last executing test programs:

11.61957666s ago: executing program 1 (id=1906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005000100010000001400018008000100aceca42a5a644602570000000c001980080001000a"], 0x44}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet(0x2, 0x3, 0x30)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00')
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r5 = socket(0xa, 0x801, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x6)
getsockopt(r5, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
setsockopt(r2, 0x4, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x23, &(0x7f0000000340), 0x8)

11.510436601s ago: executing program 1 (id=1909):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000003300070100000000fbdbdf05017c00000c00018006000600800a0000100002a2a4000a000f1d45d057406f4f13580000000000000000bb3f096bf48766ce94eabd8ad46bacec9016f9cc96de10a09c64cac628e31dc3937e19d17e24e2b4cf528d6cc003cca76181068d5b5bc289d8bc13eaa4308e344402116ff2374c9478da97dda6afe77054b4220c746537dbaac0c97923ee2e2e3709239c79a5ad3c4895e274b96e"], 0x28}}, 0x4010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x0, 0x19, 0x0, 0x0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}, {0x2000000}}, @common=@inet=@tos={{0x28}, {0x2, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffff00, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x7fff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r6, 0x2, 0x0, 0x4000}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r10, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000008)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r11], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010300000000000000000a80000000030007000000001400010000000000000000000020"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000c37100023e8a71dc821d95cd396000400000085000000530000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe04, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

11.38076463s ago: executing program 1 (id=1911):
syz_emit_ethernet(0xa6, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x1f, 0x4, 0x1, 0x8, 0x6c2, 0x64, 0x7, 0x29, 0xc, 0xcf, @remote, @empty, {[@cipso={0x86, 0x65, 0x1, [{0x1, 0xd, "3a078d2f1dafd9e3cadc9c"}, {0x7, 0x5, "a57e10"}, {0x7, 0x4, "90de"}, {0x5, 0x8, "7e83da8eb295"}, {0x7, 0xd, "772fcc8673c677a16d6d4a"}, {0x0, 0xa, "f6780c95b45a1eac"}, {0x0, 0x11, "658a4329c13b6c85ee23a40ef066fc"}, {0x7, 0xa, "6972d3d3d0792c6f"}, {0x1, 0xf, "2ba3d1a25673143855ace6273c"}]}]}}}}}}}, 0x0)

11.231335924s ago: executing program 1 (id=1912):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000014)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x140, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x4e24, 0x4f20, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0x1, 'netbios-ns\x00', {0x8}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x4, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000140)=0xb, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r9, 0x89e5, &(0x7f0000000180)=@netrom)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f00000000c0)={@default, @default})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, 0x0, 0x81)
ioctl$sock_SIOCGIFBR(r7, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})

7.250943748s ago: executing program 1 (id=1912):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000014)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x140, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x4e24, 0x4f20, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0x1, 'netbios-ns\x00', {0x8}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x4, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000140)=0xb, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r9, 0x89e5, &(0x7f0000000180)=@netrom)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f00000000c0)={@default, @default})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, 0x0, 0x81)
ioctl$sock_SIOCGIFBR(r7, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})

1.058176311s ago: executing program 1 (id=1912):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000014)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x140, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x4e24, 0x4f20, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0x1, 'netbios-ns\x00', {0x8}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x4, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000140)=0xb, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r9, 0x89e5, &(0x7f0000000180)=@netrom)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f00000000c0)={@default, @default})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, 0x0, 0x81)
ioctl$sock_SIOCGIFBR(r7, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})

800.070605ms ago: executing program 0 (id=2033):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x108, 0x0, 0x0, 0x108, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0xf00, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

718.613875ms ago: executing program 0 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x60, 0xc0000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000600)="1746", 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x0, 0x1, 0xfffffffd}, 0x10)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x4, 0x0, &(0x7f0000000000))

511.042145ms ago: executing program 0 (id=2035):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4, 0x7ff}]}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x64}}, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @rose, 0x1, @default}, &(0x7f0000000080)=0x1c, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfff8, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)

381.14727ms ago: executing program 2 (id=2036):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xd4, <r1=>0x0}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500241012800b00010062726964676500001400028005001700000000000500180001000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r4, 0xac9d4000)
pipe(&(0x7f00000007c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='w', 0xfffffdf0}], 0x1, 0x3)
close(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"})
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x7fffffffffffffff})
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0)
splice(r5, 0x0, r6, 0x0, 0xfffd, 0xd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200000000"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r4], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, r1, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

311.050577ms ago: executing program 0 (id=2037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x206e1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET6={0x38, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x1, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x34}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = socket(0x11, 0x3, 0x2)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000100b4610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)

310.801651ms ago: executing program 2 (id=2038):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffef1, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000084000000", @ANYRES32=r0, @ANYBLOB="008000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000030000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000080055090100026200009500000000000000bc91100000000000b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40008}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffef1, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000084000000", @ANYRES32=r0, @ANYBLOB="008000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000030000000500"/28], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000080055090100026200009500000000000000bc91100000000000b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40008}, 0x94) (async)

220.736417ms ago: executing program 0 (id=2039):
r0 = socket(0x10, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x50) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_netdev_private(r1, 0x8994, &(0x7f0000000100)="184e4d3a") (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000002"], 0x10) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2}, 0x10) (async, rerun: 64)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, r7, 0x2, 0x0, 0x4000}, 0x10) (async, rerun: 32)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "d0a31839b3053659", "92fa98086744150d96532a8b6470841b49a63414eab03a8b673f63971577a94a", "03b774cc", "fced2485e28c0bf3"}, 0x38) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000200012800b0001006d61637365630000102002800c000100ffffffffffffffff080005003f4cf6f92e2821ba593b96046f14a1aecb8ec012fde2", @ANYRES32=r12, @ANYBLOB], 0x48}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x881, 0x0) (async, rerun: 32)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) (async, rerun: 32)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

218.697049ms ago: executing program 2 (id=2040):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, @in=@private=0xa01013c, {0x5}, {0x0, 0x8, 0x0, 0x8002}, {}, 0x0, 0x1000000, 0xa, 0x4, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "86d0c9379902ffd2ce60c2d42688575825cac521"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x1c000000}, 0x4000080)

149.213505ms ago: executing program 2 (id=2041):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94)
syz_emit_ethernet(0x49e, &(0x7f0000000440)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@mpls_uc={0x8847, {[{0x8}, {0x95, 0x0, 0x1}, {0x4}, {0x9}, {0x3, 0x0, 0x1}, {0xa}, {0x400, 0x0, 0x1}], @ipv6=@icmpv6={0x9, 0x6, "b51e26", 0x44c, 0x3a, 0x0, @loopback, @mcast2, {[@fragment={0xc, 0x0, 0xa2, 0x1, 0x0, 0x1c, 0x66}, @dstopts={0x89, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x76}, @pad1, @generic={0x7, 0x70, "be608c1264da07751643514ec0aa81a43e6c1078450ff0ce9d6fc877185771f638b02a8786d27aaab480417dd489698afd492d94b7888d5d335f442c0edbf54792fad729f4c943141e91957f6681db02ae5d2a996b6419b6d659cc9fc3e5604109fb896dc3e3a07f480800bc5d91c056"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x3, 0x9, [{0x8, 0x5, 0x3, @private0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x28}], [0x1, 0x0, 0x2, 0xbf, 0x1]}, {0x6, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [@remote, @mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}], [0x1, 0x4, 0x100, 0x8, 0x23a3c0, 0x3]}, {0x1, 0x2, 0x4, @private0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}], [0x938, 0x3]}, {0x3, 0x6, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback], [0x0, 0xe, 0x7118, 0x2, 0x4d946b39, 0xffffffff]}, {0xf, 0x1, 0x2, @rand_addr=' \x01\x00', [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x4]}, {0x3, 0x1, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dev={0xfe, 0x80, '\x00', 0x43}, @mcast1, @private0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback], [0x3]}, {0x1, 0xa, 0x4, @loopback, [@loopback, @local, @private0, @local], [0x60, 0x4, 0x1000, 0x5, 0x2, 0xd, 0x6, 0x7f, 0x1bb, 0x3]}, {0x1, 0x7, 0x9, @local, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], [0x80000001, 0x12, 0xee, 0x5, 0x2, 0x80000001, 0x7fff]}, {0x1, 0x2, 0x0, @remote, [], [0xbe6, 0xc]}]}}}}}}}, &(0x7f0000000080)={0x5, 0x1, [0x2d9, 0x22e, 0xd30, 0x618]})

70.982826ms ago: executing program 0 (id=2042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

70.577613ms ago: executing program 2 (id=2043):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32, @ANYBLOB="08000f"], 0x2c}}, 0x60800)

0s ago: executing program 2 (id=2044):
connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delchain={0x4c, 0x65, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0x10, 0xfff2}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x40000}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000200)={0x8, 'veth1_macvtap\x00', {'vxcan1\x00'}, 0x1ff}) (async)
socketpair(0x28, 0x1, 0x2, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={<r4=>0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x1, 0x4, 0x3, 0xc, 0x80}, &(0x7f0000000340)=0x98) (async, rerun: 32)
r5 = socket$inet6(0xa, 0x800, 0x800000) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0x1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x10) (async, rerun: 64)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64)
r6 = accept4(r3, &(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000500)=0x80, 0x80000)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8161020}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa63}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x33}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004000) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4004)
sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1}, {0x8, 0x5}, {0xc, 0x1a}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x19, 0x6, 0xfffffc01, 0xa, 0xb, 0x3, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x7f, 0x8, 0xe, 0x15, 0x1c, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xff}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) (async)
pselect6(0x40, &(0x7f0000000a40)={0xffffffff, 0x7c, 0x10001, 0x7, 0xf, 0x6, 0x7f, 0x3}, &(0x7f0000000a80)={0x5, 0x4a24, 0x80000001, 0x100000001, 0xfffffffffffffffe, 0x3, 0x4, 0x7}, &(0x7f0000000ac0)={0xedcc, 0x4, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0x2}, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b80)={&(0x7f0000000b40)={[0x80000000]}, 0x8}) (async)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000bc0)={r4, @in6={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}}}, 0x84) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c80)={'wg0\x00', <r9=>0x0}) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10c, 0x37, 0x300, 0x70bd27, 0x25dfdbff, {0x19}, [@generic="95c41d64e218dbace51a92762fcf11a803616f460eaec777d7ebc55689cd3480ae18570a71f5b407ff3a10054bbe1da4c554bb697df8726318af44126d13a320e8215c33b45df25983ed1b8f20f55a114fae76fbb1ec71e786861248fbacd5f54495ded57fe3b896806d9d3609ba1bc6a71ad8b0ddac696351ea54fbde45c2e61ec6a6b052cd2bd88cb137288955330b1b306f0052c633534ead50b690c6e42ea3186dacebcb8f75ab88bf7c62bc008795d981684a9947dd636d7a4ecb895ee35dac1a80cbc45226a88482f7eb44e0a67e246007790b929ff785299ea575037587f6b3a5c31eb4d571be821559bb2d2c3ed02b347626"]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
accept4$inet6(r3, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000f00)=0x1c, 0x80000)
getsockopt$inet6_buf(r6, 0x29, 0x1b, &(0x7f0000000f40), &(0x7f0000000f80))
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r11) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x1}}, @const={0x4, 0x0, 0x0, 0xa, 0x3}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x2, 0x833}, {0xe, 0x2}]}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000001080)=""/4096, 0x66, 0x1000, 0x0, 0x3f}, 0x28) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x1b, 0x7, 0xa022, 0x7d5, 0x120, 0xffffffffffffffff, 0x400, '\x00', r9, r12, 0x5, 0x2, 0x5}, 0x50)

kernel console output (not intermixed with test programs):

