last executing test programs:

1.477111328s ago: executing program 0 (id=2231):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

764.72761ms ago: executing program 1 (id=2241):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"})

521.01851ms ago: executing program 2 (id=2242):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0)

492.917328ms ago: executing program 1 (id=2243):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff966, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

457.267883ms ago: executing program 2 (id=2244):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0xffffffff, 0x4)

447.070273ms ago: executing program 0 (id=2245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x4)

328.280319ms ago: executing program 1 (id=2246):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)

328.036991ms ago: executing program 2 (id=2247):
r0 = socket$caif_stream(0x25, 0x1, 0x5)
recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10100, 0x0)

326.50744ms ago: executing program 0 (id=2248):
unshare(0x20000400)
r0 = socket(0x1, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)

266.565741ms ago: executing program 1 (id=2249):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'})

266.428913ms ago: executing program 2 (id=2250):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x57)

209.771604ms ago: executing program 0 (id=2251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xb}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4091)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

135.992039ms ago: executing program 0 (id=2252):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

135.754803ms ago: executing program 1 (id=2253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1}, {0x1, 0x2}]}]}]}]}, 0x30}}, 0x0)

75.759888ms ago: executing program 0 (id=2254):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0)

75.55243ms ago: executing program 2 (id=2255):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110a100000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44)

213.891µs ago: executing program 1 (id=2256):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

