last executing test programs:

1.451082762s ago: executing program 0 (id=2941):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x28, 0x10f, 0x1, "007a32f564440fa4ae9d021aa4355cbd85"}, {0x18, 0x110, 0xc, "aa"}], 0x40}, 0xfc40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', <r2=>0x0, 0x7, 0x7800, 0xee37, 0x8, {{0x15, 0x4, 0x2, 0x1d, 0x54, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xa8, [@broadcast, @broadcast]}, @timestamp={0x44, 0x28, 0x30, 0x0, 0x1, [0x87, 0x8001, 0x10, 0x81, 0xffffffff, 0x1, 0x6, 0x0, 0x1]}, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x2, [0x2]}, @end]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x2, 0x9d, 0x10, r1, 0x8865, '\x00', r2, r1, 0x1, 0x0, 0x4, 0x6}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

1.450236693s ago: executing program 2 (id=2942):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200200, 0x0, 0x1, 0xf, 0x3, 0x27a}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x10000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES8], 0x24}}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe8)
sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=@can_newroute={0x298, 0x18, 0x0, 0x70bd25, 0x25dfdbff, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "eed761b0cefa4a2b"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x49, 0x68, 0x50, 0x1, 0x1, "ac739ab5f5334c3a4d1eff60ce60e7a1d610d352ae6bafb28f74e11771f2be7c6a06a4d324de62f5e702cf294638b9df8b9c52a6efe62c469abb9e73b4e4ff27a86d91b869faab078ccf706846e9163f37930f54ad299670b96062873ccbec5b0a1047818d089ced7935f8310a2ec152f4e68b05876c8650964b792e51bb3e19fd5316fd4f0fb733791f3ec82cbc9c0108e299890336e415dfe8bee7ae6d652fcd4736dadff03f9dbb0e7aa89ba22652e06ea14ca315a181cd657581a60cd350d75925f9ea3f3a2862e593260cefe06f83fffff2727960cf1cecc0138b903c10146785d1a6ed49ebb0c325d2ebe3c48f5e2ddf8b557f41d0e3e23e40ed7b879c", 0x1, "41c74602890c601cf9cd9ea0cd22046feb7a20f2"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x11, 0xff, 0x52, 0x3, 0x4, "66d7d823264f7f02430368ca769fe95013d7279d0f57d6586f0b053516844dcbfd8d6d2d263589465591685f34119c1c0d16117b8da225602d5cb57a179439b5002de7f286029a927f45856b9f25a9a25abd8e1f5c65b8c34d3d93854e8e77b27955cf077a7d1718646ab23cef287d3a16fe0fc3702bd0043a7205c947c79ed4b4914fd2e4410daf66fcc121d91806d88a6f982b46e061c89d3cb29a8b0ddfa14a45a96282989f193fa01d2ceb07f88e7efbf4a102a8aa240c74eb702e1282c67c1cafea2692252096573cc8f0fdd52eddedf647e97ce5b54ff45b7e6c9a174d04dbdcab644310004a863643f4fe8c1bd133a04114c981dba0dc18c50a0d906e", 0x2, "45eeb34f72e85dc039e2b570a8a61f1aa09eef77"}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "4804736f7af9bd7d"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, r8}]}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.38619903s ago: executing program 0 (id=2944):
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
listen(r2, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xd8, @loopback, 0xfffffffd}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000001)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES64=r0], 0x8)
socket(0x10, 0x3, 0x9)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f0000000880)={'wlan0\x00'})

1.385411138s ago: executing program 1 (id=2945):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[], 0x9af8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c40000000050800034000000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)={0xc8, r4, 0xb1b7bb226dc90b8b, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "b3c334e9cf301fee8f6c27a9b502d0de7e8ebf3554d981fae410fea9d06228f4a7aa8bed7ee0db5f1d457b17e7a4351b4447675c513387b1a2a1497fe1fadc9b4b5ad2df5824fc7d522632c07208d13a219bfd7e91423c7da5383a303ea3efbb504bb832df72c2f261b2ce09e712ed72254e439495a2ae35c7bd8078"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0xc8}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="ca98866943b6a2e08916b9faf4402e9c722f19fbd22f8bd0eccaea60d170c7b8b5e0dee05db9212a1c2e72c1cda922d17ee5813cf0711eb4c5ce12a8bbbddbb01c8354c1f301936c6896f92e7781397f218e48ba9d9422d1fb2544d195a16d4c933df870e1a08e4503b6e9ce803ff8889a046ffbc5c5016f60058cd190e7eaecd94bfdedf5110f5fbe1d158c9778c18aa328cfc6cdece918f6ce2b45346ba460f458abc9", 0xa4}], 0x1}}], 0x1, 0x240040d5)

1.140113381s ago: executing program 0 (id=2946):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004010}, 0x44004811) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4042100}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x91}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2d}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x114}}, 0x4000) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000780)={<r5=>r1, 0x95c8, 0x7, 0x1})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000007c0), 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=<r6=>0x0, 0x2f, 0x1, 0x9, &(0x7f0000000800)=[0x0], 0x1, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], <r7=>0x0}, 0x40)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x2c, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5ddba563}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @generic={0x7, 0x2, 0x2, 0x9, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000b00)='GPL\x00', 0x3ff, 0x2c, &(0x7f0000000b40)=""/44, 0x1f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x1, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[r5], &(0x7f0000000c40)=[{0x1, 0x1, 0xe, 0x9}, {0x0, 0x2, 0x7, 0x1}, {0x4, 0x5, 0x3, 0x5}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@map=r5, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) (async)
r9 = socket$kcm(0x29, 0x5, 0x0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r5)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x78, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x80, 0x40}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000d0}, 0x140)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x98, r11, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x47}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x8005) (async)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r13, 0x8955, &(0x7f00000010c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20, {0x2, 0x4e20, @broadcast}, 'caif0\x00'})
bind$bt_l2cap(r0, &(0x7f0000001140)={0x1f, 0x1, @none, 0x7, 0x2}, 0xe) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001180)={'tunl0\x00', @remote})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x120, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb78}}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x8000040) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x9, 0x2, 0x7d, 0x600e8, r5, 0x10, '\x00', r6, r5, 0x2, 0x2, 0x4, 0x6}, 0x50) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r11, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x40) (async)
setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000001540)={0x0, 0x1, 0xc0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, 0x10) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x8}, 0xc)

1.020310962s ago: executing program 0 (id=2947):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf252100000009001f0070687932000000000500200001"], 0x68}}, 0x4000000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r2)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESOCT], 0x80}, 0x1, 0x0, 0x0, 0x5884}, 0x4000)
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="f300"})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x4)
pwritev(r5, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f6000000000101", 0x2c}], 0x1, 0x6, 0x0)
pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000002603003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
close(0x3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x30000000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x156, 0x4)
sendmmsg$inet(r8, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4008000)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="95aa8770d472c36147536e81e467a76e140000003ec23065e51e298771a3bd5db1cb33290de9e1556cdd1c85a7cd21c793384f2461018b739a9dff7261cf34db72940b7c22ecef4f77db8714555ed2e56c810b9dbada18bf90e99fe1ab7a6a3db0503aaf276ab9a3937876f211909e94d3ea930e5212d0873c6b5f9beef67d2a46462158bc8a88c38dfba51d5ff35876e5faa7cba0f1f6d71dd9f2e4ae5d9a9a3fe434dd8d17375e30d24070196fb13dacd756015a66a89b6d5385e6e1c4a1a31159ca18378618a2239d1a9962f46691d11a940b7ad5831cad6205", @ANYRES16=r9, @ANYBLOB="01002cbd700003dcdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='*@\x00\x00', @ANYRES16=r9, @ANYBLOB="020429bd7000fcdbdf2504000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008891}, 0x1)

941.092234ms ago: executing program 1 (id=2948):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r2, 0xb0b, 0x0, 0x4}, 0x14}}, 0x40800)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r3, &(0x7f00000000c0), 0x10)
sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x182004}, 0x10)
recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c085}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

921.059151ms ago: executing program 0 (id=2949):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x2404e880}, 0xc040) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'dvmrp1\x00', @random="ef00000400"}) (rerun: 32)

912.299747ms ago: executing program 1 (id=2950):
r0 = socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x28, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffdbf)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xfffffffd, 0x400000, 0x800007ff, 0x40004, 0xc0000000, 0x402, 0x5, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x20027a3, 0xa24, 0x80000004, 0x1, 0x5, 0x424b, 0x3}})
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a01010008000400010000000600150005000000240016002000010001000000000204"], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01008d00ffff"})

808.444798ms ago: executing program 1 (id=2951):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xa, 0x401, 0x17, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x8000, 0x10, 0xffffffff, 0xa}})
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x3}, 0x10) (async)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x3}, 0x10)

729.306766ms ago: executing program 1 (id=2952):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000040)=@raw=[@generic={0x1, 0x1, 0x3, 0x9, 0x3d9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0xf9, 0xa, 0x6, 0x7, 0x80}], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x257f, 0x4, 0xb, 0x80f23dfa09cafd33}, {0x5, 0x1, 0x6, 0x7}, {0x4, 0x2, 0x8, 0x1}], 0x10, 0x401}, 0x94)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001500010000000000000000000d0000000800010001000000080003"], 0x24}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0xfded, &(0x7f0000000300)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x12, {[@timestamp={0x8, 0xa, 0xffffa888}]}}, {"589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7a308"}}}}}}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, r2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1807000008000000000000000300e80018460000fdffffff000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

661.013581ms ago: executing program 1 (id=2953):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250900000028000280080000000000000008000100090000001400038008000000080023690600000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
close(r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x4}]}, &(0x7f0000000140)=0x10)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000080)="d301006d023e4684", 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

560.290716ms ago: executing program 2 (id=2954):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="ef00"})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', <r1=>0x0, 0x7800, 0x11, 0x9, 0x7, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa9, [@local, @empty, @multicast1, @multicast2, @private=0xa010101]}]}}}}})
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/22, 0x16}, {&(0x7f00000005c0)=""/75, 0x4b}], 0x3, 0x5, 0x101)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', <r2=>0x0, 0x40, 0x1, 0x7b, 0x6, {{0x23, 0x4, 0x0, 0xd, 0x8c, 0x68, 0x0, 0xfe, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @timestamp={0x44, 0x4, 0x29}, @rr={0x7, 0x13, 0x61, [@dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}]}, @ssrr={0x89, 0xb, 0x7b, [@remote, @multicast1]}, @ssrr={0x89, 0xf, 0x69, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x44, 0x10, "231cb8c768e3fb7d31ab8ae08eb0"}, @timestamp_addr={0x44, 0x34, 0x5c, 0x1, 0x2, [{@empty, 0x19}, {@private=0xa010100, 0x6}, {@broadcast, 0x10001}, {@local, 0x65b08e4a}, {@empty, 0xe120}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf42}]}]}}}}})
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="15d46dc0d49b3ae7e24bd5ed29ecfe82269120369fa11792ffa551042a2baef0f9dfaa77675d5a3a6243d6f87a98c6755e8e392b5bcb63cd644faf3b73a0ecd5f575fd62dd2a7ec94d47b5215adbdd7874e146b285d036d008c8cc7127d2d9cf6cbbc1791f6bef296e9a2120673142a51a77a6e0aaf2f77a8f5d9677d7ee64d34fd5fb0e9bf0f42989041e63a09ff42abfaf94d222de0ad009375746d29a6123048eaaf3f70b32143f33939cffd9b4a951fbb9d6ea432391bd68755075d19b7f454e0f80bd8501b2af0f634d499e2787431519ca42b9be8cbc9132fc4070705268fbb057c57139", 0xe7}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xa0}, 0x20044040)

500.496935ms ago: executing program 2 (id=2955):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0xfc, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'veth0_to_team\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @multicast2, @private=0xa010101, 0x2}}}, {{@arp={@local, @empty, 0xff, 0xffffff00, 0xb, 0xd, {}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0xa, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x7, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff, 0xff]}}, {@mac=@random="7f13ea2e6715", {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7bff, 0x1, 'syzkaller0\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x164}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="92c067597e4a", @mac, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xae83}]}, 0x1c}}, 0x4044) (async)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xae83}]}, 0x1c}}, 0x4044)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="080070b2ff2da5ba78", 0x9}], 0x2}, 0x54) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="080070b2ff2da5ba78", 0x9}], 0x2}, 0x54)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x7, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xd, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r4}, @generic='I']}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000)
ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

425.197859ms ago: executing program 2 (id=2956):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="3a74be710dc53efe852000000500000018560000080000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ffe1ffffffbea100000000000007010000f8ffffffbfa40000000000000704"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r2], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01008d00ffff"})

