last executing test programs:

8.177741303s ago: executing program 0 (id=1139):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x4004)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3)

7.935268781s ago: executing program 0 (id=1140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120354d97f7e000000001008000100010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
close(0x3)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)

7.68134868s ago: executing program 1 (id=1144):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', <r2=>0x0, 0x29, 0x8a, 0x7f, 0x200, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x1, 0x7fffffff, 0x5}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
socket$kcm(0x21, 0x2, 0xa) (async)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x10, 0x110, 0x2}], 0x10}, 0xfc40)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', <r5=>0x0, 0x0, 0xfd, 0x8, 0x7aa0, 0x0, @remote, @remote, 0x700, 0x10, 0x3, 0x90}})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f00000001c0)=0x40, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3, 0x4, 0x50, @mcast2, @mcast1, 0x1, 0x8000, 0x4729, 0x9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', <r7=>0x0, 0x29, 0x7, 0x3, 0x4, 0x50, @mcast2, @mcast1, 0x1, 0x8000, 0x4729, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r8=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30020000060a010400000000000000000200000118000480140001800e000100627974656f726465720000000900010073797a30000000000900020073797a32000000000800074082593c65240104803c0001800a0001007265646972"], 0x258}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {0x10, 0xffff}, {0x0, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x8, 0x10, @mcast2}]}}]}, 0x48}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0xd0, r14, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}, @TIPC_NLA_MON_REF={0xffffffffffffffdf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0xdb0f}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r15, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0xffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

6.646126748s ago: executing program 2 (id=1146):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000000c0)="47c52ea5cf7fcec9b6d4", 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x20000400)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
openat$cgroup(r1, 0x0, 0x200002, 0x0)
accept$phonet_pipe(r3, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x64, &(0x7f0000000040)=0x15a0, 0x4)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0x4, 0xffff}, {0x3, 0x3}, {0xfff1, 0xfff1}}, [{0x8, 0xb, 0x40000005}, {0x8, 0xb, 0x6}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000800)

4.783455128s ago: executing program 3 (id=1147):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xf, @loopback}, 0x3b)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x6}}, 0xe8)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8926, &(0x7f0000000100)={'vlan0\x00', @ifru_names='sit0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmmsg(r0, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000002000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000cfdf6555d07d76080000000000000000000000000000000000000000000000001000000000000000000300"/98], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.293655625s ago: executing program 4 (id=1148):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd29, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0)

2.258636094s ago: executing program 2 (id=1149):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000bc0)=0x8001, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x18c, 0x203, 0x128, 0x19030000, 0x210, 0x2e0, 0x2e0, 0x210, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x4, 0xd170, 0x6, 0x7}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xdb, 0x2, 0xf, 0x3, 0x5, 0x1, 0x7, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000c00)={'mangle\x00', 0x8f, "d7548020869866850f45a3c61c22dc2b1aa3b4fea6a754f2a6df78eb1bd80b12c57facaf74469c759e7b6194bed5150c146f1a0652ef4108a17620c7c71c0829a2d0490d8c06fa0f97dbea2bdb774ee457daf50bc2210ba9fcd6ca3269b0d13849f5d4c4073aa3992d61cb2095f228566c680fd23a46d42e2973df33a1456957c9626820f22d5db78779cfb7be0ed5"}, &(0x7f0000000cc0)=0xb3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.188025104s ago: executing program 1 (id=1150):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000003c0)) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001540)=""/4137, &(0x7f0000000100)=0x1029) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000280)={{<r2=>0xffffffffffffffff, &(0x7f0000000000)=':--}\x00', 0x4100, &(0x7f0000000080)={@align=0x22d392e7, {0x2, 0xfff, 0x3, 0x7fffffff}}, 0x8, &(0x7f0000000100), &(0x7f0000000200)=0x3}, {[0xfffffff7, 0x101, 0x6, 0xfffffffc]}, 0xc1c5, 0x14, &(0x7f0000000240)=""/20})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000140)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010100000000000008000000711020000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

2.180802797s ago: executing program 0 (id=1151):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x4, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0xffff})
socket$nl_xfrm(0x10, 0x3, 0x6)

2.099630481s ago: executing program 3 (id=1152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="a368da8e549aa2bd3b9023d7a80ac7b6a3aa179c7c5bf9eb75378e8a2fd758e7df9565c9ac9edf01630fe086628a299857ab4ef9c22f1dea70cac0be3df6c2584208a5c7653ae61cc52a62b9c44599bf6613e2233b8e5e1d9dce77d3604701"], 0xd0}}, 0x4000000)

1.99927667s ago: executing program 1 (id=1153):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xd890)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0x0, &(0x7f00000002c0)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848770c30f32ced51d54fa6b09083888cefb39f900000000000000fd35d9367af322ea7eeba816e0070000000f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x40)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x7f, @remote, 0x2}}}, 0x32)
getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000002580), &(0x7f00000025c0)=0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r9, 0x0, &(0x7f0000000380)=""/51}, 0x20)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10)

1.998237252s ago: executing program 2 (id=1154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x408002}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x408002}]}, 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="76092a273af4e322dab9685f1192f89e6a7c1796ecc7145e20cc7bbabab86e032ccf28919525a10ad0fdf9d7f0fc918af82e1456314d7f070355db2965f3ec6b273bd57e29f5ca9f91871132ab498f42627005a54e2f26ebdf2abca83e72ec04e5f32ba66c34af07cb48c4a24356d8d1e0d27a310d5bf8407e8e758ff0f4973c7fbdd718b85424d47df690799b4f92d3c7dd10128e7014912291735c840c", 0x9e}], 0x1, 0x7) (async)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="76092a273af4e322dab9685f1192f89e6a7c1796ecc7145e20cc7bbabab86e032ccf28919525a10ad0fdf9d7f0fc918af82e1456314d7f070355db2965f3ec6b273bd57e29f5ca9f91871132ab498f42627005a54e2f26ebdf2abca83e72ec04e5f32ba66c34af07cb48c4a24356d8d1e0d27a310d5bf8407e8e758ff0f4973c7fbdd718b85424d47df690799b4f92d3c7dd10128e7014912291735c840c", 0x9e}], 0x1, 0x7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
writev(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)="91502193fb7d8799bff4a93c19aa676c851a89580782ead48fcebda80adea5d4d5a03e087fb1cb36a656f69dad6f867a9023f647097a15b6874ea4e07249cafdbcd7c0665d50ed18e0795806f0ace8a9b20e369a857b1fe2206e837c9fb89c0a45c87c94043b85de8c8db4b7b48f6a0c6ecf23c7c3f4d53bdc38ecf77c305b8155", 0x81}], 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)

1.970866708s ago: executing program 0 (id=1155):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, r0, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, r0, 0x0, 0x1}, 0x50) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) (async)

1.946844299s ago: executing program 4 (id=1156):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
recvmmsg(r1, &(0x7f0000001480), 0x0, 0x20, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400040019007e143997ec8a0ee283bb841812a8d567000428"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x2, 0x13, 0xbf22, 0x67, 0x3, 0x400, 0x3, 0x10000}}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000000), 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
r5 = socket$unix(0x1, 0x5, 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r6, 0xda90) (async)
accept4(r6, 0x0, 0x0, 0x800) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00', @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

1.859183279s ago: executing program 3 (id=1157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001066e5f52805b6b2ce7bdede4468fb948eb7a"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8524e26c43"}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x38}}, 0x0)

1.854806989s ago: executing program 1 (id=1158):
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000f40)=""/4088, 0x0, 0xff8, 0x8, 0xffffffff}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=r0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x88, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a90070000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

1.678293158s ago: executing program 1 (id=1159):
socket$kcm(0x1e, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001", @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
r5 = epoll_create1(0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
ppoll(&(0x7f0000000000)=[{r6}, {r5, 0xf401}], 0x2, 0x0, 0x0, 0x0)
pipe(0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r8, r7, 0x0, 0xf03a0005)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r11, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x2d}}})
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

1.43185436s ago: executing program 4 (id=1160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a03000000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000500000a9e5ede24e6b83e4ac0376e0ad291b121fd6f16ce28734458b5883b735a093af76ab1ff6c656a9b5d7ed2adc9819ceba9066fb93a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)

1.431270667s ago: executing program 2 (id=1161):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601020000090000000000000030000900020073797a3210000000050005000200000005020400020000000c0007800500140700000c11000338a6ead9683a69602c706f727400000000"], 0x58}}, 0x20000000)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2cc, r6, 0x4, 0x70bd2b, 0x40, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @remote}}, {0x20, 0x2, @in6={0xa, 0x5, 0x8, @empty, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x528847b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff800}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x374a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc6ca}]}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22d7435d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0xfffffffffffffeec, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4c000}, 0x40800)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080)

1.082412892s ago: executing program 0 (id=1162):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f000000bac0), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x28, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0xfffffffb}}]}, 0x28}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9)
shutdown(r4, 0x1)
write$tun(r3, &(0x7f0000000000)={@void, @val={0x2, 0x1, 0x101, 0x2, 0x2, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast2}}, 0x26)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000ffff269d7800fddbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x400c0)

1.082048421s ago: executing program 4 (id=1163):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3b00000011"], 0x20)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x55, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b34715ec070050d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.080662667s ago: executing program 3 (id=1164):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000002280)="ed", 0x1}, {0x0}], 0x2}, 0x2000)
recvmmsg(r3, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, &(0x7f0000003480)=""/203, 0xcb}, 0x9}], 0x1, 0x40010110, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}, 0x24)

1.02537126s ago: executing program 4 (id=1165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

810.340255ms ago: executing program 2 (id=1166):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b}, 0x50) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, 0x0, 0x0) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000000)={0x2, 0xffffffffffffff7f, 0x1})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
socket$l2tp(0x2, 0x2, 0x73) (async)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000018000000006700000008003e"], 0x1c}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200000082bbd7000fcdbdf25820000fd000000001e00000008000100ffffffff08000200e0000001"], 0x2c}}, 0x81) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

809.814034ms ago: executing program 4 (id=1167):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0xfe, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x44, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'geneve1\x00'})

659.803755ms ago: executing program 1 (id=1168):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
unshare(0x8040480)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="05"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f0000000280)}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x38, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x38, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f0000001b40)={0x0, 0x1}, 0x8}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)="2705020059feff000600002fb96d", 0xe}], 0x1}, 0x890) (async)
sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)="2705020059feff000600002fb96d", 0xe}], 0x1}, 0x890)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x20000005) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x20000005)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x769, 0x0, 0x0, 0x0, 0x99e6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x4, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001bc0)=[r3, r3, r3, r2], &(0x7f0000001c00)=[{0x1, 0x3, 0xb, 0x1}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x2, 0x9, 0xc}, {0x2, 0x5, 0x5, 0xa}, {0x4, 0x4, 0xe, 0xb}, {0x2, 0x4, 0x4, 0x8}, {0x5, 0x1, 0x9, 0x7}, {0x4, 0x1, 0x3, 0x1}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x200}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

586.405415ms ago: executing program 2 (id=1169):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @broadcast}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390426bd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d00ff07000008000300e00000010800010058aa7b"], 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040)
splice(r2, 0x0, r3, 0x0, 0x6, 0x0) (async)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x907, 0x9, 0x9, 0x4000, 0xffffffffffffffff, 0xffffffff, '\x00', r1, r3, 0x2, 0x4, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90)

