last executing test programs:

1.761628809s ago: executing program 1 (id=1946):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x5, 0x40, 0x1d, 0x8001, 0x1, 0xb059, 0x8}}, {0x0, 0x2, [0x5, 0xc76c, 0x8, 0x401, 0xffff, 0x2, 0x5]}}, {{0x0, 0x1, {0xc7, 0xf7, 0x5, 0x1, 0x1, 0x4, 0x4}}, {0x0, 0x2, [0x3, 0x6d]}}, {{0x0, 0x1, {0x7, 0x0, 0xbfd, 0x1, 0x1, 0x200, 0xff}}, {0x0, 0x2, [0x7, 0x4]}}, {{0x0, 0x1, {0x7, 0xfb, 0x1000, 0x88d, 0x1, 0x5ba90513, 0xd}}, {0x0, 0x2, [0x8, 0x8ed6, 0xdce, 0x1, 0x8001, 0x6, 0x9, 0xf52]}}, {{0x0, 0x1, {0x9, 0xed, 0x4, 0x2, 0x1, 0x9, 0x1}}, {0x0, 0x2, [0x1, 0x9, 0x5, 0x5]}}, {{0x0, 0x1, {0x6, 0x5, 0x5, 0x3, 0x2, 0x7, 0x9}}, {0x0, 0x2, [0x0, 0x8, 0xfff7]}}, {{0x0, 0x1, {0x6, 0x8, 0x7930, 0x800, 0x2, 0x30000000}}, {0x0, 0x2, [0x9, 0x2c70, 0x5, 0xfffd, 0x400, 0x0, 0x9, 0x6, 0x7, 0x8001]}}, {{0x0, 0x1, {0x9f, 0xd, 0xa7de, 0xfaf4, 0x0, 0x0, 0xbf}}, {0x0, 0x2, [0x9f, 0x5, 0x5, 0x3, 0x1, 0xa, 0x4, 0x7]}}, {{0x0, 0x1, {0x10, 0xc, 0x4, 0x4, 0x1, 0x80000001, 0xfff}}, {0x0, 0x2, [0x2, 0x2, 0x0, 0x7fff, 0x5, 0x1ff, 0xfd, 0x8, 0x800]}}, {{0x0, 0x1, {0x0, 0x3, 0x9, 0x0, 0x1, 0x5, 0x81}}, {0x0, 0x2, [0xe, 0x5, 0x0]}}]}]}, 0x44}}, 0x44040)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x8000010, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100))
pselect6(0x0, 0x0, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r9)
sendmsg$DEVLINK_CMD_RATE_DEL(r9, 0x0, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.171387969s ago: executing program 2 (id=1951):
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)
writev(r0, &(0x7f0000001440)=[{&(0x7f0000000080)="45267eab60b04581197a9dbcb07e6b6051b3524d8fef2f76b7d112513b6fbd4dccb3909824c154e1a35b4e977ba36f691a712fbce4459e47de68bee51d9c36b299d029c47468ea7b9cb7f1750d7db65b71f696b2be87a1db6927bf", 0x5b}, {&(0x7f0000000100)="6c6247dbbda9cc96bc69c7d8c9673d4d6e304bbfe401f721a1b6486358e61c7e2103968982392a425cf05999b61df1b0cb0e7a98944b85e4593485b7031a82ae7a54d66e38f56af9e625040f", 0x4c}, {&(0x7f0000000180)="0353bf3c95b44e9b2aba780a6fd2449e853ce502d5bf0247fe44702381e44e78eb150225efa599ec961671df5115104efef8e3c4549596e2154f5e12d4e503a8fad5f5c53365e4a99bc900194fd16b64bbce8819a59779f2556e72d166a5c8ba4327ea767fee593652dd7ac151500cb45bc15e7ce5157233a05e75471434c37057e2fb4250f1822cb3641277c3ae35bcad58c83ec3ddd7eff13bcb644301284a63bc11d4693552a00c8a126230510f0a933291aaa6aec48f7e6c0a3d3d1c4d8cacd9f69002c817389e9cad19030375adc4e124b6bd", 0xd5}, {&(0x7f0000000280)="26ad83aade14289370aba1d5730328ca046ecb8f374d1bdccda7529ce37995c7e1f40dbb98429f664a008a4022d5371d04ab31351a084e34b380597790c5e27b66906e1be69e9ad4de5909a3d9370ddd1a4a79301226584143fd0ffe866ec66022166d849e9dd265339bfeffa8bdad853f453cb0d2a334934f431a362475f3e4e354cda9540ec0b6261e8aede89571309fb10d12e8e1c182623c445e868c63dbbfeb75f79477bcf092e2870fef2ce0d63a4cf7c1fcfa5a742b607b4a6cb64224e167c837b49b27f722b94554caf7b2900255e3f82b5260e681be023753159602e68da48c00ec018d75", 0xe9}, {&(0x7f0000000380)="fcf33db4bef424dc4f8e58bc4af9a6a9209aecd88c803f09679b7e181c2efb96e679a345886d8beb69c432c5ca224471ff377790b5800a8280ad5b99922918483396381c", 0x44}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="1d5fd91e913947a8496d08df99454d494982b2", 0x13}], 0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000014c0)={0x1, 0x8109, 0x80, 0x3ff, <r2=>0x0}, &(0x7f0000001500)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001580)={r2, 0x1c, &(0x7f0000001540)=[@in6={0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4ab}]}, &(0x7f00000015c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001580)={r2, 0x1c, &(0x7f0000001540)=[@in6={0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4ab}]}, &(0x7f00000015c0)=0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xc}]}, &(0x7f0000001680)='GPL\x00', 0x10001, 0x93, &(0x7f00000016c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x5, 0x0, 0x2, 0x1050}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000017c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001800)=[{0x2, 0x1, 0x1, 0x3}, {0x4, 0x2, 0x6}, {0x3, 0x3, 0x8, 0x5}, {0x0, 0x4, 0x4, 0x4}, {0x4, 0x4, 0x7, 0x4}, {0x5, 0x2, 0x5, 0x9}, {0x1, 0x5, 0x10, 0x4}], 0x10, 0x5efc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001600)='xdp_exception\x00', r3, 0x0, 0x10001}, 0x18)
getsockopt(r0, 0xb0, 0x5, &(0x7f0000001980)=""/4096, &(0x7f0000002980)=0x1000) (async)
getsockopt(r0, 0xb0, 0x5, &(0x7f0000001980)=""/4096, &(0x7f0000002980)=0x1000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@bloom_filter={0x1e, 0x0, 0xf547, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, r0, 0x3, 0x3, 0x5, 0xf}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002b40)={'sit0\x00', &(0x7f0000002a40)={'syztnl1\x00', 0x0, 0x82a618e75d76d73b, 0x7800, 0x2, 0x100, {{0x2b, 0x4, 0x3, 0x2b, 0xac, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x7a, 0x3, 0x6, [{@local, 0x81}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x74}, {@multicast2, 0x2}, {@multicast2, 0x1}, {@multicast1, 0x8}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @noop, @timestamp_addr={0x44, 0x44, 0x17, 0x1, 0x0, [{@rand_addr=0x64010102, 0x7}, {@broadcast, 0xf}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x493}, {@broadcast, 0xc2c}, {@multicast2, 0x88000000}]}, @generic={0x82, 0x7, "6db0f63294"}, @timestamp={0x44, 0x8, 0x27, 0x0, 0xb, [0x0]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002b40)={'sit0\x00', &(0x7f0000002a40)={'syztnl1\x00', <r5=>0x0, 0x82a618e75d76d73b, 0x7800, 0x2, 0x100, {{0x2b, 0x4, 0x3, 0x2b, 0xac, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x7a, 0x3, 0x6, [{@local, 0x81}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x74}, {@multicast2, 0x2}, {@multicast2, 0x1}, {@multicast1, 0x8}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @noop, @timestamp_addr={0x44, 0x44, 0x17, 0x1, 0x0, [{@rand_addr=0x64010102, 0x7}, {@broadcast, 0xf}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x493}, {@broadcast, 0xc2c}, {@multicast2, 0x88000000}]}, @generic={0x82, 0x7, "6db0f63294"}, @timestamp={0x44, 0x8, 0x27, 0x0, 0xb, [0x0]}]}}}}})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002b80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfd1, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000002c00)={0x1d, r5, 0x2, {0x1, 0x0, 0x3}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002c40)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002c40))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002c80)={'macvlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002c80)={'macvlan0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x3, 0x20, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002dc0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000002e00)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x7, &(0x7f0000002e40)=[r6, r4, r6, r6, r4, r6, r6, r4, r4], &(0x7f0000002e80)=[{0x4, 0x3, 0x9}, {0x0, 0x5, 0x3, 0xa}, {0x0, 0x5, 0xc, 0x2}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x2, 0x3, 0x7}], 0x10, 0x9}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x3, 0x20, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002dc0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000002e00)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x7, &(0x7f0000002e40)=[r6, r4, r6, r6, r4, r6, r6, r4, r4], &(0x7f0000002e80)=[{0x4, 0x3, 0x9}, {0x0, 0x5, 0x3, 0xa}, {0x0, 0x5, 0xc, 0x2}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x2, 0x3, 0x7}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000030c0)={@cgroup=<r10=>0xffffffffffffffff, 0x1f, 0x1, 0x5, &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000003000)=[0x0], &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003100)={@map=r6, r9, 0x7, 0x0, 0x0, @void, @value=r3, @void, @void, r11}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003100)={@map=r6, r9, 0x7, 0x0, 0x0, @void, @value=r3, @void, @void, r11}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000003140)={<r12=>r7, 0x4, 0x7, 0x4d1e})
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000003180)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000003180))
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000031c0)=<r13=>0x0)
bind$nfc_llcp(r12, &(0x7f0000003200)={0x27, r13, 0x1, 0x0, 0x6, 0x7f, "4e8fe350ccb929ebba17847a225de393c4374a0c1954fbf9f852df34e436c8d295d1d0db479d2d9963c24d48d7a02eb774c9edd88b2c2310cee37a5c236ed4", 0x1b}, 0x60)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000003280)=0x4, 0x4)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r14, 0x84, 0x1e, &(0x7f00000032c0), &(0x7f0000003300)=0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000003340)='dctcp\x00', 0x6)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003500)={0x8001, <r15=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0xf, 0x12, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4bd4, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x69}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x3}]}, &(0x7f0000003440)='syzkaller\x00', 0x7, 0xc, &(0x7f0000003480)=""/12, 0x0, 0x42, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000034c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r15, 0xffffffffffffffff, 0x6, &(0x7f0000003580)=[r6, r6, r6, r12, r4, r4, 0xffffffffffffffff, r4, r12], &(0x7f00000035c0)=[{0x5, 0x2, 0x0, 0x7}, {0x0, 0x4, 0x6, 0x7}, {0x4, 0x3, 0xf}, {0x4, 0x2, 0xb, 0xc}, {0x4, 0x5, 0x6, 0x6}, {0x2, 0x2, 0xa, 0x1}], 0x10, 0x4}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0xf, 0x12, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4bd4, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x69}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x3}]}, &(0x7f0000003440)='syzkaller\x00', 0x7, 0xc, &(0x7f0000003480)=""/12, 0x0, 0x42, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000034c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r15, 0xffffffffffffffff, 0x6, &(0x7f0000003580)=[r6, r6, r6, r12, r4, r4, 0xffffffffffffffff, r4, r12], &(0x7f00000035c0)=[{0x5, 0x2, 0x0, 0x7}, {0x0, 0x4, 0x6, 0x7}, {0x4, 0x3, 0xf}, {0x4, 0x2, 0xb, 0xc}, {0x4, 0x5, 0x6, 0x6}, {0x2, 0x2, 0xa, 0x1}], 0x10, 0x4}, 0x94)

1.057388353s ago: executing program 2 (id=1952):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x8000)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='$', 0x1}, {0x0}], 0x2}, 0x40014) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="9002100090780000080a0000004000000005030380000000"], 0x0) (async)
write$nci(0xffffffffffffffff, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0xe4, @v={0x2, 0x4, 0x6, 0x6, {0x3, 0x32, "69c1a7a4246803ae"}, 0x2}}, 0x12)

1.055384992s ago: executing program 2 (id=1953):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x1a00, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020"], 0x1ac}}, 0x0)

870.989029ms ago: executing program 1 (id=1954):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r2, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r3, 0x81}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000240))
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x3, 0x3, 0x10, 0xfc, 0x7, 0x0, 0x7, 0x42, 0x7, 0x9b, 0x5e, 0xb, 0x3, 0xc}, 0xe)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r6)
sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES16=r0], 0x40}}, 0x0)

858.029183ms ago: executing program 2 (id=1955):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x800)
accept(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

731.613013ms ago: executing program 1 (id=1956):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
readv(r3, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0)

631.397243ms ago: executing program 1 (id=1958):
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000000), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f0000000140)=""/45, 0x2d}], 0x6}, 0x40010140)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x14000001}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000f00", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2507000000300007800c0003000900000000000000080002000700000008000200d5fd0000080001000300000008000100030000000c00098008000200040000001400068008000100770000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8084) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fffaffffff71109a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000a00)=0x9, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xa, 0x2b, &(0x7f0000000680)="213d71410db7555e8635", &(0x7f00000006c0)=""/43, 0xb933, 0x0, 0x3a, 0x74, &(0x7f0000000700)="5229383f7547ccb4306e0573822b99e60ee338ffbeaa1dea6beafc10cdb42bbf2d1a6f4011564b78df78b714d89f13ed74c3dc57a365a15757cf", &(0x7f00000007c0)="b003bec0061d53dfa6ba0a1995d67af43512f012b1df173b842a06c612042a9e4272e99668ececeb3f9cdd822a52454d379b46ee420962fbea3bd6422670b3706376b0d35dd0090772a03c2db066a403b64d32e37c69595e7b96add76b6cf8ea50888cd72bc35af3de36e111cd8f300082fd725e", 0x3, 0x0, 0x10}, 0x50) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
write(r1, &(0x7f00000001c0)="b40ab29f61", 0x5)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) (async)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x300}, 0xe) (async)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000780)=0x5, 0x4) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) (async)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
write(r8, &(0x7f0000000040)="cb", 0xfffffdef) (async)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0xfef7fffd, 0x4)

