last executing test programs:

2.843404362s ago: executing program 0 (id=4043):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec0000002100010000fdff0000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001200100000000000000000000000000003c0400000000000008000a00ac1414bb00000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c04000000e6ffff070002002eec0632837f3b5f9807fa4e486244510ccc540600d25d60320e6039fcbbea462949ed264af8805359330d0e8bcc6fe260"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.838635362s ago: executing program 0 (id=4044):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x20, 0x0, @gue={{0x1, 0x0, 0x3, 0x1, 0x100, @void}, "757b5e6bf9b7db3a7d8662ce4e0881735fd3ad14"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4623, 0x0, @loopback, 0x4}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='#', 0x1}], 0x1}, 0x4040841)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) (async)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

2.482047154s ago: executing program 2 (id=4050):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec000000210001000000000002000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001200100000000000000000000000000003c0400000000000008000a00ac1414bb00000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c04000000e6ffff070002002eec0632837f3b5f9807fa4e486244510ccc540600d25d60320e6039fcbbea462949ed264af8805359330d0e8bcc6fe260"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.480511809s ago: executing program 2 (id=4051):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000008400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000e0af3fb22b77fb5f9cc000000000000140000000b0a0104000000000000000005000005140000001100010000000000000000000700000a"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x4e20, @broadcast}], 0x3c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000029c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x400000000, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x4}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xe)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00')
pipe(&(0x7f0000000240)={<r7=>0xffffffffffffffff})
splice(r7, &(0x7f00000002c0)=0x3, r6, 0x0, 0xfffffffffffffff7, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)=r4}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r9=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r12, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, <r13=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2a, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x0, 0x5, 0xb, 0x4, 0x18, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r13}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@lld}, @cb_func={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0xbb, &(0x7f0000000540)=""/187, 0x41100, 0xa2, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xc, 0x9, 0x1c8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0xffffffffffffffff, r4, r10, r13, 0xffffffffffffffff, r14], &(0x7f0000000840)=[{0x4, 0x1, 0x9, 0xa}, {0x0, 0x2, 0x1, 0xa}, {0x1, 0x5, 0xb, 0x8}, {0x5, 0x1, 0xf, 0x1}, {0x2, 0x5, 0xa, 0x3}, {0x3, 0x1, 0x10}, {0x3, 0x5, 0x0, 0x7}, {0x1, 0x4, 0x4000009, 0x3}], 0x10, 0xff}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x802, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x7aa}]}, &(0x7f0000000180)=0x10)
r15 = socket$netlink(0x10, 0x3, 0x4)
writev(r15, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

2.246820151s ago: executing program 2 (id=4052):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
r4 = epoll_create1(0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x4000000c})
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)

2.165807987s ago: executing program 2 (id=4053):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4080)
bind(r0, &(0x7f0000000000)=@nfc_llcp={0x27, r2, 0x1, 0x7, 0x10, 0x7, "59defee0b04345244743a2b7be4ec46034e57b9ea1ca247bc51e47cb54195b552314f10e5e57ead51cbc73a26bfe75aed5ac6edb0a6dbff6bfefd86df58dec", 0x22}, 0x80)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20000000000000eb, &(0x7f0000000640)=ANY=[@ANYBLOB="1801000080000000000001004bc3000800001f95ae75833ff1b7895d16b1d5548dbd9bc8c404484028acbbcb26eaec3d2a4495e7db08710620fcf25fd06f78270ff94b8598cd304c149ceaf3a806de96c6aa96959db4be0de9a7ec708badf90d457cb96378a6e3f9a00e9d6ee16a85fb18f1f752a0e389939d9f68f4bc0834ee592d8e58143ebdcc7d0baa34c859f4d3bd02efebcd520f182a4b058769796437"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r6}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={<r9=>r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_netdev_private(r10, 0x8970, &(0x7f00000002c0)="2ee9f3bec5a27c74ae7d133a")
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r9, @in={{0x2, 0xffff, @empty}}, 0x0, 0x2000}, 0x90)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
socket$kcm(0x2d, 0x2, 0x0)

1.957439661s ago: executing program 0 (id=4054):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8af9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xd}]}}]}, 0x74}}, 0x4000010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8)
r5 = accept4(r0, 0x0, &(0x7f0000000840), 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/14, 0xe}], 0x8, &(0x7f0000000700)=""/150, 0x96}, 0x98e779df}], 0x1, 0x2, &(0x7f0000000800)={0x77359400})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6)

1.304035383s ago: executing program 2 (id=4056):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x34, r2, 0x431, 0x70bd2a, 0x259fdc00, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20880, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8)
write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040))
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8)

1.147567293s ago: executing program 1 (id=4059):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110b4000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x6, 0x1, '\'\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x1406, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000000c0)=0x80000001, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000015c0)={0x0, {{0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)
shutdown(r3, 0x1)

1.075636594s ago: executing program 0 (id=4060):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0b020500000225bd7000fcdbdf2503001700db00000002004e21ac1400"/40], 0x28}}, 0x20008004)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async)
close(r5) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) (async)
syz_emit_ethernet(0x559, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x523, 0x88, 0x0, @rand_addr=' \x01\x00', @private1, {[@srh={0x0, 0xc, 0x4, 0x6, 0xff, 0x48, 0x7f, [@mcast1, @private2, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @remote]}, @dstopts={0x67, 0x9, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x57, 0x3, [0x1, 0x3, 0x5, 0xfffffffffffffffa, 0x9]}}, @pad1, @jumbo={0xc2, 0x4, 0x900}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x1d, 0x39, '\x00', [@generic={0x9, 0x37, "2f2424100e8d3a88ace3d8c6a9b5ba08f7fda278cff1c18a38ffc82886832d01329dabcd6e636a42cdf7ddcc6661882fc39f406fe28970"}, @pad1, @ra={0x5, 0x2, 0x6}, @pad1, @pad1, @generic={0x7, 0xe8, "a873e909f1e465f52f6f4e6cd16455401d8d8d253dfe880979f8dc18d835bb3a1b7691d0689f9de4c08d236ad081d51e64b8c68e7391dd71bf74c8cc919dbf21de0775e7daee6b9653e64b2336906feeb173c29714872f9a974a10f688fb6b7cae37c79939cb830b17164dae019dc22e5c1fb7de9fe1aaede06682748510aeed4c4fd57c60144a7286fb6584eb6876c8a52bfa189566f5b573f59dcc139cafb925b92a856eb9b5dc6d96790400c2925abb37b43b4bd0e72c190c60d341b3930ec898120981abce097b5942b92a6592585d1fcac9f1b4b045b3fa4c1e0e45e0cb7137128ed5b4c64b"}, @generic={0x5, 0x96, "d15b48b267e25b1ef8221ba892ea7e2b15f13f61e644a3e352012054f709d1c6e0f30d3a0435b696750cc486d300bcddd11f73b2bd61470f74090dcd0189e95aab45af98e1ec8e742aa125cd1edc0f062110a809894a222718f7fae585d70fb4995cde819d1267fc966de8148e499129a0a9fe4e81de17eb5a0af4caae721b361dc0c9e013a4221ac80c7a561c7425682c9f5d351cc0"}, @enc_lim={0x4, 0x1, 0x5f}, @ra={0x5, 0x2, 0xf}]}, @dstopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x71}, @enc_lim={0x4, 0x1, 0xa}]}, @hopopts={0x87, 0x34, '\x00', [@generic={0x1, 0xae, "f3da83fdf9cb72a67ed52737b7296b24a2041b425315967b8df1c94f402611fa07dc3bc6ebdc5a4921d5d3744c3c12f6a1b83dbfe9583986ea66eb389c92889890464b15931bf88a657b45928bd3e660ad7f312dcdcd1b3aeca72f6a4e8cd28a31457907175f01699ff013cbdf6b507e03c2284bcfad9e5b58737ae5e8ca3d753cab79cff74dc5ee12a676ae53effc5964c50d8dbe9877ab1c53b5d4d61c60409bdccf2cbdf75c0d46e87281775c"}, @jumbo={0xc2, 0x4, 0x2}, @ra, @enc_lim={0x4, 0x1, 0x1}, @generic={0x2, 0xe3, "2d565193529948b34207db552fe4269d4943cde465eca9ae9e793edb2cad6f0bc53c060d2f34d3e9f32e40b38fb77822f2e67f02e60160074cfe2f99c126dbf0d6df92da65bac2e856d9d3b9fba1db21c02827925e5c7509e2a50ad2a716892cf14162e5510952de9ab3ac0d5f8c87a43cb48285443a6b3a6901af07936ecbd96fa27ef2b16fd5a5ed78ff1e1195460da8eed6303fa1c71679b8edf3c180c1e5c1db96b34df629db3958072ccdea6fde9a70bd203368e2c77b241f4bca22d06e2b9b1ed56ee7482fac34b21e965a502e66c8a80da07a88d1cc4b111802f7af8cb9d48a"}]}, @hopopts={0x3c, 0x6, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @pad1, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}]}], {0x0, 0x4e20, 0x83, 0x0, @wg=@data={0x4, 0x800, 0x8, "5376eeee36ccd5b67038c1b1857ec05f99e58fcd463ae68a9c28c81e00094b93907e5168df78f2a70824636f98f727f3a05bba795ee4031ee64e101815018aecc785c77a1d7c874909ebb0161ca554f7fbafde4c92eacb66f6404ff20f7f73ccd7ecd1c456cfd2b8b2de5a"}}}}}}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async)
bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c)

1.052036452s ago: executing program 0 (id=4061):
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84)
socket$inet(0xa, 0x801, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3b9e000871e7006a7bec00"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x7, 0x0, 0xff, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xd9, 0x8, 0x0, 0x0, @random="b1637e23fcbc"}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
shutdown(r3, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r5}, 0x10)
sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004080)
close(r3)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0x2}, 0xffffffffffffff05)

1.030932753s ago: executing program 1 (id=4062):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1f0, 0x1170, 0x1398, 0x1f0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x18}, [0xff000000, 0x0, 0xffffffff], [0x0, 0x7f00007f, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x12, 0x1}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000, 0xff000000], @ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x19, 0x0, 0x3ff, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private0, [0x0, 0x0, 0xfffeff], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000700)=""/53, 0x35, <r2=>0x0, &(0x7f0000000740)=""/248, 0xf8}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="1841000000000000000000000000000044065000070000000304ff7f0600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000940)='GPL\x00', 0x68, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x4, 0x9, 0xb, 0xc4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x1, 0x3, 0xffffffff, 0x7}], 0x10, 0x80000001}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x738b6741, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0xffffffffffffffff, 0x854, 0x18}, 0xc)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x528, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r8, r7, 0x0, 0x10000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8de, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x13, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000500000000000000010000001800000004000000000000000100000018260000", @ANYRES32, @ANYBLOB="00000000020000009500f30000000000"], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x9, 0x6, 0x6}, 0x10, r2, r3, 0x4, &(0x7f0000000d80)=[r4, r5, 0x1, r6, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000f40)=[{0x4, 0x1, 0x8, 0x9}, {0x4, 0x1, 0x0, 0x7}, {0x2, 0x1, 0xa, 0x1}, {0x3, 0x5, 0x8, 0x5}], 0x10, 0x1}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r12 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r13=>0x0]}, &(0x7f0000000040)=0x8)
r14 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r14, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r15=>0x0})
sendmsg$can_bcm(r14, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r15}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x6, 0x312, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r16 = socket$inet6_sctp(0xa, 0x1, 0x84)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r17, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x88, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x101}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'lo\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000004)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @mcast1, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x0, 0x20eca21e, 0xffffffff, r13}, 0x10)

957.21078ms ago: executing program 1 (id=4063):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@local, 0x4e21, 0x0, 0x4e22, 0xe, 0x2, 0x40, 0x80, 0x88, 0x0, r5}, {0xffffffffffffffff, 0xfffffffffffffffb, 0x1, 0xc163, 0xb1d74c6, 0xfffffffffffffffd, 0x800, 0x4}, {0xec3, 0x5, 0x7, 0x10}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0xa, @in=@private=0xa010102, 0x3503, 0x1, 0x0, 0xe, 0x2, 0x5, 0x9}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) (rerun: 32)
shutdown(r1, 0x1)