107.973761ms ago: executing program 3 (id=1170):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
unshare(0x20000400)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
write(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.909925ms ago: executing program 0 (id=1171):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001214010000f560e199e00000000000000008004b001300000008000300000000000800010000000000"], 0x28}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = getpid()
r2 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000780)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0ccca7b31f488f5c91423f9973840ed68ad7db6ae203c8710ab16e7b7e7520c605595a12b5a0ed477c7b117b603afb7f500042d42164f921f038938bfcc7e13c8a9e65eba5e73a32219a8bd519ebd9f06e784a59c5d87217e2f99752f27762140f04d7a2e", 0x90}, {&(0x7f00000002c0)="9bf90ffad6256eb22875ac98fdd367bab7665b5e1f358ddf60f7d7f59ffb121076b7eaa8cccf", 0x26}, {&(0x7f0000000300)="b011d862636f56ed22209d89529858f2d9fd13f4e81035bfab48b5ebbde82c8f2d3bcd33f2c4f357b359a33794e6f7a21648a2f5f80ab596c6ecadd62ad333e3269af588d1ffc43211a8b508a07315010d6f3c844ff26074e48ab991a306009ab5cd446e7e70250d8dc138c6c0b69c21f18095d5670c7ab79a8c39b72ad1ac87824bae12d9ce6572886438d2278e51c4b9840ebe3cc7d1677c0f4bb1ba5fd051a1ca68c80db7b1e950ab0d8d55f175b5a8181ea77f76f5d34c59cfba8c49c7b8d6d990f71c7cbaacd2dde67307b0dd81770c58a900609c09fa646886c30dabec48e7ad49635227f3bedea810ecd649b2", 0xf0}, {&(0x7f0000000400)="83bafab85dd3bdc1b34e5ac50cd7faa45dcd29204bc15bcfbe8c41023adc0de15acec469349014962ddf1127f4e9d8b8ee05332c166eff7fe772d56f4fc172f8ad24679d5547df9a9e53b2c7c857f8a43c1be068b75f6560737e832df058f61e159052baaacd218060cdf8e0da6080da1381c3d362424bffc9158bdddb91d1019b2b96d51bdb195be5b382861764e575fc2a4dc526524fb22874a9b77e98b63dc1797b3760d5f665e99eafe6fbbe7f15470cbcfe57e5c02d6cbcc8f74f50e701c392ed22b749c1e7c7cf", 0xca}, {&(0x7f0000000580)="3fe1ef4299cd0644bda3015117426307d67e2bcf252668d5a45524fee5fc5970cc15df1f03b1a5ffd02b3213bfa04d97a04f2c5620a1083230281674dd0231588284e73fdccb6baad2f926eabad77375c224b6837eabf836bdb1421b0b175e05f45f1eed89747e50efccab259c5f07db6e06e0e38c13ff26dcfca78ddd198e3e0fc13dae49098aff055cb3b1f36bfa04643a6d30e3e29e51d072bc62ad1d94557f33b7fbb0788287a8", 0xa9}, {&(0x7f0000000640)="c9e07db553caa1f43222d27df491d5fc6cdf3065e453e685ce34099e9bad06b9d20f0decf840b8efec566b92d6afa92110cceab21fbf0a211a9ab264e99d35597462d4aab357c8206714b6c709d8f91af947842dd27f8b1e1d17d9f2b41e59", 0x5f}], 0x6, &(0x7f0000001200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8890}}], 0x1, 0x4)
r4 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xffffffffffffff05)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r11, &(0x7f0000000280)=ANY=[@ANYRESOCT=r9, @ANYRESDEC=0x0, @ANYRES8=r10, @ANYRES8, @ANYRESHEX=r7], 0x33)
sendfile(r11, r10, 0x0, 0x10000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r13, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000800)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = getgid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="d504b0e048fba24bf370c3323d8a6e13d986368ee3174791b895925caa2ffa00333619ad86150be45c5a8dba0329680f8e748141f4241be8f155774e25bb6c29a1fd87d33f7366900a7cc77f4182e27fd42279f5de39c655e0c928dc60715de9dc1be69e3048f12ead23b7f4139516ab16722383d5e435ac70682f7696a92378aa3553b3e6ad9a29afbd9e8c4ab5cd1aca9e2bb42d13f0fbd4ebce265aad81e10047169e25869a7309f7", 0xaa}, {&(0x7f00000010c0)="f4f5cde668756bdca46c44f343154aa3dce08e187fd7a9e3cd54dce7b7097a83c33f66187c832e4fb585dea51b527fc9559683fec695199ca6d8", 0x3a}, {&(0x7f0000001100)="bf941fc5a0875148f1d44e84b05b4dae401e3d7064673db8b7664013af51247f8e72b190ebd6899b7351a03b0affe93a37febf030b0cd7fbba9c9a0d49a5360fc929aa73073a74f99a1b9475cea316f49b3d265760c752d2257ea746f10699eb4cd27ab9bc251a9fbe1a89334afece37c1b7f35d9b5c5a455e71c9786ff018761e0e46fbdb73984de2f9f2647680006f09984ce0c963d8881d6e6f1c5461dcbe34e858bc8b082d24bd5711", 0xab}], 0x3, &(0x7f0000001400)=[@rights={{0x1c, 0x1, 0x1, [r11, r14, r7]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x30, 0x1, 0x1, [r8, r6, r10, r14, r10, 0xffffffffffffffff, r12, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}], 0xc8, 0xc001}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)="454379f4af", 0x5}, {&(0x7f0000001540)="b6bf36cbea2eb37dd0170d56562049a6437cfadae0df46cc9a3a18df21fc4aa1b0cefc947f4988a5b3a6411b84e302db26d0e0ab13c9596cedc3f125c6046dad31412a2f0b48d7791e8447175c2274582ba720b11693dfaf9faf9b2dc9ef5357ee6a280b61794e1175f02ba49095b368cf639fa33c9a73bc615d9d851cb008faaf5af37188f565a040651cf79a91e03f1452d1eb69c9c7e363ea5abf0ba61a6981c8e79a7d7479137cf32d503b183a040b5dfbf609d60b561502682bcdc4f606472a7035c7781c7b55308df9809cbd0f5e47ef9f8392382683c3", 0xda}, {&(0x7f0000001640)="38673609d1562bd6aff74a0a419c6ef1a99baf0cce07824612df144eb1ccb6cd1f29272e941836c378cbb9e85a2d6bd084bc256dbfcd3d9cb733198cfeb57db6d3fac2e8219c8fe6c1be7c8dea9281275d2261fea43f1d", 0x57}, {&(0x7f00000016c0)="f3c98582fcbc2e5f9ca469160f3bae51dde04899b3e163074ec28bfbd95821eec2a69ddc9d9c9fed38dc49275f71cad7647c45ac6ea4083e81b4d1093fbaa804395af4c2dade2df68bd16fd817234a503057717625f07e944159a4895d34166c8fe379c6bbd95eaec61c9e8061ba376db87fc6b652f8f5055c6b44b286d46a785366a39f15a50dcf97e55ae748eff410c3fad207694021c20c95f5e66b095d5368b2d51cfe758a65b137c51e8e9d279dbf53646da04d8bc19ffd53476fd9915aff852600c8ee77dcc294483e2ec0e52800e82210432193ba3a3475c072375590cfafdd38f7df9ee21edb0649", 0xec}], 0x4, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [r9, r12, r6]}}], 0x20, 0x44}}], 0x2, 0x40004)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000e40)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0, <r17=>0x0}, &(0x7f0000000ec0)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)=[{&(0x7f00000002c0)={0x57c, 0x1e, 0x400, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x75, 0x0, 0x0, @uid}, @nested={0xfc, 0x130, 0x0, 0x1, [@typed={0x9d, 0x130, 0x0, 0x0, @binary="2076497d7a83e88614b22face7705a21d818aaf326c10d89dd091850edd4ece61caa90a7d62953b96ad74c35db66e7c60eb234e6be988b31fdd341e1dd17aaa9618ad9932c8af7184e8f24e38c137728ed5aca93b59c5156dbafe2b4b2c243ea990e7dc72b51a10509dc128d87bdb4107024aa7b4fa90accdcb9c6f25976219db53344901a335f42c58a0a723defb7b791de87d6d0e54ca583"}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@remote}, @generic="bbf138491cd39200f5b2b13cde02805f49067f6fa60a2ab3b5ade54baabf36479d306e4302a04cb7408e0c40ff9bac34d6ca52073dc7d20a4e60ae516b9dd279af5af81c"]}, @nested={0x301, 0x54, 0x0, 0x1, [@typed={0xeb, 0xb7, 0x0, 0x0, @binary="1cad9af1ef26905150ff2a91c7ad67e39be4e27206c2a205353d71b39ca94a3c3ee7aa2e267a18f3721bf164702775292eb3adc5273271e7f3436c40040683bc0ae601fc1b765606d3b3471bfa5b69cc5d729c506f03326b57505095ee8155b07832d415e6f47fe25ceeb3c0755e775d9224f2682cd3053316945068c7c9f223ceeead06c02f74d93fac4d2c854070e3ce755bd589046a3b2cbba939f0a710b3bc7af096c2e4332faa8d51c2ee3b2832acbfc972a06306e16309a107e03ae4c83fed875f91ef6d46804eb2743c6c08511fc0d2a3efd53896fdd33c44ea7a408a8418900c1570aa"}, @generic="5a5c7ead6af2b2097ebb31555cbf33d455b9878959fa3698f70a96605ad568f9a774686d3c5384d694867079d19ae35f9a7690a300c652f8c152a6beecf995e19cc80fb0f5f235c6404be73c4304e313bc14883bb53cc254280c9db7a22f95482c6e1456214fee953ceca0834e3630a20f0e987945e3f771481bdd5f7e125e1fcb8a6d016507c1fc039f0f8a3317067adf35c4926d8ad92e3b863a19d52d", @generic="9d3404ac0558af22b94d6d6c374545d3cf94c75b88d3fe775f34cfe257fa90cb56f2676e3d33805bf3b1f6d5def2c7f8183bbf347c7d821088b15db2b2acd3bcf3abbb9863a9fd4623b1d69a8211b702f713c45cb0895a80b4c06dceb888ea6e6badf3499ac4e13fa5350bef0de430fbddff9828aeada442c8d705e75db5e58691988a09b9443d1866b1a18a0d8b16dff21f28a383f0b544d78910c688db716cda752b50349c1c4ac98f6e90f747f58fee34ac826ea28fbf5d9ad65acef1895ad2a5519984", @generic="b40745f65154962b148ac2f0133f14268d3d9fade0fedd09f3a97d5bb8e9ba144e501bd032ae076908c954ab942d3c15f7112b7c98882eef0964774033b20ba023797d861531e21c82a71a06a921ce06298d01b48831a1aea02d0763abf8d630e3b7851f77467ce57bcf253c842428003e509faa9654513f55ab5fb19ca85188449e46ad1a7a75c6e0c2", @typed={0x14, 0x12d, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xbe}, @nested={0x4, 0xb0}, @typed={0x8, 0x140, 0x0, 0x0, @uid}]}, @generic="4fd18511694a33aa5ee70053fe4af81e3011e0fa4772c6eedbd55d4d0b7356b2f65f8ebc5d4a0dc78c138de13996a2520e9b9e9e3478204bf1b2f7968da24643e25cff4cd01dc9f02114611b5f4bfb0b9481c61575e9d39b97070e3a914098539a97a943adb0aa0cba0d3d1466134bd078b8be47e15a6e87fd33552f5fab4542774419b40387da183dda1cad1b5d5e5031d8c96af43e5dbba6acdb38e42a41af471972ea5b1d41f10e4235977d961206527d342cfe8028c710c884b7b110338603e819ea8bcbe4d8c25d", @generic="b34012fae46e9fc04f4691bf8dce956a0cda21bcad2111f331b1ecf88bc3d311997486ed899665175fb99cc66525a14f79f53895edbe3bdf1c5f9a5c81de9353c2fae2750a69e8ba6791565b35818265b54def32f56e9083a1f37bae49a416d5f5e1c15fe9a829803f89b3fd98039bc66a917f52a6c44d4cd8bbe822f69a544b7329d7db6c66b8900d35", @typed={0x8, 0x10c, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x70, 0x0, 0x0, @pid}]}, 0x57c}, {&(0x7f0000000840)={0x48, 0x35, 0x422, 0x70bd25, 0x25dfdbfe, "", [@generic="c2343459c4752ad315318f422913674585ff1acfa729c85a3a961fd93b441c3fdf003ceb7b294c9c966b07523fe488a56cd0c2ba15ea"]}, 0x48}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r15}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16, r17}}}], 0x120, 0x4000080}, 0x8c0)