0s ago: executing program 2 (id=2257):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8eb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21023' (ED25519) to the list of known hosts.
syzkaller login: [   56.007933][ T5817] cgroup: Unknown subsys name 'net'
[   56.157190][ T5817] cgroup: Unknown subsys name 'cpuset'
[   56.161700][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.709507][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.769757][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.774065][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.777592][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.781663][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.785789][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.801463][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.805202][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.808101][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.813479][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.816995][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.834206][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.854139][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.858033][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.861586][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.864737][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.949667][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   62.060803][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.063765][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.066422][ T5831] bridge_slave_0: entered allmulticast mode
[   62.069104][ T5831] bridge_slave_0: entered promiscuous mode
[   62.087706][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.090419][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.092828][ T5831] bridge_slave_1: entered allmulticast mode
[   62.096282][ T5831] bridge_slave_1: entered promiscuous mode
[   62.125597][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.130102][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.160234][ T5831] team0: Port device team_slave_0 added
[   62.170992][ T5831] team0: Port device team_slave_1 added
[   62.236662][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.239195][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.247895][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.278768][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.281308][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.291228][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.296305][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   62.322579][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   62.381499][ T5831] hsr_slave_0: entered promiscuous mode
[   62.383813][ T5831] hsr_slave_1: entered promiscuous mode
[   62.451209][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.453557][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.456402][ T5835] bridge_slave_0: entered allmulticast mode
[   62.459047][ T5835] bridge_slave_0: entered promiscuous mode
[   62.472459][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.475618][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.477987][ T5835] bridge_slave_1: entered allmulticast mode
[   62.480610][ T5835] bridge_slave_1: entered promiscuous mode
[   62.487449][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.489989][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.492783][ T5837] bridge_slave_0: entered allmulticast mode
[   62.495990][ T5837] bridge_slave_0: entered promiscuous mode
[   62.517995][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.520423][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.522783][ T5837] bridge_slave_1: entered allmulticast mode
[   62.526180][ T5837] bridge_slave_1: entered promiscuous mode
[   62.554584][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.580704][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.591942][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.610001][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.644176][ T5835] team0: Port device team_slave_0 added
[   62.666810][ T5835] team0: Port device team_slave_1 added
[   62.670921][ T5837] team0: Port device team_slave_0 added
[   62.700203][ T5837] team0: Port device team_slave_1 added
[   62.712854][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.715619][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.725179][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.762516][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.765960][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.773789][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.778754][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.781684][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.792933][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.799731][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.802579][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.813259][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.891460][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.903552][ T5837] hsr_slave_0: entered promiscuous mode
[   62.907435][ T5837] hsr_slave_1: entered promiscuous mode
[   62.910375][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.913743][ T5837] Cannot create hsr debugfs directory
[   62.934340][ T5835] hsr_slave_0: entered promiscuous mode
[   62.937522][ T5835] hsr_slave_1: entered promiscuous mode
[   62.940437][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.943630][ T5835] Cannot create hsr debugfs directory
[   62.946425][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.972816][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.028227][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.218961][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.223725][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.235024][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.248836][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.331172][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.340918][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.361118][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.371453][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   63.378468][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.386963][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.402304][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.405563][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.431215][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.434353][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.509400][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.552396][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   63.585647][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.588135][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.591980][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.594405][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.620615][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.657356][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   63.678470][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.681451][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.692595][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.695524][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.755086][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.761513][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.821391][ T5835] veth0_vlan: entered promiscuous mode
[   63.854980][ T5835] veth1_vlan: entered promiscuous mode
[   63.859367][ T5831] veth0_vlan: entered promiscuous mode
[   63.864930][ T5843] Bluetooth: hci0: command tx timeout
[   63.878986][ T5831] veth1_vlan: entered promiscuous mode
[   63.923001][ T5835] veth0_macvtap: entered promiscuous mode
[   63.938238][ T5835] veth1_macvtap: entered promiscuous mode
[   63.944767][ T5843] Bluetooth: hci2: command tx timeout
[   63.947350][ T5843] Bluetooth: hci1: command tx timeout
[   63.957159][ T5831] veth0_macvtap: entered promiscuous mode
[   63.968774][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.973887][ T5831] veth1_macvtap: entered promiscuous mode
[   63.988092][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.002352][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.022000][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.028132][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.031790][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.039526][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.050544][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.056697][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.081609][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.085986][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.089703][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.099904][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.121267][ T5837] veth0_vlan: entered promiscuous mode
[   64.162263][ T5837] veth1_vlan: entered promiscuous mode
[   64.227629][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.230391][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.240365][ T5837] veth0_macvtap: entered promiscuous mode
[   64.253633][ T5837] veth1_macvtap: entered promiscuous mode
[   64.273352][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.279394][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.300513][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.308062][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.310547][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.319290][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.349402][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.355167][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.358038][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.361896][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.368069][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.371528][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.423394][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.487423][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.490840][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.545418][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.548712][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.870487][   T33] audit: type=1800 audit(1753450900.896:2): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name=33FFFF dev="tmpfs" ino=39 res=0 errno=0
[   65.010870][ T5929] syzkaller1: entered promiscuous mode
[   65.013198][ T5929] syzkaller1: entered allmulticast mode
[   65.058359][ T5934] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   65.132102][ T5938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.618024][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'.
[   65.947185][ T5832] Bluetooth: hci0: command tx timeout
[   66.025451][ T5832] Bluetooth: hci1: command tx timeout
[   66.027928][ T5832] Bluetooth: hci2: command tx timeout
[   66.091565][ T6038] Set syz0 is full, maxelem 0 reached
[   66.094011][ T6037] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET)
[   66.150993][ T6042] netlink: 'syz.2.61': attribute type 23 has an invalid length.