424.226387ms ago: executing program 2 (id=2957):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "a5820eff8ad320a2", "871a1000", "566c49a9", "08f473bb5c2e29c1"}, 0x28)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0x3, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xffd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x4}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r7}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="ef00"})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', <r8=>0x0, 0x29, 0x9, 0x7, 0x7, 0x48, @private1={0xfc, 0x1, '\x00', 0xe}, @local, 0x40, 0x8, 0x3}})
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @ax25={0x3, @bcast, 0x8}, @xdp={0x2c, 0x2, r8, 0x22}, 0x1, 0x0, 0x0, 0x0, 0xbec0, &(0x7f0000000380)='bridge_slave_0\x00', 0x80000000, 0x7})

228.520737ms ago: executing program 2 (id=2958):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c1b68c4ca567e09d1b000000fe4c924e9c33a5ff00800212450e0505", @ANYRES16, @ANYBLOB="000000f600000000000000a40000a58600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/75}, {&(0x7f0000000740)=""/20, 0x5a0}, {&(0x7f0000000780)=""/202}], 0x12, &(0x7f0000000280)=""/23}, 0x8001}], 0x1, 0x1822b, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0)
write$tun(r2, &(0x7f0000000940)={@void, @val={0x2, 0x1, 0x8, 0x2, 0xd6, 0x5}, @ipv6=@tipc_packet={0x9, 0x6, "bb383f", 0x115, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private2, {[@hopopts={0x0, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0x6, 0xcb, "77a2146855d8e481bca28eae2a1b1b802de51eb935013f6a61ca69ed4c42b8c10da741815048fccf214ecf416cfc6103ffb61efa837a4fa793273b65446de3a96c1bb87c21866872bfdfbaf4086779468c81dd9e51b4e1bdbfab4717de3d3d67f397bff14d679d618a78c722881309852cfb5419e036a32df7cc05743ba2882066b6860031bfd36cc3c3d46072f22165c1e3fcee71121bcbe204e6a5ad96862839c03ba1ee0217f37aaceabf811142251b7e89b7b25d243c1adfdf8c1edaba43f5d64395faff1880b8bc91"}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0xe}]}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x6, 0x0, 0x2, 0x5, 0x5, 0x2, 0x7, 0x3, 0x4, 0x4e22, 0x4e22}, 0x1, 0x3}, 0x0, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x147)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
unshare(0x22020400)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="110000af0aedd386020000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf={0x64, &(0x7f0000000000)="ce27d8361c309a5bbcde5ea9d626bdbe722995af3cf26839a790446bb95eb0478bf249fb7a8c66f98561a87d7e3d911cf2b69df53477db6a7a5695a8bee5a85e40d3bf827f74d1d5b2c2515be5b436bda671a3411de4ebda197e56d3f0d0b2e11e3ab6d0"})
sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r8, 0x2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)

0s ago: executing program 0 (id=2959):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc)
sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)='b', 0x1194}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="ef00"})

kernel console output (not intermixed with test programs):

