last executing test programs:

25.160812669s ago: executing program 2 (id=1608):
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009f000000000000000088a8600081"], 0x3a)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x3, 0x4, 0x8, 0x1}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x9, @loopback, 0xfffffffd}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x9, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r9, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}}, 0x0) (async)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r9, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f232ad796bd667cb12ea99509873831d287310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f232ad796bd667cb12ea99509873831d287310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) (async)
ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="95", 0x1}], 0x1)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="2d6875670574010020"], 0x9)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00030900c457dd17da5aa879140000", @ANYRES16=r5, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00030900c457dd17da5aa879140000", @ANYRES16=r5, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20)

24.942085606s ago: executing program 2 (id=1614):
socket(0x3, 0x2, 0x10000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x80000001, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8)
close(0x4)

24.941205241s ago: executing program 2 (id=1615):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = epoll_create(0x9)
epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f0000000200)={[0xff]}, 0x8) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000002c0), 0x10) (async)
connect$can_bcm(r5, &(0x7f0000000400), 0x10) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async)
recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000fcdbdf25150000000a001a20ffffffffffff00000a000600ffffffffffff00040a00c61e5536b8513894cb8822d81a1a0008021100000000000a00060008021100000000000a00060008021100000100000a001a00ffffffff28be7e99e029ad7808021100000100000a000600ffffffffffff00000a001a0008021100000000000a0006000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c811)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x3, 0xf}, {0x2, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x8, 0xfffffffd, 0x6}, [@TCA_NETEM_ECN={0x8}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

24.712364888s ago: executing program 2 (id=1620):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040840)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000c4000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5959}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x4)
unshare(0x22020400)
r5 = socket$inet6(0x2d, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x100000000}, 0x18)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14)
sendmsg$inet(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}, 0x800)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r10, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xef9c16c, 0x2d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4061718820713ac0b4f87eb4a7"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044090}, 0x40000)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))

24.603723859s ago: executing program 2 (id=1625):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@arp={0x806, @generic={0x102, 0x805, 0x6, 0x4, 0xe9da94bda0ef4554, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, "620362b3", @remote}}}}, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)

24.371173903s ago: executing program 2 (id=1629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048081}, 0x48080)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r1, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039041800000000001f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

24.206792386s ago: executing program 32 (id=1629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048081}, 0x48080)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r1, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039041800000000001f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

4.380728165s ago: executing program 0 (id=1905):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) (async)
sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)

4.309015682s ago: executing program 0 (id=1906):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x44008041)
close(r0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="010000da5821006108"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='page_pool_state_release\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$netlink(0x10, 0x3, 0x1df6be5c6ade3c91)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0)

4.238182432s ago: executing program 0 (id=1909):
unshare(0x2a020400)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
recvfrom(r1, &(0x7f00000003c0)=""/153, 0x99, 0x40002161, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000340)={{0x2, 0x4e22, @empty}, {0x1}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'})
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0200c2000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000800030000000000"], 0x1c}}, 0x81)
socket$inet6(0xa, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000500))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

3.709189749s ago: executing program 0 (id=1912):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) (async)
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0xf3a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.195779479s ago: executing program 3 (id=1958):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "263170b5cd05e6fc471e6a6d47c441262cc5a6bea4536de48f876bb3e18f2770592169ec48ed1eb2ab7f45d3d09f256c9cf523648002907bd759f9b49046b49bbf690528ee245a9984bfb6b549cbc0cc10c70b8822c02fdbdb97b1eac5040be1d4810de8d03036886825e1707f605ad694187e989b1028fe859e75495455b24efcb7edecd7ec594b754487807288227b9f8d4d50cefb31adfc2cbf174b21cbd848f97bb3938b8634f2d009f49a1b7c21c834007aba0ae45a160b137906d131353ff1c29b4a2e25bd592a32dd283d538bbaafcb2f39cfc886ee844e580c527b6e251428c7f49b0f8aa2787c9a664db867c35b5443e512f6cec18cfb353b47e0e040488f44d5e628feb3cc3f19d8ad4039e092abdc46e7013c6b84260c014c82f25f9a8bae6daf139eb3b415876f78a86746b45763ee3f9f805a92b2e2089630b1ecefc435a089df8e7062595f2278ed8d2f88e761281eef63081cedd34a3b6c9a70f3cf21e12822aa96b868829dcaea9bbc9741d06ca535984fc0795c6d5b1e6bd529d993b8e6f758ba1816d8a8dd8bb723d1e082832c23c122ed608d8f047957ec5158b253c9807649609a19042ac21bed5d6b06604cb4fe91160345fd8afdc2855e82be5165164fb58344d5df35b88b44ed301430604d842124bda146cf109c7d2a00443ea3cc8482c52bd81f20a11a1bce3a74a2ff26d1982717f1ee8d9e6c8c927b80901440041bc53e8ab6b832787d7c9ff002ba1671936365e75aa54fde03d25d8c55ecf2b7cf651542933085ca86da84b46a6559154486ac5f087b7b54f3f24fd2ff3c8f08b7bcb23aa06f73ca6257bec8b06e0f91131845a026c10414be9f3db4660f1b3682738a35978b62986017b273754f0db231026b4912c53b44bd268389bd8b58e017959349fc93c7ba61f88d5a964862cfb1b3cda61e5c784b2028f9cfa7ddc5a781d9a2a9594fd1891ff7da7b7382a55b0dfa4b5f1e0f0c979dfa463c3696d51c23728683a5586191da03f61dce79639cee2bcd982a9183b44231da08018aacc3c9a8a52f29684ab029ca7bcf406f51c8b042dc77faeaf8e9139682cd00283319a1a21cb20d6aae66a18c0c358b756f57102e3f455be7ed71694018e91e28786f9bc6418e25ad300a8dce02975c1e73e03b1ebd21950e9fabdeafa2785079f0fc8ec12013acc0e23faf473634e4f50a5095b3f2ed81814fb313f29b94afd96cc35d52311d4e66fbe5a66a7c849c674b86bba8808c821a7ec133ecc61f2389eec0664689dbc1ba2c81f9148972c95d0cb272c9779be02c44b4aa252e2ee375d6d2310a12ef1e0ce9a7d4088922ee9640cec46facece5c5ea427dee19bca3952c3c13767de82909abc92edecab3e16c2f24dd9dcef4dec3c336bab497ae04c6d11db505037575b649a68622b45d35244bceb129363434a3bf3602827dce99c0e59b294a5ce1a2bc06e5467e9de31ab426c42fa5e7193d0a2d33c5234a5e9ba2c425db54041e7a1472315f9a5449496cad9a945967875d3549ad348e12403b28a3f6a666f7dc423629ba7a18244477764b8923a6b30fa04a2d6ed22ac8c64924fa2616d43da8a5b3f9cc30b2e29e4fc64b0027c33a8bc39d45feb704f7d2708f1f1bebd0eb13bd08e4049cb7a130847d9e334613a591563d0e207448e689ae5866c36f2503180b53f7a70b68eede9df307e9eb77aa39b12320a84711bdf03109cdc2414fa44478475e4b5a2f628e0cb0475e3e7ebf8fad644d69efb268883e394c46b971e6ca87a67e242f480f2ef7679583d182ab21d2ee026acf80f25b3afacccda853d38f84052cdf2edcfdf0513e1cf39574aa7af1ae53a3e08dbad47aefd14a37b6288c719e9c0737bb4119d7fe3eb350a8ec2fb0fec9b4633aa256d3f52f76423a8891f0a7e67378af5d53af8cf1543883def1c73a1f3c51fde6246dab90ec2b3f59c07a4eb1cefbdf60533cb97c0a555519998f9325630d489b00c6c736e6c768515f38f3a7d3cdb99c54f0e46f5a3aa9f280225cb3c3b33e2ff2aa757a2df467265252397dbd68aa7dca7fb9a8fb77611385995a070a99a7fc9db80ab7653c1c94f9a0ad09c713c39559587d8f886bc2db265ef6099138204e8517fa71aea4c75a8149dae6467d792431e54aecbf0f300dc7f6cc5a28495d77f3a4cd39c78de472ca2ebc95d67258a2e0f27bc9903c5540b9546f47aacd4898a0857e7b2f69125dd4839d788181aa409c40a914afe805aa075035d557bcce6a45e0a81cf3b8541e62e6f9a54fd71797d87b1fc4e0a0786fbd34b0dee8f5f57ef71495271b9f946480adcd2066bbefe000d99470bf92125996cba78276f1463dfbf501de575e597394ad02c484fe6291e56d7362ca402ff0af9582a1dc61dffad77d94da15c1328634b64b172edcd782a769f5fe9dd3a777c69d80a84fe83071c6ef7ae0becfb509b938932738bc7c454b63030ade2877a85897e5abc0cb0a9606e877987b5856d5992f43fba549d950d302b62db8c14a59b0bf58fb5a8f6402d3894c0e5be41348181aee736590383b14e7abb7253e381d24ee4e64dde82f48d3e9bf3e0be0e099b800b3bba1d92fd6a451cddcb9ae29a20b39d1066834e9337ed58defcd20cfd032adce59049fcbfc62ac762bed756475f150e86374cfc973d2d247ec6c347308f4c2618f0dc5f3e5cf363088bd90490f552f017000f376c35af0aadfa776ba9eca3567afb932325f14fa34b42f004b88249276b727bea1b865db9deaa405c9c1e1567cf6198cbf33aa646fe81398a0234d6fd687682bc2fcf052f9e129dd2d68f1154e4ea32e4984ad806b843513e94e994c5df73580587c0c1399ead2477ad7e04c3eb8787a685f86eb58d2d3254bd7f7f5e206aee379cbfa497ce32120e79cacea3c1663050c2f818d324786bcf799e27322f80d0c8cd6f41e9e10f441d331bed1f71577a07e89a1507947aacdbc07f8af0944f3c228b5ee9ec27b808108aaebe61f1884e1581b19c9c14cfffe2e96c7fe07f6a36116bea130e63db9d1e82fa4ade6bfd6cc72a9654d9bd829c1752d5d640a0b5d555d936b4eb160f2cfee1d92f3a783f2ab33120404045ac7ad20c2ee000abe6b889d7840bd16276d831fae6e1e37c68e3f567934859f7e8a1d7486f6923565ec0f0bb6473f8b8a87a8fd20d11b903c42570bc2d584c2b8743c36c3339998c53fe96b457aae5ec3e38f877dfc9c11e2f597123eea7f75642a0138296c63ed1b1a58753fdc1bc56e9405ab808d420c11e286662034ef471ab7c997ae392c928cff9476d31ffb6df1173bc6b0d1769b5bb58952d839f7297d396bea2bc8a37db8e18236857218e9f5a000a255363baaae8ecd13fcb7a5cb7a3dcadbb96a44e17aa7e8e42ca565d81c31134746b1b5726d86db9d2ba54ce70c7cf2ee0c1df212c3a705154693248ca6b80a5b2d2d101face58c2c01e5382a6b0f1b71f95764f910b7dcdeb2e791f3d17a967d536fbc590f5d3785ff25b6e9039dd1f910fe5782ac9658b2284b7b720cb2fe2569485721422adff4daec78c8491bd1b7534fd38c9030b91b66b280636a2e2edb01f99a4851f77249803fae628dc42f17ab10735338a196507819876a196af3c31a80e95907a8d98c1fa34c03d9073429f9ef63ca753ca48256722ed171f8e43189c4887b35ba481823538b80a304008960fc2f6dd0db0d065eebd3e1fbc4b342cb78075cf5334ae2bd70cbebbc1aecd89a4b1941599207990d453488ed9a246788a3a75a447fb41865b9d8ad5ed928ac29bad4ad7f7a13b29149445cdc4e5024acdd15088a64268fb7960c6c3674741153dd3755126e0d411aa0a7b4abed17c65ddf767c7df110f8f77ba9def3d0a82c445177b3fd7074f6262f0cf4a2d585019dbee516587808021776e7539bce272b82cd53637e9887725f289ed9bb1909ef4a46f7567f3c64cb1f6ab6da2a174ff0c9010358b4da94ea893d55d5d011e3dd86c94839e278f80f84feb905f437df79b9acb64e4516b390d45f2fd68a810554fa147fa00dcc486758da35e645ae2ea865225c4dbb1e268e93d2b24e64328c7e86fc0e126267ee4bf0de60380cfdfddcaf2e6523764ea889bfd836397fc2c56c65dd572a24dff827cefd8d4f40b732d3a1b5353359d8f587376127c9c499a0d97e9f552f6208cceceb8972c19547387bec505acdea0c9bab01cf80020d3717ca488e87e6e3df810af9bf6c22f176c8d130a1c0f12466d53c9d5d54c50f0717efdefac3e53ad90e9f9c7217187195c3911f90d0a8be5e8e4f953b038e0ca529555992ecff480bc4895798530ae8d68a0246ae40070d5c1a16b2b15e8855c195a260865b13b6eb5f941040265973a20af4dcdd4cf4d03a2a215bff70c5b8f25c48c211cdf978240b8e7d4c2778f15c3858a4cda110d1c6e8ae19d83ea015748930a1ff6bae442d67a6cd41354012944a388ff95046b4f8b7676577487aa200c0175d99886dcb50dbc72c0bdc0f41b4ebbf5bc9a8cd67c9624f9afccfff4725e9bb9729306beda2f119dbc2e2cacec52300d6ae0d250b700e2bd7bf6b6d86498a03f3f4ad500134ef581ccdbb3d1cf90fb11562d0e078eb788f4f2e485abd15dd5175d7fc0570d87f3bf6750ab29f37b441aab2a7435f4d8ba0e9e0cff366c1b9706e34985a0ce4ed46e5a2a8390381b77d3391e7fe6e564ddf2aff4cfef7009de8e2bd2bbdf91e5412925b8f5258feeedaf4d73a59842be186c31c34c92ef8a3a7b2c1f4a46dd93c419843530c94e01ede1516744c9100976bb61b25e391fa4b829f9c24204c35910819d0b369b765655332a5582088d918f1e323170551f672d002d73332beac073c651e7d3cb1817a7ac313e7cd847ee0af275ce267914609e6d3db6ab59aaf30ba2ad0e214ad76cd4edef476eb89133084eb8e1147fd5a44a9fde4c06f8df9bcfe0938f8776b83263a315918249fa9beae3153073bffe265758f6d8cf4c07112468ddc7e8911efe97e06aa0a55de6560b69d1d3fce4c3f1132e1ffe10a4b2c3a77295ba1653b9e3da6c1c9028367a890ef1666a4b5701a4b000cbb77cbdef060469f96213d75c0d1cd8aa3ae5024ce5af26fe6219f5970eeccd4b8bc743292cb7df8db34a65ef289c237836ab202fc28d27d9bd260b2bd3678710216bd575689ef030a260eb91cfd9131dfa3327c674b44b97859082a4c07c5da8eb80e0be86e28310a7d8ba75beb4eae4ecc046ce9ce633cd6e3352f0ec93c8b910c60f2900c5efc4ed5d4c3c99faeb475eb3b7c825e4a926870f88936a76e4e4aa2bb19f1bafdc620ce24dc4792d3a34d2b75684560217651b39a782c9b83d3bac7e3747a71ebb90d6348efeba1c13f373af4bd22c0ad425cdcc5aefbaa80a83616f8f7cf7e3c7980e80d947040e7e1ee24ec7a5a58123795c927afc6a2319b6e1903b85601adbdd1a3c1ae80cc6162dc9cf0b65780b075e8f0de53521146a586a81e29a30a50677999c1d70eb1987f7bfb1cc2bd33b45ec8ce9b671863f8f7d0de7796f0420e7525d5d5e16a3b690959008414a535b3ee50091d0e5605e04f5d9d9d50d079dea049cab2071827fc9d14e73c3aed6e314566d4ab834b029e10a3f239dda92a66a690e378154eeddf53ffde9e608afbc37a223266cf0e4c3e4ad89538700d8a781b45d1285eef89da14a66a2b9531e29d21de251f1a4e1895aad67fe9216f81c63ff48e651cf2a65e97bb884b62552a98479b74f48ff9d1759ca9edd4a3eedceb7e2571893c7b4989741e229f0c27"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x485f610d1619298}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r0) (async)
syz_genetlink_get_family_id$l2tp(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffffc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0xfffffffffffffd76, 0x8, 0x3}]}}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0xfffffffffffffd76, 0x8, 0x3}]}}}]}, 0x48}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