led state
[   55.555011][ T5828] bridge_slave_1: entered allmulticast mode
[   55.557912][ T5828] bridge_slave_1: entered promiscuous mode
[   55.666140][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.675745][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.701770][ T5828] team0: Port device team_slave_0 added
[   55.705408][ T5828] team0: Port device team_slave_1 added
[   55.715807][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.735610][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.738573][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.747532][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.760851][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.774387][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.776662][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.785893][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.882037][ T5828] hsr_slave_0: entered promiscuous mode
[   55.884593][ T5828] hsr_slave_1: entered promiscuous mode
[   55.935905][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.939050][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.943588][ T5832] bridge_slave_0: entered allmulticast mode
[   55.947698][ T5832] bridge_slave_0: entered promiscuous mode
[   55.988703][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.991959][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.995116][ T5832] bridge_slave_1: entered allmulticast mode
[   55.999054][ T5832] bridge_slave_1: entered promiscuous mode
[   56.004412][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.007088][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.010073][ T5826] bridge_slave_0: entered allmulticast mode
[   56.013902][ T5826] bridge_slave_0: entered promiscuous mode
[   56.017898][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.021358][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.023946][ T5826] bridge_slave_1: entered allmulticast mode
[   56.026637][ T5826] bridge_slave_1: entered promiscuous mode
[   56.089678][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.108246][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.119697][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.146723][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.208849][ T5826] team0: Port device team_slave_0 added
[   56.214395][ T5832] team0: Port device team_slave_0 added
[   56.218135][ T5826] team0: Port device team_slave_1 added
[   56.227857][ T5832] team0: Port device team_slave_1 added
[   56.275648][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.278341][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.288750][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.295010][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.297390][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.306581][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.316844][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.319594][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.328988][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.342217][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.346756][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.356821][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.417046][ T5832] hsr_slave_0: entered promiscuous mode
[   56.420094][ T5832] hsr_slave_1: entered promiscuous mode
[   56.423257][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.426333][ T5832] Cannot create hsr debugfs directory
[   56.433142][ T5826] hsr_slave_0: entered promiscuous mode
[   56.435717][ T5826] hsr_slave_1: entered promiscuous mode
[   56.438009][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.441060][ T5826] Cannot create hsr debugfs directory
[   56.543985][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.551343][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.566537][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.590070][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.752914][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.764600][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.774629][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.782932][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.847478][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.857275][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.864428][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.872816][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.898636][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.942805][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.968158][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.970815][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.996088][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.998838][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.015150][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.046031][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   57.054361][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.066189][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.069216][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.080086][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.082702][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.108860][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.143393][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.145967][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.166225][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.168625][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.274630][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.312307][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.331521][ T5221] Bluetooth: hci2: command tx timeout
[   57.334148][ T5221] Bluetooth: hci1: command tx timeout
[   57.343713][   T55] Bluetooth: hci0: command tx timeout
[   57.347421][ T5828] veth0_vlan: entered promiscuous mode
[   57.357153][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.371863][ T5828] veth1_vlan: entered promiscuous mode
[   57.417713][ T5832] veth0_vlan: entered promiscuous mode
[   57.426768][ T5826] veth0_vlan: entered promiscuous mode
[   57.438235][ T5828] veth0_macvtap: entered promiscuous mode
[   57.444658][ T5832] veth1_vlan: entered promiscuous mode
[   57.457809][ T5828] veth1_macvtap: entered promiscuous mode
[   57.477141][ T5826] veth1_vlan: entered promiscuous mode
[   57.509036][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.522248][ T5832] veth0_macvtap: entered promiscuous mode
[   57.529936][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.543494][ T5832] veth1_macvtap: entered promiscuous mode
[   57.548642][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.553706][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.557130][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.561699][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.593504][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.598679][ T5826] veth0_macvtap: entered promiscuous mode
[   57.606089][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.623401][ T5826] veth1_macvtap: entered promiscuous mode
[   57.626186][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.629612][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.633712][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.637396][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.716471][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.731109][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.734005][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.739563][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.754390][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.756986][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.761631][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.764891][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.768119][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.773030][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.812064][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.814722][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.835401][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.840971][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.897854][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.909452][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.923569][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.002140][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.005472][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.063738][ T5899] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[   58.077642][ T5899] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.261688][ T5911] bridge_slave_0: left allmulticast mode
[   58.264715][ T5911] bridge_slave_0: left promiscuous mode
[   58.267483][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.276844][ T5911] bridge_slave_1: left allmulticast mode
[   58.279243][ T5911] bridge_slave_1: left promiscuous mode
[   58.284368][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.295552][ T5911] bond0: (slave bond_slave_0): Releasing backup interface
[   58.304468][ T5911] bond0: (slave bond_slave_1): Releasing backup interface
[   58.315563][ T5911] team0: Port device team_slave_0 removed
[   58.322819][ T5911] team0: Port device team_slave_1 removed
[   58.325862][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.328717][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.334865][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.337540][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.837209][ T5934] netlink: 'syz.1.12': attribute type 21 has an invalid length.
[   58.840731][ T5934] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12'.
[   58.844740][ T5934] netlink: 'syz.1.12': attribute type 4 has an invalid length.
[   58.847440][ T5934] netlink: 'syz.1.12': attribute type 5 has an invalid length.
[   58.849897][ T5934] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12'.
[   59.164202][ T5945] sctp: failed to load transform for md5: -4
[   59.248056][ T5964] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET)
[   59.265255][ T5964] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   59.268389][ T5964] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   59.276509][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.308019][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   59.316733][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'.
[   59.343917][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.411136][   T55] Bluetooth: hci1: command tx timeout
[   59.413477][   T55] Bluetooth: hci2: command tx timeout
[   59.414463][ T5221] Bluetooth: hci0: command tx timeout
[   59.521867][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   59.535442][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.537791][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.538031][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.552552][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.555852][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.657159][ T5990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.002504][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.122312][ T6011] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   60.125447][ T6011] netlink: 208 bytes leftover after parsing attributes in process `syz.1.30'.
[   60.129235][ T6011] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   60.136713][ T6011] netlink: 'syz.1.30': attribute type 2 has an invalid length.
[   60.512883][ T6019] netlink: 244 bytes leftover after parsing attributes in process `syz.2.32'.
[   60.585012][ T6021] xt_recent: Unsupported userspace flags (00000048)
[   60.933722][ T6045] netlink: 'syz.1.42': attribute type 5 has an invalid length.
[   61.178682][ T6072] Zero length message leads to an empty skb
[   61.490882][ T5221] Bluetooth: hci0: command tx timeout
[   61.492833][ T5221] Bluetooth: hci2: command tx timeout
[   61.494586][ T5221] Bluetooth: hci1: command tx timeout
[   61.616709][ T6096] Unsupported ieee802154 address type: 0
[   61.627758][ T6099] netlink: 'syz.2.61': attribute type 2 has an invalid length.
[   61.633158][ T6099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.717975][ T6109] netlink: 'syz.2.65': attribute type 3 has an invalid length.
[   61.805586][ T6113] xt_hashlimit: max too large, truncated to 1048576
[   61.818357][ T6113] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   61.894921][ T6116] bond0: entered promiscuous mode
[   61.897188][ T6116] bond_slave_0: entered promiscuous mode
[   61.901741][ T6116] bond_slave_1: entered promiscuous mode
[   61.906548][ T6116] batadv_slave_1: entered promiscuous mode
[   61.909693][ T6116] erspan0: entered promiscuous mode
[   61.930058][ T6125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.092970][ T6134] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   63.047554][ T6187] warning: `syz.1.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.062379][ T6189] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   63.124157][ T6192] __nla_validate_parse: 20 callbacks suppressed
[   63.124173][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'.
[   63.247630][ T6195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.251083][ T6195] IPv6: NLM_F_CREATE should be set when creating new route
[   63.254395][ T6195] IPv6: NLM_F_CREATE should be set when creating new route
[   63.570484][ T5221] Bluetooth: hci1: command tx timeout
[   63.571149][   T55] Bluetooth: hci2: command tx timeout
[   63.572876][ T5221] Bluetooth: hci0: command tx timeout
[   63.597112][ T6204] team_slave_0: entered promiscuous mode
[   63.599612][ T6204] team_slave_1: entered promiscuous mode
[   63.605252][ T6204] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   63.608951][ T6204] team0: Device macvtap1 is already an upper device of the team interface
[   63.629836][ T6204] team_slave_0: left promiscuous mode
[   63.632654][ T6204] team_slave_1: left promiscuous mode
[   63.837799][ T6217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'.
[   63.852735][ T6217] bridge1: entered promiscuous mode
[   63.858674][ T6217] bridge1: entered allmulticast mode
[   63.951706][ T6223] bond0: entered promiscuous mode
[   63.957621][ T6223] macvlan1: entered promiscuous mode
[   63.961018][ T6223] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   63.965542][ T6223] Cannot create hsr debugfs directory
[   63.968311][ T6223] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   63.974955][ T6223] hsr1: entered promiscuous mode
[   64.198940][ T6238] validate_nla: 2 callbacks suppressed
[   64.198953][ T6238] netlink: 'syz.0.112': attribute type 1 has an invalid length.
[   64.242437][ T6238] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'.
[   64.247290][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[   64.299409][ T6242] netlink: 'syz.0.113': attribute type 1 has an invalid length.
[   64.415738][ T6247] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   64.425279][ T6247] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   65.255544][ T6267] netlink: 'syz.1.119': attribute type 4 has an invalid length.
[   65.270626][ T6267] netlink: 'syz.1.119': attribute type 17 has an invalid length.
[   65.323386][ T6271] netlink: 'syz.0.121': attribute type 13 has an invalid length.
[   65.323902][ T6272] netlink: 'syz.0.121': attribute type 13 has an invalid length.
[   65.339771][ T6271] gretap0: refused to change device tx_queue_len
[   65.346323][ T6271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   65.353056][ T6272] gretap0: refused to change device tx_queue_len
[   65.355119][ T6272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   65.438560][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.1.124'.
[   65.650308][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[   65.656121][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   65.659084][ T6287] bridge_slave_0: entered promiscuous mode
[   65.735422][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   66.462662][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[   66.617940][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   66.963501][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   67.221295][ T6356] Bluetooth: MGMT ver 1.23
