282.610880][T13439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.119359][T13482] __nla_validate_parse: 5 callbacks suppressed
[  283.119385][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'.
[  283.445622][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2163'.
[  283.715980][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'.
[  283.774938][T13521] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.2169'.
[  283.950148][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'.
[  283.978456][T13535] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  284.024912][T13538] netlink: 'syz.4.2171': attribute type 58 has an invalid length.
[  284.040304][T13538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2171'.
[  285.402751][T13474] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  285.402985][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  285.409346][T13474] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  286.021197][T13474] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  286.028030][T13474] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  286.039506][T13474] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  286.051584][T13474] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  286.064592][T13474] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  286.070639][T13474] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  286.082052][T13474] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  286.088331][T13474] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  286.498048][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2181'.
[  286.527799][T13635] IPv6: sit4: Disabled Multicast RS
[  286.549445][T13635] sit4: entered allmulticast mode
[  286.628021][T13637] IPv6: sit4: Disabled Multicast RS
[  286.640265][T13637] sit4: entered allmulticast mode
[  287.129611][T13670] lo speed is unknown, defaulting to 1000
[  287.138624][T13664] pim6reg1: entered promiscuous mode
[  287.159341][T13664] pim6reg1: entered allmulticast mode
[  287.220294][   T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.230145][   T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.400201][   T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.432241][   T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.872148][T13703] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  287.980737][T13706] vlan3: entered promiscuous mode
[  287.986509][T13706] geneve1: entered promiscuous mode
[  287.992095][T13706] vlan3: entered allmulticast mode
[  287.997533][T13706] geneve1: entered allmulticast mode
[  288.011274][T13710] netlink: 'syz.4.2201': attribute type 10 has an invalid length.
[  288.119138][T13710] team0 (unregistering): Port device team_slave_0 removed
[  288.209739][T13710] team0 (unregistering): Port device team_slave_1 removed
[  288.684433][T13735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2206'.
[  288.709184][T13747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2209'.
[  288.946045][ T1148] dummy0: left promiscuous mode
[  289.089603][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2214'.
[  289.416825][T13784] netlink: 'syz.1.2218': attribute type 1 has an invalid length.
[  289.616956][T13794] nbd: must specify at least one socket
[  289.635488][T13797] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2221'.
[  289.648550][T13797] netlink: 'syz.4.2221': attribute type 10 has an invalid length.
[  290.012327][T13819] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2224'.
[  290.044834][T13822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2225'.
[  290.056293][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'.
[  290.390280][T13852] netlink: 'syz.3.2231': attribute type 1 has an invalid length.
[  290.407821][T13841] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  290.445521][T13859] netlink: 'syz.1.2233': attribute type 11 has an invalid length.
[  290.448776][T13841] bond14 (unregistering): Released all slaves
[  290.496860][T13840] netlink: 'syz.3.2231': attribute type 1 has an invalid length.
[  290.627547][T13852] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  290.706234][T13869] syzkaller0: entered promiscuous mode
[  290.724860][T13840] netlink: 'syz.3.2231': attribute type 1 has an invalid length.
[  290.748468][T13840] netlink: 'syz.3.2231': attribute type 2 has an invalid length.
[  290.784478][T13869] syzkaller0: entered allmulticast mode
[  291.246846][T13897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.407344][T13898] tipc: Disabling bearer <eth:syzkaller0>
[  291.416635][T13905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2242'.
[  291.705923][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2244'.
[  291.877492][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.918406][T13933] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  291.957978][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.169676][T13941] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  292.195181][T13943] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2250'.
[  292.225156][T13943] netlink: 'syz.3.2250': attribute type 2 has an invalid length.
[  292.264921][T13945] netlink: 'syz.1.2251': attribute type 11 has an invalid length.
[  292.492296][T13953] "syz.0.2253" (13953) uses obsolete ecb(arc4) skcipher
[  292.535963][T13956] syzkaller0: entered promiscuous mode
[  292.541599][T13956] syzkaller0: entered allmulticast mode
[  293.033208][T11591] tipc: Node number set to 3758096385
[  293.145170][T13979] team0 (unregistering): Port device team_slave_1 removed
[  293.219069][T13989] netlink: 'syz.3.2261': attribute type 1 has an invalid length.
[  293.791091][T14023] __nla_validate_parse: 6 callbacks suppressed
[  293.791113][T14023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2270'.
[  293.840801][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'.
[  293.898642][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  293.951889][T14032] netlink: 'syz.1.2269': attribute type 12 has an invalid length.
[  294.196513][T14032] bond7: option primary_reselect: invalid value (255)
[  294.234289][T14032] bond7 (unregistering): Released all slaves
[  294.303472][T14031] bridge0: port 1(batadv0) entered blocking state
[  294.310459][T14031] bridge0: port 1(batadv0) entered disabled state
[  294.323760][T14031] batadv0: entered allmulticast mode
[  294.331205][T14031] batadv0: entered promiscuous mode
[  294.496252][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'.
[  294.714632][T14063] syzkaller0: entered promiscuous mode
[  294.730608][T14063] syzkaller0: entered allmulticast mode
[  294.803601][   T67] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  294.814180][   T67] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  294.824365][T14072] netlink: 'syz.3.2281': attribute type 33 has an invalid length.
[  294.834068][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2282'.
[  294.902126][T14072] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  295.174235][T14089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2287'.
[  295.217851][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'.
[  295.267333][T14091] bridge_slave_0 (unregistering): left allmulticast mode
[  295.294722][T14091] bridge_slave_0 (unregistering): left promiscuous mode
[  295.302090][T14091] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.521374][T14109] SET target dimension over the limit!
[  295.695058][T14115] syzkaller1: entered promiscuous mode
[  295.700704][T14115] syzkaller1: entered allmulticast mode
[  295.773802][T14115] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  295.819265][T14131] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  295.899563][T14131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2298'.
[  295.910031][T14115] syzkaller0: entered promiscuous mode
[  295.938952][T14115] syzkaller0: entered allmulticast mode
[  296.266019][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'.
[  296.629979][T14185] netlink: 'syz.0.2311': attribute type 2 has an invalid length.
[  296.651337][T14185] netlink: 'syz.0.2311': attribute type 2 has an invalid length.
[  296.675244][T14185] netlink: 'syz.0.2311': attribute type 1 has an invalid length.
[  296.700194][T14188] 
s5ÿÿø: renamed from vlan1
[  296.985033][T14193] netlink: 'syz.0.2315': attribute type 16 has an invalid length.
[  297.013800][T14193] netlink: 'syz.0.2315': attribute type 17 has an invalid length.
[  297.116787][T14193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  297.170103][T14214] netlink: 'syz.2.2319': attribute type 1 has an invalid length.
[  297.312707][T14214] 8021q: adding VLAN 0 to HW filter on device bond5
[  297.346710][T14220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.447836][T14223] 8021q: adding VLAN 0 to HW filter on device bond5
[  297.465170][T14223] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  297.477409][T14223] bond5: (slave vcan0): Error -95 calling set_mac_address
[  297.537031][T14215] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  297.577521][T14215] bond5: (slave vcan0): Error -95 calling set_mac_address
[  297.792878][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'.