367.422329ms ago: executing program 2 (id=4064):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0xffffffff, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000000)
sendto$inet6(r0, &(0x7f0000000040)="b9d49e7ac7c366909b8f23997d544f4f1901cce8cf42e85526587db710f8063ad853e09c5f339361bdcd967432097b87dc3af0f421dd5326958e07cfa69ccfb364c2615670e0902a135f10d07db34d32f8dcf17fdb4622a44110167e481454feff5f0440ba3981e781a63ec608136d86d557173f91f77a82e599ef5f8af68254e3844a744f386f3814a664cc370a4a8d055067953a38bc484eb2259d2fde051f1601a8a308b85712225254", 0xab, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1)
unshare(0x22020400)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b00010000000000000000006401010100000000d20000000000000000000000000080000000ffff0a010101000000fbffffff7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f0000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000200000000000000020000000000000000000000000000000200000008000000000000000000000044"], 0xfc}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

157.398631ms ago: executing program 0 (id=4065):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000)
sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x3)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000000)=0x3ff)
ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000080)=0x3)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

107.318714ms ago: executing program 1 (id=4066):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10)

105.369127ms ago: executing program 1 (id=4067):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x44}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="a5", 0x1}]}}], 0x1, 0x40)

0s ago: executing program 1 (id=4068):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{}, {0x10}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, {}, {0x1}}], 0x140)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r2 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]})
write$ppp(r3, &(0x7f0000000180)="346b1591e9c7a7aa598d8789c731cedfaade9cb11a8460c63059a2596d24ba0d777e960bfa29d0b4cfe32e9b47b8b6917201465eeeae7569295f356c6e73ed548d837651b1956221dcffbd76bfe2009d6df928078e191985c86265dfbe6a09db79ebfc632eaa810e84a0006abcf26e6e75cf5daee66e4b35", 0x78)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x0, 0x0})
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendto(r6, &(0x7f0000000140)="d8e22679f5f78fb4266c64cb7969aaf62df8dbd8787b574a6e564eb1488fde1a026071f0b58404d868201b5d658c1c806057b35f5ae6192deddb1b683a525599fffc0d921962cffc0cce6d6e6051f17950424c0f22794a8a4a011f53b17eb22766f91cbe30485a28b4b96663a35522ab0f45f8627264ca8b4efcb6d3a247a62505339494591827e7", 0x88, 0x0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000200)=0x2e1, 0x4)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r8 = socket$kcm(0x2, 0x2, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

kernel console output (not intermixed with test programs):