561.614074ms ago: executing program 1 (id=1959):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@private=0xa010100, 0x4e23, 0x1, 0x1, 0x12d59, 0x12d5c}}, 0x44)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000001640))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000081200000001c00028008000300060000000800120008000000050001000600"/52], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000000)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r2)

546.445637ms ago: executing program 1 (id=1960):
mmap(&(0x7f0000b00000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
socket(0x27, 0x0, 0xfffffffe)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600086, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xd, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100", @ANYRES32=0x0, @ANYBLOB="00ce20947bc3c70404285237c02cded80195023265a5ed7f34"], 0x1c}}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000000ff70b408a379c51a1ec5299d4950810603140f383f20e45aab9a6baa0a9b80ec49857831aaea2a88fa2c5f8b0f1e4d0949123a2077182e2d321996d151d0953e1eebf27b75915e9057ae4574ec4fd0072d440d123843fb881b808f527ab9c9cb4ff6a6e47acce7e21959b51eb0800000000000000720d8a6438db8c7098ee39f6e46907ce7abd3b78de35ac6e2daf839cced26be23e1bc37b9f3c8eb23197eb750c26d2d785ab0bb6e3c1af4a9c8037e0402f3639f354ac308b362fd2c96f6ee7ef", @ANYRES32=r2, @ANYRES64=r5, @ANYRES32=r8, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x200408c4}, 0x4c001)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f800000000000004000000aaaa88a8a00081"], 0x72)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1809000000000000000000", @ANYRES64=0x0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x4008815}, 0x0)
r10 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="47aefd391350dfb05b9b64c66a5de7547a5d39b947d1f338cf272af19ad1f80cf9c6565cd1241f5ba553ded9cb6d7736a5fc029e1b15dc1c1a6076a6372d223fae2eceb978b37d9f4a04d06d6714a823ee530e8cf37f7da08e4f7c0700dd59545a6e8a5ff7465a185f0f8a298a46e8744490aa71da6499485ea9bff98138e0cfd44f8e4c12cbc28335f4c30c7356628b2513a2c0df7a8d0de74efd3fe5f7f97ead15bf216e61f9c689284055a5af0f6817310fd92a957a73054fe268cd9aec14cafc49368935a2a83e47136f2bc464f69d7789b75c97045c", 0xd8}], 0x1, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x2c8, 0x4005}], 0x1, 0x4000)
vmsplice(r2, &(0x7f00000000c0), 0x0, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
readv(r11, &(0x7f0000000300)=[{&(0x7f00000008c0)=""/4093, 0x1000}, {&(0x7f00000006c0)=""/150}, {&(0x7f0000002180)=""/4096}, {&(0x7f00000018c0)=""/153}], 0x12)
splice(r11, 0x0, r2, 0x0, 0x10000008ebc, 0x0)
connect$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x2, @private=0xa010102}}, 0x1e)
splice(r1, 0x0, r12, 0x0, 0x7, 0x2)

421.800126ms ago: executing program 0 (id=1962):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x4000)

360.300628ms ago: executing program 0 (id=1963):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0x1, 0x803, 0x0)
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x18, 0x1}, {0xc}, {0x5}, {0x6c}, {0x1, 0x1}, {0x12, 0x1}, {0x3}, {0x1}, {0x9}, {0x36, 0x1}, {0x1b, 0x1}, {0x18}, {0x6, 0x1}, {0x5, 0x1}, {0x48}, {0xb, 0x1}, {0x9}, {0x3, 0x1}, {0x4, 0x1}, {0x9}, {0x30, 0x1}, {0x18}, {0x1, 0x1}, {0x16}, {0x1, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}}, 0x24040890)

359.773564ms ago: executing program 0 (id=1964):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r2, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=""/147, 0x93, 0x0, &(0x7f00000003c0)=""/148, 0x94}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200c00, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
listen(r4, 0xec23)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, r3, 0x0, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8004, r7}, 0x38)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11001800000000dfc082047d465c3d4a72d16900000002010000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
write(r0, &(0x7f0000000280)="8ef8", 0x2)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x20, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x54f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x3, 0x3, 0x9, 0x8, 0xfffffffffffffff5, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @call={0x85, 0x0, 0x0, 0xd3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xed6, 0x8e, &(0x7f0000000500)=""/142, 0x0, 0x51, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xe, 0x40, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r5, r3, r6, r8, r3, r2], &(0x7f00000007c0)=[{0x5, 0x3, 0xa, 0x6}, {0x1, 0x5, 0x6, 0x7}, {0x2, 0x2, 0xb, 0x2}, {0x3, 0x4, 0xd, 0xa}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0x6}, 0x94)
socket$netlink(0x10, 0x3, 0x14)

161.884856ms ago: executing program 0 (id=1965):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=ANY=[@ANYBLOB="38010000100001000000070000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000002000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff00000000000000000000000000000000000000000000001000000000000000000000000000000000fbe2000000000000000000000000000000000000000000000000000000000000000000000000008000000000020001062c00000000000000480003006465666cfaffff000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e36650db8a53e683499f36cc65a251220b2fbb60a666d3b01630ed0821e6b931479d0a72f36b2b817b11816049dc6e1a23b77e8ea46b2f45784558a55cb54322bb07615428bc578b5fdb90c63b9785aa2c469dd3c5e285c084a64c319d4a11cc18db756af6df755080f4ad72ba94ff7278d7824610c67f96d6f6e7017bfafd3311a0b6d3d883bea60e1645a3f53242c7060492c4162f1eb0be3835d000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

161.64919ms ago: executing program 0 (id=1966):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async, rerun: 32)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x1, 0x0) (async)
vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x2b, 0xb, 0x70bd29, 0x40000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)
write(r1, &(0x7f0000000280)="8ef8", 0x2)

91.244441ms ago: executing program 0 (id=1967):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
r0 = getpid()
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000180), 0x0, 0x40, &(0x7f0000000140)={0x11, 0x1c, r6, 0x1, 0x0, 0x6, @random="b1eee7e37fb9"}, 0x6)
r7 = socket$netlink(0x10, 0x3, 0x400000000000004)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, 0x0, 0x0)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc)
r11 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_KEY(r11, 0x6a, 0x1, 0x0, 0x20)

722.41µs ago: executing program 2 (id=1968):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_int(r3, 0x1, 0x12, 0x0, &(0x7f0000000600))
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)

0s ago: executing program 2 (id=1969):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = accept4(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000002c0), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="000400e07f78d8b6cb8039e86300", @ANYRES16=r8, @ANYBLOB="20002abd7000fcdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1001)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
bind$xdp(r10, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xd0, 0x0, 0x0)
pipe(&(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r12, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r12, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

kernel console output (not intermixed with test programs):