[   67.396705][ T6357] infiniband syz1: set active
[   67.399894][ T6357] infiniband syz1: added syz_tun
[   67.439784][ T6357] RDS/IB: syz1: added
[   67.442076][ T6357] smc: adding ib device syz1 with port count 1
[   67.444769][ T6357] smc:    ib device syz1 port 1 has pnetid 
[   67.638815][ T6379] netlink: 'syz.1.156': attribute type 11 has an invalid length.
[   67.996015][ T6391] x9: renamed from bridge_slave_0 (while UP)
[   68.149012][ T6400] __nla_validate_parse: 3 callbacks suppressed
[   68.149026][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[   68.235475][ T6404] netlink: 104 bytes leftover after parsing attributes in process `syz.0.164'.
[   68.319996][ T6411] C: renamed from team_slave_0 (while UP)
[   68.327111][ T6411] netlink: 'syz.0.165': attribute type 2 has an invalid length.
[   68.331461][ T6411] netlink: 112 bytes leftover after parsing attributes in process `syz.0.165'.
[   68.335431][ T6411] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   68.642435][ T6429] syzkaller0: entered promiscuous mode
[   68.644890][ T6429] syzkaller0: entered allmulticast mode
[   68.684808][ T6433] nft_compat: unsupported protocol 0
[   69.167027][ T6459] netlink: 'syz.2.181': attribute type 64 has an invalid length.
[   69.172858][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[   69.198615][ T6461] netlink: 180 bytes leftover after parsing attributes in process `syz.0.179'.
[   69.408490][ T6473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.184'.
[   69.549326][ T6484] openvswitch: netlink: Flow key attribute not present in set flow.
[   69.671826][ T6491] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   69.770705][ T6503] erspan0: entered allmulticast mode
[   69.777354][ T6497] netlink: 'syz.2.190': attribute type 1 has an invalid length.
[   69.816842][ T6497] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.840612][ T6503] ipvlan0: entered allmulticast mode
[   69.842871][ T6509] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.196'.
[   69.846608][ T6503] bond1: entered allmulticast mode
[   69.867629][ T6497] bond1: (slave gretap1): making interface the new active one
[   69.870320][ T6497] gretap1: entered allmulticast mode
[   69.873171][ T6497] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   69.916958][ T6512] syzkaller0: entered promiscuous mode
[   69.925521][ T6512] syzkaller0: entered allmulticast mode
[   70.067227][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   70.075923][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   70.088096][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   70.388366][ T6522] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.392991][ T6522] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.396443][ T6522] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.399896][ T6522] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.435419][ T6522] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   70.437973][ T6522] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   70.440949][ T6522] bridge1: left promiscuous mode
[   70.442957][ T6522] bridge1: left allmulticast mode
[   70.445454][ T6522] hsr1: left promiscuous mode
[   70.458394][ T6538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.577255][ T6543] team0 (unregistering): Port device team_slave_0 removed
[   70.585821][ T6543] team0 (unregistering): Port device team_slave_1 removed
[   70.601332][ T6541] syzkaller1: entered promiscuous mode
[   70.603311][ T6541] syzkaller1: entered allmulticast mode
[   70.850386][ T6567] tipc: Started in network mode
[   70.852471][ T6567] tipc: Node identity ca1095e084ed, cluster identity 4711
[   70.876670][ T6567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.907177][ T6567] syzkaller0: entered promiscuous mode
[   70.909056][ T6567] syzkaller0: entered allmulticast mode
[   70.911486][ T6567] tipc: Resetting bearer <eth:syzkaller0>
[   70.922130][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   71.014941][ T6579] delete_channel: no stack
[   71.054482][   T24] IPVS: starting estimator thread 0...
[   71.095856][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.109891][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.162912][ T6582] IPVS: using max 78 ests per chain, 187200 per kthread
[   71.739176][ T6565] tipc: Disabling bearer <eth:syzkaller0>
[   71.884019][ T6595] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   71.886454][ T6595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.888757][ T6595] IPv6: NLM_F_CREATE should be set when creating new route
[   72.106140][ T6618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.177333][ T6618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.250975][ T6618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.316126][ T6618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.434550][ T6618] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.447366][ T6618] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.469377][ T6618] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.487841][ T6618] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.698493][ T6643] netlink: 'syz.2.235': attribute type 4 has an invalid length.
[   72.872478][ T6658] siw: device registration error -23
[   72.916811][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.030742][ T6666] bridge_slave_0: left allmulticast mode
[   73.032793][ T6666] bridge_slave_0: left promiscuous mode
[   73.035015][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.069980][ T6666] bridge_slave_1: left allmulticast mode
[   73.076534][ T6666] bridge_slave_1: left promiscuous mode
[   73.079509][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.105940][ T6666] bond0: (slave bond_slave_0): Releasing backup interface
[   73.125002][ T6666] bond0: (slave bond_slave_1): Releasing backup interface
[   73.148727][ T6666] team0: Port device C removed
[   73.159799][ T6666] team0: Port device team_slave_1 removed
[   73.165712][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.168855][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.175828][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.181134][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.321211][ T6689] ksmbd: Unknown IPC event: 3, ignore.
[   73.322785][ T6691] __nla_validate_parse: 88 callbacks suppressed
[   73.322798][ T6691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[   73.331541][ T6691] unsupported nlmsg_type 40
[   73.425016][ T6700] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   73.448052][ T6698] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[   73.457583][ T6698] netlink: 188 bytes leftover after parsing attributes in process `syz.0.254'.
[   73.561647][ T6704] netlink: 60 bytes leftover after parsing attributes in process `syz.1.255'.
[   73.565460][ T6704] netlink: 35 bytes leftover after parsing attributes in process `syz.1.255'.
[   73.572723][ T6707] tun0: tun_chr_ioctl cmd 1074025677
[   73.574786][ T6707] tun0: linktype set to 773
[   73.580125][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'.
[   73.627583][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'.
[   73.702650][ T6713] netlink: 'syz.2.260': attribute type 5 has an invalid length.
[   73.718678][ T6713] vlan0: entered promiscuous mode
[   73.723016][ T6713] bond0: (slave vlan0): Opening slave failed
[   73.790458][ T6723] netlink: 44 bytes leftover after parsing attributes in process `syz.0.263'.
[   73.807573][ T6723] netlink: 'syz.0.263': attribute type 5 has an invalid length.
[   73.810642][ T6723] netlink: 'syz.0.263': attribute type 5 has an invalid length.
[   73.817681][ T6723] netlink: 2369 bytes leftover after parsing attributes in process `syz.0.263'.
[   73.842412][ T6726] tipc: Started in network mode
[   73.844084][ T6726] tipc: Node identity ac14140f, cluster identity 4711
[   73.846973][ T6726] tipc: New replicast peer: 255.255.255.255
[   73.860662][ T6726] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.863865][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'.
[   73.867775][ T6726] tipc: Disabling bearer <udp:syz2>
[   73.898429][ T6734] netlink: 27 bytes leftover after parsing attributes in process `syz.0.267'.
[   73.988273][ T6743] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   74.185933][ T6753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.213864][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[   74.226643][ T6752] tipc: Disabling bearer <eth:syzkaller0>
[   75.205238][ T6786] batadv_slave_1: entered promiscuous mode
[   75.404589][ T6799] netlink: 'syz.1.289': attribute type 20 has an invalid length.
[   76.868122][ T6905] netlink: 'syz.2.322': attribute type 7 has an invalid length.
[   77.325637][ T6944] gre0: entered promiscuous mode
[   77.424653][ T6953] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   77.434326][ T6953] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   77.542568][ T6958] netlink: 'syz.2.341': attribute type 5 has an invalid length.
[   77.676073][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.744463][ T6974] netlink: 'syz.2.348': attribute type 4 has an invalid length.
[   77.841801][ T6980] syzkaller0: entered promiscuous mode
[   77.843949][ T6980] syzkaller0: entered allmulticast mode
[   78.375130][ T7002] __nla_validate_parse: 28 callbacks suppressed
[   78.375146][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   79.105833][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[   79.154373][ T7017] netlink: 'syz.2.362': attribute type 11 has an invalid length.
[   79.183916][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   79.264447][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.364'.
[   79.324084][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'.
[   79.408789][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'.
[   79.417745][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'.
[   79.417800][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[   79.642837][ T7050] netlink: 232 bytes leftover after parsing attributes in process `syz.0.373'.
[   79.787639][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.381'.
[   79.914737][ T7078] netlink: 'syz.2.384': attribute type 11 has an invalid length.
[   79.917616][ T7078] netlink: 'syz.2.384': attribute type 4 has an invalid length.
[   80.696447][ T7119] batadv_slave_1: entered promiscuous mode
[   80.751765][ T7118] batadv_slave_1: left promiscuous mode
[   81.338755][  T789] cfg80211: failed to load regulatory.db
[   81.484370][ T7150] xt_l2tp: v2 sid > 0xffff: 4294901760
[   81.834367][ T7171] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   81.999778][ T7177] set match dimension is over the limit!
[   82.109351][ T7181] C: renamed from team_slave_0
[   82.114505][ T7181] netlink: 'syz.2.418': attribute type 3 has an invalid length.
[   82.178617][ T7188] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[   82.262298][ T7195] netlink: 'syz.0.422': attribute type 13 has an invalid length.
[   82.298415][ T7195] gretap0: refused to change device tx_queue_len
[   82.300899][ T7195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   82.979098][ T7232] openvswitch: netlink: Key type 109 is out of range max 32
[   83.075763][  T789] IPVS: starting estimator thread 0...
[   83.160320][ T7244] IPVS: using max 44 ests per chain, 105600 per kthread
[   83.203922][ T7253] netlink: 'syz.2.442': attribute type 83 has an invalid length.
[   83.211814][ T7253] netlink: 'syz.2.442': attribute type 83 has an invalid length.
[   83.696665][ T7285] __nla_validate_parse: 17 callbacks suppressed
[   83.696678][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[   83.744821][ T7290] netlink: 'syz.0.454': attribute type 6 has an invalid length.
[   83.845572][ T7301] netlink: 'syz.2.457': attribute type 10 has an invalid length.
[   83.867208][ T7301] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   83.871240][ T7301] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.008533][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'.
[   84.307202][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'.
[   84.311896][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'.
[   84.390682][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.411274][ T7322] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   84.433604][ T7322] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.453032][ T7322] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.455832][ T7322] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.460838][ T7322] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   84.498198][ T7324] gretap2: entered promiscuous mode
[   84.504156][ T7324] bond2: (slave gretap2): making interface the new active one
[   84.508256][ T7324] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   84.515719][ T7324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.466'.
[   84.718607][ T7333] xt_TCPMSS: Only works on TCP SYN packets
[   84.834264][ T7340] tipc: MTU too low for tipc bearer
[   84.916359][ T7344] netlink: 256 bytes leftover after parsing attributes in process `syz.0.472'.
[   84.926016][ T7343] netlink: 256 bytes leftover after parsing attributes in process `syz.0.472'.
[   84.972512][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   84.976205][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'.
[   84.979878][ T7351] netlink: 'syz.0.474': attribute type 13 has an invalid length.
[   85.119237][ T7361] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   85.125388][ T7361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.477'.
[   85.200745][ T7364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.204729][ T7364] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   85.232383][ T7371] 8021q: VLANs not supported on ipvlan1
[   85.480389][ T7383] nbd2: detected capacity change from 0 to 63
[   85.484350][ T7390] block nbd2: NBD_DISCONNECT
[   85.489697][ T7390] block nbd2: Disconnected due to user request.
[   85.495152][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.499460][ T7390] block nbd2: shutting down sockets
[   85.501952][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read
[   85.505389][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.508582][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read
[   85.550455][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.554612][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   85.558073][  T127] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.562401][  T127] Buffer I/O error on dev nbd2, logical block 3, async page read
[   85.568963][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.580316][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read
[   85.583952][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.588348][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read
[   85.592200][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.595904][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read
[   85.599639][ T5827] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.603946][ T5827] Buffer I/O error on dev nbd2, logical block 3, async page read
[   85.607969][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.612393][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read
[   85.615935][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.619764][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read
[   85.627391][ T5827] ldm_validate_partition_table(): Disk read failed.
[   85.632031][ T5827] Dev nbd2: unable to read RDB block 0
[   85.636603][ T5827]  nbd2: unable to read partition table
[   85.646766][ T5827] ldm_validate_partition_table(): Disk read failed.
[   85.653785][ T5827] Dev nbd2: unable to read RDB block 0
[   85.659020][ T5827]  nbd2: unable to read partition table
[   85.946727][ T7416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.197346][ T7436] syzkaller0: entered promiscuous mode
[   86.199268][ T7436] syzkaller0: entered allmulticast mode
[   87.265730][ T7469] validate_nla: 3 callbacks suppressed
[   87.265742][ T7469] netlink: 'syz.0.513': attribute type 10 has an invalid length.
[   87.276183][ T7467] netlink: 'syz.1.512': attribute type 1 has an invalid length.
[   87.437786][ T7490] sctp: [Deprecated]: syz.2.518 (pid 7490) Use of int in max_burst socket option.
[   87.437786][ T7490] Use struct sctp_assoc_value instead