er0: entered allmulticast mode
[  112.095560][ T8752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.104938][ T8751] 0: reclassify loop, rule prio 0, protocol 03
[  112.691332][ T8782] netlink: 'syz.0.829': attribute type 1 has an invalid length.
[  112.732836][ T8784] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  113.036291][ T8808] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  113.060463][ T8808] bond3: entered promiscuous mode
[  113.060821][ T8808] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.090690][ T8810] bond3: (slave bridge3): making interface the new active one
[  113.090708][ T8810] bridge3: entered promiscuous mode
[  113.091747][ T8810] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  113.115866][ T8809] bond3: (slave bridge4): Enslaving as a backup interface with an up link
[  113.377813][ T8839] netlink: 'syz.2.841': attribute type 9 has an invalid length.
[  113.377831][ T8839] netlink: 'syz.2.841': attribute type 6 has an invalid length.
[  113.377840][ T8839] netlink: 'syz.2.841': attribute type 7 has an invalid length.
[  113.377847][ T8839] netlink: 'syz.2.841': attribute type 8 has an invalid length.
[  113.561897][ T8850] sctp: [Deprecated]: syz.2.844 (pid 8850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.561897][ T8850] Use struct sctp_sack_info instead
[  113.602593][ T8855] syzkaller1: entered promiscuous mode
[  113.602605][ T8855] syzkaller1: entered allmulticast mode
[  113.700949][ T8873] syzkaller0: entered promiscuous mode
[  113.700962][ T8873] syzkaller0: entered allmulticast mode
[  113.802143][ T8880] netlink: 'syz.0.847': attribute type 3 has an invalid length.
[  114.297067][    C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  115.197788][ T8935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.352594][ T8967] __nla_validate_parse: 11 callbacks suppressed
[  115.352611][ T8967] netlink: 340 bytes leftover after parsing attributes in process `syz.0.861'.
[  115.434575][ T8973] netlink: 'syz.0.863': attribute type 21 has an invalid length.
[  115.451073][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'.
[  115.479537][ T8973] netlink: 189 bytes leftover after parsing attributes in process `syz.0.863'.
[  115.530387][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  115.531727][   T10] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  115.571497][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.864'.
[  115.615518][   T12] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  115.615809][   T12] bond2: (slave veth3): making interface the new active one
[  115.620563][   T12] bond2: active interface up!
[  115.704106][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  115.814128][ T9001] netlink: 'syz.2.869': attribute type 1 has an invalid length.
[  115.864353][ T9003] netlink: 340 bytes leftover after parsing attributes in process `syz.2.870'.
[  116.046875][ T9019] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.047352][ T9019] bond3: left promiscuous mode
[  116.047365][ T9019] bridge3: left promiscuous mode
[  116.050949][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'.
[  116.050959][ T9019] netlink: 188 bytes leftover after parsing attributes in process `syz.1.877'.
[  116.058611][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.140333][ T9029] netlink: 340 bytes leftover after parsing attributes in process `syz.0.880'.
[  116.157453][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.185773][ T9031] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  116.379315][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  116.457554][ T5911] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  117.013115][ T9031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.124062][ T9072] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  117.148457][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'.
[  117.206328][ T9086] netlink: 'syz.2.890': attribute type 5 has an invalid length.
[  117.206344][ T9086] netlink: 'syz.2.890': attribute type 9 has an invalid length.
[  117.556130][ T9109] No such timeout policy "syz1"
[  117.790065][ T9117] openvswitch: netlink: Message has 8 unknown bytes.
[  118.361904][ T9165] netlink: 'syz.2.912': attribute type 2 has an invalid length.
[  118.361921][ T9165] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[  118.631326][ T9177] openvswitch: netlink: Message has 8 unknown bytes.
[  118.775669][ T9183] syzkaller0: entered promiscuous mode
[  118.775687][ T9183] syzkaller0: entered allmulticast mode
[  118.851367][ T9186] ip_tables: iptables: counters copy to user failed while replacing table
[  118.905303][ T9188] netlink: 'syz.1.921': attribute type 1 has an invalid length.
[  118.930782][ T9188] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.941237][ T9188] bond4: entered allmulticast mode
[  118.961178][ T9188] bond4: (slave ip6gretap1): making interface the new active one
[  118.961196][ T9188] ip6gretap1: entered allmulticast mode
[  118.962890][ T9188] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  119.531951][ T9227] IPVS: length: 24 != 12312
[  119.641282][ T9231] tun0: tun_chr_ioctl cmd 1074025680
[  120.133824][ T9257] bond5: option fail_over_mac: invalid value (127)
[  120.138073][ T9257] bond5 (unregistering): Released all slaves
[  120.306489][ T9270] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.319520][ T5662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.337778][ T9270] bridge0: port 3(bond0) entered blocking state
[  120.344390][ T9270] bridge0: port 3(bond0) entered disabled state
[  120.353269][ T9270] bond0: entered allmulticast mode
[  120.353280][ T9270] bond_slave_0: entered allmulticast mode
[  120.353294][ T9270] bond_slave_1: entered allmulticast mode
[  120.355617][ T9270] bond0: entered promiscuous mode
[  120.355625][ T9270] bond_slave_0: entered promiscuous mode
[  120.355732][ T9270] bond_slave_1: entered promiscuous mode
[  120.380077][ T9270] bridge0: port 3(bond0) entered blocking state
[  120.380131][ T9270] bridge0: port 3(bond0) entered forwarding state
[  120.385755][ T9273] __nla_validate_parse: 34 callbacks suppressed
[  120.385764][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'.
[  120.412297][ T9275] 0: reclassify loop, rule prio 0, protocol 03
[  120.455712][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  120.627073][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.952'.
[  120.649972][ T9291] geneve1: entered promiscuous mode
[  120.708969][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  120.715855][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'.
[  120.786945][ T5662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.838989][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'.
[  120.917888][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.220832][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'.
[  121.255897][ T9358] geneve1: left promiscuous mode
[  121.269766][ T5602] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.271023][ T9358] openvswitch: netlink: Message has 8 unknown bytes.
[  121.468504][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'.
[  121.473475][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'.
[  121.542620][ T9384] lo: left promiscuous mode
[  121.542960][ T9384] tunl0: left promiscuous mode
[  121.543176][ T9384] gre0: left promiscuous mode
[  121.543398][ T9384] gretap0: left promiscuous mode
[  121.543651][ T9384] erspan0: left promiscuous mode
[  121.543863][ T9384] ip_vti0: left promiscuous mode
[  121.544115][ T9384] ip6_vti0: left promiscuous mode
[  121.544300][ T9384] sit0: left promiscuous mode
[  121.544515][ T9384] ip6tnl0: left promiscuous mode
[  121.544724][ T9384] ip6gre0: left promiscuous mode
[  121.544919][ T9384] syz_tun: left promiscuous mode
[  121.545152][ T9384] ip6gretap0: left promiscuous mode
[  121.545423][ T9384] bridge0: left promiscuous mode
[  121.573212][ T9384] netlink: 'syz.2.976': attribute type 11 has an invalid length.
[  121.606978][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.607775][ T5911] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  121.657136][ T5602] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.799241][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.918141][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.918618][   T10] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  121.963457][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'.
[  122.101814][ T9435] netlink: 'syz.2.989': attribute type 2 has an invalid length.
[  122.216988][ T5911] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  122.626438][ T9479] netlink: 'syz.2.1001': attribute type 13 has an invalid length.
[  122.638482][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.704332][ T9474] openvswitch: netlink: Message has 8 unknown bytes.
[  122.788205][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  123.047474][ T9495] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  123.645706][ T9532] netlink: 'syz.1.1019': attribute type 83 has an invalid length.
[  123.651665][ T5602] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  123.971978][ T9562] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  124.146412][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  124.323067][ T9583] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  124.415021][ T9600] syz_tun: entered allmulticast mode
[  124.908906][ T9622] RDS: rds_bind could not find a transport for ::ffff:172.20.20.57, load rds_tcp or rds_rdma?
[  125.007261][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  125.162722][ T9596] syz_tun: left allmulticast mode
[  125.496039][ T9667] __nla_validate_parse: 11 callbacks suppressed
[  125.496057][ T9667] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1050'.
[  125.645233][ T9677] net_ratelimit: 4 callbacks suppressed
[  125.645255][ T9677] openvswitch: netlink: Key type 2054 is out of range max 32
[  125.888521][ T5594] Bluetooth: hci0: command 0x0419 tx timeout
[  125.997318][ T9698] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1061'.
[  126.042059][ T9698] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  126.225599][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'.
[  126.225620][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  126.225629][ T9714] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1067'.
[  126.225637][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  126.225646][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  126.395409][ T9721] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.402191][ T9722] syzkaller1: entered promiscuous mode
[  126.402207][ T9722] syzkaller1: entered allmulticast mode
[  126.472514][ T9733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1071'.
[  126.560359][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'.
[  126.625699][ T9744] syzkaller1: entered promiscuous mode
[  126.625717][ T9744] syzkaller1: entered allmulticast mode
[  126.774884][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  126.798983][ T5460] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.817322][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.817353][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.817370][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.917310][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.917756][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.152585][ T9766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.153331][ T9766] syzkaller0: entered promiscuous mode
[  127.153344][ T9766] syzkaller0: entered allmulticast mode
[  127.179016][ T9766] tipc: Resetting bearer <eth:syzkaller0>
[  127.252218][ T9765] tipc: Resetting bearer <eth:syzkaller0>
[  127.266046][ T9765] tipc: Disabling bearer <eth:syzkaller0>
[  127.392125][ T9784] Unsupported ieee802154 address type: 0
[  127.647181][ T5594] Bluetooth: hci2: command 0x0406 tx timeout
[  127.771710][ T9809] sctp: [Deprecated]: syz.2.1097 (pid 9809) Use of int in max_burst socket option.
[  127.771710][ T9809] Use struct sctp_assoc_value instead
[  127.773276][ T9809] ip_tables: iptables: counters copy to user failed while replacing table
[  127.775807][ T9809] C: renamed from lo (while UP)
[  127.789116][ T9809] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  128.023261][ T9823] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  128.035577][ T9819] virtio_blk virtio1: 1/0/0 default/read/poll queues
[  128.043872][ T9819] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  128.153073][ T9819] syz.2.1102 (9819) used greatest stack depth: 19520 bytes left
[  128.246969][ T9836] syzkaller0: entered promiscuous mode
[  128.246980][ T9836] syzkaller0: entered allmulticast mode
[  128.454719][ T9843] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  128.487884][ T9845] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  128.594682][ T9857] netlink: zone id is out of range
[  128.594745][ T9857] netlink: zone id is out of range
[  128.624693][ T9863] IPVS: Unknown mcast interface: macsec0
[  128.807105][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.870662][ T9879] netlink: 'syz.2.1119': attribute type 1 has an invalid length.
[  128.904688][ T9879] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.922893][ T9879] bond3: (slave veth0_to_bond): making interface the new active one
[  128.925202][ T9879] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  128.929034][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.934838][ T9879] bond3: entered promiscuous mode
[  128.934855][ T9879] veth0_to_bond: entered promiscuous mode
[  128.934990][ T9879] bond3: entered allmulticast mode
[  128.934998][ T9879] veth0_to_bond: entered allmulticast mode
[  128.956246][ T9879] macvlan2: entered promiscuous mode
[  128.956266][ T9879] macvlan2: entered allmulticast mode
[  128.960894][ T9879] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  128.966540][ T9879] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  129.003299][ T9880] macvlan2: entered promiscuous mode
[  129.003321][ T9880] macvlan2: entered allmulticast mode
[  129.005196][ T9880] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  129.012603][ T9880] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  129.048297][   T13] bond0: (slave bond_slave_0): interface is now down
[  129.048318][   T13] bond0: (slave bond_slave_1): interface is now down
[  129.051789][   T13] bond0: now running without any active interface!
[  129.052716][   T68] bridge0: port 3(bond0) entered disabled state
[  129.291808][ T9903] syz.1.1126 (9903) used greatest stack depth: 18184 bytes left
[  129.528238][ T9911] bond3: left promiscuous mode
[  129.528261][ T9911] veth0_to_bond: left promiscuous mode
[  129.529402][ T9911] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.712017][   T34] audit: type=1804 audit(1791395522.073:2): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1132" name="/newroot/407/cgroup.controllers" dev="tmpfs" ino=2176 res=1 errno=0
[  129.712057][   T34] audit: type=1800 audit(1791395522.073:3): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1132" name="cgroup.controllers" dev="tmpfs" ino=2176 res=0 errno=0
[  130.581465][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581465][ T9995] Use struct sctp_sack_info instead
[  130.581490][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581490][ T9995] Use struct sctp_sack_info instead
[  130.581507][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581507][ T9995] Use struct sctp_sack_info instead
[  130.581523][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581523][ T9995] Use struct sctp_sack_info instead
[  130.581538][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581538][ T9995] Use struct sctp_sack_info instead
[  130.581553][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581553][ T9995] Use struct sctp_sack_info instead
[  130.581568][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581568][ T9995] Use struct sctp_sack_info instead
[  130.581582][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581582][ T9995] Use struct sctp_sack_info instead
[  130.581597][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581597][ T9995] Use struct sctp_sack_info instead
[  130.581612][ T9995] sctp: [Deprecated]: syz.1.1154 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.581612][ T9995] Use struct sctp_sack_info instead
[  130.759055][T10010] net_ratelimit: 150 callbacks suppressed
[  130.759072][T10010] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  130.759093][T10010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.809614][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.810340][ T5662] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  130.920668][T10022] netlink: 'syz.1.1162': attribute type 2 has an invalid length.
[  131.026345][T10029] netlink: 'syz.0.1165': attribute type 42 has an invalid length.
[  131.047240][T10029] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  131.047240][T10029] Please contact the netfilter-devel mailing list or update your nftables rules.
[  131.111964][ T5602] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  131.128241][T10034] syzkaller1: entered promiscuous mode
[  131.128257][T10034] syzkaller1: entered allmulticast mode
[  131.606992][T10063] __nla_validate_parse: 141 callbacks suppressed
[  131.607007][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'.
[  131.809823][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  131.973276][T10085] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1172'.
[  132.010058][T10084] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1174'.
[  132.016325][T10082] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  132.147198][T10090] netlink: 'syz.1.1175': attribute type 1 has an invalid length.
[  132.148469][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'.
[  132.215278][T10089] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  132.287026][ T5594] Bluetooth: hci0: command 0x0419 tx timeout
[  132.288116][ T4988] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  132.360833][T10090] bridge5: entered promiscuous mode
[  132.360851][T10090] bridge5: entered allmulticast mode
[  132.364397][T10090] bond5: (slave bridge5): making interface the new active one
[  132.364855][T10090] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  132.396182][T10103] netlink: 'syz.2.1177': attribute type 15 has an invalid length.
[  132.396198][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'.
[  132.429618][ T5700] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  132.429647][ T5700] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  132.429659][ T5700] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  132.429672][ T5700] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  132.624830][T10125] bond3 (unregistering): Released all slaves
[  132.719128][T10135] netlink: 'syz.2.1187': attribute type 10 has an invalid length.
[  132.752238][T10135] team0 (unregistering): Port device team_slave_0 removed
[  132.778649][T10135] team0 (unregistering): Port device team_slave_1 removed
[  132.794589][T10135] team0 (unregistering): Port device bridge1 removed
[  132.816904][T10135] team0 (unregistering): Port device bridge2 removed
[  132.859704][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  132.979933][T10135] team0 (unregistering): Port device bridge3 removed