to 1560 would solve the problem.
[   58.183370][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.194909][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.197732][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.208824][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.256442][ T5836] hsr_slave_0: entered promiscuous mode
[   58.259744][ T5836] hsr_slave_1: entered promiscuous mode
[   58.315911][ T5830] hsr_slave_0: entered promiscuous mode
[   58.319493][ T5830] hsr_slave_1: entered promiscuous mode
[   58.322368][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.326229][ T5830] Cannot create hsr debugfs directory
[   58.345825][ T5828] hsr_slave_0: entered promiscuous mode
[   58.348338][ T5828] hsr_slave_1: entered promiscuous mode
[   58.350542][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.353850][ T5828] Cannot create hsr debugfs directory
[   58.679147][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.688685][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.700638][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.714370][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.751752][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.763953][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.771064][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.786209][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.810915][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.831819][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.847810][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.855139][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.925551][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.971504][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   58.984928][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.998904][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.002034][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.020503][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.023741][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.061172][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   59.074829][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.092522][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.095615][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.118510][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   59.137402][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.140516][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.153089][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.155908][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.168576][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.171523][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.242021][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.251529][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.291349][ T5839] Bluetooth: hci2: command tx timeout
[   59.294185][   T55] Bluetooth: hci1: command tx timeout
[   59.295534][ T5839] Bluetooth: hci0: command tx timeout
[   59.371621][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.387814][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.436482][ T5828] veth0_vlan: entered promiscuous mode
[   59.445176][ T5830] veth0_vlan: entered promiscuous mode
[   59.455684][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.462053][ T5830] veth1_vlan: entered promiscuous mode
[   59.466254][ T5828] veth1_vlan: entered promiscuous mode
[   59.516427][ T5830] veth0_macvtap: entered promiscuous mode
[   59.520472][ T5828] veth0_macvtap: entered promiscuous mode
[   59.535341][ T5830] veth1_macvtap: entered promiscuous mode
[   59.540098][ T5828] veth1_macvtap: entered promiscuous mode
[   59.544893][ T5836] veth0_vlan: entered promiscuous mode
[   59.557488][ T5836] veth1_vlan: entered promiscuous mode
[   59.570648][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.577485][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.590054][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.596401][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.609700][ T5726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.614913][ T5726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.618433][ T5726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.621973][ T5726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.639218][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.643942][ T5726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.650631][ T5726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.655323][ T5726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.667801][ T5836] veth0_macvtap: entered promiscuous mode
[   59.689217][ T5836] veth1_macvtap: entered promiscuous mode
[   59.742559][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.761464][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.773910][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.776981][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.782342][ T5726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.791326][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.797766][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.801805][ T5726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.808556][ T5726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.812424][ T5726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.864057][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.866623][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.895228][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.898435][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.933245][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.936954][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.957510][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.960616][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.968320][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.071888][ T5899] vlan2: entered promiscuous mode
[   60.074710][ T5899] bond0: entered promiscuous mode
[   60.076826][ T5899] bond_slave_0: entered promiscuous mode
[   60.079194][ T5899] bond_slave_1: entered promiscuous mode
[   60.132531][ T5902] sctp: failed to load transform for md5: -4
[   60.208496][ T5911] netlink: 'syz.1.5': attribute type 2 has an invalid length.
[   60.212233][ T5911] Zero length message leads to an empty skb
[   60.454947][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[   61.109013][ T5939] vlan2: entered promiscuous mode
[   61.111702][ T5939] bond0: entered promiscuous mode
[   61.116912][ T5939] bond_slave_0: entered promiscuous mode
[   61.119044][ T5939] bond_slave_1: entered promiscuous mode
[   61.362976][ T5833] Bluetooth: hci0: command tx timeout
[   61.373131][ T5833] Bluetooth: hci1: command tx timeout
[   61.375416][ T5833] Bluetooth: hci2: command tx timeout
[   61.410990][ T5533] IPVS: starting estimator thread 0...
[   61.502937][ T5952] IPVS: using max 51 ests per chain, 122400 per kthread
[   61.533763][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.587623][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   61.591681][ T5961] chnl_net:caif_netlink_parms(): no params data found
[   61.680642][ T5964] vlan2: entered promiscuous mode
[   61.805096][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'.
[   62.079516][ T5983] vlan2: entered promiscuous mode
[   62.310734][ T5999] netlink: 'syz.1.33': attribute type 13 has an invalid length.
[   62.317231][ T5999] netlink: 'syz.1.33': attribute type 17 has an invalid length.
[   62.395929][ T5999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.411721][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'.
[   62.485246][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'.
[   62.490959][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.548181][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.606517][ T5999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.066341][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   63.443426][ T5833] Bluetooth: hci2: command tx timeout
[   63.445594][ T5839] Bluetooth: hci1: command tx timeout
[   63.650355][ T6057] netlink: 1540 bytes leftover after parsing attributes in process `syz.2.51'.
[   63.767599][ T6064] vlan2: entered promiscuous mode
[   63.976559][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'.
[   64.003000][ T6073] bridge_slave_1: left allmulticast mode
[   64.007220][ T6073] bridge_slave_1: left promiscuous mode
[   64.010408][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.038647][ T6073] bridge_slave_0: left allmulticast mode
[   64.040873][ T6073] bridge_slave_0: left promiscuous mode
[   64.049784][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.071162][ T6077] x_tables: unsorted underflow at hook 2
[   64.180529][ T6077] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET)
[   64.272210][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   64.277866][ T6086] netlink: 'syz.2.61': attribute type 23 has an invalid length.
[   64.452226][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.64'.
[   64.614971][ T6102] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   64.650745][ T6102] bond1 (unregistering): Released all slaves
[   64.827130][ T6115] syzkaller0: entered promiscuous mode
[   64.829505][ T6115] syzkaller0: entered allmulticast mode
[   65.533503][ T5839] Bluetooth: hci1: command tx timeout
[   65.536243][ T5833] Bluetooth: hci2: command tx timeout
[   65.600166][ T6118] tipc: Started in network mode
[   65.602652][ T6118] tipc: Node identity 4e7568a68939, cluster identity 4711
[   65.610127][ T6118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.620508][ T6118] syzkaller0: entered promiscuous mode
[   65.623421][ T6118] syzkaller0: entered allmulticast mode
[   65.653045][ T6118] syzkaller0: left promiscuous mode
[   65.655342][ T6118] syzkaller0: left allmulticast mode
[   65.670547][ T6118] tipc: Resetting bearer <eth:syzkaller0>
[   65.854198][ T6117] tipc: Resetting bearer <eth:syzkaller0>
[   65.861203][ T6117] tipc: Disabling bearer <eth:syzkaller0>
[   65.914163][ T6137] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.74'.
[   66.088587][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   66.150964][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.731823][ T6183] sctp: [Deprecated]: syz.2.90 (pid 6183) Use of int in maxseg socket option.
[   67.731823][ T6183] Use struct sctp_assoc_value instead
[   67.809578][ T6186] netlink: 100 bytes leftover after parsing attributes in process `syz.2.91'.
[   67.826489][ T6186] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.831380][ T6186] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   67.834813][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.91'.
[   67.889506][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.901111][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.915108][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.919107][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.938021][ T6191] xt_CT: No such helper "snmp"
[   67.948396][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.952102][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   67.974191][ T6190] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   68.115102][ T6201] vlan2: entered promiscuous mode
[   69.062456][ T6224] vlan2: entered promiscuous mode
[   69.222134][ T6230] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   69.237082][ T6230] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.240486][ T6230] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   69.244110][ T6230] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   69.247350][ T6230] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   69.258573][ T6231] gretap1: entered promiscuous mode
[   69.263869][ T6231] bond1: (slave gretap1): making interface the new active one
[   69.267622][ T6231] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   69.588765][ T6260] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   71.126111][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.281404][ T6295] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   71.285405][ T6295] __nla_validate_parse: 8 callbacks suppressed
[   71.285417][ T6295] netlink: 224 bytes leftover after parsing attributes in process `syz.2.125'.
[   71.292071][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   71.975012][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'.
[   71.978746][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'.
[   72.279861][ T6326] dvmrp0: entered allmulticast mode
[   73.180579][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'.
[   73.195379][ T6334] bond1: entered promiscuous mode
[   73.197548][ T6334] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.240713][ T6334] bond1 (unregistering): Released all slaves
[   73.481128][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   73.485175][ T6344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.494388][ T6344] netlink: 'syz.0.140': attribute type 10 has an invalid length.
[   73.507267][ T6344] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.033853][ T6353] netlink: 'syz.1.143': attribute type 4 has an invalid length.
[   74.038714][ T6353] netlink: 'syz.1.143': attribute type 5 has an invalid length.
[   74.041344][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   74.258947][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'.
[   74.431995][ T6368] geneve2: entered promiscuous mode
[   74.438157][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   74.447052][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   74.451178][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   74.455684][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   74.477987][ T6371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.490624][ T6371] syzkaller0: entered promiscuous mode
[   74.495293][ T6371] syzkaller0: entered allmulticast mode
[   74.504670][ T6371] tipc: Resetting bearer <eth:syzkaller0>
[   74.512323][ T6369] tipc: Resetting bearer <eth:syzkaller0>
[   74.522001][ T6369] tipc: Disabling bearer <eth:syzkaller0>
[   74.902868][ T6412] netlink: 'syz.0.164': attribute type 10 has an invalid length.
[   74.954900][ T6416] vlan2: entered promiscuous mode
[   74.968783][ T6408] hsr0 speed is unknown, defaulting to 1000
[   74.970869][ T6408] hsr0 speed is unknown, defaulting to 1000
[   74.975536][ T6408] hsr0 speed is unknown, defaulting to 1000
[   74.980394][ T6408] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.988986][ T6408] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.036349][ T6408] hsr0 speed is unknown, defaulting to 1000
[   75.046429][ T6408] hsr0 speed is unknown, defaulting to 1000
[   75.052480][ T6408] hsr0 speed is unknown, defaulting to 1000
[   75.088646][ T6424] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[   75.107947][ T6424] 8021q: adding VLAN 0 to HW filter on device team0
[   75.112145][ T6424] team0: entered promiscuous mode
[   75.117361][ T6424] team_slave_0: entered promiscuous mode
[   75.120024][ T6424] team_slave_1: entered promiscuous mode
[   75.128751][ T6424] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.212136][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   75.266044][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.272351][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.310416][ T6430] delete_channel: no stack
[   75.389605][   T24] hsr0 speed is unknown, defaulting to 1000
[   75.392302][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.396302][   T24] syz2: Port: 1 Link DOWN
[   75.401124][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.412723][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.419716][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.607440][ T6459] vlan2: entered promiscuous mode
[   75.609857][ T6459] bond0: (slave vlan2): Opening slave failed
[   75.691379][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[   76.574283][ T6476] __nla_validate_parse: 1 callbacks suppressed
[   76.574293][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   77.369219][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.186'.
[   77.408835][ T6490] netlink: 84 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.419526][ T6484] netlink: 244 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.524235][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.528418][ T6490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.682048][ T6506] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[   78.832016][ T6528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.195'.
[   78.846988][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[   79.268701][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'.
[   79.357612][ T6549] netlink: 'syz.0.201': attribute type 21 has an invalid length.
[   79.540275][ T6559] openvswitch: netlink: Message has 1 unknown bytes.
[   79.543305][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.957049][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'.
[   80.635237][ T6601] vlan2: entered promiscuous mode
[   80.850055][ T6610] netlink: 'syz.0.217': attribute type 21 has an invalid length.
[   80.859404][ T6610] netlink: 156 bytes leftover after parsing attributes in process `syz.0.217'.
[   80.911014][ T6617] bond0: option arp_validate: invalid value (18446744073491447809)
[   81.046027][ T6632] lo: entered allmulticast mode
[   81.055420][ T6632] lo: left allmulticast mode
[   81.079552][ T6635] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[   81.350187][ T6659] bridge0: entered allmulticast mode
[   81.365950][   T96] cfg80211: failed to load regulatory.db
[   82.037524][ T6667] netlink: 'syz.2.233': attribute type 16 has an invalid length.
[   82.040640][ T6667] netlink: 'syz.2.233': attribute type 3 has an invalid length.
[   82.043612][ T6667] __nla_validate_parse: 1 callbacks suppressed
[   82.043622][ T6667] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.233'.
[   82.044764][ T6666] netlink: 200 bytes leftover after parsing attributes in process `syz.2.233'.
[   82.134556][ T6674] vlan2: entered promiscuous mode
[   82.136745][ T6674] bond0: entered promiscuous mode
[   82.142877][ T6674] bond_slave_0: entered promiscuous mode
[   82.149950][ T6674] bond_slave_1: entered promiscuous mode
[   82.152583][ T6674] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   82.255820][ T6683] tipc: Invalid UDP bearer configuration
[   82.255846][ T6683] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   82.270703][ T6679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   82.477271][ T6693] hsr0 speed is unknown, defaulting to 1000
[   82.509269][ T6694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.240'.
[   82.556544][ T6697] vlan2: entered promiscuous mode
[   82.578298][ T6698] vlan2: entered promiscuous mode
[   83.065279][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.082352][ T6711] : entered promiscuous mode
[   83.120400][ T6717] netlink: 'syz.2.247': attribute type 21 has an invalid length.
[   83.126017][ T6717] netlink: 'syz.2.247': attribute type 1 has an invalid length.
[   83.748057][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.253'.
[   83.957424][ T6740] xt_TPROXY: Can be used only with -p tcp or -p udp