s an invalid length.
[  272.258971][T11989] bond14: (slave vxcan7): The slave device specified does not support setting the MAC address
[  272.262752][T11989] bond14: (slave vxcan7): Error -95 calling set_mac_address
[  272.300159][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'.
[  272.465531][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'.
[  272.814796][T12013] syzkaller0: entered promiscuous mode
[  272.816827][T12013] syzkaller0: entered allmulticast mode
[  272.957182][T12015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1658'.
[  273.241582][T12041] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  273.295053][T12041] netlink: 'syz.1.1666': attribute type 10 has an invalid length.
[  273.300066][T12041] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  273.302554][T12041] bond0: (slave wlan1): refused to change device type
[  273.359078][T12041] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  273.362056][T12041] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  274.175051][T12065] nbd: must specify a device to reconfigure
[  274.180639][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  274.253992][T12073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'.
[  274.257534][T12074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1674'.
[  274.479410][T12095] netlink: 'syz.1.1677': attribute type 12 has an invalid length.
[  274.667863][T12110] sctp: [Deprecated]: syz.1.1680 (pid 12110) Use of int in max_burst socket option deprecated.
[  274.667863][T12110] Use struct sctp_assoc_value instead
[  275.710293][T12131] netlink: 'syz.2.1686': attribute type 1 has an invalid length.
[  275.751352][T12131] bond15: entered promiscuous mode
[  275.753693][T12131] 8021q: adding VLAN 0 to HW filter on device bond15
[  275.876289][T12145] netlink: 'syz.0.1689': attribute type 6 has an invalid length.
[  275.879609][T12145] netlink: 'syz.0.1689': attribute type 5 has an invalid length.
[  275.928771][T12145] netlink: 'syz.0.1689': attribute type 4 has an invalid length.
[  276.102144][T12167] netlink: 'syz.1.1694': attribute type 1 has an invalid length.
[  276.112624][T12167] __nla_validate_parse: 9 callbacks suppressed
[  276.112636][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1694'.
[  277.274122][T12217] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1706'.
[  277.283197][T12219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1707'.
[  277.353126][T12225] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  277.360380][T12225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  277.379951][T12226] bond15: left promiscuous mode
[  277.391403][   T33] audit: type=1800 audit(1762145728.866:2): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1709" name="memory.events" dev="tmpfs" ino=2747 res=0 errno=0
[  277.399606][   T33] audit: type=1804 audit(1762145728.876:3): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1709" name="/newroot/534/memory.events" dev="tmpfs" ino=2747 res=1 errno=0
[  278.186357][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  278.192478][T12236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  278.203552][T12236] netlink: 'syz.2.1713': attribute type 10 has an invalid length.
[  278.338547][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'.
[  278.537521][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'.
[  278.540714][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'.
[  279.178737][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'.
[  279.258299][T12271] netlink: 'syz.1.1725': attribute type 1 has an invalid length.
[  279.288783][T12270] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  279.302359][T12271] veth5: entered promiscuous mode
[  279.306470][T12271] bond11: (slave veth5): Enslaving as a backup interface with a down link
[  279.392910][T12281] vlan2: left promiscuous mode
[  279.394777][T12281] hsr_slave_1: left promiscuous mode
[  279.396686][T12281] vlan2: left allmulticast mode
[  279.398128][T12281] hsr_slave_1: left allmulticast mode
[  279.412560][T12281] veth5: left promiscuous mode
[  280.212836][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.253739][T12291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1731'.
[  280.257160][T12291] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1731'.
[  280.260354][T12291] netlink: 'syz.0.1731': attribute type 6 has an invalid length.
[  280.263376][T12291] netlink: 'syz.0.1731': attribute type 5 has an invalid length.
[  280.266355][T12291] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1731'.
[  280.270983][T12291] netlink: 'syz.0.1731': attribute type 4 has an invalid length.
[  280.280374][T12291] netlink: 'syz.0.1731': attribute type 4 has an invalid length.
[  280.309910][T12296] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  280.350267][T12296] bond12: entered promiscuous mode
[  280.352779][T12296] 8021q: adding VLAN 0 to HW filter on device bond12
[  280.354636][T12302] netlink: 'syz.0.1735': attribute type 6 has an invalid length.
[  280.362427][T12300] IPv6: sit1: Disabled Multicast RS
[  280.366027][T12302] netlink: 'syz.0.1735': attribute type 5 has an invalid length.
[  280.369828][T12300] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  280.425122][T12312] netlink: 'syz.0.1735': attribute type 4 has an invalid length.
[  280.505140][T12320] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003
[  280.717127][T12340] xt_TCPMSS: Only works on TCP SYN packets
[  280.827923][T12351] x_tables: duplicate underflow at hook 2
[  280.936869][T12360] 8021q: adding VLAN 0 to HW filter on device bond13
[  280.983739][T12362] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  280.988719][T12362] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  281.388705][T12391] syzkaller0: entered promiscuous mode
[  281.390655][T12391] syzkaller0: entered allmulticast mode
[  281.569997][T12397] bond12: left promiscuous mode
[  281.849444][T12401] __nla_validate_parse: 11 callbacks suppressed
[  281.849465][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'.
[  281.868559][T12401] bond19: entered promiscuous mode
[  281.870494][T12401] 8021q: adding VLAN 0 to HW filter on device bond19
[  281.881273][T12401] 8021q: adding VLAN 0 to HW filter on device bond19
[  281.883675][T12401] bond19: (slave gre2): The slave device specified does not support setting the MAC address
[  281.886992][T12401] bond19: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  281.890139][T12401] bond19: (slave gre2): Opening slave failed
[  281.926542][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'.
[  281.929704][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'.
[  282.403499][T12439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  282.558526][T12460] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1776'.
[  282.683484][T12473] can: request_module (can-proto-3) failed.
[  282.711823][T12473] sctp: [Deprecated]: syz.2.1781 (pid 12473) Use of int in maxseg socket option.
[  282.711823][T12473] Use struct sctp_assoc_value instead
[  282.925656][T12501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.931330][T12501] bond11: (slave ip6gretap1): Releasing backup interface
[  282.933468][T12501] bond11: (slave ip6gretap1): the permanent HWaddr of slave - 2a:f8:4a:bc:18:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  282.940674][T12501] bond11: (slave veth5): Releasing backup interface
[  282.980634][T12501] bond0: (slave wlan1): refused to change device type
[  282.985585][T12506] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1791'.
[  283.019968][T12503] wg1 speed is unknown, defaulting to 1000
[  283.394445][T12523] netlink: 'syz.0.1795': attribute type 11 has an invalid length.
[  283.398395][T12523] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1795'.
[  283.876872][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'.
[  283.885309][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1798'.
[  283.890437][T12535] validate_nla: 7 callbacks suppressed
[  283.890454][T12535] netlink: 'syz.1.1798': attribute type 2 has an invalid length.
[  284.064066][T12539] wg1 speed is unknown, defaulting to 1000
[  284.366038][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'.
[  284.882413][T12566] syzkaller0: entered promiscuous mode
[  284.884664][T12566] syzkaller0: entered allmulticast mode
[  285.201070][T12585] netlink: 'syz.2.1811': attribute type 21 has an invalid length.
[  285.223023][T12585] --map-set only usable from mangle table
[  285.308322][T12551] delete_channel: no stack
[  285.354304][T12593] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  285.359214][T12593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  285.373881][T12593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.377793][T12593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.452489][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1816'.
[  285.484018][T12606] bond0: left allmulticast mode
[  285.485613][T12606] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  285.511190][T12603] wg1 speed is unknown, defaulting to 1000
[  285.596857][T12610] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  285.640258][T12610] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  285.644676][T12610] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  285.795390][T12617] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  286.070908][T12630] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  286.110895][T12630] netlink: 'syz.1.1823': attribute type 10 has an invalid length.
[  286.113425][T12630] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  286.115715][T12630] bond0: (slave wlan1): refused to change device type
[  286.580963][T12651] netlink: 'syz.0.1831': attribute type 6 has an invalid length.
[  286.620560][T12656] netlink: 'syz.0.1833': attribute type 6 has an invalid length.
[  286.623126][T12656] netlink: 'syz.0.1833': attribute type 5 has an invalid length.
[  287.139252][T12675] netlink: 'syz.2.1838': attribute type 6 has an invalid length.
[  287.322669][T12690] netlink: 'syz.2.1841': attribute type 6 has an invalid length.
[  287.374849][T12692] __nla_validate_parse: 5 callbacks suppressed
[  287.374865][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'.
[  287.496678][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  287.580668][T12708] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1847'.
[  287.584380][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1847'.
[  287.620632][T12707] wg1 speed is unknown, defaulting to 1000
[  287.804631][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'.
[  288.326198][T12735] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1856'.
[  288.330272][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1856'.
[  288.382433][T12740] set match dimension is over the limit!
[  288.807532][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  288.810872][T12758] netlink: 'syz.0.1863': attribute type 5 has an invalid length.
[  288.813742][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  288.821601][T12758] geneve2: entered promiscuous mode
[  288.823543][T12758] geneve2: entered allmulticast mode
[  288.827426][ T5828] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  288.830069][ T5828] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  288.833194][ T5828] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  288.837262][ T5828] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  288.960454][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1867'.
[  289.233225][T12793] geneve2: left promiscuous mode
[  289.234824][T12793] geneve2: left allmulticast mode
[  289.238377][ T5828] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  289.241468][ T5828] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  289.248921][ T5828] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  289.251393][ T5828] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  290.115383][T12809] validate_nla: 1 callbacks suppressed
[  290.115394][T12809] netlink: 'syz.0.1875': attribute type 6 has an invalid length.
[  290.298703][T12819] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  290.479371][T12832] wg1 speed is unknown, defaulting to 1000
[  290.655977][ T5197] Bluetooth: hci2: command 0x0405 tx timeout
[  290.661834][T12847] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  290.715404][T12846] netlink: 'syz.1.1886': attribute type 10 has an invalid length.
[  290.718038][T12846] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  290.720156][T12846] bond0: (slave wlan1): refused to change device type
[  290.723977][T12846] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  290.728630][T12846] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  291.636980][T12877] veth0: entered promiscuous mode
[  291.808700][T12874] veth0: left promiscuous mode
[  291.885169][T12882] netlink: 'syz.2.1896': attribute type 5 has an invalid length.
[  291.991664][T12889] netlink: 'syz.2.1897': attribute type 1 has an invalid length.
[  292.023165][T12889] bond16: (slave vxcan7): The slave device specified does not support setting the MAC address
[  292.030223][T12889] bond16: (slave vxcan7): Error -95 calling set_mac_address
[  292.162680][T12894] xt_l2tp: v2 sid > 0xffff: 262147
[  292.420544][T12898] netlink: 'syz.1.1900': attribute type 12 has an invalid length.
[  293.559228][T12921] netlink: 'syz.1.1906': attribute type 2 has an invalid length.
[  293.562181][T12921] netlink: 'syz.1.1906': attribute type 8 has an invalid length.
[  293.565022][T12921] __nla_validate_parse: 9 callbacks suppressed
[  293.565036][T12921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1906'.
[  293.682379][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'.
[  293.776861][T12937] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  294.689445][T12956] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1914'.
[  294.807004][T12971] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1916'.
[  294.811662][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'.
[  294.853814][T12964] wg1 speed is unknown, defaulting to 1000
[  295.059769][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'.
[  295.251505][T13002] netlink: 'syz.1.1924': attribute type 1 has an invalid length.
[  295.322837][T12997] vlan4: entered allmulticast mode
[  295.901507][T13014] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  295.907786][T13014] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1929'.
[  295.944179][T13016] macvlan0: entered promiscuous mode
[  295.946604][T13016] macvlan0: entered allmulticast mode
[  295.948420][T13016] veth1_vlan: entered allmulticast mode
[  296.033538][T13022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1932'.
[  296.037682][T13022] vlan0: entered promiscuous mode
[  296.042807][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'.
[  296.074111][T13028] vlan0: left promiscuous mode
[  296.146513][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1935'.
[  296.202751][T13035] netlink: 'syz.1.1935': attribute type 1 has an invalid length.
[  296.267252][T13035] vlan4: entered allmulticast mode
[  296.366221][T13038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.368960][T13038] syzkaller0: entered promiscuous mode
[  296.370764][T13038] syzkaller0: entered allmulticast mode
[  296.384888][T13038] tipc: Resetting bearer <eth:syzkaller0>
[  296.392432][T13037] tipc: Resetting bearer <eth:syzkaller0>
[  296.403922][T13037] tipc: Disabling bearer <eth:syzkaller0>
[  296.641220][T13056] netlink: 'syz.2.1942': attribute type 18 has an invalid length.
[  297.225091][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.232514][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.240481][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.250240][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.258049][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.265500][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.274023][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.281637][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.289156][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.296952][T13079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.653973][T13099] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  297.759303][T13101] veth1_vlan: left allmulticast mode
[  297.761296][T13101] macvlan0: left promiscuous mode
[  297.763536][T13101] macvlan0: left allmulticast mode
[  297.930742][T13114] netlink: 'syz.2.1960': attribute type 13 has an invalid length.
[  297.933392][T13114] netlink: 'syz.2.1960': attribute type 17 has an invalid length.
[  297.984095][T13114] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.988943][T13114] 8021q: adding VLAN 0 to HW filter on device team0
[  297.994601][T13114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.019938][T13118] wg1 speed is unknown, defaulting to 1000
[  298.181507][T13122] netlink: 'syz.0.1964': attribute type 6 has an invalid length.
[  298.536818][ T5828] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  299.101922][T13165] netlink: 'syz.2.1979': attribute type 1 has an invalid length.
[  299.118189][T13165] bond17: entered promiscuous mode
[  299.120076][T13165] 8021q: adding VLAN 0 to HW filter on device bond17
[  299.169911][T13168] __nla_validate_parse: 8 callbacks suppressed
[  299.169929][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'.