560.936363ms ago: executing program 0 (id=1966):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x6a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff})
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x18, 0x5a, 0x30d, 0x0, 0x3, "", [@generic="3373619d52"]}, 0x18}], 0x1}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r7, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000000000100000000000000040000a1e1684317876c57bf4056df5aba10c9b3fcc41d28e50c543ddfa6bea2a086839ab3071d1ab561b3ef97b4caa11af6b2138c3792161ba72e71d0dacb6fbbbb953c1e72486f52d02aa967573a95bc53cb565e9daf12c4"], 0x0, 0x2a, 0x0, 0x1}, 0x20)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={<r9=>0x0, @private, @broadcast}, &(0x7f0000000180)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xffff}, {0xfff1, 0xfff2}, {0x7, 0xa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000)
bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100023ff0000ff00659186bb00000000c16dc777c4d6bd76e76ff25d24de07001021b87311715a0c02463a955c0aa529ff672ee500000000000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000090560000140012800b000100697036746e6c0000040002800800040000050400"], 0xfffffffffffffe25}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

560.041142ms ago: executing program 0 (id=1967):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000c00)={<r2=>0xffffffffffffffff})
r3 = epoll_create(0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$netlink(0x10, 0x3, 0xb)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000008c0)={<r6=>r5, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000580)={r6, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000004})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000004c0)={0xe0000012})
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="01002dbd7040fddbdf25200000003c002d8005000100b00000000800030002000000080002000200000008000200060000000800020001000000050001000900000002000300020000001c002d80050001008100000008000300080000006ffe04000100000008000300", @ANYRES32=r8, @ANYBLOB="24002d8008170877c9a3712e07a00300030000000500"/36], 0x98}, 0x1, 0x0, 0x0, 0x20008894}, 0x4c010)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = accept$alg(r10, 0x0, 0x0)
recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/92, 0x5c}, {0x0}, {&(0x7f0000000640)=""/160, 0xa0}], 0x3}, 0x3fe}], 0x2, 0x2101, 0x0)

479.220463ms ago: executing program 1 (id=1968):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000001980)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffff, @null, @netrom={'nr', 0x0}, 0x4, [@default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001100))
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001040), &(0x7f00000010c0)=0x4)

478.596778ms ago: executing program 1 (id=1969):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket(0x1d, 0x2, 0x6)
bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r3, &(0x7f0000000080)=""/186, 0xba)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000220000000000a01020000000000000000010000000900010073797a30"], 0x8c}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r10, r8, 0x3, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x23, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ldst={0x0, 0x1, 0x4, 0x8, 0xf, 0xfffffffffffffff8, 0x8}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff801}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x99, &(0x7f00000006c0)=""/153, 0x41000, 0x20, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, r12, 0x1, r13, r1, r14, r0], &(0x7f0000000c00)=[{0x3, 0x4, 0xa, 0xa}, {0x0, 0x3, 0x1, 0x3}, {0x4, 0x2, 0x4, 0x2}, {0x3, 0x5, 0x2, 0xc}, {0x1, 0x3, 0x5, 0x2}, {0x2, 0x4, 0x1, 0x1}, {0x1, 0x5, 0x6, 0xb}, {0x0, 0x5, 0xe, 0x2}, {0x2, 0x3, 0x6, 0xb}], 0x10, 0x4}, 0x94)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000110001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000080008200000140035006970766c616e30000000000000000000a06942a4e1ce823dc0bf479980a1b27acfdd27ee543a85019a433c6384bca6d5bfc443593c5991561448c128773dd25c5e61d1f6e8202534d8a068f1d4b1b7f2245c01308579fe8fc29e4389f566735ae01d117bd19671004bbe09ad286cd3a9b65d1fa0be2acf6b6102d67115225b30edd19bfe3b6a736025fbf03de8d8c4e642948dd69c5b350562b95aa4b23550e433ff3b4df353f83e91108301c441"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

329.039929ms ago: executing program 3 (id=1970):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0x4, 0xd9}, @nested={0x4, 0xc7}, @nested={0x4, 0x77}, @nested={0x4, 0xc7}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000c000000f7fd9d0e720c55ddc50af48b"], &(0x7f0000000080)=0x30)

328.625723ms ago: executing program 3 (id=1971):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000c80)={{r3}, "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"})
r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="783ef9ca6a46", 0x6}, {0x0}], 0x2}}], 0x1, 0x24040004)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)

249.550645ms ago: executing program 3 (id=1972):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071105f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000b0400000010f2e267da0b609ecd1f8def0000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000001100013181dd806570448b36e4842d643cf8ece1b1a8196f1af5dd3a11b3f04f4a9e859a389481d570291f5ae8e46fc85592049960546aca560c72587e262d4c336b9382ae696ab3053fca148ef06a7baff056170dccf935e45d0ac1df14130d0862b588a8a954c1573ef22340a6110fd49131cc0200"/241], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100000000001400003f00000000008490783fffffffac1414aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0005009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007"], 0x24}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbad}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000842}, 0x880)

160.231323ms ago: executing program 1 (id=1973):
socket$kcm(0xa, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x1e, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000d00010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

159.574796ms ago: executing program 1 (id=1974):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x44008041)
close(r0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="010000da5821006108"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='page_pool_state_release\x00'}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0)

157.067109ms ago: executing program 3 (id=1975):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x83}}]}, 0xc4}}, 0x2c004010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x95, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000d80)="eb6d325b8b8b024bca822b60f158f37a7f012fdd", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="09cdba1b70d59f2dc8dfed396e917faae4e81d9bd84cd32c064721fd099e35ecf88dce95186a7265daed932782d28569f9838795719b87ecaf09396e3141182b5e", 0x41}, {&(0x7f0000000180)="31b9a734f2d0d63f57e292db8f783f1651b8e4ed9b6045770eb9d7629321984515495d86d376150912e441a06d1db06896a34460eb85a612b3f64e3e2408b65c00f5cb876e4a0495f5a624fd5caad7030027f337f620c4975251360a947c6de61eccd03362b770f636296170ad30c89e841a6de3ab88978dc22cd98b6361504c7cf0d9ff", 0x84}], 0x2}}], 0x2, 0x1)
shutdown(r4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7)
sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r8, 0x8931, &(0x7f00000000c0)={'netdevsim0\x00'})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x3e, 0x7, 0x1, 0x0, "8d821ab52b1e40fb8c3712c289bc5d436fa94997fa73552c3b728f2e8e455633c0a8856260e9a417f357cb879783a83570184e12d3cb9ad1ccea"}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x118}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)

51.406418ms ago: executing program 1 (id=1976):
socket$kcm(0x29, 0xa, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001c03978bab7ebd268fe120000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000080900030073797a32000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440001ce6010c0001400000000000000008080005400000000114000000110001000000000000"], 0xdc}}, 0x0)

888.017µs ago: executing program 3 (id=1977):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0xb, 0x5, 0x404, 0xcd, 0xcd3, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0xfffffffffffffd32)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000001080)="d8a2a0499ade66b2807e6e33353f37cbcbbc32e3d7c0140d48aa04b6e9d8767fc947a080b5baeb9f17f6f7bec8ef6268c3fee36e8a2000e7241b813e6dc2656461a710730ffce3a5dffffb58fbd706e8c48394ed5333fd6b58c19aac7cd2f2670361e601fbf917059e75df1df338b2c32da22032904a8531b3644a597ad5", &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000000000000140000000500000003000000010000558fda9c0407000000020000000030002e00"], 0x0, 0x31, 0x0, 0x0, 0x1002}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001600010a27d1deab3d0000000000000000220000000400058004001480"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x0, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$x25(r0, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = accept(r5, &(0x7f0000000080), &(0x7f0000000000)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