[   83.962091][ T6740] xt_l2tp: v2 doesn't support IP mode
[   84.233736][ T6747] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[   84.528253][ T6761] tipc: Started in network mode
[   84.529898][ T6761] tipc: Node identity c2490174e024, cluster identity 4711
[   84.532299][ T6761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.536443][ T6761] syzkaller0: entered promiscuous mode
[   84.538547][ T6761] syzkaller0: entered allmulticast mode
[   84.544475][ T6761] tipc: Resetting bearer <eth:syzkaller0>
[   84.547051][ T6760] tipc: Resetting bearer <eth:syzkaller0>
[   84.555257][ T6760] tipc: Disabling bearer <eth:syzkaller0>
[   84.650188][ T6769] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   84.675913][ T6769] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.697478][ T6769] bond2: (slave veth3): Enslaving as an active interface with a down link
[   84.885399][ T6771] vlan2: entered allmulticast mode
[   84.887138][ T6771] veth1: entered allmulticast mode
[   85.434919][ T6778] vlan2: entered promiscuous mode
[   85.707190][ T6788] vlan3: entered promiscuous mode
[   85.984746][ T6800] openvswitch: netlink: Message has 8 unknown bytes.
[   86.691401][ T6820] vlan2: entered promiscuous mode
[   86.703589][ T6820] bond0: (slave vlan2): Opening slave failed
[   86.849252][ T6827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.873324][ T6827] syzkaller0: entered promiscuous mode
[   86.875207][ T6827] syzkaller0: entered allmulticast mode
[   86.888516][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[   87.590705][ T6830] tipc: Disabling bearer <eth:syzkaller0>
[   87.770581][ T6846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.283'.
[   87.776732][ T6846] netlink: 43 bytes leftover after parsing attributes in process `syz.0.283'.
[   87.780565][ T6846] netlink: 'syz.0.283': attribute type 6 has an invalid length.
[   87.784560][ T6846] netlink: 'syz.0.283': attribute type 5 has an invalid length.
[   87.788854][ T6846] netlink: 43 bytes leftover after parsing attributes in process `syz.0.283'.
[   87.796268][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'.
[   87.862144][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'.
[   87.865838][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[   87.869691][ T6850] netlink: 'syz.2.284': attribute type 15 has an invalid length.
[   87.976824][ T6856] vlan2: entered promiscuous mode
[   87.997560][ T6858] bond0: (slave bond_slave_0): Releasing backup interface
[   88.001167][ T6858] bond_slave_0: left promiscuous mode
[   88.005881][ T6858] bond0: (slave bond_slave_1): Releasing backup interface
[   88.009680][ T6858] bond_slave_1: left promiscuous mode
[   88.015172][ T6858] team0: Port device team_slave_0 removed
[   88.019229][ T6858] team0: Port device team_slave_1 removed
[   88.022149][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.026632][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.039954][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'.
[   88.048316][ T6858] team0: Mode changed to "activebackup"
[   88.055188][ T6858] vlan0: entered promiscuous mode
[   88.063975][ T6858] tipc: Started in network mode
[   88.066673][ T6858] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   88.069231][ T6858] tipc: Enabled bearer <eth:team0>, priority 0
[   88.183286][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[   88.215129][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[   88.489210][ T6881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.294'.
[   88.545200][ T6883] vlan2: entered promiscuous mode
[   88.548548][ T6883] bond0: (slave vlan2): Opening slave failed
[   89.072521][ T6907] trusted_key: syz.1.301 sent an empty control message without MSG_MORE.
[   89.073919][ T6904] vlan2: entered promiscuous mode
[   89.079524][ T6904] bond0: (slave vlan2): Opening slave failed
[   89.184471][   T96] tipc: Node number set to 11578026
[   89.290645][ T6923] vlan3: entered promiscuous mode
[   90.198159][ T6945] vti0: entered promiscuous mode
[   90.397111][ T6951] vlan2: entered promiscuous mode
[   91.581549][ T6967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.336024][ T6975] vlan2: entered promiscuous mode
[   92.338527][ T6975] bond0: (slave vlan2): Opening slave failed
[   92.459785][ T6981] vlan3: entered promiscuous mode
[   92.520215][ T6986] Bluetooth: MGMT ver 1.23
[   92.529502][ T6986] netlink: 'syz.0.326': attribute type 20 has an invalid length.
[   92.645477][ T7002] vlan2: entered promiscuous mode
[   92.908586][ T7028] __nla_validate_parse: 5 callbacks suppressed
[   92.908597][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   92.945719][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'.
[   92.984145][ T7036] atomic_op ffff88810fc50998 conn xmit_atomic 0000000000000000
[   93.137296][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'.
[   93.140371][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'.
[   93.205420][ T7051] pim6reg1: entered promiscuous mode
[   93.207336][ T7051] pim6reg1: entered allmulticast mode
[   93.306388][ T7056] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   93.502569][ T7068] vlan3: entered promiscuous mode
[   93.611413][ T7073] xfrm0: entered promiscuous mode
[   93.618448][ T7073] xfrm0: entered allmulticast mode
[   93.676447][ T7084] openvswitch: netlink: Tunnel attr 9 has unexpected len 12 expected 2
[   93.932375][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'.
[   93.937495][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'.
[   93.948900][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.953404][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.956331][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.960838][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.976889][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.990367][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'.
[   96.273836][ T7112] Set syz1 is full, maxelem 65536 reached
[   96.286589][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[   96.306018][ T7139] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   96.309519][ T7140] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   96.326568][ T7142] vlan3: entered promiscuous mode
[   96.626177][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'.
[   96.650151][ T7168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'.
[   96.656149][ T7167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.765640][ T7177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.768663][ T7177] syzkaller0: entered promiscuous mode
[   96.770927][ T7177] syzkaller0: entered allmulticast mode
[   96.781879][ T7177] tipc: Resetting bearer <eth:syzkaller0>
[   96.889332][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[   96.897489][ T7176] tipc: Disabling bearer <eth:syzkaller0>
[   96.977518][ T7182] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   97.027510][ T7184] syzkaller1: entered promiscuous mode
[   97.029376][ T7184] syzkaller1: entered allmulticast mode
[   97.292630][ T7193] hsr0 speed is unknown, defaulting to 1000
[   98.172373][ T7230] __nla_validate_parse: 7 callbacks suppressed
[   98.172382][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[   98.180757][ T7230] geneve2: entered promiscuous mode
[   98.182578][ T7230] geneve2: entered allmulticast mode
[   98.221130][ T7232] netlink: 'syz.0.393': attribute type 2 has an invalid length.
[   98.228513][ T7232] : entered promiscuous mode
[   98.231340][ T7232] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   98.235124][ T7232] netlink: 120 bytes leftover after parsing attributes in process `syz.0.393'.
[   98.268391][ T7234] vlan2: entered promiscuous mode
[   98.430868][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.432277][ T7238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.438482][ T7238] syzkaller0: entered promiscuous mode
[   98.440366][ T7238] syzkaller0: entered allmulticast mode
[   98.442650][ T7240] sctp: [Deprecated]: syz.1.396 (pid 7240) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.442650][ T7240] Use struct sctp_sack_info instead
[   98.459938][ T7238] tipc: Resetting bearer <eth:syzkaller0>
[   98.464840][ T7237] tipc: Resetting bearer <eth:syzkaller0>
[   98.477098][ T7237] tipc: Disabling bearer <eth:syzkaller0>
[   98.511127][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.396'.
[   98.517229][ T7244] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   98.540103][ T7244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.396'.
[   98.667455][ T7255] netlink: 'syz.0.401': attribute type 4 has an invalid length.
[   98.670910][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'.
[   98.677189][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   99.534654][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'.
[   99.937404][ T7358] xt_TCPMSS: Only works on TCP SYN packets
[   99.974530][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'.
[  100.137407][ T7378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.412'.
[  100.449470][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'.
[  101.481403][ T7430] xt_socket: unknown flags 0x8
[  101.610481][ T7441] ipvlan1: entered promiscuous mode
[  101.613601][ T7441] ipvlan1: entered allmulticast mode
[  101.615942][ T7441] veth0_vlan: entered allmulticast mode
[  102.449900][ T7466] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[  102.453373][ T7466] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[  103.535330][ T7506] netlink: 'syz.0.446': attribute type 83 has an invalid length.
[  103.659722][ T7512] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  103.665806][ T7512] __nla_validate_parse: 10 callbacks suppressed
[  103.665814][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.448'.
[  103.700489][ T7512] team_slave_0 (unregistering): left promiscuous mode
[  103.705179][ T7512] team0: Port device team_slave_0 removed
[  105.070530][ T7540] No such timeout policy "syz0"
[  105.840313][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'.
[  106.025114][ T7553] netlink: 256 bytes leftover after parsing attributes in process `syz.2.460'.
[  106.030003][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.937129][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'.
[  106.957067][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[  107.002164][ T7576] lo speed is unknown, defaulting to 1000
[  107.011055][ T7576] lo speed is unknown, defaulting to 1000
[  107.015550][ T7576] lo speed is unknown, defaulting to 1000
[  107.032342][ T7576] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  107.051677][ T7576] lo speed is unknown, defaulting to 1000
[  107.064119][ T7576] lo speed is unknown, defaulting to 1000
[  107.067915][ T7576] lo speed is unknown, defaulting to 1000
[  107.104385][ T7584] syzkaller0: entered promiscuous mode
[  107.106806][ T7584] syzkaller0: entered allmulticast mode
[  107.380810][ T7596] IPVS: length: 4096 != 24
[  108.396601][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'.
[  108.399866][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'.
[  108.413324][ T7625] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  108.786260][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[  108.864210][ T7654] --map-set only usable from mangle table
[  109.793343][ T7660] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  109.796743][ T7660] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  110.653885][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.657143][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.715976][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.726967][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.820175][ T7677] vti0: left promiscuous mode
[  110.825043][ T7677] geneve2: left promiscuous mode
[  110.828173][ T7677] geneve2: left allmulticast mode
[  110.859380][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.865244][ T5878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.868206][ T5878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.871062][ T5878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.894231][ T7677] syz.0.494 (7677) used greatest stack depth: 18456 bytes left
[  111.547654][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'.
[  111.714268][ T7702] hsr0 speed is unknown, defaulting to 1000
[  111.716104][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  111.718244][ T7702] lo speed is unknown, defaulting to 1000
[  111.811454][ T7702] netlink: 'syz.1.502': attribute type 13 has an invalid length.
[  111.820754][ T7702] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.091746][ T7725] vlan2: entered promiscuous mode
[  112.094822][ T7725] bond0: (slave vlan2): Opening slave failed
[  112.336676][ T7733] veth0: entered promiscuous mode
[  112.941505][ T7735] xt_hashlimit: max too large, truncated to 1048576
[  112.946998][ T7735] xt_hashlimit: overflow, rate too high: 0
[  113.062020][ T7733] veth0: left promiscuous mode
[  113.275160][ T7752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'.
[  113.435102][ T7756] sctp: [Deprecated]: syz.2.517 (pid 7756) Use of int in max_burst socket option deprecated.
[  113.435102][ T7756] Use struct sctp_assoc_value instead
[  113.998856][ T7764] syz.0.520: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  114.006496][ T7764] CPU: 0 UID: 0 PID: 7764 Comm: syz.0.520 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  114.006512][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.006518][ T7764] Call Trace:
[  114.006522][ T7764]  <TASK>
[  114.006526][ T7764]  dump_stack_lvl+0x189/0x250
[  114.006543][ T7764]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  114.006560][ T7764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.006571][ T7764]  ? __pfx__printk+0x10/0x10
[  114.006592][ T7764]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.006604][ T7764]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.006620][ T7764]  warn_alloc+0x214/0x310
[  114.006632][ T7764]  ? __pfx_warn_alloc+0x10/0x10
[  114.006646][ T7764]  ? __get_vm_area_node+0x28f/0x300
[  114.006660][ T7764]  ? translate_table+0x1a8/0x1f90
[  114.006675][ T7764]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  114.006705][ T7764]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  114.006721][ T7764]  ? rcu_is_watching+0x15/0xb0
[  114.006731][ T7764]  ? translate_table+0x1a8/0x1f90
[  114.006741][ T7764]  ? translate_table+0x1a8/0x1f90
[  114.006751][ T7764]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  114.006765][ T7764]  ? translate_table+0x1a8/0x1f90
[  114.006775][ T7764]  ? xt_alloc_table_info+0x3b/0xa0
[  114.006791][ T7764]  translate_table+0x1a8/0x1f90
[  114.006816][ T7764]  ? __pfx_translate_table+0x10/0x10
[  114.006837][ T7764]  ? _copy_from_user+0x94/0xb0
[  114.006853][ T7764]  do_arpt_set_ctl+0x993/0xf10
[  114.006865][ T7764]  ? __mutex_trylock_common+0x153/0x260
[  114.006880][ T7764]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  114.006893][ T7764]  ? rcu_is_watching+0x15/0xb0
[  114.006943][ T7764]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  114.006959][ T7764]  ? __pfx___mutex_lock+0x10/0x10
[  114.006968][ T7764]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.006978][ T7764]  ? aa_sk_perm+0x81e/0x950
[  114.006995][ T7764]  ? __pfx_aa_sk_perm+0x10/0x10
[  114.007012][ T7764]  nf_setsockopt+0x26f/0x290
[  114.007027][ T7764]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  114.007045][ T7764]  do_sock_setsockopt+0x17c/0x1b0
[  114.007059][ T7764]  __x64_sys_setsockopt+0x13f/0x1b0
[  114.007074][ T7764]  do_syscall_64+0xfa/0x3b0
[  114.007084][ T7764]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.007093][ T7764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.007102][ T7764]  ? exc_page_fault+0x9f/0xf0
[  114.007111][ T7764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.007120][ T7764] RIP: 0033:0x7fc8e678e9a9
[  114.007131][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.007139][ T7764] RSP: 002b:00007fc8e7580038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  114.007151][ T7764] RAX: ffffffffffffffda RBX: 00007fc8e69b5fa0 RCX: 00007fc8e678e9a9
[  114.007159][ T7764] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005
[  114.007165][ T7764] RBP: 00007fc8e6810d69 R08: 0000000000000068 R09: 0000000000000000
[  114.007171][ T7764] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  114.007177][ T7764] R13: 0000000000000000 R14: 00007fc8e69b5fa0 R15: 00007ffcf2835268
[  114.007194][ T7764]  </TASK>
[  114.007198][ T7764] Mem-Info:
[  114.117180][ T7764] active_anon:5581 inactive_anon:0 isolated_anon:0
[  114.117180][ T7764]  active_file:1081 inactive_file:38227 isolated_file:0
[  114.117180][ T7764]  unevictable:2669 dirty:80 writeback:0
[  114.117180][ T7764]  slab_reclaimable:9475 slab_unreclaimable:68103
[  114.117180][ T7764]  mapped:21170 shmem:3362 pagetables:992
[  114.117180][ T7764]  sec_pagetables:0 bounce:0
[  114.117180][ T7764]  kernel_misc_reclaimable:0
[  114.117180][ T7764]  free:277424 free_pcp:21740 free_cma:0
[  114.135224][ T7764] Node 0 active_anon:10584kB inactive_anon:0kB active_file:3512kB inactive_file:138880kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35008kB dirty:280kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6544kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.148590][ T7764] Node 1 active_anon:11808kB inactive_anon:0kB active_file:812kB inactive_file:14028kB unevictable:7752kB isolated(anon):0kB isolated(file):0kB mapped:50216kB dirty:40kB writeback:0kB shmem:9124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5400kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.169265][ T7764] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.190818][ T7764] lowmem_reserve[]: 0 812 812 812 812
[  114.203038][ T7764] Node 0 DMA32 free:262484kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10516kB inactive_anon:0kB active_file:3512kB inactive_file:138880kB unevictable:5100kB writepending:280kB present:1556484kB managed:831796kB mlocked:1564kB bounce:0kB free_pcp:44196kB local_pcp:19596kB free_cma:0kB
[  114.221183][ T7764] lowmem_reserve[]: 0 0 0 0 0
[  114.226939][ T7764] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  114.240688][ T7764] lowmem_reserve[]: 0 0 854 854 854
[  114.242471][ T7764] Node 1 Normal free:367308kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11740kB inactive_anon:0kB active_file:812kB inactive_file:14028kB unevictable:8228kB writepending:40kB present:1048576kB managed:875016kB mlocked:4692kB bounce:0kB free_pcp:46264kB local_pcp:24912kB free_cma:0kB
[  114.263519][ T7764] lowmem_reserve[]: 0 0 0 0 0
[  114.265368][ T7764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  114.275881][ T7764] Node 0 DMA32: 1*4kB (M) 11*8kB (UME) 7*16kB (E) 121*32kB (UE) 151*64kB (U) 53*128kB (UM) 29*256kB (UM) 6*512kB (UME) 6*1024kB (UM) 4*2048kB (UME) 53*4096kB (UM) = 262444kB
[  114.288030][ T7764] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  114.303669][ T7764] Node 1 Normal: 3*4kB (ME) 15*8kB (E) 16*16kB (UE) 247*32kB (UME) 171*64kB (UME) 55*128kB (UME) 22*256kB (UME) 15*512kB (UME) 12*1024kB (UME) 2*2048kB (UM) 76*4096kB (M) = 367268kB
[  114.309743][ T7764] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.317252][ T7764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.321000][ T7764] 43945 total pagecache pages