0s ago: executing program 3 (id=1172):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async, rerun: 32)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000f3ff0000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES32=0x0, @ANYBLOB="000000002f1c06"], 0x28}}, 0x0) (async, rerun: 64)
close(0x3) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts.
[   88.989259][ T5609] cgroup: Unknown subsys name 'net'
[   89.101341][ T5609] cgroup: Unknown subsys name 'cpuset'
[   89.110646][ T5609] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.889574][ T5609] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.059089][   T10] cfg80211: failed to load regulatory.db
[   93.325011][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.333740][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.343799][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.351690][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.360338][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.367725][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.376300][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.384635][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.396174][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.406886][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.417776][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.427467][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.436426][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.449936][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.458034][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.467563][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.477348][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.485386][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.494988][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.504709][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.513440][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.514445][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.528889][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.542512][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.561589][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.416560][ T5634] Bluetooth: hci1: command tx timeout
[   95.472286][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.480861][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.490353][ T5628] bridge_slave_0: entered allmulticast mode
[   95.496599][ T5634] Bluetooth: hci0: command tx timeout
[   95.503823][ T5628] bridge_slave_0: entered promiscuous mode
[   95.537492][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.545296][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.552743][ T5628] bridge_slave_1: entered allmulticast mode
[   95.560400][ T5628] bridge_slave_1: entered promiscuous mode
[   95.576628][ T5634] Bluetooth: hci2: command tx timeout
[   95.655908][ T5634] Bluetooth: hci3: command tx timeout
[   95.656316][ T4938] Bluetooth: hci4: command tx timeout
[   95.670858][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.678227][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.685715][ T5633] bridge_slave_0: entered allmulticast mode
[   95.693239][ T5633] bridge_slave_0: entered promiscuous mode
[   95.737365][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.744852][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.752472][ T5633] bridge_slave_1: entered allmulticast mode
[   95.759963][ T5633] bridge_slave_1: entered promiscuous mode
[   95.778511][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.843298][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.862313][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.870906][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.878587][ T5627] bridge_slave_0: entered allmulticast mode
[   95.886111][ T5627] bridge_slave_0: entered promiscuous mode
[   95.938577][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.946137][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.953605][ T5627] bridge_slave_1: entered allmulticast mode
[   95.961352][ T5627] bridge_slave_1: entered promiscuous mode
[   95.970952][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.032445][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.055450][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.063864][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.071612][ T5635] bridge_slave_0: entered allmulticast mode
[   96.079363][ T5635] bridge_slave_0: entered promiscuous mode
[   96.089584][ T5628] team0: Port device team_slave_0 added
[   96.130510][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.138594][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.146230][ T5635] bridge_slave_1: entered allmulticast mode
[   96.154120][ T5635] bridge_slave_1: entered promiscuous mode
[   96.163739][ T5628] team0: Port device team_slave_1 added
[   96.169669][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.177303][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.184536][ T5636] bridge_slave_0: entered allmulticast mode
[   96.192582][ T5636] bridge_slave_0: entered promiscuous mode
[   96.203159][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.214608][ T5633] team0: Port device team_slave_0 added
[   96.244633][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.252059][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.259766][ T5636] bridge_slave_1: entered allmulticast mode
[   96.267490][ T5636] bridge_slave_1: entered promiscuous mode
[   96.276920][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.288670][ T5633] team0: Port device team_slave_1 added
[   96.358729][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.369719][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.377814][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.404726][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.453796][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.463775][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.471011][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.497452][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.511926][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.523514][ T5627] team0: Port device team_slave_0 added
[   96.530336][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.537627][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.563884][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.597532][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.609123][ T5627] team0: Port device team_slave_1 added
[   96.616442][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.623507][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.649966][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.677553][ T5635] team0: Port device team_slave_0 added
[   96.687467][ T5635] team0: Port device team_slave_1 added
[   96.797405][ T5636] team0: Port device team_slave_0 added
[   96.804087][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.811132][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.837427][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.867809][ T5628] hsr_slave_0: entered promiscuous mode
[   96.875197][ T5628] hsr_slave_1: entered promiscuous mode
[   96.882992][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.890509][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.916701][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.930021][ T5636] team0: Port device team_slave_1 added
[   96.937197][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.944477][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.971069][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.000597][ T5633] hsr_slave_0: entered promiscuous mode
[   97.008962][ T5633] hsr_slave_1: entered promiscuous mode
[   97.015192][ T5633] debugfs: 'hsr0' already exists in 'hsr'
[   97.021822][ T5633] Cannot create hsr debugfs directory
[   97.028601][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.035738][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.062098][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.157824][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.164936][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.191998][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.245234][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.252420][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.279054][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.341777][ T5627] hsr_slave_0: entered promiscuous mode
[   97.348845][ T5627] hsr_slave_1: entered promiscuous mode
[   97.355231][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   97.361316][ T5627] Cannot create hsr debugfs directory
[   97.429263][ T5635] hsr_slave_0: entered promiscuous mode
[   97.436054][ T5635] hsr_slave_1: entered promiscuous mode
[   97.442385][ T5635] debugfs: 'hsr0' already exists in 'hsr'
[   97.448544][ T5635] Cannot create hsr debugfs directory
[   97.497404][ T4938] Bluetooth: hci1: command tx timeout
[   97.576162][ T4938] Bluetooth: hci0: command tx timeout
[   97.593139][ T5636] hsr_slave_0: entered promiscuous mode
[   97.600284][ T5636] hsr_slave_1: entered promiscuous mode
[   97.606741][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   97.613025][ T5636] Cannot create hsr debugfs directory
[   97.655784][ T4938] Bluetooth: hci2: command tx timeout
[   97.736643][ T4938] Bluetooth: hci3: command tx timeout
[   97.736653][ T5634] Bluetooth: hci4: command tx timeout
[   98.040968][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.054613][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.063734][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.076797][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.100613][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.112144][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.120507][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.132335][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.239215][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.251256][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.260141][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.274042][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.283622][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.295023][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.306437][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.319553][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.417889][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.429536][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.439960][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.450632][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.468563][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.480341][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.491006][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.506599][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.620314][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.633683][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.644537][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.655103][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.663591][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.673599][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.695464][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.706807][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.787464][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.850252][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.861560][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.883272][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.893430][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.902492][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.914072][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.923975][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.937190][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.980579][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.989898][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   99.032635][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.040556][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.080881][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.094072][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.101295][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.129582][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   99.187667][ T5635] 8021q: adding VLAN 0 to HW filter on device team0
[   99.198508][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.205803][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.234230][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.241441][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.269632][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.277019][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.308311][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.315853][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.381547][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.444830][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.474971][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   99.501821][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.509179][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.557606][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.565419][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.578967][ T4938] Bluetooth: hci1: command tx timeout
[   99.625345][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[   99.657548][ T4938] Bluetooth: hci0: command tx timeout
[   99.676605][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.684001][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.746343][ T4938] Bluetooth: hci2: command tx timeout
[   99.774091][  T640] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.781487][  T640] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.816915][ T4938] Bluetooth: hci4: command tx timeout
[   99.817623][ T5634] Bluetooth: hci3: command tx timeout
[  100.721413][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.924969][ T5633] veth0_vlan: entered promiscuous mode
[  100.953840][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.981058][ T5633] veth1_vlan: entered promiscuous mode
[  101.036353][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.218409][ T5633] veth0_macvtap: entered promiscuous mode
[  101.263992][ T5633] veth1_macvtap: entered promiscuous mode
[  101.320340][ T5635] veth0_vlan: entered promiscuous mode
[  101.356349][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.379072][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.400117][ T5635] veth1_vlan: entered promiscuous mode
[  101.419262][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.447151][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.565915][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.598583][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.635982][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.656354][ T5634] Bluetooth: hci1: command tx timeout
[  101.682684][ T5627] veth0_vlan: entered promiscuous mode
[  101.710720][ T5635] veth0_macvtap: entered promiscuous mode
[  101.736732][ T5634] Bluetooth: hci0: command tx timeout
[  101.750352][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.761091][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.784456][ T5635] veth1_macvtap: entered promiscuous mode
[  101.801213][ T5627] veth1_vlan: entered promiscuous mode
[  101.810375][ T5636] veth0_vlan: entered promiscuous mode
[  101.825704][ T5634] Bluetooth: hci2: command tx timeout
[  101.864950][ T5628] veth0_vlan: entered promiscuous mode
[  101.891003][ T5636] veth1_vlan: entered promiscuous mode
[  101.899509][ T5634] Bluetooth: hci3: command tx timeout
[  101.907088][ T5634] Bluetooth: hci4: command tx timeout
[  101.919241][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.924168][ T5628] veth1_vlan: entered promiscuous mode
[  101.930911][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.943420][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.985358][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.034513][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  102.068410][ T5627] veth0_macvtap: entered promiscuous mode
[  102.128115][ T5627] veth1_macvtap: entered promiscuous mode
[  102.199264][ T5636] veth0_macvtap: entered promiscuous mode
[  102.248374][ T5636] veth1_macvtap: entered promiscuous mode
[  102.272652][ T5628] veth0_macvtap: entered promiscuous mode
[  102.308914][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.324164][ T5628] veth1_macvtap: entered promiscuous mode
[  102.345711][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.360341][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.402214][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.413399][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.426808][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.460406][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.505173][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.552718][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.567229][ T3266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.597530][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.629762][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[  102.639553][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.643255][ T5820] netlink: 'syz.2.8': attribute type 2 has an invalid length.
[  102.648066][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.655846][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[  102.659344][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.807253][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.966335][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.021268][ T5829] Zero length message leads to an empty skb
[  103.029935][   T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.123321][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.142151][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.177024][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.237782][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.246478][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.259627][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.309208][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.317867][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.331161][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.337974][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.380398][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.397141][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.406898][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.514059][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.537569][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.579169][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.602699][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.626863][   T94] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.650302][   T94] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.690194][   T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.701458][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.717766][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.729205][   T94] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.931523][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.946659][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.989156][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.012010][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.124340][ T5847] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET)
[  104.142459][ T5848] netlink: 'syz.2.14': attribute type 4 has an invalid length.
[  104.189446][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[  104.200216][ T5851] netlink: 'syz.2.14': attribute type 4 has an invalid length.
[  104.217341][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.337329][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.524936][   T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.819756][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.973537][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[  105.027496][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[  105.148987][ T5882] Cannot find add_set index 0 as target
[  105.257856][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.743888][ T5892] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.767871][ T5914] netlink: 'syz.4.27': attribute type 4 has an invalid length.