0s ago: executing program 1 (id=1978):
close(0x3)
r0 = socket(0x15, 0x805, 0xfffffffc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', <r4=>0x0, 0x7, 0x8, 0x7, 0x8, {{0x28, 0x4, 0x2, 0x2, 0xa0, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x2b, 0x3, 0x2, [{@empty, 0xd11}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010102, 0x7}]}, @lsrr={0x83, 0x1f, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x2]}, @noop, @timestamp_addr={0x44, 0x14, 0xf1, 0x1, 0x6, [{@private=0xfffff800, 0xf942}, {@empty, 0x3ff}]}, @lsrr={0x83, 0x1f, 0xf4, [@remote, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @private=0xa010101]}, @rr={0x7, 0x13, 0xc9, [@loopback, @rand_addr=0x64010100, @multicast1, @multicast2]}, @noop]}}}}})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', <r8=>0x0, 0x6a5a54a87385970b, 0x80, 0x9, 0x2, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7800, 0x20, 0x8, 0x6}})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x2, 0x5, 0x7, 0x9, 0xfffffff3, 0x0, 0x7fff, 0x3}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x1ac, r3, 0x602, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x20048010)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb}]})
write(r2, &(0x7f0000000080)="3aa0", 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r12=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
listen(r0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59844' (ED25519) to the list of known hosts.
syzkaller login: [   56.532087][ T5827] cgroup: Unknown subsys name 'net'
[   56.666457][ T5827] cgroup: Unknown subsys name 'cpuset'
[   56.673254][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.845087][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.832962][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.836784][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.839790][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.843387][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.855557][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.863687][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.868444][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.872989][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.877956][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.881265][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.008933][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.012646][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.015989][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.019984][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.029927][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.139325][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.218870][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.322922][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.325942][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.328582][ T5846] bridge_slave_0: entered allmulticast mode
[   64.332748][ T5846] bridge_slave_0: entered promiscuous mode
[   64.341177][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.343720][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.346060][ T5846] bridge_slave_1: entered allmulticast mode
[   64.348979][ T5846] bridge_slave_1: entered promiscuous mode
[   64.439034][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.448343][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.450738][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.453445][ T5850] bridge_slave_0: entered allmulticast mode
[   64.456260][ T5850] bridge_slave_0: entered promiscuous mode
[   64.459545][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.462047][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.465096][ T5850] bridge_slave_1: entered allmulticast mode
[   64.468131][ T5850] bridge_slave_1: entered promiscuous mode
[   64.471848][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.508841][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.524124][ T5846] team0: Port device team_slave_0 added
[   64.526486][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.535926][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.546221][ T5846] team0: Port device team_slave_1 added
[   64.605630][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.608029][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.616848][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.623550][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.626181][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.636050][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.640755][ T5850] team0: Port device team_slave_0 added
[   64.656130][ T5850] team0: Port device team_slave_1 added
[   64.703545][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.705783][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.714968][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.738074][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.740599][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.750903][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.779731][ T5846] hsr_slave_0: entered promiscuous mode
[   64.782701][ T5846] hsr_slave_1: entered promiscuous mode
[   64.796664][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.799020][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.801379][ T5857] bridge_slave_0: entered allmulticast mode
[   64.804640][ T5857] bridge_slave_0: entered promiscuous mode
[   64.808935][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.812464][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.814794][ T5857] bridge_slave_1: entered allmulticast mode
[   64.817526][ T5857] bridge_slave_1: entered promiscuous mode
[   64.825061][ T5850] hsr_slave_0: entered promiscuous mode
[   64.827540][ T5850] hsr_slave_1: entered promiscuous mode
[   64.829769][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   64.831634][ T5850] Cannot create hsr debugfs directory
[   64.889701][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.896878][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.976685][ T5857] team0: Port device team_slave_0 added
[   64.995919][ T5857] team0: Port device team_slave_1 added
[   65.071349][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.074978][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.083897][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.112994][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.115471][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.125430][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.189499][ T5857] hsr_slave_0: entered promiscuous mode
[   65.193032][ T5857] hsr_slave_1: entered promiscuous mode
[   65.195730][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   65.197521][ T5857] Cannot create hsr debugfs directory
[   65.281967][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.304575][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.318062][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.343016][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.417702][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.433388][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.455802][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.487561][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.527670][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.537155][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.549652][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.562769][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.687789][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.706194][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.720431][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.728065][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.739560][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.742661][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.757394][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.760102][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.781166][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.790435][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.799434][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.802047][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.811147][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.814012][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.843431][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.846325][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.869863][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.872358][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.875797][ T5236] Bluetooth: hci0: command tx timeout
[   65.899011][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.962766][ T5236] Bluetooth: hci1: command tx timeout
[   66.089818][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.096288][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.112308][ T5236] Bluetooth: hci2: command tx timeout
[   66.140006][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.171346][ T5857] veth0_vlan: entered promiscuous mode
[   66.190226][ T5846] veth0_vlan: entered promiscuous mode
[   66.194284][ T5857] veth1_vlan: entered promiscuous mode
[   66.215599][ T5846] veth1_vlan: entered promiscuous mode
[   66.245677][ T5850] veth0_vlan: entered promiscuous mode
[   66.253755][ T5857] veth0_macvtap: entered promiscuous mode
[   66.261497][ T5850] veth1_vlan: entered promiscuous mode
[   66.266318][ T5857] veth1_macvtap: entered promiscuous mode
[   66.295229][ T5846] veth0_macvtap: entered promiscuous mode
[   66.300661][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.308591][ T5846] veth1_macvtap: entered promiscuous mode
[   66.318411][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.339428][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.350151][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.357802][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.362448][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.377077][ T5850] veth0_macvtap: entered promiscuous mode
[   66.395572][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.403832][ T5850] veth1_macvtap: entered promiscuous mode
[   66.424026][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.474689][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.480397][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.486066][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.489581][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.497717][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.501919][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.522790][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.531364][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.563151][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.566696][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.567543][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.573950][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.577596][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.599432][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.634177][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.677946][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.689514][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.741129][ T4632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.753186][ T4632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.787122][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.789950][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.856188][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.859483][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.887848][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.892786][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.896553][ T5920] netlink: 'syz.2.3': attribute type 12 has an invalid length.
[   67.427439][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   67.435570][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'.
[   67.668255][ T5963] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET)
[   67.669771][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'.
[   67.679842][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.816523][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   67.963100][ T5236] Bluetooth: hci0: command tx timeout
[   67.973985][ T5977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.042139][ T5236] Bluetooth: hci1: command tx timeout
[   68.177791][ T5989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.24'.
[   68.192535][ T5236] Bluetooth: hci2: command tx timeout
[   68.319465][ T5998] tun0: tun_chr_ioctl cmd 2148045848
[   68.323204][ T5998] tun0: tun_chr_ioctl cmd 21731
[   68.964551][ T6026] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   68.988753][ T6026] Zero length message leads to an empty skb
[   68.989203][ T6028] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   68.995049][ T6028] netlink: 208 bytes leftover after parsing attributes in process `syz.0.37'.
[   69.083444][ T6032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.348926][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.385137][ T6053] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   69.393046][ T6053] Illegal XDP return value 539658818 on prog  (id 13) dev syz_tun, expect packet loss!
[   69.625119][ T6062] pim6reg1: entered promiscuous mode
[   69.626861][ T6062] pim6reg1: entered allmulticast mode
[   69.717927][ T6071] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   69.720660][ T6071] netlink: 'syz.1.48': attribute type 11 has an invalid length.
[   69.726172][ T6071] netlink: 220 bytes leftover after parsing attributes in process `syz.1.48'.
[   69.824839][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   70.032517][ T5236] Bluetooth: hci0: command tx timeout
[   70.121954][ T5236] Bluetooth: hci1: command tx timeout
[   70.272265][ T5236] Bluetooth: hci2: command tx timeout
[   70.657440][ T6140] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   70.890043][ T6160] netlink: 'syz.1.71': attribute type 6 has an invalid length.
[   70.900067][ T6160] netlink: 'syz.1.71': attribute type 12 has an invalid length.
[   71.070986][ T6169] erspan0: entered promiscuous mode
[   71.316975][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.494191][ T6201] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.659399][ T6212] netlink: 'syz.1.87': attribute type 3 has an invalid length.
[   71.671886][ T6212] netlink: 'syz.1.87': attribute type 3 has an invalid length.
[   71.929445][ T6232] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.981257][ T6232] Bluetooth: MGMT ver 1.23
[   71.997993][ T6236] IPv6: addrconf: prefix option has invalid lifetime
[   72.004197][ T6236] nftables ruleset with unbound set
[   72.016021][ T6234] __nla_validate_parse: 13 callbacks suppressed
[   72.016038][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   72.075432][ T6240] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   72.113426][ T5236] Bluetooth: hci0: command tx timeout
[   72.199752][ T5236] Bluetooth: hci1: command tx timeout
[   72.277877][ T6257] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   72.289413][ T6257] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   72.352436][ T5236] Bluetooth: hci2: command tx timeout
[   73.161910][ T6282] netlink: 48 bytes leftover after parsing attributes in process `syz.0.107'.
[   73.272319][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   73.300969][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'.
[   73.306293][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'.
[   73.315444][ T6288] team0: entered promiscuous mode
[   73.317560][ T6288] team_slave_0: entered promiscuous mode
[   73.320184][ T6288] team_slave_1: entered promiscuous mode
[   73.329980][ T6288] bond0: entered promiscuous mode
[   73.332559][ T6288] bond_slave_0: entered promiscuous mode
[   73.335181][ T6288] bond_slave_1: entered promiscuous mode
[   73.338281][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[   73.340217][ T6288] 8021q: adding VLAN 0 to HW filter on device hsr1
[   73.359056][ T6289] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20001
[   73.417801][ T6296] sit0: mtu less than device minimum
[   73.425045][ T6297] openvswitch: netlink: IP tunnel TTL not specified.
[   73.508729][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   73.692968][ T6302] netlink: 182632 bytes leftover after parsing attributes in process `syz.1.113'.
[   74.055308][ T6329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.120'.
[   74.059184][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.120'.
[   74.294149][ T6343] ip6tnl2: entered promiscuous mode
[   74.296791][ T6343] ip6tnl2: entered allmulticast mode
[   74.303225][ T6343] team0: Device ip6tnl2 is of different type
[   74.395140][ T6347] validate_nla: 1 callbacks suppressed
[   74.395234][ T6347] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   74.665573][ T6369] Set syz0 is full, maxelem 0 reached
[   74.767515][ T6375] tipc: Started in network mode
[   74.769189][ T6375] tipc: Node identity a2ca255c4166, cluster identity 4711
[   74.772221][ T6375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.806349][ T6375] syzkaller0: entered promiscuous mode
[   74.808179][ T6375] syzkaller0: entered allmulticast mode
[   74.810426][ T6375] tipc: Resetting bearer <eth:syzkaller0>
[   74.816177][ T6374] tipc: Resetting bearer <eth:syzkaller0>
[   75.618547][ T6374] tipc: Disabling bearer <eth:syzkaller0>
[   76.117505][ T6411] netlink: 'syz.0.147': attribute type 2 has an invalid length.
[   76.123808][ T6413] netlink: 'syz.0.147': attribute type 2 has an invalid length.
[   76.169930][ T6416] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003
[   76.211635][ T6418] netlink: 'syz.0.149': attribute type 178 has an invalid length.
[   76.286737][ T6422] openvswitch: netlink: IP tunnel TTL not specified.
[   76.396508][ T6425] netlink: 'syz.0.152': attribute type 5 has an invalid length.
[   76.407327][ T6425] geneve2: entered promiscuous mode
[   76.409083][ T6425] geneve2: entered allmulticast mode
[   76.412200][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   76.415382][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   76.418191][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   76.420988][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   76.497437][ T6431] netdevsim netdevsim0: Direct firmware load for /. failed with error -2
[   76.501175][ T6431] netdevsim netdevsim0: Falling back to sysfs fallback for: /.
[   77.484291][ T6448] atomic_op ffff8881066ee198 conn xmit_atomic 0000000000000000
[   77.608802][ T6458] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   77.745303][ T6470] __nla_validate_parse: 14 callbacks suppressed
[   77.745314][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'.
[   78.347353][ T6478] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   78.374510][ T6478] bond1: entered promiscuous mode
[   78.376438][ T6478] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.633705][ T6493] netlink: 'syz.1.172': attribute type 21 has an invalid length.
[   78.637394][ T6493] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.641184][ T6493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.644198][ T6493] IPv6: NLM_F_CREATE should be set when creating new route
[   78.647170][ T6493] IPv6: NLM_F_CREATE should be set when creating new route
[   78.649898][ T6493] IPv6: NLM_F_CREATE should be set when creating new route
[   78.747404][ T6503] syz_tun: entered allmulticast mode
[   78.864152][ T6502] syz_tun: left allmulticast mode
[   78.928246][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.178'.
[   78.937151][ T6514] netlink: 826 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.095936][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'.