[  114.328014][ T7764] 0 pages in swap cache
[  114.329465][ T7764] Free swap  = 124996kB
[  114.346007][ T7764] Total swap = 124996kB
[  114.347775][ T7764] 786301 pages RAM
[  114.349352][ T7764] 0 pages HighMem/MovableOnly
[  114.351322][ T7764] 241104 pages reserved
[  114.354852][ T7764] 0 pages cma reserved
[  114.584780][ T7799] syzkaller0: entered promiscuous mode
[  114.587393][ T7799] syzkaller0: entered allmulticast mode
[  114.680000][ T7804] ieee802154 phy1 wpan1: encryption failed: -90
[  114.682323][ T7804] ieee802154 phy1 wpan1: encryption failed: -90
[  114.944695][ T7815] openvswitch: netlink: IP tunnel dst address not specified
[  114.988687][ T7810] batadv0: entered promiscuous mode
[  114.991828][ T7809] batadv0: left promiscuous mode
[  115.078856][ T7819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.104468][ T7819] syzkaller0: entered promiscuous mode
[  115.109046][ T7819] syzkaller0: entered allmulticast mode
[  115.111350][ T7819] tipc: Resetting bearer <eth:syzkaller0>
[  115.117402][ T7818] tipc: Resetting bearer <eth:syzkaller0>
[  115.895867][ T7818] tipc: Disabling bearer <eth:syzkaller0>
[  115.971320][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'.
[  116.065714][ T7832] veth1_to_batadv: entered promiscuous mode
[  116.084923][ T7834] hsr0 speed is unknown, defaulting to 1000
[  116.088863][ T7834] lo speed is unknown, defaulting to 1000
[  116.130012][ T7840] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  116.150063][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'.
[  116.201425][ T7840] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.209608][ T7840] bond3: (slave bond4): making interface the new active one
[  116.220941][ T7840] bond3: (slave bond4): Enslaving as an active interface with an up link
[  116.244334][ T7841] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  116.439618][ T7861] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  116.497468][ T7862] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  116.522086][ T7861] veth5: entered promiscuous mode
[  116.525920][ T7861] bond5: (slave veth5): Enslaving as a backup interface with a down link
[  116.532237][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.541'.
[  116.532277][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.541'.
[  116.536761][ T7862] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.539638][ T5726] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.589438][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[  116.656824][ T5726] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.836117][ T7882] openvswitch: netlink: IP tunnel dst address not specified
[  116.840299][ T7882] netlink: 256 bytes leftover after parsing attributes in process `syz.2.544'.
[  116.859939][ T7882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'.
[  117.028069][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'.
[  117.195807][ T7905] ip6gretap1: entered promiscuous mode
[  117.198415][ T7905] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  117.204566][ T7905] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.328318][ T7916] netlink: 'syz.0.552': attribute type 13 has an invalid length.
[  117.331496][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'.
[  117.450917][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'.
[  117.486713][ T7925] netlink: 'syz.1.555': attribute type 3 has an invalid length.
[  117.489582][ T7925] netlink: 'syz.1.555': attribute type 1 has an invalid length.
[  118.238927][ T7951] syz.2.561 uses old SIOCAX25GETINFO
[  118.246367][ T7951] ip6t_srh: unknown srh invflags 4449
[  119.583439][ T7988] netlink: 'syz.1.570': attribute type 29 has an invalid length.
[  119.586570][ T7988] netlink: 'syz.1.570': attribute type 29 has an invalid length.
[  119.766293][ T7994] hsr0 speed is unknown, defaulting to 1000
[  119.770546][ T7994] lo speed is unknown, defaulting to 1000
[  120.082227][ T7994] netlink: 'syz.1.571': attribute type 4 has an invalid length.
[  120.501505][ T8005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.582150][ T8005] syzkaller0: entered promiscuous mode
[  120.596878][ T8005] syzkaller0: entered allmulticast mode
[  121.095645][ T8013] __nla_validate_parse: 6 callbacks suppressed
[  121.095654][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'.
[  121.106728][ T8013] Cannot find add_set index 2 as target
[  121.210311][ T8002] tipc: Resetting bearer <eth:syzkaller0>
[  121.228478][ T8002] tipc: Disabling bearer <eth:syzkaller0>
[  121.344445][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  121.453089][ T8025] netlink: 104 bytes leftover after parsing attributes in process `syz.0.581'.
[  121.456535][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  121.459737][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  122.166867][ T8071] netlink: 132 bytes leftover after parsing attributes in process `syz.2.594'.
[  122.200831][ T8074] vlan3: entered promiscuous mode
[  122.317556][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  122.523676][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'.
[  122.530244][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  122.595889][ T8108] tipc: Enabled bearer <udp:s>, priority 6
[  123.178692][ T8152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.182283][ T8152] syzkaller0: entered promiscuous mode
[  123.190133][ T8152] syzkaller0: entered allmulticast mode
[  123.211759][ T8152] tipc: Resetting bearer <eth:syzkaller0>
[  123.218126][ T8151] tipc: Resetting bearer <eth:syzkaller0>
[  123.238939][ T8151] tipc: Disabling bearer <eth:syzkaller0>
[  123.254086][ T8155] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[  123.286896][ T8155] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  123.292411][ T8155] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  123.675278][ T8186] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  123.712798][    T9] tipc: Node number set to 577569140
[  124.214401][ T8190] netlink: 192 bytes leftover after parsing attributes in process `syz.0.628'.
[  124.547809][ T8204] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[  125.418299][ T8243] netlink: 'syz.0.645': attribute type 13 has an invalid length.
[  127.273258][ T8262] __nla_validate_parse: 4 callbacks suppressed
[  127.273273][ T8262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.651'.
[  128.332498][ T8274] netlink: 'syz.0.654': attribute type 1 has an invalid length.
[  128.336103][ T8274] netlink: 'syz.0.654': attribute type 4 has an invalid length.
[  128.339451][ T8274] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.654'.
[  128.782580][ T8278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.794574][ T5879] lo speed is unknown, defaulting to 1000
[  128.796729][ T5879] syz1: Port: 1 Link DOWN
[  128.986502][ T8292] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  128.990601][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'.
[  129.055772][   T96] hid-generic 0005:15C2:1010.0001: item fetching failed at offset 0/1
[  129.058907][   T96] hid-generic 0005:15C2:1010.0001: probe with driver hid-generic failed with error -22
[  129.101466][ T8302] xt_bpf: check failed: parse error
[  129.276957][ T8320] netlink: 'syz.1.663': attribute type 2 has an invalid length.
[  130.018650][ T8335] netlink: 'syz.1.667': attribute type 12 has an invalid length.
[  130.082406][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'.
[  130.115757][ T8335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.119693][ T8335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.139616][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'.
[  130.168289][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.667'.
[  130.217784][ T8347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'.
[  130.387592][ T8362] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.675'.
[  130.493685][ T8369] vlan0: entered promiscuous mode
[  130.496867][ T8369] bond0: (slave vlan0): Opening slave failed
[  130.776426][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  130.779324][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  130.782514][ T8384] netlink: 'syz.2.681': attribute type 12 has an invalid length.
[  130.930908][ T8393] vlan3: entered promiscuous mode
[  131.280190][ T8409] vlan0: entered promiscuous mode
[  132.287835][ T8457] netlink: 'syz.1.702': attribute type 12 has an invalid length.
[  132.299415][ T8457] netlink: 'syz.1.702': attribute type 1 has an invalid length.
[  132.305002][ T8457] netlink: 228 bytes leftover after parsing attributes in process `syz.1.702'.
[  132.308930][ T8457] NCSI netlink: No device for ifindex 0
[  132.576037][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.950377][ T8482] hsr0 speed is unknown, defaulting to 1000
[  133.955476][ T8482] lo speed is unknown, defaulting to 1000
[  134.091688][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'.
[  134.096597][ T8486] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  134.101483][ T8486] netlink: 'syz.1.708': attribute type 2 has an invalid length.
[  134.109429][ T8486] netlink: 80 bytes leftover after parsing attributes in process `syz.1.708'.
[  134.299716][ T8491] vlan0: entered promiscuous mode
[  134.303988][ T8491] bond0: (slave vlan0): Opening slave failed
[  134.622024][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'.
[  135.411114][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'.
[  135.546915][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  135.587479][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'.
[  135.622233][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'.
[  135.795409][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'.
[  135.817810][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.825106][ T8547] bond0: (slave rose0): Enslaving as an active interface with an up link
[  135.860883][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.728'.
[  135.877214][ T8552] netlink: 'syz.1.728': attribute type 1 has an invalid length.
[  136.340483][ T8589] gtp0: entered promiscuous mode
[  136.350203][ T8589] gtp0: entered allmulticast mode
[  137.346842][ T8607] __nla_validate_parse: 2 callbacks suppressed
[  137.346853][ T8607] netlink: 212312 bytes leftover after parsing attributes in process `syz.2.744'.
[  137.427416][ T8609] vlan0: entered promiscuous mode
[  137.485733][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[  137.638943][ T8621] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.642872][ T8620] netlink: 180 bytes leftover after parsing attributes in process `syz.0.749'.
[  138.602340][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  139.525426][ T8657] hsr0 speed is unknown, defaulting to 1000
[  139.527111][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  139.529401][ T8657] lo speed is unknown, defaulting to 1000
[  139.586431][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.667792][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.716452][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.765'.
[  139.789941][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.838261][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  140.803038][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  140.831375][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  140.919337][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  141.597535][ T8744] netlink: 'syz.0.781': attribute type 11 has an invalid length.
[  141.682348][ T8753] netlink: 'syz.0.784': attribute type 9 has an invalid length.
[  141.685900][ T8753] netlink: 'syz.0.784': attribute type 9 has an invalid length.
[  141.706985][ T8751] "syz.1.783" (8751) uses obsolete ecb(arc4) skcipher
[  141.906726][ T8761] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  143.245508][ T8793] netlink: 'syz.2.794': attribute type 8 has an invalid length.
[  143.407111][ T8805] __nla_validate_parse: 1 callbacks suppressed
[  143.407123][ T8805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.798'.
[  143.407127][ T8806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.798'.
[  143.445874][ T8806] team0: Port device team_slave_0 removed
[  144.426598][ T8835] netlink: 'syz.0.806': attribute type 10 has an invalid length.
[  144.430644][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.806'.
[  144.438102][ T8835] dummy0: entered promiscuous mode
[  144.441884][ T8835] bridge0: port 3(dummy0) entered blocking state
[  144.445678][ T8835] bridge0: port 3(dummy0) entered disabled state
[  144.448814][ T8835] dummy0: entered allmulticast mode
[  144.456255][ T8834] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.806'.
[  145.319147][ T8840] netlink: 'syz.0.807': attribute type 14 has an invalid length.
[  145.328302][ T8840] netlink: zone id is out of range
[  145.330793][ T8840] netlink: zone id is out of range
[  145.337200][ T8840] netlink: zone id is out of range
[  145.339439][ T8840] netlink: zone id is out of range
[  145.341290][ T8840] netlink: zone id is out of range
[  145.343198][ T8840] netlink: zone id is out of range
[  145.344968][ T8840] netlink: zone id is out of range
[  145.346717][ T8840] netlink: zone id is out of range
[  145.348549][ T8840] netlink: zone id is out of range
[  145.351327][ T8840] netlink: zone id is out of range
[  145.374743][ T8840] hsr0 speed is unknown, defaulting to 1000
[  145.378092][ T8840] lo speed is unknown, defaulting to 1000
[  145.461267][   T96] hid-generic 0005:15C2:1010.0002: item fetching failed at offset 0/1
[  145.464998][   T96] hid-generic 0005:15C2:1010.0002: probe with driver hid-generic failed with error -22
[  145.554436][ T8851] vlan0: entered promiscuous mode
[  146.822034][ T8871] delete_channel: no stack
[  147.003537][ T8899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.007128][ T8899] syzkaller0: entered promiscuous mode
[  147.009413][ T8899] syzkaller0: entered allmulticast mode
[  147.021818][ T8901] netlink: 516 bytes leftover after parsing attributes in process `syz.0.820'.
[  147.029662][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  147.031153][ T8899] tipc: Resetting bearer <eth:syzkaller0>
[  147.036908][ T8896] tipc: Resetting bearer <eth:syzkaller0>
[  147.053394][ T8896] tipc: Disabling bearer <eth:syzkaller0>
[  147.261350][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  147.266040][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  147.269742][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  147.273553][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  147.589123][ T8929] netlink: 'syz.1.827': attribute type 4 has an invalid length.
[  149.586427][ T8981] __nla_validate_parse: 51 callbacks suppressed
[  149.586441][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'.
[  150.635285][ T9001] net_ratelimit: 5 callbacks suppressed
[  150.635308][ T9001] openvswitch: netlink: Actions may not be safe on all matching packets
[  150.959295][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'.
[  151.094189][ T9033] syzkaller0: entered promiscuous mode
[  151.096289][ T9033] syzkaller0: entered allmulticast mode
[  151.145822][ T9033] netlink: 27 bytes leftover after parsing attributes in process `syz.0.858'.
[  151.740534][ T9072] hsr0 speed is unknown, defaulting to 1000
[  151.745254][ T9072] lo speed is unknown, defaulting to 1000
[  152.902563][ T9082] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  153.103804][ T9095] xt_hashlimit: size too large, truncated to 1048576
[  153.280796][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'.
[  153.900073][ T9130] sctp: [Deprecated]: syz.0.882 (pid 9130) Use of int in max_burst socket option deprecated.
[  153.900073][ T9130] Use struct sctp_assoc_value instead
[  154.129028][ T9140] ip6gre1: entered allmulticast mode
[  154.928106][ T9189] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  154.985582][ T9194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.988747][ T9194] IPv6: NLM_F_CREATE should be set when creating new route
[  154.991184][ T9194] IPv6: NLM_F_CREATE should be set when creating new route
[  155.891814][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'.
[  155.998941][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.903'.
[  156.075571][ T9234] hsr0 speed is unknown, defaulting to 1000
[  156.079400][ T9234] lo speed is unknown, defaulting to 1000
[  156.169503][ T9234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.906'.
[  156.173928][ T9234] netlink: 156 bytes leftover after parsing attributes in process `syz.1.906'.
[  156.278162][ T9239] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.907'.
[  156.567388][ T9253] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  156.669752][ T9258] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  156.696120][ T9258] bond8: (slave bridge2): making interface the new active one
[  156.699034][ T9258] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  156.835377][ T9266] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  156.945542][ T9270] netlink: 244 bytes leftover after parsing attributes in process `syz.1.916'.
[  156.959342][ T9270] netlink: 'syz.1.916': attribute type 1 has an invalid length.
[  156.962570][ T9270] netlink: 'syz.1.916': attribute type 1 has an invalid length.
[  157.127695][ T9280] ieee802154 phy1 wpan1: encryption failed: -22
[  157.226309][ T9284] netlink: 'syz.1.920': attribute type 21 has an invalid length.
[  157.229557][ T9284] netlink: 'syz.1.920': attribute type 6 has an invalid length.
[  157.235875][ T9284] netlink: 64 bytes leftover after parsing attributes in process `syz.1.920'.
[  157.247204][ T9287] netlink: 'syz.1.920': attribute type 21 has an invalid length.
[  157.252579][ T9287] netlink: 'syz.1.920': attribute type 6 has an invalid length.
[  157.256415][ T9287] netlink: 64 bytes leftover after parsing attributes in process `syz.1.920'.
[  157.305833][ T9292] veth0_to_bridge: entered promiscuous mode
[  157.309808][ T9292] veth0_to_bridge: left promiscuous mode
[  157.319564][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[  158.349567][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  158.482929][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  159.153002][ T9338] vlan0: entered promiscuous mode
[  159.155425][ T9338] bond0: (slave vlan0): Opening slave failed
[  159.572023][ T9354] bond0: (slave vlan0): Opening slave failed
[  159.765597][ T9356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.768296][ T9356] syzkaller0: entered promiscuous mode
[  159.770142][ T9356] syzkaller0: entered allmulticast mode
[  159.782498][ T9356] tipc: Resetting bearer <eth:syzkaller0>
[  159.787476][ T9355] tipc: Resetting bearer <eth:syzkaller0>
[  159.799414][ T9355] tipc: Disabling bearer <eth:syzkaller0>
[  160.757985][ T9370] openvswitch: netlink: Missing valid actions attribute.
[  160.761004][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.214830][ T9397] __nla_validate_parse: 5 callbacks suppressed
[  161.214842][ T9397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.953'.
[  161.232881][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.237312][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.688975][ T9418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.692228][ T9418] syzkaller0: entered promiscuous mode