[   66.244915][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.501426][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.927172][ T6102] netlink: 'syz.0.91': attribute type 1 has an invalid length.
[   66.929787][ T6102] netlink: 236 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.932731][ T6102] NCSI netlink: No device for ifindex 813332851
[   66.972031][ T6105] Zero length message leads to an empty skb
[   67.184383][ T6120] netlink: 'syz.1.100': attribute type 4 has an invalid length.
[   67.291900][ T6130] trusted_key: syz.1.105 sent an empty control message without MSG_MORE.
[   67.308578][ T6132] block nbd0: Unsupported socket: shutdown callout must be supported.
[   67.710958][ T6170] netlink: 'syz.2.125': attribute type 3 has an invalid length.
[   67.724012][ T6170] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.125'.
[   67.790963][ T6179] tipc: Started in network mode
[   67.792687][ T6179] tipc: Node identity a6c83d4ea1bf, cluster identity 4711
[   67.797893][ T6179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.833409][ T6179] syzkaller0: entered promiscuous mode
[   67.839219][ T6179] syzkaller0: entered allmulticast mode
[   67.841741][ T6179] tipc: Resetting bearer <eth:syzkaller0>
[   67.852979][ T6178] tipc: Resetting bearer <eth:syzkaller0>
[   67.971470][ T6189] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   68.027705][ T5832] Bluetooth: hci0: command tx timeout
[   68.106085][ T5832] Bluetooth: hci2: command tx timeout
[   68.108787][ T5843] Bluetooth: hci1: command tx timeout
[   68.541967][ T6178] tipc: Disabling bearer <eth:syzkaller0>
[   69.660562][ T6224] netlink: 'syz.2.147': attribute type 3 has an invalid length.
[   69.660979][ T6225] netlink: 83 bytes leftover after parsing attributes in process `syz.0.146'.
[   69.666624][ T6224] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.147'.
[   69.797387][ T6233] tipc: Started in network mode
[   69.799070][ T6233] tipc: Node identity ac14140f, cluster identity 4711
[   69.801540][ T6233] tipc: New replicast peer: 255.255.255.255
[   69.814385][ T6233] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.045378][ T5839] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   70.105478][ T5832] Bluetooth: hci0: command tx timeout
[   70.117198][ T5839] hid-generic 0005:07C0:5505.0002: item fetching failed at offset 0/1
[   70.120951][ T5839] hid-generic 0005:07C0:5505.0002: probe with driver hid-generic failed with error -22
[   70.143181][ T6268] xt_CT: You must specify a L4 protocol and not use inversions on it
[   70.177091][ T6272] tipc: Enabling <ib:lo> not permitted
[   70.182069][ T6272] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   70.185743][ T5832] Bluetooth: hci2: command tx timeout
[   70.188064][ T5843] Bluetooth: hci1: command tx timeout
[   70.218568][ T6276] unknown channel width for channel at 909000KHz?
[   70.221205][ T6276] unknown channel width for channel at 909000KHz?
[   70.303009][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.0.174'.
[   70.571996][ T6304] netlink: 'syz.2.178': attribute type 12 has an invalid length.
[   70.733637][ T6312] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   70.773666][ T5839] IPVS: starting estimator thread 0...
[   70.798225][ T5839] tipc: Node number set to 2886997007
[   70.864131][ T6316] IPVS: using max 78 ests per chain, 187200 per kthread
[   71.027317][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'.
[   71.047708][ T6331] 8021q: VLANs not supported on vcan0
[   71.154994][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.157910][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.371711][ T6354] smc: net device bond0 applied user defined pnetid SYZ2
[   71.382860][ T6356] Cannot find del_set index 1 as target
[   71.391387][ T6354] smc: net device bond0 erased user defined pnetid SYZ2
[   71.575719][ T6375] warning: `syz.0.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.579922][ T6375] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   71.585879][ T6375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.211'.
[   71.665299][ T6381] xt_CT: No such helper "snmp"
[   71.982614][ T6403] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   72.133605][ T6410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'.
[   72.165987][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.278363][ T6416] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[   72.318280][ T6419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.322133][ T6419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.328149][ T6419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.371976][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.953678][ T6423] IPVS: Scheduler module ip_vs_sip not found
[   73.003107][ T6428] netlink: 'syz.0.233': attribute type 11 has an invalid length.
[   73.077453][ T6430] syzkaller0: entered allmulticast mode
[   73.128854][ T6437] x_tables: ip_tables: udp match: only valid for protocol 17
[   73.149331][ T6439] xt_l2tp: missing protocol rule (udp|l2tpip)
[   74.030600][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.034987][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.123701][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.133114][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.241231][ T5864] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.248430][ T5864] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.252268][ T5864] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.266784][ T5864] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.293442][ T6468] tap0: tun_chr_ioctl cmd 1074025680
[   74.444780][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   74.666103][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.265'.
[   74.992782][ T6530] netlink: 27 bytes leftover after parsing attributes in process `syz.2.281'.
[   74.998344][ T6528] x_tables: unsorted underflow at hook 2
[   75.119843][ T6544] x_tables: duplicate underflow at hook 2
[   75.285247][ T6563] ieee802154 phy1 wpan1: encryption failed: -22
[   75.494360][ T6577] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.187823][ T6599] netlink: 2 bytes leftover after parsing attributes in process `syz.2.309'.
[   76.191965][ T6599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.390276][ T6617] netlink: 'syz.1.319': attribute type 21 has an invalid length.
[   76.491176][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.569210][ T6633] netlink: 'syz.2.327': attribute type 21 has an invalid length.
[   76.572877][ T6633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.327'.
[   76.576911][ T6633] netlink: 'syz.2.327': attribute type 5 has an invalid length.
[   76.580272][ T6633] netlink: 'syz.2.327': attribute type 6 has an invalid length.
[   76.583565][ T6633] netlink: 3 bytes leftover after parsing attributes in process `syz.2.327'.
[   76.868917][ T6649] IPVS: length: 163 != 8
[   77.161607][ T6668] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   77.165204][ T6668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.342'.
[   77.198611][ T6668] xt_CT: No such helper "snmp"
[   77.208886][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'.
[   77.212844][ T6668] tipc: Started in network mode
[   77.215134][ T6668] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   77.218926][ T6668] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   77.357551][ T6680] Bluetooth: MGMT ver 1.23
[   77.850210][ T6702] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   77.948301][    C0] Unknown status report in ack skb
[   78.029743][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   78.143126][ T6727] ipvlan2: entered promiscuous mode
[   78.152265][ T6727] bridge0: port 3(ipvlan2) entered blocking state
[   78.161175][ T6727] bridge0: port 3(ipvlan2) entered disabled state
[   78.163868][ T6727] ipvlan2: entered allmulticast mode
[   78.174266][ T6727] bridge0: entered allmulticast mode
[   78.178289][ T6727] ipvlan2: left allmulticast mode
[   78.180211][ T6727] bridge0: left allmulticast mode
[   78.469830][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   78.477830][ T6749] openvswitch: netlink: Actions may not be safe on all matching packets
[   78.619054][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[   78.902624][   T33] audit: type=1800 audit(1753450914.926:3): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.385" name="cgroup.controllers" dev="tmpfs" ino=696 res=0 errno=0
[   78.912806][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'.
[   78.919120][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'.
[   80.016234][ T6824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.120046][ T6824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.196087][ T6824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.219430][ T6847] veth1_macvtap: left promiscuous mode
[   80.284324][ T6824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.247552][ T5864] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.263103][ T5864] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.290122][ T5864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.293849][ T5864] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.092995][ T6919] bond0: Unable to set peer notification delay as MII monitoring is disabled
[   82.182231][ T6924] __nla_validate_parse: 2 callbacks suppressed
[   82.182245][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[   82.365708][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[   82.369335][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'.
[   83.413798][ T6971] infiniband syz1: set down
[   83.417704][ T6971] infiniband syz1: added macvlan1
[   83.459490][ T6971] RDS/IB: syz1: added
[   83.461805][ T6971] smc: adding ib device syz1 with port count 1
[   83.465130][ T6971] smc:    ib device syz1 port 1 has pnetid 
[   83.932794][ T6981] batadv_slave_1: entered promiscuous mode
[   83.938546][ T6980] batadv_slave_1: left promiscuous mode
[   84.299843][ T7004] tun0: tun_chr_ioctl cmd 1074812117
[   84.518249][ T7018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.523561][ T7018] syzkaller0: entered promiscuous mode
[   84.526649][ T7018] syzkaller0: entered allmulticast mode
[   84.549975][ T7018] tipc: Resetting bearer <eth:syzkaller0>
[   84.559395][ T7017] tipc: Resetting bearer <eth:syzkaller0>
[   84.570168][ T7017] tipc: Disabling bearer <eth:syzkaller0>
[   84.618425][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   84.702264][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'.
[   84.878430][ T7046] tap0: tun_chr_ioctl cmd 35108
[   84.987528][ T7053] netlink: 724 bytes leftover after parsing attributes in process `syz.1.512'.
[   84.991443][ T7053] netlink: 83 bytes leftover after parsing attributes in process `syz.1.512'.
[   85.063891][ T7063] netlink: 508 bytes leftover after parsing attributes in process `syz.1.517'.
[   85.149046][ T7069] netlink: 'syz.2.520': attribute type 8 has an invalid length.
[   85.210774][ T7072] netlink: 64 bytes leftover after parsing attributes in process `syz.2.521'.
[   85.220845][ T7072] netlink: 64 bytes leftover after parsing attributes in process `syz.2.521'.
[   85.766185][ T7109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.770090][ T7109] syzkaller0: entered promiscuous mode