[  298.546442][T14255] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  298.572764][T14262] netlink: 'syz.0.2330': attribute type 21 has an invalid length.
[  298.786491][T14272] bridge0: port 3(gretap0) entered blocking state
[  298.811665][T14274] netlink: 'syz.1.2332': attribute type 10 has an invalid length.
[  298.836679][T14272] bridge0: port 3(gretap0) entered disabled state
[  298.851043][T14274] __nla_validate_parse: 3 callbacks suppressed
[  298.851060][T14274] netlink: 396 bytes leftover after parsing attributes in process `syz.1.2332'.
[  298.877336][T14272] gretap0: entered allmulticast mode
[  298.904526][T14272] gretap0: entered promiscuous mode
[  299.113989][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'.
[  299.261836][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'.
[  299.467783][T14318] Cannot find add_set index 2 as target
[  299.580936][T14326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.756543][T14336] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2346'.
[  300.002318][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2349'.
[  300.140027][T14355] delete_channel: no stack
[  300.150673][T14360] xt_ecn: cannot match TCP bits for non-tcp packets
[  300.228688][T14372] xt_ecn: cannot match TCP bits for non-tcp packets
[  300.671200][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'.
[  300.700283][T14397] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2355'.
[  301.177596][T14424] pim6reg1: entered promiscuous mode
[  301.221486][T14424] pim6reg1: entered allmulticast mode
[  301.445603][T14436] lo speed is unknown, defaulting to 1000
[  301.524946][T14440] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  301.645667][T14440] tc_dump_action: action bad kind
[  301.744247][T14448] validate_nla: 1 callbacks suppressed
[  301.744267][T14448] netlink: 'syz.4.2366': attribute type 1 has an invalid length.
[  302.089210][T14460] lo speed is unknown, defaulting to 1000
[  303.354587][T14511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  303.586703][T14529] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2384'.
[  303.892361][T14541] netlink: 'syz.2.2387': attribute type 1 has an invalid length.
[  303.935644][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'.
[  304.111547][T14552] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2390'.
[  304.548960][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'.
[  304.610169][T14569] erspan0: entered promiscuous mode
[  304.703515][T14572] bridge0: port 3(ipvlan2) entered blocking state
[  304.710108][T14572] bridge0: port 3(ipvlan2) entered disabled state
[  304.752967][T14572] ipvlan2: entered allmulticast mode
[  304.758440][T14572] bridge0: entered allmulticast mode
[  304.785732][T14572] ipvlan2: left allmulticast mode
[  304.801174][T14572] bridge0: left allmulticast mode
[  304.998589][T14587] syz.4.2397: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  305.041334][T14587] CPU: 0 UID: 0 PID: 14587 Comm: syz.4.2397 Not tainted syzkaller #0 PREEMPT(full) 
[  305.041364][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  305.041387][T14587] Call Trace:
[  305.041396][T14587]  <TASK>
[  305.041405][T14587]  dump_stack_lvl+0xe8/0x150
[  305.041440][T14587]  warn_alloc+0x249/0x340
[  305.041465][T14587]  ? stack_trace_save+0xa9/0x100
[  305.041489][T14587]  ? __pfx_warn_alloc+0x10/0x10
[  305.041519][T14587]  ? kasan_save_track+0x4f/0x80
[  305.041540][T14587]  ? kasan_save_track+0x3e/0x80
[  305.041559][T14587]  ? __kasan_kmalloc+0x93/0xb0
[  305.041581][T14587]  ? __kmalloc_cache_noprof+0x31c/0x660
[  305.041603][T14587]  ? xskq_create+0x56/0x170
[  305.041625][T14587]  ? xsk_setsockopt+0x54c/0x990
[  305.041643][T14587]  ? do_sock_setsockopt+0x17c/0x1b0
[  305.041666][T14587]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  305.041688][T14587]  ? do_syscall_64+0x14d/0xf80
[  305.041717][T14587]  __vmalloc_node_range_noprof+0x132/0x1730
[  305.041773][T14587]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  305.041804][T14587]  ? __kasan_kmalloc+0x93/0xb0
[  305.041833][T14587]  vmalloc_user_noprof+0xad/0xe0
[  305.041856][T14587]  ? xskq_create+0xbf/0x170
[  305.041880][T14587]  xskq_create+0xbf/0x170
[  305.041914][T14587]  xsk_init_queue+0x8a/0xe0
[  305.041947][T14587]  xsk_setsockopt+0x54c/0x990
[  305.041970][T14587]  ? __pfx_xsk_setsockopt+0x10/0x10
[  305.041992][T14587]  ? __pfx_aa_sk_perm+0x10/0x10
[  305.042026][T14587]  ? aa_sock_opt_perm+0xff/0x1a0
[  305.042059][T14587]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  305.042083][T14587]  ? __pfx_xsk_setsockopt+0x10/0x10
[  305.042105][T14587]  do_sock_setsockopt+0x17c/0x1b0
[  305.042133][T14587]  __x64_sys_setsockopt+0x13d/0x1b0
[  305.042169][T14587]  do_syscall_64+0x14d/0xf80
[  305.042193][T14587]  ? trace_irq_disable+0x3b/0x150
[  305.042210][T14587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.042232][T14587]  ? clear_bhb_loop+0x40/0x90
[  305.042257][T14587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.042278][T14587] RIP: 0033:0x7fd17a59c819
[  305.042298][T14587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.042321][T14587] RSP: 002b:00007fd17b3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  305.042344][T14587] RAX: ffffffffffffffda RBX: 00007fd17a815fa0 RCX: 00007fd17a59c819
[  305.042359][T14587] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  305.042371][T14587] RBP: 00007fd17a632c91 R08: 0000000000000004 R09: 0000000000000000
[  305.042383][T14587] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.042396][T14587] R13: 00007fd17a816038 R14: 00007fd17a815fa0 R15: 00007fffdda20cf8
[  305.042427][T14587]  </TASK>
[  305.328914][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  305.340728][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  305.373388][  T106] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.384535][T14587] Mem-Info:
[  305.387721][T14587] active_anon:5878 inactive_anon:0 isolated_anon:0
[  305.387721][T14587]  active_file:3091 inactive_file:40008 isolated_file:0
[  305.387721][T14587]  unevictable:768 dirty:93 writeback:0
[  305.387721][T14587]  slab_reclaimable:11899 slab_unreclaimable:107050
[  305.387721][T14587]  mapped:30456 shmem:1362 pagetables:1359
[  305.387721][T14587]  sec_pagetables:0 bounce:0
[  305.387721][T14587]  kernel_misc_reclaimable:0
[  305.387721][T14587]  free:1318498 free_pcp:9049 free_cma:0
[  305.490429][T14587] Node 0 active_anon:23512kB inactive_anon:0kB active_file:12364kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121824kB dirty:372kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14396kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  305.524208][  T106] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.544275][T14587] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  305.618785][T14587] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  305.681351][T14587] lowmem_reserve[]: 0 2492 2493 2493 2493
[  305.687511][  T106] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.687636][  T106] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.739278][T14587] Node 0 DMA32 free:1311728kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23312kB inactive_anon:0kB active_file:12364kB inactive_file:159828kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:37180kB local_pcp:15988kB free_cma:0kB
[  305.822110][T14587] lowmem_reserve[]: 0 0 0 0 0
[  305.828219][T14587] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  305.868025][T14587] lowmem_reserve[]: 0 0 0 0 0
[  305.895341][T14587] Node 1 Normal free:3947020kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  305.935239][T14587] lowmem_reserve[]: 0 0 0 0 0
[  305.940149][T14587] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  305.954393][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'.