[  299.254238][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'.
[  299.257951][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'.
[  299.413442][T13187] xt_cgroup: invalid path, errno=-2
[  300.179386][T13215] syzkaller0: entered promiscuous mode
[  300.181586][T13215] syzkaller0: entered allmulticast mode
[  300.304753][T13219] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  300.395953][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2001'.
[  300.568737][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  300.571378][T13239] nbd: must specify at least one socket
[  300.867568][T13269] netlink: 'syz.2.2013': attribute type 1 has an invalid length.
[  300.934157][T13263] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address
[  300.941598][T13263] bond18: (slave vxcan7): Error -95 calling set_mac_address
[  300.958611][T13278] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20001
[  300.959420][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[  300.963468][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[  301.122938][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'.
[  301.760064][T13310] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2023'.
[  301.762783][T13310] ksmbd: Unknown IPC event: 1, ignore.
[  301.881807][T13316] gtp1: entered promiscuous mode
[  302.077187][T13343] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[  302.182877][T13358] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  302.298294][T13367] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  302.314146][T13367] 8021q: adding VLAN 0 to HW filter on device bond19
[  302.321798][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'.
[  302.575998][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.828833][T13374] netlink: 'syz.0.2042': attribute type 6 has an invalid length.
[  302.869774][T13376] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  302.875142][T13376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  302.882798][T13376] netlink: 'syz.0.2043': attribute type 10 has an invalid length.
[  302.885227][T13376] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  302.890231][T13376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.893063][T13376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  303.118019][T13385] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  303.280476][T13403] syzkaller0: entered promiscuous mode
[  303.282222][T13403] syzkaller0: entered allmulticast mode
[  303.307081][T13404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  303.371250][T13405] netlink: 'syz.2.2048': attribute type 10 has an invalid length.
[  304.329676][T13433] wg1 speed is unknown, defaulting to 1000
[  304.368044][T13438] __nla_validate_parse: 2 callbacks suppressed
[  304.368061][T13438] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2058'.
[  304.599853][T13447] netlink: 'syz.2.2060': attribute type 1 has an invalid length.
[  304.736678][T13453] wg1 speed is unknown, defaulting to 1000
[  304.854054][T13456] netlink: 'syz.0.2061': attribute type 4 has an invalid length.
[  304.857181][T13456] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2061'.
[  305.188534][T13464] gtp1: left promiscuous mode
[  305.276939][T13469] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2065'.
[  305.282498][T13468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2065'.
[  305.318506][T13468] wg1 speed is unknown, defaulting to 1000
[  305.657442][T13486] xt_connbytes: Forcing CT accounting to be enabled
[  305.724301][T13489] bond17: left promiscuous mode
[  306.666116][T13514] wg1 speed is unknown, defaulting to 1000
[  306.669740][T13515] wg1 speed is unknown, defaulting to 1000
[  306.902400][T13529] netlink: 'syz.2.2080': attribute type 1 has an invalid length.
[  306.905325][T13529] netlink: 'syz.2.2080': attribute type 3 has an invalid length.
[  306.907853][T13529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2080'.
[  306.963860][T13531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  306.970739][T13531] batman_adv: batadv0: Adding interface: gretap2
[  306.972629][T13531] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.981370][T13531] batman_adv: batadv0: Interface activated: gretap2
[  307.209344][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'.
[  308.130374][T13558] netlink: 'syz.2.2088': attribute type 298 has an invalid length.
[  308.271868][T13565] veth0_to_bond: entered promiscuous mode
[  308.295181][T13569] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  308.420689][T13575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2095'.
[  308.423369][T13575] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2095'.
[  308.426159][T13575] netlink: 'syz.2.2095': attribute type 6 has an invalid length.
[  308.428357][T13575] netlink: 'syz.2.2095': attribute type 5 has an invalid length.
[  308.430655][T13575] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2095'.
[  308.440204][T13575] netlink: 'syz.2.2095': attribute type 4 has an invalid length.
[  308.443917][T13575] netlink: 'syz.2.2095': attribute type 4 has an invalid length.
[  308.481306][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2096'.
[  308.538860][T13588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.541249][T13588] syzkaller0: entered promiscuous mode
[  308.543100][T13588] syzkaller0: entered allmulticast mode
[  308.558068][T13588] tipc: Resetting bearer <eth:syzkaller0>
[  308.561114][T13587] tipc: Resetting bearer <eth:syzkaller0>
[  308.571769][T13587] tipc: Disabling bearer <eth:syzkaller0>
[  308.768140][T13603] netlink: 'syz.1.2101': attribute type 1 has an invalid length.
[  308.797017][T13606] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  308.808202][T13603] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  308.811631][T13603] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  308.819786][T13606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  308.861908][T13607] vlan4: entered allmulticast mode
[  308.864558][T13607] bond14: (slave vlan4): Opening slave failed
[  309.030632][T13618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.038201][T13618] netlink: 'syz.2.2107': attribute type 10 has an invalid length.
[  309.040513][T13618] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  309.043806][T13618] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.046759][T13618] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.395064][T13622] __nla_validate_parse: 3 callbacks suppressed
[  309.395075][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2108'.
[  309.401043][T13622] netlink: 'syz.0.2108': attribute type 4 has an invalid length.
[  309.899705][T13632] veth0_to_bond: left promiscuous mode
[  309.902176][T13632] batman_adv: batadv0: Interface deactivated: gretap2
[  310.201708][T13647] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2115'.
[  310.304668][T13651] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  310.510023][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'.
[  310.862528][T13689] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  310.867615][T13689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  310.898179][T13689] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  311.111391][T13697] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2133'.
[  311.114617][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2133'.
[  311.143019][T13697] wg1 speed is unknown, defaulting to 1000
[  311.477200][T13712] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  317.299502][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.301934][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  341.019854][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'.
[  341.166089][T13772] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2151'.
[  341.171415][T13771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2151'.
[  341.205420][T13771] wg1 speed is unknown, defaulting to 1000
[  341.389560][T13777] validate_nla: 4 callbacks suppressed
[  341.389576][T13777] netlink: 'syz.1.2152': attribute type 6 has an invalid length.
[  341.429396][T13779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2153'.
[  341.548318][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2155'.
[  341.550985][T13785] tc_dump_action: action bad kind
[  341.553505][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'.
[  341.594044][T13788] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  343.253272][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'.
[  343.259157][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'.
[  343.448711][T13832] netlink: 'syz.1.2166': attribute type 2 has an invalid length.
[  343.451435][T13832] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  343.453907][T13832] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  343.531775][T13836] netlink: 'syz.1.2167': attribute type 6 has an invalid length.
[  343.650654][T13843] netlink: 'syz.2.2168': attribute type 4 has an invalid length.
[  343.654814][T13843] netlink: 'syz.2.2168': attribute type 4 has an invalid length.
[  344.561250][T13874] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  344.662529][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2178'.
[  344.712968][T13879] wg1 speed is unknown, defaulting to 1000
[  345.281504][T13893] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  345.289476][T13893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  345.302924][T13893] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.306908][T13893] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  345.532239][T13906] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  345.631387][T13906] netlink: 'syz.1.2189': attribute type 10 has an invalid length.
[  345.634062][T13906] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  345.636706][T13906] bond0: (slave wlan1): refused to change device type
[  346.139180][T13915] x_tables: duplicate underflow at hook 4
[  346.272515][T13923] netlink: 'syz.0.2192': attribute type 1 has an invalid length.
[  346.302769][T13923] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  346.307981][T13923] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  346.352324][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.361841][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.362389][T13928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.371733][T13928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.377635][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.382904][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.388667][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.393694][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.426172][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  346.432758][T13932] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  346.435420][T13932] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  346.440936][T13932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2194'.
[  347.139108][T13942] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  347.272663][T13952] netlink: 'syz.0.2200': attribute type 6 has an invalid length.
[  347.631472][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'.
[  347.634757][T13980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2208'.
[  348.282325][T14022] netlink: 'syz.0.2220': attribute type 21 has an invalid length.
[  348.285546][T14022] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2220'.
[  348.288400][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'.
[  348.366295][T14024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2221'.
[  348.369786][T14024] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2221'.
[  348.373085][T14024] netlink: 'syz.0.2221': attribute type 6 has an invalid length.
[  348.375615][T14024] netlink: 'syz.0.2221': attribute type 5 has an invalid length.
[  348.378161][T14024] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2221'.
[  348.381798][T14024] netlink: 'syz.0.2221': attribute type 4 has an invalid length.
[  348.388058][T14024] netlink: 'syz.0.2221': attribute type 4 has an invalid length.
[  348.439527][T14028] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  348.461345][T14028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2222'.
[  348.512161][T14030] netlink: 'syz.0.2223': attribute type 2 has an invalid length.
[  348.582238][T14037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2225'.
[  348.585659][T14037] netlink: 'syz.0.2225': attribute type 6 has an invalid length.
[  348.590101][T14037] netlink: 'syz.0.2225': attribute type 5 has an invalid length.
[  348.593739][T14037] netlink: 'syz.0.2225': attribute type 4 has an invalid length.
[  349.501975][T14047] Set syz0 is full, maxelem 0 reached
[  349.550586][T14049] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  349.858806][T14065] syzkaller1: entered promiscuous mode
[  349.860603][T14065] syzkaller1: entered allmulticast mode
[  350.800386][T14088] syzkaller1: entered promiscuous mode
[  350.802254][T14088] syzkaller1: entered allmulticast mode
[  351.474718][T14141] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  351.477536][T14141] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  351.909646][T14159] __nla_validate_parse: 8 callbacks suppressed
[  351.909660][T14159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2264'.
[  351.983044][ T5860] hid-generic 0005:0458:5505.0002: unknown main item tag 0x0
[  352.003595][ T5860] hid-generic 0005:0458:5505.0002: hidraw0: BLUETOOTH HID ve7.ef Device [syz0] on aa:aa:aa:aa:aa:aa
[  352.817753][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'.
[  352.820364][T14190] validate_nla: 8 callbacks suppressed
[  352.820375][T14190] netlink: 'syz.0.2270': attribute type 2 has an invalid length.
[  353.029239][T14200] xfrm0: entered allmulticast mode
[  353.035060][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2273'.
[  353.107107][T14200] netlink: 'syz.1.2273': attribute type 10 has an invalid length.
[  353.109960][T14200] bond0: (slave wlan1): refused to change device type
[  353.216641][T14207] xfrm0: left allmulticast mode
[  354.007715][T14218] netlink: 'syz.1.2278': attribute type 6 has an invalid length.
[  354.010169][T14218] netlink: 'syz.1.2278': attribute type 7 has an invalid length.
[  354.012764][T14218] netlink: 'syz.1.2278': attribute type 8 has an invalid length.
[  354.263133][T14224] netlink: 'syz.2.2280': attribute type 6 has an invalid length.
[  354.267857][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'.
[  354.315019][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  354.316179][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  354.323774][T14226] netlink: 'syz.2.2281': attribute type 1 has an invalid length.
[  354.324643][T14227] netlink: 'syz.2.2281': attribute type 1 has an invalid length.
[  354.352436][T14227] bond21: entered promiscuous mode
[  354.354917][T14227] 8021q: adding VLAN 0 to HW filter on device bond21
[  354.369143][T14226] 8021q: adding VLAN 0 to HW filter on device bond21
[  354.372180][T14226] bond21: (slave gre2): The slave device specified does not support setting the MAC address
[  354.376362][T14226] bond21: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  354.380460][T14226] bond21: (slave gre2): Opening slave failed
[  354.412417][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'.
[  354.416809][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'.
[  354.479913][T14237] tipc: New replicast peer: 255.255.255.255
[  354.482314][T14237] tipc: Enabled bearer <udp:syz2>, priority 10
[  354.489469][T14237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.571543][T14244] veth0_to_bridge: entered promiscuous mode
[  354.580507][T14243] veth0_to_bridge: left promiscuous mode
[  354.905093][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'.
[  354.952812][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'.
[  355.048163][T14278] netlink: 'syz.0.2296': attribute type 4 has an invalid length.
[  355.051027][T14279] netlink: 'syz.0.2296': attribute type 2 has an invalid length.
[  355.212729][T14283] wg1 speed is unknown, defaulting to 1000
[  355.596039][ T5860] tipc: Node number set to 4140151218
[  355.618239][T14290] wg1 speed is unknown, defaulting to 1000
[  356.790420][T14338] syzkaller1: entered promiscuous mode
[  356.792562][T14338] syzkaller1: entered allmulticast mode
[  357.599371][T14364] __nla_validate_parse: 6 callbacks suppressed
[  357.599402][T14364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2320'.
[  358.001253][T14370] validate_nla: 1 callbacks suppressed
[  358.001273][T14370] netlink: 'syz.2.2321': attribute type 1 has an invalid length.
[  358.420089][T14374] batadv_slave_0: entered promiscuous mode
[  359.397806][T14395] wg1 speed is unknown, defaulting to 1000
[  359.784408][T14402] block nbd1: Unsupported socket: should be TCP or UNIX.
[  360.185712][T14426] netlink: 'syz.0.2331': attribute type 142 has an invalid length.
[  360.245434][T14430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2332'.
[  360.533352][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'.
[  360.546141][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2335'.
[  360.647988][T14468] netlink: 'syz.1.2339': attribute type 6 has an invalid length.
[  360.691731][T14474] netlink: 'syz.1.2341': attribute type 1 has an invalid length.