[  132.994171][T10135] team0 (unregistering): Port device bridge4 removed
[  133.014454][T10135] team0 (unregistering): Port device bridge5 removed
[  133.031958][T10135] team0 (unregistering): Port device bridge6 removed
[  133.041455][T10135] team0 (unregistering): Port device bridge7 removed
[  133.051155][T10135] team0 (unregistering): Port device bridge8 removed
[  133.061527][T10135] team0 (unregistering): Port device bridge9 removed
[  133.074312][T10135] team0 (unregistering): Port device bridge10 removed
[  133.085833][T10135] team0 (unregistering): Port device bridge11 removed
[  133.096007][T10135] team0 (unregistering): Port device bridge12 removed
[  133.110982][T10135] team0 (unregistering): Port device bridge13 removed
[  133.128495][T10135] team0 (unregistering): Port device bridge14 removed
[  133.143185][T10135] team0 (unregistering): Port device bridge15 removed
[  133.157667][T10135] team0 (unregistering): Port device bridge16 removed
[  133.163908][T10135] team0 (unregistering): Port device bridge17 removed
[  133.178541][T10135] team0 (unregistering): Port device bridge18 removed
[  133.188798][T10135] team0 (unregistering): Port device bridge19 removed
[  133.193947][T10135] team0 (unregistering): Port device bridge20 removed
[  133.200656][T10135] team0 (unregistering): Port device bridge21 removed
[  133.205324][T10135] team0 (unregistering): Port device bridge22 removed
[  133.212720][T10135] team0 (unregistering): Port device bridge23 removed
[  133.223169][T10135] team0 (unregistering): Port device bridge24 removed
[  133.235135][T10135] team0 (unregistering): Port device bridge25 removed
[  133.253549][T10135] team0 (unregistering): Port device bridge26 removed
[  133.273911][T10135] team0 (unregistering): Port device bridge27 removed
[  133.290742][T10135] team0 (unregistering): Port device bridge28 removed
[  133.302524][T10135] team0 (unregistering): Port device bridge29 removed
[  133.315616][T10135] team0 (unregistering): Port device bridge30 removed
[  133.328712][T10135] team0 (unregistering): Port device bridge31 removed
[  133.332730][T10135] team0 (unregistering): Port device bridge32 removed
[  133.343012][T10135] team0 (unregistering): Port device bridge33 removed
[  133.545413][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'.
[  133.545434][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  133.545452][T10164] netlink: 'syz.2.1193': attribute type 19 has an invalid length.
[  133.545460][T10164] netlink: 'syz.2.1193': attribute type 20 has an invalid length.
[  133.555589][ T5811] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  133.555630][ T5811] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  133.555651][ T5811] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  133.565794][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'.
[  133.565809][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  133.565827][T10165] netlink: 'syz.2.1193': attribute type 19 has an invalid length.
[  133.565835][T10165] netlink: 'syz.2.1193': attribute type 20 has an invalid length.
[  133.596305][T10159] syzkaller0: entered promiscuous mode
[  133.596325][T10159] syzkaller0: entered allmulticast mode
[  133.617123][ T5811] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  133.629639][T10171] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  133.734585][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1196'.
[  133.780099][T10175] syzkaller0: entered promiscuous mode
[  133.780126][T10175] syzkaller0: entered allmulticast mode
[  133.897788][T10187] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  134.367773][ T5594] Bluetooth: hci0: command 0x0419 tx timeout
[  134.367821][ T4988] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  134.542536][T10219] gretap1: entered allmulticast mode
[  134.665840][T10233] netlink: 'syz.2.1213': attribute type 3 has an invalid length.
[  134.665969][T10233] netlink: 'syz.2.1213': attribute type 3 has an invalid length.
[  134.834531][T10243] netlink: 'syz.0.1216': attribute type 10 has an invalid length.
[  134.865419][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  134.873851][T10243] team0: Port device netdevsim1 added
[  134.881726][T10243] netlink: 'syz.0.1216': attribute type 10 has an invalid length.
[  134.900303][T10243] team0: Port device netdevsim1 removed
[  134.909953][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  134.913348][T10243] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  135.114049][T10266] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  135.425935][T10295] syzkaller0: entered promiscuous mode
[  135.425957][T10295] syzkaller0: entered allmulticast mode
[  135.595047][T10317] pim6reg99999999: entered allmulticast mode
[  135.813083][T10332] net_ratelimit: 2 callbacks suppressed
[  135.813103][T10332] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  135.885898][T10338] tipc: Enabled bearer <eth:hsr0>, priority 20
[  136.163256][T10355] syzkaller0: entered promiscuous mode
[  136.163279][T10355] syzkaller0: entered allmulticast mode
[  136.447005][ T4988] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  136.448367][ T4988] Bluetooth: hci0: command 0x0419 tx timeout
[  136.617282][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.739962][T10369] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  136.826233][T10374] 0: reclassify loop, rule prio 0, protocol 03
[  137.010189][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.010982][T10149] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  137.130603][T10387] ovs-dp0: entered promiscuous mode
[  137.271526][T10395] __nla_validate_parse: 19 callbacks suppressed
[  137.271537][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'.
[  137.296343][ T5594] Bluetooth: hci2: Malformed Event: 0x13
[  137.331168][T10150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.481259][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.493024][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.526631][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.690837][T10423] netlink: 'syz.1.1276': attribute type 1 has an invalid length.
[  137.722903][T10423] 8021q: adding VLAN 0 to HW filter on device bond7
[  137.746403][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  137.752524][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  137.765054][T10423] bond7: (slave geneve2): making interface the new active one
[  137.771940][T10423] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  137.956305][T10453] Bluetooth: hci0: unsupported parameter 5135
[  137.956321][T10453] Bluetooth: hci0: unsupported parameter 8192
[  137.956328][T10453] Bluetooth: hci0: unsupported parameter 5135
[  137.956335][T10453] Bluetooth: hci0: unsupported parameter 8192
[  138.104172][T10461] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1286'.
[  138.133085][T10463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.133109][T10463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.169569][T10461] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1286'.
[  138.642752][T10489] netlink: 'syz.2.1295': attribute type 11 has an invalid length.
[  138.737162][T10496] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1298'.
[  138.737186][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'.
[  138.737201][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'.
[  138.737213][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'.
[  139.178201][T10531] netlink: 'syz.1.1308': attribute type 10 has an invalid length.
[  139.198358][T10535] ip6tnl0: entered promiscuous mode
[  139.278271][  T128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  139.295009][T10537] 8021q: adding VLAN 0 to HW filter on device bond5
[  139.296516][T10537] 8021q: adding VLAN 0 to HW filter on device bond6
[  139.396996][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  139.553187][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'.
[  139.762792][  T128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  139.779171][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779215][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779233][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779286][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779304][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779319][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779336][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779353][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779370][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779386][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779403][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779420][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779437][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779455][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779472][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779488][T10563] IPVS: Unknown mcast interface: macsec0
[  139.779506][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780088][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780185][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780204][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780221][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780262][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780289][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780307][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780323][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780340][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780357][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780374][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780392][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780408][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780426][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780442][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780459][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780477][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780494][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780510][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780526][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780542][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780555][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780568][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780584][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780600][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780614][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780630][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780645][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780660][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780671][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780689][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780705][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780721][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780733][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780745][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780760][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780776][T10563] IPVS: Unknown mcast interface: macsec0
[  139.780792][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781320][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781341][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781357][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781374][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781390][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781405][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781421][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781437][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781452][T10563] IPVS: Unknown mcast interface: macsec0
[  139.781468][T10563] IPVS: Unknown mcast interface: macsec0
[  139.896936][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.061634][  T128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  140.373046][T10555] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  140.847720][ T5811] net_ratelimit: 77 callbacks suppressed
[  140.847737][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.848187][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.048596][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.050652][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.328245][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.408386][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.455312][T10624] ip6tnl2: entered allmulticast mode
[  141.456467][ T5815] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  141.456639][ T5815] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  141.478513][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  141.516502][T10628] netlink: 'syz.1.1335': attribute type 1 has an invalid length.
[  141.651437][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.727117][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  141.809881][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  142.006575][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.007344][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.166905][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.114176][T10732] wg2 speed is unknown, defaulting to 1000
[  143.114235][T10732] wg2 speed is unknown, defaulting to 1000
[  143.114544][T10732] wg2 speed is unknown, defaulting to 1000
[  143.114919][T10732] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  143.114931][T10732] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  143.114946][T10732] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  143.122513][T10732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  143.149960][T10732] wg2 speed is unknown, defaulting to 1000
[  143.152163][T10732] wg2 speed is unknown, defaulting to 1000
[  143.152964][T10732] wg2 speed is unknown, defaulting to 1000
[  143.433219][T10739] 8021q: adding VLAN 0 to HW filter on device bond8
[  144.428600][T10747] IPVS: Unknown mcast interface: macsec0
[  144.447250][ T5702] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  144.447265][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  144.447770][ T5702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.442995][T10693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.647450][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  145.743374][T10774] __nla_validate_parse: 9 callbacks suppressed
[  145.743385][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'.
[  145.868751][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'.
[  145.869115][T10792] sctp: [Deprecated]: syz.0.1368 (pid 10792) Use of int in maxseg socket option.
[  145.869115][T10792] Use struct sctp_assoc_value instead
[  146.086440][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'.
[  146.396939][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  146.452997][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'.
[  146.512533][T10825] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1379'.
[  146.554813][T10827] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  146.609748][    C1] net_ratelimit: 25 callbacks suppressed
[  146.609770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.610052][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.636989][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.637104][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.671617][T10836] x_tables: duplicate underflow at hook 1
[  146.675430][T10834] netlink: 'syz.2.1382': attribute type 25 has an invalid length.
[  146.675942][T10835] netlink: NAT attribute has 4 unknown bytes
[  146.675964][T10835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.852403][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.943757][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.008803][T10846] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  147.060389][T10852] xt_socket: unknown flags 0x8
[  147.421295][T10885] 8021q: VLANs not supported on ip6gre0
[  147.422363][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.163810][T10923] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1397'.
[  148.408096][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'.
[  148.471786][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'.
[  148.549868][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  148.566437][T10956] IPVS: set_ctl: invalid protocol: 255 172.30.1.2:20000
[  148.723370][T10964] netlink: 'syz.1.1413': attribute type 7 has an invalid length.
[  149.677889][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  149.708243][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.127698][T11011] netlink: 'syz.0.1430': attribute type 1 has an invalid length.
[  150.177583][T11009] syzkaller0: entered promiscuous mode
[  150.177608][T11009] syzkaller0: entered allmulticast mode
[  150.535162][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  150.612817][ T5702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  151.745459][T11020] net_ratelimit: 4 callbacks suppressed
[  151.745479][T11020] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  151.928715][T11029] __nla_validate_parse: 9 callbacks suppressed
[  151.928727][T11029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1437'.
[  152.115075][T11052] Cannot find set identified by id 65535 to match
[  152.309402][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'.
[  152.314704][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'.
[  152.315686][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'.
[  152.329507][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  152.599075][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1450'.
[  152.602655][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'.
[  152.683551][T11096] netlink: 'syz.1.1452': attribute type 2 has an invalid length.
[  152.683564][T11096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'.
[  152.869006][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'.
[  152.870285][T11112] netlink: zone id is out of range
[  152.870335][T11112] netlink: zone id is out of range
[  152.870438][T11112] netlink: zone id is out of range
[  152.870476][T11112] netlink: zone id is out of range
[  152.870481][T11112] netlink: zone id is out of range
[  152.870487][T11112] netlink: zone id is out of range
[  152.870492][T11112] netlink: zone id is out of range
[  152.870496][T11112] netlink: zone id is out of range
[  152.870500][T11112] netlink: zone id is out of range
[  153.051821][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'.
[  154.103736][   T25] wg2 speed is unknown, defaulting to 1000
[  154.182381][T11145] xt_hashlimit: overflow, try lower: 0/0
[  154.606901][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  154.620595][T11167] syzkaller0: entered promiscuous mode
[  154.620613][T11167] syzkaller0: entered allmulticast mode
[  154.853397][T11175] xt_l2tp: invalid flags combination: 8
[  154.930995][ T5702] hid-generic 0005:0008:0009.0002: item fetching failed at offset 2/3
[  154.932909][ T5702] hid-generic 0005:0008:0009.0002: probe with driver hid-generic failed with error -22
[  155.234108][T11186] batman_adv: batadv0: Adding interface: syzkaller0
[  155.234120][T11186] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  155.234133][T11186] batman_adv: batadv0: Interface activated: syzkaller0