[   87.579010][ T7505] netlink: 'syz.1.525': attribute type 16 has an invalid length.
[   87.725197][ T7515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.728186][ T7515] syzkaller0: entered promiscuous mode
[   87.730067][ T7515] syzkaller0: entered allmulticast mode
[   87.742298][ T7515] tipc: Resetting bearer <eth:syzkaller0>
[   87.745596][ T7514] tipc: Resetting bearer <eth:syzkaller0>
[   87.753167][ T7514] tipc: Disabling bearer <eth:syzkaller0>
[   87.890523][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   88.525789][ T7553] netlink: 'syz.0.541': attribute type 5 has an invalid length.
[   88.529033][ T7553] netlink: 'syz.0.541': attribute type 6 has an invalid length.
[   89.975817][ T7617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.979755][ T7617] syzkaller0: entered promiscuous mode
[   89.982229][ T7617] syzkaller0: entered allmulticast mode
[   89.988648][ T7617] tipc: Resetting bearer <eth:syzkaller0>
[   90.053573][ T7621] tipc: Disabling bearer <eth:syzkaller0>
[   90.315718][ T7639] batadv1: entered allmulticast mode
[   90.323783][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv1
[   90.819294][ T7652] __nla_validate_parse: 22 callbacks suppressed
[   90.819311][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[   90.826998][ T7652] netlink: 312 bytes leftover after parsing attributes in process `syz.2.568'.
[   90.833275][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[   90.839611][ T7652] netlink: 248 bytes leftover after parsing attributes in process `syz.2.568'.
[   90.863517][ T7653] netlink: 248 bytes leftover after parsing attributes in process `syz.2.568'.
[   91.065799][ T7663] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   91.071163][ T7663] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   91.077692][ T7663] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   91.548486][ T7696] sctp: [Deprecated]: syz.0.577 (pid 7696) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.548486][ T7696] Use struct sctp_sack_info instead
[   91.839203][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[   91.931194][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[   91.937499][ T7718] netlink: 344 bytes leftover after parsing attributes in process `syz.2.581'.
[   92.228611][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[   93.174452][ T7768] raw_sendmsg: syz.0.597 forgot to set AF_INET. Fix it!
[   93.214164][ T7773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.598'.
[   93.327321][ T7773] bond0 (unregistering): left promiscuous mode
[   93.331397][ T7773] bond0 (unregistering): Released all slaves
[   93.620772][ T7795] netlink: 'syz.0.605': attribute type 322 has an invalid length.
[   93.714730][ T7803] netlink: 'syz.2.606': attribute type 21 has an invalid length.
[   93.813910][ T7805] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   93.818198][ T7805] netlink: 'syz.0.607': attribute type 4 has an invalid length.
[   94.025783][ T7805] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.029706][ T7805] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.034324][ T7805] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.038252][ T7805] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.089710][   T10] syz1: Port: 1 Link DOWN
[   94.553723][ T7838] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   94.632311][ T7844] netlink: 'syz.1.621': attribute type 4 has an invalid length.
[   94.692587][ T7856] syzkaller0: entered promiscuous mode
[   94.695140][ T7856] syzkaller0: entered allmulticast mode
[   94.829898][ T7866] bridge: RTM_NEWNEIGH with invalid state 0x31
[   95.176678][ T7873] netlink: 'syz.2.628': attribute type 2 has an invalid length.
[   95.365725][ T7878] netlink: 'syz.2.630': attribute type 3 has an invalid length.
[   95.368320][ T7878] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[   95.524422][ T7896] netlink: 'syz.2.635': attribute type 4 has an invalid length.
[   96.057572][ T7933] syz.0.647 uses old SIOCAX25GETINFO
[   96.344803][   T24] hid-generic 0005:0B57:0007.0001: collection stack underflow
[   96.347289][   T24] hid-generic 0005:0B57:0007.0001: item 0 0 0 12 parsing failed
[   96.350343][   T24] hid-generic 0005:0B57:0007.0001: probe with driver hid-generic failed with error -22
[   96.366702][ T7942] __nla_validate_parse: 17 callbacks suppressed
[   96.366713][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[   96.621571][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'.
[   96.626207][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[   97.802578][ T7973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.662'.
[   97.826152][ T7973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.662'.
[   98.015229][ T7984] netlink: 'syz.1.665': attribute type 29 has an invalid length.
[   98.028594][ T7984] netlink: 'syz.1.665': attribute type 29 has an invalid length.
[   98.453039][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'.
[   98.593599][ T8026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'.
[   98.879333][ T8042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.680'.
[   98.888303][ T8042] tun0: tun_chr_ioctl cmd 1074025677
[   98.891888][ T8042] tun0: linktype set to 773
[   99.005953][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'.
[   99.174308][ T8061] ip6gre1: entered allmulticast mode
[   99.284012][ T8065] netlink: 52 bytes leftover after parsing attributes in process `syz.1.689'.
[   99.289547][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.239888][ T8113] geneve2: entered promiscuous mode
[  100.386492][ T8129] Bluetooth: MGMT ver 1.23
[  100.526268][ T8140] veth1_to_bond: entered allmulticast mode
[  100.610294][ T8148] veth1_to_bond (unregistering): left allmulticast mode
[  100.927498][ T8163] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  101.006395][ T8167] validate_nla: 25 callbacks suppressed
[  101.006410][ T8167] netlink: 'syz.0.720': attribute type 5 has an invalid length.
[  101.025366][ T8167] ip6erspan1: entered promiscuous mode
[  101.277019][ T8188] openvswitch: netlink: Actions may not be safe on all matching packets
[  101.482020][ T8205] __nla_validate_parse: 9 callbacks suppressed
[  101.482030][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'.
[  101.498620][ T8205] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) !
[  101.506119][ T8205] netlink: 'syz.1.733': attribute type 10 has an invalid length.
[  101.513645][ T8205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  101.516960][ T8205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  102.564932][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  102.568802][ T8235] tipc: Enabled bearer <eth:vlan0>, priority 18
[  102.598577][ T8235] netlink: 'syz.1.743': attribute type 4 has an invalid length.
[  102.605550][ T8235] netlink: 'syz.1.743': attribute type 17 has an invalid length.
[  102.711254][ T8245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.746'.
[  102.783866][ T8247] netlink: 'syz.1.747': attribute type 3 has an invalid length.
[  102.787254][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  102.948024][ T8263] netlink: 'syz.0.752': attribute type 3 has an invalid length.
[  103.152165][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'.
[  103.235663][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  103.238750][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'.
[  103.241815][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  103.245014][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'.
[  103.248345][ T8279] netlink: 'syz.1.759': attribute type 6 has an invalid length.
[  103.367125][ T8286] netlink: 7 bytes leftover after parsing attributes in process `syz.0.762'.
[  103.621426][ T8304] netdevsim netdevsim0 : renamed from netdevsim0
[  103.682104][ T5880] tipc: Node number set to 2886997007
[  103.995809][ T8330] netlink: 'syz.0.774': attribute type 10 has an invalid length.
[  104.005380][ T8330] 8021q: adding VLAN 0 to HW filter on device team0
[  104.266717][ T8341] xfrm1: entered promiscuous mode
[  104.270251][ T8341] xfrm1: entered allmulticast mode
[  104.898072][ T8360] gtp0: entered promiscuous mode
[  104.910275][ T8360] gtp0: entered allmulticast mode
[  105.111093][ T8370] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[  105.115535][ T8370] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  105.124192][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.142548][ T8374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.145326][ T8372] syzkaller0: entered promiscuous mode
[  105.147132][ T8372] syzkaller0: entered allmulticast mode
[  105.170865][ T8372] tipc: Resetting bearer <eth:syzkaller0>
[  105.181178][ T8372] tipc: Disabling bearer <eth:syzkaller0>
[  105.662475][ T8413] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  105.668206][ T8413] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  106.084213][ T8431] xt_CT: No such helper "pptp"
[  106.131595][ T8432] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.133531][   T33] audit: type=1804 audit(1752245743.075:2): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.807" name="memory.events" dev="tmpfs" ino=1385 res=1 errno=0
[  106.134594][ T8432] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.134623][ T8432] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.134655][ T8432] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.145011][   T33] audit: type=1800 audit(1752245743.075:3): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.807" name="memory.events" dev="tmpfs" ino=1385 res=0 errno=0
[  106.288402][ T8443] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  107.674029][ T8472] __nla_validate_parse: 5 callbacks suppressed
[  107.674046][ T8472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.817'.
[  108.836726][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  109.155035][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'.
[  109.159179][ T8528] netlink: 'syz.2.835': attribute type 7 has an invalid length.
[  109.162656][ T8528] netlink: 'syz.2.835': attribute type 8 has an invalid length.
[  109.165867][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'.
[  109.277636][ T8534] netlink: 'syz.2.837': attribute type 1 has an invalid length.
[  109.297955][ T8534] bond4: (slave bridge3): making interface the new active one
[  109.301587][ T8534] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  109.357583][ T8540] netlink: 'syz.2.838': attribute type 5 has an invalid length.
[  109.629201][ T8554] Illegal XDP return value 4294967282 on prog  (id 323) dev N/A, expect packet loss!
[  109.636975][ T8556] netlink: 'syz.1.844': attribute type 7 has an invalid length.
[  110.513144][ T8570] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.524987][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'.
[  110.708223][ T8574] Cannot find del_set index 286 as target
[  110.711605][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'.
[  110.725738][ T8578] Cannot find del_set index 286 as target
[  110.739501][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[  110.988677][ T8597] xt_l2tp: missing protocol rule (udp|l2tpip)
[  111.048628][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'.
[  111.120769][ T8604] netlink: 'syz.1.861': attribute type 10 has an invalid length.
[  111.125802][ T8604] netlink: 256 bytes leftover after parsing attributes in process `syz.1.861'.
[  111.641001][ T8606] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  111.651372][ T8604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.667096][ T8606] x9: left allmulticast mode
[  111.669292][ T8606] x9: left promiscuous mode
[  111.672667][ T8606] bridge0: port 1(1x9) entered disabled state
[  111.680050][ T8606] bridge_slave_1: left allmulticast mode
[  111.682807][ T8606] bridge_slave_1: left promiscuous mode
[  111.686130][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.698756][ T8606] bond0: (slave bond_slave_0): Releasing backup interface
[  111.705531][ T8606] bond_slave_0: left promiscuous mode
[  111.716361][ T8606] bond0: (slave bond_slave_1): Releasing backup interface
[  111.724919][ T8606] bond_slave_1: left promiscuous mode
[  111.736277][ T8606] bond0: (slave wlan1): Releasing backup interface
[  111.740633][ T8606] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  111.745277][ T8606] bond1: (slave gretap1): Releasing active interface
[  111.748316][ T8606] gretap1: left allmulticast mode
[  111.758442][ T8606] bond2: (slave gretap2): Releasing active interface
[  111.768776][ T8606] bond4: (slave bridge3): Releasing active interface
[  111.785470][ T8606] netlink: 'syz.2.862': attribute type 10 has an invalid length.
[  111.793335][ T8606] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  111.797260][ T8614] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  111.797428][ T8606] bond0: (slave wlan1): refused to change device type
[  111.800656][ T8614] netlink: 168 bytes leftover after parsing attributes in process `syz.1.864'.
[  111.807048][ T8614] NCSI netlink: No device for ifindex 0
[  111.811618][ T8614] pim6reg1: entered promiscuous mode
[  111.813918][ T8614] pim6reg1: entered allmulticast mode
[  111.818365][ T8606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.822702][ T8606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.043804][ T8620] xt_CT: No such helper "pptp"
[  112.729252][ T8649] __nla_validate_parse: 1 callbacks suppressed
[  112.729262][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'.
[  112.838771][ T8656] sctp: [Deprecated]: syz.2.880 (pid 8656) Use of int in maxseg socket option.
[  112.838771][ T8656] Use struct sctp_assoc_value instead
[  112.874017][ T8658] netlink: 'syz.2.881': attribute type 32 has an invalid length.
[  112.876962][ T8658] netlink: 60 bytes leftover after parsing attributes in process `syz.2.881'.
[  112.927631][ T8663] netlink: 'syz.2.881': attribute type 27 has an invalid length.
[  113.303273][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'.
[  113.438335][ T8685] netlink: 830 bytes leftover after parsing attributes in process `syz.1.887'.
[  114.306706][ T8699] netlink: 81 bytes leftover after parsing attributes in process `syz.1.891'.
[  114.368113][ T8701] pim6reg1: entered allmulticast mode
[  114.803612][ T8712] netlink: 'syz.1.896': attribute type 29 has an invalid length.
[  114.946872][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'.
[  114.950748][ T8708] gre0: entered promiscuous mode
[  114.952602][ T8708] gre0: entered allmulticast mode
[  114.955660][ T8708] netlink: 'syz.0.895': attribute type 2 has an invalid length.
[  114.958690][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'.
[  115.120017][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'.
[  115.145367][ T8726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.148216][ T8726] IPv6: NLM_F_CREATE should be set when creating new route
[  115.150973][ T8726] IPv6: NLM_F_CREATE should be set when creating new route
[  115.153808][ T8726] IPv6: NLM_F_CREATE should be set when creating new route
[  115.197737][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'.
[  115.221199][ T8731] pim6reg: entered allmulticast mode
[  115.228499][ T8731] pim6reg: left allmulticast mode
[  115.281112][ T8733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  115.994425][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.914'.
[  116.144991][ T8788] netlink: 'syz.1.921': attribute type 5 has an invalid length.
[  116.147885][ T8788] netlink: 'syz.1.921': attribute type 5 has an invalid length.
[  116.520537][   T33] audit: type=1800 audit(1752245753.455:4): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.929" name="memory.events" dev="tmpfs" ino=1548 res=0 errno=0
[  116.664853][ T8841] netlink: 'syz.2.939': attribute type 30 has an invalid length.
[  116.747438][ T8846] ip6erspan0: entered allmulticast mode
[  116.889574][ T8863] tipc: Started in network mode
[  116.898613][ T8863] tipc: Node identity da1e37c0c449, cluster identity 4711
[  116.905326][ T8863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.914590][ T8863] syzkaller0: entered promiscuous mode
[  116.916962][ T8863] syzkaller0: entered allmulticast mode
[  116.941351][ T8863] tipc: Resetting bearer <eth:syzkaller0>
[  116.945678][ T8862] tipc: Resetting bearer <eth:syzkaller0>
[  116.967865][ T8862] tipc: Disabling bearer <eth:syzkaller0>