[  360.716481][T14474] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  360.719911][T14474] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  360.776589][T14474] vlan4: entered allmulticast mode
[  360.778683][T14474] bond15: (slave vlan4): Opening slave failed
[  361.132546][T14499] netlink: 'syz.1.2348': attribute type 6 has an invalid length.
[  361.350011][T14508] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  361.359407][T14508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  361.368300][T14508] netlink: 'syz.0.2352': attribute type 10 has an invalid length.
[  361.370609][T14508] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  361.374158][T14508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  361.377334][T14508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  361.504178][T14517] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  362.263237][T14545] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2361'.
[  362.300533][T14542] wg1 speed is unknown, defaulting to 1000
[  363.133750][T14593] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2377'.
[  363.138705][T14592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2377'.
[  363.308652][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'.
[  363.313325][T14610] netlink: 'syz.1.2382': attribute type 6 has an invalid length.
[  363.351309][T14612] netlink: 'syz.1.2383': attribute type 3 has an invalid length.
[  363.392180][T14615] netlink: 'syz.1.2384': attribute type 4 has an invalid length.
[  363.398216][T14615] netlink: 'syz.1.2384': attribute type 4 has an invalid length.
[  363.874482][T14630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.885314][T14630] netlink: 'syz.2.2390': attribute type 10 has an invalid length.
[  363.932974][T14632] netlink: 'syz.2.2391': attribute type 3 has an invalid length.
[  363.935413][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'.
[  363.981536][T14634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2392'.
[  364.003123][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'.
[  364.993358][T14672] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  365.105189][T14677] netlink: 'syz.1.2401': attribute type 10 has an invalid length.
[  365.107868][T14677] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  365.110467][T14677] bond0: (slave wlan1): refused to change device type
[  365.144473][T14672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.147627][T14672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.984807][T14701] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  365.990617][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2407'.
[  366.019902][T14703] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20001
[  366.078893][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'.
[  366.291571][T14718] xt_CT: You must specify a L4 protocol and not use inversions on it
[  366.933212][T14738] netlink: 14448 bytes leftover after parsing attributes in process `syz.1.2419'.
[  366.939678][T14738] netlink: 'syz.1.2419': attribute type 1 has an invalid length.
[  366.959345][T14738] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  366.962723][T14738] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  366.981049][T14743] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  366.987419][T14743] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  367.139519][T14754] sctp: [Deprecated]: syz.1.2423 (pid 14754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.139519][T14754] Use struct sctp_sack_info instead
[  367.298019][T14757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2424'.
[  367.443138][T14769] Bluetooth: MGMT ver 1.23
[  367.603973][T14774] digital: digital_start_poll: Unknown protocol
[  367.607618][T14774] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  367.610090][T14774] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002
[  367.706498][T14777] netlink: 'syz.2.2429': attribute type 1 has an invalid length.
[  367.730203][T14777] bond23: (slave vxcan7): The slave device specified does not support setting the MAC address
[  367.734470][T14777] bond23: (slave vxcan7): Error -95 calling set_mac_address
[  368.289291][T14811] batadv_slave_0: left promiscuous mode
[  368.593379][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.598592][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.659901][T14839] __nla_validate_parse: 5 callbacks suppressed
[  368.659914][T14839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2443'.
[  369.146087][T14853] geneve3: entered promiscuous mode
[  369.147682][T14853] geneve3: entered allmulticast mode
[  369.150341][ T5828] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  369.155793][ T5828] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  369.158529][ T5828] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  369.161529][ T5828] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  369.171468][T14853] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  369.221856][T14853] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  369.347085][T14853] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  369.498531][T14853] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  369.787328][ T5820] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  369.847957][ T5828] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  369.917510][ T5828] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  370.017011][ T5828] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  376.589126][T14858] netlink: 'syz.2.2453': attribute type 12 has an invalid length.
[  376.684563][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'.
[  376.695553][T14868] wg1 speed is unknown, defaulting to 1000
[  376.729842][T14875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2457'.
[  376.734369][T14872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'.
[  376.792947][T14872] wg1 speed is unknown, defaulting to 1000
[  377.020412][T14885] wg1 speed is unknown, defaulting to 1000
[  377.093508][T14891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'.
[  377.218774][T14894] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  377.398424][T14896] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  377.403548][T14896] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  377.439532][T14894] vlan4: entered allmulticast mode
[  377.441466][T14894] bond17: (slave vlan4): Opening slave failed
[  377.818218][T14918] netlink: 'syz.2.2467': attribute type 6 has an invalid length.
[  378.038780][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2471'.
[  378.184239][T14938] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  378.245723][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'.
[  378.363409][T14958] netlink: 'syz.1.2479': attribute type 1 has an invalid length.
[  378.385427][T14955] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  378.389047][T14955] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  378.549213][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2481'.
[  378.634811][T14970] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2482'.
[  378.639091][T14969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2482'.
[  378.739321][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.741692][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.934942][T14984] wg1 speed is unknown, defaulting to 1000
[  379.408359][T15010] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  379.420600][T15012] openvswitch: netlink: Key type 58 is out of range max 32
[  379.462578][T15014] syzkaller1: tun_chr_ioctl cmd 1074025677
[  379.464620][T15014] syzkaller1: linktype set to 778
[  379.582534][T15018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2496'.
[  379.585220][T15018] netlink: 'syz.0.2496': attribute type 6 has an invalid length.
[  379.588091][T15018] netlink: 'syz.0.2496': attribute type 5 has an invalid length.
[  379.732292][T15025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  379.948036][T15037] netlink: 'syz.0.2502': attribute type 6 has an invalid length.
[  379.950625][T15037] netlink: 'syz.0.2502': attribute type 5 has an invalid length.
[  379.952974][T15038] netlink: 'syz.0.2502': attribute type 6 has an invalid length.
[  379.956219][T15038] netlink: 'syz.0.2502': attribute type 5 has an invalid length.
[  380.528123][T15071] No such timeout policy "syz1"
[  381.483407][T15111] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  381.529230][T15124] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  381.662331][T15135] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  381.668826][T15135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  381.683435][T15135] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  381.687105][T15135] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  382.602966][T15156] __nla_validate_parse: 20 callbacks suppressed
[  382.602982][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'.
[  382.620800][T15156] 8021q: adding VLAN 0 to HW filter on device bond22
[  382.663677][T15159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.666174][T15160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.669589][T15159] syzkaller0: entered promiscuous mode
[  382.671425][T15159] syzkaller0: entered allmulticast mode
[  382.703084][T15159] tipc: Resetting bearer <eth:syzkaller0>
[  382.707775][T15158] tipc: Resetting bearer <eth:syzkaller0>
[  382.722676][T15158] tipc: Disabling bearer <eth:syzkaller0>
[  382.987439][T15164] wg1 speed is unknown, defaulting to 1000
[  383.071475][T15170] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  383.327150][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'.
[  383.465428][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2551'.
[  384.667966][T15247] netlink: zone id is out of range
[  384.753396][T15252] validate_nla: 2 callbacks suppressed
[  384.753412][T15252] netlink: 'syz.1.2570': attribute type 1 has an invalid length.
[  384.773409][T15252] 8021q: adding VLAN 0 to HW filter on device bond19
[  385.532533][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'.
[  385.539847][T15260] ip6gre1: entered promiscuous mode
[  385.554482][T15260] netlink: 'syz.2.2572': attribute type 6 has an invalid length.
[  385.685223][T15268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2577'.
[  385.688652][T15268] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2577'.
[  385.692036][T15268] netlink: 'syz.0.2577': attribute type 6 has an invalid length.
[  385.694657][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'.
[  385.695311][T15268] netlink: 'syz.0.2577': attribute type 5 has an invalid length.
[  385.700175][T15268] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2577'.
[  385.774288][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'.
[  385.786846][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'.
[  385.949197][T15295] netlink: 'syz.2.2583': attribute type 6 has an invalid length.
[  386.910023][T15320] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  386.913943][T15320] A link change request failed with some changes committed already. Interface uj?Zj may have been left with an inconsistent configuration, please check.
[  387.097967][T15332] netlink: 'syz.1.2591': attribute type 10 has an invalid length.
[  387.100382][T15332] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  387.102728][T15332] bond0: (slave wlan1): refused to change device type
[  387.107092][T15332] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  387.110322][T15332] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  387.763053][T15342] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  387.796781][T15342] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[  387.806546][T15342] bond23: (slave vxcan3): Error -95 calling set_mac_address
[  387.927981][T15348] __nla_validate_parse: 1 callbacks suppressed
[  387.927992][T15348] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2594'.
[  388.202290][T15360] xt_hashlimit: invalid rate
[  388.205542][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2596'.
[  388.262182][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  388.869219][T15372] netlink: 'syz.1.2599': attribute type 1 has an invalid length.
[  388.888197][T15372] 8021q: adding VLAN 0 to HW filter on device bond20
[  388.897639][T15372] bond20: (slave gretap1): making interface the new active one
[  388.900886][T15372] bond20: (slave gretap1): Enslaving as an active interface with an up link
[  388.948812][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.952603][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.955521][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.959588][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.962423][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.965649][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  388.969529][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'.
[  389.009744][T15377] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  389.130413][T15377] netlink: 'syz.1.2600': attribute type 10 has an invalid length.
[  389.132972][T15377] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  389.135343][T15377] bond0: (slave wlan1): refused to change device type
[  389.140873][T15377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  389.144377][T15377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  389.607057][T15411] netlink: 'syz.2.2609': attribute type 6 has an invalid length.
[  389.723960][T15425] wg1 speed is unknown, defaulting to 1000
[  389.944277][T15440] wg1 speed is unknown, defaulting to 1000
[  391.657045][T15497] set match dimension is over the limit!
[  391.700415][T15500] ipt_rpfilter: unknown options
[  391.733340][T15504] Unsupported ieee802154 address type: 0
[  391.745644][T15503] validate_nla: 3 callbacks suppressed
[  391.745656][T15503] netlink: 'syz.2.2633': attribute type 10 has an invalid length.
[  391.750615][T15503] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  391.760713][T15503] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  391.764436][T15503] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  391.855630][T15511] geneve3: left promiscuous mode
[  391.857335][T15511] geneve3: left allmulticast mode
[  391.882560][ T5828] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  391.889122][ T5828] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  391.891751][ T5828] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  391.894312][ T5828] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  392.314347][T15517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.448853][T15523] netlink: 'syz.0.2640': attribute type 1 has an invalid length.
[  392.468677][T15522] bond24: (slave vxcan3): The slave device specified does not support setting the MAC address
[  392.472775][T15522] bond24: (slave vxcan3): Error -95 calling set_mac_address
[  392.622074][T15533] 8021q: adding VLAN 0 to HW filter on device bond24
[  392.666733][T15539] netlink: 'syz.1.2645': attribute type 6 has an invalid length.
[  392.778356][T15555] netlink: 'syz.2.2648': attribute type 1 has an invalid length.
[  392.798065][T15554] bond25: (slave vxcan7): The slave device specified does not support setting the MAC address
[  392.802885][T15554] bond25: (slave vxcan7): Error -95 calling set_mac_address
[  392.805322][T15558] netlink: 'syz.1.2647': attribute type 1 has an invalid length.
[  392.825325][T15558] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  393.177020][T15584] __nla_validate_parse: 176 callbacks suppressed
[  393.177038][T15584] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2656'.
[  393.189114][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'.
[  393.191759][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2656'.
[  393.400497][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'.
[  393.509150][T15601] netlink: 'syz.1.2661': attribute type 10 has an invalid length.
[  393.512276][T15601] bond0: (slave wlan1): refused to change device type
[  393.543779][T15610] netlink: 'syz.0.2663': attribute type 4 has an invalid length.
[  393.556191][T15613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2664'.
[  393.676900][T15621] wg1 speed is unknown, defaulting to 1000
[  393.681882][T15614] wg1 speed is unknown, defaulting to 1000
[  393.697868][T15623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  393.707492][T15623] netlink: 'syz.0.2667': attribute type 10 has an invalid length.
[  393.710833][T15623] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  393.718178][T15623] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  393.722138][T15623] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  394.551837][T15643] netlink: 'syz.0.2672': attribute type 8 has an invalid length.
[  395.410090][T15676] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2682'.
[  395.412400][T15674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  395.412734][T15676] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  395.422891][T15677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'.
[  396.277129][T15690] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2685'.
[  396.368928][T15698] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2686'.
[  396.415822][T15692] wg1 speed is unknown, defaulting to 1000
[  396.871353][T15728] bond25: Removing last ns target with arp_interval on
[  396.874110][T15726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  396.881651][T15726] netlink: 'syz.2.2694': attribute type 11 has an invalid length.