[  155.357763][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.380411][T11201] bridge5: left promiscuous mode
[  155.396327][T11184] batman_adv: batadv0: Interface deactivated: syzkaller0
[  155.407554][ T5663] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  155.427233][  T128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.555922][T11184] batman_adv: batadv0: Removing interface: syzkaller0
[  155.627112][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  155.729375][T11221] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  155.858373][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.878975][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  156.609466][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.767922][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  156.926257][T11274] net_ratelimit: 108 callbacks suppressed
[  156.926271][T11274] 0: reclassify loop, rule prio 0, protocol 03
[  156.981760][T11281] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  157.004606][T11276] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  157.186269][T11293] ip6tnl0: left promiscuous mode
[  157.268526][  T128] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  157.270117][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.296154][T11293] 8021q: adding VLAN 0 to HW filter on device bond4
[  157.405911][T11301] __nla_validate_parse: 9 callbacks suppressed
[  157.405927][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'.
[  157.737208][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.818389][ T5061] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  157.936490][T11355] netlink: 7120 bytes leftover after parsing attributes in process `syz.2.1518'.
[  157.940840][T11353] netlink: 7120 bytes leftover after parsing attributes in process `syz.2.1518'.
[  158.298878][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'.
[  158.473215][T11375] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  158.746272][   T34] audit: type=1107 audit(1791395551.103:4): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  159.091151][T11393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  159.480481][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'.
[  159.577610][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'.
[  159.591302][T11409] bond3: option broadcast_neighbor: invalid value (3)
[  159.592256][T11409] bond3 (unregistering): Released all slaves
[  159.754009][T11423] netlink: 'syz.1.1538': attribute type 1 has an invalid length.
[  159.909988][T11441] syzkaller1: entered promiscuous mode
[  159.910003][T11441] syzkaller1: entered allmulticast mode
[  160.067942][T11461] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  160.109090][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'.
[  160.109105][T11465] openvswitch: netlink: Flow key attr not present in new flow.
[  160.124268][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'.
[  160.125508][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'.
[  160.605370][T11507] 8021q: adding VLAN 0 to HW filter on device bond5
[  160.623366][T11507] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.626461][T11507] bond5: (slave bond0): making interface the new active one
[  160.633658][T11507] bond5: (slave bond0): Enslaving as an active interface with an up link
[  161.552671][ T5702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  161.598713][T11550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.599803][T11550] syzkaller0: entered promiscuous mode
[  161.599814][T11550] syzkaller0: entered allmulticast mode
[  161.614440][   T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  161.620107][T11550] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  161.949125][    C0] net_ratelimit: 6 callbacks suppressed
[  161.949149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.056842][ T5702] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.139954][T11574] 0: reclassify loop, rule prio 0, protocol 03
[  162.282357][T11582] pim6reg: entered allmulticast mode
[  162.286595][T11581] netlink: 'syz.1.1575': attribute type 3 has an invalid length.
[  162.458052][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.459931][T11603] wg2 speed is unknown, defaulting to 1000
[  162.485734][T11602] wg2 speed is unknown, defaulting to 1000
[  162.528481][ T5702] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  162.669992][T11611] 0: reclassify loop, rule prio 0, protocol 03
[  162.685730][T11619] __nla_validate_parse: 27 callbacks suppressed
[  162.685745][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1586'.
[  162.688335][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'.
[  162.688355][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1586'.
[  162.688361][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'.
[  162.770038][T10149] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  162.831566][T11623] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  162.832818][T11623] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1587'.
[  162.833059][T11623] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  162.844221][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'.
[  162.855742][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'.
[  162.944675][T11633] IPVS: Error connecting to the multicast addr
[  163.004060][T11631] wg2 speed is unknown, defaulting to 1000
[  163.196392][T11644] 0: reclassify loop, rule prio 0, protocol 03
[  163.320531][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'.
[  163.370321][T11654] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1597'.
[  163.406381][T11659] netlink: 'syz.1.1601': attribute type 1 has an invalid length.
[  163.406405][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.482699][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  163.589765][T11675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.589785][T11675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.639341][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.684483][T11675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.684503][T11675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.749696][T11675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.749717][T11675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.821878][T11675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.821909][T11675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.937038][T10074] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.937067][T10074] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.977595][ T5700] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.979682][ T5700] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.987699][ T5700] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.987721][ T5700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.989604][T10074] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.989623][T10074] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.080960][T11703] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  164.353441][T11730] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[  164.467638][T11738] can: request_module (can-proto-3) failed.
[  164.479754][T11743] veth1_to_team: entered allmulticast mode
[  164.692164][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.293263][T11780] bridge0: port 4(veth0) entered blocking state
[  165.293406][T11780] bridge0: port 4(veth0) entered disabled state
[  165.293553][T11780] veth0: entered allmulticast mode
[  165.307562][T11780] veth0: entered promiscuous mode
[  165.308206][T11780] bridge0: port 4(veth0) entered blocking state
[  165.308291][T11780] bridge0: port 4(veth0) entered forwarding state
[  165.607907][T11797] netlink: 'syz.0.1643': attribute type 14 has an invalid length.
[  165.729135][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.743362][T11807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.847216][T11841] 0: reclassify loop, rule prio 0, protocol 03
[  168.886148][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886148][T11845] Use struct sctp_sack_info instead
[  168.886195][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886195][T11845] Use struct sctp_sack_info instead
[  168.886224][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886224][T11845] Use struct sctp_sack_info instead
[  168.886251][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886251][T11845] Use struct sctp_sack_info instead
[  168.886278][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886278][T11845] Use struct sctp_sack_info instead
[  168.886306][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886306][T11845] Use struct sctp_sack_info instead
[  168.886333][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886333][T11845] Use struct sctp_sack_info instead
[  168.886359][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886359][T11845] Use struct sctp_sack_info instead
[  168.886386][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886386][T11845] Use struct sctp_sack_info instead
[  168.886415][T11845] sctp: [Deprecated]: syz.0.1652 (pid 11845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.886415][T11845] Use struct sctp_sack_info instead
[  169.182310][T11871] __nla_validate_parse: 9 callbacks suppressed
[  169.182332][T11871] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1656'.
[  169.463975][T11894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1659'.
[  169.538998][T11899] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1660'.
[  169.590855][T11890] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1659'.
[  169.590904][T11890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1659'.
[  169.680515][T11912] netlink: 'syz.1.1663': attribute type 1 has an invalid length.
[  169.705442][T11912] bond9: entered promiscuous mode
[  169.705669][T11912] 8021q: adding VLAN 0 to HW filter on device bond9
[  169.749580][T11912] macvtap0: entered allmulticast mode
[  169.767860][T11912] bond9: (slave bridge9): making interface the new active one
[  169.767876][T11912] bridge9: entered promiscuous mode
[  169.768709][T11912] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  169.840504][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'.
[  169.879944][T11927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'.
[  169.898120][T11920] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  169.912825][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  170.069815][T11945] netlink: 'syz.1.1673': attribute type 2 has an invalid length.
[  170.069836][T11945] netlink: 'syz.1.1673': attribute type 1 has an invalid length.
[  170.095835][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  170.228828][T11950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.331906][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'.
[  170.351996][T11965] bond10: option arp_validate: invalid value (1048579)
[  170.738222][T11965] bond10 (unregistering): Released all slaves
[  171.171182][T11967] bond10: option arp_validate: invalid value (1048579)
[  171.172986][T11967] bond10 (unregistering): Released all slaves
[  171.247096][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  171.460025][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  171.460490][   T33] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  171.521428][T12000] netlink: 'syz.0.1688': attribute type 5 has an invalid length.
[  171.553056][T12006] ip_tables: iptables: counters copy to user failed while replacing table
[  171.565540][T12006] sctp: [Deprecated]: syz.0.1690 (pid 12006) Use of int in max_burst socket option.
[  171.565540][T12006] Use struct sctp_assoc_value instead
[  171.695167][T12012] netlink: zone id is out of range
[  171.695179][T12012] netlink: zone id is out of range
[  171.695182][T12012] netlink: zone id is out of range
[  171.695186][T12012] netlink: zone id is out of range
[  171.695189][T12012] netlink: zone id is out of range
[  171.793772][T12009] tipc: Resetting bearer <eth:syz_tun>
[  171.834067][T12009] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.834668][T12009] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.283611][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.332507][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.751290][T12009] gretap1: left allmulticast mode
[  172.751438][T12009] tipc: Resetting bearer <eth:syzkaller0>
[  172.753328][T12009] syzkaller0: left promiscuous mode
[  172.753342][T12009] syzkaller0: left allmulticast mode
[  172.767400][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.768476][ T5700] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.768495][ T5700] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.768509][ T5700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.983879][T12038] netlink: 'syz.0.1700': attribute type 4 has an invalid length.
[  173.218125][T12060] pim6reg: entered allmulticast mode
[  173.573865][T12083] netlink: 'syz.0.1719': attribute type 3 has an invalid length.
[  173.984529][    C1] net_ratelimit: 504 callbacks suppressed
[  173.984550][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.985439][ T5648] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  174.377827][   T33] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  174.767958][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  176.579562][T12085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.674876][T12128] __nla_validate_parse: 10 callbacks suppressed
[  176.674895][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'.
[  176.801156][T12146] netlink: 'syz.2.1730': attribute type 5 has an invalid length.
[  176.801168][T12146] netlink: 'syz.2.1730': attribute type 9 has an invalid length.
[  176.801174][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'.
[  177.003280][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'.
[  177.226976][T12179] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1739'.
[  177.227123][T12179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'.
[  177.257674][T12122] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.263212][T12175] 8021q: adding VLAN 0 to HW filter on device eth0
[  177.264018][T12175] 8021q: adding VLAN 0 to HW filter on device eth1
[  177.264970][T12175] 8021q: adding VLAN 0 to HW filter on device eth2
[  177.266012][T12175] 8021q: adding VLAN 0 to HW filter on device eth3
[  177.266601][T12175] bond9: entered allmulticast mode
[  177.266610][T12175] bridge9: entered allmulticast mode
[  177.273091][T12175] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  177.290994][T10149] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  177.359731][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'.
[  177.424187][T12195] x_tables: duplicate underflow at hook 1
[  177.445066][T12193] nbd: couldn't find a device at index 0
[  177.473743][T12199] netlink: 'syz.1.1747': attribute type 1 has an invalid length.
[  177.473771][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'.
[  177.473897][T12199] netlink: 'syz.1.1747': attribute type 1 has an invalid length.
[  177.473906][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'.
[  177.492015][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1748'.
[  177.492038][T12202] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  177.591264][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'.
[  177.659447][T12218] vlan5: entered promiscuous mode
[  177.659541][T12218] team0: entered promiscuous mode
[  177.659547][T12218] team_slave_0: entered promiscuous mode
[  177.659663][T12218] team_slave_1: entered promiscuous mode
[  178.051712][T12121] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  178.144685][T12243] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  178.280855][T12247] bond3: option arp_all_targets: invalid value (3)
[  178.286111][T12247] bond3 (unregistering): Released all slaves
[  178.288014][T12121] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.362228][T12247] bond3: option arp_all_targets: invalid value (3)
[  178.363757][T12247] bond3 (unregistering): Released all slaves
[  178.461484][T12247] bond3: option arp_all_targets: invalid value (3)
[  178.493750][T12247] bond3 (unregistering): Released all slaves
[  178.564827][T12247] bond3: option arp_all_targets: invalid value (3)
[  178.579044][T12247] bond3 (unregistering): Released all slaves
[  178.656164][T12259] syzkaller0: entered promiscuous mode
[  178.656179][T12259] syzkaller0: entered allmulticast mode
[  178.688137][T12247] bond3: option arp_all_targets: invalid value (3)
[  178.695282][T12247] bond3 (unregistering): Released all slaves
[  179.971495][T12247] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  180.067529][T12286] netlink: 'syz.0.1770': attribute type 8 has an invalid length.
[  180.548232][T12327] bridge0: entered promiscuous mode
[  180.551953][T12327] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.553410][T12327] 8021q: adding VLAN 0 to HW filter on device team0
[  180.578037][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.606456][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.609134][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.613161][T12327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.613177][T12327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.616333][T12327] veth1_vlan: left promiscuous mode
[  180.617204][T12327] veth0_vlan: left promiscuous mode
[  180.618244][T12327] veth0_vlan: entered promiscuous mode
[  180.619999][T12327] veth1_vlan: entered promiscuous mode
[  180.630985][T12327] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  180.633148][T12327] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  180.633769][T12327] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  180.634508][T12327] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  180.636012][T12327] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.636636][T12327] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.673067][T12327] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  180.696225][T12326] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  180.697389][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.707796][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.708326][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.709057][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.723503][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.723607][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.735203][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.735280][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.009275][ T5594] Bluetooth: hci1: command 0x0406 tx timeout
[  181.165735][T12376] Bluetooth: hci0: unsupported parameter 5135
[  181.165755][T12376] Bluetooth: hci0: unsupported parameter 8192
[  181.165765][T12376] Bluetooth: hci0: unsupported parameter 5135
[  181.165773][T12376] Bluetooth: hci0: unsupported parameter 8192
[  181.179989][T12375] 0: reclassify loop, rule prio 0, protocol 03
[  181.380121][T10149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.414484][T10149] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.471461][T12394] tipc: Resetting bearer <eth:syz_tun>