[  117.236910][ T8892] vxcan3: entered allmulticast mode
[  117.281715][ T8893] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  117.785025][ T8919] xt_policy: neither incoming nor outgoing policy selected
[  117.924449][ T8931] __nla_validate_parse: 6 callbacks suppressed
[  117.924463][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'.
[  118.076971][ T8943] netlink: 'syz.1.967': attribute type 2 has an invalid length.
[  118.084463][ T8943] netlink: 119 bytes leftover after parsing attributes in process `syz.1.967'.
[  118.089906][ T8944] netlink: 'syz.1.967': attribute type 2 has an invalid length.
[  118.093873][ T8944] netlink: 119 bytes leftover after parsing attributes in process `syz.1.967'.
[  118.271526][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[  118.278952][ T8959] netlink: 'syz.0.969': attribute type 13 has an invalid length.
[  118.283674][ T8959] netlink: 'syz.0.969': attribute type 17 has an invalid length.
[  118.543070][ T8969] netlink: 'syz.1.971': attribute type 4 has an invalid length.
[  118.575769][ T8974] : entered promiscuous mode
[  118.597900][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'.
[  118.605236][ T8974] trusted_key: syz.0.972 sent an empty control message without MSG_MORE.
[  118.753906][ T8988] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.975'.
[  118.787663][ T8990] netlink: 404 bytes leftover after parsing attributes in process `syz.0.976'.
[  119.215016][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'.
[  119.231583][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'.
[  119.288772][ T9030] veth0_vlan: left promiscuous mode
[  119.296953][ T9030] veth0_vlan: entered promiscuous mode
[  119.304333][ T9030] team0: Device veth0_vlan failed to register rx_handler
[  119.504050][ T9042] x_tables: duplicate underflow at hook 1
[  119.668647][ T9059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.762172][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'.
[  119.924521][ T9086] hsr_slave_0: left promiscuous mode
[  119.927078][ T9086] hsr_slave_1: left promiscuous mode
[  120.415709][ T9122] validate_nla: 3 callbacks suppressed
[  120.415719][ T9122] netlink: 'syz.1.1010': attribute type 2 has an invalid length.
[  121.443087][ T9164] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  121.551208][ T9173] netlink: 'syz.0.1026': attribute type 10 has an invalid length.
[  121.655192][  T789] hid-generic 0005:0B57:0007.0002: collection stack underflow
[  121.658641][  T789] hid-generic 0005:0B57:0007.0002: item 0 0 0 12 parsing failed
[  121.666869][  T789] hid-generic 0005:0B57:0007.0002: probe with driver hid-generic failed with error -22
[  121.918762][ T9213] netlink: 'syz.1.1036': attribute type 7 has an invalid length.
[  121.923801][ T9213] netlink: 'syz.1.1036': attribute type 8 has an invalid length.
[  122.332400][ T9234] netlink: 'syz.0.1041': attribute type 58 has an invalid length.
[  122.442968][ T9250] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  122.525275][ T9255] lo speed is unknown, defaulting to 1000
[  122.527934][ T9255] lo speed is unknown, defaulting to 1000
[  122.593222][ T9255] lo speed is unknown, defaulting to 1000
[  122.603924][ T9255] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.615152][ T9255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  122.675482][ T9255] lo speed is unknown, defaulting to 1000
[  122.679891][ T9255] lo speed is unknown, defaulting to 1000
[  122.691107][ T9255] lo speed is unknown, defaulting to 1000
[  122.695453][ T9255] lo speed is unknown, defaulting to 1000
[  123.171677][ T9308] netlink: 'syz.1.1069': attribute type 2 has an invalid length.
[  123.174597][ T9308] netlink: 'syz.1.1069': attribute type 2 has an invalid length.
[  123.269675][ T9318] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  123.413651][ T9322] __nla_validate_parse: 83 callbacks suppressed
[  123.413670][ T9322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1071'.
[  123.432278][ T9322] IPVS: length: 8 != 446622349272
[  123.636152][ T9324] lo speed is unknown, defaulting to 1000
[  123.815615][ T9339] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1076'.
[  123.968995][ T9346] syzkaller1: entered promiscuous mode
[  123.972292][ T9346] syzkaller1: entered allmulticast mode
[  124.140390][ T9351] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  124.157467][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'.
[  124.193544][ T9355] pim6reg1: entered promiscuous mode
[  124.199766][ T9355] pim6reg1: entered allmulticast mode
[  124.227661][   T10] IPVS: starting estimator thread 0...
[  124.320441][ T9358] IPVS: using max 47 ests per chain, 112800 per kthread
[  124.448220][ T9360] lo speed is unknown, defaulting to 1000
[  124.589349][ T9373] veth0_to_bridge: entered promiscuous mode
[  124.597901][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'.
[  124.604637][ T9372] veth0_to_bridge: left promiscuous mode
[  124.674874][ T9392] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  124.677731][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.682263][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.686500][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.689855][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.693930][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.697056][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  124.790070][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.808433][ T9401] tipc: New replicast peer: 0.0.0.0
[  124.813089][ T9401] tipc: Enabled bearer <udp:syz2>, priority 1
[  124.815261][ T9402] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  124.851991][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.898024][ T9394] lo speed is unknown, defaulting to 1000
[  124.922928][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.365523][ T9445] --map-set only usable from mangle table
[  125.495868][ T9451] validate_nla: 87 callbacks suppressed
[  125.495878][ T9451] netlink: 'syz.1.1116': attribute type 7 has an invalid length.
[  125.504115][ T9451] netlink: 'syz.1.1116': attribute type 8 has an invalid length.
[  125.821122][   T10] tipc: Node number set to 509032384
[  125.838748][ T9484] netlink: 'syz.0.1127': attribute type 1 has an invalid length.
[  125.877855][ T9485] veth9: entered promiscuous mode
[  126.481673][ T9527] lo speed is unknown, defaulting to 1000
[  126.976327][ T9571] lo speed is unknown, defaulting to 1000
[  127.174644][ T9585] netlink: 'syz.1.1144': attribute type 18 has an invalid length.
[  127.223881][ T9587] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  127.361261][ T9602] netlink: 'syz.2.1149': attribute type 5 has an invalid length.
[  127.390398][ T9602] netlink: 'syz.2.1149': attribute type 7 has an invalid length.
[  127.412274][ T9602] : entered promiscuous mode
[  127.502966][ T9609] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.505597][ T9609] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.508134][ T9609] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.511050][ T9609] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.518942][ T9609] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.525525][ T9609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.575637][ T9609] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.579544][ T9609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.696689][ T9609] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.710812][ T9609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.723030][ T9596] lo speed is unknown, defaulting to 1000
[  127.873251][ T9609] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.876314][ T9609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.988710][ T9609] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.992018][ T9609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.015280][ T9609] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.019060][ T9609] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.030772][ T9609] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.034148][ T9609] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.046561][ T9609] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.049982][ T9609] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.433537][ T9631] pim6reg: entered allmulticast mode
[  128.463797][ T9635] netlink: 'syz.0.1157': attribute type 1 has an invalid length.
[  128.466822][ T9635] netlink: 'syz.0.1157': attribute type 10 has an invalid length.
[  128.469724][ T9635] netlink: 'syz.0.1157': attribute type 4 has an invalid length.
[  128.479670][ T9635] __nla_validate_parse: 98 callbacks suppressed
[  128.479681][ T9635] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1157'.
[  128.672899][ T9638] lo speed is unknown, defaulting to 1000
[  128.829264][ T9664] veth11: entered promiscuous mode
[  128.954582][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'.
[  128.958866][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'.
[  129.166431][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1169'.
[  129.248553][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'.
[  129.248853][ T9628] pim6reg: left allmulticast mode
[  129.255304][ T9682] nbd: couldn't find a device at index 65546
[  129.502647][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'.
[  129.505721][ T9687] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1172'.
[  129.509109][ T9687] tipc: Invalid UDP bearer configuration
[  129.509136][ T9687] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  129.515627][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1172'.
[  129.518976][ T9687] netlink: 'syz.1.1172': attribute type 7 has an invalid length.
[  129.522725][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'.
[  129.527377][ T9690] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  129.541415][ T9690] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  129.577044][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  129.848960][ T9718] xt_l2tp: wrong L2TP version: 0
[  129.924879][ T9716] syz.2.1181: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  129.932515][ T9716] CPU: 1 UID: 0 PID: 9716 Comm: syz.2.1181 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  129.932528][ T9716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.932533][ T9716] Call Trace:
[  129.932536][ T9716]  <TASK>
[  129.932540][ T9716]  dump_stack_lvl+0x189/0x250
[  129.932554][ T9716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.932564][ T9716]  ? __pfx__printk+0x10/0x10
[  129.932575][ T9716]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  129.932586][ T9716]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  129.932597][ T9716]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  129.932608][ T9716]  warn_alloc+0x214/0x310
[  129.932621][ T9716]  ? __pfx_warn_alloc+0x10/0x10
[  129.932635][ T9716]  ? __get_vm_area_node+0x28f/0x300
[  129.932645][ T9716]  ? htable_create+0xfc/0x7a0
[  129.932657][ T9716]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  129.932679][ T9716]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  129.932691][ T9716]  ? rcu_is_watching+0x15/0xb0
[  129.932701][ T9716]  ? htable_create+0xfc/0x7a0
[  129.932711][ T9716]  ? htable_create+0xfc/0x7a0
[  129.932720][ T9716]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  129.932730][ T9716]  ? htable_create+0xfc/0x7a0
[  129.932740][ T9716]  ? hashlimit_pernet+0x23/0x240
[  129.932753][ T9716]  htable_create+0xfc/0x7a0
[  129.932767][ T9716]  hashlimit_mt_check_common+0x719/0xa10
[  129.932782][ T9716]  hashlimit_mt_check_v1+0x221/0x360
[  129.932794][ T9716]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  129.932807][ T9716]  ? xt_find_match+0x1f7/0x250
[  129.932820][ T9716]  xt_check_match+0x3d1/0xab0
[  129.932829][ T9716]  ? __pfx___mutex_lock+0x10/0x10
[  129.932840][ T9716]  ? __pfx_xt_check_match+0x10/0x10
[  129.932851][ T9716]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  129.932864][ T9716]  ? xt_find_match+0x1f7/0x250
[  129.932877][ T9716]  translate_table+0x150b/0x2000
[  129.932895][ T9716]  ? __pfx_translate_table+0x10/0x10
[  129.932905][ T9716]  ? __might_fault+0xb0/0x130
[  129.932921][ T9716]  ? _copy_from_user+0x94/0xb0
[  129.932933][ T9716]  do_ipt_set_ctl+0x967/0xcd0
[  129.932945][ T9716]  ? rcu_is_watching+0x15/0xb0
[  129.932953][ T9716]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  129.932970][ T9716]  ? __pfx___mutex_lock+0x10/0x10
[  129.932983][ T9716]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  129.932990][ T9716]  ? aa_sk_perm+0x81e/0x950
[  129.933003][ T9716]  ? __pfx_aa_sk_perm+0x10/0x10
[  129.933015][ T9716]  nf_setsockopt+0x26f/0x290
[  129.933026][ T9716]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  129.933036][ T9716]  do_sock_setsockopt+0x25a/0x3e0
[  129.933047][ T9716]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  129.933057][ T9716]  ? __fget_files+0x2a/0x420
[  129.933071][ T9716]  __x64_sys_setsockopt+0x18b/0x220
[  129.933082][ T9716]  do_syscall_64+0xfa/0x3b0
[  129.933090][ T9716]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.933100][ T9716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.933107][ T9716]  ? exc_page_fault+0x9f/0xf0
[  129.933119][ T9716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.933126][ T9716] RIP: 0033:0x7fdf6898e929
[  129.933134][ T9716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.933140][ T9716] RSP: 002b:00007fdf69765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  129.933149][ T9716] RAX: ffffffffffffffda RBX: 00007fdf68bb6080 RCX: 00007fdf6898e929
[  129.933154][ T9716] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000a
[  129.933159][ T9716] RBP: 00007fdf68a10b39 R08: 0000000000000518 R09: 0000000000000000
[  129.933164][ T9716] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000
[  129.933168][ T9716] R13: 0000000000000000 R14: 00007fdf68bb6080 R15: 00007ffff88e5278
[  129.933180][ T9716]  </TASK>
[  129.933182][ T9716] Mem-Info:
[  130.069257][ T9716] active_anon:12847 inactive_anon:0 isolated_anon:0
[  130.069257][ T9716]  active_file:1227 inactive_file:38233 isolated_file:0
[  130.069257][ T9716]  unevictable:1768 dirty:112 writeback:0
[  130.069257][ T9716]  slab_reclaimable:9587 slab_unreclaimable:122467
[  130.069257][ T9716]  mapped:18375 shmem:2456 pagetables:1006
[  130.069257][ T9716]  sec_pagetables:0 bounce:0
[  130.069257][ T9716]  kernel_misc_reclaimable:0
[  130.069257][ T9716]  free:215921 free_pcp:21372 free_cma:0
[  130.085623][ T9716] Node 0 active_anon:42256kB inactive_anon:0kB active_file:3652kB inactive_file:30788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35516kB dirty:412kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5504kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  130.096925][ T9716] Node 1 active_anon:9200kB inactive_anon:0kB active_file:1256kB inactive_file:122144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37984kB dirty:36kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6592kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  130.112668][ T9716] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  130.124597][ T9716] lowmem_reserve[]: 0 812 812 812 812
[  130.150314][ T9716] Node 0 DMA32 free:88628kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42188kB inactive_anon:0kB active_file:3652kB inactive_file:30788kB unevictable:3536kB writepending:412kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:51920kB local_pcp:36240kB free_cma:0kB
[  130.166233][ T9716] lowmem_reserve[]: 0 0 0 0 0
[  130.168695][ T9716] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  130.184508][ T9716] lowmem_reserve[]: 0 0 854 854 854
[  130.187093][ T9716] Node 1 Normal free:301156kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9268kB inactive_anon:0kB active_file:1256kB inactive_file:122144kB unevictable:3536kB writepending:36kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34444kB local_pcp:20016kB free_cma:0kB
[  130.199081][ T9716] lowmem_reserve[]: 0 0 0 0 0
[  130.201269][ T9716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  130.205596][ T9716] Node 0 DMA32: 1*4kB (M) 44*8kB (UME) 3*16kB (UM) 301*32kB (UE) 106*64kB (U) 33*128kB (U) 12*256kB (UME) 6*512kB (U) 4*1024kB (UE) 2*2048kB (UM) 13*4096kB (M) = 88628kB