[   79.333143][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[   79.618337][ T6547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.055267][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.057953][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.064519][ T6597] geneve3: entered promiscuous mode
[   81.067353][ T6597] geneve3: entered allmulticast mode
[   81.096378][ T6603] policy can only be matched on NF_INET_PRE_ROUTING
[   81.096391][ T6603] unable to load match
[   81.303499][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'.
[   81.354547][ T6624] syzkaller1: entered promiscuous mode
[   81.356550][ T6624] syzkaller1: entered allmulticast mode
[   81.510592][ T6635] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   81.512457][ T6633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.516949][ T6633] syzkaller0: entered promiscuous mode
[   81.518643][ T6633] syzkaller0: entered allmulticast mode
[   81.531122][ T6633] tipc: Resetting bearer <eth:syzkaller0>
[   81.555732][ T6632] tipc: Resetting bearer <eth:syzkaller0>
[   81.582444][ T6632] tipc: Disabling bearer <eth:syzkaller0>
[   81.690663][ T6643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.693508][ T6643] syzkaller0: entered promiscuous mode
[   81.695217][ T6643] syzkaller0: entered allmulticast mode
[   81.699086][ T6643] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   81.711409][ T6643] tipc: Resetting bearer <eth:syzkaller0>
[   81.715393][ T6642] tipc: Resetting bearer <eth:syzkaller0>
[   81.725021][ T6642] tipc: Disabling bearer <eth:syzkaller0>
[   81.795220][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   81.814750][ T6645] netlink: 256 bytes leftover after parsing attributes in process `syz.1.217'.
[   81.817852][ T6645] netlink: 'syz.1.217': attribute type 3 has an invalid length.
[   82.114609][ T6655] netlink: 'syz.0.220': attribute type 21 has an invalid length.
[   82.231498][ T6662] IPv6: sit1: Disabled Multicast RS
[   82.236575][ T6662] sit1: entered allmulticast mode
[   82.607914][ T6692] netlink: 'syz.2.235': attribute type 8 has an invalid length.
[   82.785618][ T6705] __nla_validate_parse: 8 callbacks suppressed
[   82.785633][ T6705] netlink: 92 bytes leftover after parsing attributes in process `syz.1.240'.
[   82.860535][ T6710] netlink: 1 bytes leftover after parsing attributes in process `syz.1.242'.
[   82.865829][ T6709] netlink: 1 bytes leftover after parsing attributes in process `syz.1.242'.
[   82.869452][ T6710] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   82.869585][ T6711] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   82.881610][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   82.993768][ T6715] netlink: 140 bytes leftover after parsing attributes in process `syz.1.244'.
[   83.018997][ T6717] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   83.078050][ T6725] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   83.206900][ T5897] IPVS: starting estimator thread 0...
[   83.291941][ T6731] IPVS: using max 64 ests per chain, 153600 per kthread
[   83.311784][ T5236] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   83.313150][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.878188][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   83.884248][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   84.080374][ T6755] netlink: 'syz.1.258': attribute type 21 has an invalid length.
[   84.086814][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'.
[   84.090849][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'.
[   84.203504][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[   84.423228][ T6789] batadv1: entered promiscuous mode
[   84.438683][ T6788] batadv1: entered promiscuous mode
[   84.745103][ T6823] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   84.798115][ T6828] netlink: 'syz.2.277': attribute type 12 has an invalid length.
[   84.799791][ T6829] netlink: 'syz.2.277': attribute type 12 has an invalid length.
[   84.804781][ T6829] netlink: 'syz.2.277': attribute type 12 has an invalid length.
[   84.893409][ T6841] tipc: Started in network mode
[   84.895234][ T6841] tipc: Node identity 22a6804d32a1, cluster identity 4711
[   84.898096][ T6841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.900827][ T6841] syzkaller0: entered promiscuous mode
[   84.905805][ T6841] syzkaller0: entered allmulticast mode
[   84.918502][ T6841] tipc: Resetting bearer <eth:syzkaller0>
[   84.922638][ T6839] tipc: Resetting bearer <eth:syzkaller0>
[   84.933958][ T6839] tipc: Disabling bearer <eth:syzkaller0>
[   85.030143][ T6851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.193987][ T6851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.302976][ T6851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.372666][ T6851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.511376][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.515375][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.517826][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.520180][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.879359][ T6891] blkio.reset_stats is deprecated
[   86.063556][ T6906] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   86.065881][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.148005][ T6913] veth3: entered promiscuous mode
[   86.235854][ T6922] k*]: entered promiscuous mode
[   86.248967][ T6922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.267300][ T6922] veth0_to_team: entered promiscuous mode
[   86.269196][ T6922] veth0_to_team: entered allmulticast mode
[   86.515802][ T6945] gretap0: entered promiscuous mode
[   86.673422][   T10] cfg80211: failed to load regulatory.db
[   86.831531][ T6970] validate_nla: 5 callbacks suppressed
[   86.831546][ T6970] netlink: 'syz.2.330': attribute type 10 has an invalid length.
[   86.850390][ T6970] team0: Port device dummy0 added
[   86.857352][ T6970] netlink: 'syz.2.330': attribute type 10 has an invalid length.
[   86.875301][ T6970] team0: Port device dummy0 removed
[   86.881305][ T6970] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   86.885027][ T6973] batadv_slave_0: entered promiscuous mode
[   86.894640][ T6973] batadv_slave_0: left promiscuous mode
[   87.043799][ T6991] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   87.113256][ T6995] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[   87.171345][ T7000] delete_channel: no stack
[   87.186504][ T7000] delete_channel: no stack
[   87.215932][ T6999] delete_channel: no stack
[   87.217808][ T6999] delete_channel: no stack
[   87.228171][ T6999] delete_channel: no stack
[   87.231062][ T6999] delete_channel: no stack
[   87.234114][ T6999] delete_channel: no stack
[   87.235862][ T6999] delete_channel: no stack
[   87.237554][ T6999] delete_channel: no stack
[   87.239043][ T6999] delete_channel: no stack
[   87.240548][ T6999] delete_channel: no stack
[   87.245089][ T6999] delete_channel: no stack
[   87.246519][ T6999] delete_channel: no stack
[   87.247927][ T6999] delete_channel: no stack
[   87.249326][ T6999] delete_channel: no stack
[   87.250764][ T6999] delete_channel: no stack
[   87.253369][ T6999] delete_channel: no stack
[   87.257336][ T7012] IPv6: sit1: Disabled Multicast RS
[   87.258155][ T6999] delete_channel: no stack
[   87.260899][ T6999] delete_channel: no stack
[   87.263147][ T6999] delete_channel: no stack
[   87.264762][ T6999] delete_channel: no stack
[   87.267128][ T6999] delete_channel: no stack
[   87.269052][ T6999] delete_channel: no stack
[   87.270569][ T6999] delete_channel: no stack
[   87.279169][ T6999] delete_channel: no stack
[   87.280644][ T6999] delete_channel: no stack
[   87.282604][ T6999] delete_channel: no stack
[   87.284024][ T6999] delete_channel: no stack
[   87.285669][ T6999] delete_channel: no stack
[   87.287538][ T6999] delete_channel: no stack
[   87.289534][ T6999] delete_channel: no stack
[   87.291381][ T6999] delete_channel: no stack
[   87.293643][ T6999] delete_channel: no stack
[   87.421100][ T7017] nbd: must specify a size in bytes for the device
[   87.504982][ T7038] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   87.510214][ T7042] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   87.580686][ T7049] netlink: zone id is out of range
[   87.584625][ T7049] netlink: zone id is out of range
[   87.586707][ T7049] netlink: zone id is out of range
[   87.588685][ T7049] netlink: zone id is out of range
[   87.928729][ T7076] __nla_validate_parse: 81 callbacks suppressed
[   87.928740][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   88.181471][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'.
[   88.315833][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'.
[   88.328484][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'.
[   88.402514][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'.
[   88.412170][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.415912][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.465096][ T7121] syzkaller1: entered promiscuous mode
[   88.466825][ T7121] syzkaller1: entered allmulticast mode
[   89.714406][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[   89.746828][ T7140] macvlan2: entered promiscuous mode
[   89.748902][ T7140] macvlan2: entered allmulticast mode
[   89.752347][ T7140] bond1: (slave macvlan2): Opening slave failed
[   89.783278][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[   89.865775][ T5875] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.868791][ T5875] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.871262][ T5875] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.877893][ T5875] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.875654][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'.
[   90.882683][ T7172] bond0: entered promiscuous mode
[   90.884354][ T7172] bond_slave_0: entered promiscuous mode
[   90.886368][ T7172] bond_slave_1: entered promiscuous mode
[   90.888452][ T7172] dummy0: entered promiscuous mode
[   90.891927][ T7172] batadv0: entered promiscuous mode
[   90.894186][ T7172] debugfs: 'hsr1' already exists in 'hsr'
[   90.896082][ T7172] Cannot create hsr debugfs directory
[   90.897986][ T7172] hsr1: entered allmulticast mode
[   90.899660][ T7172] bond0: entered allmulticast mode
[   90.901343][ T7172] bond_slave_0: entered allmulticast mode
[   90.903502][ T7172] bond_slave_1: entered allmulticast mode
[   90.905388][ T7172] dummy0: entered allmulticast mode
[   90.907160][ T7172] batadv0: entered allmulticast mode
[   90.909231][ T7172] 8021q: adding VLAN 0 to HW filter on device hsr1
[   90.912846][ T7172] bond0: left promiscuous mode
[   90.918633][ T7172] bond_slave_0: left promiscuous mode
[   90.920937][ T7172] bond_slave_1: left promiscuous mode
[   90.923580][ T7172] dummy0: left promiscuous mode
[   90.927007][ T7172] batadv0: left promiscuous mode
[   91.078352][ T7184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.399'.
[   91.100310][ T7184] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[   91.105426][ T7184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.108598][ T7184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.136950][ T7191] netlink: 56 bytes leftover after parsing attributes in process `syz.2.406'.
[   92.176257][ T7191] syz.2.406 (7191) used greatest stack depth: 19832 bytes left
[   92.651043][ T7249] dvmrp1: tun_chr_ioctl cmd 1074025681
[   92.942767][ T7280] __nla_validate_parse: 9 callbacks suppressed
[   92.942778][ T7280] netlink: 5 bytes leftover after parsing attributes in process `syz.1.428'.
[   92.950270][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   93.025116][ T7274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.027743][ T7274] syzkaller0: entered promiscuous mode
[   93.029505][ T7274] syzkaller0: entered allmulticast mode
[   93.047286][ T7274] tipc: Resetting bearer <eth:syzkaller0>
[   93.057638][ T7274] tipc: Resetting bearer <eth:syzkaller0>
[   93.078308][ T7274] tipc: Disabling bearer <eth:syzkaller0>
[   93.103584][ T7292] netlink: 9 bytes leftover after parsing attributes in process `syz.0.431'.
[   93.108990][ T7292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.431'.
[   93.113272][ T7292] netlink: 43 bytes leftover after parsing attributes in process `syz.0.431'.
[   93.116108][ T7292] netlink: 'syz.0.431': attribute type 5 has an invalid length.
[   93.118599][ T7292] netlink: 43 bytes leftover after parsing attributes in process `syz.0.431'.
[   93.169364][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   93.324532][ T7314] sctp: [Deprecated]: syz.0.435 (pid 7314) Use of int in max_burst socket option deprecated.
[   93.324532][ T7314] Use struct sctp_assoc_value instead
[   93.420742][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   94.000142][ T7396] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   94.003840][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   94.007049][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   94.039140][ T7397] net_ratelimit: 10 callbacks suppressed
[   94.039218][ T7397] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   94.443194][ T7412] netlink: 'syz.0.457': attribute type 10 has an invalid length.
[   94.454722][ T7412] 8021q: adding VLAN 0 to HW filter on device team0
[   94.459989][ T7412] bond0: (slave team0): Enslaving as an active interface with an up link
[   94.465036][ T7412] netlink: 'syz.0.457': attribute type 10 has an invalid length.
[   94.477346][ T7412] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   94.523140][ T7414] openvswitch: netlink: Message has 5 unknown bytes.
[   95.070189][ T7421] sctp: [Deprecated]: syz.1.460 (pid 7421) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.070189][ T7421] Use struct sctp_sack_info instead
[   95.082023][ T7422] sctp: [Deprecated]: syz.1.460 (pid 7422) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.082023][ T7422] Use struct sctp_sack_info instead
[   95.972775][ T7436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.023537][ T7439] netlink: 'syz.0.464': attribute type 21 has an invalid length.
[   96.597363][ T7481] netlink: 'syz.2.474': attribute type 5 has an invalid length.
[   96.600589][ T7467] delete_channel: no stack
[   96.788624][ T7493] pimreg: entered allmulticast mode
[   97.032832][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.057254][ T7513] netlink: 'syz.2.487': attribute type 2 has an invalid length.
[   97.134392][ T7517] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[   98.041487][ T7556] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.306792][ T7570] __nla_validate_parse: 13 callbacks suppressed
[   98.306809][ T7570] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.505'.
[   98.527693][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'.
[   98.573412][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'.
[   98.582937][ T7588] bridge2: entered allmulticast mode
[   98.759185][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'.
[   98.762750][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'.
[   98.930035][ T7605] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[   98.954689][ T7605] netlink: 208 bytes leftover after parsing attributes in process `syz.2.517'.
[   98.958292][ T7605] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[   98.961331][ T7605] netlink: 'syz.2.517': attribute type 2 has an invalid length.
[   99.097244][ T7614] netlink: 'syz.2.519': attribute type 12 has an invalid length.
[   99.104334][ T7614] netlink: 'syz.2.519': attribute type 12 has an invalid length.
[   99.435171][ T7625] lo: entered allmulticast mode
[   99.437071][ T7625] lo: left allmulticast mode
[   99.542724][ T7628] netlink: 92 bytes leftover after parsing attributes in process `syz.1.525'.
[  100.268245][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[  100.413995][ T7686] pimreg: entered allmulticast mode
[  100.420593][ T7686] pimreg: left allmulticast mode
[  100.689763][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  100.694266][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'.
[  100.722587][ T7707] netlink: 'syz.2.553': attribute type 15 has an invalid length.
[  101.865925][ T7734] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  102.142847][   T33] audit: type=1800 audit(1757479219.663:2): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.577" name="memory.events" dev="tmpfs" ino=854 res=0 errno=0
[  102.820126][ T7808] netlink: 'syz.1.586': attribute type 10 has an invalid length.
[  102.894205][ T7808] macvlan1: entered promiscuous mode
[  102.899341][ T7808] team0: Port device macvlan1 added
[  102.991906][ T7817] block nbd0: not configured, cannot reconfigure
[  103.081925][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  103.145673][ T7830] netlink: 'syz.1.592': attribute type 2 has an invalid length.
[  103.150742][ T7830] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[  103.155324][ T7830] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[  103.212836][ T7836] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.310099][ T7849] bridge_slave_0: left allmulticast mode
[  103.335283][ T7849] bridge_slave_0: left promiscuous mode
[  103.338556][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.368526][ T7849] bridge_slave_1: left allmulticast mode
[  103.370831][ T7849] bridge_slave_1: left promiscuous mode
[  103.377455][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.402015][ T7849] bond0: (slave bond_slave_0): Releasing backup interface
[  103.408905][ T7855] __nla_validate_parse: 9 callbacks suppressed
[  103.408916][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  103.409532][ T7849] bond_slave_0: left promiscuous mode
[  103.426627][ T7849] bond0: (slave bond_slave_1): Releasing backup interface
[  103.434716][ T7849] bond_slave_1: left promiscuous mode
[  103.439688][ T7849] team_slave_0: left promiscuous mode
[  103.447857][ T7849] team0: Port device team_slave_0 removed
[  103.453764][ T7849] team_slave_1: left promiscuous mode
[  103.466675][ T7849] team0: Failed to send options change via netlink (err -105)
[  103.477525][ T7849] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  103.503120][ T7849] team0: Port device team_slave_1 removed
[  103.515375][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.526033][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.558455][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.572747][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.599324][ T7849] macvlan1: left promiscuous mode
[  103.608742][ T7849] team0: Failed to send options change via netlink (err -105)
[  103.616170][ T7849] team0: Failed to send port change of device macvlan1 via netlink (err -105)
[  103.620083][ T7849] team0: Port device macvlan1 removed
[  103.718785][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.603'.
[  104.011084][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'.
[  104.026344][ T7926] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004
[  104.041980][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'.
[  104.068385][ T7927] pimreg: left allmulticast mode
[  104.310579][ T7948] pimreg: entered allmulticast mode
[  104.319121][ T7948] pimreg: left allmulticast mode
[  104.346096][ T7950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'.
[  104.349238][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  104.352035][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  104.355944][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'.
[  104.468532][ T7956] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.623'.
[  104.472378][ T7956] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.623'.
[  104.563123][ T7962] ip6_vti0: entered allmulticast mode
[  104.587818][ T7964] openvswitch: netlink: Unknown key attributes 2
[  104.593854][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.628'.