[  181.474283][T12394] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.476281][T12394] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.644423][T12394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.657844][T12394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.937311][ T5700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.937338][ T5700] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.937353][ T5700] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.937366][ T5700] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.008209][T12118] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  182.042529][T12419] __nla_validate_parse: 19 callbacks suppressed
[  182.042542][T12419] netlink: 271 bytes leftover after parsing attributes in process `syz.1.1802'.
[  182.107936][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1805'.
[  182.184801][T12435] netlink: 'syz.2.1808': attribute type 7 has an invalid length.
[  182.184815][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'.
[  182.184830][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'.
[  182.219437][T12434] bridge0: left promiscuous mode
[  182.230406][T12434] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.234668][T12434] 8021q: adding VLAN 0 to HW filter on device team0
[  182.250065][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.275233][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.276461][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.281268][T12434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.281279][T12434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.285618][T12434] veth1_vlan: left promiscuous mode
[  182.286517][T12434] veth0_vlan: left promiscuous mode
[  182.288393][T12434] veth0_vlan: entered promiscuous mode
[  182.289523][T12434] veth1_vlan: entered promiscuous mode
[  182.296290][T12434] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  182.296833][T12434] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  182.297639][T12434] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  182.298041][T12434] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  182.299227][T12434] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.299960][T12434] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.322097][T12434] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  182.332817][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.332866][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.342650][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.342693][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.384688][T12118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.424184][T10074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.424208][T10074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.457110][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.466839][ T5700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.631506][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'.
[  182.652498][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'.
[  182.671239][T12461] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  182.685240][T12461] openvswitch: netlink: Message has 8 unknown bytes.
[  182.782215][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1819'.
[  183.181541][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1823'.
[  183.332868][T12491] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1826'.
[  183.333717][T12491] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1826'.
[  183.799667][T12514] netlink: 'syz.1.1833': attribute type 11 has an invalid length.
[  183.841495][T12513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.626428][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  184.699420][T12549] bond9: left promiscuous mode
[  184.709433][T12118] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  184.926939][T12118] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.127202][T12118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  185.430444][T12590] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.430724][T12591] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.060391][T12612] Bluetooth: hci0: unsupported parameter 5135
[  186.060414][T12612] Bluetooth: hci0: unsupported parameter 8192
[  186.060422][T12612] Bluetooth: hci0: unsupported parameter 5135
[  186.060430][T12612] Bluetooth: hci0: unsupported parameter 8192
[  186.678569][T12628] netlink: 'syz.1.1865': attribute type 21 has an invalid length.
[  186.678628][T12628] netlink: 'syz.1.1865': attribute type 5 has an invalid length.
[  186.679388][T12628] netlink: zone id is out of range
[  186.679393][T12628] netlink: zone id is out of range
[  186.679396][T12628] netlink: zone id is out of range
[  186.679399][T12628] netlink: zone id is out of range
[  186.679402][T12628] netlink: zone id is out of range
[  186.679404][T12628] netlink: zone id is out of range
[  186.679410][T12628] netlink: zone id is out of range
[  186.679413][T12628] netlink: zone id is out of range
[  186.679415][T12628] netlink: zone id is out of range
[  186.679418][T12628] netlink: zone id is out of range
[  187.206091][T12648] __nla_validate_parse: 13 callbacks suppressed
[  187.206111][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'.
[  187.206161][T12648] netlink: 'syz.2.1871': attribute type 2 has an invalid length.
[  187.206170][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1871'.
[  187.393567][T12655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.414937][T12655] ipt_rpfilter: unknown options
[  187.991107][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'.
[  188.032876][T12118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.099387][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.143765][T12678] vlan2: entered promiscuous mode
[  188.143779][T12678] bridge0: entered promiscuous mode
[  188.294162][T12685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1881'.
[  188.298105][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.575320][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  188.633198][T12118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.672890][T12695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1885'.
[  188.673510][T12695] bridge_slave_0: left allmulticast mode
[  188.673528][T12695] bridge_slave_0: left promiscuous mode
[  188.676292][T12695] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.783547][T12698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1886'.
[  188.958783][T12709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1890'.
[  189.218915][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  189.448242][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'.
[  189.513901][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.550162][ T5663] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.569830][ T5663] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  190.185643][T12779] netlink: 'syz.0.1908': attribute type 1 has an invalid length.
[  190.459272][ T5663] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  190.690788][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.691089][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.691317][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.691569][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.691791][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.709310][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.709500][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.709633][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.709802][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.709930][T12798] xt_limit: Overflow, try lower: 16777216/0
[  190.855408][T12813] syzkaller0: entered promiscuous mode
[  190.855457][T12813] syzkaller0: entered allmulticast mode
[  191.316604][T12852] netlink: 'syz.1.1929': attribute type 1 has an invalid length.
[  191.340973][T12852] 8021q: adding VLAN 0 to HW filter on device bond10
[  191.378203][T12852] bond11 (unregistering): Released all slaves
[  191.474986][T12862] syzkaller1: entered promiscuous mode
[  191.475006][T12862] syzkaller1: entered allmulticast mode
[  192.500949][T12921] ipt_ah: unknown flags FF
[  192.503667][T12921] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  192.569478][T12923] __nla_validate_parse: 9 callbacks suppressed
[  192.569491][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'.
[  192.824760][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'.
[  192.912902][T12961] net_ratelimit: 84 callbacks suppressed
[  192.912921][T12961] ip_tables: iptables: counters copy to user failed while replacing table
[  192.939140][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'.
[  193.025256][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'.
[  193.349807][T13010] bond6: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  193.349826][T13010] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  193.350240][T13010] bond6: entered allmulticast mode
[  193.366221][T13010] tun3: tun_chr_ioctl cmd 1074812117
[  193.366290][T13010] tun3: tun_chr_ioctl cmd 35604
[  193.519047][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'.
[  193.655963][   T34] audit: type=1107 audit(1791395586.013:5): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='x{%V'_x䭙|-r5cy@	n='
[  193.914043][T13066] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1969'.
[  193.914121][T13066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'.
[  193.968409][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.050272][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  194.082528][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  194.232862][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'.
[  194.249894][T13076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'.
[  194.289456][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.318019][T13080] netlink: 'syz.2.1976': attribute type 2 has an invalid length.
[  194.328764][T13080] : entered promiscuous mode
[  194.437975][T13086] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  194.484571][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  194.609262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.613634][T12118] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  194.690226][T13094] vlan2: left promiscuous mode
[  194.690248][T13094] bridge0: left promiscuous mode
[  194.695641][T13094] 8021q: adding VLAN 0 to HW filter on device bond6
[  194.859885][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.913133][ T5648] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.920833][ T5648] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  194.997213][T12117] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  195.102304][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.122237][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  195.147598][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.306635][T13135] netlink: 'syz.1.1995': attribute type 62 has an invalid length.
[  195.537947][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  195.567980][ T5594] Bluetooth: hci2: command 0x0406 tx timeout
[  196.057763][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.349308][T13188] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  196.497480][T13194] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  196.571778][T13205] 8021q: VLANs not supported on ip6_vti0
[  196.686212][T13214] netlink: zone id is out of range
[  196.832157][T13233] netlink: 'syz.2.2021': attribute type 1 has an invalid length.
[  196.861087][T13233] bond7: entered promiscuous mode
[  196.863538][T13233] 8021q: adding VLAN 0 to HW filter on device bond7
[  196.892172][T13233] bond7: (slave bridge37): making interface the new active one
[  196.892187][T13233] bridge37: entered promiscuous mode
[  196.892898][T13233] bond7: (slave bridge37): Enslaving as an active interface with an up link
[  197.438503][T13284] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  197.555723][T13288] xt_hashlimit: overflow, try lower: 0/0
[  197.630153][T13292] syz_tun: entered allmulticast mode
[  197.630388][T13292] gretap0: entered allmulticast mode
[  197.666276][T13295] __nla_validate_parse: 15 callbacks suppressed
[  197.666289][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2039'.
[  197.710465][T13300] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2040'.
[  197.712160][T13300] netlink: 'syz.2.2040': attribute type 3 has an invalid length.
[  197.712178][T13300] netlink: 'syz.2.2040': attribute type 3 has an invalid length.
[  197.766510][T13302] netlink: 'syz.2.2041': attribute type 1 has an invalid length.
[  197.766533][T13302] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2041'.
[  197.908247][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'.
[  198.202780][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'.
[  198.302384][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'.
[  198.318089][T13353] batadv0: entered promiscuous mode
[  198.319512][T13353] macsec0: entered promiscuous mode
[  198.319965][T13353] macsec0: entered allmulticast mode
[  198.319973][T13353] batadv0: entered allmulticast mode
[  198.322546][T13353] 8021q: adding VLAN 0 to HW filter on device macsec0
[  198.339844][T13353] batadv0: left allmulticast mode
[  198.339950][T13353] batadv0: left promiscuous mode
[  198.811494][T13387] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2066'.
[  198.813902][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'.
[  198.814585][T13387] net_ratelimit: 69 callbacks suppressed
[  198.814593][T13387] openvswitch: netlink: Message has 8 unknown bytes.
[  199.111746][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  200.147158][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'.
[  200.398959][T13428] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0
[  201.298868][T13440] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  201.381326][T13446] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  201.774991][T13464] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  201.921884][T13470] openvswitch: netlink: Duplicate or invalid key (type 0).
[  202.382702][T13498] 0: reclassify loop, rule prio 0, protocol 03
[  202.835119][T13519] bridge_slave_1: left allmulticast mode
[  202.835143][T13519] bridge_slave_1: left promiscuous mode
[  202.835472][T13519] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.844624][T13519] bond0: (slave bond_slave_0): Releasing backup interface
[  202.850727][T13519] bond0: (slave bond_slave_1): Releasing backup interface
[  202.853694][T13519] team_slave_0: left promiscuous mode
[  202.861718][T13519] team0: Port device team_slave_0 removed
[  202.864778][T13519] team_slave_1: left promiscuous mode
[  202.876427][T13519] team0: Port device team_slave_1 removed
[  202.884046][T13519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.884060][T13519] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.893369][T13519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.893381][T13519] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.894503][T13519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  202.911053][T13521] __nla_validate_parse: 8 callbacks suppressed
[  202.911068][T13521] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2109'.
[  203.035111][T13529] 0: reclassify loop, rule prio 0, protocol 03
[  203.044419][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'.
[  203.180384][T13536] tun1: tun_chr_ioctl cmd 1074025675
[  203.180407][T13536] tun1: persist enabled
[  203.180958][T13536] tun1: tun_chr_ioctl cmd 1074025678
[  203.180969][T13536] tun1: group set to 0
[  203.290893][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2117'.
[  203.321439][T13542] syzkaller0: entered promiscuous mode
[  203.321460][T13542] syzkaller0: entered allmulticast mode
[  203.398265][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'.
[  203.428434][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  203.428885][ T5648] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  203.439749][T13547] bond7: left promiscuous mode
[  203.439766][T13547] bridge37: left promiscuous mode
[  203.508382][ T5648] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00
[  203.644687][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  204.067431][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.119171][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2135'.
[  204.124200][T13603] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2135'.
[  204.201020][T13607] bond5: (slave bond0): Releasing active interface
[  204.215387][ T4988] Bluetooth: hci2: link tx timeout
[  204.215410][ T4988] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  204.235495][T13607] batman_adv: batadv0: Interface deactivated: dummy0
[  204.235517][T13607] batman_adv: batadv0: Removing interface: dummy0
[  204.249632][T13607] bridge_slave_0: left allmulticast mode
[  204.249654][T13607] bridge_slave_0: left promiscuous mode
[  204.249818][T13607] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.270826][T13607] bridge_slave_1: left promiscuous mode
[  204.271115][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2136'.
[  204.271125][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'.
[  204.273566][T13607] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.275174][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2136'.
[  204.323654][T13607] bond3: (slave veth0_to_bond): Releasing active interface
[  204.323679][T13607] veth0_to_bond: left allmulticast mode
[  204.347506][T13607] bond0: (slave bond_slave_0): Releasing backup interface
[  204.378304][T13607] bond0: (slave bond_slave_1): Releasing backup interface
[  204.391859][T13607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.391879][T13607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.403624][T13607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  204.475679][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.527498][    C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed
[  204.527519][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  205.166900][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  205.324087][T13676] openvswitch: netlink: VLAN attribute unexpected.
[  205.466432][T13694] netlink: 'syz.2.2159': attribute type 32 has an invalid length.
[  206.288611][ T5594] Bluetooth: hci2: command 0x0406 tx timeout
[  206.711438][T13729] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  207.076068][T13750] syzkaller1: entered promiscuous mode
[  207.076086][T13750] syzkaller1: entered allmulticast mode
[  207.574868][T13770] syzkaller0: entered promiscuous mode
[  207.574886][T13770] syzkaller0: entered allmulticast mode
[  207.612185][T13772] netlink: 'syz.2.2180': attribute type 1 has an invalid length.
[  207.939820][T13801] __nla_validate_parse: 126 callbacks suppressed
[  207.939835][T13801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2187'.
[  208.205398][T13821] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.205420][T13821] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.258601][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'.
[  208.272485][T13829] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.914802][T13831] syzkaller0: entered promiscuous mode
[  208.914822][T13831] syzkaller0: entered allmulticast mode
[  209.179647][T13847] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  209.220348][T13846] netlink: 'syz.0.2199': attribute type 1 has an invalid length.
[  209.239622][T13846] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  209.244627][T13846] netlink: 'syz.0.2199': attribute type 1 has an invalid length.