[   85.772796][ T7109] syzkaller0: entered allmulticast mode
[   85.791388][ T7109] tipc: Resetting bearer <eth:syzkaller0>
[   85.799613][ T7108] tipc: Resetting bearer <eth:syzkaller0>
[   85.812229][ T7108] tipc: Disabling bearer <eth:syzkaller0>
[   85.837665][ T7057] Bluetooth: hci0: Opcode 0x080f failed: -4
[   86.101134][ T7126] bridge0: port 3(syz_tun) entered blocking state
[   86.106408][ T7126] bridge0: port 3(syz_tun) entered disabled state
[   86.109873][ T7126] syz_tun: entered allmulticast mode
[   86.113781][ T7126] syz_tun: entered promiscuous mode
[   86.507017][   T10] cfg80211: failed to load regulatory.db
[   87.054916][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888112b56400: rx timeout, send abort
[   87.059779][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112b56400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   87.075039][ T5832] Bluetooth: hci0: command 0x080f tx timeout
[   87.329966][ T7169] netlink: 'syz.2.568': attribute type 29 has an invalid length.
[   87.333260][ T7169] netlink: 'syz.2.568': attribute type 29 has an invalid length.
[   87.339224][ T7169] __nla_validate_parse: 2 callbacks suppressed
[   87.339232][ T7169] netlink: 488 bytes leftover after parsing attributes in process `syz.2.568'.
[   87.397285][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[   87.657495][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[   87.706702][ T7207] tipc: Failed to remove unknown binding: 66,1,1/0:2658064164/2658064166
[   87.709753][ T7207] tipc: Failed to remove unknown binding: 66,1,1/0:2658064164/2658064166
[   87.773883][ T7216] netlink: 148 bytes leftover after parsing attributes in process `syz.0.588'.
[   87.861599][ T7221] netlink: 'syz.2.590': attribute type 11 has an invalid length.
[   88.185050][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.598'.
[   88.189104][ T7237] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   88.288690][ T7239] syzkaller0: entered promiscuous mode
[   88.291071][ T7239] syzkaller0: entered allmulticast mode
[   88.296492][ T7241] sit0: entered promiscuous mode
[   88.304922][ T7241] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[   88.307530][ T7241] netlink: 1 bytes leftover after parsing attributes in process `syz.2.600'.
[   89.207793][ T7258] gretap1: entered promiscuous mode
[   89.278167][ T7262] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   89.282490][ T7262] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   89.344374][ T5838] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.409901][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'.
[   89.575460][ T7288] dummy0: entered allmulticast mode
[   89.577683][ T7286] dummy0: left allmulticast mode
[   89.633128][ T7291] netlink: 'syz.1.620': attribute type 1 has an invalid length.
[   89.878592][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   90.059791][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'.
[   90.066633][ T7293] netlink: 'syz.2.621': attribute type 13 has an invalid length.
[   90.071101][ T7293] netlink: 'syz.2.621': attribute type 17 has an invalid length.
[   90.082242][ T7293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   90.097395][ T7293] syz.2.621 (7293) used greatest stack depth: 19928 bytes left
[   90.194369][ T7311] netlink: 'syz.2.626': attribute type 1 has an invalid length.
[   90.217049][ T7311] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.257846][ T7311] bond1: (slave veth3): Enslaving as an active interface with a down link
[   90.292843][ T7311] vlan2: entered allmulticast mode
[   90.294891][ T7311] veth1: entered allmulticast mode
[   90.297195][ T7311] veth1: entered promiscuous mode
[   90.304048][ T7311] veth1: left promiscuous mode
[   90.317185][ T7311] bond1: (slave vlan2): making interface the new active one
[   90.325952][ T7311] veth1: entered promiscuous mode
[   90.330389][ T7311] vlan2: entered promiscuous mode
[   90.337115][ T7311] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   90.425089][ T5838] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   90.816039][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[   90.823240][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[   90.828807][ T7328] netlink: 'syz.0.634': attribute type 14 has an invalid length.
[   90.832258][ T7328] netlink: 'syz.0.634': attribute type 11 has an invalid length.
[   90.907831][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   90.911596][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   91.434832][ T5838] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   91.451539][ T7373] netlink: 'syz.1.653': attribute type 64 has an invalid length.
[   91.563854][ T1087] smc: removing ib device syz1
[   92.193422][ T7399] netlink: 'syz.0.664': attribute type 13 has an invalid length.
[   92.396169][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.501996][ T7413] __nla_validate_parse: 2 callbacks suppressed
[   92.502005][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[   93.579394][ T7436] netlink: 'syz.1.680': attribute type 12 has an invalid length.
[   93.583029][ T7436] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.680'.
[   93.816362][ T7442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.683'.
[   93.829356][ T7429] syz.0.677: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.865922][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.0.677 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   93.865944][ T7429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.865951][ T7429] Call Trace:
[   93.865957][ T7429]  <TASK>
[   93.865964][ T7429]  dump_stack_lvl+0x189/0x250
[   93.865987][ T7429]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.866002][ T7429]  ? __pfx__printk+0x10/0x10
[   93.866020][ T7429]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.866037][ T7429]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.866055][ T7429]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.866074][ T7429]  warn_alloc+0x214/0x310
[   93.866093][ T7429]  ? __pfx_warn_alloc+0x10/0x10
[   93.866111][ T7429]  ? __get_vm_area_node+0x28f/0x300
[   93.866132][ T7429]  ? hash_ipmac_create+0x358/0xfe0
[   93.866151][ T7429]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.866168][ T7429]  ? do_syscall_64+0xfa/0x3b0
[   93.866203][ T7429]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.866225][ T7429]  ? rcu_is_watching+0x15/0xb0
[   93.866240][ T7429]  ? hash_ipmac_create+0x358/0xfe0
[   93.866255][ T7429]  ? hash_ipmac_create+0x358/0xfe0
[   93.866271][ T7429]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   93.866289][ T7429]  ? hash_ipmac_create+0x358/0xfe0
[   93.866305][ T7429]  ? hash_ipmac_create+0x2fe/0xfe0
[   93.866323][ T7429]  hash_ipmac_create+0x358/0xfe0
[   93.866345][ T7429]  ? __nla_parse+0x40/0x60
[   93.866362][ T7429]  ? __pfx_hash_ipmac_create+0x10/0x10
[   93.866380][ T7429]  ip_set_create+0xa97/0x1940
[   93.866398][ T7429]  ? ip_set_create+0x4a2/0x1940
[   93.866423][ T7429]  ? __pfx_ip_set_create+0x10/0x10
[   93.866464][ T7429]  nfnetlink_rcv_msg+0xb4d/0x1130
[   93.866484][ T7429]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   93.866514][ T7429]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   93.866530][ T7429]  ? kasan_save_free_info+0x46/0x50
[   93.866577][ T7429]  netlink_rcv_skb+0x208/0x470
[   93.866590][ T7429]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   93.866609][ T7429]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.866629][ T7429]  ? bpf_lsm_capable+0x9/0x20
[   93.866645][ T7429]  ? security_capable+0x7e/0x2e0
[   93.866663][ T7429]  nfnetlink_rcv+0x26a/0x2520
[   93.866737][ T7429]  ? __dev_queue_xmit+0x1d79/0x3b50
[   93.866763][ T7429]  ? __dev_queue_xmit+0x27b/0x3b50
[   93.866789][ T7429]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   93.866807][ T7429]  ? __pfx___dev_queue_xmit+0x10/0x10
[   93.866834][ T7429]  ? ref_tracker_free+0x63a/0x7d0
[   93.866848][ T7429]  ? __asan_memcpy+0x40/0x70
[   93.866862][ T7429]  ? __pfx_ref_tracker_free+0x10/0x10
[   93.866874][ T7429]  ? __skb_clone+0x63/0x7a0
[   93.866894][ T7429]  ? __skb_clone+0x483/0x7a0
[   93.866914][ T7429]  ? skb_clone+0x246/0x3a0
[   93.866934][ T7429]  ? __netlink_deliver_tap+0x807/0x850
[   93.866947][ T7429]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.866964][ T7429]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.866982][ T7429]  netlink_unicast+0x82f/0x9e0
[   93.867008][ T7429]  ? __pfx_netlink_unicast+0x10/0x10
[   93.867027][ T7429]  ? netlink_sendmsg+0x642/0xb30
[   93.867038][ T7429]  ? skb_put+0x11b/0x210
[   93.867054][ T7429]  netlink_sendmsg+0x805/0xb30
[   93.867073][ T7429]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.867088][ T7429]  ? aa_sock_msg_perm+0x94/0x160
[   93.867103][ T7429]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.867115][ T7429]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.867128][ T7429]  __sock_sendmsg+0x21c/0x270
[   93.867149][ T7429]  ____sys_sendmsg+0x505/0x830
[   93.867168][ T7429]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.867189][ T7429]  ? import_iovec+0x74/0xa0
[   93.867209][ T7429]  ___sys_sendmsg+0x21f/0x2a0
[   93.867226][ T7429]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.867267][ T7429]  ? __fget_files+0x2a/0x420
[   93.867276][ T7429]  ? __fget_files+0x3a0/0x420
[   93.867294][ T7429]  __x64_sys_sendmsg+0x19b/0x260
[   93.867311][ T7429]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.867334][ T7429]  ? rcu_is_watching+0x15/0xb0
[   93.867351][ T7429]  ? do_syscall_64+0xbe/0x3b0
[   93.867367][ T7429]  do_syscall_64+0xfa/0x3b0
[   93.867379][ T7429]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.867391][ T7429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.867403][ T7429]  ? exc_page_fault+0x9f/0xf0
[   93.867416][ T7429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.867427][ T7429] RIP: 0033:0x7f9dce58e9a9
[   93.867439][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.867449][ T7429] RSP: 002b:00007f9dcc3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.867462][ T7429] RAX: ffffffffffffffda RBX: 00007f9dce7b6160 RCX: 00007f9dce58e9a9
[   93.867470][ T7429] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[   93.867477][ T7429] RBP: 00007f9dce610d69 R08: 0000000000000000 R09: 0000000000000000
[   93.867484][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.867491][ T7429] R13: 0000000000000000 R14: 00007f9dce7b6160 R15: 00007ffca1794b48
[   93.867510][ T7429]  </TASK>
[   93.867517][ T7429] Mem-Info:
[   94.052907][ T7429] active_anon:5484 inactive_anon:0 isolated_anon:0
[   94.052907][ T7429]  active_file:920 inactive_file:38217 isolated_file:0
[   94.052907][ T7429]  unevictable:1768 dirty:247 writeback:0
[   94.052907][ T7429]  slab_reclaimable:9396 slab_unreclaimable:54427
[   94.052907][ T7429]  mapped:19148 shmem:2439 pagetables:1097
[   94.052907][ T7429]  sec_pagetables:0 bounce:0
[   94.052907][ T7429]  kernel_misc_reclaimable:0
[   94.052907][ T7429]  free:290060 free_pcp:25617 free_cma:0