[  104.596768][ T7964] openvswitch: netlink: Flow key attr not present in new flow.
[  105.306766][ T7955] ip6_vti0: left allmulticast mode
[  106.782485][ T8021] team0 (unregistering): Port device team_slave_0 removed
[  106.789487][ T8021] team0 (unregistering): Port device team_slave_1 removed
[  106.829338][ T8027] syzkaller1: entered promiscuous mode
[  106.831522][ T8027] syzkaller1: entered allmulticast mode
[  106.885685][ T8035] validate_nla: 1 callbacks suppressed
[  106.885696][ T8035] netlink: 'syz.0.653': attribute type 10 has an invalid length.
[  106.894860][ T8035] team0: Port device geneve0 added
[  106.921497][ T8037] ieee802154 phy0 wpan0: encryption failed: -90
[  106.958536][ T8041] ip6erspan0: entered promiscuous mode
[  107.030292][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.055701][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.185088][ T8061] pimreg: entered allmulticast mode
[  107.188695][ T8061] pimreg: left allmulticast mode
[  107.922260][ T8068] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  108.037912][ T8079] netlink: 'syz.0.669': attribute type 10 has an invalid length.
[  108.042707][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.046757][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.061473][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.064014][ T8079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.067169][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.069661][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.084412][ T8079] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  108.102168][ T8084] bridge_slave_1: left allmulticast mode
[  108.104457][ T8084] bridge_slave_1: left promiscuous mode
[  108.106823][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.124141][ T8084] bridge_slave_0: left allmulticast mode
[  108.126319][ T8084] bridge_slave_0: left promiscuous mode
[  108.128652][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.159108][ T8084] bond0: (slave bridge0): Releasing backup interface
[  108.388535][ T8111] smc: net device bond0 applied user defined pnetid SYZ2
[  108.399143][ T8111] netlink: 'syz.2.679': attribute type 13 has an invalid length.
[  108.494811][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.497499][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.616225][ T8111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.741202][ T5858] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.748024][ T5858] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.751291][ T5858] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.763136][ T5858] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.294197][ T8143] netlink: 'syz.1.687': attribute type 1 has an invalid length.
[  109.317296][ T8148] __nla_validate_parse: 16 callbacks suppressed
[  109.317308][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'.
[  109.416386][ T8157] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  109.636428][ T8179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.698'.
[  109.888308][ T8189] geneve2: entered promiscuous mode
[  109.890077][ T8189] geneve2: entered allmulticast mode
[  109.895505][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  109.898856][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  109.910574][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  109.913488][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  110.007719][ T8185] can: request_module (can-proto-0) failed.
[  110.031499][ T8195] netlink: 412 bytes leftover after parsing attributes in process `syz.1.702'.
[  110.035419][ T8195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.702'.
[  110.069790][ T8199] netlink: 'syz.1.703': attribute type 10 has an invalid length.
[  110.078932][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.703'.
[  110.090548][ T8199] geneve0: entered promiscuous mode
[  110.096923][ T8199] team0: Port device geneve0 added
[  110.247098][ T8202] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  110.305682][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  110.421481][ T8232] netlink: 'syz.2.713': attribute type 10 has an invalid length.
[  110.425445][ T8232] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  110.539880][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.718'.
[  110.770141][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  110.814120][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'.
[  110.817742][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'.
[  111.372958][   T57] block nbd0: Receive control failed (result -104)
[  111.493628][ T8290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.497721][ T8290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.504611][ T8290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  111.797714][ T8290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.802410][ T8290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.806824][ T8290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  111.873300][ T8290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.877237][ T8290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.881264][ T8290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  111.953140][ T8290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.957109][ T8290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.961188][ T8290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  111.981839][ T8298] bond0: (slave dummy0): Releasing backup interface
[  111.985010][ T8298] dummy0 (unregistering): left allmulticast mode
[  112.038341][ T5858] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.041312][ T5858] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.044678][ T5858] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  112.057819][ T5858] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.061215][ T5858] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.064584][ T5858] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  112.075655][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.080349][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.083946][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  112.098552][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.102255][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.105592][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  112.710196][ T8319] netlink: zone id is out of range
[  112.714803][ T8319] netlink: zone id is out of range
[  112.716944][ T8319] netlink: zone id is out of range
[  112.719057][ T8319] netlink: zone id is out of range
[  112.721121][ T8319] netlink: zone id is out of range
[  112.724281][ T8319] netlink: zone id is out of range
[  112.726475][ T8319] netlink: zone id is out of range
[  112.729578][ T8319] netlink: zone id is out of range
[  112.733838][ T8319] netlink: zone id is out of range
[  112.823568][ T8322] macsec1: entered promiscuous mode
[  112.825710][ T8322] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  112.839349][ T8322] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  113.159007][ T8344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.259684][ T8341] tipc: Disabling bearer <eth:syzkaller0>
[  113.435014][ T8352] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  113.442309][ T8352] netlink: 'syz.0.749': attribute type 2 has an invalid length.
[  113.448011][ T8353] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  113.463071][ T8353] netlink: 'syz.0.749': attribute type 2 has an invalid length.
[  113.599098][ T8366] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  113.630175][ T8366] bond2: (slave bridge3): making interface the new active one
[  113.633803][ T8366] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  113.942723][ T8400] netlink: 'syz.1.766': attribute type 3 has an invalid length.
[  113.945514][ T8400] netlink: 'syz.1.766': attribute type 2 has an invalid length.
[  113.948171][ T8400] netlink: 'syz.1.766': attribute type 2 has an invalid length.
[  114.522155][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  114.610721][ T8424] netlink: 'syz.0.774': attribute type 15 has an invalid length.
[  114.614358][ T8426] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[  114.617735][ T8426] __nla_validate_parse: 50 callbacks suppressed
[  114.617747][ T8426] netlink: 108 bytes leftover after parsing attributes in process `syz.0.774'.
[  114.721351][ T8433] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.776'.
[  114.877047][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'.
[  114.881936][ T8443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.778'.
[  114.885732][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'.
[  114.889138][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.778'.
[  114.939660][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'.
[  115.427358][ T8475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.442437][ T8475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.505928][ T8491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.792'.
[  115.628973][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.635557][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  115.639097][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.642757][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  115.647503][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.651110][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  115.656533][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.660965][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  115.757158][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'.
[  115.809228][ T8502] tipc: Started in network mode
[  115.811222][ T8502] tipc: Node identity 1e412ca77129, cluster identity 4711
[  115.816445][ T8502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.819808][ T8502] syzkaller0: entered promiscuous mode
[  115.823429][ T8502] syzkaller0: entered allmulticast mode
[  115.847920][ T8501] tipc: Resetting bearer <eth:syzkaller0>
[  115.862564][ T8501] tipc: Disabling bearer <eth:syzkaller0>
[  115.901030][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'.
[  116.489660][ T8531] dvmrp0: entered allmulticast mode
[  116.830892][ T8550] bridge: RTM_NEWNEIGH with invalid ether address
[  117.774201][ T8573] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.786214][ T8573] bond3: (slave geneve3): making interface the new active one
[  117.791354][ T8573] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  117.805650][ T8573] syz.1.821 (8573) used greatest stack depth: 18664 bytes left
[  117.823279][ T8578] nbd: must specify a device to reconfigure
[  117.830121][ T8578] : entered promiscuous mode
[  117.833478][ T8577] delete_channel: no stack
[  117.917846][ T8582] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  118.862530][ T8616] sctp: [Deprecated]: syz.2.834 (pid 8616) Use of int in max_burst socket option.
[  118.862530][ T8616] Use struct sctp_assoc_value instead
[  118.873378][ T8616] sctp: [Deprecated]: syz.2.834 (pid 8616) Use of int in max_burst socket option deprecated.
[  118.873378][ T8616] Use struct sctp_assoc_value instead
[  118.963320][ T8622] validate_nla: 6 callbacks suppressed
[  118.963331][ T8622] netlink: 'syz.2.837': attribute type 1 has an invalid length.
[  118.974144][ T8625] netlink: 'syz.1.838': attribute type 5 has an invalid length.
[  119.002889][ T8625] bridge3: entered promiscuous mode
[  119.004624][ T8625] bridge3: entered allmulticast mode
[  119.195852][ T8641] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.199816][ T8641] bond5: (slave bond6): Enslaving as an active interface with an up link
[  119.206069][ T8642] gretap0: entered promiscuous mode
[  119.220383][ T8641] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.257897][ T8641] 8021q: adding VLAN 0 to HW filter on device bond7
[  119.263837][ T8641] bond5: (slave bond7): Enslaving as an active interface with an up link
[  119.524868][ T8668] netlink: 'syz.0.854': attribute type 5 has an invalid length.
[  119.728975][ T8682] __nla_validate_parse: 9 callbacks suppressed
[  119.729053][ T8682] netlink: 87 bytes leftover after parsing attributes in process `syz.1.857'.
[  119.990394][ T8701] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.862'.
[  120.124725][ T8709] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.864'.
[  120.128461][ T8708] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.864'.
[  120.279227][ T8713] ieee802154 phy0 wpan0: encryption failed: -90
[  120.326754][ T8717] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.867'.
[  120.727360][ T8725] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  120.732092][ T8725] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  120.757746][ T8726] netlink: 96 bytes leftover after parsing attributes in process `syz.2.870'.
[  120.772598][ T8730] trusted_key: syz.0.871 sent an empty control message without MSG_MORE.
[  120.792002][ T8732] netlink: 'syz.1.872': attribute type 5 has an invalid length.
[  120.794629][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'.
[  120.902617][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[  121.027951][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'.
[  121.048219][ T8764] syzkaller0: entered promiscuous mode
[  121.050513][ T8764] syzkaller0: entered allmulticast mode
[  121.962145][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  122.201470][ T8780] netlink: 'syz.0.887': attribute type 2 has an invalid length.
[  122.291129][ T8788] net_ratelimit: 235 callbacks suppressed
[  122.291146][ T8788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.431369][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[  122.860236][ T5878] IPVS: starting estimator thread 0...
[  122.977415][ T8840] IPVS: using max 53 ests per chain, 127200 per kthread
[  123.066956][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  124.163378][ T8921] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.176145][ T8921] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.188814][ T8921] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.205611][ T8921] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.220139][ T8921] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.234373][ T8921] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.246143][ T8921] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.257964][ T8921] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.269428][ T8921] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.290321][ T8921] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.305438][ T8921] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.320129][ T8921] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.339544][ T8921] bridge16: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.355408][ T8921] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.370982][ T8921] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.389640][ T8921] bridge19: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.408792][ T8921] bridge20: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.423213][ T8921] bridge21: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.434672][ T8921] bridge22: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.443865][ T8921] bridge23: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.458585][ T8921] bridge24: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.474176][ T8921] bridge25: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.486119][ T8921] bridge26: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.498344][ T8921] bridge27: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.515907][ T8921] bridge28: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.531628][ T8921] bridge29: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.548799][ T8921] bridge30: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.561063][ T8921] bridge31: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.573764][ T8921] bridge32: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.581626][ T8929] dvmrp1: entered allmulticast mode
[  124.590266][ T8921] bridge33: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.601508][ T8921] bridge34: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.614263][ T8921] bridge35: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.627422][ T8921] bridge36: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.641088][ T8921] bridge37: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.654399][ T8921] bridge38: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.667862][ T8921] bridge39: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.683320][ T8921] bridge40: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.697000][ T8921] bridge41: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.710249][ T8921] bridge42: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.723066][ T8921] bridge43: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.736076][ T8921] bridge44: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.748990][ T8921] bridge45: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.762015][ T8921] bridge46: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.774596][ T8921] bridge47: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.785567][ T8921] bridge48: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.796084][ T8921] bridge49: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.808943][ T8921] bridge50: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.822503][ T8921] bridge51: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.871049][ T8921] bridge52: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  124.926369][ T8938] syzkaller0: entered promiscuous mode
[  124.928253][ T8938] syzkaller0: entered allmulticast mode
[  124.941016][ T8921] bridge53: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  125.939950][ T8921] bridge54: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  126.032455][ T8948] __nla_validate_parse: 10 callbacks suppressed
[  126.032469][ T8948] netlink: 256 bytes leftover after parsing attributes in process `syz.2.937'.
[  126.047240][ T8948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.937'.
[  126.054030][ T8948] dvmrp0: left allmulticast mode
[  126.056035][ T8948] dvmrp1: left allmulticast mode
[  126.079422][ T8952] raw_sendmsg: syz.0.938 forgot to set AF_INET. Fix it!
[  126.196226][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'.
[  126.204352][ T8966] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  126.208937][ T8965] syzkaller1: entered promiscuous mode
[  126.211309][ T8965] syzkaller1: entered allmulticast mode
[  126.260862][ T8970] ip6gre0: entered allmulticast mode
[  126.269722][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'.
[  126.401261][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'.
[  126.406199][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'.
[  126.763087][ T9004] syz.1.955 uses old SIOCAX25GETINFO
[  127.136899][ T9019] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003
[  127.267561][ T9026] netlink: 'syz.0.963': attribute type 4 has an invalid length.
[  127.319452][ T9029] 8021q: adding VLAN 0 to HW filter on device bond9
[  127.325494][ T9029] bond0: (slave bond9): Enslaving as an active interface with an up link
[  127.484956][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.968'.
[  127.488348][ T9041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.968'.
[  127.491569][ T9041] bridge_slave_0: entered allmulticast mode
[  127.789830][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.975'.
[  128.021797][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[  128.312369][ T9104] delete_channel: no stack
[  128.331174][ T9106] delete_channel: no stack
[  128.333692][ T9106] delete_channel: no stack
[  128.335801][ T9106] delete_channel: no stack
[  128.337849][ T9106] delete_channel: no stack