[  161.694308][ T9418] syzkaller0: entered allmulticast mode
[  161.706275][ T9418] tipc: Resetting bearer <eth:syzkaller0>
[  161.814025][ T9417] tipc: Resetting bearer <eth:syzkaller0>
[  161.826189][ T9417] tipc: Disabling bearer <eth:syzkaller0>
[  162.089510][ T9434] netlink: 80 bytes leftover after parsing attributes in process `syz.0.963'.
[  162.135020][ T9436] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.964'.
[  162.287358][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'.
[  162.291764][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'.
[  162.399900][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[  162.478455][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'.
[  162.591002][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  162.595535][ T9471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.973'.
[  163.195108][ T9485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.977'.
[  163.290434][ T9492] netlink: 'syz.0.980': attribute type 21 has an invalid length.
[  163.377758][ T9500] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  164.507491][   T96] IPVS: starting estimator thread 0...
[  164.602883][ T9536] IPVS: using max 46 ests per chain, 110400 per kthread
[  164.683792][ T9555] bond0: (slave vlan0): Opening slave failed
[  164.917073][ T9572] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  164.917287][   T12] bond0: (slave bond_slave_0): interface is now down
[  164.936418][   T12] bond0: (slave bond_slave_1): interface is now down
[  164.939305][   T12] bond0: (slave team0): interface is now down
[  164.947126][ T9563] batman_adv: batadv0: Adding interface: ip6gretap1
[  164.949849][ T9563] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.961096][ T9563] batman_adv: batadv0: Interface activated: ip6gretap1
[  164.976176][   T12] bond0: (slave bond_slave_0): interface is now down
[  164.979106][   T12] bond0: (slave bond_slave_1): interface is now down
[  164.985819][   T12] bond0: (slave team0): interface is now down
[  165.006985][ T5726] bond0: (slave bond_slave_0): interface is now down
[  165.011493][ T5726] bond0: (slave bond_slave_1): interface is now down
[  165.015289][ T5726] bond0: (slave team0): interface is now down
[  165.021618][ T5726] bond0: now running without any active interface!
[  165.957823][ T9592] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  165.961941][ T9592] xt_SECMARK: invalid mode: 0
[  166.435861][ T9609] GUP no longer grows the stack in syz.2.1008 (9609): 200000006000-20000000a000 (200000005000)
[  166.440711][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.2.1008 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  166.440732][ T9609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.440740][ T9609] Call Trace:
[  166.440747][ T9609]  <TASK>
[  166.440754][ T9609]  dump_stack_lvl+0x189/0x250
[  166.440779][ T9609]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.440793][ T9609]  ? __pfx__printk+0x10/0x10
[  166.440807][ T9609]  ? find_vma+0xe7/0x160
[  166.440834][ T9609]  __get_user_pages+0x2a60/0x30b0
[  166.440881][ T9609]  ? __pfx___get_user_pages+0x10/0x10
[  166.440894][ T9609]  ? __gup_longterm_locked+0xbf7/0x15b0
[  166.440908][ T9609]  ? down_read_killable+0x1d1/0x350
[  166.440923][ T9609]  ? try_get_folio+0x633/0x660
[  166.440941][ T9609]  __gup_longterm_locked+0xd66/0x15b0
[  166.440960][ T9609]  ? try_grab_folio_fast+0x1be/0x4f0
[  166.440982][ T9609]  ? gup_fast_fallback+0x1afc/0x2260
[  166.440999][ T9609]  gup_fast_fallback+0x1cd4/0x2260
[  166.441042][ T9609]  ? __pfx_gup_fast_fallback+0x10/0x10
[  166.441054][ T9609]  ? trace_contention_end+0x39/0x120
[  166.441071][ T9609]  ? __mutex_lock+0x330/0xe80
[  166.441088][ T9609]  ? is_valid_gup_args+0x11f/0x200
[  166.441104][ T9609]  ? get_user_pages_fast+0x4d/0xb0
[  166.441120][ T9609]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  166.441143][ T9609]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  166.441159][ T9609]  ? wait_for_space+0x24d/0x2d0
[  166.441177][ T9609]  iov_iter_get_pages2+0x5e/0xa0
[  166.441195][ T9609]  __se_sys_vmsplice+0x548/0x10d0
[  166.441227][ T9609]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  166.441243][ T9609]  ? __pfx_futex_wait+0x10/0x10
[  166.441279][ T9609]  ? up_write+0x1f2/0x420
[  166.441305][ T9609]  ? exc_page_fault+0x76/0xf0
[  166.441320][ T9609]  ? rcu_is_watching+0x15/0xb0
[  166.441338][ T9609]  ? do_syscall_64+0xbe/0x3b0
[  166.441354][ T9609]  do_syscall_64+0xfa/0x3b0
[  166.441366][ T9609]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.441377][ T9609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.441388][ T9609]  ? exc_page_fault+0x9f/0xf0
[  166.441407][ T9609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.441418][ T9609] RIP: 0033:0x7f74a8f8e9a9
[  166.441430][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.441440][ T9609] RSP: 002b:00007f74a9e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  166.441454][ T9609] RAX: ffffffffffffffda RBX: 00007f74a91b5fa0 RCX: 00007f74a8f8e9a9
[  166.441462][ T9609] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  166.441469][ T9609] RBP: 00007f74a9010d69 R08: 0000000000000000 R09: 0000000000000000
[  166.441476][ T9609] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  166.441483][ T9609] R13: 0000000000000000 R14: 00007f74a91b5fa0 R15: 00007ffe3b6d6628
[  166.441504][ T9609]  </TASK>
[  166.444504][ T9610] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  166.841046][ T9631] __nla_validate_parse: 10 callbacks suppressed
[  166.841064][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'.
[  167.696197][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'.
[  167.714234][ T9636] bridge0: port 1(veth3) entered blocking state
[  167.716420][ T9636] bridge0: port 1(veth3) entered disabled state
[  167.718565][ T9636] veth3: entered allmulticast mode
[  167.721220][ T9636] veth3: entered promiscuous mode
[  167.730919][ T9636] bridge0: port 2(veth0_to_bond) entered blocking state
[  167.733716][ T9636] bridge0: port 2(veth0_to_bond) entered disabled state
[  167.736085][ T9636] veth0_to_bond: entered allmulticast mode
[  167.738999][ T9636] veth0_to_bond: entered promiscuous mode
[  167.812617][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  168.758633][ T9659] batadv_slave_0: entered promiscuous mode
[  168.760764][ T9657] batadv_slave_0: left promiscuous mode
[  168.765114][ T9657] bridge: RTM_NEWNEIGH with invalid state 0x1
[  168.767095][ T9659] bridge: RTM_NEWNEIGH with invalid state 0x1
[  168.939574][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'.
[  169.177877][ T9672] netlink: 'syz.1.1027': attribute type 3 has an invalid length.
[  169.721730][ T9690] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1031'.
[  169.961675][ T9702] hsr0 speed is unknown, defaulting to 1000
[  169.974933][ T9702] lo speed is unknown, defaulting to 1000
[  170.056085][ T9701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.129842][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  170.138999][ T9709] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  170.142273][ T9709] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  170.609603][ T9713] netlink: 'syz.2.1040': attribute type 12 has an invalid length.
[  171.637924][ T9731] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1045'.
[  171.649292][ T9731] netlink: 'syz.2.1045': attribute type 10 has an invalid length.
[  171.653080][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'.
[  171.659695][ T9731] dummy0: entered promiscuous mode
[  171.667170][ T9731] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  171.868206][ T9735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1047'.
[  171.972545][ T9738] netlink: 'syz.2.1048': attribute type 64 has an invalid length.
[  172.028563][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  172.229250][ T9757] Bluetooth: MGMT ver 1.23
[  172.905883][ T9771] syzkaller1: entered promiscuous mode
[  172.908522][ T9771] syzkaller1: entered allmulticast mode
[  172.971514][ T9775] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  173.142845][ T9787] xt_l2tp: missing protocol rule (udp|l2tpip)
[  173.214616][    T9] IPVS: starting estimator thread 0...
[  173.301772][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'.
[  173.305932][ T9791] IPVS: using max 39 ests per chain, 93600 per kthread
[  173.310130][ T9794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1062'.
[  173.422821][ T9806] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1067'.
[  173.481529][ T9808] netlink: 'syz.2.1068': attribute type 10 has an invalid length.
[  173.484357][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1068'.
[  173.489967][ T9808] team0: Port device geneve0 added
[  173.492087][ T8715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.495809][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'.
[  173.495828][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  173.508094][ T8715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.516765][ T9808] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  173.529462][ T8715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.537755][ T8715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.451786][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.223929][ T9852] vlan3: entered promiscuous mode
[  175.312521][ T9862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.611171][ T9881] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1090'.
[  176.159103][ T9899] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  176.161573][ T9899] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  176.166810][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'.
[  177.776105][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  177.969199][ T9948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.974991][ T9948] syzkaller0: entered promiscuous mode
[  177.982749][ T9948] syzkaller0: entered allmulticast mode
[  178.000957][ T9948] tipc: Resetting bearer <eth:syzkaller0>
[  178.005082][ T9947] tipc: Resetting bearer <eth:syzkaller0>
[  178.012606][ T9947] tipc: Disabling bearer <eth:syzkaller0>
[  178.225895][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.351038][ T9965] bridge0: left allmulticast mode
[  178.359704][ T9965] bond0: (slave team0): Releasing backup interface
[  178.362340][ T9965] team0: left promiscuous mode
[  178.364256][ T9965] team_slave_1: left promiscuous mode
[  178.390802][ T9965] bridge_slave_0: left allmulticast mode
[  178.393739][ T9965] bridge_slave_0: left promiscuous mode
[  178.395852][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.406269][ T9965] bridge_slave_1: left allmulticast mode
[  178.408859][ T9965] bridge_slave_1: left promiscuous mode
[  178.411309][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.421854][ T9965] bond0: (slave bond_slave_0): Releasing backup interface
[  178.424937][ T9965] bond_slave_0: left promiscuous mode
[  178.431007][ T9965] bond0: (slave bond_slave_1): Releasing backup interface
[  178.434775][ T9965] bond_slave_1: left promiscuous mode
[  178.442126][ T9965] team0: Port device team_slave_1 removed
[  178.451585][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.456625][ T9965] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.461819][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.468699][ T9965] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.535789][ T9965] gretap1: left promiscuous mode
[  178.538784][ T9965] bond1: (slave gretap1): Releasing active interface
[  178.544387][ T9965] geneve2: left promiscuous mode
[  178.549977][ T9965] bond2: (slave veth3): Releasing active interface
[  178.557551][ T9965] vlan2: left allmulticast mode
[  178.559316][ T9965] veth1: left allmulticast mode
[  178.566433][ T9965] bond3: (slave bond4): Releasing backup interface
[  178.568803][ T9965] bond3: (slave bond4): the permanent HWaddr of slave - 96:e4:44:2f:c9:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  178.576485][ T9965] bond3: (slave gretap2): making interface the new active one
[  178.583369][ T9965] bond3: (slave gretap2): Releasing backup interface
[  178.591493][ T9965] bond5: (slave ip6gretap1): Removing an active aggregator
[  178.595214][ T9965] bond5: (slave ip6gretap1): Releasing backup interface
[  178.597746][ T9965] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 52:ac:9a:a8:08:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  178.605058][ T9965] veth5: left promiscuous mode
[  178.607844][ T9965] bond5: (slave veth5): Releasing backup interface
[  178.613240][ T9965] bond8: (slave bridge2): Releasing active interface
[  178.616960][ T8715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.620985][ T8715] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  178.630182][ T8715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.636575][ T8715] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  178.640599][ T8715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.648871][ T8715] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  178.653855][ T8715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.657739][ T8715] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  178.880220][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  179.088890][ T9972] bond0: (slave vlan3): Opening slave failed
[  179.800343][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  180.179524][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  180.240528][T10015] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  180.248128][T10015] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1129'.
[  180.251896][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1129'.
[  180.258588][T10015] xt_ecn: cannot match TCP bits for non-tcp packets
[  180.648584][T10031] bond0: (slave vlan0): Opening slave failed
[  180.675819][T10033] ip6_vti0: entered promiscuous mode
[  180.722865][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  180.737604][T10035] vlan0: entered promiscuous mode
[  180.740739][T10035] bond0: (slave vlan0): Opening slave failed
[  180.744367][T10038] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1139'.
[  181.491305][T10032] ip6_vti0: left promiscuous mode
[  181.781166][T10061] vlan0: entered promiscuous mode
[  181.783712][T10061] bond0: (slave vlan0): Opening slave failed
[  181.884729][T10067] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  181.914753][T10071] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1149'.
[  182.427540][T10076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'.
[  182.903200][ T5833] Bluetooth: hci2: link tx timeout
[  182.906147][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  182.911190][ T5839] Bluetooth: hci2: link tx timeout
[  182.913727][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.748362][T10098] veth0_to_hsr: entered allmulticast mode
[  183.751163][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'.
[  183.755601][T10098] dummy0: left allmulticast mode
[  183.757446][T10098] bridge0: port 3(dummy0) entered disabled state
[  183.761326][T10098] bridge_slave_1: left allmulticast mode
[  183.763706][T10098] bridge_slave_1: left promiscuous mode
[  183.765724][T10098] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.769740][T10098] bridge_slave_0: left allmulticast mode
[  183.771840][T10098] bridge_slave_0: left promiscuous mode
[  183.776014][T10098] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.757470][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'.
[  184.964631][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  184.999853][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'.
[  185.185080][T10133] netlink: 'syz.2.1168': attribute type 9 has an invalid length.
[  185.188478][T10133] netlink: 'syz.2.1168': attribute type 9 has an invalid length.
[  185.355606][T10141] netlink: 'syz.0.1171': attribute type 21 has an invalid length.
[  185.358939][T10141] netlink: 'syz.0.1171': attribute type 22 has an invalid length.
[  185.362237][T10141] netlink: 'syz.0.1171': attribute type 23 has an invalid length.
[  185.365543][T10141] netlink: 'syz.0.1171': attribute type 25 has an invalid length.
[  185.368234][T10141] netlink: 'syz.0.1171': attribute type 26 has an invalid length.
[  185.371081][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1171'.
[  185.652382][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1173'.
[  185.770557][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.006860][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  207.569784][T10167] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1178'.
[  208.587095][T10199] vlan3: entered promiscuous mode
[  208.590184][T10199] bond0: (slave vlan3): Opening slave failed
[  208.682910][T10201] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.761095][T10213] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1190'.
[  208.988668][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'.
[  209.260803][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  209.265615][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  209.822354][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'.
[  210.184755][T10285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1210'.
[  210.418288][T10300] netlink: 'syz.0.1217': attribute type 1 has an invalid length.
[  210.421065][T10300] netlink: 'syz.0.1217': attribute type 4 has an invalid length.
[  210.424453][T10300] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1217'.
[  211.237723][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'.
[  211.332404][T10315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.335501][T10315] syzkaller0: entered promiscuous mode
[  211.337707][T10315] syzkaller0: entered allmulticast mode
[  211.405102][T10315] tipc: Resetting bearer <eth:syzkaller0>
[  211.436123][T10315] tipc: Resetting bearer <eth:syzkaller0>
[  211.447805][T10315] tipc: Disabling bearer <eth:syzkaller0>
[  212.257300][T10341] veth7: entered allmulticast mode
[  212.687052][T10365] vlan3: entered promiscuous mode
[  212.690531][T10365] bond0: (slave vlan3): Opening slave failed
[  212.787024][T10376] bridge0: port 1(gretap0) entered blocking state
[  212.789286][T10376] bridge0: port 1(gretap0) entered disabled state
[  212.791461][T10376] gretap0: entered allmulticast mode
[  212.794963][T10376] gretap0: entered promiscuous mode
[  213.685043][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  213.695981][T10406] IPVS: Unknown mcast interface: vcan0
[  213.718123][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1247'.
[  213.758590][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'.
[  213.766492][T10410] xt_bpf: check failed: parse error
[  213.952588][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  214.003230][T10435] netlink: 'syz.2.1253': attribute type 3 has an invalid length.
[  214.008819][T10435] netlink: 'syz.2.1253': attribute type 3 has an invalid length.
[  214.685025][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1255'.
[  214.909119][T10460] netlink: 'syz.2.1261': attribute type 13 has an invalid length.
[  214.909604][T10458] netlink: 'syz.2.1261': attribute type 13 has an invalid length.
[  214.916621][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'.