[  105.782394][ T5892] bridge0: port 3(bond1) entered blocking state
[  105.803689][ T5892] bridge0: port 3(bond1) entered disabled state
[  105.820075][ T5892] bond1: entered allmulticast mode
[  105.844209][ T5892] bond1: entered promiscuous mode
[  105.854368][ T5916] netlink: 'syz.4.27': attribute type 4 has an invalid length.
[  105.865066][ T5892] bridge0: port 3(bond1) entered blocking state
[  105.872578][ T5892] bridge0: port 3(bond1) entered forwarding state
[  105.885823][   T94] bridge0: port 3(bond1) entered disabled state
[  105.958632][ T5918] veth1_to_bond: entered allmulticast mode
[  105.988463][ T5918] veth1_to_bond: entered promiscuous mode
[  106.016409][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[  106.112831][ T5918] veth1_to_bond (unregistering): left allmulticast mode
[  106.141378][ T5918] veth1_to_bond (unregistering): left promiscuous mode
[  106.206416][ T5918] bond0: (slave bond_slave_1): Releasing backup interface
[  106.990428][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[  107.043128][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[  107.152761][ T5973] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004
[  107.511978][ T5981] netlink: 'syz.2.42': attribute type 4 has an invalid length.
[  107.549227][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'.
[  107.563974][ T5989] netlink: 'syz.2.42': attribute type 4 has an invalid length.
[  107.826595][ T5996] PKCS7: Unknown OID: [4] (bad)
[  107.843009][ T5996] PKCS7: Only support pkcs7_signedData type
[  107.883708][ T6001] Bluetooth: MGMT ver 1.23
[  107.961012][ T6001] netlink: 'syz.0.45': attribute type 12 has an invalid length.
[  108.145260][ T5978] syz.3.40 (5978) used greatest stack depth: 15968 bytes left
[  108.304753][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'.
[  108.458355][ T5810] net_ratelimit: 15 callbacks suppressed
[  108.458377][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.575876][ T5996] tipc: Enabling of bearer <eth:syzkaller0
> rejected, failed to enable media
[  108.764443][ T6009] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  108.798885][ T6009] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  108.864397][ T6009] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  108.920100][ T6028] FAULT_INJECTION: forcing a failure.
[  108.920100][ T6028] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  108.942832][ T6009] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.957888][ T6026] tipc: Started in network mode
[  108.974128][ T6009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  108.987748][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.4.49 Not tainted syzkaller #0 PREEMPT(full) 
[  108.987786][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.987807][ T6028] Call Trace:
[  108.987815][ T6028]  <TASK>
[  108.987824][ T6028]  dump_stack_lvl+0xe8/0x150
[  108.987871][ T6028]  should_fail_ex+0x40c/0x560
[  108.987904][ T6028]  _copy_from_user+0x2d/0xb0
[  108.987926][ T6028]  ___sys_recvmsg+0x173/0x5a0
[  108.987962][ T6028]  ? __pfx____sys_recvmsg+0x10/0x10
[  108.987996][ T6028]  ? __fget_files+0x2a/0x420
[  108.988045][ T6028]  ? __fget_files+0x3a2/0x420
[  108.988090][ T6028]  __x64_sys_recvmsg+0x1ae/0x290
[  108.988122][ T6028]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  108.988170][ T6028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.988193][ T6028]  do_syscall_64+0x174/0x580
[  108.988225][ T6028]  ? clear_bhb_loop+0x40/0x90
[  108.988252][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.988273][ T6028] RIP: 0033:0x7fa7a899e0d9
[  108.988307][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.988325][ T6028] RSP: 002b:00007fa7a9924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  108.988347][ T6028] RAX: ffffffffffffffda RBX: 00007fa7a8c25fa0 RCX: 00007fa7a899e0d9
[  108.988362][ T6028] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  108.988374][ T6028] RBP: 00007fa7a9924090 R08: 0000000000000000 R09: 0000000000000000
[  108.988386][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.988398][ T6028] R13: 00007fa7a8c26038 R14: 00007fa7a8c25fa0 R15: 00007ffe8f7d1938
[  108.988430][ T6028]  </TASK>
[  108.990511][ T6026] tipc: Node identity ac14140f, cluster identity 4711
[  109.193364][ T6026] tipc: New replicast peer: 255.255.255.255
[  109.228208][ T6026] tipc: Enabled bearer <udp:syz2>, priority 10
[  109.334527][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.51'.
[  109.350456][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.51'.
[  109.490515][   T94] smbdirect: ib_dev[syz2] removed
[  109.496485][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.630420][ T6045] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[  109.777215][ T6049] netlink: 'syz.3.56': attribute type 4 has an invalid length.
[  109.829299][ T6052] netlink: 'syz.3.56': attribute type 4 has an invalid length.
[  110.090681][ T6058] FAULT_INJECTION: forcing a failure.
[  110.090681][ T6058] name failslab, interval 1, probability 0, space 0, times 1
[  110.144614][ T6058] CPU: 0 UID: 0 PID: 6058 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) 
[  110.144644][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.144657][ T6058] Call Trace:
[  110.144665][ T6058]  <TASK>
[  110.144675][ T6058]  dump_stack_lvl+0xe8/0x150
[  110.144713][ T6058]  should_fail_ex+0x40c/0x560
[  110.144752][ T6058]  should_failslab+0xa8/0x100
[  110.144787][ T6058]  __kmalloc_noprof+0xfe/0x720
[  110.144814][ T6058]  ? lock_sock_nested+0x6a/0x100
[  110.144836][ T6058]  ? sock_kmalloc+0xd6/0x160
[  110.144862][ T6058]  ? sock_kmalloc+0xd6/0x160
[  110.144896][ T6058]  sock_kmalloc+0xd6/0x160
[  110.144927][ T6058]  af_alg_alloc_areq+0x8c/0x200
[  110.144958][ T6058]  aead_recvmsg+0x465/0xd10
[  110.145001][ T6058]  ? __pfx_aa_sk_perm+0x10/0x10
[  110.145027][ T6058]  ? __pfx_aead_recvmsg+0x10/0x10
[  110.145057][ T6058]  ? __lock_acquire+0x683/0x2cf0
[  110.145087][ T6058]  ? aa_sock_msg_perm+0xf1/0x1b0
[  110.145112][ T6058]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  110.145135][ T6058]  ? security_socket_recvmsg+0x7e/0x2c0
[  110.145164][ T6058]  ? __pfx_aead_recvmsg+0x10/0x10
[  110.145196][ T6058]  sock_recvmsg+0x196/0x1e0
[  110.145234][ T6058]  ____sys_recvmsg+0x1e6/0x4a0
[  110.145273][ T6058]  ? __pfx_____sys_recvmsg+0x10/0x10
[  110.145320][ T6058]  ? import_iovec+0x73/0xa0
[  110.145346][ T6058]  ___sys_recvmsg+0x213/0x5a0
[  110.145381][ T6058]  ? __pfx____sys_recvmsg+0x10/0x10
[  110.145415][ T6058]  ? __fget_files+0x2a/0x420
[  110.145466][ T6058]  ? __fget_files+0x3a2/0x420
[  110.145511][ T6058]  __x64_sys_recvmsg+0x1ae/0x290
[  110.145615][ T6058]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  110.145664][ T6058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.145688][ T6058]  do_syscall_64+0x174/0x580
[  110.145716][ T6058]  ? trace_irq_disable+0x3b/0x140
[  110.145744][ T6058]  ? clear_bhb_loop+0x40/0x90
[  110.145769][ T6058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.145791][ T6058] RIP: 0033:0x7f2d5199e0d9
[  110.145811][ T6058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.145829][ T6058] RSP: 002b:00007f2d52855028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  110.145852][ T6058] RAX: ffffffffffffffda RBX: 00007f2d51c25fa0 RCX: 00007f2d5199e0d9
[  110.145868][ T6058] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  110.145881][ T6058] RBP: 00007f2d52855090 R08: 0000000000000000 R09: 0000000000000000
[  110.145893][ T6058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.145905][ T6058] R13: 00007f2d51c26038 R14: 00007f2d51c25fa0 R15: 00007ffe7c88faf8
[  110.145940][ T6058]  </TASK>
[  110.415292][ T5810] tipc: Node number set to 2886997007
[  110.617702][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.641370][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.684130][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'.
[  110.889477][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'.
[  110.938596][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.077430][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'.
[  111.486386][ T6097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.660927][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.722579][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[  111.743440][ T6104] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.70'.
[  111.772372][ T6104] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.70'.
[  111.805476][ T6104] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.70'.
[  112.014698][ T6110] x_tables: unsorted entry at hook 4
[  112.248208][ T6116] FAULT_INJECTION: forcing a failure.
[  112.248208][ T6116] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  112.297682][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) 
[  112.297713][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.297725][ T6116] Call Trace:
[  112.297734][ T6116]  <TASK>
[  112.297743][ T6116]  dump_stack_lvl+0xe8/0x150
[  112.297781][ T6116]  should_fail_ex+0x40c/0x560
[  112.297815][ T6116]  prepare_alloc_pages+0x230/0x650
[  112.297856][ T6116]  __alloc_frozen_pages_noprof+0x12f/0x380
[  112.297893][ T6116]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  112.297929][ T6116]  ? __pfx_policy_nodemask+0x10/0x10
[  112.297974][ T6116]  alloc_pages_mpol+0x212/0x380
[  112.298018][ T6116]  folio_alloc_mpol_noprof+0x39/0x160
[  112.298054][ T6116]  vma_alloc_folio_noprof+0xe1/0x1e0
[  112.298091][ T6116]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  112.298138][ T6116]  do_wp_page+0x1163/0x4c70
[  112.298183][ T6116]  ? __pfx_do_wp_page+0x10/0x10
[  112.298204][ T6116]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.298233][ T6116]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.298271][ T6116]  handle_mm_fault+0x1490/0x3080
[  112.298319][ T6116]  ? handle_mm_fault+0xec/0x3080
[  112.298354][ T6116]  ? __pfx_handle_mm_fault+0x10/0x10
[  112.298380][ T6116]  ? follow_page_pte+0xbd0/0xe70
[  112.298416][ T6116]  ? __pfx_follow_page_pte+0x10/0x10
[  112.298455][ T6116]  __get_user_pages+0x1678/0x2720
[  112.298516][ T6116]  __gup_longterm_locked+0xd52/0x15c0
[  112.298544][ T6116]  ? lock_acquire+0x106/0x350
[  112.298582][ T6116]  ? sanity_check_pinned_pages+0x810/0x8d0
[  112.298613][ T6116]  gup_fast_fallback+0x1d8c/0x20e0
[  112.298671][ T6116]  ? __pfx_gup_fast_fallback+0x10/0x10
[  112.298694][ T6116]  ? __kmalloc_noprof+0x1ad/0x720
[  112.298721][ T6116]  ? is_valid_gup_args+0x11f/0x200
[  112.298747][ T6116]  ? pin_user_pages_fast+0x4d/0xb0
[  112.298773][ T6116]  iov_iter_extract_pages+0x3a1/0x690
[  112.298806][ T6116]  extract_iter_to_sg+0xeda/0x2610
[  112.298855][ T6116]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  112.298893][ T6116]  ? rcu_is_watching+0x15/0xb0
[  112.298916][ T6116]  ? trace_kmalloc+0x2a/0xf0
[  112.298947][ T6116]  ? __asan_memset+0x22/0x50
[  112.298977][ T6116]  af_alg_get_rsgl+0x493/0x8d0
[  112.299025][ T6116]  aead_recvmsg+0x51d/0xd10
[  112.299070][ T6116]  ? __pfx_aa_sk_perm+0x10/0x10
[  112.299097][ T6116]  ? __pfx_aead_recvmsg+0x10/0x10
[  112.299126][ T6116]  ? __lock_acquire+0x683/0x2cf0
[  112.299156][ T6116]  ? aa_sock_msg_perm+0xf1/0x1b0
[  112.299182][ T6116]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  112.299205][ T6116]  ? security_socket_recvmsg+0x7e/0x2c0
[  112.299234][ T6116]  ? __pfx_aead_recvmsg+0x10/0x10
[  112.299267][ T6116]  sock_recvmsg+0x196/0x1e0
[  112.299307][ T6116]  ____sys_recvmsg+0x1e6/0x4a0
[  112.299361][ T6116]  ? __pfx_____sys_recvmsg+0x10/0x10
[  112.299409][ T6116]  ? import_iovec+0x73/0xa0
[  112.299435][ T6116]  ___sys_recvmsg+0x213/0x5a0
[  112.299471][ T6116]  ? __pfx____sys_recvmsg+0x10/0x10
[  112.299505][ T6116]  ? __fget_files+0x2a/0x420
[  112.299555][ T6116]  ? __fget_files+0x3a2/0x420
[  112.299597][ T6116]  __x64_sys_recvmsg+0x1ae/0x290
[  112.299630][ T6116]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  112.299680][ T6116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.299705][ T6116]  do_syscall_64+0x174/0x580
[  112.299734][ T6116]  ? trace_irq_disable+0x3b/0x140
[  112.299763][ T6116]  ? clear_bhb_loop+0x40/0x90
[  112.299790][ T6116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.299819][ T6116] RIP: 0033:0x7f2d5199e0d9
[  112.299839][ T6116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.299857][ T6116] RSP: 002b:00007f2d52855028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  112.299880][ T6116] RAX: ffffffffffffffda RBX: 00007f2d51c25fa0 RCX: 00007f2d5199e0d9
[  112.299895][ T6116] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  112.299908][ T6116] RBP: 00007f2d52855090 R08: 0000000000000000 R09: 0000000000000000
[  112.299920][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.299932][ T6116] R13: 00007f2d51c26038 R14: 00007f2d51c25fa0 R15: 00007ffe7c88faf8
[  112.299968][ T6116]  </TASK>
[  112.724785][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.923972][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.987067][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.556991][ T6141] Cannot find set identified by id 0 to match
[  113.644603][ T6147] __nla_validate_parse: 3 callbacks suppressed
[  113.644622][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'.
[  113.762065][ T6152] 8021q: VLANs not supported on gre0
[  113.795956][ T6155] netlink: 'syz.4.83': attribute type 30 has an invalid length.
[  113.874902][ T6156] netlink: 'syz.0.84': attribute type 21 has an invalid length.
[  113.910613][ T6156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.84'.
[  113.977056][   T10] net_ratelimit: 6 callbacks suppressed
[  113.977076][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.991708][ T6156] netlink: 'syz.0.84': attribute type 4 has an invalid length.
[  114.055875][ T6156] netlink: 'syz.0.84': attribute type 5 has an invalid length.
[  114.121001][ T6156] netlink: 3 bytes leftover after parsing attributes in process `syz.0.84'.
[  114.166667][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[  114.215421][ T6168] openvswitch: netlink: Message has 1 unknown bytes.
[  114.299250][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.733435][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[  114.750597][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'.
[  114.795965][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[  114.815099][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'.
[  114.840735][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[  114.866140][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'.
[  115.007463][   T13] IPVS: starting estimator thread 0...
[  115.086365][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.143849][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.155658][ T6200] IPVS: using max 26 ests per chain, 62400 per kthread
[  115.351192][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.488968][ T6209] syzkaller0: entered promiscuous mode
[  115.516966][ T6209] syzkaller0: entered allmulticast mode
[  115.561617][ T6209] sctp: [Deprecated]: syz.4.96 (pid 6209) Use of int in max_burst socket option.
[  115.561617][ T6209] Use struct sctp_assoc_value instead
[  115.694569][ T6216] netlink: 'syz.1.98': attribute type 11 has an invalid length.
[  115.705153][ T6216] netlink: 'syz.1.98': attribute type 11 has an invalid length.
[  115.742984][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.788535][ T6221] sctp: [Deprecated]: syz.3.100 (pid 6221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.788535][ T6221] Use struct sctp_sack_info instead
[  115.823407][ T6216] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  116.183819][ T6235] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[  116.379482][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.387699][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.492956][ T6250] netlink: 'syz.3.112': attribute type 1 has an invalid length.
[  116.565814][ T6250] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.725824][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.614360][ T6295] syzkaller0: entered promiscuous mode
[  117.626895][ T6295] syzkaller0: entered allmulticast mode
[  117.653404][ T6298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.946089][ T6298] tipc: Resetting bearer <eth:syzkaller0>
[  118.081504][ T6290] tipc: Resetting bearer <eth:syzkaller0>
[  118.178311][ T6290] tipc: Disabling bearer <eth:syzkaller0>
[  118.493219][ T6333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.502240][ T6333] IPv6: NLM_F_CREATE should be set when creating new route
[  118.509877][ T6333] IPv6: NLM_F_CREATE should be set when creating new route
[  118.618351][ T6326] tipc: Started in network mode
[  118.638049][ T6326] tipc: Node identity ba54710d3f4c, cluster identity 4711
[  118.669465][ T6326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.693851][ T6326] syzkaller0: entered promiscuous mode
[  118.729422][ T6326] syzkaller0: entered allmulticast mode
[  118.770503][ T6326] tipc: Resetting bearer <eth:syzkaller0>
[  118.866898][ T6348] __nla_validate_parse: 11 callbacks suppressed
[  118.866922][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[  118.964734][ T6337] tipc: Resetting bearer <eth:syzkaller0>
[  119.008109][ T6337] tipc: Disabling bearer <eth:syzkaller0>
[  119.344066][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.404597][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.498641][  T810] net_ratelimit: 4 callbacks suppressed
[  119.498662][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.533702][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.851090][ T6382] pimreg: tun_chr_ioctl cmd 1074025688
[  119.866080][ T6379] pimreg: tun_chr_ioctl cmd 1074025677
[  119.879975][ T6379] pimreg: linktype set to 270
[  120.305130][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'.
[  120.540533][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.336740][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.579656][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.812681][ T6470] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  121.848873][ T6487] sctp: [Deprecated]: syz.1.153 (pid 6487) Use of int in maxseg socket option.
[  121.848873][ T6487] Use struct sctp_assoc_value instead
[  121.900734][   T29] audit: type=1804 audit(1785951062.059:2): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.152" name="/newroot/31/cgroup.controllers" dev="tmpfs" ino=181 res=1 errno=0
[  121.948267][ T6485] sctp: [Deprecated]: syz.1.153 (pid 6485) Use of int in maxseg socket option.
[  121.948267][ T6485] Use struct sctp_assoc_value instead
[  122.005748][   T29] audit: type=1800 audit(1785951062.059:3): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="cgroup.controllers" dev="tmpfs" ino=181 res=0 errno=0
[  122.570999][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.158'.
[  122.592721][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[  122.607347][ T6512] vxcan3: entered promiscuous mode
[  122.615855][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.628023][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[  122.852159][ T6519] ip_tables: iptables: counters copy to user failed while replacing table
[  123.659539][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.784343][ T6568] netlink: 120 bytes leftover after parsing attributes in process `syz.0.169'.
[  123.867041][ T6562] "syz.1.170" (6562) uses obsolete ecb(arc4) skcipher
[  124.377671][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.612914][ T6602] tipc: Started in network mode
[  124.634714][ T6602] tipc: Node identity , cluster identity 4711
[  124.673980][ T6602] tipc: Failed to obtain node identity
[  124.706071][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.718774][ T6602] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  124.802372][ T6617] netlink: 'syz.0.180': attribute type 49 has an invalid length.
[  124.830312][ T6618] netlink: 'syz.0.180': attribute type 49 has an invalid length.
[  125.203753][ T6629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  125.340010][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.740067][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.059931][   T29] audit: type=1800 audit(1785951066.219:4): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name=CB dev="tmpfs" ino=179 res=0 errno=0
[  126.186239][ T6671] netlink: 'syz.2.195': attribute type 2 has an invalid length.
[  126.341749][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.198'.