[  209.421092][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  209.422770][T13869] netlink: 'syz.1.2206': attribute type 20 has an invalid length.
[  209.422784][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'.
[  209.478550][T13869] netlink: 'syz.1.2206': attribute type 20 has an invalid length.
[  209.478569][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'.
[  209.646901][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  209.877674][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  209.906453][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  209.911415][T13893] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  209.948950][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  209.972580][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  210.022220][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'.
[  210.416562][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'.
[  210.655312][T13931] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2220'.
[  210.655369][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2220'.
[  210.688004][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  210.767596][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  210.843349][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2224'.
[  210.863757][T13943] mac80211_hwsim hwsim5 ..c: renamed from wlan1 (while UP)
[  211.362020][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810d33a400: rx timeout, send abort
[  211.364344][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d33a400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  211.543162][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  211.567352][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  211.692754][T13992] netlink: 'syz.0.2228': attribute type 10 has an invalid length.
[  211.722342][T13992] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  212.022981][T14016] syzkaller1: entered promiscuous mode
[  212.023005][T14016] syzkaller1: entered allmulticast mode
[  212.457810][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  212.981331][T14041] veth1_virt_wifi: entered allmulticast mode
[  212.986282][T14041] pimreg: entered allmulticast mode
[  212.989186][T14041] __nla_validate_parse: 36 callbacks suppressed
[  212.989199][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'.
[  213.070023][T14046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.093101][T14038] netlink: 'syz.2.2240': attribute type 10 has an invalid length.
[  213.101928][T14038] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  213.104542][T14040] veth1_virt_wifi: left allmulticast mode
[  213.104631][T14040] pimreg: left allmulticast mode
[  213.235198][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'.
[  213.301978][T14058] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2246'.
[  213.652332][T14077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2249'.
[  213.806414][T14091] syzkaller0: entered promiscuous mode
[  213.806434][T14091] syzkaller0: entered allmulticast mode
[  213.900335][T14104] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2253'.
[  214.043345][T14117] openvswitch: netlink: Message has 4 unknown bytes.
[  214.424880][T14153] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  214.427354][T14150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2262'.
[  214.469945][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[  214.469969][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[  214.470173][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[  214.470186][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[  215.749433][ T5061] ip6_tnl_xmit_ctl: 5 callbacks suppressed
[  215.749451][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.763598][T14195] syzkaller0: left promiscuous mode
[  215.768754][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  216.122750][T14202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.167494][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  216.528311][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.058093][T14216] bond0: (slave veth0_to_bond): Releasing backup interface
[  217.093521][T14216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  218.160810][T14279] Cannot find del_set index 4 as target
[  218.183394][T14277] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  218.249515][T14286] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  218.290031][T14283] netlink: 'syz.1.2299': attribute type 11 has an invalid length.
[  218.784288][T14319] 0: reclassify loop, rule prio 0, protocol 03
[  218.944078][T14321] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  219.518578][T14359] __nla_validate_parse: 4 callbacks suppressed
[  219.518594][T14359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2319'.
[  219.538886][T14359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.539366][T14359] syzkaller0: entered promiscuous mode
[  219.547533][T14359] tipc: Resetting bearer <eth:syzkaller0>
[  219.732751][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'.
[  219.734690][T14370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2322'.
[  219.960679][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[  220.635851][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'.
[  220.782671][T14447] bridge_slave_0: default FDB implementation only supports local addresses
[  220.924903][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2343'.
[  221.498675][T14505] netlink: 'syz.2.2357': attribute type 2 has an invalid length.
[  221.498687][T14505] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2357'.
[  221.555994][T14507] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2359'.
[  222.221698][T14548] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2368'.
[  222.261703][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  222.278127][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  222.569750][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2369'.
[  222.827324][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  223.088398][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  225.094404][T14547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.101139][T14541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.324670][T14579] netlink: zone id is out of range
[  225.324723][T14579] netlink: zone id is out of range
[  225.324826][T14579] netlink: zone id is out of range
[  225.324863][T14579] netlink: zone id is out of range
[  225.324869][T14579] netlink: zone id is out of range
[  225.324900][T14579] netlink: zone id is out of range
[  225.324905][T14579] netlink: zone id is out of range
[  225.324909][T14579] netlink: zone id is out of range
[  225.324914][T14579] netlink: zone id is out of range
[  225.324918][T14579] netlink: zone id is out of range
[  225.425763][T14587] __nla_validate_parse: 3 callbacks suppressed
[  225.425779][T14587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2375'.
[  225.564719][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'.
[  225.963978][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'.
[  225.983817][T14632] lo speed is unknown, defaulting to 1000
[  225.991034][T14632] lo speed is unknown, defaulting to 1000
[  225.994970][T14632] lo speed is unknown, defaulting to 1000
[  226.382433][T14632] infiniband syz0: set down
[  226.383674][T12117] lo speed is unknown, defaulting to 1000
[  226.383692][T12117] syz0: Port: 1 Link DOWN
[  226.383748][T14632] infiniband syz0: added lo
[  226.410255][T14632] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  226.410280][T14632] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  226.410302][T14632] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  226.444246][T14632] RDS/IB: syz0: added
[  226.444476][T14632] smc: adding ib device syz0 with port count 1
[  226.444521][T14632] smc:    ib device syz0 port 1 has no pnetid
[  226.450363][T12117] lo speed is unknown, defaulting to 1000
[  226.452669][T14632] lo speed is unknown, defaulting to 1000
[  226.464396][T14669] x_tables: duplicate underflow at hook 2
[  226.628785][T14632] lo speed is unknown, defaulting to 1000
[  226.742235][T14691] sctp: [Deprecated]: syz.2.2395 (pid 14691) Use of int in max_burst socket option.
[  226.742235][T14691] Use struct sctp_assoc_value instead
[  226.873762][T14632] lo speed is unknown, defaulting to 1000
[  227.062512][T14709] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.062750][T14709] block nbd1: shutting down sockets
[  227.080025][T14711] netlink: 'syz.2.2400': attribute type 22 has an invalid length.
[  227.080036][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'.
[  227.080171][T14711] netlink: 'syz.2.2400': attribute type 22 has an invalid length.
[  227.080178][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'.
[  227.119091][T14711] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2400'.
[  227.120074][T14711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'.
[  227.501187][T14739] tipc: Can't bind to reserved service type 2
[  227.583621][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'.
[  227.651206][T14750] x_tables: duplicate underflow at hook 1
[  227.921565][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'.
[  227.979014][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'.
[  228.171085][T14784] netlink: 'syz.0.2417': attribute type 1 has an invalid length.
[  228.972059][T14840] tipc: Resetting bearer <eth:syz_tun>
[  229.021616][T14840] tipc: Resetting bearer <eth:syzkaller0>
[  229.091754][T14849] netlink: 'syz.0.2433': attribute type 26 has an invalid length.
[  229.691091][T14905] netlink: 'syz.0.2444': attribute type 1 has an invalid length.
[  229.728414][T14905] bond4: entered promiscuous mode
[  229.728662][T14905] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.452301][T14969] __nla_validate_parse: 4 callbacks suppressed
[  230.452315][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'.
[  230.455946][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2452'.
[  231.249184][T15037] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2461'.
[  231.249205][T15037] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2461'.
[  231.306262][T15041] xt_ipcomp: unknown flags 1D
[  231.347656][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'.
[  231.468055][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'.
[  231.684916][T15064] netlink: 'syz.1.2470': attribute type 32 has an invalid length.
[  231.788843][T15062] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.2467'.
[  231.788864][T15062] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.2467'.
[  231.867944][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.925265][T15068] syzkaller0: left promiscuous mode
[  231.926415][T15068] 8021q: adding VLAN 0 to HW filter on device bond11
[  231.942434][T12117] lo speed is unknown, defaulting to 1000
[  231.944894][T12117] syz0: Port: 1 Link ACTIVE
[  231.945224][T12117] lo speed is unknown, defaulting to 1000
[  231.946122][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  232.027445][T12117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  232.257050][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  232.792221][T15107] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2480'.
[  232.825288][T15107] net_ratelimit: 132 callbacks suppressed
[  232.825305][T15107] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  232.887803][T15112] only policy match revision 0 supported
[  232.887814][T15112] unable to load match
[  232.889819][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'.
[  233.033031][T15118] can: request_module (can-proto-5) failed.
[  234.111500][T15145] netlink: 'syz.0.2489': attribute type 4 has an invalid length.
[  234.171238][T15150] nbd: must specify at least one socket
[  234.193867][T15162] netlink: 'syz.0.2496': attribute type 1 has an invalid length.
[  235.665591][T15276] __nla_validate_parse: 5 callbacks suppressed
[  235.665607][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'.
[  235.666808][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'.
[  235.682661][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'.
[  235.865043][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2520'.
[  235.874971][T15297] netlink: 'syz.1.2521': attribute type 2 has an invalid length.
[  235.989193][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'.
[  236.123021][T15313] Bluetooth: hci0: unsupported parameter 5135
[  236.123039][T15313] Bluetooth: hci0: unsupported parameter 8192
[  236.123048][T15313] Bluetooth: hci0: unsupported parameter 5135
[  236.123055][T15313] Bluetooth: hci0: unsupported parameter 8192
[  236.124196][T15313] netlink: 3660 bytes leftover after parsing attributes in process `syz.1.2525'.
[  236.355508][T15326] ip_tables: iptables: counters copy to user failed while replacing table
[  236.593879][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  236.885376][T15360] netlink: 'syz.0.2535': attribute type 1 has an invalid length.
[  236.901154][T15360] 8021q: adding VLAN 0 to HW filter on device bond5
[  236.943581][T15360] tipc: Resetting bearer <eth:syz_tun>
[  236.953137][T15360] tipc: Resetting bearer <eth:syz_tun>
[  236.954575][T15360] bond5: (slave syz_tun): Enslaving as a backup interface with an up link
[  237.082168][T15374] netlink: 'syz.2.2537': attribute type 11 has an invalid length.
[  237.111752][T15369] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  237.290634][T15392] openvswitch: netlink: Flow actions attr not present in new flow.
[  237.380363][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'.
[  237.443953][T15402] openvswitch: netlink: Message has 8 unknown bytes.
[  237.542894][T15406] syzkaller0: entered promiscuous mode
[  237.715381][T15413] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2549'.
[  237.748945][ T5648] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  237.789900][   T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  237.856996][   T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  238.195988][T15437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2556'.
[  238.274494][T15447] ip_tables: iptables: counters copy to user failed while replacing table
[  238.280792][T15447] netlink: 'syz.2.2559': attribute type 4 has an invalid length.
[  238.327751][ T5648] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.497394][T15468] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  238.568597][T15473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.863701][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.878529][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  238.910843][ T5061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.960143][T15484] netlink: zone id is out of range
[  238.960166][T15484] netlink: zone id is out of range
[  238.960210][T15484] netlink: zone id is out of range
[  238.960224][T15484] netlink: zone id is out of range
[  238.960228][T15484] netlink: zone id is out of range
[  238.960230][T15484] netlink: zone id is out of range
[  238.960233][T15484] netlink: zone id is out of range
[  238.960236][T15484] netlink: zone id is out of range
[  238.976321][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  238.999299][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  239.328024][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  239.470519][T15511] netlink: 'syz.0.2579': attribute type 1 has an invalid length.
[  239.503957][T15511] bond6: entered promiscuous mode
[  239.505586][T15511] 8021q: adding VLAN 0 to HW filter on device bond6
[  239.523990][T15511] 8021q: adding VLAN 0 to HW filter on device bond6
[  239.524256][T15511] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  239.524270][T15511] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  239.549519][T15511] bond6: (slave ip6gre1): making interface the new active one
[  239.549540][T15511] ip6gre1: entered promiscuous mode
[  239.552837][T15511] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  239.641977][T15520] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  239.925801][T15537] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  239.954708][T15538] xt_addrtype: ipv6 does not support BROADCAST matching
[  240.182765][T15557] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.671382][T15589] __nla_validate_parse: 50 callbacks suppressed
[  240.671402][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'.
[  240.671847][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'.
[  240.784861][T15599] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2608'.
[  240.970176][T15605] syzkaller0: left promiscuous mode
[  241.034023][T15606] syzkaller1: entered promiscuous mode
[  241.034047][T15606] syzkaller1: entered allmulticast mode
[  241.244030][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'.
[  241.467144][T15619] netlink: 'syz.2.2614': attribute type 83 has an invalid length.
[  241.472351][T15619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2614'.
[  241.624421][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'.
[  241.794540][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'.
[  242.209726][T15652] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2622'.
[  242.293693][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'.
[  242.362139][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2623'.
[  242.724928][T15677] syzkaller0: left allmulticast mode
[  242.819475][   T25] ip6_tnl_xmit_ctl: 10 callbacks suppressed
[  242.819491][   T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  244.163932][T15735] xt_socket: unknown flags 0x4
[  244.246126][T15746] xt_socket: unknown flags 0x4
[  244.792162][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.798180][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.798693][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.799052][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.799715][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.800103][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.800551][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.800975][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.801347][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  244.802071][T15784] netlink: 'syz.2.2650': attribute type 1 has an invalid length.
[  245.431164][   T34] audit: type=1107 audit(1791395637.783:6): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  245.605382][T15872] nbd: couldn't find device at index 33554432
[  246.108013][T15911] __nla_validate_parse: 141 callbacks suppressed
[  246.108028][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'.
[  246.108038][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'.
[  246.108046][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'.
[  246.110574][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'.
[  246.213134][T15913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'.
[  246.251133][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'.
[  246.358706][T15937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2692'.
[  246.433201][T15945] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2693'.
[  246.433219][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'.
[  246.526222][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'.
[  247.836028][T16016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.479383][T16024] ip6t_srh: unknown srh invflags 4000