[  305.991940][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'.
[  306.003992][T14587] Node 0 DMA32: 4836*4kB (UME) 3060*8kB (UM) 1538*16kB (UM) 431*32kB (UME) 490*64kB (UME) 466*128kB (UM) 466*256kB (UM) 371*512kB (UME) 242*1024kB (UME) 136*2048kB (UME) 74*4096kB (UM) = 1311920kB
[  306.057262][T14587] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  306.090656][T14587] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 7*16kB (UM) 12*32kB (UM) 10*64kB (UM) 5*128kB (UM) 5*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3947020kB
[  306.128315][T14615] syzkaller0: entered promiscuous mode
[  306.141200][T14587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  306.151111][T14615] syzkaller0: entered allmulticast mode
[  306.157333][T14587] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  306.176130][T14587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  306.186417][T14587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  306.202240][T14587] 44457 total pagecache pages
[  306.207225][T14587] 0 pages in swap cache
[  306.211610][T14587] Free swap  = 124996kB
[  306.216276][T14587] Total swap = 124996kB
[  306.220597][T14587] 2097051 pages RAM
[  306.225381][T14587] 0 pages HighMem/MovableOnly
[  306.231737][T14587] 427062 pages reserved
[  306.236464][T14587] 0 pages cma reserved
[  306.571467][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'.
[  306.638485][T14629] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.646213][T14629] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.847618][T14654] netlink: 'syz.3.2411': attribute type 10 has an invalid length.
[  306.942848][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.958900][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.971105][T14629] tipc: Resetting bearer <eth:xfrm0>
[  307.116175][T14629] bond2: left promiscuous mode
[  307.121351][T14629] bond2: left allmulticast mode
[  307.155767][T14629] sit2: left promiscuous mode
[  307.161006][T14629] sit2: left allmulticast mode
[  307.175195][T14629] bond4: left promiscuous mode
[  307.180136][T14629] bond4: left allmulticast mode
[  307.189817][T14629] bond5: left promiscuous mode
[  307.195163][T14629] bond5: left allmulticast mode
[  307.242246][T14629] bond9: left promiscuous mode
[  307.260729][T14629] bond12: left promiscuous mode
[  307.354666][T14660] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.393088][T14660] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  307.464248][T14665] netlink: 'syz.2.2413': attribute type 1 has an invalid length.
[  307.477044][T14667] netlink: 'syz.1.2414': attribute type 32 has an invalid length.
[  307.485838][T14665] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2413'.
[  307.505209][ T9074] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.511102][T14665] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2413'.
[  307.533621][ T9074] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  307.556911][T14665] netlink: 'syz.2.2413': attribute type 1 has an invalid length.
[  307.563037][ T9074] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.596633][ T9074] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  307.623192][T14665] netlink: 'syz.2.2413': attribute type 8 has an invalid length.
[  307.705907][ T9074] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.730484][ T9074] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  308.249573][T14710] tipc: Resetting bearer <eth:vlan0>
[  308.314309][T14710] tipc: Resetting bearer <eth:vlan0>
[  308.344865][T14710] bond7: (slave vlan0): Enslaving as a backup interface with an up link
[  308.640401][T14740] netlink: 'syz.3.2429': attribute type 6 has an invalid length.
[  308.649822][T14740] netlink: 'syz.3.2429': attribute type 6 has an invalid length.
[  308.686741][T14742] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.790329][T14748] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20001
[  308.933434][T14757] IPv6: sit4: Disabled Multicast RS
[  309.330699][T14773] syzkaller1: entered allmulticast mode
[  309.424459][T14786] tipc: Failed to remove unknown binding: 66,0,0/780166889:2480446103/2480446104
[  309.445264][T14786] tipc: Failed to remove unknown binding: 66,0,0/780166889:2480446103/2480446104
[  309.668256][T14795] __nla_validate_parse: 6 callbacks suppressed
[  309.668277][T14795] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2440'.
[  309.698057][T14801] netlink: 'syz.1.2441': attribute type 3 has an invalid length.
[  309.730759][T14801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2441'.
[  309.758489][T14807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2442'.
[  309.904873][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2442'.
[  309.943279][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'.
[  309.954067][T14807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2442'.
[  309.967192][T14810] nbd: device at index 64 is going down
[  311.118102][T14886] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2459'.
[  311.165730][T14886] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2459'.
[  311.215080][T14898] netlink: 'syz.3.2463': attribute type 16 has an invalid length.
[  311.243500][T14898] netlink: 'syz.3.2463': attribute type 17 has an invalid length.
[  311.270795][T14898] erspan0: left allmulticast mode
[  311.303393][T14898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.353645][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2461'.
[  311.464979][T14893] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.472244][T14893] bridge0: port 2(bridge_slave_1) entered listening state
[  311.659182][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[  311.757122][T14916] bond5: (slave dummy0): Releasing active interface
[  311.849747][T14933] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  311.878611][T14933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  312.460862][T14968] netlink: ct family unspecified
[  312.508483][T14975] syz_tun: entered allmulticast mode
[  313.047609][T14988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.414335][T15027] mac80211_hwsim hwsim10 ÿ
: renamed from wlan1
[  314.058490][   T30] audit: type=1800 audit(1775228534.054:6): pid=15068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2505" name="memory.events" dev="tmpfs" ino=2821 res=0 errno=0
[  314.096788][T15071] lo speed is unknown, defaulting to 1000
[  314.103769][T15064] IPVS: sh: FWM 3 0x00000003 - no destination available
[  314.110914][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  314.124027][T15064] IPVS: sh: FWM 3 0x00000003 - no destination available
[  314.131240][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  314.271067][T15086] dvmrp0: left allmulticast mode
[  314.278165][T15086] pimreg: left allmulticast mode
[  314.297031][T15078] validate_nla: 2 callbacks suppressed
[  314.297052][T15078] netlink: 'syz.1.2504': attribute type 2 has an invalid length.
[  314.763091][T15103] __nla_validate_parse: 13 callbacks suppressed
[  314.763110][T15103] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2514'.
[  314.913097][T15109] vcan0: entered allmulticast mode
[  315.635447][T15130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.030227][T15156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.262724][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'.
[  316.622240][T15191] netlink: 'syz.4.2536': attribute type 22 has an invalid length.
[  316.640394][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'.
[  316.652144][T15193] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2538'.
[  316.668021][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2535'.
[  316.681323][T15187] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  316.694372][T15193] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  316.703765][T15187] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  316.716431][T15187] gretap1: entered promiscuous mode
[  316.723147][T15187] gretap1: entered allmulticast mode
[  316.756007][T15191] netlink: 'syz.4.2536': attribute type 22 has an invalid length.