[   94.071578][ T7429] Node 0 active_anon:13120kB inactive_anon:0kB active_file:1792kB inactive_file:135072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42300kB dirty:428kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4988kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.088867][ T7429] Node 1 active_anon:8748kB inactive_anon:0kB active_file:1888kB inactive_file:17796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34292kB dirty:560kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6636kB pagetables:2472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.111732][ T7429] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.126526][ T7429] lowmem_reserve[]: 0 812 812 812 812
[   94.128901][ T7429] Node 0 DMA32 free:283320kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13256kB inactive_anon:0kB active_file:1792kB inactive_file:135072kB unevictable:3536kB writepending:428kB present:1556484kB managed:831784kB mlocked:0kB bounce:0kB free_pcp:42552kB local_pcp:20308kB free_cma:0kB
[   94.146882][ T7429] lowmem_reserve[]: 0 0 0 0 0
[   94.148842][ T7429] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.172369][ T7429] lowmem_reserve[]: 0 0 854 854 854
[   94.175607][ T7429] Node 1 Normal free:402944kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8748kB inactive_anon:0kB active_file:1888kB inactive_file:17796kB unevictable:3536kB writepending:560kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:60412kB local_pcp:40268kB free_cma:0kB
[   94.193445][ T7429] lowmem_reserve[]: 0 0 0 0 0
[   94.197039][ T7429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   94.205924][ T7429] Node 0 DMA32: 1206*4kB (UM) 1092*8kB (UME) 296*16kB (UME) 386*32kB (UME) 198*64kB (UME) 87*128kB (UME) 40*256kB (UME) 19*512kB (UME) 10*1024kB (UM) 9*2048kB (UME) 44*4096kB (UM) = 283320kB
[   94.216670][ T7429] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   94.229845][ T7429] Node 1 Normal: 200*4kB (UE) 76*8kB (UE) 90*16kB (U) 155*32kB (UME) 142*64kB (U) 42*128kB (UM) 21*256kB (UM) 17*512kB (UM) 16*1024kB (UME) 9*2048kB (UME) 81*4096kB (M) = 402944kB
[   94.238454][ T7429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.243000][ T7429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.256200][ T7429] 41576 total pagecache pages
[   94.258465][ T7429] 0 pages in swap cache
[   94.260291][ T7429] Free swap  = 124996kB
[   94.262027][ T7429] Total swap = 124996kB
[   94.263768][ T7429] 786301 pages RAM
[   94.267936][ T7429] 0 pages HighMem/MovableOnly
[   94.270172][ T7429] 241107 pages reserved
[   94.272031][ T7429] 0 pages cma reserved
[   94.428253][ T7386] Set syz1 is full, maxelem 65536 reached
[   94.524289][ T7464] block nbd0: server does not support multiple connections per device.
[   94.540135][ T7464] block nbd0: shutting down sockets
[   95.224155][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   95.347559][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.717'.
[   95.439210][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[   95.599370][ T7552] netlink: 'syz.0.730': attribute type 1 has an invalid length.
[   95.614891][ T7552] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.641605][ T7552] bond1: (slave gretap1): making interface the new active one
[   95.669076][ T7552] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   95.693756][ T7552] syz.0.730 (7552) used greatest stack depth: 18832 bytes left
[   95.944309][ T7577] syz_tun: entered allmulticast mode
[   95.947876][ T7577] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   96.213489][ T7602] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.753'.
[   96.224017][ T7602] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   96.227271][ T7602] openvswitch: netlink: Duplicate key (type 0).
[   96.569363][ T7624] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   97.338951][ T7637] tipc: Enabled bearer <eth:geneve1>, priority 10
[   97.795477][ T7669] netlink: 'syz.2.782': attribute type 10 has an invalid length.
[   97.807986][ T7669] 8021q: adding VLAN 0 to HW filter on device team0
[   97.816806][ T7669] bond0: (slave team0): Enslaving as an active interface with an up link
[   98.388010][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[   98.454086][ T5838] tipc: Node number set to 125254990
[   98.518756][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'.
[   99.128861][ T7710] netlink: 104 bytes leftover after parsing attributes in process `syz.2.800'.
[   99.706181][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'.
[   99.712913][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'.
[   99.729439][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'.
[   99.739785][ T7746] xt_TCPMSS: Only works on TCP SYN packets
[   99.808859][ T7748] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   99.820078][ T7750] netlink: 100 bytes leftover after parsing attributes in process `syz.1.819'.
[  100.030136][ T7761] DL<Y: renamed from lo (while UP)
[  101.010247][ T7796] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  101.603581][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'.
[  101.685340][ T6463] vlan2: left promiscuous mode
[  102.177701][ T7841] netlink: 14 bytes leftover after parsing attributes in process `syz.1.858'.
[  102.328209][ T7841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.334613][ T7841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.340383][ T7841] bond0 (unregistering): Released all slaves
[  102.498761][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  102.583879][ T7849] hsr_slave_1 (unregistering): left promiscuous mode
[  102.705689][ T7853] netlink: 'syz.1.860': attribute type 39 has an invalid length.
[  103.493721][ T7889] __nla_validate_parse: 1 callbacks suppressed
[  103.493733][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'.
[  103.621962][ T7899] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  103.784592][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  103.869002][ T7910] wireguard0: entered promiscuous mode
[  103.871719][ T7910] wireguard0: entered allmulticast mode
[  104.189913][ T7930] netlink: 17 bytes leftover after parsing attributes in process `syz.2.893'.
[  104.194065][ T7930] netlink: zone id is out of range
[  104.196428][ T7930] netlink: zone id is out of range
[  104.198719][ T7930] netlink: zone id is out of range
[  104.201044][ T7930] netlink: zone id is out of range
[  104.203179][ T7930] netlink: zone id is out of range
[  104.207511][ T7930] netlink: zone id is out of range
[  104.209683][ T7930] netlink: zone id is out of range
[  104.212046][ T7930] netlink: zone id is out of range
[  104.214742][ T7930] netlink: zone id is out of range
[  104.216862][ T7930] netlink: zone id is out of range
[  104.258453][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  104.279269][ T7932] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.282681][ T7932] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.652999][ T7950] geneve2: entered promiscuous mode
[  104.655988][ T7950] geneve2: entered allmulticast mode
[  104.667407][ T6463] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 52886 - 0
[  104.670712][ T6463] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 57842 - 0
[  104.679828][ T6463] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 52886 - 0
[  104.682903][ T6463] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 57842 - 0
[  104.693281][ T6463] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 52886 - 0
[  104.696935][ T6463] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 57842 - 0
[  104.699912][ T6463] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 52886 - 0
[  104.706199][ T6463] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 57842 - 0
[  104.928550][ T7961] netlink: 156 bytes leftover after parsing attributes in process `syz.0.906'.
[  105.845383][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.928'.
[  106.850901][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'.
[  107.669432][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.970'.
[  107.673526][ T8122] netlink: 3 bytes leftover after parsing attributes in process `syz.0.970'.
[  108.133525][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'.
[  108.138670][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'.
[  108.818380][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.896427][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.915941][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.968098][ T8202] tipc: Resetting bearer <eth:geneve1>
[  108.989783][ T8204] team0: No ports can be present during mode change
[  108.997111][ T5852] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.000199][ T5852] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 52886 - 0
[  109.003503][ T5852] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 57842 - 0
[  109.016338][ T5852] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.019862][ T5852] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 52886 - 0
[  109.025982][ T5852] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 57842 - 0
[  109.030202][ T5852] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.033684][ T5852] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 52886 - 0
[  109.040498][ T5852] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 57842 - 0
[  109.045271][ T5852] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.048683][ T5852] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 52886 - 0
[  109.051992][ T5852] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 57842 - 0
[  109.681151][ T8253] net_ratelimit: 74 callbacks suppressed
[  109.681168][ T8253] openvswitch: netlink: IPv4 tun info is not correct
[  109.736767][ T8255] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  110.709483][ T8310] __nla_validate_parse: 1 callbacks suppressed
[  110.710559][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'.
[  110.946627][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'.
[  110.950316][ T8317] netlink: 'syz.0.1055': attribute type 20 has an invalid length.
[  110.953516][ T8317] netlink: 'syz.0.1055': attribute type 21 has an invalid length.
[  111.305044][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  111.802955][ T8339] netlink: 'syz.1.1066': attribute type 1 has an invalid length.
[  111.808732][ T8341] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  112.138601][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'.
[  112.505351][ T8360] bond0: entered promiscuous mode
[  112.507451][ T8360] bond_slave_0: entered promiscuous mode
[  112.514364][ T8360] bond_slave_1: entered promiscuous mode
[  112.518201][ T8360] team0: entered promiscuous mode
[  112.520526][ T8360] team_slave_0: entered promiscuous mode
[  112.523335][ T8360] team_slave_1: entered promiscuous mode
[  112.531962][ T8360] macvlan1: entered promiscuous mode
[  112.537435][ T8360] hsr1: entered promiscuous mode
[  112.792933][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1079'.
[  112.949852][ T8380] geneve2: entered promiscuous mode
[  112.956179][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.959838][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.963385][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.978644][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.987995][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'.
[  113.376330][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  113.381056][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  113.452285][ T8425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'.