[  396.888661][T15726] netlink: 'syz.2.2694': attribute type 10 has an invalid length.
[  397.013810][T15737] wg1 speed is unknown, defaulting to 1000
[  397.787115][T15751] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  398.083897][T15767] netlink: 'syz.1.2703': attribute type 1 has an invalid length.
[  398.115566][T15767] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  398.119386][T15767] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  398.130677][T15770] netlink: 'syz.0.2705': attribute type 9 has an invalid length.
[  398.184475][T15767] vlan4: entered allmulticast mode
[  398.350353][T15789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2710'.
[  398.353132][T15789] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2710'.
[  398.355830][T15789] netlink: 'syz.0.2710': attribute type 6 has an invalid length.
[  398.358691][T15789] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2710'.
[  399.209380][T15807] gretap0: entered allmulticast mode
[  399.217295][T15807] netlink: 'syz.0.2714': attribute type 5 has an invalid length.
[  399.221934][T15807] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  399.225253][T15807] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.870088][T15812] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2716'.
[  399.946421][T15814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.950457][T15814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.953121][T15815] syzkaller0: entered promiscuous mode
[  399.955247][T15815] syzkaller0: entered allmulticast mode
[  399.960066][T15814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.971424][T15814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.984313][T15814] tipc: Resetting bearer <eth:syzkaller0>
[  399.996905][T15814] tipc: Disabling bearer <eth:syzkaller0>
[  400.070839][T15821] netlink: 'syz.1.2719': attribute type 6 has an invalid length.
[  400.073332][T15820] gretap0: left allmulticast mode
[  400.093431][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'.
[  400.172549][   T33] audit: type=1804 audit(1762145851.646:4): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2720" name="/newroot/913/cgroup.controllers" dev="tmpfs" ino=4675 res=1 errno=0
[  400.182745][   T33] audit: type=1800 audit(1762145851.656:5): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2720" name="cgroup.controllers" dev="tmpfs" ino=4675 res=0 errno=0
[  400.352108][T15839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2724'.
[  400.367798][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2725'.
[  400.413165][T15844] syzkaller1: tun_chr_ioctl cmd 1074025677
[  400.415009][T15844] syzkaller1: Linktype set failed because interface is up
[  400.420981][T15846] syzkaller1: tun_chr_ioctl cmd 1074025673
[  400.949323][T15859] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  400.952862][T15860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  400.959508][T15859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  400.966454][T15859] netlink: 'syz.0.2730': attribute type 10 has an invalid length.
[  400.968727][T15859] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  401.229012][T15883] netlink: 'syz.0.2739': attribute type 6 has an invalid length.
[  401.545932][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'.
[  401.569538][T15916] bond26: (slave vxcan7): The slave device specified does not support setting the MAC address
[  401.573071][T15916] bond26: (slave vxcan7): Error -95 calling set_mac_address
[  401.619075][T15918] macvlan2: entered promiscuous mode
[  401.620730][T15918] macvlan2: entered allmulticast mode
[  401.622643][T15918] bond26: (slave macvlan2): Error -98 calling set_mac_address
[  402.168871][T15929] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2750'.
[  402.323107][T15935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.356334][T15935] syzkaller0: entered promiscuous mode
[  402.357938][T15935] syzkaller0: entered allmulticast mode
[  402.359948][T15935] tipc: Resetting bearer <eth:syzkaller0>
[  402.378004][T15935] tipc: Resetting bearer <eth:syzkaller0>
[  402.451137][T15948] rdma_op ffff888116bdc9f0 conn xmit_rdma 0000000000000000
[  403.320749][T15935] tipc: Disabling bearer <eth:syzkaller0>
[  403.438779][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2760'.
[  403.552519][T15970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2764'.
[  403.557384][T15970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2764'.
[  403.658234][T15982] netlink: 'syz.0.2768': attribute type 10 has an invalid length.
[  403.660563][T15982] team0: Device dummy0 is of different type
[  403.662651][T15982] netlink: 'syz.0.2768': attribute type 10 has an invalid length.
[  404.266627][T15990] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.494727][T16004] ip6gre1: left promiscuous mode
[  404.535131][T16010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2777'.
[  404.538637][T16010] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2777'.
[  404.541628][T16010] netlink: 'syz.2.2777': attribute type 6 has an invalid length.
[  404.544051][T16010] netlink: 'syz.2.2777': attribute type 5 has an invalid length.
[  404.546821][T16010] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2777'.
[  404.559330][T16010] netlink: 'syz.2.2777': attribute type 4 has an invalid length.
[  404.563136][T16010] netlink: 'syz.2.2777': attribute type 4 has an invalid length.
[  404.563176][T16011] netlink: 'syz.2.2777': attribute type 4 has an invalid length.
[  404.601545][T16015] xt_TCPMSS: Only works on TCP SYN packets
[  404.985427][T16038] wg1 speed is unknown, defaulting to 1000
[  405.210476][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'.
[  405.661061][T16067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.663475][T16068] syzkaller0: entered promiscuous mode
[  405.665180][T16068] syzkaller0: entered allmulticast mode
[  405.680321][T16066] tipc: Resetting bearer <eth:syzkaller0>
[  405.691521][T16066] tipc: Disabling bearer <eth:syzkaller0>
[  405.950135][T16077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2794'.
[  405.953472][T16077] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2794'.
[  405.956827][T16077] netlink: 'syz.2.2794': attribute type 6 has an invalid length.
[  405.959544][T16077] netlink: 'syz.2.2794': attribute type 5 has an invalid length.
[  405.962083][T16077] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2794'.
[  405.969650][T16078] netlink: 'syz.2.2794': attribute type 4 has an invalid length.
[  406.210546][T16091] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  406.240647][T16094] No such timeout policy "syz1"
[  406.443260][T16129] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  407.878461][T16174] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  407.882957][T16174] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  408.445566][T16199] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  408.597004][T16203] syzkaller0: entered promiscuous mode
[  408.598721][T16203] syzkaller0: entered allmulticast mode
[  408.769493][T16212] __nla_validate_parse: 5 callbacks suppressed
[  408.769515][T16212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2832'.
[  408.774310][T16212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2832'.
[  409.251647][T16214] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004
[  409.283263][T16216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2834'.
[  409.290312][T16216] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2834'.
[  409.293744][T16216] validate_nla: 5 callbacks suppressed
[  409.293760][T16216] netlink: 'syz.2.2834': attribute type 6 has an invalid length.
[  409.298764][T16216] netlink: 'syz.2.2834': attribute type 5 has an invalid length.
[  409.301533][T16216] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2834'.
[  409.379170][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2836'.
[  409.403383][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2836'.
[  409.407944][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2836'.
[  409.412512][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2836'.
[  409.415700][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2836'.
[  409.457757][T16225] wg1 speed is unknown, defaulting to 1000
[  409.923016][T16238] 8021q: VLANs not supported on ip6_vti0
[  410.189225][T16255] 8021q: adding VLAN 0 to HW filter on device bond23
[  410.192953][T16255] bond23: entered promiscuous mode
[  410.195385][T16255] bond0: (slave bond23): Enslaving as an active interface with an up link
[  410.373773][T16267] syzkaller0: entered promiscuous mode
[  410.375598][T16267] syzkaller0: entered allmulticast mode
[  411.420769][T16287] syzkaller0: entered promiscuous mode
[  411.422495][T16287] syzkaller0: entered allmulticast mode
[  412.460299][ T5820] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  412.464490][ T5820] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  412.469521][ T5820] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  412.472516][ T5820] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  412.646304][T16332] netlink: 'syz.1.2868': attribute type 3 has an invalid length.
[  412.648492][T16332] netlink: 'syz.1.2868': attribute type 1 has an invalid length.
[  413.080574][T16350] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  413.085492][T16350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  413.094952][T16350] netlink: 'syz.0.2872': attribute type 10 has an invalid length.
[  413.097328][T16350] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  413.101581][T16350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.104341][T16350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.209651][T16355] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20003
[  413.958190][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.963984][ T5820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.967763][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.970784][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.021603][T16367] ipip1: entered allmulticast mode
[  414.154846][T16375] __nla_validate_parse: 11 callbacks suppressed
[  414.154865][T16375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2881'.
[  415.091281][T16400] ipip1: left allmulticast mode
[  415.096807][ T5820] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.106040][ T5820] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.108597][ T5820] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.111082][ T5820] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.142448][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2899'.
[  416.197661][T16430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2901'.
[  416.229095][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'.
[  416.365213][T16451] netlink: zone id is out of range
[  416.376048][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'.
[  416.379711][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'.
[  416.400904][T16456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2907'.
[  416.404182][T16456] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2907'.
[  416.404692][T16453] bond1: (slave vlan2): Releasing active interface
[  416.408261][T16456] netlink: 'syz.1.2907': attribute type 6 has an invalid length.
[  416.412571][T16456] netlink: 'syz.1.2907': attribute type 5 has an invalid length.
[  416.415351][T16456] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2907'.
[  416.468589][T16446] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2904'.
[  416.472486][T16456] netlink: 'syz.1.2907': attribute type 4 has an invalid length.
[  416.478010][T16456] netlink: 'syz.1.2907': attribute type 4 has an invalid length.
[  416.632468][T16468] IPVS: Unknown mcast interface: lo
[  416.635539][T16468] openvswitch: netlink: Flow key attribute not present in set flow.
[  417.566816][T16503] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  417.713976][T16514] netlink: 'syz.2.2922': attribute type 4 has an invalid length.
[  417.718182][T16514] netlink: 'syz.2.2922': attribute type 4 has an invalid length.
[  418.089109][T16530] A link change request failed with some changes committed already. Interface uj?Zj may have been left with an inconsistent configuration, please check.
[  418.451744][T16532] netlink: 'syz.0.2928': attribute type 1 has an invalid length.
[  418.483222][T16532] 8021q: adding VLAN 0 to HW filter on device bond26
[  418.494204][T16532] veth7: entered promiscuous mode
[  418.500270][T16532] bond26: (slave veth7): Enslaving as an active interface with an up link
[  419.494951][T16581] __nla_validate_parse: 5 callbacks suppressed
[  419.494971][T16581] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2940'.
[  419.501624][T16577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2940'.
[  419.642412][T16585] wg1 speed is unknown, defaulting to 1000
[  419.697584][T16590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2942'.
[  419.711200][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'.
[  419.759163][T16592] netlink: 'syz.1.2943': attribute type 6 has an invalid length.
[  419.920923][T16600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2945'.
[  419.923692][T16600] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2945'.
[  419.926493][T16600] netlink: 'syz.1.2945': attribute type 6 has an invalid length.
[  419.931258][T16600] netlink: 'syz.1.2945': attribute type 5 has an invalid length.
[  419.933532][T16600] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2945'.
[  419.979949][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'.
[  420.038476][T16604] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  420.051247][T16605] bond20: (slave gretap1): Releasing active interface
[  420.068797][T16605] bond0: (slave bond23): Releasing backup interface
[  420.071494][T16605] bond23: left promiscuous mode
[  420.172000][T16612] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  420.181487][ T5828] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.185671][ T5828] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.190044][ T5828] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.193987][ T5828] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.514174][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'.
[  421.170132][T16651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2960'.
[  421.313244][T16655] bond0: (slave wlan1): refused to change device type
[  421.319155][T16655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  421.321920][T16655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  421.548155][T16670] syzkaller1: entered promiscuous mode
[  421.549840][T16670] syzkaller1: entered allmulticast mode
[  421.576205][T16670] veth7: left promiscuous mode
[  421.578891][T16670] syzkaller1: left promiscuous mode
[  421.583198][T16670] syzkaller1: left allmulticast mode
[  422.405482][T16694] validate_nla: 5 callbacks suppressed
[  422.405504][T16694] netlink: 'syz.1.2972': attribute type 12 has an invalid length.
[  423.322553][T16711] x_tables: ip_tables: osf match: only valid for protocol 6
[  423.421534][T16729] netlink: 'syz.2.2983': attribute type 9 has an invalid length.
[  424.139359][T16773] x_tables: duplicate underflow at hook 1
[  424.253793][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.259755][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.263555][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.269839][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.274083][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.279641][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.283137][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.286595][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.290824][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.294175][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.297912][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.301491][T16781] ieee802154 phy0 wpan0: encryption failed: -22
[  424.646330][T16805] __nla_validate_parse: 8 callbacks suppressed
[  424.646344][T16805] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3003'.
[  424.678196][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'.
[  424.806539][T16816] sctp: [Deprecated]: syz.2.3007 (pid 16816) Use of int in maxseg socket option.
[  424.806539][T16816] Use struct sctp_assoc_value instead
[  424.812869][T16816] sctp: [Deprecated]: syz.2.3007 (pid 16816) Use of int in maxseg socket option.
[  424.812869][T16816] Use struct sctp_assoc_value instead
[  424.971129][T16829] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3010'.
[  424.975193][T16828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3010'.
[  424.994012][T16833] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3011'.
[  424.997104][T16833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'.
[  424.999853][T16834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3011'.
[  425.002833][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'.
[  425.027267][T16828] wg1 speed is unknown, defaulting to 1000
[  425.289405][T16848] netlink: 'syz.0.3015': attribute type 1 has an invalid length.
[  425.303358][T16854] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3014'.
[  425.304282][T16848] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  425.321632][T16845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3014'.