[  316.783834][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'.
[  316.856479][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.881067][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.911523][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.969873][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  317.036509][T15210] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2542'.
[  317.057027][T15215] netlink: 'syz.1.2541': attribute type 1 has an invalid length.
[  317.187421][T15219] bond8: (slave gretap2): making interface the new active one
[  317.204402][T15219] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  317.313248][T15232] dvmrp0: entered allmulticast mode
[  317.343027][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.545016][T15245] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2550'.
[  317.599493][T15243] bond12: Unable to set peer notification delay as MII monitoring is disabled
[  317.634511][T15243] bond12 (unregistering): Released all slaves
[  317.646670][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  317.659223][T15253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2553'.
[  318.264302][T15289] xt_hashlimit: size too large, truncated to 1048576
[  318.439914][T15296] syzkaller0: entered promiscuous mode
[  318.446972][T15296] syzkaller0: entered allmulticast mode
[  318.952122][T15332] Bluetooth: hci2: Opcode 0x0c1a failed: -22
[  319.048806][T15336] netlink: 'syz.0.2580': attribute type 5 has an invalid length.
[  319.062532][T15337] syzkaller1: entered allmulticast mode
[  319.234006][T15345] netlink: 'syz.3.2583': attribute type 11 has an invalid length.
[  319.281007][T15343] syzkaller0: entered promiscuous mode
[  319.288377][T15343] syzkaller0: entered allmulticast mode
[  319.664559][T15368] bridge0: port 1(batadv1) entered blocking state
[  319.671235][T15368] bridge0: port 1(batadv1) entered disabled state
[  319.758066][T15368] batadv1: entered allmulticast mode
[  319.766655][T15368] batadv1: entered promiscuous mode
[  319.911738][T15381] h: entered promiscuous mode
[  319.943728][T15384] __nla_validate_parse: 6 callbacks suppressed
[  319.943757][T15384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2596'.
[  319.966020][T15381] xt_l2tp: missing protocol rule (udp|l2tpip)
[  320.135132][T15396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2604'.
[  320.144652][ T9074] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  320.154112][ T9074] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  320.175241][T15393] syzkaller0: entered promiscuous mode
[  320.180859][T15393] syzkaller0: entered allmulticast mode
[  320.236627][T15401] netlink: 'syz.3.2603': attribute type 21 has an invalid length.
[  320.280566][T15396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2604'.
[  320.679923][T15421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.742186][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2612'.
[  320.752569][T15426] netlink: 'syz.4.2612': attribute type 7 has an invalid length.
[  320.761479][T15426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2612'.
[  320.789629][T15427] openvswitch: netlink: IP tunnel dst address not specified
[  320.821971][T15421] syzkaller0: entered promiscuous mode
[  320.828153][T15421] syzkaller0: entered allmulticast mode
[  320.836580][T15421] tipc: Resetting bearer <eth:syzkaller0>
[  320.890274][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'.
[  320.908506][T15420] tipc: Resetting bearer <eth:syzkaller0>
[  322.581964][T15420] tipc: Disabling bearer <eth:syzkaller0>
[  322.787418][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'.
[  322.797368][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'.
[  322.807599][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'.
[  322.906399][T15482] netlink: 'syz.3.2623': attribute type 1 has an invalid length.
[  322.956504][T15482] bond2: entered promiscuous mode
[  322.962107][T15482] 8021q: adding VLAN 0 to HW filter on device bond2
[  323.043164][T15484] bond14 (unregistering): Released all slaves
[  323.051118][T15495] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  323.060472][T15495] IPVS: set_ctl: invalid protocol: 1 0.32.0.0:5120
[  323.229713][T15487] lo speed is unknown, defaulting to 1000
[  323.290124][T15509] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2630'.
[  323.507932][T15516] syzkaller0: entered promiscuous mode
[  323.514152][T15516] syzkaller0: entered allmulticast mode
[  323.554306][T15520] openvswitch: netlink: EtherType 0 is less than min 600
[  323.571953][T15521] netlink: 'syz.0.2635': attribute type 1 has an invalid length.
[  323.591293][T15521] netlink: 'syz.0.2635': attribute type 1 has an invalid length.
[  323.608482][T15521] netlink: 'syz.0.2635': attribute type 8 has an invalid length.
[  323.825480][T15528] ieee802154 phy1 wpan1: encryption failed: -22
[  323.843095][T15531] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  324.331375][T15561] sock: sock_timestamping_bind_phc: sock not bind to device
[  324.575382][T15572] netlink: 'syz.3.2651': attribute type 10 has an invalid length.
[  324.594864][T15572] netlink: 'syz.3.2651': attribute type 10 has an invalid length.
[  324.808308][T15579] lo speed is unknown, defaulting to 1000
[  324.972714][T15590] __nla_validate_parse: 14 callbacks suppressed
[  324.972736][T15590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2657'.
[  324.998647][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'.
[  325.011261][T15590] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2657'.
[  325.042181][T15590] netlink: 'syz.0.2657': attribute type 6 has an invalid length.
[  325.053344][T15590] netlink: 'syz.0.2657': attribute type 5 has an invalid length.
[  325.061309][T15590] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2657'.
[  325.073622][T15593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2657'.
[  325.084272][T15593] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2657'.
[  325.093933][T15593] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2657'.
[  325.371794][T15603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2661'.
[  325.471025][T15608] syzkaller0: entered promiscuous mode
[  325.476959][T15608] syzkaller0: entered allmulticast mode
[  325.581573][T15586] lo speed is unknown, defaulting to 1000
[  326.216802][T15633] batman_adv: batadv0: Adding interface: dummy0
[  326.237638][T15633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.273085][T15633] batman_adv: batadv0: Interface activated: dummy0
[  326.304743][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2667'.
[  326.574610][T15652] validate_nla: 2 callbacks suppressed
[  326.574652][T15652] netlink: 'syz.4.2675': attribute type 21 has an invalid length.
[  326.589385][T15652] IPv6: NLM_F_CREATE should be specified when creating new route
[  326.817814][T15661] netlink: 'syz.0.2678': attribute type 3 has an invalid length.
[  327.013757][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2681'.
[  327.688388][T15694] ip6erspan1: entered allmulticast mode
[  341.644065][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  350.286725][T15696] netlink: 'syz.2.2690': attribute type 2 has an invalid length.
[  350.380093][T15705] sctp: [Deprecated]: syz.1.2689 (pid 15705) Use of int in maxseg socket option.
[  350.380093][T15705] Use struct sctp_assoc_value instead
[  350.431321][T15709] netlink: 'syz.2.2693': attribute type 21 has an invalid length.
[  350.439729][T15709] __nla_validate_parse: 6 callbacks suppressed
[  350.439749][T15709] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2693'.
[  350.490144][T15709] netlink: 'syz.2.2693': attribute type 5 has an invalid length.
[  350.529235][T15709] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2693'.