[  113.620773][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1111'.
[  113.626201][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  113.709656][ T8439] netlink: 'syz.0.1113': attribute type 3 has an invalid length.
[  114.492860][ T8467] netlink: 'syz.1.1120': attribute type 20 has an invalid length.
[  114.609099][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.613171][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.789468][ T8463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.801457][ T8463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.981448][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.985156][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.993046][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.999452][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.220263][ T8480] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  115.242104][ T5832] Bluetooth: hci2: link tx timeout
[  115.244575][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.248066][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.255501][ T8484] netlink: 'syz.1.1129': attribute type 5 has an invalid length.
[  115.257998][ T8484] netlink: 'syz.1.1129': attribute type 5 has an invalid length.
[  115.265471][ T8480] batadv0: entered promiscuous mode
[  115.269790][ T8480] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  116.647914][ T8546] __nla_validate_parse: 8 callbacks suppressed
[  116.647932][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'.
[  116.656724][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'.
[  116.794275][ T8550] Bluetooth: MGMT ver 1.23
[  116.853885][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'.
[  116.859515][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'.
[  117.304416][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  117.703380][ T8598] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1181'.
[  117.929179][ T5852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.932261][ T5852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.947479][ T5852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.951013][ T5852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.047161][ T8632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.049890][ T8632] syzkaller0: entered promiscuous mode
[  118.053282][ T8632] syzkaller0: entered allmulticast mode
[  118.061064][ T8634] x_tables: unsorted underflow at hook 4
[  118.065986][ T8632] tipc: Resetting bearer <eth:syzkaller0>
[  118.070129][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[  118.078081][ T8631] tipc: Disabling bearer <eth:syzkaller0>
[  118.239281][ T8640] netlink: 'syz.0.1201': attribute type 4 has an invalid length.
[  118.376403][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  118.380877][ T8652] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  118.855618][ T8667] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1213'.
[  119.019899][ T8672] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1216'.
[  119.026144][    T9] IPVS: starting estimator thread 0...
[  119.199068][ T8674] IPVS: using max 40 ests per chain, 96000 per kthread
[  119.625280][ T8679] netlink: 'syz.2.1216': attribute type 4 has an invalid length.
[  121.125114][   T33] audit: type=1800 audit(1753450957.146:4): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1241" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2179 res=0 errno=0
[  121.303264][ T8749] netlink: 'syz.2.1244': attribute type 13 has an invalid length.
[  121.307875][ T8749] netlink: 'syz.2.1244': attribute type 17 has an invalid length.
[  121.346881][ T8749] sit0: left promiscuous mode
[  121.360351][ T8749] syz_tun: left allmulticast mode
[  121.391332][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.398815][ T8749] 8021q: adding VLAN 0 to HW filter on device team0
[  121.412690][ T8749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.440238][ T8762] netlink: 'syz.0.1250': attribute type 12 has an invalid length.
[  121.442984][ T8762] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1250'.
[  121.707487][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1257'.
[  122.073501][ T5852] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.209477][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'.
[  122.269291][ T8801] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1265'.
[  122.288442][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1265'.
[  122.809314][ T8825] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1275'.
[  123.893308][ T8885] netlink: 'syz.1.1302': attribute type 14 has an invalid length.
[  123.904655][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'.
[  124.516309][ T8928] unsupported nlmsg_type 40
[  125.158834][ T8969] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  125.338321][ T8979] netlink: 'syz.0.1342': attribute type 5 has an invalid length.
[  125.740313][ T8998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.744187][ T8998] syzkaller0: entered promiscuous mode
[  125.750145][ T8998] syzkaller0: entered allmulticast mode
[  125.779642][ T8998] tipc: Resetting bearer <eth:syzkaller0>
[  125.786615][ T8997] tipc: Resetting bearer <eth:syzkaller0>
[  125.797770][ T8997] tipc: Disabling bearer <eth:syzkaller0>
[  125.835620][ T9003] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  126.215043][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'.
[  126.424274][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  126.565048][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1378'.
[  127.151154][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  127.163327][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  127.203051][ T9100] geneve1: entered promiscuous mode
[  127.207148][ T9100] geneve1: entered allmulticast mode
[  127.211403][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.219074][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.232203][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.238985][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.247229][ T9103] netlink: 'syz.0.1402': attribute type 3 has an invalid length.
[  127.250429][ T9103] netlink: 'syz.0.1402': attribute type 3 has an invalid length.
[  127.270872][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'.
[  127.280057][ T9103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'.
[  127.609940][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'.
[  127.712466][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'.
[  127.717273][ T9142] netlink: 'syz.1.1419': attribute type 5 has an invalid length.
[  127.720561][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'.
[  127.739878][ T9142] geneve3: entered promiscuous mode
[  127.742107][ T9142] geneve3: entered allmulticast mode
[  127.747022][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  127.751011][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  127.760016][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  127.763641][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  127.781077][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'.
[  127.864996][ T5832] Bluetooth: hci0: command tx timeout
[  128.570577][ T9209] netlink: 'syz.0.1448': attribute type 10 has an invalid length.
[  128.585950][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.589596][ T9209] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  128.987439][ T5852] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  128.999855][ T5852] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  129.006127][ T5852] bond0: (slave team0): link status definitely down, disabling slave
[  129.265029][ T9254] xt_l2tp: v2 doesn't support IP mode
[  129.750896][ T9285] netlink: 'syz.1.1483': attribute type 1 has an invalid length.
[  129.753574][ T9285] netlink: 'syz.1.1483': attribute type 2 has an invalid length.
[  129.756868][ T9285] netlink: 1164 bytes leftover after parsing attributes in process `syz.1.1483'.
[  130.030867][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  130.035570][ T9306] netlink: 'syz.2.1494': attribute type 13 has an invalid length.
[  130.039073][ T9306] netlink: 'syz.2.1494': attribute type 11 has an invalid length.
[  130.647666][ T9333] xt_TPROXY: Can be used only with -p tcp or -p udp
[  130.890818][ T9353] bond0: option arp_validate: invalid value (18446744073491447809)
[  131.818141][ T9426] macsec0: entered promiscuous mode
[  131.820534][ T9426] macsec0: entered allmulticast mode
[  131.907263][ T9428] netlink: 'syz.1.1549': attribute type 1 has an invalid length.
[  131.919812][ T9428] netlink: 'syz.1.1549': attribute type 2 has an invalid length.
[  131.937851][ T9428] netlink: 'syz.1.1549': attribute type 1 has an invalid length.
[  131.941170][ T9428] netlink: 'syz.1.1549': attribute type 2 has an invalid length.
[  132.099232][ T9424] netlink: 'syz.2.1539': attribute type 6 has an invalid length.
[  132.159733][ T9438] xt_TPROXY: Can be used only with -p tcp or -p udp
[  132.455809][ T9450] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  132.458953][ T9450] geneve2: left promiscuous mode
[  132.460651][ T9450] geneve2: left allmulticast mode
[  132.492418][ T9452] syzkaller1: entered promiscuous mode
[  132.495767][ T9452] syzkaller1: entered allmulticast mode
[  132.821078][ T9482] __nla_validate_parse: 5 callbacks suppressed
[  132.821090][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1574'.
[  132.848038][ T9484] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  132.999690][   T33] audit: type=1804 audit(1753450969.026:5): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1583" name="/newroot/508/cgroup.controllers" dev="tmpfs" ino=2582 res=1 errno=0
[  133.021509][   T33] audit: type=1800 audit(1753450969.026:6): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1583" name="cgroup.controllers" dev="tmpfs" ino=2582 res=0 errno=0
[  133.021594][ T9498] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1581'.
[  133.127255][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.354725][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'.
[  133.358536][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'.
[  133.363380][ T9531] netlink: 'syz.0.1595': attribute type 10 has an invalid length.
[  133.367979][ T9531] bridge0: port 3(team0) entered blocking state
[  133.378433][ T9531] bridge0: port 3(team0) entered disabled state
[  133.381264][ T9531] team0: entered allmulticast mode
[  133.388535][ T9531] team_slave_0: entered allmulticast mode
[  133.390979][ T9531] team_slave_1: entered allmulticast mode
[  133.397754][ T9531] team0: entered promiscuous mode
[  133.399917][ T9531] team_slave_0: entered promiscuous mode
[  133.402500][ T9531] team_slave_1: entered promiscuous mode
[  133.440035][ T9535] bridge2: entered allmulticast mode
[  133.489843][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'.
[  133.656540][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1608'.
[  133.747199][ T9555] tipc: Started in network mode
[  133.749238][ T9555] tipc: Node identity , cluster identity 4711
[  133.943818][ T9566] syzkaller0: entered promiscuous mode
[  133.947859][ T9566] syzkaller0: entered allmulticast mode
[  135.030610][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'.
[  135.144150][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.259874][ T9600] batadv_slave_1: entered promiscuous mode