[  128.339838][ T9106] delete_channel: no stack
[  128.341956][ T9106] delete_channel: no stack
[  128.343989][ T9106] delete_channel: no stack
[  128.346100][ T9106] delete_channel: no stack
[  128.348123][ T9106] delete_channel: no stack
[  128.350238][ T9106] delete_channel: no stack
[  128.352651][ T9106] delete_channel: no stack
[  128.354589][ T9106] delete_channel: no stack
[  128.356635][ T9106] delete_channel: no stack
[  128.358812][ T9106] delete_channel: no stack
[  128.360727][ T9106] delete_channel: no stack
[  128.362941][ T9106] delete_channel: no stack
[  128.364889][ T9106] delete_channel: no stack
[  128.366935][ T9106] delete_channel: no stack
[  128.368915][ T9106] delete_channel: no stack
[  128.370843][ T9106] delete_channel: no stack
[  128.374899][ T9106] delete_channel: no stack
[  128.376708][ T9106] delete_channel: no stack
[  128.378491][ T9106] delete_channel: no stack
[  128.380460][ T9106] delete_channel: no stack
[  128.383381][ T9106] delete_channel: no stack
[  128.385480][ T9106] delete_channel: no stack
[  128.387579][ T9106] delete_channel: no stack
[  128.389830][ T9106] delete_channel: no stack
[  128.392115][ T9106] delete_channel: no stack
[  128.394446][ T9106] delete_channel: no stack
[  128.396574][ T9106] delete_channel: no stack
[  128.398669][ T9106] delete_channel: no stack
[  128.400900][ T9106] delete_channel: no stack
[  128.403410][ T9106] delete_channel: no stack
[  128.405671][ T9106] delete_channel: no stack
[  128.407789][ T9106] delete_channel: no stack
[  128.409896][ T9106] delete_channel: no stack
[  128.412359][ T9106] delete_channel: no stack
[  128.414399][ T9106] delete_channel: no stack
[  128.416603][ T9106] delete_channel: no stack
[  128.418770][ T9106] delete_channel: no stack
[  128.420871][ T9106] delete_channel: no stack
[  128.423416][ T9106] delete_channel: no stack
[  128.425443][ T9106] delete_channel: no stack
[  128.427466][ T9106] delete_channel: no stack
[  128.429507][ T9106] delete_channel: no stack
[  128.431393][ T9106] delete_channel: no stack
[  128.437248][ T9106] delete_channel: no stack
[  128.439313][ T9106] delete_channel: no stack
[  128.441305][ T9106] delete_channel: no stack
[  128.443989][ T9106] delete_channel: no stack
[  128.445906][ T9106] delete_channel: no stack
[  128.447772][ T9106] delete_channel: no stack
[  128.449733][ T9106] delete_channel: no stack
[  128.451788][ T9106] delete_channel: no stack
[  128.453759][ T9106] delete_channel: no stack
[  128.455721][ T9106] delete_channel: no stack
[  128.457666][ T9106] delete_channel: no stack
[  128.459627][ T9106] delete_channel: no stack
[  128.461619][ T9106] delete_channel: no stack
[  128.464170][ T9106] delete_channel: no stack
[  128.466168][ T9106] delete_channel: no stack
[  128.468116][ T9106] delete_channel: no stack
[  128.470086][ T9106] delete_channel: no stack
[  128.640334][ T9114] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  128.663646][ T9116] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  128.670408][ T9114] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  128.686562][ T9114] syz_tun: entered promiscuous mode
[  128.689312][ T9114] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  128.715385][ T9114] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.489606][ T9116] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  130.536273][ T9190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.172138][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.201929][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.202819][ T9268] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004
[  131.208819][ T9268] openvswitch: netlink: Missing valid actions attribute.
[  131.211318][ T9268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.215682][ T9268] __nla_validate_parse: 24 callbacks suppressed
[  131.215691][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'.
[  131.226151][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.230410][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.239163][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.245856][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'.
[  131.248945][ T9268] openvswitch: netlink: Flow actions attr not present in new flow.
[  131.252048][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.578201][ T9295] netlink: 'syz.0.1052': attribute type 13 has an invalid length.
[  131.631808][ T5236] Bluetooth: hci1: command tx timeout
[  132.057187][ T9335] netlink: 'syz.1.1060': attribute type 12 has an invalid length.
[  132.149736][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.153084][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.161440][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.335445][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1066'.
[  132.518948][ T9367] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1072'.
[  132.532032][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  132.568442][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'.
[  132.755784][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.560245][ T9407] bond0: (slave syz_tun): Releasing backup interface
[  133.564639][ T9407] syz_tun: left promiscuous mode
[  133.581494][ T9407] geneve0: left promiscuous mode
[  133.590690][ T9407] team0: Port device geneve0 removed
[  133.596770][ T9407] bond3: (slave geneve3): Releasing active interface
[  133.897218][ T9419] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1087'.
[  133.902641][ T9419] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  134.424108][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'.
[  134.469250][ T9443] sctp: [Deprecated]: syz.0.1096 (pid 9443) Use of int in max_burst socket option.
[  134.469250][ T9443] Use struct sctp_assoc_value instead
[  134.588889][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'.
[  134.593202][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'.
[  135.309276][ T9495] xt_socket: unknown flags 0xd0
[  135.459546][ T9500] syzkaller0: entered promiscuous mode
[  135.463983][ T9500] syzkaller0: entered allmulticast mode
[  135.484479][ T9502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.508514][ T9502] tipc: Disabling bearer <eth:syzkaller0>
[  135.972984][ T9539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.976178][ T9540] syzkaller0: entered promiscuous mode
[  135.978372][ T9540] syzkaller0: entered allmulticast mode
[  136.002901][ T9542] tipc: Resetting bearer <eth:syzkaller0>
[  136.014674][ T9546] ip6erspan0: left promiscuous mode
[  136.024508][ T9542] tipc: Resetting bearer <eth:syzkaller0>
[  136.036385][ T9542] tipc: Disabling bearer <eth:syzkaller0>
[  136.235120][ T9558] __nla_validate_parse: 13 callbacks suppressed
[  136.235137][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  136.262721][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  136.266323][ T9558] netlink: 'syz.0.1138': attribute type 12 has an invalid length.
[  136.269249][ T9558] netlink: 'syz.0.1138': attribute type 11 has an invalid length.
[  136.437844][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  137.368425][ T9586] netlink: 'syz.0.1147': attribute type 3 has an invalid length.
[  137.377223][ T9588] net_ratelimit: 31 callbacks suppressed
[  137.377239][ T9588] Dead loop on virtual device ip6_vti0, fix it urgently!
[  137.619035][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'.
[  137.675195][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  137.678618][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  137.730844][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  137.733954][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  137.737257][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  137.740068][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  137.749399][ T9613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.754565][ T9613] syzkaller0: entered promiscuous mode
[  137.756382][ T9613] syzkaller0: entered allmulticast mode
[  137.780216][ T9613] tipc: Resetting bearer <eth:syzkaller0>
[  137.785631][ T9612] tipc: Resetting bearer <eth:syzkaller0>
[  137.814914][ T9612] tipc: Disabling bearer <eth:syzkaller0>
[  138.047388][ T7895] IPVS: starting estimator thread 0...
[  138.134320][ T9639] IPVS: using max 64 ests per chain, 153600 per kthread
[  138.422240][ T9657] delete_channel: no stack
[  138.433101][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.654658][ T9672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.686782][ T9672] syzkaller0: entered promiscuous mode
[  138.696744][ T9672] syzkaller0: entered allmulticast mode
[  138.718180][ T9672] tipc: Resetting bearer <eth:syzkaller0>
[  138.736141][ T9670] tipc: Resetting bearer <eth:syzkaller0>
[  138.764967][ T9670] tipc: Disabling bearer <eth:syzkaller0>
[  138.870949][ T9680] bridge7: entered promiscuous mode
[  138.991595][ T9686] syzkaller1: entered promiscuous mode
[  138.993666][ T9686] syzkaller1: entered allmulticast mode
[  139.306702][ T9724] netlink: 'syz.0.1190': attribute type 2 has an invalid length.
[  139.317934][ T9724] k*: entered promiscuous mode
[  139.332063][ T9724] gretap0: left promiscuous mode
[  139.343894][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.347655][ T9724] 8021q: adding VLAN 0 to HW filter on device team0
[  139.355026][ T9724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.935049][ T9733] xfrm1: entered promiscuous mode
[  139.936810][ T9733] xfrm1: entered allmulticast mode
[  140.119720][ T9748] netlink: 'syz.0.1201': attribute type 4 has an invalid length.
[  140.481172][ T9777] netlink: 'syz.1.1208': attribute type 8 has an invalid length.
[  140.481176][ T9787] netlink: 'syz.1.1208': attribute type 8 has an invalid length.
[  140.615418][ T9806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.618042][ T9806] syzkaller0: entered promiscuous mode
[  140.620035][ T9806] syzkaller0: entered allmulticast mode
[  140.646256][ T9806] tipc: Resetting bearer <eth:syzkaller0>
[  140.649355][ T9805] tipc: Resetting bearer <eth:syzkaller0>
[  140.661290][ T9805] tipc: Disabling bearer <eth:syzkaller0>
[  140.751997][    C1] Dead loop on virtual device ip6_vti0, fix it urgently!
[  140.754948][ T9808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.758563][ T9808] syzkaller0: entered promiscuous mode
[  140.760754][ T9808] syzkaller0: entered allmulticast mode
[  140.768657][ T9808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  141.367750][ T9819] tipc: Resetting bearer <eth:syzkaller0>
[  141.427813][ T9817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.472116][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  141.579428][ T9807] tipc: Resetting bearer <eth:syzkaller0>
[  141.609437][ T9807] tipc: Disabling bearer <eth:syzkaller0>
[  142.060577][ T9871] __nla_validate_parse: 22 callbacks suppressed
[  142.060592][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'.
[  142.081249][ T9873] tipc: Cannot configure node identity twice
[  142.345797][ T9905] netlink: del zone limit has 4 unknown bytes
[  142.559286][ T9921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1250'.
[  143.087094][ T9931] bridge7: left promiscuous mode
[  143.089396][ T9931] xfrm1: left promiscuous mode
[  143.091477][ T9931] xfrm1: left allmulticast mode
[  143.109968][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'.
[  143.114914][ T9931] hsr_slave_0: left promiscuous mode
[  143.118270][ T9931] hsr_slave_1: left promiscuous mode
[  143.427394][ T9944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1256'.
[  143.430296][ T9943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1256'.
[  143.477087][ T9950] bridge_slave_0: left allmulticast mode
[  143.482663][ T9950] bridge_slave_0: left promiscuous mode
[  143.486577][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.489906][ T9951] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  143.497978][ T9950] bridge_slave_1: left allmulticast mode
[  143.500721][ T9950] bridge_slave_1: left promiscuous mode
[  143.509878][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.520165][ T9950] bond0: (slave bond_slave_0): Releasing backup interface
[  143.526103][ T9950] bond_slave_0: left allmulticast mode
[  143.534526][ T9950] bond0: (slave bond_slave_1): Releasing backup interface
[  143.538883][ T9950] bond_slave_1: left allmulticast mode
[  143.543611][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.548407][ T9950] bond2: (slave bridge3): Releasing active interface
[  143.641730][ T9955] ieee802154 phy0 wpan0: encryption failed: -22
[  143.684654][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'.
[  143.841016][ T9971] Dead loop on virtual device ip6_vti0, fix it urgently!
[  143.982887][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'.
[  144.078002][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1269'.
[  144.081448][ T9982] bond0: invalid ARP target 0.0.0.0 specified for addition
[  144.086113][ T9982] bond0: option arp_ip_target: invalid value (0)
[  144.205698][ T9988] vlan0: entered promiscuous mode
[  144.207944][ T9988] vlan0: entered allmulticast mode
[  144.209623][ T9988] hsr_slave_1: entered allmulticast mode
[  144.230680][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'.
[  144.648358][T10009] tun0: tun_chr_ioctl cmd 1074025675
[  144.650250][T10009] tun0: persist enabled
[  144.912026][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  145.207797][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  146.832172][    C1] Dead loop on virtual device ip6_vti0, fix it urgently!
[  147.744149][T10029] netlink: 'syz.0.1283': attribute type 3 has an invalid length.
[  147.813299][T10042] netlink: 'syz.2.1285': attribute type 11 has an invalid length.
[  147.817873][T10042] __nla_validate_parse: 1 callbacks suppressed
[  147.817886][T10042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1285'.
[  147.840175][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'.
[  147.847119][T10044] veth0: entered promiscuous mode
[  147.849484][T10043] veth0: left promiscuous mode
[  147.884780][T10049] Dead loop on virtual device ip6_vti0, fix it urgently!
[  147.952011][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  147.976554][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'.
[  148.064127][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  148.111982][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  148.202130][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'.
[  148.265293][T10076] pim6reg: entered allmulticast mode
[  148.346294][T10077] pim6reg: left allmulticast mode
[  148.887837][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'.
[  148.976270][T10091] sctp: [Deprecated]: syz.2.1304 (pid 10091) Use of int in max_burst socket option.
[  148.976270][T10091] Use struct sctp_assoc_value instead
[  149.134131][T10107] veth1_to_bond: entered allmulticast mode
[  149.156888][T10114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.160071][T10114] syzkaller0: entered promiscuous mode
[  149.163153][T10114] syzkaller0: entered allmulticast mode
[  149.165776][T10107] veth1_to_bond: left allmulticast mode
[  149.176659][T10114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  149.194015][T10113] tipc: Resetting bearer <eth:syzkaller0>
[  149.206613][T10113] tipc: Disabling bearer <eth:syzkaller0>
[  149.215970][T10116] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  149.218595][T10116] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  149.224360][T10116] netlink: 'syz.2.1313': attribute type 2 has an invalid length.
[  149.226910][T10116] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  149.260363][T10122] netlink: 'syz.2.1316': attribute type 15 has an invalid length.
[  149.264451][T10121] netlink: 'syz.0.1315': attribute type 3 has an invalid length.
[  149.265321][T10122] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1316'.
[  149.267438][T10121] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1315'.
[  149.309405][T10126] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1317'.
[  149.313796][T10126] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1317'.
[  149.755047][T10152] tc_dump_action: action bad kind
[  149.775999][T10152] IPVS: ip_vs_add_dest(): server weight less than zero
[  149.903399][T10156] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  150.108109][T10167] hsr_slave_1 (unregistering): left promiscuous mode
[  150.131410][T10178] syzkaller0: entered promiscuous mode
[  150.133607][T10178] syzkaller0: entered allmulticast mode
[  150.138547][T10178] tipc: Enabling of bearer <eth:syzka> rejected, failed to enable media
[  150.141856][T10176] netlink: 'syz.1.1332': attribute type 13 has an invalid length.
[  150.347281][T10194] netlink: 'syz.1.1336': attribute type 5 has an invalid length.
[  150.438079][T10208] bond0: (slave syz_tun): Releasing backup interface
[  150.446756][T10208] bond0: (slave team0): Releasing backup interface
[  150.456419][T10208] bond0: (slave bond_slave_0): Releasing backup interface
[  150.460386][T10208] bond0: (slave bond_slave_1): Releasing backup interface
[  150.467174][T10208] team0: Port device team_slave_0 removed
[  150.470764][T10208] team0: Port device team_slave_1 removed
[  150.473876][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.476533][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.480863][T10208] team0: Port device geneve0 removed
[  150.486086][T10208] bond5: (slave bond6): Releasing backup interface
[  150.488703][T10208] bond5: (slave bond6): the permanent HWaddr of slave - 42:9c:23:c0:71:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  150.501268][T10208] bond5: (slave bond7): Releasing backup interface
[  150.506441][T10208] bond0: (slave bond9): Releasing backup interface
[  150.557968][T10217] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  150.822307][T10245] bridge10: entered promiscuous mode
[  150.824215][T10245] bridge10: entered allmulticast mode
[  150.960146][T10273] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  150.968663][T10273] openvswitch: netlink: Duplicate key (type 0).
[  150.971108][T10276] C: renamed from lo
[  150.976464][T10276] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.037652][T10286] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.191131][T10294] ..0: renamed from hsr0 (while UP)
[  151.196001][T10294] ..0: entered allmulticast mode
[  151.198003][T10294] hsr_slave_0: entered allmulticast mode
[  151.200600][T10294] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  151.741331][T10329] unknown channel width for channel at 909000KHz?
[  151.823997][T10335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.827869][T10335] syzkaller0: entered promiscuous mode
[  151.829984][T10335] syzkaller0: entered allmulticast mode
[  151.849038][T10335] tipc: Resetting bearer <eth:syzkaller0>
[  151.854093][T10334] tipc: Resetting bearer <eth:syzkaller0>
[  151.887142][T10334] tipc: Disabling bearer <eth:syzkaller0>
[  152.455716][T10357] 8021q: adding VLAN 0 to HW filter on device team0
[  152.459357][T10357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.532253][T10368] C: renamed from lo
[  152.540108][T10368] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.772758][T10388] tunl0: Caught tx_queue_len zero misconfig
[  152.884195][T10405] __nla_validate_parse: 28 callbacks suppressed
[  152.884206][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'.
[  152.906370][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'.
[  153.781541][T10438] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1412'.
[  153.801326][T10441] sctp: [Deprecated]: syz.2.1410 (pid 10441) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.801326][T10441] Use struct sctp_sack_info instead
[  153.893654][T10446] can: request_module (can-proto-4) failed.
[  153.950541][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'.
[  154.047057][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'.