[  350.621571][T15717] syzkaller0: entered promiscuous mode
[  350.627229][T15717] syzkaller0: entered allmulticast mode
[  351.021077][T15715] geneve4: entered promiscuous mode
[  351.044188][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 45580 - 0
[  351.076570][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 45580 - 0
[  351.103370][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 45580 - 0
[  351.243032][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2707'.
[  351.465920][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'.
[  351.741802][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'.
[  351.957307][T15802] xfrm0: entered promiscuous mode
[  351.964931][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'.
[  352.011370][T15801] macsec1: entered promiscuous mode
[  352.050180][T15809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'.
[  352.286553][T15818] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  352.313120][T15818] netlink: 'syz.1.2726': attribute type 11 has an invalid length.
[  352.331623][T15818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2726'.
[  352.406905][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'.
[  352.423119][T15821] xt_hashlimit: invalid interval
[  352.556949][T15824] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.2729'.
[  353.318634][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  353.334175][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  353.345774][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  353.346886][T15877] macvtap0: entered promiscuous mode
[  353.361373][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  353.370578][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  353.406677][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  353.416095][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  353.424483][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  353.438362][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  353.447657][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  353.547166][T15877] macvtap0 (unregistering): left promiscuous mode
[  353.772149][T15886] bond12 (unregistering): Released all slaves
[  353.869810][ T5825] syz_tun (unregistering): left allmulticast mode
[  353.884608][T15899] netlink: zone id is out of range
[  353.890367][T15899] netlink: zone id is out of range
[  353.890603][T15874] lo speed is unknown, defaulting to 1000
[  353.903853][T15899] netlink: zone id is out of range
[  353.909845][T15899] netlink: zone id is out of range
[  353.919209][T15899] netlink: zone id is out of range
[  353.931117][T15899] netlink: zone id is out of range
[  353.937521][T15899] netlink: zone id is out of range
[  353.943741][T15899] netlink: zone id is out of range
[  353.949073][T15899] netlink: zone id is out of range
[  353.955736][T15899] netlink: zone id is out of range
[  354.009880][   T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.032559][   T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.114512][T15904] xt_hashlimit: size too large, truncated to 1048576
[  354.252185][   T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.272949][   T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.389217][   T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.399968][   T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.415969][T15913] PKCS7: Unknown OID: [4] (bad)
[  354.426680][T15913] PKCS7: Only support pkcs7_signedData type
[  354.506895][   T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.517520][   T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.611985][T15915] netlink: 'syz.2.2758': attribute type 7 has an invalid length.
[  354.864306][   T67] batadv0: left allmulticast mode
[  354.880370][   T67] batadv0: left promiscuous mode
[  354.895483][   T67] bridge0: port 1(batadv0) entered disabled state
[  355.229932][   T67] tipc: Disabling bearer <eth:xfrm0>
[  355.331011][   T67] dvmrp0 (unregistering): left allmulticast mode
[  355.482632][ T5830] Bluetooth: hci5: command tx timeout
[  355.959988][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.970235][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.980122][   T67] bond0 (unregistering): Released all slaves
[  355.991138][   T67] bond1 (unregistering): Released all slaves
[  356.007881][   T67] bond2 (unregistering): Released all slaves
[  356.110962][T15937] __nla_validate_parse: 71 callbacks suppressed
[  356.110984][T15937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'.
[  356.223002][   T67] tipc: Left network mode
[  356.353589][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'.
[  356.415809][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'.
[  356.673088][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2766'.
[  356.707287][T15965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2767'.
[  356.716793][T15965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2767'.
[  356.778263][T15966] bridge7: entered promiscuous mode
[  356.787849][T15962] netlink: 'syz.2.2767': attribute type 1 has an invalid length.
[  356.805921][T15966] bridge7: entered allmulticast mode
[  357.106221][T15874] chnl_net:caif_netlink_parms(): no params data found
[  357.286613][T15874] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.294664][T15874] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.302027][T15874] bridge_slave_0: entered allmulticast mode
[  357.311235][T15874] bridge_slave_0: entered promiscuous mode
[  357.320539][T15874] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.328926][T15874] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.336821][T15874] bridge_slave_1: entered allmulticast mode
[  357.345221][T15874] bridge_slave_1: entered promiscuous mode
[  357.421127][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.439710][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.562657][ T5830] Bluetooth: hci5: command tx timeout
[  357.604567][T15874] team0: Port device team_slave_0 added
[  357.615438][T15874] team0: Port device team_slave_1 added
[  357.727563][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.734804][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.763173][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.777163][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.785130][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.820029][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.916103][   T67] pim6reg527 (unregistering): left allmulticast mode
[  358.186801][T15874] hsr_slave_0: entered promiscuous mode
[  358.193645][T15874] hsr_slave_1: entered promiscuous mode
[  358.487594][   T67] IPVS: stop unused estimator thread 0...
[  359.533311][T15955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  359.544629][T15962] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2767'.
[  359.591520][T15962] netlink: 'syz.2.2767': attribute type 2 has an invalid length.
[  359.623016][T15962] netlink: 'syz.2.2767': attribute type 1 has an invalid length.
[  359.643587][ T5830] Bluetooth: hci5: command tx timeout
[  359.661878][T15874] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  359.737861][T15874] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  359.795918][T15874] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  359.827049][T15874] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  360.063855][T16023] syzkaller0: entered promiscuous mode
[  360.082657][T16023] syzkaller0: entered allmulticast mode
[  360.234567][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'.
[  360.261750][T16034] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2781'.
[  360.272740][T16034] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2781'.
[  360.377291][T15874] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.470940][T15874] 8021q: adding VLAN 0 to HW filter on device team0
[  360.534450][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.541686][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.573545][T16063] netlink: 'syz.0.2786': attribute type 2 has an invalid length.
[  360.594375][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.601665][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.741525][T16055] veth1_to_batadv: left promiscuous mode
[  360.759580][T16070] x_tables: unsorted entry at hook 2
[  361.299973][T16094] lo speed is unknown, defaulting to 1000
[  361.588750][T16104] __nla_validate_parse: 4 callbacks suppressed
[  361.588769][T16104] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2797'.
[  361.637906][T16104] netem: invalid attributes len -24
[  361.659071][T16104] netem: change failed
[  361.728345][ T5830] Bluetooth: hci5: command tx timeout
[  362.016596][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.129342][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'.
[  362.178063][T15874] veth0_vlan: entered promiscuous mode
[  362.216795][T16135] netlink: 'syz.2.2805': attribute type 21 has an invalid length.
[  362.230788][T15874] veth1_vlan: entered promiscuous mode
[  362.268808][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[  362.397074][T15874] veth0_macvtap: entered promiscuous mode
[  362.575418][T15874] veth1_macvtap: entered promiscuous mode
[  362.795896][T16166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2810'.
[  362.840601][T16160] bond6 (unregistering): Released all slaves
[  362.911657][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'.
[  362.956424][T15874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.988612][T15874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.073645][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.104567][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.151126][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.182061][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.192349][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2814'.