[  135.264606][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'.
[  135.279911][ T9598] batadv_slave_1: left promiscuous mode
[  135.740123][ T9628] validate_nla: 1 callbacks suppressed
[  135.740135][ T9628] netlink: 'syz.1.1638': attribute type 5 has an invalid length.
[  136.292280][ T9662] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1653'.
[  136.332409][   T33] audit: type=1804 audit(1753450972.356:7): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1654" name="memory.events" dev="tmpfs" ino=2934 res=1 errno=0
[  136.350049][   T33] audit: type=1800 audit(1753450972.376:8): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1654" name="memory.events" dev="tmpfs" ino=2934 res=0 errno=0
[  136.491730][ T9683] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  136.773237][ T9711] netlink: 'syz.2.1675': attribute type 1 has an invalid length.
[  136.777122][ T9711] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1675'.
[  136.912186][ T9723] gtp0: entered promiscuous mode
[  136.923663][ T9723] gtp0: entered allmulticast mode
[  138.880251][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'.
[  138.995572][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'.
[  139.057249][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'.
[  139.289759][ T9841] xt_HMARK: spi-set and port-set can't be combined
[  139.296760][ T9843] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1730'.
[  139.482252][ T9869] netlink: 'syz.0.1743': attribute type 30 has an invalid length.
[  139.734358][ T9901] netlink: 'syz.0.1760': attribute type 1 has an invalid length.
[  140.433832][ T9966] netlink: 'syz.0.1790': attribute type 1 has an invalid length.
[  140.438190][ T9966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1790'.
[  140.483448][ T9968] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  140.498874][ T9970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.548682][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1793'.
[  140.552795][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1793'.
[  140.960275][T10001] netlink: 'syz.0.1803': attribute type 3 has an invalid length.
[  141.340865][T10028] tun0: tun_chr_ioctl cmd 1074025681
[  141.411377][T10032] xt_hashlimit: size too large, truncated to 1048576
[  141.779791][T10052] xt_hashlimit: size too large, truncated to 1048576
[  141.800467][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1822'.
[  141.837051][T10056] : renamed from bridge_slave_0
[  142.043569][T10069] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  142.793069][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'.
[  142.817105][ T5864] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.817628][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'.
[  142.852988][ T5864] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.865651][ T5864] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.878908][ T5864] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.963982][T10126] delete_channel: no stack
[  143.808131][ T5864] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.822211][ T5864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.831652][ T5864] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.843125][ T5864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.856481][ T5864] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.865741][ T5864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.873625][ T5864] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.881727][ T5864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.056845][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'.
[  144.416950][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  144.599625][T10230] syzkaller0: entered promiscuous mode
[  144.613377][T10230] syzkaller0: entered allmulticast mode
[  145.663654][T10255] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1910'.
[  146.028249][T10296] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1931'.
[  146.075732][T10304] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  146.102422][T10306] netlink: 'syz.2.1935': attribute type 1 has an invalid length.
[  146.117869][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  146.121927][T10309] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  146.128440][T10309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.133085][T10306] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.167433][T10306] ipvlan2: entered allmulticast mode
[  146.173716][T10306] bond2: entered allmulticast mode
[  146.192475][T10306] bond2: (slave gretap1): making interface the new active one
[  146.197108][T10306] gretap1: entered allmulticast mode
[  146.199752][T10306] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  146.307585][T10327] netlink: 'syz.1.1938': attribute type 6 has an invalid length.
[  146.406152][T10336] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  146.575413][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1949'.
[  146.578546][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1949'.
[  146.982967][T10379] netlink: 'syz.1.1963': attribute type 1 has an invalid length.
[  146.991512][T10379] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1963'.
[  147.196329][T10391] netlink: 'syz.1.1970': attribute type 10 has an invalid length.
[  147.199474][T10391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1970'.
[  147.208079][T10391] team0: Port device geneve0 added
[  147.210738][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  147.218698][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1970'.
[  147.227484][T10391] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  147.244110][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  147.255649][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  147.265477][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  147.486661][T10412] bridge0: entered allmulticast mode
[  147.707746][T10424] veth1: entered promiscuous mode
[  147.710840][T10424] netlink: 'syz.0.1985': attribute type 1 has an invalid length.
[  147.718503][T10424] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  148.497251][T10451] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  148.509333][T10451] bridge3: entered promiscuous mode
[  148.511298][T10451] bridge3: entered allmulticast mode
[  148.516810][T10451] team0: Port device bridge3 added
[  148.898117][T10474] syzkaller0: entered promiscuous mode
[  148.900902][T10474] syzkaller0: entered allmulticast mode
[  149.042205][T10467] infiniband syz1: set down
[  149.043881][T10467] infiniband syz1: added veth1_to_bond
[  149.075952][T10467] RDS/IB: syz1: added
[  149.077596][T10467] smc: adding ib device syz1 with port count 1
[  149.082185][T10467] smc:    ib device syz1 port 1 has pnetid SYZ1 (user defined)
[  150.073863][T10499] Unsupported ieee802154 address type: 0
[  150.116333][T10502] __nla_validate_parse: 5 callbacks suppressed
[  150.116378][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'.
[  150.176319][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'.
[  150.251809][T10511] xt_bpf: check failed: parse error
[  150.329994][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'.
[  150.333489][T10519] netlink: 'syz.0.2028': attribute type 7 has an invalid length.
[  150.338111][T10519] netlink: 'syz.0.2028': attribute type 8 has an invalid length.
[  150.342627][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'.
[  150.388425][T10521] vlan2: entered promiscuous mode
[  150.390299][T10521] dummy0: entered promiscuous mode
[  150.542300][T10530] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  150.548045][T10531] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  150.551102][T10531] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  150.555232][T10531] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2033'.
[  150.628473][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'.
[  151.043041][T10570] netlink: 'syz.0.2042': attribute type 16 has an invalid length.
[  151.048333][T10570] netlink: 'syz.0.2042': attribute type 17 has an invalid length.
[  151.058985][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'.
[  151.062834][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'.
[  151.111599][T10570] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.117412][T10570] 8021q: adding VLAN 0 to HW filter on device team0
[  151.132103][T10570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.140777][ T5852] bond0: (slave bond_slave_0): interface is now down
[  151.143800][ T5852] bond0: (slave bond_slave_1): interface is now down
[  151.148937][ T5852] bond0: (slave batadv0): interface is now down
[  151.161983][ T5852] bond0: now running without any active interface!
[  151.180201][T10573] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  151.828110][T10609] netlink: 'syz.1.2064': attribute type 12 has an invalid length.
[  152.203442][T10639] netlink: 'syz.2.2077': attribute type 14 has an invalid length.
[  152.208649][T10639] netlink: 'syz.2.2077': attribute type 13 has an invalid length.
[  153.108560][T10690] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  153.143594][T10690] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.169712][T10690] bond0: (slave gretap4): making interface the new active one
[  153.180772][T10690] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  153.530702][T10723] lo: entered allmulticast mode
[  153.543571][T10723] lo: left allmulticast mode
[  153.657457][T10735] ipt_ECN: cannot use operation on non-tcp rule
[  153.702160][T10737] xt_hashlimit: size too large, truncated to 1048576
[  153.777351][T10743] : renamed from bridge_slave_0
[  153.913364][T10749] xt_hashlimit: size too large, truncated to 1048576
[  154.466060][T10781] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  154.938042][T10812] netlink: 'syz.2.2154': attribute type 9 has an invalid length.
[  154.950101][T10812] macvlan2: entered promiscuous mode
[  154.952634][T10812] hsr0: entered promiscuous mode
[  154.956723][T10812] macvlan2: entered allmulticast mode
[  154.959215][T10812] hsr0: entered allmulticast mode
[  154.961593][T10812] hsr_slave_0: entered allmulticast mode
[  155.112900][T10818] netlink: 'syz.2.2156': attribute type 11 has an invalid length.
[  155.158213][T10820] syz_tun: entered allmulticast mode
[  155.603729][T10841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  155.791757][T10848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  155.799743][T10848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  155.836311][T10855] xt_TPROXY: Can be used only with -p tcp or -p udp
[  155.893453][T10848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  155.898833][T10848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  155.980439][T10848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  155.985030][T10848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  156.051164][T10848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  156.055004][T10848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  156.063735][T10861] __nla_validate_parse: 25 callbacks suppressed
[  156.063747][T10861] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2175'.