[  425.379174][T16845] wg1 speed is unknown, defaulting to 1000
[  427.276719][T16906] netlink: 'syz.0.3032': attribute type 6 has an invalid length.
[  428.359324][T16930] wg1 speed is unknown, defaulting to 1000
[  429.158645][T16953] wg1 speed is unknown, defaulting to 1000
[  429.571166][T16983] netlink: 'syz.2.3052': attribute type 4 has an invalid length.
[  429.576921][T16983] netlink: 'syz.2.3052': attribute type 4 has an invalid length.
[  429.689973][T16996] C: renamed from team_slave_0
[  429.693917][T16996] __nla_validate_parse: 4 callbacks suppressed
[  429.693927][T16996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3057'.
[  429.791450][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3060'.
[  429.996557][T17018] netlink: 'syz.1.3063': attribute type 6 has an invalid length.
[  430.029650][T17020] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.032424][T17021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.098525][T17026] xt_hashlimit: overflow, try lower: 2341871806232657920/9
[  430.215564][T17035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3069'.
[  430.219053][T17035] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3069'.
[  430.222423][T17035] netlink: 'syz.1.3069': attribute type 6 has an invalid length.
[  430.225244][T17035] netlink: 'syz.1.3069': attribute type 5 has an invalid length.
[  430.230308][T17035] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3069'.
[  430.246088][T17035] netlink: 'syz.1.3069': attribute type 4 has an invalid length.
[  430.250881][T17035] netlink: 'syz.1.3069': attribute type 4 has an invalid length.
[  430.307630][T17045] xt_CT: You must specify a L4 protocol and not use inversions on it
[  430.328661][T17049] netlink: 'syz.0.3073': attribute type 2 has an invalid length.
[  430.779605][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'.
[  431.494503][T17109] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  431.528629][T17111] syzkaller0: entered promiscuous mode
[  431.530279][T17111] syzkaller0: entered allmulticast mode
[  431.741682][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'.
[  431.746275][T17114] netlink: 'syz.2.3096': attribute type 1 has an invalid length.
[  431.761977][T17114] bond27: entered promiscuous mode
[  431.763764][T17114] 8021q: adding VLAN 0 to HW filter on device bond27
[  431.777540][T17114] 8021q: adding VLAN 0 to HW filter on device bond27
[  431.779920][T17114] bond27: (slave gre2): The slave device specified does not support setting the MAC address
[  431.783302][T17114] bond27: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  431.787945][T17114] bond27: (slave gre2): Opening slave failed
[  431.821530][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'.
[  431.824709][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3096'.
[  432.113465][T17124] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  432.204795][T17132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  432.224322][T17132] netlink: 'syz.2.3101': attribute type 10 has an invalid length.
[  432.228588][T17132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.231493][T17132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.524951][T17140] bond25: entered promiscuous mode
[  432.527769][T17140] 8021q: adding VLAN 0 to HW filter on device bond25
[  432.534461][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'.
[  432.634641][T17150] wg1 speed is unknown, defaulting to 1000
[  434.423883][T17211] bond25: left promiscuous mode
[  435.152179][T17218] __nla_validate_parse: 5 callbacks suppressed
[  435.152193][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'.
[  435.855637][T17240] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3133'.
[  435.860408][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3133'.
[  435.899783][T17239] wg1 speed is unknown, defaulting to 1000
[  436.167674][T17250] validate_nla: 4 callbacks suppressed
[  436.167686][T17250] netlink: 'syz.0.3134': attribute type 1 has an invalid length.
[  436.270280][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'.
[  436.441134][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'.
[  436.632202][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'.
[  436.638521][T17291] netlink: 'syz.1.3147': attribute type 1 has an invalid length.
[  436.642606][T17292] netlink: 'syz.1.3147': attribute type 1 has an invalid length.
[  436.684472][T17292] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  436.688435][T17292] bond26: (slave vxcan1): Error -95 calling set_mac_address
[  436.701624][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  436.704413][T17291] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  436.707874][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  436.709518][T17291] bond26: (slave vxcan1): Error -95 calling set_mac_address
[  437.798374][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'.
[  437.801919][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'.
[  438.007441][T17343] netlink: 'syz.0.3161': attribute type 1 has an invalid length.
[  438.027190][T17343] bond29: entered promiscuous mode
[  438.029504][T17343] 8021q: adding VLAN 0 to HW filter on device bond29
[  438.258878][T17359] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  438.389948][T17366] SET target dimension over the limit!
[  438.404632][T17366] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  438.673252][T17375] ipt_ECN: cannot use operation on non-tcp rule
[  438.722937][T17381] wg1 speed is unknown, defaulting to 1000
[  438.775530][T17382] wg1 speed is unknown, defaulting to 1000
[  439.403617][T17387] openvswitch: netlink: Message has 572 unknown bytes.
[  439.405637][T17387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.439045][T17389] netlink: 'syz.2.3172': attribute type 15 has an invalid length.
[  439.915257][T17404] pimreg3: entered allmulticast mode
[  440.188026][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  440.190041][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  440.433637][T17438] __nla_validate_parse: 5 callbacks suppressed
[  440.433651][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'.
[  441.318355][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  441.706079][T17518] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3201'.
[  441.756424][T17515] wg1 speed is unknown, defaulting to 1000
[  442.121089][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3205'.
[  442.127030][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'.
[  442.981801][T17577] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3214'.
[  442.984505][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'.
[  442.987404][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3214'.
[  443.282345][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'.
[  443.381727][T17599] tls_set_device_offload_rx: netdev not found
[  443.385474][T17600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  443.388763][T17599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  443.927908][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'.
[  444.083175][T17628] netlink: 'syz.0.3227': attribute type 4 has an invalid length.
[  444.125763][T17636] 8021q: adding VLAN 0 to HW filter on device bond30
[  444.448567][T17663] syzkaller0: entered promiscuous mode
[  444.450635][T17663] syzkaller0: entered allmulticast mode
[  444.456627][T17661] openvswitch: netlink: Message has 1 unknown bytes.
[  444.466870][T17661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.573482][T17668] bond29: left promiscuous mode
[  444.911095][T17678] netlink: 'syz.1.3241': attribute type 2 has an invalid length.
[  445.454631][T17686] bond31: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  445.459626][T17686] bond31 (unregistering): Released all slaves
[  446.147277][T17704] __nla_validate_parse: 2 callbacks suppressed
[  446.147289][T17704] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3248'.
[  447.906356][T17748] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3261'.
[  447.910795][T17747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3261'.
[  447.954932][T17747] wg1 speed is unknown, defaulting to 1000
[  448.224375][T17755] netlink: 'syz.1.3263': attribute type 3 has an invalid length.
[  448.513899][T17770] netlink: 'syz.1.3266': attribute type 1 has an invalid length.
[  448.548257][T17770] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  448.552668][T17770] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  448.658656][T17777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'.
[  448.699237][T17777] wg1 speed is unknown, defaulting to 1000
[  449.815555][T17806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3275'.
[  449.819077][T17806] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3275'.
[  449.821915][T17806] netlink: 'syz.0.3275': attribute type 6 has an invalid length.
[  449.824670][T17806] netlink: 'syz.0.3275': attribute type 5 has an invalid length.
[  449.828905][T17806] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3275'.
[  449.835527][T17806] netlink: 'syz.0.3275': attribute type 4 has an invalid length.
[  449.839906][T17806] netlink: 'syz.0.3275': attribute type 4 has an invalid length.
[  450.252305][T17825] netlink: 'syz.0.3280': attribute type 11 has an invalid length.
[  450.255417][T17825] netlink: 132528 bytes leftover after parsing attributes in process `syz.0.3280'.
[  450.388411][T17828] netlink: 'syz.1.3281': attribute type 1 has an invalid length.
[  450.409385][T17828] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  450.413260][T17828] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  450.498705][T17828] vlan4: entered allmulticast mode
[  450.501038][T17828] bond28: (slave vlan4): Opening slave failed
[  451.002114][T17839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.004733][T17839] syzkaller0: entered promiscuous mode
[  451.006790][T17839] syzkaller0: entered allmulticast mode
[  451.013187][T17839] tipc: Resetting bearer <eth:syzkaller0>
[  451.020846][T17838] tipc: Resetting bearer <eth:syzkaller0>
[  451.034016][T17838] tipc: Disabling bearer <eth:syzkaller0>
[  451.116470][T17851] netlink: 'syz.2.3286': attribute type 1 has an invalid length.
[  451.119839][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3286'.
[  451.497528][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3290'.
[  451.499258][T17865] bridge0: port 1(erspan0) entered blocking state
[  451.502883][T17865] bridge0: port 1(erspan0) entered disabled state
[  451.505118][T17865] erspan0: entered allmulticast mode
[  451.508287][T17865] erspan0: entered promiscuous mode
[  451.513531][T17865] erspan0: left allmulticast mode
[  451.516187][T17865] erspan0: left promiscuous mode
[  451.518728][T17865] bridge0: port 1(erspan0) entered disabled state
[  451.596059][T17870] syzkaller0: entered promiscuous mode
[  451.597910][T17870] syzkaller0: entered allmulticast mode
[  451.603509][T17870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.612092][T17869] tipc: Resetting bearer <eth:syzkaller0>
[  451.632865][T17869] tipc: Disabling bearer <eth:syzkaller0>
[  452.065227][T17878] netlink: 'syz.0.3294': attribute type 1 has an invalid length.
[  452.593054][T17884] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  452.674579][T17889] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  452.923158][T17891] netlink: 'syz.0.3297': attribute type 10 has an invalid length.
[  453.028188][T17895] tc_dump_action: action bad kind
[  453.838575][T17927] wg1 speed is unknown, defaulting to 1000
[  453.898583][T17932] bond29: entered promiscuous mode
[  453.900337][T17932] bond29: entered allmulticast mode
[  453.902699][T17932] 8021q: adding VLAN 0 to HW filter on device bond29
[  454.046704][T17940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3311'.
[  454.285388][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'.
[  454.992523][T17960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3318'.
[  455.194204][T17984] bond29: left promiscuous mode
[  455.195937][T17984] bond29: left allmulticast mode
[  455.343034][T18004] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3329'.
[  455.369475][T18007] netlink: 'syz.2.3328': attribute type 1 has an invalid length.
[  455.395662][T18007] bond28: (slave bridge6): making interface the new active one
[  455.398396][T18007] bond28: (slave bridge6): Enslaving as an active interface with an up link
[  455.419730][T18012] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3331'.
[  455.465525][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'.
[  455.483540][T18019] 8021q: adding VLAN 0 to HW filter on device bond32
[  455.583486][T18029] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  455.589276][T18029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  455.657574][T18034] netlink: 'syz.2.3336': attribute type 10 has an invalid length.
[  455.658809][T18033] netlink: 'syz.0.3335': attribute type 83 has an invalid length.
[  455.662442][T18034] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  455.732933][T18036] xt_CT: No such helper "snmp"
[  455.818776][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3338'.
[  455.882217][T18045] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3340'.
[  456.203287][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'.
[  456.779388][T18099] __nla_validate_parse: 1 callbacks suppressed
[  456.779400][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'.
[  456.806281][T18099] wg1 speed is unknown, defaulting to 1000
[  456.845787][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'.
[  457.261684][T18121] netlink: 584 bytes leftover after parsing attributes in process `syz.2.3357'.
[  457.652130][T18143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3364'.
[  457.933683][T18154] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3368'.
[  457.938797][T18154] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3368'.
[  458.937404][T18186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.957826][T18186] wg1 speed is unknown, defaulting to 1000
[  459.133090][T18203] netlink: 'syz.2.3383': attribute type 3 has an invalid length.
[  459.181598][T18184] tipc: Resetting bearer <eth:syzkaller0>
[  459.925443][T18214] sctp: [Deprecated]: syz.1.3386 (pid 18214) Use of struct sctp_assoc_value in delayed_ack socket option.
[  459.925443][T18214] Use struct sctp_sack_info instead
[  460.026118][ T5860] tipc: Node number set to 1335684719
[  460.391144][T18184] tipc: Disabling bearer <eth:syzkaller0>
[  460.723699][T18238] wg1 speed is unknown, defaulting to 1000
[  461.844689][T18254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.847561][T18254] syzkaller0: entered promiscuous mode
[  461.849350][T18254] syzkaller0: entered allmulticast mode
[  461.854021][T18253] tipc: Resetting bearer <eth:syzkaller0>
[  461.874062][T18253] tipc: Disabling bearer <eth:syzkaller0>
[  462.024811][T18262] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  462.089619][T18262] netlink: 'syz.1.3400': attribute type 10 has an invalid length.
[  462.092703][T18262] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  462.095469][T18262] bond0: (slave wlan1): refused to change device type
[  462.102639][T18262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  462.107170][T18262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  462.356084][T18274] netlink: 'syz.0.3404': attribute type 1 has an invalid length.
[  462.922912][T18318] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  463.040912][T18319] wg1 speed is unknown, defaulting to 1000
[  463.954131][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'.
[  464.038079][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'.
[  464.118900][T18352] netlink: 'syz.1.3424': attribute type 1 has an invalid length.
[  464.979240][ T1092] wlan0: Trigger new scan to find an IBSS to join
[  465.850503][T18384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.897698][T18385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3432'.
[  465.901350][T18385] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3432'.
[  465.904953][T18385] netlink: 'syz.2.3432': attribute type 6 has an invalid length.
[  465.908896][T18385] netlink: 'syz.2.3432': attribute type 5 has an invalid length.
[  465.911435][T18385] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3432'.
[  465.916769][T18385] netlink: 'syz.2.3432': attribute type 4 has an invalid length.
[  465.920794][T18385] netlink: 'syz.2.3432': attribute type 4 has an invalid length.
[  465.928479][T18385] 8021q: VLANs not supported on sit0
[  465.964519][T18390] digital: digital_start_poll: Unknown protocol
[  466.063744][T18392] wg1 speed is unknown, defaulting to 1000
[  466.244491][T18397] netlink: 'syz.0.3436': attribute type 6 has an invalid length.
[  466.279725][T18397] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  466.713049][T18406] netlink: 'syz.1.3439': attribute type 6 has an invalid length.
[  466.747496][T18411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3440'.
[  466.750258][T18411] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3440'.
[  466.753039][T18411] netlink: 'syz.1.3440': attribute type 6 has an invalid length.
[  466.755268][T18411] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3440'.
[  467.129324][T18420] validate_nla: 3 callbacks suppressed
[  467.129336][T18420] netlink: 'syz.2.3444': attribute type 10 has an invalid length.