[  363.626279][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.689496][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.776295][T16203] net_ratelimit: 134 callbacks suppressed
[  363.776325][T16203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.835194][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.868512][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.272282][T16222] pimreg: entered allmulticast mode
[  364.326127][T16222] netlink: zone id is out of range
[  364.341603][T16226] bridge1: entered promiscuous mode
[  364.362141][T16226] bridge1: entered allmulticast mode
[  364.374828][T16228] netlink: zone id is out of range
[  364.379998][T16228] netlink: zone id is out of range
[  364.388597][T16228] netlink: zone id is out of range
[  364.399470][T16228] netlink: zone id is out of range
[  364.405020][T16222] netlink: zone id is out of range
[  364.410388][T16222] netlink: zone id is out of range
[  364.416194][T16228] netlink: zone id is out of range
[  364.421787][T16222] netlink: zone id is out of range
[  364.438956][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2826'.
[  364.508584][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2829'.
[  364.818777][T16256] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  364.856931][T16262] Bluetooth: MGMT ver 1.23
[  364.869830][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'.
[  365.124928][T16281] netlink: 'syz.4.2839': attribute type 9 has an invalid length.
[  365.136553][T16281] netlink: 'syz.4.2839': attribute type 6 has an invalid length.
[  365.146286][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'.
[  365.193556][T16286] delete_channel: no stack
[  365.216959][T16286] pim6reg: entered allmulticast mode
[  365.763939][T16326] xt_CT: You must specify a L4 protocol and not use inversions on it
[  365.789987][T16326] vlan1: entered allmulticast mode
[  365.796001][T16326] veth0_vlan: entered allmulticast mode
[  366.315598][T16361] netlink: 'syz.1.2864': attribute type 15 has an invalid length.
[  366.341858][T16361] netlink: 'syz.1.2864': attribute type 15 has an invalid length.
[  366.362937][  T106] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  366.372236][  T106] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  366.416146][  T106] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  366.697313][T16379] __nla_validate_parse: 10 callbacks suppressed
[  366.697336][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2869'.
[  366.724197][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'.
[  367.330108][T16383] batman_adv: batadv0: Interface deactivated: dummy0
[  368.407607][T16403] syzkaller0: entered promiscuous mode
[  368.413257][T16403] syzkaller0: entered allmulticast mode
[  368.420941][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.438573][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.463956][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.473259][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.655591][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'.
[  368.689031][T16430] sctp: [Deprecated]: syz.3.2882 (pid 16430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.689031][T16430] Use struct sctp_sack_info instead
[  368.893759][T16437] netlink: 'syz.3.2884': attribute type 24 has an invalid length.
[  369.386722][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'.
[  370.222826][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.234107][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.244419][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.254190][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.498333][T16464] nbd: illegal input index -1
[  370.750286][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2893'.
[  370.945029][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'.
[  371.722661][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.729992][    C1] bridge0: topology change detected, propagating
[  374.021159][T16503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.235847][T16559] netlink: 'syz.3.2913': attribute type 4 has an invalid length.
[  374.423008][T16576] IPv6: NLM_F_REPLACE set, but no existing node found!
[  374.628208][T16591] batadv_slave_1: entered promiscuous mode
[  374.649184][T16589] batadv_slave_1: left promiscuous mode
[  374.896804][T16614] pim6reg: entered allmulticast mode
[  374.920760][T16611] pim6reg: left allmulticast mode
[  375.249273][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'.
[  375.267176][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'.
[  375.270623][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'.
[  375.387400][T16634] tc_dump_action: action bad kind
[  375.635437][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  375.646369][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  375.654625][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  375.667541][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  375.678266][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  375.820300][T16645] lo speed is unknown, defaulting to 1000
[  375.840859][T16655] netlink: 'syz.3.2937': attribute type 2 has an invalid length.
[  375.936610][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'.
[  376.184704][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.210551][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  376.226593][T16669] netlink: 'syz.0.2941': attribute type 11 has an invalid length.
[  376.234893][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.234964][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  376.234995][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 45580 - 0
[  376.273416][T16669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2941'.
[  376.358988][T16662] lo speed is unknown, defaulting to 1000
[  376.449169][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'.
[  376.466152][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'.
[  376.544740][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.590702][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  376.606084][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.616775][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  376.627907][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 45580 - 0
[  376.662129][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'.
[  376.710687][T16684] netlink: 'syz.3.2946': attribute type 3 has an invalid length.
[  376.746060][T16684] netlink: 'syz.3.2946': attribute type 1 has an invalid length.
[  376.761017][T16684] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2946'.
[  376.784599][T16684] NCSI netlink: No device for ifindex 813332851
[  376.806574][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.841837][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  376.862930][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.875526][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  376.922674][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 45580 - 0
[  377.662049][   T12] batadv1: left allmulticast mode
[  377.672819][   T12] batadv1: left promiscuous mode
[  377.686997][   T12] bridge0: port 1(batadv1) entered disabled state
[  377.709651][   T12] bridge_slave_1: left allmulticast mode
[  377.716135][   T12] bridge_slave_1: left promiscuous mode
[  377.721957][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.730670][ T5830] Bluetooth: hci1: command tx timeout
[  377.888375][   T12] bond2 (unregistering): (slave ip6gre1): Releasing backup interface
[  378.028122][   T12] bond8 (unregistering): (slave gretap2): Releasing active interface
[  378.055100][   T12] bond4 (unregistering): (slave geneve3): Releasing active interface
[  378.070569][   T12] bond1 (unregistering): (slave geneve2): Releasing active interface
[  378.109649][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  378.449489][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.460686][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.471511][   T12] bond0 (unregistering): Released all slaves
[  378.485845][   T12] bond1 (unregistering): Released all slaves
[  378.501008][   T12] bond2 (unregistering): Released all slaves
[  378.516617][   T12] bond3 (unregistering): Released all slaves
[  378.533433][   T12] bond4 (unregistering): Released all slaves
[  378.550007][   T12] bond5 (unregistering): (slave veth7): Releasing active interface
[  378.573036][   T12] bond5 (unregistering): Released all slaves
[  378.588769][   T12] bond6 (unregistering): Released all slaves
[  378.605535][   T12] bond7 (unregistering): (slave vlan0): Releasing backup interface
[  378.619431][   T12] tipc: Resetting bearer <eth:vlan0>
[  378.628974][   T12] tipc: Resetting bearer <eth:vlan0>
[  378.636144][   T12] bond7 (unregistering): Released all slaves
[  378.651498][   T12] bond8 (unregistering): Released all slaves
[  378.676581][   T12] bond9 (unregistering): Released all slaves
[  378.693672][   T12] bond10 (unregistering): Released all slaves
[  378.773497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.928698][   T12] : left promiscuous mode
[  378.985142][T16739] No such timeout policy "syz0"
[  379.070164][T16645] chnl_net:caif_netlink_parms(): no params data found
[  379.180994][   T12] tipc: Disabling bearer <eth:vlan0>
[  379.195000][   T12] tipc: Left network mode
[  379.680984][T16765] bridge_slave_1: left allmulticast mode
[  379.713055][T16765] bridge_slave_1: left promiscuous mode
[  379.721906][T16765] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.770040][T16765] bridge_slave_0: left allmulticast mode
[  379.779761][T16765] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.803390][ T5830] Bluetooth: hci1: command tx timeout
[  380.241492][T16645] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.258464][T16645] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.281152][T16645] bridge_slave_0: entered allmulticast mode
[  380.300402][T16645] bridge_slave_0: entered promiscuous mode
[  380.321738][T16645] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.341675][T16645] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.350803][T16645] bridge_slave_1: entered allmulticast mode
[  380.359362][T16645] bridge_slave_1: entered promiscuous mode
[  380.420836][T16802] net_ratelimit: 18 callbacks suppressed
[  380.420855][T16802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  380.472154][T16645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.556362][T16645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.792355][T16645] team0: Port device team_slave_0 added
[  380.933912][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'.