[  126.497824][ T6671] : entered promiscuous mode
[  126.519576][ T6689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.546682][ T6683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  126.574095][ T6671] block nbd0: not configured, cannot reconfigure
[  126.692995][ T6690] syzkaller0: entered promiscuous mode
[  126.700451][ T6690] syzkaller0: entered allmulticast mode
[  126.711739][ T6689] tipc: Resetting bearer <eth:syzkaller0>
[  126.769145][ T6682] tipc: Resetting bearer <eth:syzkaller0>
[  126.777757][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.867960][ T6682] tipc: Disabling bearer <eth:syzkaller0>
[  127.383198][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[  127.403641][ T6721] syzkaller0: entered promiscuous mode
[  127.423734][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.431933][ T6721] syzkaller0: entered allmulticast mode
[  127.444337][ T6721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.444805][ T6729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'.
[  127.467506][ T6721] wg0: mtu less than device minimum
[  127.482273][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[  127.539882][ T6720] tipc: Disabling bearer <eth:syzkaller0>
[  127.820071][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.016506][ T6752] netlink: 164 bytes leftover after parsing attributes in process `syz.2.212'.
[  128.857785][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.988362][ T6801] Cannot find add_set index 0 as target
[  129.040787][ T6801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.228'.
[  129.067553][ T6805] team0: Device xfrm0 is of different type
[  129.819548][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.906961][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.068961][ T6818] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[  130.110165][ T6818] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.223990][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[  130.461100][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.935955][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.739117][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.789562][ T6787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.987040][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.148007][ T6848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.240'.
[  132.216355][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.375983][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.596712][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.756838][ T6862] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  132.806459][ T6864] netlink: 13 bytes leftover after parsing attributes in process `syz.3.248'.
[  133.028042][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  133.036985][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  133.054258][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.197030][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[  133.677515][ T6911] netlink: 'syz.3.262': attribute type 10 has an invalid length.
[  133.781641][ T6921] netlink: 'syz.4.263': attribute type 6 has an invalid length.
[  133.957365][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[  133.992262][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'.
[  134.045199][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[  134.057454][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[  134.080996][ T6936] syzkaller0: entered promiscuous mode
[  134.107480][ T6936] syzkaller0: entered allmulticast mode
[  134.164179][ T6933] geneve2: entered promiscuous mode
[  134.180247][ T6933] geneve2: entered allmulticast mode
[  135.005253][ T6946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.101807][ T5718] net_ratelimit: 4 callbacks suppressed
[  135.101826][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.350270][ T6999] netlink: 'syz.0.282': attribute type 11 has an invalid length.
[  135.393754][ T6999] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[  135.428391][ T6999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.282'.
[  135.463250][ T6998] netlink: 'syz.0.282': attribute type 11 has an invalid length.
[  135.496169][ T6998] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[  135.520840][ T6998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.282'.
[  135.647816][ T7014] netlink: 'syz.4.284': attribute type 1 has an invalid length.
[  135.763313][ T7014] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.821350][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[  135.836588][ T7019] syzkaller0: entered promiscuous mode
[  135.852939][ T7019] syzkaller0: entered allmulticast mode
[  135.873324][ T7019] TC_ACT_REPEAT abuse ?
[  135.952304][ T7013] bond1: (slave veth3): Enslaving as an active interface with a down link
[  136.140910][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.175329][ T7030] netlink: 'syz.1.291': attribute type 10 has an invalid length.
[  136.194276][ T7005] vxcan3: left promiscuous mode
[  136.214074][ T7030] syz.1.291: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  136.240783][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) 
[  136.240813][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  136.240825][ T7030] Call Trace:
[  136.240834][ T7030]  <TASK>
[  136.240843][ T7030]  dump_stack_lvl+0xe8/0x150
[  136.240901][ T7030]  warn_alloc+0x24c/0x270
[  136.240933][ T7030]  ? stack_depot_save_flags+0x33/0x800
[  136.240964][ T7030]  ? __pfx_warn_alloc+0x10/0x10
[  136.240995][ T7030]  ? kasan_save_track+0x3e/0x80
[  136.241023][ T7030]  ? __kasan_kmalloc+0x93/0xb0
[  136.241056][ T7030]  ? xsk_setsockopt+0x52a/0x960
[  136.241081][ T7030]  ? do_sock_setsockopt+0x17c/0x1b0
[  136.241106][ T7030]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  136.241132][ T7030]  ? do_syscall_64+0x174/0x580
[  136.241161][ T7030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.241198][ T7030]  __vmalloc_node_range_noprof+0x12c/0x1730
[  136.241258][ T7030]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  136.241292][ T7030]  ? __kasan_kmalloc+0x93/0xb0
[  136.241324][ T7030]  ? __kmalloc_cache_noprof+0x32d/0x660
[  136.241354][ T7030]  ? __kmalloc_cache_noprof+0x150/0x660
[  136.241386][ T7030]  vmalloc_user_noprof+0xad/0xe0
[  136.241414][ T7030]  ? xskq_create+0xbf/0x170
[  136.241444][ T7030]  xskq_create+0xbf/0x170
[  136.241476][ T7030]  xsk_init_queue+0x8a/0xe0
[  136.241506][ T7030]  xsk_setsockopt+0x52a/0x960
[  136.241532][ T7030]  ? __fget_files+0x2a/0x420
[  136.241565][ T7030]  ? __pfx_xsk_setsockopt+0x10/0x10
[  136.241592][ T7030]  ? __pfx_aa_sk_perm+0x10/0x10
[  136.241619][ T7030]  ? aa_sock_opt_perm+0xff/0x1a0
[  136.241647][ T7030]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  136.241671][ T7030]  ? __pfx_xsk_setsockopt+0x10/0x10
[  136.241700][ T7030]  do_sock_setsockopt+0x17c/0x1b0
[  136.241732][ T7030]  __x64_sys_setsockopt+0x13d/0x1b0
[  136.241761][ T7030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.241785][ T7030]  do_syscall_64+0x174/0x580
[  136.241815][ T7030]  ? trace_irq_disable+0x3b/0x140
[  136.241842][ T7030]  ? clear_bhb_loop+0x40/0x90
[  136.241874][ T7030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.241894][ T7030] RIP: 0033:0x7f2d5199e0d9
[  136.241923][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.241942][ T7030] RSP: 002b:00007f2d52855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  136.241964][ T7030] RAX: ffffffffffffffda RBX: 00007f2d51c25fa0 RCX: 00007f2d5199e0d9
[  136.241980][ T7030] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  136.241992][ T7030] RBP: 00007f2d51a35024 R08: 0000000000000004 R09: 0000000000000000
[  136.242005][ T7030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.242018][ T7030] R13: 00007f2d51c26038 R14: 00007f2d51c25fa0 R15: 00007ffe7c88faf8
[  136.242053][ T7030]  </TASK>
[  136.242212][ T7030] Mem-Info:
[  136.529180][ T7030] active_anon:5670 inactive_anon:0 isolated_anon:0
[  136.529180][ T7030]  active_file:0 inactive_file:43052 isolated_file:0
[  136.529180][ T7030]  unevictable:768 dirty:171 writeback:0
[  136.529180][ T7030]  slab_reclaimable:10305 slab_unreclaimable:94671
[  136.529180][ T7030]  mapped:30726 shmem:1288 pagetables:1206
[  136.529180][ T7030]  sec_pagetables:0 bounce:0
[  136.529180][ T7030]  kernel_misc_reclaimable:0
[  136.529180][ T7030]  free:1331203 free_pcp:14816 free_cma:0
[  136.575022][ T7030] Node 0 active_anon:22680kB inactive_anon:0kB active_file:0kB inactive_file:172000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125604kB dirty:672kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  136.609787][ T7030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  136.643325][ T7030] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.681314][ T7030] lowmem_reserve[]: 0 2488 2489 2489 2489
[  136.693287][ T7030] Node 0 DMA32 free:1375132kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22680kB inactive_anon:0kB active_file:0kB inactive_file:172000kB unevictable:1536kB writepending:672kB zspages:0kB present:3129332kB managed:2548500kB mlocked:0kB bounce:0kB free_pcp:57828kB local_pcp:37812kB free_cma:0kB
[  136.727179][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.743569][ T7030] lowmem_reserve[]: 0 0 0 0 0
[  136.748929][ T7034] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  136.749524][ T7030] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.764748][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv1
[  136.790264][ T7030] lowmem_reserve[]: 0 0 0 0 0
[  136.805126][ T7030] Node 1 Normal free:3934064kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB
[  136.838047][ T7030] lowmem_reserve[]: 0 0 0 0 0
[  136.843040][ T7030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.863850][ T7013] bond1: (slave batadv1): making interface the new active one
[  136.875264][ T7013] batadv1: entered promiscuous mode
[  136.882262][ T7013] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  136.888572][ T7030] Node 0 
[  136.896960][   T13] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  136.919552][ T7030] DMA32: 1982*4kB (UME) 771*8kB (UME) 256*16kB (UME) 178*32kB (UM) 107*64kB (UME) 67*128kB (UME) 37*256kB (UME) 35*512kB (UME) 18*1024kB (UM) 10*2048kB (UME) 310*4096kB (UM) = 1375376kB
[  136.987963][ T7030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  137.027704][ T7030] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3934316kB
[  137.147585][ T7030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  137.159076][ T7030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.169882][ T7030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  137.181584][ T7030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.191449][ T7030] 44336 total pagecache pages
[  137.193913][ T7040] __nla_validate_parse: 2 callbacks suppressed
[  137.193973][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[  137.196533][ T7030] 0 pages in swap cache
[  137.216237][ T7030] Free swap  = 124996kB
[  137.220474][ T7030] Total swap = 124996kB
[  137.224778][ T7030] 2097051 pages RAM
[  137.229335][ T7030] 0 pages HighMem/MovableOnly
[  137.234096][ T7030] 428246 pages reserved
[  137.238727][ T7030] 0 pages cma reserved
[  137.260527][ T7039] bond2 (unregistering): Released all slaves
[  137.448496][ T7052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.598499][ T7042] syzkaller0: entered promiscuous mode
[  137.621000][ T7042] syzkaller0: entered allmulticast mode
[  137.641817][ T7042] tipc: Resetting bearer <eth:syzkaller0>
[  137.649165][ T7057] netlink: 'syz.1.297': attribute type 2 has an invalid length.
[  137.679722][ T7061] netlink: 'syz.0.296': attribute type 4 has an invalid length.
[  137.720155][ T7064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.298'.
[  137.732390][ T7051] pimreg9: entered allmulticast mode
[  137.759668][ T7054] netlink: 'syz.0.296': attribute type 4 has an invalid length.
[  137.843733][ T7057] : entered promiscuous mode
[  137.869678][ T7069] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  137.909840][ T7041] tipc: Resetting bearer <eth:syzkaller0>
[  138.130350][ T7076] netlink: 'syz.1.301': attribute type 8 has an invalid length.
[  138.143417][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'.
[  138.226557][ T7079] x_tables: duplicate underflow at hook 2
[  138.366019][   T29] audit: type=1800 audit(1785951078.519:5): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.303" name="blkio.bfq.time_recursive" dev="tmpfs" ino=289 res=0 errno=0
[  138.492264][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'.
[  138.656806][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'.
[  139.930051][ T7041] tipc: Disabling bearer <eth:syzkaller0>
[  139.962196][  T188] tipc: Node number set to 2232971533
[  139.973819][ T7087] netlink: 'syz.4.304': attribute type 1 has an invalid length.
[  140.087334][ T7092] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[  140.126163][ T7091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.150682][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'.
[  140.503254][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.313'.
[  140.540617][ T7113] ip6tnl1: entered allmulticast mode
[  140.550749][ T7113] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes.
[  140.614655][ T7114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.314'.
[  140.798068][ T7123] netlink: 'syz.4.315': attribute type 4 has an invalid length.
[  140.823113][ T7123] netlink: 'syz.4.315': attribute type 4 has an invalid length.
[  141.055414][ T7127] ip6tnl1: entered allmulticast mode
[  141.234153][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv1
[  141.281409][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'.
[  141.312342][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.319'.
[  142.257359][ T7178] __nla_validate_parse: 1 callbacks suppressed
[  142.257377][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'.
[  142.314424][ T7189] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  142.314424][ T7189] Please contact the netfilter-devel mailing list or update your nftables rules.
[  142.390840][ T7196] IPVS: set_ctl: invalid protocol: 0 172.20.20.27:20001
[  142.459707][ T7200] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  143.061193][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'.
[  143.431777][ T7241] syzkaller0: entered promiscuous mode
[  143.453029][ T7241] syzkaller0: entered allmulticast mode
[  143.475124][ T7241] netlink: 'syz.3.349': attribute type 1 has an invalid length.
[  143.497946][ T7241] netlink: 76 bytes leftover after parsing attributes in process `syz.3.349'.
[  143.532256][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'.
[  144.087429][ T7277] netlink: 'syz.1.357': attribute type 3 has an invalid length.
[  144.103743][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'.
[  144.456530][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'.
[  144.748299][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  144.757678][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[  144.768668][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  144.778762][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[  146.762873][ T7275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.032457][ T7329] x_tables: duplicate underflow at hook 1
[  147.659957][ T7353] __nla_validate_parse: 2 callbacks suppressed
[  147.659978][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'.
[  147.730832][ T7355] xt_TCPMSS: Only works on TCP SYN packets
[  148.036925][ T7355] bridge_slave_1: left allmulticast mode
[  148.048250][ T7355] bridge_slave_1: left promiscuous mode
[  148.063677][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.110642][ T7355] bridge_slave_0: left allmulticast mode
[  148.130042][ T7355] bridge_slave_0: left promiscuous mode
[  148.147877][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.209822][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  148.220713][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  148.232281][ T7377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.387'.
[  148.243950][ T7376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.387'.
[  148.301696][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'.
[  148.386089][ T7377] geneve2: entered promiscuous mode
[  148.404706][ T7377] geneve2: entered allmulticast mode
[  148.478248][   T35] batadv1: left promiscuous mode
[  148.744022][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'.
[  148.763162][ T7396] netlink: 'syz.1.391': attribute type 15 has an invalid length.
[  148.797660][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'.
[  148.802458][ T7396] netlink: 666 bytes leftover after parsing attributes in process `syz.1.391'.
[  148.828774][ T7386] ip6tnl2: entered allmulticast mode
[  148.834872][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'.
[  149.112093][ T7404] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  149.214064][ T7407] xfrm1: entered allmulticast mode
[  149.366882][  T810] bridge0: entered promiscuous mode
[  150.232028][   T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.241818][   T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.265073][  T810] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.446313][  T810] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.597773][ T7448] netlink: 'syz.3.408': attribute type 1 has an invalid length.
[  150.656702][ T7448] NCSI netlink: No device for ifindex 0
[  150.773942][ T7461] netlink: 'syz.3.408': attribute type 1 has an invalid length.
[  150.788905][ T5766] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.923337][ T7461] bond3: entered promiscuous mode
[  150.934318][ T7461] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.196399][ T7465] bond3: (slave bridge0): making interface the new active one
[  151.224424][ T7465] bridge0: entered promiscuous mode
[  151.251514][ T7465] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  151.295821][ T7477] netlink: 'syz.2.411': attribute type 5 has an invalid length.
[  151.367730][ T7477] geneve2: entered promiscuous mode
[  151.383451][ T7477] geneve2: entered allmulticast mode
[  152.055146][ T7500] ip6gretap0: entered promiscuous mode
[  152.069477][ T7505] netlink: 'syz.1.420': attribute type 30 has an invalid length.
[  152.071030][ T7500] vlan2: entered promiscuous mode
[  152.149696][ T7504] ip6gre2: entered promiscuous mode
[  152.187648][ T7504] ip6gre2: entered allmulticast mode
[  152.643342][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.651314][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.692462][ T7526] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20002
[  152.705101][ T7526] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004
[  152.771979][   T29] audit: type=1107 audit(1785951092.929:6): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  152.798264][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.812023][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.986521][   T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.007627][   T35] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 37775 - 0
[  153.035999][   T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.067239][   T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.114551][   T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.176835][   T35] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 37775 - 0
[  153.218859][   T35] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 37775 - 0
[  153.261547][ T7531] can: request_module (can-proto-0) failed.
[  153.322438][ T7540] __nla_validate_parse: 11 callbacks suppressed
[  153.322456][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'.
[  153.339205][   T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 37775 - 0
[  153.371855][ T7531] batman_adv: batadv0: Adding interface: dummy0
[  153.379104][ T7531] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.405617][ T7531] batman_adv: batadv0: Interface activated: dummy0
[  153.451665][ T7531] batadv0: mtu less than device minimum
[  153.470783][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.484129][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.497377][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.509574][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.521796][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.533641][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.546007][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.557928][ T7531] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.590446][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'.