[  154.128004][T10462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.165749][T10466] unsupported nlmsg_type 40
[  154.175932][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  154.198823][T10468] tipc: Resetting bearer <eth:syzkaller0>
[  154.204297][T10461] tipc: Disabling bearer <eth:syzkaller0>
[  154.225073][T10470] ip6tnl0: Caught tx_queue_len zero misconfig
[  154.512018][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  154.608377][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  154.664911][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'.
[  154.672283][T10492] validate_nla: 7 callbacks suppressed
[  154.672296][T10492] netlink: 'syz.0.1427': attribute type 10 has an invalid length.
[  154.900347][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'.
[  154.914765][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'.
[  155.384435][T10535] bond0: Unable to set up delay as MII monitoring is disabled
[  155.491141][T10546] netlink: 'syz.2.1442': attribute type 12 has an invalid length.
[  155.602788][T10550] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  155.612323][T10554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  155.631952][T10550] netlink: 'syz.0.1444': attribute type 10 has an invalid length.
[  155.636576][T10550] veth0_vlan: left promiscuous mode
[  155.641929][T10550] veth0_vlan: entered promiscuous mode
[  155.644106][T10550] veth0_vlan: entered allmulticast mode
[  155.856837][T10578] netlink: 'syz.1.1452': attribute type 2 has an invalid length.
[  155.928216][T10585] netlink: 'syz.0.1455': attribute type 11 has an invalid length.
[  156.171265][T10610] netlink: 'syz.1.1460': attribute type 2 has an invalid length.
[  156.179410][T10610] netlink: 'syz.1.1460': attribute type 1 has an invalid length.
[  156.193560][T10610] netlink: 'syz.1.1460': attribute type 1 has an invalid length.
[  156.525715][T10632] netlink: 'syz.0.1467': attribute type 1 has an invalid length.
[  156.678040][T10641] netlink: 'syz.1.1470': attribute type 4 has an invalid length.
[  156.688016][T10640] IPVS: Error joining to the multicast group
[  158.579470][T10752] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) !
[  158.641317][T10760] net_ratelimit: 2 callbacks suppressed
[  158.641331][T10760] netlink: zone id is out of range
[  158.646120][T10760] netlink: del zone limit has 8 unknown bytes
[  158.735067][T10767] macvlan2: entered promiscuous mode
[  158.736930][T10767] vlan0: entered promiscuous mode
[  158.956718][T10793] __nla_validate_parse: 13 callbacks suppressed
[  158.956730][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1510'.
[  158.965249][T10793] openvswitch: netlink: EtherType 0 is less than min 600
[  158.967924][T10794] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1508'.
[  158.974754][T10794] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1508'.
[  158.976334][T10796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'.
[  158.984209][T10798] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1508'.
[  158.991969][    C1] Dead loop on virtual device ip6_vti0, fix it urgently!
[  159.031487][T10807] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  159.078419][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'.
[  159.085460][T10811] geneve0: entered promiscuous mode
[  159.089546][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'.
[  159.091100][T10811] team0: Port device geneve0 added
[  159.151548][T10821] syzkaller0: entered promiscuous mode
[  159.156374][T10821] syzkaller0: entered allmulticast mode
[  159.170178][T10823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1521'.
[  159.196861][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1518'.
[  159.529545][T10850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.615308][T10854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.634568][T10854] tipc: Disabling bearer <eth:syzkaller0>
[  159.696091][   T33] audit: type=1800 audit(1757479277.213:3): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1527" name="cgroup.controllers" dev="tmpfs" ino=2420 res=0 errno=0
[  159.919379][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  160.010469][T10884] validate_nla: 6 callbacks suppressed
[  160.010484][T10884] netlink: 'syz.0.1540': attribute type 2 has an invalid length.
[  160.115573][T10897] batadv2: entered promiscuous mode
[  160.167519][T10902] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  160.272942][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  161.200468][T10945] tipc: Cannot configure node identity twice
[  161.305546][T10954] netlink: 'syz.1.1560': attribute type 6 has an invalid length.
[  161.951808][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  161.985396][T11000] Dead loop on virtual device ip6_vti0, fix it urgently!
[  162.059072][T11007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.327500][T11029] netlink: 'syz.1.1589': attribute type 39 has an invalid length.
[  162.638791][T11037] openvswitch: netlink: Multiple metadata blocks provided
[  162.892200][T11053] tun0: tun_chr_ioctl cmd 2148553947
[  163.071962][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  163.342998][T11097] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.421641][T11104] team0: Caught tx_queue_len zero misconfig
[  163.438923][T11100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.442420][T11103] syzkaller0: entered promiscuous mode
[  163.446297][T11103] syzkaller0: entered allmulticast mode
[  163.462420][T11100] tipc: Resetting bearer <eth:syzkaller0>
[  163.468894][T11099] tipc: Resetting bearer <eth:syzkaller0>
[  163.505002][T11099] tipc: Disabling bearer <eth:syzkaller0>
[  163.638002][T11121] netlink: 'syz.0.1621': attribute type 10 has an invalid length.
[  163.643260][T11121] team0: Device ipvlan1 failed to register rx_handler
[  163.703110][T11125] netlink: 'syz.1.1623': attribute type 29 has an invalid length.
[  163.706542][T11125] bond0: Caught tx_queue_len zero misconfig
[  164.249672][T11158] __nla_validate_parse: 49 callbacks suppressed
[  164.249689][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'.
[  164.323787][T11162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.328952][T11162] syzkaller0: entered promiscuous mode
[  164.331060][T11162] syzkaller0: entered allmulticast mode
[  164.336782][T11162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  164.371592][T11160] tipc: Resetting bearer <eth:syzkaller0>
[  164.449076][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  164.459609][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  164.460208][T11160] tipc: Disabling bearer <eth:syzkaller0>
[  164.464844][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  164.469073][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  164.474564][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'.
[  164.477954][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'.
[  164.482335][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  164.490541][T11161] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1635'.
[  164.718927][T11183] tipc: Cannot configure node identity twice
[  164.721916][T11183] tipc: Cannot configure node identity twice
[  164.724420][T11185] tipc: Cannot configure node identity twice
[  164.726797][T11185] tipc: Cannot configure node identity twice
[  164.747841][T11166] chnl_net:caif_netlink_parms(): no params data found
[  164.898472][T11166] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.900894][T11166] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.904081][T11166] bridge_slave_0: entered allmulticast mode
[  164.906983][T11166] bridge_slave_0: entered promiscuous mode
[  164.910507][T11166] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.913316][T11166] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.915683][T11166] bridge_slave_1: entered allmulticast mode
[  164.918753][T11166] bridge_slave_1: entered promiscuous mode
[  164.978810][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.991949][    C0] net_ratelimit: 5 callbacks suppressed
[  164.991960][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  164.995240][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.996608][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!
[  165.044954][T11166] team0: Port device team_slave_0 added
[  165.050942][T11166] team0: Port device team_slave_1 added
[  165.117765][T11166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.120429][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.140820][T11166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.148638][T11166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.156397][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.166981][T11166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.171442][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'.
[  165.181991][T11218] netlink: 'syz.0.1647': attribute type 29 has an invalid length.
[  165.185219][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'.
[  165.273962][T11166] hsr_slave_0: entered promiscuous mode
[  165.277145][T11166] hsr_slave_1: entered promiscuous mode
[  165.549120][T11166] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.564797][T11166] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  165.576864][T11166] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  165.586454][T11166] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  165.640887][T11166] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.644036][T11166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.647067][T11166] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.649524][T11166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.713700][T11256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1657'.
[  165.837092][T11253] bond1: left promiscuous mode
[  165.840882][T11253] veth3: left promiscuous mode
[  165.902937][T11253] geneve2: left promiscuous mode
[  165.916356][T11253] bridge3: left promiscuous mode
[  166.004045][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.008358][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.019588][ T5875] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.034173][ T5875] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.037405][ T5875] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  166.165636][ T5912] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.169168][ T5912] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.174137][ T5912] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  166.178423][ T5912] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.181520][ T5912] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.187512][T11271] netlink: 'syz.0.1658': attribute type 7 has an invalid length.
[  166.190531][ T5912] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  166.222941][ T5858] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.226234][ T5858] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.233531][ T5858] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  166.273518][T11166] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.306193][T11166] 8021q: adding VLAN 0 to HW filter on device team0
[  166.335341][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.338083][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.346990][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.349818][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.521256][ T5236] Bluetooth: hci0: command tx timeout
[  166.540198][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'.
[  166.573681][T11299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.577276][T11299] syzkaller0: entered promiscuous mode
[  166.579438][T11299] syzkaller0: entered allmulticast mode
[  166.587982][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.613707][T11299] tipc: Resetting bearer <eth:syzkaller0>
[  166.614617][T11301] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.619373][T11298] tipc: Resetting bearer <eth:syzkaller0>
[  166.625454][   T33] audit: type=1107 audit(1757479284.143:4): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  166.635730][T11298] tipc: Disabling bearer <eth:syzkaller0>
[  166.759947][T11166] veth0_vlan: entered promiscuous mode
[  166.768873][T11166] veth1_vlan: entered promiscuous mode
[  166.815267][  T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.818304][  T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.834729][T11166] veth0_macvtap: entered promiscuous mode
[  166.840892][T11166] veth1_macvtap: entered promiscuous mode
[  166.860748][T11166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.890695][T11166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.907730][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.927054][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.939173][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.944681][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.022286][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.028438][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.063029][ T7366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.072348][ T7366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.440391][T11347] netlink: 'syz.3.1680': attribute type 5 has an invalid length.
[  167.659012][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'.
[  167.663260][T11351] netlink: 'syz.3.1682': attribute type 18 has an invalid length.
[  167.676286][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'.
[  167.676490][ T5912] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.679805][T11351] netlink: 'syz.3.1682': attribute type 18 has an invalid length.
[  167.687199][ T5912] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.691588][ T5912] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.696273][ T5912] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.604645][ T5236] Bluetooth: hci0: command tx timeout
[  168.879673][T11392] bridge_slave_1: left allmulticast mode
[  168.889349][T11392] bridge_slave_1: left promiscuous mode
[  168.891357][T11392] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.902814][T11394] netlink: 'syz.1.1694': attribute type 2 has an invalid length.
[  168.914735][T11392] bridge_slave_0: left allmulticast mode
[  168.916658][T11392] bridge_slave_0: left promiscuous mode
[  168.918962][T11392] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.399957][T11413] sctp: [Deprecated]: syz.1.1699 (pid 11413) Use of int in max_burst socket option.
[  169.399957][T11413] Use struct sctp_assoc_value instead
[  170.672079][ T5236] Bluetooth: hci0: command tx timeout
[  170.904237][T11445] __nla_validate_parse: 5 callbacks suppressed
[  170.904253][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'.
[  170.909984][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1706'.
[  171.343817][T11457] syzkaller0: entered promiscuous mode
[  171.345815][T11457] syzkaller0: entered allmulticast mode
[  171.475515][T11467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  171.799298][T11496] Bluetooth: MGMT ver 1.23
[  171.854769][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'.
[  172.022878][T11510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1723'.
[  172.039223][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'.
[  172.053101][T11512] xt_l2tp: invalid flags combination: 0
[  172.243610][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'.
[  172.248283][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'.
[  172.251503][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'.
[  172.399603][T11535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.449831][T11535] syzkaller0: entered promiscuous mode
[  172.455518][T11535] syzkaller0: entered allmulticast mode
[  172.458992][T11535] tipc: Resetting bearer <eth:syzkaller0>
[  172.477452][T11535] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  172.480305][T11535] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1733'.
[  172.496813][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  172.526220][T11547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1737'.
[  172.764203][ T5236] Bluetooth: hci0: command tx timeout
[  173.475145][ T5878] tipc: Node number set to 3819709788
[  173.985720][T11534] tipc: Disabling bearer <eth:syzkaller0>
[  174.218424][T11583] openvswitch: netlink: Duplicate or invalid key (type 0).
[  174.226994][T11583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.275551][T11596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.702979][T11628] netlink: 'syz.3.1759': attribute type 7 has an invalid length.
[  174.705982][T11628] netlink: 'syz.3.1759': attribute type 8 has an invalid length.
[  175.537188][T11685] netlink: 'syz.3.1765': attribute type 10 has an invalid length.
[  175.809729][T11704] netlink: 'syz.3.1771': attribute type 10 has an invalid length.
[  175.825399][T11704] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.828888][T11704] team0: Port device bond0 added
[  176.059835][   T33] audit: type=1800 audit(1757479293.573:5): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1773" name="memory.events" dev="tmpfs" ino=3355 res=0 errno=0
[  176.160655][T11730] netlink: 'syz.3.1779': attribute type 3 has an invalid length.
[  176.178933][T11733] netlink: 'syz.1.1781': attribute type 10 has an invalid length.
[  176.195361][T11733] __nla_validate_parse: 9 callbacks suppressed
[  176.195374][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'.
[  176.263315][T11740] tipc: Started in network mode
[  176.265185][T11740] tipc: Node identity 4, cluster identity 4711
[  176.267313][T11740] tipc: Node number set to 4
[  176.300185][T11742] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1783'.
[  176.303019][T11742] ..1: renamed from ..0
[  176.310257][T11742] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.315343][T11742] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  176.342512][T11742] netlink: 'syz.1.1783': attribute type 5 has an invalid length.
[  176.456844][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'.
[  176.504482][T11760] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1789'.
[  176.525026][T11762] netlink: 'syz.3.1790': attribute type 2 has an invalid length.
[  176.530392][T11762] netlink: 'syz.3.1790': attribute type 1 has an invalid length.
[  176.534358][T11762] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1790'.
[  176.591142][T11765] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1791'.
[  176.786152][T11780] tipc: Enabled bearer <udp:syz2>, priority 26
[  177.022688][T11793] tipc: Cannot configure node identity twice
[  177.590255][T11824] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1807'.
[  177.627699][T11830] C: Caught tx_queue_len zero misconfig
[  177.778492][T11842] validate_nla: 2 callbacks suppressed
[  177.778506][T11842] netlink: 'syz.1.1814': attribute type 1 has an invalid length.
[  177.785508][T11842] netlink: 'syz.1.1814': attribute type 1 has an invalid length.
[  178.293491][T11858] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  178.509100][T11868] tipc: Cannot configure node identity twice
[  178.578780][T11871] Unsupported ieee802154 address type: 0
[  178.585993][T11871] Unsupported ieee802154 address type: 0
[  178.655566][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'.
[  178.755585][T11884] netlink: 'syz.0.1830': attribute type 21 has an invalid length.
[  179.552060][   T55] Bluetooth: hci0: command 0x0405 tx timeout
[  179.612178][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'.
[  179.615846][T11906] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  179.619590][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.637457][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'.
[  179.641157][T11906] openvswitch: netlink: nsh attr 0 has unexpected len 129 expected 0
[  179.645345][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.803995][T11915] syzkaller1: entered promiscuous mode