[  214.933095][T10460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'.
[  215.039050][T10470] vlan0: entered promiscuous mode
[  215.058244][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'.
[  215.068227][T10471] macsec2: entered promiscuous mode
[  215.070049][T10471] team0: entered promiscuous mode
[  215.072126][T10471] macsec2: entered allmulticast mode
[  215.074352][T10471] team0: entered allmulticast mode
[  215.076602][T10471] team0: Device macsec2 is already an upper device of the team interface
[  215.081355][T10471] team0: left allmulticast mode
[  215.084594][T10471] team0: left promiscuous mode
[  215.377005][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'.
[  215.492011][T10501] openvswitch: netlink: IPv4 tun info is not correct
[  216.000336][T10519] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1277'.
[  216.050054][T10519] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.055402][T10519] 8021q: adding VLAN 0 to HW filter on device team0
[  216.058982][T10519] dummy0: left promiscuous mode
[  216.065475][T10519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.963406][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  217.197234][T10542] vlan0: entered promiscuous mode
[  218.937351][T10559] siw: device registration error -23
[  219.208621][T10570] __nla_validate_parse: 3 callbacks suppressed
[  219.208640][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'.
[  219.217403][T10570] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  219.354526][T10579] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  220.422646][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'.
[  220.615547][T10615] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1305'.
[  220.750369][T10621] netlink: 'syz.1.1308': attribute type 11 has an invalid length.
[  220.758074][T10621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1308'.
[  221.080450][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'.
[  221.089280][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  221.204288][T10651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.208372][T10651] bond_slave_0: left promiscuous mode
[  221.212341][T10651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.217672][T10651] bond_slave_1: left promiscuous mode
[  221.222056][T10651] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  221.226084][T10651] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  221.230579][T10651] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface
[  221.236484][T10651] ip6gretap1: left promiscuous mode
[  221.245978][T10651] bond0 (unregistering): Released all slaves
[  221.261835][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'.
[  221.587850][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1320'.
[  221.591636][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.595452][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.598273][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.601243][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.604465][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.607284][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.610604][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.615893][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.618826][T10679] netlink: 'syz.0.1320': attribute type 23 has an invalid length.
[  221.688300][T10686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1322'.
[  222.024068][T10711] 8021q: adding VLAN 0 to HW filter on device bond9
[  222.042321][T10711] bond9: (slave geneve3): making interface the new active one
[  222.047938][T10711] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  222.051281][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.058820][T10711] bond9: entered promiscuous mode
[  222.060524][T10711] geneve3: entered promiscuous mode
[  222.066084][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.070165][ T8715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.075086][ T8715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.111713][T10723] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1331'.
[  222.707356][T10765] xt_nat: multiple ranges no longer supported
[  222.786203][T10768] xt_hashlimit: size too large, truncated to 1048576
[  222.810170][T10772] vlan0: entered promiscuous mode
[  223.800406][   T33] audit: type=1800 audit(1753360197.233:2): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1362" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2348 res=0 errno=0
[  225.525102][T10846] __nla_validate_parse: 10 callbacks suppressed
[  225.525136][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'.
[  226.337447][T10851] validate_nla: 2 callbacks suppressed
[  226.337465][T10851] netlink: 'syz.2.1370': attribute type 13 has an invalid length.
[  226.358041][T10851] gretap0: refused to change device tx_queue_len
[  226.360732][T10851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  226.628253][T10861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.687762][T10862] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1373'.
[  226.691822][T10862] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  226.819593][T10864] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  226.825152][T10864] gretap0: left allmulticast mode
[  226.827381][T10864] gretap0: left promiscuous mode
[  226.829344][T10864] bridge0: port 1(gretap0) entered disabled state
[  226.836892][T10864] bond9: (slave geneve3): Releasing active interface
[  226.839219][T10864] geneve3: left promiscuous mode
[  226.848126][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.851271][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.854097][T10864] netlink: 'syz.1.1374': attribute type 21 has an invalid length.
[  226.854605][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.859874][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.863944][T10864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1374'.
[  226.868216][T10864] netlink: 'syz.1.1374': attribute type 10 has an invalid length.
[  226.870795][T10864] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  226.875464][T10864] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  226.878145][T10864] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  226.972301][T10867] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1375'.
[  227.812285][T10871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  227.818394][T10871] netlink: 'syz.1.1377': attribute type 3 has an invalid length.
[  227.821079][T10871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1377'.
[  228.068850][T10876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1378'.
[  229.038561][   T33] audit: type=1800 audit(1753360202.473:3): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1387" name=14 dev="tmpfs" ino=2409 res=0 errno=0
[  230.237774][T10954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  230.241176][T10954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  230.328730][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'.
[  231.072561][T10983] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.076479][T10983] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.080474][T10983] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.084841][T10983] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.087902][T10983] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.091483][T10983] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1408'.
[  231.256145][T10993] dvmrp1: entered allmulticast mode
[  231.259473][T10993] dvmrp1: left allmulticast mode
[  231.447018][T11000] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.454890][T11000] team0: Port device team_slave_1 removed
[  231.457092][T11000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.460048][T11000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.695116][T11028] netlink: 'syz.1.1421': attribute type 6 has an invalid length.
[  231.695143][T11029] netlink: 'syz.1.1421': attribute type 6 has an invalid length.
[  232.394161][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.398036][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.407959][T11041] netlink: 'syz.2.1423': attribute type 4 has an invalid length.
[  232.539179][T11046] batadv0: entered promiscuous mode
[  232.604478][T11046] batadv0: left promiscuous mode
[  232.686419][T11057] hsr0 speed is unknown, defaulting to 1000
[  232.690283][T11057] lo speed is unknown, defaulting to 1000
[  232.724655][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1429'.
[  232.728121][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'.
[  232.769802][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'.
[  233.620192][T11081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.622907][T11081] syzkaller0: entered promiscuous mode
[  233.624985][T11081] syzkaller0: entered allmulticast mode
[  233.638958][T11081] tipc: Resetting bearer <eth:syzkaller0>
[  233.646442][T11080] tipc: Resetting bearer <eth:syzkaller0>
[  233.658334][T11080] tipc: Disabling bearer <eth:syzkaller0>
[  233.665969][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  234.015821][T11116] sctp: [Deprecated]: syz.1.1442 (pid 11116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.015821][T11116] Use struct sctp_sack_info instead
[  234.195109][T11127] : renamed from macvtap0
[  234.201660][T11127] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  234.205251][T11127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.385145][T11141] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  235.392021][T11169] vlan3: entered promiscuous mode
[  235.395094][T11169] bond0: (slave vlan3): Opening slave failed
[  235.638929][T11177] netlink: zone id is out of range
[  235.640802][T11177] netlink: get zone limit has 8 unknown bytes
[  236.403542][ T5833] Bluetooth: hci0: command tx timeout
[  236.673917][T11198] __nla_validate_parse: 5 callbacks suppressed
[  236.673929][T11198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1469'.
[  237.527712][T11214] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1473'.
[  237.571824][T11219] ieee802154 phy1 wpan1: encryption failed: -22
[  237.619119][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'.
[  237.967530][ T8715] nci: nci_ntf_packet: unsupported ntf opcode 0xf0a
[  238.546232][T11250] 8021q: VLANs not supported on nlmon0
[  238.570644][T11245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.577490][T11248] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  238.659987][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'.
[  238.688047][T11258] hsr_slave_1 (unregistering): left promiscuous mode
[  239.441758][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1485'.
[  239.496970][T11272] netlink: 'syz.0.1486': attribute type 2 has an invalid length.
[  239.500136][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'.
[  239.601159][T11280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1488'.
[  239.774197][T11303] hsr0 speed is unknown, defaulting to 1000
[  239.778376][T11303] lo speed is unknown, defaulting to 1000
[  240.392627][T11307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  240.461234][T11321] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  240.484838][T11321] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  240.490050][T11321] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  240.611139][T11332] hsr0 speed is unknown, defaulting to 1000
[  240.617696][T11332] lo speed is unknown, defaulting to 1000
[  240.650891][T11343] netlink: 'syz.2.1499': attribute type 13 has an invalid length.
[  240.681090][T11343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.887832][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1505'.
[  240.891749][T11365] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  240.896828][T11365] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  240.962333][T11373] netlink: 'syz.2.1507': attribute type 2 has an invalid length.
[  241.104440][T11382] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  241.107460][T11382] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  241.110762][T11382] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  241.114367][T11382] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  241.117642][T11382] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  241.559807][T11367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.668058][T11387] vlan0: entered promiscuous mode
[  241.692627][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'.
[  241.977038][T11399] netlink: 'syz.0.1516': attribute type 3 has an invalid length.
[  241.979519][T11399] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1516'.
[  242.013184][T11428] vlan3: entered promiscuous mode
[  242.015387][T11428] bond0: (slave vlan3): Opening slave failed
[  242.672017][T11429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.878114][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  242.890478][T11462] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1529'.
[  243.040244][T11468] x_tables: duplicate underflow at hook 3
[  243.042148][T11469] x_tables: duplicate underflow at hook 3
[  243.095605][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1536'.
[  243.117705][T11492] geneve0: entered promiscuous mode
[  243.125183][T11492] team0: entered promiscuous mode
[  243.128937][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'.
[  243.132151][T11492] tipc: Resetting bearer <eth:team0>
[  243.194256][T11492] team0 (unregistering): left promiscuous mode
[  243.197053][T11492] geneve0: left promiscuous mode
[  243.199374][T11492] tipc: Disabling bearer <eth:team0>
[  243.211241][T11492] team0 (unregistering): Port device geneve0 removed
[  243.226654][T11485] hsr0 speed is unknown, defaulting to 1000
[  243.228928][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.234159][T11485] lo speed is unknown, defaulting to 1000
[  243.236631][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.244727][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.250492][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.490507][T11510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.033719][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'.
[  244.176867][T11526] vti0: entered promiscuous mode
[  244.576961][T11540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.119844][T11558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.225654][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  245.292760][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  245.339894][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'.
[  245.357145][T11573] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.363597][T11574] macvlan0: entered promiscuous mode
[  245.365588][T11574] macvlan0: entered allmulticast mode
[  245.367881][T11574] bond1: entered promiscuous mode
[  245.370912][T11574] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  245.376383][T11574] bond1: left promiscuous mode
[  245.986172][T11587] validate_nla: 3 callbacks suppressed
[  245.986183][T11587] netlink: 'syz.0.1563': attribute type 3 has an invalid length.
[  246.071438][T11590] netlink: 'syz.0.1564': attribute type 10 has an invalid length.
[  246.075133][T11590] dummy0: left promiscuous mode
[  246.079200][T11590] team0: Port device dummy0 added
[  246.084276][T11590] Driver unsupported XDP return value 0 on prog  (id 540) dev N/A, expect packet loss!
[  246.276708][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.279291][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1566'.
[  246.282407][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.287004][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.289869][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.292445][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.295325][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.298046][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.300638][T11593] netlink: 'syz.1.1566': attribute type 1 has an invalid length.
[  246.464659][T11601] sch_tbf: burst 2 is lower than device lo mtu (1294) !
[  247.420537][T11626] __nla_validate_parse: 106 callbacks suppressed
[  247.420548][T11626] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1575'.
[  247.436190][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'.
[  247.842246][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1580'.
[  248.689867][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'.
[  248.700008][T11672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.623030][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'.
[  251.353299][T11709] 8021q: adding VLAN 0 to HW filter on device bond12
[  251.387799][T11712] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  251.558154][T11726] validate_nla: 99 callbacks suppressed
[  251.558166][T11726] netlink: 'syz.0.1599': attribute type 2 has an invalid length.
[  251.562452][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'.
[  252.518348][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'.
[  252.706300][T11770] ieee802154 phy1 wpan1: encryption failed: -22
[  252.915689][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'.
[  252.935629][T11786] vlan0: entered allmulticast mode
[  252.937367][T11786] bond2: entered allmulticast mode
[  253.110392][T11792] Cannot find del_set index 286 as target
[  253.143903][T11797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.468320][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'.
[  253.506832][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'.
[  253.510039][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'.
[  254.637119][T11831] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1631'.
[  255.445858][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  255.544332][T11864] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  256.602428][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'.
[  256.689555][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'.
[  256.964376][T11913] netlink: 'syz.0.1652': attribute type 12 has an invalid length.
[  256.967396][T11913] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1652'.
[  257.324855][T11929] netlink: 'syz.0.1656': attribute type 32 has an invalid length.
[  257.328336][T11929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1656'.
[  257.412094][T11933] netlink: 'syz.0.1658': attribute type 2 has an invalid length.
[  257.422652][T11933] `: entered promiscuous mode
[  257.661493][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  257.687129][T11944] Cannot find del_set index 286 as target
[  257.832182][T11952] netlink: 'syz.1.1662': attribute type 1 has an invalid length.
[  257.835674][T11952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1662'.
[  257.841233][T11952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1662'.
[  258.177051][T11967] syzkaller1: entered promiscuous mode
[  258.179398][T11967] syzkaller1: entered allmulticast mode
[  259.249417][T12010] TCP: TCP_TX_DELAY enabled
[  259.683989][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'.
[  259.925103][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.342978][T12029] netlink: 'syz.2.1682': attribute type 4 has an invalid length.
[  260.440575][T12032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1683'.