[  130.211900][ T9716] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  130.220287][ T9716] Node 1 Normal: 1*4kB (E) 102*8kB (ME) 121*16kB (UME) 101*32kB (UME) 106*64kB (UM) 67*128kB (UME) 41*256kB (UM) 10*512kB (UME) 4*1024kB (UE) 5*2048kB (U) 61*4096kB (UM) = 301156kB
[  130.230394][ T9716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  130.234077][ T9716] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  130.238366][ T9716] 41916 total pagecache pages
[  130.242439][ T9716] 0 pages in swap cache
[  130.244467][ T9716] Free swap  = 124996kB
[  130.246342][ T9716] Total swap = 124996kB
[  130.248100][ T9716] 786301 pages RAM
[  130.249711][ T9716] 0 pages HighMem/MovableOnly
[  130.251851][ T9716] 241085 pages reserved
[  130.253721][ T9716] 0 pages cma reserved
[  130.469944][ T9759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  130.557607][ T9765] validate_nla: 3 callbacks suppressed
[  130.557621][ T9765] netlink: 'syz.1.1192': attribute type 8 has an invalid length.
[  130.799370][ T9770] netlink: 'syz.0.1194': attribute type 1 has an invalid length.
[  130.835336][ T9770] bond5: (slave bridge5): making interface the new active one
[  130.839112][ T9770] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  130.911806][ T9778] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  130.931696][ T9778] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  131.004497][ T9786] "syz.1.1197" (9786) uses obsolete ecb(arc4) skcipher
[  131.301610][ T9812] netlink: 'syz.1.1203': attribute type 1 has an invalid length.
[  131.304628][ T9812] netlink: 'syz.1.1203': attribute type 1 has an invalid length.
[  131.502902][ T9825] x_tables: duplicate underflow at hook 1
[  131.738063][ T9822] lo speed is unknown, defaulting to 1000
[  131.840388][ T9842] netlink: 'syz.0.1211': attribute type 1 has an invalid length.
[  131.928488][ T9823] lo speed is unknown, defaulting to 1000
[  132.090977][ T9817] mpoa:mpoad_close: (<unknown>) going down
[  132.186611][ T9850] netlink: 'syz.1.1213': attribute type 3 has an invalid length.
[  132.532969][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.535797][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.862204][ T9867] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  133.021497][ T9873] IPVS: Scheduler module ip_vs_sip not found
[  133.025910][ T9873] IPVS: length: 8 != 446622349272
[  133.388029][ T9888] netlink: 'syz.0.1224': attribute type 1 has an invalid length.
[  133.438502][ T9888] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 20000 - 0
[  133.443335][ T9888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  133.449007][ T9888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  133.452902][ T9888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  133.458049][ T9888] bond6: (slave geneve2): making interface the new active one
[  133.461921][ T9888] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  134.656419][ T9928] netlink: 'syz.0.1234': attribute type 1 has an invalid length.
[  134.659157][ T9928] __nla_validate_parse: 14 callbacks suppressed
[  134.659164][ T9928] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1234'.
[  134.851174][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  134.855088][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  134.874923][ T9944] No such timeout policy "syz0"
[  134.963416][ T9951] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  135.038627][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  135.045350][ T9958] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1248'.
[  135.095070][ T9960] vlan0: entered allmulticast mode
[  135.096848][ T9960] dummy0: entered allmulticast mode
[  135.343752][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  135.373420][ T9992] netlink: 'syz.0.1256': attribute type 3 has an invalid length.
[  135.379560][ T9992] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  135.385103][ T9992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1256'.
[  135.389093][ T9992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1256'.
[  135.396387][ T9992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1256'.
[  135.400486][ T9992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1256'.
[  135.600773][T10014] validate_nla: 64 callbacks suppressed
[  135.600784][T10014] netlink: 'syz.2.1264': attribute type 10 has an invalid length.
[  135.627826][T10018] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  135.636222][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.675504][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.679215][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.319683][T10030] sctp: [Deprecated]: syz.0.1267 (pid 10030) Use of int in max_burst socket option deprecated.
[  136.319683][T10030] Use struct sctp_assoc_value instead
[  137.029257][T10076] sctp: [Deprecated]: syz.1.1286 (pid 10076) Use of int in maxseg socket option.
[  137.029257][T10076] Use struct sctp_assoc_value instead
[  137.127891][T10080] openvswitch: netlink: Missing valid actions attribute.
[  137.130387][T10080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.244094][T10090] batadv_slave_0: entered promiscuous mode
[  137.308885][T10089] batadv_slave_0: left promiscuous mode
[  137.341671][T10093] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  137.363651][T10093] xt_CT: No such helper "pptp"
[  137.368691][T10093] --map-set only usable from mangle table
[  138.015188][T10120] netlink: 'syz.1.1299': attribute type 1 has an invalid length.
[  138.188898][T10133] tipc: Can't bind to reserved service type 0
[  138.238384][T10135] netlink: 'syz.2.1305': attribute type 1 has an invalid length.
[  138.246599][T10135] netlink: 'syz.2.1305': attribute type 2 has an invalid length.
[  138.446575][T10152] 0: renamed from hsr_slave_1
[  138.449863][T10152] 0: entered allmulticast mode
[  138.453508][T10152] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  138.460095][T10152] 1: renamed from c0 (while UP)
[  138.463523][T10152] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  138.468901][T10152] 0: renamed from c1 (while UP)
[  138.473551][T10152] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  138.479073][T10152] 1: renamed from c0 (while UP)
[  138.483931][T10152] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  138.491428][T10152] 0: renamed from c1 (while UP)
[  138.494245][T10152] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  138.503693][T10152] 1: renamed from c0 (while UP)
[  138.508191][T10152] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  138.522615][T10152] 0: renamed from c1 (while UP)
[  138.535184][T10152] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  138.544450][T10152] 1: renamed from c0 (while UP)
[  138.548795][T10152] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  138.561154][T10152] 0: renamed from c1 (while UP)
[  138.567962][T10152] 1: renamed from c0 (while UP)
[  138.573963][T10152] 0: renamed from c1 (while UP)
[  138.582430][T10152] 1: renamed from c0 (while UP)
[  138.597355][T10152] 0: renamed from c1 (while UP)
[  138.602427][T10152] 1: renamed from c0 (while UP)
[  138.606915][T10152] 0: renamed from c1 (while UP)
[  138.617524][T10152] 1: renamed from c0 (while UP)
[  138.622711][T10152] 0: renamed from c1 (while UP)
[  138.627934][T10152] 1: renamed from c0 (while UP)
[  138.634114][T10152] 0: renamed from c1 (while UP)
[  138.640961][T10152] 1: renamed from c0 (while UP)
[  138.643432][T10156] xt_CT: No such helper "syz0"
[  138.655255][T10152] 0: renamed from c1 (while UP)
[  138.666179][T10152] 1: renamed from c0 (while UP)
[  138.694183][T10152] 0: renamed from c1 (while UP)
[  138.698503][T10152] 1: renamed from c0 (while UP)
[  138.703004][T10152] 0: renamed from c1 (while UP)
[  138.707707][T10152] 1: renamed from c0 (while UP)
[  138.714840][T10152] 0: renamed from c1 (while UP)
[  138.719167][T10152] 1: renamed from c0 (while UP)
[  138.723639][T10152] 0: renamed from c1 (while UP)
[  138.728096][T10152] 1: renamed from c0 (while UP)
[  138.742484][T10152] 0: renamed from c1 (while UP)
[  138.751826][T10152] 1: renamed from c0 (while UP)
[  138.758725][T10152] 0: renamed from c1 (while UP)
[  138.845819][T10175] x_tables: duplicate underflow at hook 1
[  138.878586][T10177] ieee802154 phy0 wpan0: encryption failed: -22
[  138.914843][T10180] netlink: 'syz.2.1318': attribute type 13 has an invalid length.
[  139.057968][T10184] netlink: 'syz.2.1318': attribute type 1 has an invalid length.
[  139.097283][T10180] gretap0: refused to change device tx_queue_len
[  139.247112][T10198] netlink: 'syz.2.1324': attribute type 15 has an invalid length.
[  139.401872][T10215] xt_time: invalid argument - start or stop time greater than 23:59:59
[  139.414877][T10215] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.776270][T10253] netlink: 'syz.1.1341': attribute type 11 has an invalid length.
[  139.780633][T10253] netlink: 'syz.1.1341': attribute type 11 has an invalid length.
[  139.786619][T10253] __nla_validate_parse: 145 callbacks suppressed
[  139.786631][T10253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1341'.
[  139.795169][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'.
[  139.922744][T10257] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.926959][T10257] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.931153][T10257] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.934757][T10257] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.956373][   T24] lo speed is unknown, defaulting to 1000
[  139.959246][   T24] syz2: Port: 1 Link DOWN
[  140.036904][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'.
[  140.053347][T10267] C: renamed from team_slave_0
[  140.064053][T10267] netlink: 'syz.1.1347': attribute type 2 has an invalid length.
[  140.067986][T10267] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1347'.
[  140.089529][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1348'.
[  140.115546][T10274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1349'.
[  140.409892][T10271] lo speed is unknown, defaulting to 1000
[  140.744472][T10301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1353'.
[  140.812926][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'.
[  140.819345][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1357'.
[  140.825696][T10306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1357'.
[  140.864971][T10306] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  141.291481][T10347] netlink: 'syz.2.1369': attribute type 16 has an invalid length.
[  141.464779][T10356] syzkaller0: entered allmulticast mode
[  141.624303][T10362] Bluetooth: MGMT ver 1.23
[  141.993910][T10392] ieee802154 phy0 wpan0: encryption failed: -90
[  142.265309][T10406] netlink: 'syz.1.1391': attribute type 5 has an invalid length.
[  142.593825][T10443] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.865698][ T5880] hid-generic 0005:0458:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  142.933193][T10473] net_ratelimit: 31 callbacks suppressed
[  142.933203][T10473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.333835][T10490] x_tables: duplicate underflow at hook 2
[  143.465075][T10500] ip6t_rpfilter: unknown options
[  143.539184][T10513] sctp: [Deprecated]: syz.1.1419 (pid 10513) Use of int in max_burst socket option deprecated.
[  143.539184][T10513] Use struct sctp_assoc_value instead
[  143.753380][T10538] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  143.763517][T10538] macsec1: entered promiscuous mode
[  143.766489][T10538] macsec1: entered allmulticast mode
[  143.768582][T10538] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  143.825843][T10546] xt_cgroup: path and classid specified
[  144.573268][T10573] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.804446][T10595] __nla_validate_parse: 12 callbacks suppressed
[  144.804456][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'.
[  144.811856][T10594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.817166][ T5831] Bluetooth: hci2: link tx timeout
[  144.819343][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.823794][ T5831] Bluetooth: hci2: link tx timeout
[  144.827025][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.836222][T10594] tipc: Resetting bearer <eth:syzkaller0>
[  144.840297][ T5831] Bluetooth: hci2: link tx timeout
[  144.842671][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.845953][ T5831] Bluetooth: hci2: link tx timeout
[  144.848172][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.852463][ T5831] Bluetooth: hci2: link tx timeout
[  144.854905][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.859197][T10593] tipc: Disabling bearer <eth:syzkaller0>
[  144.915428][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'.
[  144.940591][T10600] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1448'.
[  145.315619][T10633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1456'.
[  145.628296][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1462'.
[  145.629640][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1463'.
[  145.647985][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'.
[  145.652453][T10654] openvswitch: netlink: Missing key (keys=40, expected=80)
[  145.806330][T10666] netlink: 'syz.1.1467': attribute type 5 has an invalid length.
[  145.809569][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'.
[  145.975900][T10679] openvswitch: netlink: IPv4 tun info is not correct
[  145.978878][T10680] openvswitch: netlink: IPv4 tun info is not correct
[  146.067494][T10668] lo speed is unknown, defaulting to 1000
[  146.145695][T10690] netlink: 'syz.0.1473': attribute type 10 has an invalid length.
[  146.498809][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1481'.
[  146.516012][T10718] netlink: 'syz.0.1482': attribute type 25 has an invalid length.
[  146.519721][T10720] openvswitch: netlink: Key type 16144 is out of range max 32
[  146.636278][T10727] netlink: 'syz.0.1483': attribute type 1 has an invalid length.
[  146.641042][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1483'.
[  146.684412][T10729] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  146.727594][T10729] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 20000 - 0
[  146.731874][T10729] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.735981][T10729] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.739665][T10729] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.850756][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  147.642136][T10753] netlink: 'syz.2.1489': attribute type 1 has an invalid length.
[  147.660122][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.670568][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.717827][T10758] netlink: 'syz.0.1492': attribute type 1 has an invalid length.
[  147.753890][T10758] 8021q: adding VLAN 0 to HW filter on device bond8
[  147.765223][T10758] gretap1: entered promiscuous mode
[  147.770849][T10758] bond8: (slave gretap1): making interface the new active one
[  147.774583][T10758] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  147.787470][T10758] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  147.852245][T10765] netlink: 'syz.2.1495': attribute type 20 has an invalid length.
[  148.148810][T10796] _Z`Ԁ@: entered promiscuous mode
[  148.383375][T10821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.767705][T10849] netlink: 'syz.1.1520': attribute type 10 has an invalid length.
[  149.489624][T10896] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  149.537109][T10900] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0
[  149.542099][T10900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.546174][T10900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.550015][T10900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.556565][T10900] geneve3: entered promiscuous mode
[  149.664830][T10904] lo speed is unknown, defaulting to 1000
[  149.902332][T10920] __nla_validate_parse: 16 callbacks suppressed
[  149.902349][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1540'.
[  150.030091][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1541'.
[  150.594720][T10948] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1548'.
[  150.655900][T10953] netlink: 'syz.2.1550': attribute type 1 has an invalid length.
[  150.790305][T10951] lo speed is unknown, defaulting to 1000