[  153.651757][ T7542] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  153.681859][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.719167][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.754307][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'.
[  153.765154][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.776714][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.071099][ T7562] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  154.086492][ T7561] netlink: 'syz.1.435': attribute type 4 has an invalid length.
[  154.104522][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  154.121207][ T7562] sch_tbf: peakrate 12 is lower than or equals to rate 3850 !
[  154.132867][ T7562] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  154.215731][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  154.390111][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'.
[  154.521987][ T7593] ip6gre3: entered promiscuous mode
[  154.536949][ T7593] ip6gre3: entered allmulticast mode
[  154.677847][ T7585] netlink: 56 bytes leftover after parsing attributes in process `syz.4.441'.
[  154.755175][ T7608] x_tables: unsorted entry at hook 2
[  154.774919][ T7585] netlink: 56 bytes leftover after parsing attributes in process `syz.4.441'.
[  154.842128][ T7596] batman_adv: batadv0: Adding interface: gretap1
[  154.880069][ T7596] batman_adv: batadv0: The MTU of interface gretap1 is too small (1396) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.947123][ T7596] batman_adv: batadv0: Interface activated: gretap1
[  154.977615][ T7596] net_ratelimit: 11 callbacks suppressed
[  154.977633][ T7596] batadv0: mtu less than device minimum
[  155.000588][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.014386][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.026548][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.038611][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.050636][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.062537][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.074567][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.086568][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.098597][ T7596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  155.217919][ T7616] ipip0: entered promiscuous mode
[  155.438707][ T7623] vlan0: entered promiscuous mode
[  155.443941][ T7623] bridge0: entered promiscuous mode
[  155.913140][ T7644] syzkaller0: entered promiscuous mode
[  155.931498][ T7644] syzkaller0: entered allmulticast mode
[  156.686211][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'.
[  157.139795][ T7701] netlink: 128 bytes leftover after parsing attributes in process `syz.0.470'.
[  157.153023][ T7697] batman_adv: batadv0: Adding interface: macvtap0
[  157.165455][ T7697] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.231282][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'.
[  157.250196][ T7697] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  157.750812][ T7719] netlink: 'syz.4.480': attribute type 1 has an invalid length.
[  157.907639][ T7731] ip6gre1: entered allmulticast mode
[  158.194129][ T7744] netlink: 'syz.4.488': attribute type 210 has an invalid length.
[  158.366159][ T7754] __nla_validate_parse: 2 callbacks suppressed
[  158.366180][ T7754] netlink: 2 bytes leftover after parsing attributes in process `syz.4.488'.
[  158.497961][ T7753] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  159.175065][ T7790] netlink: 56 bytes leftover after parsing attributes in process `syz.1.502'.
[  159.264836][ T7796] netlink: 7 bytes leftover after parsing attributes in process `syz.3.501'.
[  159.298683][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'.
[  159.417570][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'.
[  159.594460][ T7811] bond2: entered allmulticast mode
[  159.600404][ T7808] žÿ: renamed from team_slave_1 (while UP)
[  159.623385][ T5634] Bluetooth: hci3: link tx timeout
[  159.630672][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  159.880217][   T13] IPVS: starting estimator thread 0...
[  159.911062][ T7829] netlink: 'syz.2.514': attribute type 30 has an invalid length.
[  160.006260][ T7826] IPVS: using max 28 ests per chain, 67200 per kthread
[  160.233987][ T7843] netlink: 'syz.2.518': attribute type 4 has an invalid length.
[  160.294275][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'.
[  160.319258][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.520'.
[  160.329598][ T7846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.339278][ T7846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.351198][ T7846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.359116][ T7846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.543407][ T7856] warning: `syz.2.521' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  160.841263][ T7861] netlink: 108 bytes leftover after parsing attributes in process `syz.2.522'.
[  160.904927][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.522'.
[  161.411774][ T7882] netlink: 'syz.4.527': attribute type 1 has an invalid length.
[  161.569773][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.531'.
[  161.656101][ T4938] Bluetooth: hci3: command 0x0406 tx timeout
[  161.685758][ T7893] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.815697][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  162.044094][ T7913] net_ratelimit: 10 callbacks suppressed
[  162.044113][ T7913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.364429][ T7929] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.598278][ T7968] netlink: 'syz.3.545': attribute type 1 has an invalid length.
[  163.793840][ T7968] 8021q: adding VLAN 0 to HW filter on device bond4
[  163.888978][ T7985] Cannot find del_set index 17 as target
[  163.964892][ T7980] bond4: (slave geneve3): making interface the new active one
[  163.994713][ T7980] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  164.045592][ T7974] syzkaller0: entered promiscuous mode
[  164.063291][ T7974] syzkaller0: entered allmulticast mode
[  164.104418][ T7981] tipc: Started in network mode
[  164.118052][ T7981] tipc: Node identity de7d2b1d7184, cluster identity 4711
[  164.136055][ T7981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.167543][ T7974] tipc: Resetting bearer <eth:syzkaller0>
[  164.226452][ T7973] tipc: Resetting bearer <eth:syzkaller0>
[  164.292547][ T7973] tipc: Disabling bearer <eth:syzkaller0>
[  164.318318][ T8011] netlink: 'syz.3.552': attribute type 1 has an invalid length.
[  165.035016][ T8069] netlink: 'syz.3.557': attribute type 4 has an invalid length.
[  165.582144][ T8085] __nla_validate_parse: 2 callbacks suppressed
[  165.582166][ T8085] netlink: 72 bytes leftover after parsing attributes in process `syz.3.561'.
[  166.248023][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'.
[  166.446700][ T8126] netlink: 'syz.0.569': attribute type 43 has an invalid length.
[  166.478883][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'.
[  167.221560][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'.
[  167.257890][ T8160] netlink: 'syz.4.579': attribute type 20 has an invalid length.
[  167.284330][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'.
[  167.295389][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'.
[  167.325985][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'.
[  167.716949][ T8047] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.744628][ T8047] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.784568][ T8047] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.824891][ T8047] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.901437][ T8188] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  168.376970][ T8208] netlink: 92 bytes leftover after parsing attributes in process `syz.1.588'.
[  168.657381][ T8221] netlink: 'syz.3.591': attribute type 1 has an invalid length.
[  168.745407][ T8227] netlink: 'syz.3.591': attribute type 1 has an invalid length.
[  169.143292][ T8227] 8021q: adding VLAN 0 to HW filter on device bond5
[  169.263684][ T8230] bond5: (slave veth5): Enslaving as an active interface with a down link
[  169.725926][ T8251] bond6: option downdelay: invalid value (18446744073709551487)
[  169.766274][ T8251] bond6: option downdelay: allowed values 0 - 2147483647
[  169.799064][ T8251] bond6 (unregistering): Released all slaves
[  169.836950][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'.
[  169.958336][ T5634] block nbd0: Receive control failed (result -107)
[  170.214985][ T8276] syzkaller1: entered promiscuous mode
[  170.224600][ T8276] syzkaller1: entered allmulticast mode
[  170.238242][ T8270] syzkaller0: entered promiscuous mode
[  170.243960][ T8270] syzkaller0: entered allmulticast mode
[  170.301123][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'.
[  170.960544][ T8310] netlink: 'syz.1.610': attribute type 83 has an invalid length.
[  171.091141][ T8314] bridge2: entered promiscuous mode
[  171.113498][ T8314] bridge2: entered allmulticast mode
[  171.131153][ T8314] team0: Port device bridge2 added
[  171.147059][ T8315] bridge0: port 3(team0) entered blocking state
[  171.155012][ T8315] bridge0: port 3(team0) entered disabled state
[  171.163565][ T8315] team0: entered allmulticast mode
[  171.170518][ T8315] team_slave_0: entered allmulticast mode
[  171.185607][ T8315] team_slave_1: entered allmulticast mode
[  171.195688][ T8314] __nla_validate_parse: 2 callbacks suppressed
[  171.195704][ T8314] netlink: 244 bytes leftover after parsing attributes in process `syz.4.612'.
[  171.216272][ T8315] team0: entered promiscuous mode
[  171.221996][ T8315] team_slave_0: entered promiscuous mode
[  171.228677][ T8315] team_slave_1: entered promiscuous mode
[  171.242994][ T8315] bridge0: port 3(team0) entered blocking state
[  171.250938][ T8315] bridge0: port 3(team0) entered forwarding state
[  171.528454][ T8327] nbd: socks must be embedded in a SOCK_ITEM attr
[  171.551390][ T8327] block nbd1: shutting down sockets
[  171.625605][ T8327] netlink: 'syz.0.617': attribute type 142 has an invalid length.
[  171.638550][ T8332] netlink: 'syz.0.617': attribute type 142 has an invalid length.
[  172.208623][ T8355] ip_tables: iptables: counters copy to user failed while replacing table
[  172.408976][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'.
[  172.454641][ T8372] erspan0: entered promiscuous mode
[  172.517240][ T8382] netlink: 260 bytes leftover after parsing attributes in process `syz.4.630'.
[  173.050656][   T29] audit: type=1800 audit(1785951113.209:7): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="memory.events" dev="tmpfs" ino=611 res=0 errno=0
[  173.109954][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'.
[  173.123211][ T8412] netlink: 'syz.4.639': attribute type 62 has an invalid length.
[  173.191474][ T8419] pim6reg1: entered promiscuous mode
[  173.201792][ T8419] pim6reg1: entered allmulticast mode
[  173.330037][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[  173.441604][ T8423] macsec2: entered promiscuous mode
[  173.470413][ T8423] bridge0: entered promiscuous mode
[  173.602847][ T8437] netlink: 'syz.3.648': attribute type 2 has an invalid length.
[  173.637213][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'.
[  173.928606][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.654'.
[  174.003770][ T8460] netlink: 'syz.0.657': attribute type 10 has an invalid length.
[  174.032311][ T8456] syzkaller0: entered promiscuous mode
[  174.046196][ T8456] syzkaller0: entered allmulticast mode
[  174.088223][ T8460] syz_tun: entered promiscuous mode
[  174.146010][ T8460] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  174.191179][ T8466] bond0: (slave ip6gretap0): Releasing backup interface
[  174.228391][ T8472] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  174.253519][ T8466] bond0: (slave bond_slave_0): Releasing backup interface
[  174.284310][ T8466] team0: Port device team_slave_0 removed
[  174.345270][ T8466] team0: Port device team_slave_1 removed
[  174.355251][ T8466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  174.461874][ T8483] netlink: 'syz.3.663': attribute type 1 has an invalid length.
[  174.631669][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[  174.735331][ T8483] 8021q: adding VLAN 0 to HW filter on device bond6
[  174.842750][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'.
[  175.108039][ T8512] bridge0: entered allmulticast mode
[  175.124948][ T8512] pim6reg: entered allmulticast mode
[  175.384478][ T8525] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  175.519021][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'.
[  175.701373][ T8553] netdevsim0: mtu less than device minimum
[  176.920507][ T8609] lo: entered allmulticast mode
[  176.951663][ T8605] __nla_validate_parse: 2 callbacks suppressed
[  176.951683][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.689'.
[  176.980154][ T8609] 8021q: VLANs not supported on wg1
[  177.011619][ T8609] lo: left allmulticast mode
[  177.354383][ T8625] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  177.815755][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  178.203561][ T8638] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.697'.
[  178.219215][ T8640] netlink: 'syz.4.698': attribute type 1 has an invalid length.
[  178.522266][ T8662] pim6reg: entered allmulticast mode
[  178.538310][ T8666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.565056][ T8669] ip_tables: iptables: counters copy to user failed while replacing table
[  178.989824][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'.
[  179.077139][ T8680] netlink: 696 bytes leftover after parsing attributes in process `syz.3.706'.
[  179.314557][ T8691] netlink: 'syz.4.708': attribute type 1 has an invalid length.
[  179.496662][ T8691] bond2: entered promiscuous mode
[  179.539212][ T8691] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.570349][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'.
[  179.608895][ T8697] vlan2: entered allmulticast mode
[  179.619066][ T8697] bond2: entered allmulticast mode
[  179.662918][ T8700] ip6tnl2: entered allmulticast mode
[  179.769743][ T8691] bond2: (slave bridge3): making interface the new active one
[  179.821609][ T8691] bridge3: entered promiscuous mode
[  179.857721][ T8691] bridge3: entered allmulticast mode
[  179.899123][ T8691] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  180.029591][ T8716] netlink: 'syz.0.713': attribute type 1 has an invalid length.
[  180.111465][ T8721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'.
[  180.309924][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'.
[  180.486342][ T8730] FAULT_INJECTION: forcing a failure.
[  180.486342][ T8730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.499881][ T8730] CPU: 1 UID: 0 PID: 8730 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) 
[  180.499924][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  180.499945][ T8730] Call Trace:
[  180.499953][ T8730]  <TASK>
[  180.499962][ T8730]  dump_stack_lvl+0xe8/0x150
[  180.500001][ T8730]  should_fail_ex+0x40c/0x560
[  180.500035][ T8730]  _copy_from_user+0x2d/0xb0
[  180.500058][ T8730]  ___sys_sendmsg+0x1c6/0x360
[  180.500086][ T8730]  ? __lock_acquire+0x683/0x2cf0
[  180.500122][ T8730]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.500188][ T8730]  ? __fget_files+0x2a/0x420
[  180.500227][ T8730]  ? __fget_files+0x3a2/0x420
[  180.500268][ T8730]  __x64_sys_sendmsg+0x1b1/0x290
[  180.500299][ T8730]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.500347][ T8730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.500371][ T8730]  do_syscall_64+0x174/0x580
[  180.500401][ T8730]  ? trace_irq_disable+0x3b/0x140
[  180.500430][ T8730]  ? clear_bhb_loop+0x40/0x90
[  180.500456][ T8730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.500477][ T8730] RIP: 0033:0x7fe78579e0d9
[  180.500497][ T8730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.500515][ T8730] RSP: 002b:00007fe7866d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.500538][ T8730] RAX: ffffffffffffffda RBX: 00007fe785a25fa0 RCX: 00007fe78579e0d9
[  180.500553][ T8730] RDX: 0000000030008011 RSI: 00002000000029c0 RDI: 0000000000000004
[  180.500566][ T8730] RBP: 00007fe7866d9090 R08: 0000000000000000 R09: 0000000000000000
[  180.500579][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.500591][ T8730] R13: 00007fe785a26038 R14: 00007fe785a25fa0 R15: 00007ffcf2c94928
[  180.500626][ T8730]  </TASK>
[  183.022130][ T8716] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  183.158514][ T8538] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  183.200190][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.723'.
[  183.204608][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  183.219083][ T8538] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  183.318506][ T8763] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  183.331769][ T8752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.339661][ T8763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.725'.
[  183.350146][ T8752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37775 - 0
[  183.529062][ T8765] FAULT_INJECTION: forcing a failure.
[  183.529062][ T8765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.546923][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.1.727 Not tainted syzkaller #0 PREEMPT(full) 
[  183.546954][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.546966][ T8765] Call Trace:
[  183.546974][ T8765]  <TASK>
[  183.546983][ T8765]  dump_stack_lvl+0xe8/0x150
[  183.547019][ T8765]  should_fail_ex+0x40c/0x560
[  183.547050][ T8765]  _copy_from_user+0x2d/0xb0
[  183.547071][ T8765]  __copy_msghdr+0x390/0x590
[  183.547102][ T8765]  ___sys_sendmsg+0x213/0x360
[  183.547128][ T8765]  ? __lock_acquire+0x683/0x2cf0
[  183.547161][ T8765]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.547226][ T8765]  ? __fget_files+0x2a/0x420
[  183.547295][ T8765]  ? __fget_files+0x3a2/0x420
[  183.547335][ T8765]  __x64_sys_sendmsg+0x1b1/0x290
[  183.547366][ T8765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.547413][ T8765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.547436][ T8765]  do_syscall_64+0x174/0x580
[  183.547465][ T8765]  ? trace_irq_disable+0x3b/0x140
[  183.547494][ T8765]  ? clear_bhb_loop+0x40/0x90
[  183.547520][ T8765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.547557][ T8765] RIP: 0033:0x7f2d5199e0d9
[  183.547577][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.547595][ T8765] RSP: 002b:00007f2d52855028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.547618][ T8765] RAX: ffffffffffffffda RBX: 00007f2d51c25fa0 RCX: 00007f2d5199e0d9
[  183.547633][ T8765] RDX: 0000000030008011 RSI: 00002000000029c0 RDI: 0000000000000004
[  183.547647][ T8765] RBP: 00007f2d52855090 R08: 0000000000000000 R09: 0000000000000000
[  183.547659][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.547670][ T8765] R13: 00007f2d51c26038 R14: 00007f2d51c25fa0 R15: 00007ffe7c88faf8
[  183.547703][ T8765]  </TASK>
[  183.808047][ T8752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.820605][ T8752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37775 - 0
[  183.841754][  T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  183.958620][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'.
[  183.975914][  T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  184.073634][ T8752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.122809][ T8752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37775 - 0
[  184.206513][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'.
[  184.272580][ T8752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.286368][ T8752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37775 - 0
[  184.522668][ T8052] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37775 - 0
[  184.549519][ T8052] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  184.587858][ T5615] block nbd64: NBD_DISCONNECT
[  184.905284][ T5615] udevd[5615]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  184.937888][ T8066] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 37775 - 0
[  184.960378][ T8066] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  184.994567][ T8066] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 37775 - 0
[  185.034711][ T8066] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  185.085383][ T8066] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 37775 - 0