[  179.806102][T11915] syzkaller1: entered allmulticast mode
[  180.036696][T11939] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  180.096817][T11945] netlink: 'syz.0.1849': attribute type 1 has an invalid length.
[  180.103574][T11945] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  180.107256][T11945] gretap2: entered promiscuous mode
[  180.305972][T11952] netlink: 'syz.0.1850': attribute type 11 has an invalid length.
[  180.386169][T11960] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  180.389330][T11960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.444667][T11962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.452718][T11962] tipc: Disabling bearer <eth:syzkaller0>
[  181.120214][T11974] netlink: 'syz.1.1857': attribute type 1 has an invalid length.
[  181.306575][T11977] netlink: 'syz.0.1858': attribute type 30 has an invalid length.
[  181.809243][T12007] netlink: 'syz.0.1867': attribute type 2 has an invalid length.
[  181.815799][T12007] __nla_validate_parse: 9 callbacks suppressed
[  181.815815][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'.
[  181.821623][T12007] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  182.157389][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'.
[  182.198815][T12026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1876'.
[  182.204745][T12026] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1876'.
[  182.369057][T12033] syzkaller1: entered promiscuous mode
[  182.371015][T12033] syzkaller1: entered allmulticast mode
[  182.449466][T12038] tipc: Cannot configure node identity twice
[  182.701166][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'.
[  182.934312][T12073] vlan3: entered promiscuous mode
[  182.936151][T12073] vlan3: entered allmulticast mode
[  182.938055][T12073] hsr_slave_1: entered allmulticast mode
[  182.950668][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'.
[  183.080422][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'.
[  183.092179][T12078] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  183.459579][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1899'.
[  183.491079][T12102] bond1: entered promiscuous mode
[  183.493878][T12102] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.586189][T12102] bond1 (unregistering): Released all slaves
[  183.869354][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'.
[  183.909002][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'.
[  183.988628][T12124] tipc: Cannot configure node identity twice
[  184.708012][T12146] openvswitch: netlink: VXLAN extension 226 out of range max 1
[  185.278110][T12170] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  185.351141][T12176] pim6reg: entered allmulticast mode
[  185.401401][T12176] pim6reg: left allmulticast mode
[  185.666126][T12186] syzkaller1: entered promiscuous mode
[  185.667954][T12186] syzkaller1: entered allmulticast mode
[  186.042457][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  186.075224][T12231] netlink: 'syz.3.1934': attribute type 11 has an invalid length.
[  186.123914][T12227] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  186.384533][T12255] sch_fq: defrate 0 ignored.
[  186.387366][T12255] netlink: 'syz.3.1944': attribute type 1 has an invalid length.
[  186.396074][T12257] veth14: entered allmulticast mode
[  186.436290][T12257] netlink: 'syz.1.1945': attribute type 1 has an invalid length.
[  186.450744][T12257] vlan0: entered allmulticast mode
[  186.453459][T12257] veth1: entered allmulticast mode
[  186.476460][T12258] veth5: entered promiscuous mode
[  186.919087][T12286] __nla_validate_parse: 13 callbacks suppressed
[  186.919103][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1954'.
[  186.948390][T12288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1955'.
[  186.953326][T12288] bridge_slave_0: entered allmulticast mode
[  187.005694][T12290] geneve0: left promiscuous mode
[  187.012816][T12290] team0: Port device geneve0 removed
[  187.043053][T12292] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  187.086684][T12296] ieee802154 phy0 wpan0: encryption failed: -22
[  187.102481][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  187.109007][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  187.580742][T12316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1965'.
[  187.643849][T12316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.647275][T12316] syzkaller0: entered promiscuous mode
[  187.649481][T12316] syzkaller0: entered allmulticast mode
[  187.655508][T12315] tipc: Resetting bearer <eth:syzkaller0>
[  187.669398][T12315] tipc: Disabling bearer <eth:syzkaller0>
[  187.849768][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'.
[  187.966606][T12320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1967'.
[  188.126965][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'.
[  188.291370][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'.
[  188.478293][T12363] ==================================================================
[  188.480800][T12363] BUG: KASAN: slab-out-of-bounds in __xfrm_state_lookup+0x6ad/0x8d0
[  188.483029][T12363] Read of size 2 at addr ffff888033487bc2 by task syz.1.1979/12363
[  188.486086][T12363] 
[  188.487669][T12363] CPU: 1 UID: 0 PID: 12363 Comm: syz.1.1979 Not tainted syzkaller #0 PREEMPT(full) 
[  188.487682][T12363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.487689][T12363] Call Trace:
[  188.487694][T12363]  <TASK>
[  188.487700][T12363]  dump_stack_lvl+0x189/0x250
[  188.487777][T12363]  ? __kasan_check_byte+0x12/0x40
[  188.487791][T12363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.487800][T12363]  ? lock_release+0x4b/0x3e0
[  188.487812][T12363]  ? __virt_addr_valid+0x4a5/0x5c0
[  188.487824][T12363]  print_report+0xca/0x240
[  188.487831][T12363]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.487841][T12363]  kasan_report+0x118/0x150
[  188.487852][T12363]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.487864][T12363]  __xfrm_state_lookup+0x6ad/0x8d0
[  188.487875][T12363]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  188.487886][T12363]  xfrm_state_add+0x27d/0xc40
[  188.487904][T12363]  xfrm_add_sa+0x35a1/0x4070
[  188.487917][T12363]  ? __pfx_xfrm_add_sa+0x10/0x10
[  188.487927][T12363]  ? apparmor_capable+0x137/0x1b0
[  188.487938][T12363]  ? __nla_parse+0x40/0x60
[  188.487946][T12363]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.487958][T12363]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.487975][T12363]  ? __pfx___mutex_trylock_common+0x10/0x10
[  188.487985][T12363]  ? rcu_is_watching+0x15/0xb0
[  188.487996][T12363]  ? trace_contention_end+0x39/0x120
[  188.488009][T12363]  ? __mutex_lock+0x335/0x1350
[  188.488025][T12363]  netlink_rcv_skb+0x208/0x470
[  188.488040][T12363]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.488056][T12363]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.488076][T12363]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.488088][T12363]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.488099][T12363]  xfrm_netlink_rcv+0x79/0x90
[  188.488115][T12363]  netlink_unicast+0x82f/0x9e0
[  188.488135][T12363]  ? __pfx_netlink_unicast+0x10/0x10
[  188.488152][T12363]  ? netlink_sendmsg+0x642/0xb30
[  188.488164][T12363]  ? skb_put+0x11b/0x210
[  188.488174][T12363]  netlink_sendmsg+0x805/0xb30
[  188.488184][T12363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.488192][T12363]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.488200][T12363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.488209][T12363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.488217][T12363]  __sock_sendmsg+0x21c/0x270
[  188.488229][T12363]  ____sys_sendmsg+0x505/0x830
[  188.488240][T12363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.488251][T12363]  ? import_iovec+0x74/0xa0
[  188.488261][T12363]  ___sys_sendmsg+0x21f/0x2a0
[  188.488271][T12363]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.488287][T12363]  ? __fget_files+0x2a/0x420
[  188.488293][T12363]  ? __fget_files+0x3a0/0x420
[  188.488302][T12363]  __x64_sys_sendmsg+0x19b/0x260
[  188.488311][T12363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.488323][T12363]  ? do_syscall_64+0xbe/0x3b0
[  188.488333][T12363]  do_syscall_64+0xfa/0x3b0
[  188.488341][T12363]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.488348][T12363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.488356][T12363]  ? exc_page_fault+0x9f/0xf0
[  188.488364][T12363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.488372][T12363] RIP: 0033:0x7f9b15f8ebe9
[  188.488381][T12363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.488388][T12363] RSP: 002b:00007f9b16dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.488399][T12363] RAX: ffffffffffffffda RBX: 00007f9b161c5fa0 RCX: 00007f9b15f8ebe9
[  188.488404][T12363] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000007
[  188.488410][T12363] RBP: 00007f9b16011e19 R08: 0000000000000000 R09: 0000000000000000
[  188.488414][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.488420][T12363] R13: 00007f9b161c6038 R14: 00007f9b161c5fa0 R15: 00007ffd1085cda8
[  188.488429][T12363]  </TASK>
[  188.488432][T12363] 
[  188.622782][T12363] Allocated by task 1090:
[  188.624307][T12363]  kasan_save_track+0x3e/0x80
[  188.625910][T12363]  __kasan_kmalloc+0x93/0xb0
[  188.627644][T12363]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  188.629685][T12363]  kmalloc_reserve+0x136/0x290
[  188.631184][T12363]  __alloc_skb+0x142/0x2d0
[  188.632687][T12363]  nsim_dev_trap_report_work+0x29a/0xb80
[  188.634624][T12363]  process_scheduled_works+0xae1/0x17b0
[  188.636468][T12363]  worker_thread+0x8a0/0xda0
[  188.637946][T12363]  kthread+0x711/0x8a0
[  188.639356][T12363]  ret_from_fork+0x3fc/0x770
[  188.640899][T12363]  ret_from_fork_asm+0x1a/0x30
[  188.642673][T12363] 
[  188.643624][T12363] Freed by task 1090:
[  188.645127][T12363]  kasan_save_track+0x3e/0x80
[  188.646978][T12363]  kasan_save_free_info+0x46/0x50
[  188.648904][T12363]  __kasan_slab_free+0x5b/0x80
[  188.650743][T12363]  kfree+0x18e/0x440
[  188.652237][T12363]  skb_release_data+0x62d/0x7c0
[  188.654141][T12363]  consume_skb+0x9e/0xf0
[  188.655787][T12363]  nsim_dev_trap_report_work+0x7cf/0xb80
[  188.657917][T12363]  process_scheduled_works+0xae1/0x17b0
[  188.660078][T12363]  worker_thread+0x8a0/0xda0
[  188.661784][T12363]  kthread+0x711/0x8a0
[  188.663320][T12363]  ret_from_fork+0x3fc/0x770
[  188.665112][T12363]  ret_from_fork_asm+0x1a/0x30
[  188.666979][T12363] 
[  188.667914][T12363] The buggy address belongs to the object at ffff888033486000
[  188.667914][T12363]  which belongs to the cache kmalloc-4k of size 4096
[  188.673286][T12363] The buggy address is located 3010 bytes to the right of
[  188.673286][T12363]  allocated 4096-byte region [ffff888033486000, ffff888033487000)
[  188.678862][T12363] 
[  188.679810][T12363] The buggy address belongs to the physical page:
[  188.682236][T12363] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33480
[  188.685587][T12363] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  188.688739][T12363] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  188.691851][T12363] page_type: f5(slab)
[  188.693409][T12363] raw: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000
[  188.696680][T12363] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  188.699503][T12363] head: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000
[  188.702197][T12363] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  188.704769][T12363] head: 00fff00000000003 ffffea0000cd2001 00000000ffffffff 00000000ffffffff
[  188.707328][T12363] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  188.710007][T12363] page dumped because: kasan: bad access detected
[  188.711891][T12363] page_owner tracks the page as allocated
[  188.713719][T12363] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1090, tgid 1090 (kworker/u10:4), ts 186241993298, free_ts 186217750334
[  188.720415][T12363]  post_alloc_hook+0x240/0x2a0
[  188.721927][T12363]  get_page_from_freelist+0x21e4/0x22c0
[  188.723822][T12363]  __alloc_frozen_pages_noprof+0x181/0x370
[  188.725639][T12363]  alloc_pages_mpol+0x232/0x4a0
[  188.727240][T12363]  allocate_slab+0x8a/0x370
[  188.728842][T12363]  ___slab_alloc+0xbeb/0x1420
[  188.730571][T12363]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  188.732731][T12363]  kmalloc_reserve+0x136/0x290
[  188.734314][T12363]  __alloc_skb+0x142/0x2d0
[  188.735914][T12363]  nsim_dev_trap_report_work+0x29a/0xb80
[  188.737653][T12363]  process_scheduled_works+0xae1/0x17b0
[  188.739586][T12363]  worker_thread+0x8a0/0xda0
[  188.740965][T12363]  kthread+0x711/0x8a0
[  188.742401][T12363]  ret_from_fork+0x3fc/0x770
[  188.744196][T12363]  ret_from_fork_asm+0x1a/0x30
[  188.746088][T12363] page last free pid 12237 tgid 12235 stack trace:
[  188.748308][T12363]  __free_frozen_pages+0xbc4/0xd30
[  188.750177][T12363]  __folio_put+0x21b/0x2c0
[  188.751888][T12363]  do_exit+0x182b/0x2300
[  188.753294][T12363]  do_group_exit+0x21c/0x2d0
[  188.754777][T12363]  get_signal+0x1286/0x1340
[  188.756365][T12363]  arch_do_signal_or_restart+0x9a/0x750
[  188.758161][T12363]  exit_to_user_mode_loop+0x75/0x110
[  188.759810][T12363]  do_syscall_64+0x2bd/0x3b0
[  188.761334][T12363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.763628][T12363] 
[  188.764355][T12363] Memory state around the buggy address:
[  188.766012][T12363]  ffff888033487a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.768440][T12363]  ffff888033487b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.771183][T12363] >ffff888033487b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.773876][T12363]                                            ^
[  188.775749][T12363]  ffff888033487c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.778264][T12363]  ffff888033487c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.780909][T12363] ==================================================================
[  188.783903][T12363] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.786628][T12363] CPU: 1 UID: 0 PID: 12363 Comm: syz.1.1979 Not tainted syzkaller #0 PREEMPT(full) 
[  188.789742][T12363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.792964][T12363] Call Trace:
[  188.794124][T12363]  <TASK>
[  188.795158][T12363]  dump_stack_lvl+0x99/0x250
[  188.796746][T12363]  ? __asan_memcpy+0x40/0x70
[  188.798271][T12363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.799998][T12363]  ? __pfx__printk+0x10/0x10
[  188.801420][T12363]  vpanic+0x281/0x750
[  188.802640][T12363]  ? __pfx_vpanic+0x10/0x10
[  188.804024][T12363]  ? irqentry_exit+0x74/0x90
[  188.805387][T12363]  panic+0xb9/0xc0
[  188.806521][T12363]  ? __pfx_panic+0x10/0x10
[  188.807820][T12363]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  188.810070][T12363]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.812360][T12363]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.814410][T12363]  check_panic_on_warn+0x89/0xb0
[  188.816300][T12363]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.818102][T12363]  end_report+0x78/0x160
[  188.819613][T12363]  kasan_report+0x129/0x150
[  188.821220][T12363]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.823223][T12363]  __xfrm_state_lookup+0x6ad/0x8d0
[  188.825163][T12363]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  188.827348][T12363]  xfrm_state_add+0x27d/0xc40
[  188.829281][T12363]  xfrm_add_sa+0x35a1/0x4070
[  188.831172][T12363]  ? __pfx_xfrm_add_sa+0x10/0x10
[  188.833158][T12363]  ? apparmor_capable+0x137/0x1b0
[  188.835171][T12363]  ? __nla_parse+0x40/0x60
[  188.836963][T12363]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.838945][T12363]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.840806][T12363]  ? __pfx___mutex_trylock_common+0x10/0x10
[  188.842991][T12363]  ? rcu_is_watching+0x15/0xb0
[  188.844963][T12363]  ? trace_contention_end+0x39/0x120
[  188.847018][T12363]  ? __mutex_lock+0x335/0x1350
[  188.848561][T12363]  netlink_rcv_skb+0x208/0x470
[  188.850039][T12363]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.851718][T12363]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.853297][T12363]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.855118][T12363]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.856875][T12363]  xfrm_netlink_rcv+0x79/0x90
[  188.858508][T12363]  netlink_unicast+0x82f/0x9e0
[  188.860244][T12363]  ? __pfx_netlink_unicast+0x10/0x10
[  188.862163][T12363]  ? netlink_sendmsg+0x642/0xb30
[  188.863861][T12363]  ? skb_put+0x11b/0x210
[  188.865310][T12363]  netlink_sendmsg+0x805/0xb30
[  188.867078][T12363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.868954][T12363]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.870625][T12363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.872375][T12363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.874167][T12363]  __sock_sendmsg+0x21c/0x270
[  188.875835][T12363]  ____sys_sendmsg+0x505/0x830
[  188.877510][T12363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.879299][T12363]  ? import_iovec+0x74/0xa0
[  188.880845][T12363]  ___sys_sendmsg+0x21f/0x2a0
[  188.882431][T12363]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.884219][T12363]  ? __fget_files+0x2a/0x420
[  188.885796][T12363]  ? __fget_files+0x3a0/0x420
[  188.887505][T12363]  __x64_sys_sendmsg+0x19b/0x260
[  188.889167][T12363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.891065][T12363]  ? do_syscall_64+0xbe/0x3b0
[  188.892933][T12363]  do_syscall_64+0xfa/0x3b0
[  188.894528][T12363]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.896299][T12363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.898500][T12363]  ? exc_page_fault+0x9f/0xf0
[  188.900094][T12363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.902149][T12363] RIP: 0033:0x7f9b15f8ebe9
[  188.906640][T12363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.913891][T12363] RSP: 002b:00007f9b16dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.917128][T12363] RAX: ffffffffffffffda RBX: 00007f9b161c5fa0 RCX: 00007f9b15f8ebe9
[  188.920190][T12363] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000007
[  188.923332][T12363] RBP: 00007f9b16011e19 R08: 0000000000000000 R09: 0000000000000000
[  188.926396][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.930577][T12363] R13: 00007f9b161c6038 R14: 00007f9b161c5fa0 R15: 00007ffd1085cda8
[  188.933777][T12363]  </TASK>
[  188.935554][T12363] Kernel Offset: disabled
[  188.937211][T12363] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:41:46  Registers:
info registers vcpu 0

CPU#0
RAX=a1bba643af858e00 RBX=ffffffff819683f8 RCX=a1bba643af858e00 RDX=0000000000000001
RSI=ffffffff8d9b9d08 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34e5a4 CR3=0000000025600000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000363532
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0003000800000001 0004fe6f00000008 XMM05=0003000800000081 00010005802d001c
XMM06=0000000200030002 0000000900010005 XMM07=0000000100020008 0000000600020008
XMM08=1fbf4aeb5d71780f f2cd7e420e574fc1 XMM09=0000000000000000 00007f0227012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001c82 RDI=0000000000001c83 RBP=00000000000003f8 RSP=ffffc9000417e9d0
R8 =ffff888021478237 R9 =1ffff1100428f046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d5 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b16dd66c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b15f74c40 CR3=0000000123b50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f9b16cfd100 00007f9b16197460 XMM05=00007f9b16197478 00007f9b161974c0
XMM06=00007f9b161974b8 00007f9b161974b0 XMM07=00007f9b161974a8 00007f9b161974a0
XMM08=0000000000000000 00007f9b16012ee7 XMM09=0000000000000000 00007f9b16012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