[  150.799807][T10962] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  150.862085][T10965] netlink: 'syz.1.1554': attribute type 5 has an invalid length.
[  151.568520][T10969] lo speed is unknown, defaulting to 1000
[  151.759293][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'.
[  151.849734][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'.
[  152.489480][T10969] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1555'.
[  152.592864][T10991] netlink: 'syz.1.1560': attribute type 4 has an invalid length.
[  152.596901][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'.
[  152.720311][T11007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.723465][T11005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.727413][T11007] syzkaller0: entered promiscuous mode
[  152.729825][T11007] syzkaller0: entered allmulticast mode
[  152.818686][T11007] tipc: Resetting bearer <eth:syzkaller0>
[  152.829415][T11007] tipc: Disabling bearer <eth:syzkaller0>
[  152.859387][T11022] syzkaller1: entered promiscuous mode
[  152.861407][T11022] syzkaller1: entered allmulticast mode
[  152.864463][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'.
[  152.896690][T11029] netlink: 'syz.1.1571': attribute type 1 has an invalid length.
[  152.974896][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'.
[  152.977975][T11034] netlink: 'syz.0.1573': attribute type 1 has an invalid length.
[  153.019962][T11040] netlink: 'syz.1.1575': attribute type 11 has an invalid length.
[  153.036149][T11034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'.
[  153.040135][T11034] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  153.701517][T11056] netlink: 'syz.2.1580': attribute type 2 has an invalid length.
[  153.839282][T11067] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  153.875241][T11067] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  154.165359][T11096] netlink: 'syz.1.1592': attribute type 12 has an invalid length.
[  154.189873][T11098] netlink: 'syz.0.1594': attribute type 2 has an invalid length.
[  154.215167][T11098] : entered promiscuous mode
[  154.293808][T11107] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003
[  154.614505][T11147] Can't find ip_set type 
[  154.713447][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.716758][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.719657][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.722598][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.725224][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.727587][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.730889][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.734165][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.737172][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.747959][T11162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.918689][T11183] __nla_validate_parse: 11 callbacks suppressed
[  154.918749][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  154.931249][T11183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1617'.
[  154.939373][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  154.993872][T11182] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  155.174816][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  155.206542][T11216] bridge_slave_1: default FDB implementation only supports local addresses
[  155.317508][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'.
[  155.426953][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'.
[  155.429926][T11241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1629'.
[  155.433410][T11243] xt_l2tp: v2 doesn't support IP mode
[  155.557698][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'.
[  155.584897][T11255] netlink: 'syz.1.1638': attribute type 10 has an invalid length.
[  155.627503][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'.
[  155.646517][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'.
[  155.649908][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'.
[  155.802744][T11267] x_tables: duplicate underflow at hook 1
[  156.147842][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.268231][T11291] xt_TCPMSS: Only works on TCP SYN packets
[  156.826352][T11342] netlink: 'syz.1.1660': attribute type 10 has an invalid length.
[  157.448202][T11392] ieee802154 phy0 wpan0: encryption failed: -90
[  157.644897][T11405] validate_nla: 1 callbacks suppressed
[  157.644910][T11405] netlink: 'syz.0.1678': attribute type 10 has an invalid length.
[  157.712475][T11419] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  157.851907][T11430] netlink: 'syz.0.1684': attribute type 10 has an invalid length.
[  158.209304][T11475] tc_dump_action: action bad kind
[  158.213034][T11470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.218586][T11471] syzkaller0: entered promiscuous mode
[  158.223801][T11471] syzkaller0: entered allmulticast mode
[  158.260555][T11471] tipc: Resetting bearer <eth:syzkaller0>
[  158.279511][T11471] tipc: Disabling bearer <eth:syzkaller0>
[  158.422864][T11490] netlink: 'syz.0.1700': attribute type 1 has an invalid length.
[  158.461091][T11490] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  158.465208][T11490] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  158.506824][T11496] macvlan0: entered promiscuous mode
[  158.508896][T11496] macvlan0: entered allmulticast mode
[  158.515663][T11496] bond9: entered promiscuous mode
[  158.518613][T11496] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  158.524833][T11496] bond9: left promiscuous mode
[  158.652475][T11511] netlink: 'syz.2.1707': attribute type 58 has an invalid length.
[  158.786149][T11523] netlink: 'syz.2.1712': attribute type 5 has an invalid length.
[  158.846706][T11530] netlink: 'syz.1.1714': attribute type 2 has an invalid length.
[  159.316795][T11579] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  159.319954][T11579] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  159.337909][T11583] netlink: 'syz.0.1732': attribute type 4 has an invalid length.
[  159.497486][T11596] sctp: [Deprecated]: syz.0.1737 (pid 11596) Use of int in maxseg socket option.
[  159.497486][T11596] Use struct sctp_assoc_value instead
[  159.530995][T11599] netlink: 'syz.1.1738': attribute type 3 has an invalid length.
[  159.794211][T11626] netlink: 'syz.0.1749': attribute type 32 has an invalid length.
[  159.797499][T11626] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16)
[  159.897205][T11638] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  160.004063][T11651] __nla_validate_parse: 184 callbacks suppressed
[  160.004076][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'.
[  160.051203][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  160.238144][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1765'.
[  160.239901][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1764'.
[  160.247382][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1764'.
[  160.265348][T11668] gretap0: entered promiscuous mode
[  160.279719][T11668] gretap0: left promiscuous mode
[  160.363649][T11672] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.367364][T11672] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.373226][T11672] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.377167][T11672] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.670607][T11688] xt_TPROXY: Can be used only with -p tcp or -p udp
[  160.843519][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'.
[  161.166198][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'.
[  161.330312][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  161.340887][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  161.740780][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'.
[  162.138628][T11756] gtp2: entered promiscuous mode
[  162.143600][T11756] gtp2: entered allmulticast mode
[  162.196672][T11766] tipc: New replicast peer: 255.255.255.255
[  162.199954][T11766] tipc: Enabled bearer <udp:syz2>, priority 1
[  162.273855][T11772] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  162.654097][T11817] 8021q: VLANs not supported on nlmon0
[  162.676563][T11812] validate_nla: 4 callbacks suppressed
[  162.676579][T11812] netlink: 'syz.2.1814': attribute type 13 has an invalid length.
[  162.684388][T11812] netlink: 'syz.2.1814': attribute type 17 has an invalid length.
[  162.717348][T11812] erspan0: left allmulticast mode
[  162.745112][T11812] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.749449][T11812] net_ratelimit: 29 callbacks suppressed
[  162.749454][T11812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.903147][T11825] lo speed is unknown, defaulting to 1000
[  163.225367][T11838] x_tables: duplicate underflow at hook 2
[  163.299078][T11844] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  163.299264][T11843] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  163.356858][T11847] netlink: 'syz.1.1826': attribute type 8 has an invalid length.
[  163.745198][T11849] lo speed is unknown, defaulting to 1000
[  163.778576][T11875] netlink: 'syz.2.1834': attribute type 11 has an invalid length.
[  164.047802][T11893] xt_hashlimit: size too large, truncated to 1048576
[  164.050042][T11893] xt_hashlimit: max too large, truncated to 1048576
[  164.382278][T11895] lo speed is unknown, defaulting to 1000
[  164.431639][T11905] ieee802154 phy0 wpan0: encryption failed: -90
[  164.512335][T11910] lo speed is unknown, defaulting to 1000
[  164.597271][T11914] netlink: 'syz.2.1845': attribute type 8 has an invalid length.
[  164.982114][T11926] vxcan1: entered allmulticast mode
[  165.173754][T11930] __nla_validate_parse: 12 callbacks suppressed
[  165.173765][T11930] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1849'.
[  165.330106][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1855'.
[  165.346510][T11944] netlink: 'syz.1.1855': attribute type 1 has an invalid length.
[  165.349338][T11944] netlink: 'syz.1.1855': attribute type 2 has an invalid length.
[  165.355210][T11944] netlink: 'syz.1.1855': attribute type 1 has an invalid length.
[  165.360235][T11944] netlink: 'syz.1.1855': attribute type 2 has an invalid length.
[  165.368199][T11944] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  165.572285][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'.
[  165.589668][T11959] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  165.595466][T11959] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  165.698438][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[  165.707455][T11977] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  165.717551][T11977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.735048][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1868'.
[  165.857579][T11988] netlink: 'syz.2.1872': attribute type 1 has an invalid length.
[  165.861438][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'.
[  165.922942][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'.
[  165.952729][T11995] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  165.982395][T11997] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1877'.
[  166.127408][T12003] netlink: 'syz.1.1880': attribute type 58 has an invalid length.
[  166.131667][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1880'.
[  166.324559][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1884'.
[  166.938013][T12082] gre0: left promiscuous mode
[  166.954690][T12082] batadv_slave_1: left promiscuous mode
[  166.957201][T12082] 0: left allmulticast mode
[  166.962592][T12082] batadv1: left allmulticast mode
[  166.964523][T12082] ip6gre1: left allmulticast mode
[  166.966214][T12082] ip6erspan1: left promiscuous mode
[  166.972406][T12082] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  166.988609][T12087] IPv6: NLM_F_CREATE should be specified when creating new route
[  166.992394][T12087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.995424][T12087] IPv6: NLM_F_CREATE should be set when creating new route
[  166.998726][T12087] IPv6: NLM_F_CREATE should be set when creating new route
[  167.002269][T12087] IPv6: NLM_F_CREATE should be set when creating new route
[  167.009381][T12082] gretap1: left promiscuous mode
[  167.015677][T12082] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  167.019141][T12082] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.024187][T12082] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.027539][T12082] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.044790][T12082] geneve3: left promiscuous mode
[  167.054672][T12082] gtp2: left promiscuous mode
[  167.056318][T12082] gtp2: left allmulticast mode
[  167.145522][T12097] IPv6: Can't replace route, no match found
[  167.578665][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.583371][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.586565][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.591022][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.593885][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.737146][T12111] lo speed is unknown, defaulting to 1000
[  167.883236][T12111] chnl_net:caif_netlink_parms(): no params data found
[  167.885560][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  167.977732][T12111] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.982124][T12111] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.985981][T12111] bridge_slave_0: entered allmulticast mode
[  167.989873][T12111] bridge_slave_0: entered promiscuous mode
[  167.994538][T12111] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.997586][T12111] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.003328][T12111] bridge_slave_1: entered allmulticast mode
[  168.008525][T12111] bridge_slave_1: entered promiscuous mode
[  168.015080][T12135] validate_nla: 3 callbacks suppressed
[  168.015090][T12135] netlink: 'syz.0.1920': attribute type 1 has an invalid length.
[  168.039792][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.047864][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.075474][T12111] team0: Port device team_slave_0 added
[  168.079905][T12111] team0: Port device team_slave_1 added
[  168.101529][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.103977][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.113289][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.117784][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.120025][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.128510][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.161920][T12111] hsr_slave_0: entered promiscuous mode
[  168.164493][T12111] hsr_slave_1: entered promiscuous mode
[  168.167514][T12111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.171909][T12111] Cannot create hsr debugfs directory
[  168.268740][T12111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.347370][T12111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.413145][T12111] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  168.418053][T12111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.471750][T12111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.625078][T12111] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  168.646682][T12111] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  168.654659][T12111] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  168.665181][T12111] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  168.750986][T12111] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.771328][T12111] 8021q: adding VLAN 0 to HW filter on device team0
[  168.779486][T11141] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.782523][T11141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.811585][T11141] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.814650][T11141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.978890][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.021205][T12111] veth0_vlan: entered promiscuous mode
[  169.031164][T12111] veth1_vlan: entered promiscuous mode
[  169.059935][T12111] veth0_macvtap: entered promiscuous mode
[  169.067258][T12111] veth1_macvtap: entered promiscuous mode