[  185.149418][ T8066] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  185.304262][ T8831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.741'.
[  185.310496][ T8830] batadv_slave_1: entered promiscuous mode
[  185.622618][ T8844] netlink: 'syz.3.745': attribute type 2 has an invalid length.
[  185.667649][ T8844] netlink: 'syz.3.745': attribute type 5 has an invalid length.
[  185.701943][ T8829] batadv_slave_1: left promiscuous mode
[  187.256230][ T8924] x_tables: duplicate underflow at hook 1
[  187.276445][ T8925] netlink: 'syz.4.763': attribute type 10 has an invalid length.
[  187.373514][ T8928] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  187.387881][ T8925] team0: Device veth1_virt_wifi failed to register rx_handler
[  187.437707][ T8940] xt_HMARK: spi-set and port-set can't be combined
[  187.479822][ T8941] netlink: 492 bytes leftover after parsing attributes in process `syz.3.767'.
[  187.576238][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  187.713690][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  187.775747][ T8951] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  187.801360][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  187.826632][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'.
[  188.085321][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'.
[  188.335258][ T8951] bond0: (slave syz_tun): Releasing backup interface
[  188.394899][ T8982] __nla_validate_parse: 1 callbacks suppressed
[  188.394920][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  188.423675][ T8951] bridge_slave_0: left allmulticast mode
[  188.430076][ T8951] bridge_slave_0: left promiscuous mode
[  188.436373][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.474734][ T8951] bridge_slave_1: left allmulticast mode
[  188.482279][ T8951] bridge_slave_1: left promiscuous mode
[  188.494650][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.555365][ T8951] bond0: (slave bond_slave_0): Releasing backup interface
[  188.612404][ T8951] bond0: (slave bond_slave_1): Releasing backup interface
[  188.673905][ T8951] team0: Port device team_slave_0 removed
[  188.710960][ T8951] team0: Port device team_slave_1 removed
[  188.729336][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.744769][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.757670][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.765260][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.788487][ T8951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  189.021554][ T9013] openvswitch: netlink: IP tunnel TTL not specified.
[  189.044752][ T9013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.152927][ T9017] netlink: 'syz.1.783': attribute type 1 has an invalid length.
[  189.189168][ T9022] netlink: 'syz.1.783': attribute type 1 has an invalid length.
[  189.197582][ T9003] geneve2: left promiscuous mode
[  189.232123][ T9003] macsec2: left promiscuous mode
[  189.250047][ T5811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.275252][ T9003] bond2: left promiscuous mode
[  189.290111][ T9003] bridge3: left promiscuous mode
[  189.318918][ T9003] 8021q: adding VLAN 0 to HW filter on device bond3
[  189.362853][ T9017] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  189.371340][ T9022] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  189.783301][ T7902] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.990240][ T9042] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003
[  191.487544][ T9062] Cannot find del_set index 0 as target
[  191.519330][ T9104] netlink: 144 bytes leftover after parsing attributes in process `syz.2.798'.
[  191.808708][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'.
[  192.019232][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'.
[  192.126206][ T9126] vti0: entered promiscuous mode
[  192.842432][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'.
[  192.873789][ T9166] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.235003][ T9181] netlink: 'syz.3.818': attribute type 1 has an invalid length.
[  193.269213][ T9181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.325204][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'.
[  193.490940][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  193.635203][ T9196] xt_l2tp: invalid flags combination: 8
[  193.983727][ T9212] netlink: 'syz.2.826': attribute type 6 has an invalid length.
[  194.172956][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'.
[  194.233173][ T9225] ip_tables: iptables: counters copy to user failed while replacing table
[  194.273658][ T9218] netlink: 'syz.0.827': attribute type 4 has an invalid length.
[  194.330889][ T9227] netlink: 'syz.0.827': attribute type 4 has an invalid length.
[  194.459012][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  194.472005][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  195.901316][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'.
[  195.912369][ T9305] netlink: 'syz.0.848': attribute type 46 has an invalid length.
[  195.949200][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  196.361227][ T9322] x_tables: unsorted entry at hook 1
[  196.375913][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  196.473428][ T9322] 0: reclassify loop, rule prio 0, protocol 03
[  196.491612][ T9329] ip6gretap0: entered promiscuous mode
[  196.653928][ T9335] block nbd1: not configured, cannot reconfigure
[  196.873551][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'.
[  196.928764][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'.
[  197.009950][ T9353] bond7: option ad_user_port_key: invalid value (65535)
[  197.020985][ T9353] bond7: option ad_user_port_key: allowed values 0 - 1023
[  197.042571][ T9353] bond7 (unregistering): Released all slaves
[  197.103842][ T9362] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  197.254501][ T9362] bond2: entered promiscuous mode
[  197.277004][ T9362] 8021q: adding VLAN 0 to HW filter on device bond2
[  197.768337][ T9391] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.868'.
[  197.889707][ T9404] netlink: 'syz.3.872': attribute type 1 has an invalid length.
[  197.922323][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'.
[  198.081653][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[  198.144190][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.876'.
[  198.222321][ T9418] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.331822][ T9424] 8021q: adding VLAN 0 to HW filter on device bond5
[  198.347904][ T9424] bond4: (slave bond5): Enslaving as an active interface with an up link
[  198.388657][ T9418] bond4 (unregistering): (slave bond5): Releasing backup interface
[  198.417410][ T9418] bond4 (unregistering): Released all slaves
[  198.743834][ T9444] syzkaller1: tun_chr_ioctl cmd 2147767506
[  198.953908][ T9452] syzkaller1: tun_chr_ioctl cmd 1074025684
[  199.150590][ T9463] __nla_validate_parse: 2 callbacks suppressed
[  199.150612][ T9463] netlink: 256 bytes leftover after parsing attributes in process `syz.1.889'.
[  199.203988][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.889'.
[  199.515912][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'.
[  199.591340][ T9469] ip_tables: iptables: counters copy to user failed while replacing table
[  200.369520][ T9520] netlink: 'syz.2.904': attribute type 4 has an invalid length.
[  200.405297][ T9523] xt_hashlimit: size too large, truncated to 1048576
[  200.413608][ T9520] netlink: 'syz.2.904': attribute type 4 has an invalid length.
[  200.480883][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'.
[  201.139750][ T9553] vcan0: tx drop: invalid da for name 0x0000000000000002
[  201.201415][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'.
[  201.322568][ T9569] sctp: [Deprecated]: syz.3.918 (pid 9569) Use of int in max_burst socket option.
[  201.322568][ T9569] Use struct sctp_assoc_value instead
[  201.339674][ T9567] netlink: 'syz.4.917': attribute type 4 has an invalid length.
[  201.410662][ T9577] netlink: 'syz.4.917': attribute type 4 has an invalid length.
[  201.522185][ T9587] netlink: 104 bytes leftover after parsing attributes in process `syz.0.919'.
[  202.143795][ T9598] ipip0: entered promiscuous mode
[  202.401620][ T9622] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  202.522573][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.559079][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'.
[  202.573605][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'.
[  202.675255][ T9635] netlink: 'syz.3.931': attribute type 4 has an invalid length.
[  202.716541][ T9635] netlink: 'syz.3.931': attribute type 4 has an invalid length.
[  202.728492][ T3266] IPVS: starting estimator thread 0...
[  202.837428][ T9638] IPVS: using max 27 ests per chain, 64800 per kthread
[  203.157618][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'.
[  203.511804][ T9679] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  203.999003][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'.
[  204.018272][ T9697] team0: Port device syz_tun added
[  204.169739][ T9704] netlink: 'syz.3.945': attribute type 1 has an invalid length.
[  204.206967][ T9705] netlink: 'syz.0.949': attribute type 13 has an invalid length.
[  204.241557][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  204.262785][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'.
[  204.420568][ T9716] netlink: 14 bytes leftover after parsing attributes in process `syz.1.951'.
[  204.445835][ T9718] netlink: 14 bytes leftover after parsing attributes in process `syz.1.951'.
[  204.540743][ T9721] netlink: 'syz.3.952': attribute type 1 has an invalid length.
[  204.560679][ T9721] netlink: 'syz.3.952': attribute type 2 has an invalid length.
[  205.002068][ T9736] netlink: 72 bytes leftover after parsing attributes in process `syz.2.955'.
[  205.303000][ T9749] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  205.334281][ T9747] 8021q: VLANs not supported on syzkaller1
[  205.382056][ T9753] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  205.762411][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'.
[  206.280973][ T9798] openvswitch: netlink: IPv4 tunnel dst address is zero
[  206.320711][ T9798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.617662][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'.
[  206.661212][ T9821] Bluetooth: MGMT ver 1.23
[  206.805689][ T9821] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  207.031576][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'.
[  207.310467][ T9840] netlink: 164 bytes leftover after parsing attributes in process `syz.2.987'.
[  207.341086][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'.
[  207.406930][ T9848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.427313][ T9848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.454550][ T9848] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  207.479722][ T9848] bond0 (unregistering): Released all slaves
[  207.666980][ T9856] netlink: 'syz.3.992': attribute type 9 has an invalid length.
[  208.031896][ T9866] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  208.349722][ T9874] netlink: 'syz.2.998': attribute type 1 has an invalid length.
[  208.498949][ T9874] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.635301][ T9899] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:20004
[  209.009482][ T9908] sctp: [Deprecated]: syz.3.1003 (pid 9908) Use of int in max_burst socket option deprecated.
[  209.009482][ T9908] Use struct sctp_assoc_value instead
[  209.343817][ T9924] __nla_validate_parse: 3 callbacks suppressed
[  209.343840][ T9924] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1006'.
[  209.716362][ T9914] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  209.748638][ T9914] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  209.787019][ T9932] trusted_key: syz.4.1007 sent an empty control message without MSG_MORE.
[  210.623087][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'.
[  210.869131][ T9959] macvtap1: entered promiscuous mode
[  210.911419][ T9959] team0: entered promiscuous mode
[  210.929873][ T9959] team_slave_0: entered promiscuous mode
[  210.958454][ T9959] team_slave_1: entered promiscuous mode
[  210.976868][ T9959] syz_tun: entered promiscuous mode
[  210.997434][ T9959] macvtap1: entered allmulticast mode
[  211.003062][ T9959] team0: entered allmulticast mode
[  211.011927][ T9959] team_slave_0: entered allmulticast mode
[  211.020702][ T9959] team_slave_1: entered allmulticast mode
[  211.031676][ T9959] syz_tun: entered allmulticast mode
[  211.040436][ T9959] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  211.066589][ T9971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1020'.
[  211.082889][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.095672][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  211.112115][ T9973] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1020'.
[  211.323142][ T9982] netlink: 'syz.0.1024': attribute type 1 has an invalid length.
[  211.419790][ T9982] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.434549][ T9987] bond3: (slave dummy0): making interface the new active one
[  211.444464][ T9987] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  211.498892][ T9982] 
: renamed from dummy0 (while UP)
[  211.686927][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'.
[  211.705370][ T9996] erspan0: entered promiscuous mode
[  211.862931][ T9996] erspan0: left promiscuous mode
[  212.149671][T10011] netlink: 'syz.0.1033': attribute type 2 has an invalid length.
[  212.165002][T10012] netlink: 'syz.2.1030': attribute type 322 has an invalid length.
[  212.193425][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'.
[  212.400141][   T48] IPVS: starting estimator thread 0...
[  212.451313][ T9983] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1025'.
[  212.492338][T10023] netlink: 'syz.4.1037': attribute type 1 has an invalid length.
[  212.506935][T10019] IPVS: using max 26 ests per chain, 62400 per kthread
[  212.553741][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'.
[  212.563457][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1039'.
[  213.018141][ T8539] IPVS: stop unused estimator thread 0...
[  213.252092][T10059] netlink: 'syz.2.1047': attribute type 10 has an invalid length.
[  213.303036][T10059] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  213.376297][T10059] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  213.433229][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.481401][T10059] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  213.570120][ T7902] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  213.708251][T10078] bond0: entered promiscuous mode
[  213.714079][T10078] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.750356][T10078] bond3: entered promiscuous mode
[  213.757992][T10078] 8021q: adding VLAN 0 to HW filter on device bond3
[  213.927271][   T48] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  214.183714][T10108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.295698][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  214.320066][T10112] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1065'.
[  214.445109][T10115] dvmrp7: entered allmulticast mode
[  214.468781][   T48] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  214.506403][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'.
[  214.673854][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1070'.
[  214.955740][   T29] audit: type=1800 audit(1785951155.109:8): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1075" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1202 res=0 errno=0
[  215.008264][ T8056] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  215.264088][T10158] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  215.287291][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  215.303291][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'.
[  215.331480][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'.
[  215.617748][ T8056] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  216.083324][T10197] netlink: NAT attribute has 1 unknown bytes
[  216.109772][T10197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.154569][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'.
[  216.253052][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1092'.
[  216.330110][ T8056] tipc: Subscription rejected, illegal request
[  216.341892][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  217.022288][ T4938] Bluetooth: hci2: command 0x0406 tx timeout
[  217.030982][ T5634] Bluetooth: hci4: command 0x0406 tx timeout
[  217.038114][ T5634] Bluetooth: hci1: command 0x0406 tx timeout
[  218.020408][T10283] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1107'.
[  218.052208][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'.
[  218.366403][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  218.527534][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  218.718747][ T3266] net_ratelimit: 5 callbacks suppressed
[  218.718768][ T3266] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.207172][ T3266] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.315910][ T3266] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.348726][  T154] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.386039][  T154] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.407770][  T154] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.501275][T10339] netlink: 'syz.2.1120': attribute type 11 has an invalid length.
[  219.621114][T10344] __nla_validate_parse: 4 callbacks suppressed
[  219.621133][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'.
[  219.812440][T10342] 8021q: adding VLAN 0 to HW filter on device bond2
[  219.842297][T10342] 8021q: adding VLAN 0 to HW filter on device eth0
[  219.875685][T10342] 8021q: adding VLAN 0 to HW filter on device eth1
[  219.891330][T10342] 8021q: adding VLAN 0 to HW filter on device eth2
[  219.898576][ T8066] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.924994][T10342] 8021q: adding VLAN 0 to HW filter on device eth3
[  219.963293][T10342] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  220.023440][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'.
[  220.201343][   T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  220.217478][T10352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1124'.
[  220.247493][T10352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1124'.
[  220.308567][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'.
[  220.446987][ T8066] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  220.621837][T10371] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  220.661271][T10371] 8021q: adding VLAN 0 to HW filter on device bond4
[  220.765008][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  220.914869][T10387] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  220.936129][T10387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1131'.
[  220.966216][ T8056] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.200838][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'.
[  221.427546][T10401] netlink: 'syz.4.1135': attribute type 2 has an invalid length.
[  221.490419][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'.
[  221.523437][  T154] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.788079][T10401] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  221.789032][T10404] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  221.868506][T10418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.056698][ T8539] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  222.080745][T10438] netlink: 'syz.1.1141': attribute type 1 has an invalid length.
[  222.137800][T10422] syzkaller0: entered promiscuous mode
[  222.143504][T10422] syzkaller0: entered allmulticast mode
[  222.152083][T10422] tipc: Resetting bearer <eth:syzkaller0>
[  222.308334][T10440] can: request_module (can-proto-0) failed.
[  222.347156][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1142'.
[  222.495313][ T8052] tipc: Resetting bearer <eth:syzkaller0>
[  222.504089][T10407] tipc: Resetting bearer <eth:syzkaller0>
[  222.601368][ T8056] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  223.125999][ T8056] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  224.137381][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  224.175785][ T8052] net_ratelimit: 1 callbacks suppressed
[  224.175805][ T8052] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  224.706059][ T8539] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  225.010484][T10407] tipc: Disabling bearer <eth:syzkaller0>