[  248.485772][T16024] netlink: 'syz.2.2723': attribute type 11 has an invalid length.
[  248.843559][T16048] syzkaller1: entered promiscuous mode
[  248.843577][T16048] syzkaller1: entered allmulticast mode
[  248.908934][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.946229][T16056] tipc: Trying to set illegal importance in message
[  248.946277][T16056] tipc: Trying to set illegal importance in message
[  248.946592][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  248.978122][ T5649] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.072471][T16060] syzkaller0: entered promiscuous mode
[  249.072488][T16060] syzkaller0: entered allmulticast mode
[  249.348818][T16080] 8021q: adding VLAN 0 to HW filter on device batadv1
[  249.671762][T16105] net_ratelimit: 182 callbacks suppressed
[  249.671779][T16105] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  249.967581][ T5061] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  250.660247][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  250.706147][T16118] ipip5: entered promiscuous mode
[  250.717279][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  250.891437][T16139] validate_nla: 57 callbacks suppressed
[  250.891454][T16139] netlink: 'syz.2.2763': attribute type 1 has an invalid length.
[  250.931622][T16139] 8021q: adding VLAN 0 to HW filter on device bond8
[  250.973823][ T5663] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  250.989985][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  251.029234][T16139] bond8: (slave veth9): Enslaving as an active interface with a down link
[  251.051279][T16150] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  251.108310][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  251.381354][T16178] batman_adv: batadv0: Adding interface: syzkaller0
[  251.381370][T16178] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.381392][T16178] batman_adv: batadv0: Interface activated: syzkaller0
[  251.381761][ T5663] lo speed is unknown, defaulting to 1000
[  251.383582][ T5663] lo speed is unknown, defaulting to 1000
[  251.384477][ T5663] lo speed is unknown, defaulting to 1000
[  251.729261][ T5061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.737595][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.766129][T16195] netlink: 'syz.0.2784': attribute type 21 has an invalid length.
[  251.766145][T16195] __nla_validate_parse: 17 callbacks suppressed
[  251.766151][T16195] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2784'.
[  251.766202][T16195] netlink: 'syz.0.2784': attribute type 4 has an invalid length.
[  251.766210][T16195] netlink: 'syz.0.2784': attribute type 3 has an invalid length.
[  251.766216][T16195] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2784'.
[  251.887276][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.967562][ T5649] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.767848][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.134629][T16294] netlink: 'syz.1.2802': attribute type 3 has an invalid length.
[  253.255796][T16302] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  253.282791][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.283312][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.467352][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.522828][T16321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2811'.
[  253.524396][T16322] sctp: [Deprecated]: syz.0.2811 (pid 16322) Use of int in max_burst socket option.
[  253.524396][T16322] Use struct sctp_assoc_value instead
[  253.651413][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  253.697191][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.533430][ T5594] Bluetooth: hci2: command 0x0406 tx timeout
[  254.677470][T16377] net_ratelimit: 1 callbacks suppressed
[  254.677486][T16377] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  254.783590][ T5061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.848650][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.504971][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'.
[  255.890598][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.090475][T16428] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  256.141273][T16430] netlink: 'syz.0.2848': attribute type 3 has an invalid length.
[  256.255023][T16432] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2849'.
[  256.399315][T16438] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2851'.
[  256.441691][T16438] syzkaller1: entered promiscuous mode
[  256.441712][T16438] syzkaller1: entered allmulticast mode
[  256.445359][T16439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2852'.
[  256.445410][T16439] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  256.570996][T16454] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2856'.
[  256.680078][T16457] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  256.680103][T16457] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  256.680125][T16457] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  256.712679][T16457] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  256.742704][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'.
[  256.815890][T16459] smbdirect: ib_dev[syz1] renamed to [sy]
[  256.848486][T16482] netlink: 4756 bytes leftover after parsing attributes in process `syz.1.2863'.
[  256.905286][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2865'.
[  256.927097][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.030835][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2865'.
[  257.140579][T10074] ip6_tnl_xmit_ctl: 6 callbacks suppressed
[  257.140597][T10074] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  257.161672][T10074] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  257.161969][T10074] bond8: (slave veth9): making interface the new active one
[  257.164586][T10074] bond8: active interface up!
[  257.258220][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258238][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258246][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258254][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258262][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258270][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.258279][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'.
[  257.501925][T16523] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  257.619022][T16530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  257.790818][T16539] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  258.290408][T16575] IPVS: Scheduler module ip_vs_sip not found
[  258.294173][T16575] netlink: 'syz.0.2891': attribute type 1 has an invalid length.
[  258.322822][T16575] 8021q: adding VLAN 0 to HW filter on device bond7
[  258.862825][T16616] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  258.866138][T16616] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  258.866227][T16626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  259.207042][T16656] sctp: [Deprecated]: syz.1.2913 (pid 16656) Use of int in max_burst socket option.
[  259.207042][T16656] Use struct sctp_assoc_value instead
[  259.207989][T16659] netlink: 'syz.0.2912': attribute type 1 has an invalid length.
[  259.957603][T16714] net_ratelimit: 10 callbacks suppressed
[  259.957620][T16714] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.957813][T16714] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.957936][T16714] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.957977][T16714] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.958123][T16714] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.958168][T16714] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.958301][T16714] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.958368][T16714] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.958504][T16714] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.958542][T16714] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  260.178911][T16735] netlink: 'syz.1.2929': attribute type 6 has an invalid length.
[  260.178930][T16735] IPv6: NLM_F_CREATE should be specified when creating new route
[  260.367832][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.444268][T16745] 8021q: adding VLAN 0 to HW filter on device bond12
[  260.448716][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  260.488093][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.541786][T12117] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  260.964643][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  261.167205][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  261.251826][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.798918][T16842] netlink: 'syz.2.2956': attribute type 6 has an invalid length.
[  261.869922][T16845] __nla_validate_parse: 22 callbacks suppressed
[  261.869939][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'.
[  261.869950][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'.
[  261.903503][T16847] smc: net device vlan1 applied user defined pnetid SYZ2
[  262.275253][T16864] sctp: [Deprecated]: syz.0.2959 (pid 16864) Use of int in max_burst socket option deprecated.
[  262.275253][T16864] Use struct sctp_assoc_value instead
[  262.290710][T16864] ------------[ cut here ]------------
[  262.290723][T16864] skb_is_nonlinear(skb)
[  262.290730][T16864] WARNING: ./include/linux/skbuff.h:3337 at skb_trim+0x112/0x1a0, CPU#1: syz.0.2959/16864
[  262.299422][T16864] Modules linked in:
[  262.301910][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.0.2959 Not tainted syzkaller #0 PREEMPT(full) 
[  262.305486][T16864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.309702][T16864] RIP: 0010:skb_trim+0x112/0x1a0
[  262.311782][T16864] Code: 04 28 84 c0 0f 85 81 00 00 00 41 89 1e eb 05 e8 04 d1 1b f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 05 dd 3c 02 cc e8 ef d0 1b f8 90 <0f> 0b 90 eb e5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 12 ff ff ff
[  262.319498][T16864] RSP: 0018:ffffc9000460f018 EFLAGS: 00010283
[  262.322005][T16864] RAX: ffffffff89ac1d21 RBX: 0000000000000944 RCX: 0000000000080000
[  262.325149][T16864] RDX: ffffc90007bba000 RSI: 0000000000003b24 RDI: 0000000000003b25
[  262.328440][T16864] RBP: 000000000000ee4a R08: ffff8881ae201ee3 R09: 1ffff11035c403dc
[  262.331631][T16864] R10: dffffc0000000000 R11: ffffed1035c403dd R12: ffff8881b801b274
[  262.334848][T16864] R13: dffffc0000000000 R14: ffff8881b801b200 R15: 1ffff1103700364e
[  262.338195][T16864] FS:  00007f447f4df6c0(0000) GS:ffff8882a8cda000(0000) knlGS:0000000000000000
[  262.341737][T16864] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.344392][T16864] CR2: 000020000001a000 CR3: 00000001ae47a000 CR4: 00000000000006f0
[  262.348135][T16864] Call Trace:
[  262.349552][T16864]  <TASK>
[  262.350798][T16864]  sctp_ulpevent_make_rcvmsg+0x3bd/0x970
[  262.353092][T16864]  sctp_ulpq_tail_data+0xd1/0xed0
[  262.355126][T16864]  ? sctp_eat_data+0xbe3/0x1800
[  262.357228][T16864]  ? __pfx_sctp_ulpq_tail_data+0x10/0x10
[  262.359487][T16864]  ? sctp_sf_eat_data_6_2+0x858/0xb70
[  262.361631][T16864]  ? __pfx_sctp_ulpq_tail_data+0x10/0x10
[  262.363881][T16864]  sctp_do_sm+0x1afc/0x5dd0
[  262.365777][T16864]  ? __pfx_sctp_do_sm+0x10/0x10
[  262.367948][T16864]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  262.370498][T16864]  ? kvm_clock_get_cycles+0x49/0x60
[  262.372460][T16864]  sctp_assoc_bh_rcv+0x401/0x6f0
[  262.374484][T16864]  sctp_backlog_rcv+0x15c/0x370
[  262.376515][T16864]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  262.379000][T16864]  __release_sock+0x28b/0x390
[  262.381023][T16864]  release_sock+0x190/0x260
[  262.382931][T16864]  sctp_sendmsg+0x1c09/0x2d00
[  262.384900][T16864]  ? __pfx_sctp_sendmsg+0x10/0x10
[  262.387102][T16864]  ? finish_task_switch+0x40e/0xc60
[  262.389231][T16864]  ? lockdep_hardirqs_on+0x7b/0x110
[  262.391302][T16864]  ? aa_sock_msg_perm+0xf5/0x210
[  262.393310][T16864]  ? sock_rps_record_flow+0x19/0x350
[  262.395523][T16864]  ? inet_sendmsg+0x298/0x320
[  262.397570][T16864]  ? apparmor_socket_sendmsg+0x98/0x360
[  262.399769][T16864]  ? __pfx_inet_sendmsg+0x10/0x10
[  262.401781][T16864]  sock_sendmsg_nosec+0x10f/0x190
[  262.403815][T16864]  ____sys_sendmsg+0x54e/0x850
[  262.405770][T16864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  262.408065][T16864]  ? import_iovec+0x73/0xa0
[  262.409885][T16864]  ___sys_sendmsg+0x2a5/0x360
[  262.411693][T16864]  ? __lock_acquire+0x747/0x2de0
[  262.413649][T16864]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.415758][T16864]  ? __pfx_futex_wake_mark+0x10/0x10
[  262.418007][T16864]  ? __fget_files+0x2a/0x420
[  262.419981][T16864]  ? __fget_files+0x3a2/0x420
[  262.421922][T16864]  __sys_sendmmsg+0x273/0x4d0
[  262.423822][T16864]  ? __pfx___sys_sendmmsg+0x10/0x10
[  262.425944][T16864]  ? do_futex+0x3e7/0x4e0
[  262.427858][T16864]  ? rcu_is_watching+0x16/0xb0
[  262.429903][T16864]  __x64_sys_sendmmsg+0xa0/0xc0
[  262.431889][T16864]  do_syscall_64+0x166/0x520
[  262.433739][T16864]  ? trace_irq_disable+0x3b/0x140
[  262.435631][T16864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.438133][T16864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.440538][T16864] RIP: 0033:0x7f447e59e199
[  262.442266][T16864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.451709][T16864] RSP: 002b:00007f447f4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  262.455098][T16864] RAX: ffffffffffffffda RBX: 00007f447e825fa0 RCX: 00007f447e59e199
[  262.458513][T16864] RDX: 0000000000000001 RSI: 0000200000003f00 RDI: 0000000000000005
[  262.461684][T16864] RBP: 00007f447e6350b8 R08: 0000000000000000 R09: 0000000000000000
[  262.464789][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.468178][T16864] R13: 00007f447e826038 R14: 00007f447e825fa0 R15: 00007ffc4fbb83d8
[  262.471455][T16864]  </TASK>
[  262.472734][T16864] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  262.475665][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.0.2959 Not tainted syzkaller #0 PREEMPT(full) 
[  262.479248][T16864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.483210][T16864] Call Trace:
[  262.484542][T16864]  <TASK>
[  262.485771][T16864]  vpanic+0x56d/0xa60
[  262.487330][T16864]  ? __pfx__printk+0x10/0x10
[  262.489175][T16864]  ? __pfx_vpanic+0x10/0x10
[  262.490991][T16864]  ? is_bpf_text_address+0x292/0x2b0
[  262.493009][T16864]  ? is_bpf_text_address+0x26/0x2b0
[  262.495009][T16864]  panic+0xc5/0xd0
[  262.496486][T16864]  ? __pfx_panic+0x10/0x10
[  262.498216][T16864]  __warn+0x315/0x4c0
[  262.499876][T16864]  ? skb_trim+0x112/0x1a0
[  262.501652][T16864]  ? skb_trim+0x112/0x1a0
[  262.503382][T16864]  __report_bug+0x276/0x570
[  262.505114][T16864]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  262.507075][T16864]  ? do_syscall_64+0x166/0x520
[  262.508971][T16864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.511365][T16864]  ? skb_trim+0x112/0x1a0
[  262.513729][T16864]  ? __pfx___report_bug+0x10/0x10
[  262.515678][T16864]  ? skb_trim+0x112/0x1a0
[  262.517382][T16864]  report_bug+0x16b/0x220
[  262.519059][T16864]  ? skb_trim+0x112/0x1a0
[  262.520727][T16864]  ? skb_trim+0x114/0x1a0
[  262.522451][T16864]  handle_bug+0x9c/0x200
[  262.524147][T16864]  exc_invalid_op+0x1a/0x50
[  262.525946][T16864]  asm_exc_invalid_op+0x1a/0x20
[  262.527813][T16864] RIP: 0010:skb_trim+0x112/0x1a0
[  262.529925][T16864] Code: 04 28 84 c0 0f 85 81 00 00 00 41 89 1e eb 05 e8 04 d1 1b f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 05 dd 3c 02 cc e8 ef d0 1b f8 90 <0f> 0b 90 eb e5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 12 ff ff ff
[  262.537378][T16864] RSP: 0018:ffffc9000460f018 EFLAGS: 00010283
[  262.539879][T16864] RAX: ffffffff89ac1d21 RBX: 0000000000000944 RCX: 0000000000080000
[  262.543024][T16864] RDX: ffffc90007bba000 RSI: 0000000000003b24 RDI: 0000000000003b25
[  262.546166][T16864] RBP: 000000000000ee4a R08: ffff8881ae201ee3 R09: 1ffff11035c403dc
[  262.549169][T16864] R10: dffffc0000000000 R11: ffffed1035c403dd R12: ffff8881b801b274
[  262.552337][T16864] R13: dffffc0000000000 R14: ffff8881b801b200 R15: 1ffff1103700364e
[  262.555388][T16864]  ? skb_trim+0x111/0x1a0
[  262.557108][T16864]  ? skb_trim+0x111/0x1a0
[  262.558862][T16864]  sctp_ulpevent_make_rcvmsg+0x3bd/0x970
[  262.561043][T16864]  sctp_ulpq_tail_data+0xd1/0xed0
[  262.563054][T16864]  ? sctp_eat_data+0xbe3/0x1800
[  262.565002][T16864]  ? __pfx_sctp_ulpq_tail_data+0x10/0x10
[  262.567165][T16864]  ? sctp_sf_eat_data_6_2+0x858/0xb70
[  262.569177][T16864]  ? __pfx_sctp_ulpq_tail_data+0x10/0x10
[  262.571460][T16864]  sctp_do_sm+0x1afc/0x5dd0
[  262.573298][T16864]  ? __pfx_sctp_do_sm+0x10/0x10
[  262.575326][T16864]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  262.577873][T16864]  ? kvm_clock_get_cycles+0x49/0x60
[  262.580053][T16864]  sctp_assoc_bh_rcv+0x401/0x6f0
[  262.582090][T16864]  sctp_backlog_rcv+0x15c/0x370
[  262.584122][T16864]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  262.586329][T16864]  __release_sock+0x28b/0x390
[  262.588229][T16864]  release_sock+0x190/0x260
[  262.590080][T16864]  sctp_sendmsg+0x1c09/0x2d00
[  262.591935][T16864]  ? __pfx_sctp_sendmsg+0x10/0x10
[  262.593964][T16864]  ? finish_task_switch+0x40e/0xc60
[  262.596040][T16864]  ? lockdep_hardirqs_on+0x7b/0x110
[  262.598190][T16864]  ? aa_sock_msg_perm+0xf5/0x210
[  262.600135][T16864]  ? sock_rps_record_flow+0x19/0x350
[  262.602309][T16864]  ? inet_sendmsg+0x298/0x320
[  262.604124][T16864]  ? apparmor_socket_sendmsg+0x98/0x360
[  262.606387][T16864]  ? __pfx_inet_sendmsg+0x10/0x10
[  262.608422][T16864]  sock_sendmsg_nosec+0x10f/0x190
[  262.610454][T16864]  ____sys_sendmsg+0x54e/0x850
[  262.612341][T16864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  262.614479][T16864]  ? import_iovec+0x73/0xa0
[  262.616332][T16864]  ___sys_sendmsg+0x2a5/0x360
[  262.618160][T16864]  ? __lock_acquire+0x747/0x2de0
[  262.620188][T16864]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.622312][T16864]  ? __pfx_futex_wake_mark+0x10/0x10
[  262.624498][T16864]  ? __fget_files+0x2a/0x420
[  262.626382][T16864]  ? __fget_files+0x3a2/0x420
[  262.628218][T16864]  __sys_sendmmsg+0x273/0x4d0
[  262.630070][T16864]  ? __pfx___sys_sendmmsg+0x10/0x10
[  262.632063][T16864]  ? do_futex+0x3e7/0x4e0
[  262.633839][T16864]  ? rcu_is_watching+0x16/0xb0
[  262.635741][T16864]  __x64_sys_sendmmsg+0xa0/0xc0
[  262.637722][T16864]  do_syscall_64+0x166/0x520
[  262.639530][T16864]  ? trace_irq_disable+0x3b/0x140
[  262.641496][T16864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.643878][T16864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.646181][T16864] RIP: 0033:0x7f447e59e199
[  262.648015][T16864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.655539][T16864] RSP: 002b:00007f447f4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  262.658878][T16864] RAX: ffffffffffffffda RBX: 00007f447e825fa0 RCX: 00007f447e59e199
[  262.661880][T16864] RDX: 0000000000000001 RSI: 0000200000003f00 RDI: 0000000000000005
[  262.664958][T16864] RBP: 00007f447e6350b8 R08: 0000000000000000 R09: 0000000000000000
[  262.668107][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.671095][T16864] R13: 00007f447e826038 R14: 00007f447e825fa0 R15: 00007ffc4fbb83d8
[  262.674151][T16864]  </TASK>
[  262.676158][T16864] Kernel Offset: disabled
[  262.677851][T16864] Rebooting in 86400 seconds..