[  260.661949][T12063] xt_CONNSECMARK: invalid mode: 254
[  260.664857][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'.
[  260.679366][T12065] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  260.717295][T12067] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1693'.
[  261.087713][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf0a
[  261.733339][T12091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  261.930050][T12116] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  262.029034][T12125] xfrm1: entered promiscuous mode
[  262.030728][T12125] xfrm1: entered allmulticast mode
[  262.044445][T12125] xt_hashlimit: size too large, truncated to 1048576
[  262.183320][T12136] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1708'.
[  262.340333][T12144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1711'.
[  262.438050][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  262.469898][T12149] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  262.490540][T12149] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  262.495621][T12149] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  262.541675][T12151] gretap1: entered promiscuous mode
[  262.548272][T12151] bond2: (slave gretap1): making interface the new active one
[  262.551029][T12151] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  262.736190][T12160] delete_channel: no stack
[  262.800953][T12170] netlink: 'syz.0.1720': attribute type 32 has an invalid length.
[  262.807003][T12170] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1720'.
[  262.864393][T12175] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  262.967624][T12177] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1723'.
[  263.002636][T12180] hsr0 speed is unknown, defaulting to 1000
[  263.006645][T12180] lo speed is unknown, defaulting to 1000
[  263.010288][T12181] netlink: 'syz.0.1724': attribute type 9 has an invalid length.
[  263.015442][T12181] netlink: 'syz.0.1724': attribute type 9 has an invalid length.
[  263.688786][T12203] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1728'.
[  263.765779][T12203] xfrm0: left promiscuous mode
[  263.767929][T12203] xfrm0: left allmulticast mode
[  263.774655][T12203] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  263.788349][T12203] gtp0: left promiscuous mode
[  263.790247][T12203] gtp0: left allmulticast mode
[  263.799523][T12203] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  263.811009][T12203] vti0: left promiscuous mode
[  263.817248][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.821897][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.828869][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.833042][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  263.905986][T12208] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1730'.
[  263.975594][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.978420][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.069702][T12221] dvmrp0: left allmulticast mode
[  264.165921][T12233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1733'.
[  264.233668][T12239] netlink: 'syz.0.1737': attribute type 5 has an invalid length.
[  264.236656][T12239] netlink: 'syz.0.1737': attribute type 5 has an invalid length.
[  264.939468][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'.
[  265.002071][T12246] delete_channel: no stack
[  265.330701][   T33] audit: type=1107 audit(1753360238.763:4): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='X-m興:d8lgfk*EUVƔ/fMm{y-^o(I&[cKGo/I0|hJ_2ld[I˹:H&atD'%7޺x`LnS$>wlUܕZh66UaiB̩'
[  265.381872][T12280] !: renamed from dummy0
[  265.548066][T12291] hsr0 speed is unknown, defaulting to 1000
[  265.560663][T12291] lo speed is unknown, defaulting to 1000
[  266.416473][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  266.419941][T12340] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1754'.
[  267.011451][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'.
[  267.014996][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  267.051809][T12351] lo: entered promiscuous mode
[  267.277037][T12350] lo: left promiscuous mode
[  268.156037][T12374] __nla_validate_parse: 4 callbacks suppressed
[  268.156056][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'.
[  268.195998][T12376] netlink: 'syz.0.1766': attribute type 1 has an invalid length.
[  268.198599][T12376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1766'.
[  268.348514][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1769'.
[  268.351710][T12383] tipc: Invalid UDP bearer configuration
[  268.351743][T12383] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  268.597872][T12402] vxcan3: entered allmulticast mode
[  269.829599][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf0a
[  270.535296][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'.
[  270.539908][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'.
[  270.546129][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1781'.
[  270.616858][T12441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.620499][T12441] syzkaller0: entered promiscuous mode
[  270.623207][T12441] syzkaller0: entered allmulticast mode
[  270.636849][T12441] tipc: Resetting bearer <eth:syzkaller0>
[  270.641759][T12440] tipc: Resetting bearer <eth:syzkaller0>
[  270.653347][T12440] tipc: Disabling bearer <eth:syzkaller0>
[  270.731488][   T33] audit: type=1804 audit(1753360244.163:5): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1783" name="/newroot/616/cgroup.controllers" dev="tmpfs" ino=3164 res=1 errno=0
[  270.740144][   T33] audit: type=1800 audit(1753360244.183:6): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1783" name="cgroup.controllers" dev="tmpfs" ino=3164 res=0 errno=0
[  270.749391][   T33] audit: type=1800 audit(1753360244.193:7): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1783" name="cgroup.controllers" dev="tmpfs" ino=3164 res=0 errno=0
[  271.551025][T12454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1786'.
[  271.561211][T12454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1786'.
[  271.640120][T12459] vlan0: entered promiscuous mode
[  271.641959][T12459] vlan0: entered allmulticast mode
[  271.644031][T12459] hsr_slave_1: entered allmulticast mode
[  271.739894][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'.
[  272.032376][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'.
[  272.239226][T12504] hsr0 speed is unknown, defaulting to 1000
[  272.243085][T12504] lo speed is unknown, defaulting to 1000
[  273.240318][T12520] netlink: 'syz.0.1806': attribute type 13 has an invalid length.
[  273.246935][T12520] netlink: 'syz.0.1806': attribute type 17 has an invalid length.
[  273.293853][T12520] 8021q: adding VLAN 0 to HW filter on device team0
[  273.301384][T12520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.357886][T12520] hsr0 speed is unknown, defaulting to 1000
[  273.360865][T12520] lo speed is unknown, defaulting to 1000
[  273.401670][T12522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.480119][T12518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.535809][T12531] __nla_validate_parse: 4 callbacks suppressed
[  273.535820][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1808'.
[  273.542155][T12518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.242997][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  274.337245][T12544] netlink: 'syz.2.1811': attribute type 32 has an invalid length.
[  274.340371][T12544] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1811'.
[  274.441751][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'.
[  275.149797][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'.
[  275.190689][T12558] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  275.199384][T12558] macvlan0: entered promiscuous mode
[  275.201612][T12558] macvlan0: entered allmulticast mode
[  275.203914][T12558] bond3: entered promiscuous mode
[  275.205775][T12558] bridge0: entered promiscuous mode
[  275.208259][T12558] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  275.211329][T12558] bond3: left promiscuous mode
[  275.213701][T12558] bridge0: left promiscuous mode
[  275.291493][T12563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1817'.
[  275.344891][T12568] netlink: 'syz.2.1819': attribute type 32 has an invalid length.
[  275.348384][T12568] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1819'.
[  275.389560][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'.
[  275.529969][T12585] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1821'.
[  275.533878][T12585] batadv_slave_1: entered promiscuous mode
[  275.594253][T12587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'.
[  275.621027][T12590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1826'.
[  275.709336][T12595] vlan0: entered promiscuous mode
[  275.711947][T12595] bond0: (slave vlan0): Opening slave failed
[  276.227687][T12615] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  276.451838][T12636] vlan0: entered promiscuous mode
[  276.459494][T12636] bond0: (slave vlan0): Opening slave failed
[  276.738843][T12654] sctp: [Deprecated]: syz.0.1845 (pid 12654) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.738843][T12654] Use struct sctp_sack_info instead
[  279.115405][T12717] __nla_validate_parse: 9 callbacks suppressed
[  279.115423][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'.
[  279.413884][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'.
[  279.975563][T12748] bridge2: entered allmulticast mode
[  279.981874][T12748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.096024][T12758] syzkaller0: entered promiscuous mode
[  280.098835][T12758] syzkaller0: entered allmulticast mode
[  280.195313][T12764] netlink: 'syz.1.1879': attribute type 15 has an invalid length.
[  280.198863][T12764] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1879'.
[  280.973856][T12779] gre0: entered allmulticast mode
[  281.099464][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  281.346817][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'.
[  281.349960][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'.
[  281.353207][T12820] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1894'.
[  281.512126][T12836] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1898'.
[  281.522949][T12836] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1898'.
[  281.526418][T12836] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1898'.
[  283.145188][T12891] netlink: 'syz.1.1910': attribute type 1 has an invalid length.
[  283.150431][T12891] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  284.731133][T12903] hsr0 speed is unknown, defaulting to 1000
[  284.736848][T12903] lo speed is unknown, defaulting to 1000
[  285.195678][T12939] __nla_validate_parse: 3 callbacks suppressed
[  285.195723][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'.
[  285.206207][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'.
[  285.214350][T12939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.243767][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'.
[  285.392414][T12949] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20004
[  286.325315][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'.
[  286.371440][T12974] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1931'.
[  286.405877][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.579557][T13002] vlan0: entered promiscuous mode
[  286.584194][T13002] bond0: (slave vlan0): Opening slave failed
[  286.809718][T13014] netlink: 'syz.2.1939': attribute type 13 has an invalid length.
[  286.860118][T13016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.868000][T13016] syzkaller0: entered promiscuous mode
[  286.870267][T13016] syzkaller0: entered allmulticast mode
[  286.892496][T13016] tipc: Resetting bearer <eth:syzkaller0>
[  286.898035][T13016] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1940'.
[  286.903981][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'.
[  287.361558][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'.
[  289.109804][T13032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.115072][T13032] syzkaller0: entered promiscuous mode
[  289.117458][T13032] syzkaller0: entered allmulticast mode
[  289.134189][T13032] syzkaller0: mtu greater than device maximum
[  289.138112][T13031] tipc: Resetting bearer <eth:syzkaller0>
[  289.149448][T13031] tipc: Disabling bearer <eth:syzkaller0>
[  289.255479][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'.
[  289.338525][T13037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'.
[  289.849622][T13015] tipc: Resetting bearer <eth:syzkaller0>
[  289.857933][T13015] tipc: Disabling bearer <eth:syzkaller0>
[  290.490316][T13096] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  290.493593][T13096] macsec1: entered promiscuous mode
[  290.495632][T13096] macsec1: entered allmulticast mode
[  290.497825][T13096] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  290.549769][T13104] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  290.554825][T13104] __nla_validate_parse: 3 callbacks suppressed
[  290.554840][T13104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1959'.
[  290.629568][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'.
[  290.635388][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'.
[  290.686213][T13114] netlink: 'syz.0.1962': attribute type 1 has an invalid length.
[  290.716134][T13114] bond5: (slave gretap2): making interface the new active one
[  290.719891][T13114] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  291.097074][T13134] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1968'.
[  291.355556][ T5836] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  291.359670][ T5836] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  291.363364][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  291.368559][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.371899][ T5836] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  291.373798][ T5836] Code: 01 48 c7 c7 60 3e 98 8b be 4b 03 00 00 48 c7 c2 a0 3e 98 8b e8 a4 89 73 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a4 5c f7 ff 49 8b 07 a8 03 75 62
[  291.379981][ T5836] RSP: 0018:ffffc9000337fa40 EFLAGS: 00010006
[  291.381999][ T5836] RAX: 000000001fffe000 RBX: ffffffff822adc49 RCX: a6bba53e33548d00
[  291.384593][ T5836] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0
[  291.387186][ T5836] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822adc49
[  291.389807][ T5836] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: dffffc0000000000
[  291.392406][ T5836] R13: ffff88804b03b540 R14: 0000000000000001 R15: 00000000ffff0000
[  291.394999][ T5836] FS:  000055558036b500(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  291.398238][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.400611][ T5836] CR2: 000000110c3d6dc4 CR3: 000000010e6b4000 CR4: 00000000000006f0
[  291.404001][ T5836] Call Trace:
[  291.405407][ T5836]  <TASK>
[  291.406673][ T5836]  refill_obj_stock+0x254/0x850
[  291.408725][ T5836]  ? refill_obj_stock+0x116/0x850
[  291.410890][ T5836]  __memcg_slab_free_hook+0x127/0x3d0
[  291.413040][ T5836]  ? __dequeue_signal+0x487/0x5b0
[  291.414913][ T5836]  kmem_cache_free+0x223/0x400
[  291.416580][ T5836]  __dequeue_signal+0x487/0x5b0
[  291.418551][ T5836]  dequeue_signal+0x1a2/0x370
[  291.420567][ T5836]  get_signal+0x55f/0x1340
[  291.422186][ T5836]  arch_do_signal_or_restart+0x9a/0x750
[  291.424130][ T5836]  ? __pfx_get_timespec64+0x10/0x10
[  291.425877][ T5836]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  291.428086][ T5836]  ? exit_to_user_mode_loop+0x40/0x110
[  291.430003][ T5836]  exit_to_user_mode_loop+0x75/0x110
[  291.432093][ T5836]  do_syscall_64+0x2bd/0x3b0
[  291.433664][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.435448][ T5836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.437526][ T5836]  ? exc_page_fault+0x9f/0xf0
[  291.439253][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.441340][ T5836] RIP: 0033:0x7f74a8fc1265
[  291.442889][ T5836] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  291.449738][ T5836] RSP: 002b:00007ffe3b6d6940 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  291.452627][ T5836] RAX: fffffffffffffdfc RBX: 0000000000000809 RCX: 00007f74a8fc1265
[  291.455349][ T5836] RDX: 00007ffe3b6d6980 RSI: 0000000000000000 RDI: 0000000000000000
[  291.458342][ T5836] RBP: 00007ffe3b6d69ec R08: 0000000000000000 R09: 0000000000000000
[  291.461603][ T5836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  291.464926][ T5836] R13: 00000000000927c0 R14: 0000000000047146 R15: 00007ffe3b6d6a40
[  291.468245][ T5836]  </TASK>
[  291.469552][ T5836] Modules linked in:
[  291.471256][ T5836] ---[ end trace 0000000000000000 ]---
[  291.473583][ T5836] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  291.476079][ T5836] Code: 01 48 c7 c7 60 3e 98 8b be 4b 03 00 00 48 c7 c2 a0 3e 98 8b e8 a4 89 73 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a4 5c f7 ff 49 8b 07 a8 03 75 62
[  291.484115][ T5836] RSP: 0018:ffffc9000337fa40 EFLAGS: 00010006
[  291.486203][ T5836] RAX: 000000001fffe000 RBX: ffffffff822adc49 RCX: a6bba53e33548d00
[  291.488875][ T5836] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0
[  291.491521][ T5836] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822adc49
[  291.494252][ T5836] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: dffffc0000000000
[  291.496947][ T5836] R13: ffff88804b03b540 R14: 0000000000000001 R15: 00000000ffff0000
[  291.499662][ T5836] FS:  000055558036b500(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  291.502715][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.505152][ T5836] CR2: 000000110c3d6dc4 CR3: 000000010e6b4000 CR4: 00000000000006f0
[  291.508018][ T5836] Kernel panic - not syncing: Fatal exception
[  291.510891][ T5836] Kernel Offset: disabled
[  291.512362][ T5836] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:31:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000337f270
R8 =ffff888020980237 R9 =1ffff11004130046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8dd R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558036b500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d6dc4 CR3=000000010e6b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=4d634534ccf06a7d abe54a8e71bf2fd1 XMM03=b0458b9aaf759f57 ca21aca01e46c299
XMM04=523bc5f900bc91e9 1999561c12915fca XMM05=3365bfd1226a9c22 63c600f34da5ba39
XMM06=523bc5f900bc91e9 1999561c12915fca XMM07=b0458b9aaf759f57 ca21aca01e46c299
XMM08=4d634534ccf06a7d abe54a8e71bf2fd1 XMM09=0000000000000000 00007f74a9011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bf5337 RBX=0000000000000a02 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff99d41170 RBP=ffffc90004faf030 RSP=ffffc90004faef98
R8 =ffffffff99d41173 R9 =1ffffffff33a822e R10=dffffc0000000000 R11=fffffbfff33a822f
R12=dffffc0000000000 R13=ffff888113b79000 R14=ffffffff99d41170 R15=1ffff920009f5df4
RIP=ffffffff81c7b670 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8e75806c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563ecfc947e8 CR3=000000010e91c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc8e6811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