[  225.053069][T10434] syzkaller0: entered promiscuous mode
[  225.058733][T10434] syzkaller0: entered allmulticast mode
[  225.232767][ T8066] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  225.252357][T10472] netlink: 'syz.3.1147': attribute type 4 has an invalid length.
[  225.328380][T10473] netlink: 'syz.3.1147': attribute type 4 has an invalid length.
[  225.757669][ T8066] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  226.283196][   T48] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  226.808931][ T8052] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  227.326083][   T48] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  227.791206][T10479] netlink: 'syz.4.1148': attribute type 1 has an invalid length.
[  227.810465][T10479] netlink: 'syz.4.1148': attribute type 3 has an invalid length.
[  227.841378][T10479] __nla_validate_parse: 7 callbacks suppressed
[  227.841398][T10479] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1148'.
[  227.858533][ T8052] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  228.058957][T10493] bridge0: port 4(veth0) entered blocking state
[  228.081480][T10493] bridge0: port 4(veth0) entered disabled state
[  228.100607][T10493] veth0: entered allmulticast mode
[  228.126622][T10493] veth0: entered promiscuous mode
[  228.145180][T10493] bridge0: port 4(veth0) entered blocking state
[  228.151798][T10493] bridge0: port 4(veth0) entered forwarding state
[  228.182610][T10494] bridge0: port 5(veth1) entered blocking state
[  228.201270][T10494] bridge0: port 5(veth1) entered disabled state
[  228.210593][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'.
[  228.226121][T10494] veth1: entered allmulticast mode
[  228.240022][T10494] veth1: entered promiscuous mode
[  228.262819][T10494] bridge0: port 5(veth1) entered blocking state
[  228.269757][T10494] bridge0: port 5(veth1) entered forwarding state
[  228.406704][ T8052] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  228.624245][T10518] tc_dump_action: action bad kind
[  228.948020][   T48] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  229.476022][ T8066] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  229.825162][T10560] batadv_slave_0: entered promiscuous mode
[  229.899617][T10562] batadv_slave_0: left promiscuous mode
[  229.988531][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'.
[  230.001010][  T154] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  230.040518][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  230.052191][    C1] ------------[ cut here ]------------
[  230.052273][    C1] refcount_t: underflow; use-after-free.
[  230.052293][    C1] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#1: syz.3.1172/10570
[  230.052337][    C1] Modules linked in:
[  230.052404][    C1] CPU: 1 UID: 0 PID: 10570 Comm: syz.3.1172 Not tainted syzkaller #0 PREEMPT(full) 
[  230.052434][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.052454][    C1] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  230.052484][    C1] Code: 54 b3 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b3 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b3 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b3 8e 0b 67 48 0f
[  230.052507][    C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00010246
[  230.052528][    C1] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff88802cba9f00
[  230.052545][    C1] RDX: 0000000000000100 RSI: ffffffff8f3652c0 RDI: ffffffff9062a5b0
[  230.052562][    C1] RBP: ffffc90000a08d70 R08: ffff88802cba9f00 R09: 0000000000000005
[  230.052581][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000001
[  230.052598][    C1] R13: 00000000ffffe3e7 R14: ffff8880327a4020 R15: ffff8880327a4168
[  230.052617][    C1] FS:  00007f1148caf6c0(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000
[  230.052639][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.052657][    C1] CR2: 00007f1148c8ed58 CR3: 000000007aefc000 CR4: 00000000003526f0
[  230.052680][    C1] Call Trace:
[  230.052691][    C1]  <IRQ>
[  230.052704][    C1]  call_timer_fn+0x192/0x5e0
[  230.052731][    C1]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  230.052759][    C1]  ? call_timer_fn+0xd4/0x5e0
[  230.052782][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  230.052833][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.052864][    C1]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  230.052896][    C1]  __run_timer_base+0x652/0x8b0
[  230.052931][    C1]  ? ktime_get+0x45/0x220
[  230.052988][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  230.053028][    C1]  ? ktime_get+0x1f5/0x220
[  230.053061][    C1]  ? lapic_next_event+0x11/0x20
[  230.053094][    C1]  run_timer_softirq+0xb7/0x170
[  230.053129][    C1]  handle_softirqs+0x225/0x840
[  230.053163][    C1]  ? __irq_exit_rcu+0xca/0x220
[  230.053201][    C1]  __irq_exit_rcu+0xca/0x220
[  230.053231][    C1]  irq_exit_rcu+0x9/0x30
[  230.053258][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  230.053292][    C1]  </IRQ>
[  230.053301][    C1]  <TASK>
[  230.053312][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.053339][    C1] RIP: 0010:console_flush_all+0x7d2/0xaf0
[  230.053369][    C1] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 50 2c 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c6
[  230.053390][    C1] RSP: 0018:ffffc9000385ea80 EFLAGS: 00000293
[  230.053413][    C1] RAX: ffffffff81a5e4ec RBX: ffffc9000385ebe0 RCX: ffff88802cba9f00
[  230.053432][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  230.053448][    C1] RBP: ffffc9000385eb90 R08: ffffffff9057a737 R09: 1ffffffff20af4e6
[  230.053467][    C1] R10: dffffc0000000000 R11: fffffbfff20af4e7 R12: dffffc0000000000
[  230.053486][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8a0
[  230.053512][    C1]  ? console_flush_all+0x7cc/0xaf0
[  230.053547][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.053586][    C1]  ? console_flush_all+0x123/0xaf0
[  230.053620][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  230.053653][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  230.053689][    C1]  console_unlock+0xd1/0x1c0
[  230.053717][    C1]  ? __pfx_console_unlock+0x10/0x10
[  230.053743][    C1]  ? _printk+0xdd/0x130
[  230.053778][    C1]  vprintk_emit+0x485/0x560
[  230.053801][    C1]  ? arch_stack_walk+0xfb/0x150
[  230.053838][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  230.053875][    C1]  _printk+0xdd/0x130
[  230.053908][    C1]  ? __pfx__printk+0x10/0x10
[  230.053936][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.053969][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  230.054001][    C1]  ? ___ratelimit+0x584/0x8e0
[  230.054039][    C1]  __nla_validate_parse+0x2574/0x2d50
[  230.054096][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  230.054157][    C1]  ? __kmalloc_cache_noprof+0x32d/0x660
[  230.054195][    C1]  __nla_parse+0x40/0x60
[  230.054231][    C1]  rtnl_newlink+0x20b/0x1c30
[  230.054262][    C1]  ? kasan_save_track+0x4f/0x80
[  230.054292][    C1]  ? kasan_save_track+0x3e/0x80
[  230.054321][    C1]  ? __kasan_slab_free+0x5c/0x80
[  230.054350][    C1]  ? kmem_cache_free+0x182/0x650
[  230.054379][    C1]  ? nlmon_xmit+0xb0/0x100
[  230.054402][    C1]  ? dev_hard_start_xmit+0x2cd/0x830
[  230.054430][    C1]  ? __dev_queue_xmit+0x14c0/0x3820
[  230.054457][    C1]  ? __netlink_deliver_tap+0x5b4/0x860
[  230.054483][    C1]  ? netlink_deliver_tap+0x19c/0x1b0
[  230.054512][    C1]  ? netlink_unicast+0x77f/0x940
[  230.054536][    C1]  ? netlink_sendmsg+0x813/0xb40
[  230.054568][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.054592][    C1]  ? do_syscall_64+0x174/0x580
[  230.054625][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.054687][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  230.054718][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.054755][    C1]  ? nlmon_xmit+0xb0/0x100
[  230.054785][    C1]  ? kmem_cache_free+0x182/0x650
[  230.054836][    C1]  ? __lock_acquire+0x683/0x2cf0
[  230.054876][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.054913][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  230.054943][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.054976][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.055008][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  230.055036][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.055077][    C1]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  230.055107][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.055148][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.055174][    C1]  rtnetlink_rcv_msg+0x802/0xc00
[  230.055207][    C1]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  230.055235][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  230.055260][    C1]  ? ref_tracker_free+0x689/0x830
[  230.055296][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  230.055340][    C1]  netlink_rcv_skb+0x226/0x4a0
[  230.055369][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  230.055398][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  230.056456][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  230.056497][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  230.056532][    C1]  netlink_unicast+0x7bb/0x940
[  230.056571][    C1]  netlink_sendmsg+0x813/0xb40
[  230.056614][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.056650][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  230.056684][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.056714][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  230.056755][    C1]  ____sys_sendmsg+0x54e/0x850
[  230.056794][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  230.056848][    C1]  ? import_iovec+0x73/0xa0
[  230.056877][    C1]  ___sys_sendmsg+0x2a5/0x360
[  230.056905][    C1]  ? __lock_acquire+0x683/0x2cf0
[  230.056942][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  230.056976][    C1]  ? futex_wake+0x51b/0x5f0
[  230.057604][    C1]  ? __fget_files+0x2a/0x420
[  230.057639][    C1]  ? __fget_files+0x3a2/0x420
[  230.057687][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  230.057721][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  230.057771][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.057799][    C1]  do_syscall_64+0x174/0x580
[  230.057846][    C1]  ? trace_irq_disable+0x3b/0x140
[  230.057878][    C1]  ? clear_bhb_loop+0x40/0x90
[  230.057908][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.057933][    C1] RIP: 0033:0x7f1147d9e0d9
[  230.057958][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.057979][    C1] RSP: 002b:00007f1148caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.058008][    C1] RAX: ffffffffffffffda RBX: 00007f1148026090 RCX: 00007f1147d9e0d9
[  230.058027][    C1] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000026
[  230.058043][    C1] RBP: 00007f1147e35024 R08: 0000000000000000 R09: 0000000000000000
[  230.058059][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.058080][    C1] R13: 00007f1148026128 R14: 00007f1148026090 R15: 00007ffd719666c8
[  230.058125][    C1]  </TASK>
[  230.058139][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.058157][    C1] CPU: 1 UID: 0 PID: 10570 Comm: syz.3.1172 Not tainted syzkaller #0 PREEMPT(full) 
[  230.058183][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.058197][    C1] Call Trace:
[  230.058206][    C1]  <IRQ>
[  230.058216][    C1]  vpanic+0x56c/0xa60
[  230.058253][    C1]  ? __pfx__printk+0x10/0x10
[  230.058279][    C1]  ? __pfx_vpanic+0x10/0x10
[  230.058311][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  230.058345][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  230.058388][    C1]  panic+0xc5/0xd0
[  230.058422][    C1]  ? __pfx_panic+0x10/0x10
[  230.058476][    C1]  __warn+0x315/0x4c0
[  230.058495][    C1]  ? refcount_warn_saturate+0xb2/0x110
[  230.058522][    C1]  ? refcount_warn_saturate+0xb2/0x110
[  230.058545][    C1]  __report_bug+0x276/0x570
[  230.058584][    C1]  ? refcount_warn_saturate+0xb2/0x110
[  230.058610][    C1]  ? __pfx___report_bug+0x10/0x10
[  230.058667][    C1]  report_bug_entry+0x19a/0x290
[  230.058702][    C1]  ? refcount_warn_saturate+0xb2/0x110
[  230.058722][    C1]  ? refcount_warn_saturate+0xb7/0x110
[  230.058742][    C1]  handle_bug+0xce/0x200
[  230.058778][    C1]  exc_invalid_op+0x1a/0x50
[  230.058802][    C1]  asm_exc_invalid_op+0x1a/0x20
[  230.058832][    C1] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  230.058856][    C1] Code: 54 b3 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b3 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b3 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b3 8e 0b 67 48 0f
[  230.058877][    C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00010246
[  230.058907][    C1] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff88802cba9f00
[  230.058924][    C1] RDX: 0000000000000100 RSI: ffffffff8f3652c0 RDI: ffffffff9062a5b0
[  230.058941][    C1] RBP: ffffc90000a08d70 R08: ffff88802cba9f00 R09: 0000000000000005
[  230.058958][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000001
[  230.058972][    C1] R13: 00000000ffffe3e7 R14: ffff8880327a4020 R15: ffff8880327a4168
[  230.058998][    C1]  ? refcount_warn_saturate+0xab/0x110
[  230.059028][    C1]  ? refcount_warn_saturate+0xab/0x110
[  230.059050][    C1]  call_timer_fn+0x192/0x5e0
[  230.059071][    C1]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  230.059095][    C1]  ? call_timer_fn+0xd4/0x5e0
[  230.059115][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  230.059146][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.059173][    C1]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  230.059200][    C1]  __run_timer_base+0x652/0x8b0
[  230.059231][    C1]  ? ktime_get+0x45/0x220
[  230.059270][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  230.059307][    C1]  ? ktime_get+0x1f5/0x220
[  230.059338][    C1]  ? lapic_next_event+0x11/0x20
[  230.059367][    C1]  run_timer_softirq+0xb7/0x170
[  230.059402][    C1]  handle_softirqs+0x225/0x840
[  230.059435][    C1]  ? __irq_exit_rcu+0xca/0x220
[  230.059469][    C1]  __irq_exit_rcu+0xca/0x220
[  230.059497][    C1]  irq_exit_rcu+0x9/0x30
[  230.059523][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  230.059555][    C1]  </IRQ>
[  230.059563][    C1]  <TASK>
[  230.059573][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.059599][    C1] RIP: 0010:console_flush_all+0x7d2/0xaf0
[  230.059625][    C1] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 50 2c 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c6
[  230.059645][    C1] RSP: 0018:ffffc9000385ea80 EFLAGS: 00000293
[  230.059666][    C1] RAX: ffffffff81a5e4ec RBX: ffffc9000385ebe0 RCX: ffff88802cba9f00
[  230.059684][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  230.059698][    C1] RBP: ffffc9000385eb90 R08: ffffffff9057a737 R09: 1ffffffff20af4e6
[  230.059716][    C1] R10: dffffc0000000000 R11: fffffbfff20af4e7 R12: dffffc0000000000
[  230.059734][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8a0
[  230.059758][    C1]  ? console_flush_all+0x7cc/0xaf0
[  230.059793][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.059837][    C1]  ? console_flush_all+0x123/0xaf0
[  230.059870][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  230.059901][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  230.059936][    C1]  console_unlock+0xd1/0x1c0
[  230.059962][    C1]  ? __pfx_console_unlock+0x10/0x10
[  230.059987][    C1]  ? _printk+0xdd/0x130
[  230.060020][    C1]  vprintk_emit+0x485/0x560
[  230.060042][    C1]  ? arch_stack_walk+0xfb/0x150
[  230.060081][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  230.060117][    C1]  _printk+0xdd/0x130
[  230.060147][    C1]  ? __pfx__printk+0x10/0x10
[  230.060174][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.060206][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  230.060235][    C1]  ? ___ratelimit+0x584/0x8e0
[  230.060273][    C1]  __nla_validate_parse+0x2574/0x2d50
[  230.060329][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  230.060393][    C1]  ? __kmalloc_cache_noprof+0x32d/0x660
[  230.060428][    C1]  __nla_parse+0x40/0x60
[  230.060466][    C1]  rtnl_newlink+0x20b/0x1c30
[  230.060496][    C1]  ? kasan_save_track+0x4f/0x80
[  230.060526][    C1]  ? kasan_save_track+0x3e/0x80
[  230.060557][    C1]  ? __kasan_slab_free+0x5c/0x80
[  230.060587][    C1]  ? kmem_cache_free+0x182/0x650
[  230.060617][    C1]  ? nlmon_xmit+0xb0/0x100
[  230.060638][    C1]  ? dev_hard_start_xmit+0x2cd/0x830
[  230.060668][    C1]  ? __dev_queue_xmit+0x14c0/0x3820
[  230.060699][    C1]  ? __netlink_deliver_tap+0x5b4/0x860
[  230.060729][    C1]  ? netlink_deliver_tap+0x19c/0x1b0
[  230.060758][    C1]  ? netlink_unicast+0x77f/0x940
[  230.060782][    C1]  ? netlink_sendmsg+0x813/0xb40
[  230.060822][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.060849][    C1]  ? do_syscall_64+0x174/0x580
[  230.060881][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.060945][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  230.060975][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.061012][    C1]  ? nlmon_xmit+0xb0/0x100
[  230.061033][    C1]  ? kmem_cache_free+0x182/0x650
[  230.061078][    C1]  ? __lock_acquire+0x683/0x2cf0
[  230.061116][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.061152][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  230.061180][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.061212][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.061241][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  230.061268][    C1]  ? __dev_queue_xmit+0x29b/0x3820
[  230.061306][    C1]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  230.061334][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.061373][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  230.061399][    C1]  rtnetlink_rcv_msg+0x802/0xc00
[  230.061430][    C1]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  230.061457][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  230.061482][    C1]  ? ref_tracker_free+0x689/0x830
[  230.061517][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  230.061561][    C1]  netlink_rcv_skb+0x226/0x4a0
[  230.061593][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  230.061623][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  230.061667][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  230.061697][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  230.061734][    C1]  netlink_unicast+0x7bb/0x940
[  230.061774][    C1]  netlink_sendmsg+0x813/0xb40
[  230.061823][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.061859][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  230.061893][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.061923][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  230.061962][    C1]  ____sys_sendmsg+0x54e/0x850
[  230.061999][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  230.062040][    C1]  ? import_iovec+0x73/0xa0
[  230.062067][    C1]  ___sys_sendmsg+0x2a5/0x360
[  230.062096][    C1]  ? __lock_acquire+0x683/0x2cf0
[  230.062133][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  230.062175][    C1]  ? futex_wake+0x51b/0x5f0
[  230.062235][    C1]  ? __fget_files+0x2a/0x420
[  230.062268][    C1]  ? __fget_files+0x3a2/0x420
[  230.062311][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  230.062345][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  230.062396][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.062422][    C1]  do_syscall_64+0x174/0x580
[  230.062454][    C1]  ? trace_irq_disable+0x3b/0x140
[  230.062485][    C1]  ? clear_bhb_loop+0x40/0x90
[  230.062514][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.062538][    C1] RIP: 0033:0x7f1147d9e0d9
[  230.062559][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.062580][    C1] RSP: 002b:00007f1148caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.062611][    C1] RAX: ffffffffffffffda RBX: 00007f1148026090 RCX: 00007f1147d9e0d9
[  230.062629][    C1] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000026
[  230.062644][    C1] RBP: 00007f1147e35024 R08: 0000000000000000 R09: 0000000000000000
[  230.062660][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.062674][    C1] R13: 00007f1148026128 R14: 00007f1148026090 R15: 00007ffd719666c8
[  230.062711][    C1]  </TASK>
[  230.063339][    C1] Kernel Offset: disabled