[  169.084980][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.101852][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.109837][T12111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.113933][T12111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.117487][T12111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.122067][T12111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.194674][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.198177][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.227868][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.233959][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.703291][T12175] netlink: zone id is out of range
[  169.705141][T12175] netlink: zone id is out of range
[  169.706954][T12175] netlink: zone id is out of range
[  169.709071][T12175] netlink: zone id is out of range
[  169.712519][T12175] netlink: zone id is out of range
[  169.714464][T12175] netlink: zone id is out of range
[  169.716377][T12175] netlink: zone id is out of range
[  169.718220][T12175] netlink: zone id is out of range
[  169.720064][T12175] netlink: zone id is out of range
[  170.214944][T12208] lo speed is unknown, defaulting to 1000
[  171.019258][T12221] 8021q: adding VLAN 0 to HW filter on device bond9
[  171.296332][T12231] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.300105][T12231] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.324084][T12231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.327659][T12231] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.341338][T12231] geneve4: entered promiscuous mode
[  171.414328][ T5693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.548427][T12235] __nla_validate_parse: 10 callbacks suppressed
[  171.548440][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'.
[  171.556110][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1947'.
[  171.559443][T12235] netlink: 'syz.0.1947': attribute type 12 has an invalid length.
[  171.563060][T12235] netlink: 'syz.0.1947': attribute type 14 has an invalid length.
[  171.667508][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.670947][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.674260][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.677584][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.680891][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.752667][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'.
[  171.912716][T12255] bond0: option mode: unable to set because the bond device is up
[  171.926704][T12237] lo speed is unknown, defaulting to 1000
[  171.993218][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'.
[  172.019169][T12260] netlink: 'syz.2.1953': attribute type 180 has an invalid length.
[  172.024604][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1953'.
[  172.045133][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'.
[  172.077967][T12269] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1955'.
[  172.085629][T12237] chnl_net:caif_netlink_parms(): no params data found
[  172.143832][T12271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1956'.
[  172.168989][T12237] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.172307][T12237] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.174940][T12237] bridge_slave_0: entered allmulticast mode
[  172.177888][T12237] bridge_slave_0: entered promiscuous mode
[  172.183903][T12237] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.186315][T12237] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.188658][T12237] bridge_slave_1: entered allmulticast mode
[  172.192971][T12237] bridge_slave_1: entered promiscuous mode
[  172.245460][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.253401][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.329883][T12237] team0: Port device team_slave_0 added
[  172.336000][T12237] team0: Port device team_slave_1 added
[  172.385951][T12237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.388921][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.407110][T12237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.414316][T12237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.417189][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.429585][T12237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.471045][T12237] hsr_slave_0: entered promiscuous mode
[  172.473574][T12237] hsr_slave_1: entered promiscuous mode
[  172.475686][T12237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.478362][T12237] Cannot create hsr debugfs directory
[  172.966184][T12319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1973'.
[  172.977971][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1973'.
[  173.059814][ T5693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.109090][ T5693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.169214][ T5693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.245610][T12335] netlink: 'syz.2.1979': attribute type 178 has an invalid length.
[  173.265706][T12335] _Z`Ԁ@: entered promiscuous mode
[  173.268659][T12335] netlink: 'syz.2.1979': attribute type 3 has an invalid length.
[  173.309080][ T5693] bridge_slave_1: left allmulticast mode
[  173.314286][ T5693] bridge_slave_1: left promiscuous mode
[  173.317900][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.329106][ T5693] bridge_slave_0: left allmulticast mode
[  173.333631][ T5693] bridge_slave_0: left promiscuous mode
[  173.336171][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.676821][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.684647][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.690602][ T5693] bond0 (unregistering): Released all slaves
[  173.731086][ T5830] Bluetooth: hci0: command tx timeout
[  173.864970][T12348] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  173.870855][T12348] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  173.876370][T12348] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  174.264241][T12366] ieee802154 phy0 wpan0: encryption failed: -90
[  174.341088][ T5693] hsr_slave_0: left promiscuous mode
[  174.343631][ T5693] hsr_slave_1: left promiscuous mode
[  174.346058][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.348856][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.362875][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.366885][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.386038][ T5693] veth1_macvtap: left promiscuous mode
[  174.388338][ T5693] veth0_macvtap: left promiscuous mode
[  174.395229][ T5693] veth1_vlan: left promiscuous mode
[  174.397802][ T5693] veth0_vlan: left promiscuous mode
[  174.632076][T12383] net_ratelimit: 16 callbacks suppressed
[  174.632090][T12383] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  174.864202][ T5693] team0 (unregistering): Port device team_slave_1 removed
[  174.895118][ T5693] team0 (unregistering): Port device team_slave_0 removed
[  175.311922][T12237] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  175.319893][T12237] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  175.359503][T12237] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  175.371037][T12237] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  175.376017][T12401] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  175.534559][T12237] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.559935][T12237] 8021q: adding VLAN 0 to HW filter on device team0
[  175.568092][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.570878][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.582349][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.585117][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.783194][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.820952][ T5830] Bluetooth: hci0: command tx timeout
[  175.847793][T12237] veth0_vlan: entered promiscuous mode
[  175.866192][T12237] veth1_vlan: entered promiscuous mode
[  175.914667][T12237] veth0_macvtap: entered promiscuous mode
[  175.922431][T12237] veth1_macvtap: entered promiscuous mode
[  175.941405][T12237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.953684][T12237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.964653][T12237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.968890][T12237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.975555][T12237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.979102][T12237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.083182][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.087166][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.119470][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.126484][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.314683][T12443] netlink: 'syz.2.2011': attribute type 3 has an invalid length.
[  176.586058][T12461] unknown channel width for channel at 909000KHz?
[  176.588990][T12461] unknown channel width for channel at 909000KHz?
[  176.731536][T12466] __nla_validate_parse: 10 callbacks suppressed
[  176.731547][T12466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2017'.
[  176.808067][T12470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.928970][T12472] vlan1: entered allmulticast mode
[  176.932068][T12472] veth1: entered allmulticast mode
[  176.972181][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  176.975547][T12478] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  176.978514][T12478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.205634][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'.
[  177.547252][ T5852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.940061][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.948147][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.952267][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.959115][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.965365][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.038793][T12537] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2035'.
[  178.077508][T12537] netlink: 'syz.0.2035': attribute type 2 has an invalid length.
[  178.083151][T12537] netlink: 'syz.0.2035': attribute type 3 has an invalid length.
[  178.086656][T12537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2035'.
[  178.091004][T12537] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  178.182733][T12539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2036'.
[  178.217285][T12534] lo speed is unknown, defaulting to 1000
[  178.252754][T12541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2037'.
[  178.257021][T12541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.518041][T12534] chnl_net:caif_netlink_parms(): no params data found
[  178.576912][ T5832] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  178.581941][ T5832] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  178.586157][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  178.592255][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.596622][ T5832] RIP: 0010:klist_remove+0x14a/0x340
[  178.598822][ T5832] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  178.606773][ T5832] RSP: 0018:ffffc900043a7840 EFLAGS: 00010202
[  178.609468][ T5832] RAX: 000000000000000b RBX: ffff8881061c1cc0 RCX: 0000000000000000
[  178.612968][ T5832] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  178.616309][ T5832] RBP: ffffc900043a7928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
[  178.619483][ T5832] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  178.622900][ T5832] R13: 1ffff11004f3e30c R14: ffff8880279f1860 R15: dffffc0000000000
[  178.626467][ T5832] FS:  000055555bd30500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  178.630338][ T5832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.632986][ T5832] CR2: 00007fa3ac001000 CR3: 0000000021878000 CR4: 00000000000006f0
[  178.636110][ T5832] Call Trace:
[  178.637577][ T5832]  <TASK>
[  178.638886][ T5832]  ? __pfx_klist_remove+0x10/0x10
[  178.641157][ T5832]  ? __pfx_kobject_move+0x10/0x10
[  178.643445][ T5832]  ? get_device_parent+0x366/0x3a0
[  178.645562][ T5832]  device_move+0x193/0x700
[  178.647399][ T5832]  hci_conn_del_sysfs+0xb8/0x170
[  178.649516][ T5832]  hci_conn_del+0x8ff/0xcb0
[  178.651618][ T5832]  hci_conn_hash_flush+0x191/0x230
[  178.654107][ T5832]  hci_dev_close_sync+0xaef/0x1330
[  178.656462][ T5832]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  178.658777][ T5832]  ? up_write+0x1c4/0x420
[  178.660520][ T5832]  hci_unregister_dev+0x21a/0x510
[  178.662562][ T5832]  vhci_release+0x80/0xd0
[  178.664364][ T5832]  ? __pfx_vhci_release+0x10/0x10
[  178.666484][ T5832]  __fput+0x44c/0xa70
[  178.668218][ T5832]  task_work_run+0x1d4/0x260
[  178.670184][ T5832]  ? __pfx_task_work_run+0x10/0x10
[  178.672405][ T5832]  ? kmem_cache_free+0x18f/0x400
[  178.674718][ T5832]  do_exit+0x6b5/0x22e0
[  178.676665][ T5832]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  178.679018][ T5832]  ? __pfx_do_exit+0x10/0x10
[  178.681035][ T5832]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.683176][ T5832]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.685358][ T5832]  do_group_exit+0x21c/0x2d0
[  178.687301][ T5832]  __x64_sys_exit_group+0x3f/0x40
[  178.689494][ T5832]  x64_sys_call+0x21ba/0x21c0
[  178.691538][ T5832]  do_syscall_64+0xfa/0x3b0
[  178.693509][ T5832]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.695626][ T5832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.698267][ T5832]  ? exc_page_fault+0x9f/0xf0
[  178.700477][ T5832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.703444][ T5832] RIP: 0033:0x7f220258e929
[  178.705530][ T5832] Code: Unable to access opcode bytes at 0x7f220258e8ff.
[  178.708344][ T5832] RSP: 002b:00007ffeca03b138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  178.711837][ T5832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f220258e929
[  178.715176][ T5832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  178.718509][ T5832] RBP: 00007f22025ebad8 R08: 00007ffeca038ed7 R09: 00000000000927c0
[  178.721933][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.725415][ T5832] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffeca03b9d0
[  178.728871][ T5832]  </TASK>
[  178.730214][ T5832] Modules linked in:
[  178.733355][ T5832] ---[ end trace 0000000000000000 ]---
[  178.740302][ T5832] RIP: 0010:klist_remove+0x14a/0x340
[  178.742550][ T5832] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  178.749259][ T5832] RSP: 0018:ffffc900043a7840 EFLAGS: 00010202
[  178.762073][ T5832] RAX: 000000000000000b RBX: ffff8881061c1cc0 RCX: 0000000000000000
[  178.775223][ T5832] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  178.778317][ T5832] RBP: ffffc900043a7928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  178.790194][ T5832] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  178.793153][ T5832] R13: 1ffff11004f3e30c R14: ffff8880279f1860 R15: dffffc0000000000
[  178.796003][ T5832] FS:  000055555bd30500(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  178.799658][ T5832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.802287][ T5832] CR2: 0000000000000000 CR3: 0000000108336000 CR4: 00000000000006f0
[  178.805109][ T5832] Kernel panic - not syncing: Fatal exception
[  178.807827][ T5832] Kernel Offset: disabled
[  178.809249][ T5832] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:56:55  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110041baac5 RBX=000000000000001c RCX=0000000000000006 RDX=0000000000000000
RSI=0000000000000006 RDI=0000000000000040 RBP=1ffff110041baac0 RSP=ffffc9000734f490
R8 =ffffc9000734f59f R9 =0000000000000000 R10=ffffc9000734f590 R11=fffff52000e69eb4
R12=ffff888020dd5600 R13=0000000000000000 R14=ffff888020dd5628 R15=dffffc0000000000
RIP=ffffffff8b6a6be2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdf697446c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdf68974980 CR3=0000000029244000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fdf696ed100 00007fdf68b85440 XMM05=00007fdf68b85458 00007fdf68b854a0
XMM06=00007fdf68b85498 00007fdf68b85490 XMM07=00007fdf68b85488 00007fdf68b85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdf68a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043a7070
R8 =ffff888108af0237 R9 =1ffff1102115e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bc R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555bd30500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa3ac001000 CR3=0000000021878000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000000000203 0000000000003012
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000281 000000000000302d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