[  380.950155][T16828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2979'.
[  380.962359][T16645] team0: Port device team_slave_1 added
[  381.143592][T16837] SET target dimension over the limit!
[  381.418022][T16852] ieee802154 phy1 wpan1: encryption failed: -22
[  381.892917][ T5830] Bluetooth: hci1: command tx timeout
[  382.838495][T16645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.845654][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.872523][T16645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.886053][T16645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.902839][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.945493][T16645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.993477][T16849] syzkaller0: entered promiscuous mode
[  382.999297][T16849] syzkaller0: entered allmulticast mode
[  383.108573][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'.
[  383.115320][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'.
[  383.128321][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'.
[  383.193545][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'.
[  383.223455][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'.
[  383.349858][T16884] netlink: 'syz.2.2990': attribute type 21 has an invalid length.
[  383.421541][T16867] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  383.440748][T16867] bond13 (unregistering): Released all slaves
[  383.504230][T16884] netlink: 'syz.2.2990': attribute type 1 has an invalid length.
[  383.606462][T16645] hsr_slave_0: entered promiscuous mode
[  383.636340][T16645] hsr_slave_1: entered promiscuous mode
[  383.647642][T16645] debugfs: 'hsr0' already exists in 'hsr'
[  383.653763][T16645] Cannot create hsr debugfs directory
[  383.726212][T16896] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2995'.
[  383.755786][   T12] hsr_slave_0: left promiscuous mode
[  383.773681][   T12] hsr_slave_1: left promiscuous mode
[  383.780157][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.796187][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'.
[  383.815933][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.831208][   T12] veth1_macvtap: left promiscuous mode
[  383.842761][   T12] veth1_vlan: left promiscuous mode
[  383.851311][   T12] veth0_vlan: left promiscuous mode
[  383.964484][ T5830] Bluetooth: hci1: command tx timeout
[  383.986963][   T12] pim6reg (unregistering): left allmulticast mode
[  384.254601][  T106] smc: removing ib device syz1
[  384.413437][   T12] team0 (unregistering): Port device team_slave_1 removed
[  384.449605][   T12] team0 (unregistering): Port device team_slave_0 removed
[  384.610247][T16899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.625906][T16899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.732923][T16912] syzkaller0: entered promiscuous mode
[  384.738598][T16912] syzkaller0: entered allmulticast mode
[  384.745246][T11590] ==================================================================
[  384.753728][T11590] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  384.762809][T11590] Read of size 8 at addr ffff8880518a82f0 by task kworker/1:8/11590
[  384.770863][T11590] 
[  384.773246][T11590] CPU: 1 UID: 0 PID: 11590 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) 
[  384.773273][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  384.773287][T11590] Workqueue: events smc_ib_port_event_work
[  384.773330][T11590] Call Trace:
[  384.773338][T11590]  <TASK>
[  384.773347][T11590]  dump_stack_lvl+0xe8/0x150
[  384.773378][T11590]  print_report+0xba/0x230
[  384.773402][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  384.773429][T11590]  kasan_report+0x117/0x150
[  384.773457][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  384.773488][T11590]  __ethtool_get_link_ksettings+0x5e/0x170
[  384.773516][T11590]  ib_get_eth_speed+0x180/0x7f0
[  384.773548][T11590]  ? rxe_query_port+0x7e/0x3d0
[  384.773577][T11590]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  384.773613][T11590]  ? do_raw_spin_unlock+0xf5/0x210
[  384.773641][T11590]  rxe_query_port+0x93/0x3d0
[  384.773672][T11590]  ib_query_port+0x170/0x830
[  384.773695][T11590]  smc_ib_port_event_work+0x15a/0x940
[  384.773734][T11590]  ? process_scheduled_works+0xa8d/0x18c0
[  384.773761][T11590]  ? process_scheduled_works+0xa8d/0x18c0
[  384.773788][T11590]  process_scheduled_works+0xb6e/0x18c0
[  384.773832][T11590]  ? __pfx_process_scheduled_works+0x10/0x10
[  384.773862][T11590]  ? assign_work+0x3d5/0x5e0
[  384.773891][T11590]  worker_thread+0xa53/0xfc0
[  384.773932][T11590]  kthread+0x388/0x470
[  384.773959][T11590]  ? __pfx_worker_thread+0x10/0x10
[  384.773985][T11590]  ? __pfx_kthread+0x10/0x10
[  384.774006][T11590]  ret_from_fork+0x51e/0xb90
[  384.774034][T11590]  ? __pfx_ret_from_fork+0x10/0x10
[  384.774060][T11590]  ? __switch_to+0xc7d/0x1450
[  384.774084][T11590]  ? __pfx_kthread+0x10/0x10
[  384.774105][T11590]  ret_from_fork_asm+0x1a/0x30
[  384.774143][T11590]  </TASK>
[  384.774151][T11590] 
[  384.949315][T11590] Allocated by task 5833:
[  384.953753][T11590]  kasan_save_track+0x3e/0x80
[  384.959112][T11590]  __kasan_kmalloc+0x93/0xb0
[  384.963739][T11590]  __kvmalloc_node_noprof+0x528/0x8a0
[  384.969408][T11590]  alloc_netdev_mqs+0xa6/0x11b0
[  384.974413][T11590]  rtnl_create_link+0x31f/0xd70
[  384.979381][T11590]  rtnl_newlink_create+0x277/0xb70
[  384.984513][T11590]  rtnl_newlink+0x1666/0x1be0
[  384.989208][T11590]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  384.994160][T11590]  netlink_rcv_skb+0x232/0x4b0
[  384.998950][T11590]  netlink_unicast+0x80f/0x9b0
[  385.003776][T11590]  netlink_sendmsg+0x813/0xb40
[  385.008569][T11590]  __sys_sendto+0x672/0x710
[  385.013107][T11590]  __x64_sys_sendto+0xde/0x100
[  385.017987][T11590]  do_syscall_64+0x14d/0xf80
[  385.022690][T11590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.028608][T11590] 
[  385.031060][T11590] Freed by task 12:
[  385.034904][T11590]  kasan_save_track+0x3e/0x80
[  385.039610][T11590]  kasan_save_free_info+0x46/0x50
[  385.044843][T11590]  __kasan_slab_free+0x5c/0x80
[  385.049639][T11590]  kfree+0x1c1/0x630
[  385.053746][T11590]  device_release+0xc4/0x1f0
[  385.058529][T11590]  kobject_put+0x228/0x560
[  385.062980][T11590]  netdev_run_todo+0xc75/0xde0
[  385.067872][T11590]  default_device_exit_batch+0x986/0xa00
[  385.073543][T11590]  ops_undo_list+0x52b/0x940