[  156.110844][ T5864] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.116587][ T5864] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  156.133300][ T5864] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.137401][ T5864] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  156.152671][ T5864] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.156781][ T5864] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  156.166977][ T5864] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.188853][ T5864] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  156.818952][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2203'.
[  156.961388][T10937] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  157.056081][T10943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2213'.
[  157.059465][T10943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2213'.
[  157.100604][T10945] netlink: 'syz.2.2214': attribute type 1 has an invalid length.
[  157.807486][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2224'.
[  157.832892][T10974] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  158.137469][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'.
[  159.278135][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'.
[  159.282094][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'.
[  159.288895][T11034] netlink: 'syz.0.2251': attribute type 5 has an invalid length.
[  159.292317][T11034] netlink: 'syz.0.2251': attribute type 6 has an invalid length.
[  159.585051][T11051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2259'.
Connection to localhost closed by remote host.
[  159.998822][ T5835] syz_tun (unregistering): left allmulticast mode
[  160.001550][ T5835] syz_tun (unregistering): left promiscuous mode
[  160.006329][ T5835] bridge0: port 3(syz_tun) entered disabled state
[  162.434400][ T5896] page_pool_release_retry() stalled pool shutdown: id 22, 1 inflight 60 sec
[  162.897551][ T5852] team0: left allmulticast mode
[  162.899888][ T5852] team_slave_0: left allmulticast mode
[  162.902262][ T5852] team_slave_1: left allmulticast mode
[  162.905624][ T5852] team0: left promiscuous mode
[  162.907608][ T5852] team_slave_0: left promiscuous mode
[  162.909952][ T5852] team_slave_1: left promiscuous mode
[  162.913519][ T5852] bridge0: port 3(team0) entered disabled state
[  162.920211][ T5852] bridge_slave_1: left allmulticast mode
[  162.922449][ T5852] bridge_slave_1: left promiscuous mode
[  162.925902][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.930704][ T5852] bridge_slave_0: left allmulticast mode
[  162.933157][ T5852] bridge_slave_0: left promiscuous mode
[  162.936624][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.120435][ T5852] bond1 (unregistering): (slave gretap1): Releasing active interface
[  163.153872][ T5852] tipc: Disabling bearer <eth:geneve1>
[  163.327033][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.330537][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.334578][ T5852] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  163.337708][ T5852] bond0 (unregistering): Released all slaves
[  163.405312][ T5852] bond1 (unregistering): Released all slaves
[  163.484588][ T5852] tipc: Left network mode
[  163.516658][ T5852] IPVS: stopping master sync thread 5934 ...
[  163.520876][ T5852] IPVS: stopping backup sync thread 6416 ...
[  163.900353][ T5852] hsr_slave_0: left promiscuous mode
[  163.902667][ T5852] hsr_slave_1: left promiscuous mode
[  163.909561][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.912770][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.126248][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  164.162590][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  164.835633][ T5852] ------------[ cut here ]------------
[  164.837944][ T5852] WARNING: CPU: 1 PID: 5852 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  164.841823][ T5852] Modules linked in:
[  164.844793][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  164.850468][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.855587][ T5852] Workqueue: netns cleanup_net
[  164.857722][ T5852] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  164.860107][ T5852] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 d4 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 a2 eb f7 e8 d1 c4 a8 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 c4 a8 f7 90 0f 0b 90 e9 60 fe ff ff
[  164.869256][ T5852] RSP: 0018:ffffc9000370f898 EFLAGS: 00010293
[  164.871877][ T5852] RAX: ffffffff8a17635f RBX: ffff888027ff0000 RCX: ffff888108cf1cc0
[  164.875524][ T5852] RDX: 0000000000000000 RSI: ffffffff8db8d3fb RDI: ffff888108cf1cc0
[  164.878805][ T5852] RBP: ffffc9000370f9b0 R08: ffffffff8fa235f7 R09: 1ffffffff1f446be
[  164.882216][ T5852] R10: dffffc0000000000 R11: fffffbfff1f446bf R12: ffffffff8f619560
[  164.886531][ T5852] R13: 1ffff920006e1f40 R14: ffff888027ff1480 R15: dffffc0000000000
[  164.889981][ T5852] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  164.893863][ T5852] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.897738][ T5852] CR2: 00007fdfcc0e7d60 CR3: 000000002859a000 CR4: 00000000000006f0
[  164.901196][ T5852] Call Trace:
[  164.902666][ T5852]  <TASK>
[  164.904833][ T5852]  xfrm_net_exit+0x2d/0x70
[  164.907082][ T5852]  ops_undo_list+0x49a/0x990
[  164.909061][ T5852]  ? __pfx_ops_undo_list+0x10/0x10
[  164.911330][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  164.913546][ T5852]  cleanup_net+0x4c5/0x800
[  164.916195][ T5852]  ? __pfx_cleanup_net+0x10/0x10
[  164.918411][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.920700][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  164.923146][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  164.926510][ T5852]  process_scheduled_works+0xae1/0x17b0
[  164.928840][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  164.931304][ T5852]  worker_thread+0x8a0/0xda0
[  164.933206][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.936648][ T5852]  ? __kthread_parkme+0x7b/0x200
[  164.938819][ T5852]  kthread+0x711/0x8a0
[  164.940615][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  164.942728][ T5852]  ? __pfx_kthread+0x10/0x10
[  164.945531][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.947817][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.950104][ T5852]  ? __pfx_kthread+0x10/0x10
[  164.952204][ T5852]  ret_from_fork+0x3fc/0x770
[  164.954939][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[  164.957128][ T5852]  ? __switch_to_asm+0x39/0x70
[  164.959248][ T5852]  ? __switch_to_asm+0x33/0x70
[  164.961409][ T5852]  ? __pfx_kthread+0x10/0x10
[  164.963384][ T5852]  ret_from_fork_asm+0x1a/0x30
[  164.966174][ T5852]  </TASK>
[  164.967576][ T5852] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  164.970695][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  164.975927][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.979995][ T5852] Workqueue: netns cleanup_net
[  164.981975][ T5852] Call Trace:
[  164.983378][ T5852]  <TASK>
[  164.984670][ T5852]  dump_stack_lvl+0x99/0x250
[  164.986550][ T5852]  ? __asan_memcpy+0x40/0x70
[  164.988375][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.990448][ T5852]  ? __pfx__printk+0x10/0x10
[  164.992339][ T5852]  panic+0x2db/0x790
[  164.993965][ T5852]  ? __pfx_panic+0x10/0x10
[  164.995821][ T5852]  ? ret_from_fork_asm+0x1a/0x30
[  164.997909][ T5852]  __warn+0x31b/0x4b0
[  164.999598][ T5852]  ? xfrm_state_fini+0x270/0x2f0
[  165.001682][ T5852]  ? xfrm_state_fini+0x270/0x2f0
[  165.003812][ T5852]  report_bug+0x2be/0x4f0
[  165.005669][ T5852]  ? xfrm_state_fini+0x270/0x2f0
[  165.007750][ T5852]  ? xfrm_state_fini+0x270/0x2f0
[  165.009836][ T5852]  ? xfrm_state_fini+0x272/0x2f0
[  165.011907][ T5852]  handle_bug+0x84/0x160
[  165.013712][ T5852]  exc_invalid_op+0x1a/0x50
[  165.015567][ T5852]  asm_exc_invalid_op+0x1a/0x20
[  165.017573][ T5852] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  165.019789][ T5852] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 d4 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 a2 eb f7 e8 d1 c4 a8 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 c4 a8 f7 90 0f 0b 90 e9 60 fe ff ff
[  165.027662][ T5852] RSP: 0018:ffffc9000370f898 EFLAGS: 00010293
[  165.030069][ T5852] RAX: ffffffff8a17635f RBX: ffff888027ff0000 RCX: ffff888108cf1cc0
[  165.033165][ T5852] RDX: 0000000000000000 RSI: ffffffff8db8d3fb RDI: ffff888108cf1cc0
[  165.036412][ T5852] RBP: ffffc9000370f9b0 R08: ffffffff8fa235f7 R09: 1ffffffff1f446be
[  165.039643][ T5852] R10: dffffc0000000000 R11: fffffbfff1f446bf R12: ffffffff8f619560
[  165.042977][ T5852] R13: 1ffff920006e1f40 R14: ffff888027ff1480 R15: dffffc0000000000
[  165.046305][ T5852]  ? xfrm_state_fini+0x26f/0x2f0
[  165.048463][ T5852]  ? xfrm_state_fini+0x26f/0x2f0
[  165.050605][ T5852]  xfrm_net_exit+0x2d/0x70
[  165.052542][ T5852]  ops_undo_list+0x49a/0x990
[  165.054519][ T5852]  ? __pfx_ops_undo_list+0x10/0x10
[  165.056729][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  165.058886][ T5852]  cleanup_net+0x4c5/0x800
[  165.060759][ T5852]  ? __pfx_cleanup_net+0x10/0x10
[  165.062742][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.064891][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  165.067197][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  165.069640][ T5852]  process_scheduled_works+0xae1/0x17b0
[  165.072011][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  165.074583][ T5852]  worker_thread+0x8a0/0xda0
[  165.076580][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  165.079244][ T5852]  ? __kthread_parkme+0x7b/0x200
[  165.081308][ T5852]  kthread+0x711/0x8a0
[  165.083009][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  165.085166][ T5852]  ? __pfx_kthread+0x10/0x10
[  165.087128][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.089330][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.091477][ T5852]  ? __pfx_kthread+0x10/0x10
[  165.093399][ T5852]  ret_from_fork+0x3fc/0x770
[  165.095257][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[  165.097385][ T5852]  ? __switch_to_asm+0x39/0x70
[  165.099373][ T5852]  ? __switch_to_asm+0x33/0x70
[  165.101405][ T5852]  ? __pfx_kthread+0x10/0x10
[  165.103371][ T5852]  ret_from_fork_asm+0x1a/0x30
[  165.105454][ T5852]  </TASK>
[  165.107518][ T5852] Kernel Offset: disabled
[  165.109409][ T5852] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:43:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=33cd00a703a91200 RDX=0000000000000100
RSI=dffffc0000000000 RDI=000000243433abb1 RBP=ffffc90000007df8 RSP=ffffc90000007c08
R8 =ffffffff8fa235f7 R9 =1ffffffff1f446be R10=dffffc0000000000 R11=fffffbfff1f446bf
R12=ffff88804b03a140 R13=dffffc0000000000 R14=000000243433abb1 R15=ffff88804b03a040
RIP=ffffffff8197f634 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0ad4e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 0000000000000000 XMM01=0000ff00ff000000 00ff000000000000
XMM02=ff000000000000ff 00000000000000ff XMM03=0000000000000000 000000000000ff00
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000370f030
R8 =ffff888020cc0237 R9 =1ffff11004198046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff885 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdfcc0e7d60 CR3=000000002859a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