[  385.078182][T11590]  cleanup_net+0x56b/0x800
[  385.082627][T11590]  process_scheduled_works+0xb6e/0x18c0
[  385.088293][T11590]  worker_thread+0xa53/0xfc0
[  385.092919][T11590]  kthread+0x388/0x470
[  385.097012][T11590]  ret_from_fork+0x51e/0xb90
[  385.101656][T11590]  ret_from_fork_asm+0x1a/0x30
[  385.106804][T11590] 
[  385.109326][T11590] The buggy address belongs to the object at ffff8880518a8000
[  385.109326][T11590]  which belongs to the cache kmalloc-cg-4k of size 4096
[  385.123749][T11590] The buggy address is located 752 bytes inside of
[  385.123749][T11590]  freed 4096-byte region [ffff8880518a8000, ffff8880518a9000)
[  385.137665][T11590] 
[  385.140021][T11590] The buggy address belongs to the physical page:
[  385.146464][T11590] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x518a8
[  385.155263][T11590] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  385.163784][T11590] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  385.171749][T11590] page_type: f5(slab)
[  385.175764][T11590] raw: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122
[  385.184750][T11590] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  385.193628][T11590] head: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122
[  385.202412][T11590] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  385.211387][T11590] head: 00fff00000000003 ffffea0001462a01 00000000ffffffff 00000000ffffffff
[  385.220187][T11590] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  385.229190][T11590] page dumped because: kasan: bad access detected
[  385.236258][T11590] page_owner tracks the page as allocated
[  385.242173][T11590] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5195, tgid 5195 (udevd), ts 50446497860, free_ts 50437174421
[  385.263261][T11590]  post_alloc_hook+0x231/0x280
[  385.268152][T11590]  get_page_from_freelist+0x24dc/0x2580
[  385.273732][T11590]  __alloc_frozen_pages_noprof+0x18d/0x380
[  385.279658][T11590]  allocate_slab+0x77/0x660
[  385.284201][T11590]  refill_objects+0x331/0x3c0
[  385.288930][T11590]  __pcs_replace_empty_main+0x2e6/0x730
[  385.294979][T11590]  __kvmalloc_node_noprof+0x657/0x8a0
[  385.300561][T11590]  seq_read_iter+0x202/0xe10
[  385.305187][T11590]  vfs_read+0x582/0xa70
[  385.309375][T11590]  ksys_read+0x150/0x270
[  385.313645][T11590]  do_syscall_64+0x14d/0xf80
[  385.318350][T11590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.324278][T11590] page last free pid 5195 tgid 5195 stack trace:
[  385.330624][T11590]  __free_frozen_pages+0xc2b/0xdb0
[  385.335854][T11590]  __slab_free+0x263/0x2b0
[  385.340303][T11590]  qlist_free_all+0x97/0x100
[  385.344919][T11590]  kasan_quarantine_reduce+0x148/0x160
[  385.350407][T11590]  __kasan_slab_alloc+0x22/0x80
[  385.355290][T11590]  __kmalloc_cache_noprof+0x2ba/0x660
[  385.360686][T11590]  kernfs_fop_open+0x397/0xca0
[  385.365483][T11590]  do_dentry_open+0x785/0x14e0
[  385.370285][T11590]  vfs_open+0x3b/0x340
[  385.374382][T11590]  path_openat+0x2e08/0x3860
[  385.379009][T11590]  do_file_open+0x23e/0x4a0
[  385.383539][T11590]  do_sys_openat2+0x113/0x200
[  385.388333][T11590]  __x64_sys_openat+0x138/0x170
[  385.393221][T11590]  do_syscall_64+0x14d/0xf80
[  385.397930][T11590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.403858][T11590] 
[  385.406243][T11590] Memory state around the buggy address:
[  385.412070][T11590]  ffff8880518a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  385.420155][T11590]  ffff8880518a8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  385.428267][T11590] >ffff8880518a8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  385.436346][T11590]                                                              ^
[  385.444087][T11590]  ffff8880518a8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  385.452712][T11590]  ffff8880518a8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  385.460814][T11590] ==================================================================
[  385.515661][T11590] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  385.523004][T11590] CPU: 1 UID: 0 PID: 11590 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) 
[  385.532485][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  385.542663][T11590] Workqueue: events smc_ib_port_event_work
[  385.548794][T11590] Call Trace:
[  385.552088][T11590]  <TASK>
[  385.555232][T11590]  vpanic+0x56c/0xa60
[  385.559243][T11590]  ? __pfx_vpanic+0x10/0x10
[  385.563771][T11590]  ? __pfx___schedule+0x10/0x10
[  385.568717][T11590]  panic+0xc5/0xd0
[  385.572473][T11590]  ? __pfx_panic+0x10/0x10
[  385.576936][T11590]  ? preempt_schedule_common+0x82/0xd0
[  385.582465][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  385.588595][T11590]  check_panic_on_warn+0x89/0xb0
[  385.593579][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  385.599672][T11590]  end_report+0x73/0x180
[  385.603940][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  385.609995][T11590]  kasan_report+0x128/0x150
[  385.614530][T11590]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  385.620559][T11590]  __ethtool_get_link_ksettings+0x5e/0x170
[  385.626388][T11590]  ib_get_eth_speed+0x180/0x7f0
[  385.631303][T11590]  ? rxe_query_port+0x7e/0x3d0
[  385.636092][T11590]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  385.641506][T11590]  ? do_raw_spin_unlock+0xf5/0x210
[  385.646925][T11590]  rxe_query_port+0x93/0x3d0
[  385.651600][T11590]  ib_query_port+0x170/0x830
[  385.656258][T11590]  smc_ib_port_event_work+0x15a/0x940
[  385.661686][T11590]  ? process_scheduled_works+0xa8d/0x18c0
[  385.667432][T11590]  ? process_scheduled_works+0xa8d/0x18c0
[  385.673259][T11590]  process_scheduled_works+0xb6e/0x18c0
[  385.678863][T11590]  ? __pfx_process_scheduled_works+0x10/0x10
[  385.684882][T11590]  ? assign_work+0x3d5/0x5e0
[  385.689583][T11590]  worker_thread+0xa53/0xfc0
[  385.694296][T11590]  kthread+0x388/0x470
[  385.698759][T11590]  ? __pfx_worker_thread+0x10/0x10
[  385.704101][T11590]  ? __pfx_kthread+0x10/0x10
[  385.708717][T11590]  ret_from_fork+0x51e/0xb90
[  385.713357][T11590]  ? __pfx_ret_from_fork+0x10/0x10
[  385.718516][T11590]  ? __switch_to+0xc7d/0x1450
[  385.723237][T11590]  ? __pfx_kthread+0x10/0x10
[  385.727854][T11590]  ret_from_fork_asm+0x1a/0x30
[  385.732762][T11590]  </TASK>
[  385.736419][T11590] Kernel Offset: disabled
[  385.740759][T11590] Rebooting in 86400 seconds..