[  467.135652][T18420] netlink: 'syz.2.3444': attribute type 10 has an invalid length.
[  467.200898][T18425] netlink: 'syz.2.3445': attribute type 33 has an invalid length.
[  467.203588][T18425] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3445'.
[  467.295827][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'.
[  468.336224][ T5197] Bluetooth: hci0: command tx timeout
[  468.586116][T18477] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  468.589895][T18477] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  468.593795][T18478] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  468.740813][T18492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  469.325093][T18525] __nla_validate_parse: 1 callbacks suppressed
[  469.325110][T18525] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3473'.
[  469.331847][T18524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3473'.
[  469.364603][T18524] wg1 speed is unknown, defaulting to 1000
[  470.046689][T18548] ip6t_rpfilter: unknown options
[  470.049127][T18548] ip6t_rpfilter: unknown options
[  470.052992][T18548] ip6t_rpfilter: unknown options
[  470.054903][T18548] ip6t_rpfilter: unknown options
[  470.057278][T18548] ip6t_rpfilter: unknown options
[  470.059124][T18548] ip6t_rpfilter: unknown options
[  470.060906][T18548] ip6t_rpfilter: unknown options
[  470.062764][T18548] ip6t_rpfilter: unknown options
[  470.064546][T18548] ip6t_rpfilter: unknown options
[  470.067389][T18548] ip6t_rpfilter: unknown options
[  470.278341][T18563] wg1 speed is unknown, defaulting to 1000
[  470.614352][T18581] netlink: 4308 bytes leftover after parsing attributes in process `syz.0.3484'.
[  470.650223][T18587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3485'.
[  470.659721][T18588] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3485'.
[  470.720781][T18595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3488'.
[  470.770687][T18597] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.005592][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'.
[  471.661488][T18618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3495'.
[  471.665213][T18618] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3495'.
[  471.669092][T18618] netlink: 'syz.0.3495': attribute type 6 has an invalid length.
[  471.672244][T18618] netlink: 'syz.0.3495': attribute type 5 has an invalid length.
[  471.674653][T18618] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3495'.
[  471.683368][T18618] netlink: 'syz.0.3495': attribute type 4 has an invalid length.
[  471.689444][T18618] netlink: 'syz.0.3495': attribute type 4 has an invalid length.
[  471.952215][T18633] bond33: entered promiscuous mode
[  471.953970][T18633] 8021q: adding VLAN 0 to HW filter on device bond33
[  472.069473][T18646] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  472.072705][T18646] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  473.198601][T18701] xt_TCPMSS: Only works on TCP SYN packets
[  473.275326][T18709] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  473.285811][T18709] validate_nla: 1 callbacks suppressed
[  473.285822][T18709] netlink: 'syz.0.3514': attribute type 10 has an invalid length.
[  473.293741][T18709] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  473.391114][T18711] wg1 speed is unknown, defaulting to 1000
[  473.741666][T18727] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  473.838798][T18742] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  473.843010][T18742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  473.872784][T18742] netlink: 'syz.0.3523': attribute type 10 has an invalid length.
[  473.876076][T18742] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  473.890141][T18742] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  473.894024][T18742] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  474.258169][T18783] netlink: 'syz.2.3534': attribute type 6 has an invalid length.
[  474.349062][T18786] __nla_validate_parse: 7 callbacks suppressed
[  474.349075][T18786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3535'.
[  474.385074][T18786] wg1 speed is unknown, defaulting to 1000
[  474.401401][T18787] wg1 speed is unknown, defaulting to 1000
[  474.788844][T18795] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3537'.
[  474.806702][T18795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3537'.
[  474.953693][T18802] bond33: left promiscuous mode
[  475.102904][T18811] netlink: 'syz.1.3541': attribute type 1 has an invalid length.
[  475.338707][T18843] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3551'.
[  475.343635][T18839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3551'.
[  475.388602][T18839] wg1 speed is unknown, defaulting to 1000
[  475.499806][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'.
[  476.003778][T18875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3560'.
[  476.507123][T18895] wg1 speed is unknown, defaulting to 1000
[  477.051405][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  477.052658][T18926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3569'.
[  477.057176][T18926] tc_dump_action: action bad kind
[  477.059181][T18925] : left promiscuous mode
[  477.311735][T18898] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  477.316616][T18898] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  477.330259][T18898] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  477.332605][T18898] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  477.372479][T18938] netlink: 'syz.0.3573': attribute type 32 has an invalid length.
[  477.379284][T18939] netlink: 'syz.0.3573': attribute type 32 has an invalid length.
[  477.382288][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  477.414988][T18939] bond34: option coupled_control: invalid value (115)
[  477.434381][T18939] bond34 (unregistering): Released all slaves
[  477.454352][T18938] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  478.515006][T18996] sctp: [Deprecated]: syz.0.3586 (pid 18996) Use of int in maxseg socket option.
[  478.515006][T18996] Use struct sctp_assoc_value instead
[  479.674314][T19044] __nla_validate_parse: 5 callbacks suppressed
[  479.674326][T19044] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3603'.
[  479.678866][T19044] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3603'.
[  479.915187][T19060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3607'.
[  479.921658][T19060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  479.931672][T19061] netlink: 'syz.2.3608': attribute type 10 has an invalid length.
[  479.934216][T19061] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  480.032318][T19064] bond29: invalid ARP target 0.0.0.0 specified for addition
[  480.034766][T19064] bond29: option arp_ip_target: invalid value (0)
[  480.038233][T19064] bond29 (unregistering): Released all slaves
[  480.621599][T19074] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3611'.
[  480.625072][T19075] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3611'.
[  480.776178][T19088] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  480.806575][T19093] netlink: 'syz.0.3617': attribute type 3 has an invalid length.
[  480.842482][T19098] netlink: 'syz.2.3619': attribute type 1 has an invalid length.
[  480.847955][T19098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3619'.
[  480.908058][T19102] syzkaller0: entered promiscuous mode
[  480.910152][T19102] syzkaller0: entered allmulticast mode
[  482.382139][T19129] xt_l2tp: missing protocol rule (udp|l2tpip)
[  482.533476][T19136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3630'.
[  482.585493][T19138] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3631'.
[  482.765752][T19143] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  482.769602][T19143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  482.804599][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'.
[  482.811478][T19147] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  482.829902][T19147] bond29: entered promiscuous mode
[  482.831734][T19147] 8021q: adding VLAN 0 to HW filter on device bond29
[  482.834128][T19145] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3634'.
[  483.827092][T19174] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  483.938996][T19176] wg1 speed is unknown, defaulting to 1000
[  484.382570][T19200] netlink: 'syz.0.3648': attribute type 6 has an invalid length.
[  484.412445][T19204] bond_slave_1: entered allmulticast mode
[  484.440436][T19208] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  484.473527][T19212] netlink: 'syz.1.3650': attribute type 10 has an invalid length.
[  484.479624][T19212] bond0: (slave wlan1): refused to change device type
[  484.483588][T19204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  484.487696][T19204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  484.633880][T19219] nbd: must specify an index to disconnect
[  484.672147][T19225] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  484.763997][T19235] __nla_validate_parse: 4 callbacks suppressed
[  484.764007][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3658'.
[  484.769936][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3658'.
[  484.842015][T19239] netlink: 'syz.0.3659': attribute type 4 has an invalid length.
[  484.848845][T19239] netlink: 'syz.0.3659': attribute type 4 has an invalid length.
[  484.855209][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3659'.
[  484.895538][T19243] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  484.958677][T19252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3662'.
[  485.339634][T19274] netlink: 'syz.0.3668': attribute type 18 has an invalid length.
[  485.342115][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'.
[  485.345423][T19274] netlink: 'syz.0.3668': attribute type 18 has an invalid length.
[  485.347977][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'.
[  485.493582][T19276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.497419][T19276] syzkaller0: entered promiscuous mode
[  485.499165][T19276] syzkaller0: entered allmulticast mode
[  485.511811][T19276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3669'.
[  485.522168][T19276] tipc: Resetting bearer <eth:syzkaller0>
[  485.532185][T19275] tipc: Resetting bearer <eth:syzkaller0>
[  485.547838][T19275] tipc: Disabling bearer <eth:syzkaller0>
[  485.804957][T19278] syzkaller0: entered promiscuous mode
[  485.806882][T19278] syzkaller0: entered allmulticast mode
[  485.987099][T19289] netlink: 'syz.1.3673': attribute type 3 has an invalid length.
[  485.993261][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'.
[  486.111969][T19298] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  486.114806][T19298] bond29: left promiscuous mode
[  486.155186][T19293] vlan4: entered promiscuous mode
[  486.156925][T19293] vlan4: entered allmulticast mode
[  486.159203][T19293] bond0: entered allmulticast mode
[  486.906582][T19336] netlink: 'syz.1.3685': attribute type 1 has an invalid length.
[  486.909708][T19337] netlink: 'syz.1.3685': attribute type 1 has an invalid length.
[  487.073489][T19337] bond_slave_1: left allmulticast mode
[  487.090498][T19337] vlan4: left promiscuous mode
[  487.096139][T19337] vlan4: left allmulticast mode
[  487.099573][T19337] bond0: left allmulticast mode
[  487.413103][T19355] netlink: 'syz.0.3691': attribute type 12 has an invalid length.
[  487.957026][T19388] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3699'.
[  488.141635][T19401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3702'.
[  488.144694][T19401] netlink: 'syz.1.3702': attribute type 6 has an invalid length.
[  488.147473][T19401] netlink: 'syz.1.3702': attribute type 5 has an invalid length.
[  488.151994][T19401] netlink: 'syz.1.3702': attribute type 4 has an invalid length.
[  488.158384][T19401] netlink: 'syz.1.3702': attribute type 4 has an invalid length.
[  488.395813][T19419] wg1 speed is unknown, defaulting to 1000
[  488.401509][T19417] wg1 speed is unknown, defaulting to 1000
[  488.557006][T19427] x_tables: ip_tables: osf match: only valid for protocol 6
[  489.723077][T19483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.725711][T19483] syzkaller0: entered promiscuous mode
[  489.728081][T19483] syzkaller0: entered allmulticast mode
[  489.747925][T19483] tipc: Resetting bearer <eth:syzkaller0>
[  489.757385][T19482] tipc: Resetting bearer <eth:syzkaller0>
[  489.768824][T19482] tipc: Disabling bearer <eth:syzkaller0>
[  489.947189][T19490] batadv_slave_0: entered promiscuous mode
[  490.561098][T19499] __nla_validate_parse: 13 callbacks suppressed
[  490.561117][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'.
[  490.678315][T19502] ip6gre2: entered promiscuous mode
[  490.896239][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'.
[  492.101831][T19547] validate_nla: 1 callbacks suppressed
[  492.101849][T19547] netlink: 'syz.2.3745': attribute type 1 has an invalid length.
[  492.121788][T19547] 8021q: adding VLAN 0 to HW filter on device bond30
[  492.131569][T19547] bond30: (slave gretap3): making interface the new active one
[  492.135371][T19547] bond30: (slave gretap3): Enslaving as an active interface with an up link
[  492.139888][T19549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3746'.
[  492.161160][T19547] syz.2.3745 (19547) used greatest stack depth: 18552 bytes left
[  492.190423][T19549] wg1 speed is unknown, defaulting to 1000
[  492.193339][T19550] wg1 speed is unknown, defaulting to 1000
[  492.775446][T19567] netlink: 'syz.0.3750': attribute type 1 has an invalid length.
[  492.792800][T19567] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  492.972094][T19590] netlink: 'syz.1.3754': attribute type 7 has an invalid length.
[  493.052558][T19597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3756'.
[  493.137823][T19608] netlink: 'syz.0.3760': attribute type 10 has an invalid length.
[  493.204076][T19614] wg1 speed is unknown, defaulting to 1000
[  493.276642][T19621] syz_tun: left allmulticast mode
[  493.293951][T19622] ip6gre2: left promiscuous mode
[  493.960652][T19625] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  494.249296][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3768'.
[  494.271942][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3769'.
[  494.295718][T19641] sctp: [Deprecated]: syz.1.3769 (pid 19641) Use of int in maxseg socket option.
[  494.295718][T19641] Use struct sctp_assoc_value instead
[  494.340890][T19646] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3770'.
[  494.610009][T19669] netlink: 'syz.2.3774': attribute type 1 has an invalid length.
[  495.584988][T19740] netlink: 'syz.0.3795': attribute type 13 has an invalid length.
[  495.587920][T19740] netlink: 'syz.0.3795': attribute type 13 has an invalid length.
[  495.709839][T19742] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  496.375592][T19757] xt_hashlimit: max too large, truncated to 1048576
[  496.440431][T19765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3799'.
[  496.659040][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'.
[  497.068963][T19819] netlink: 'syz.1.3810': attribute type 1 has an invalid length.
[  497.101063][T19819] bond33: (slave vxcan9): The slave device specified does not support setting the MAC address
[  497.105759][T19819] bond33: (slave vxcan9): Error -95 calling set_mac_address
[  497.759339][T19829] netlink: 'syz.2.3813': attribute type 1 has an invalid length.
[  497.781885][T19829] bond32: (slave vxcan7): The slave device specified does not support setting the MAC address
[  497.785653][T19829] bond32: (slave vxcan7): Error -95 calling set_mac_address
[  497.828015][T19831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3813'.
[  497.830914][T19831] nbd: illegal input index 65508
[  498.270750][T19853] netlink: 'syz.1.3821': attribute type 10 has an invalid length.
[  498.273184][T19853] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  498.275376][T19853] bond0: (slave wlan1): refused to change device type
[  498.281312][T19853] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  498.284134][T19853] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  499.052318][T19879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.092445][T19881] 8021q: VLANs not supported on ip6_vti0
[  499.350780][T19899] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  499.354438][T19899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  499.362073][T19899] netlink: 'syz.0.3837': attribute type 10 has an invalid length.
[  499.364468][T19899] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  499.367868][T19899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  499.370881][T19899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  499.423557][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'.
[  500.222471][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3845'.
[  500.627784][T19950] block nbd3: shutting down sockets
[  500.697253][T19957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3855'.
[  500.700407][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3855'.
[  500.787337][T19964] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3858'.
[  500.791588][T19963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3858'.
[  500.927625][T19965] wg1 speed is unknown, defaulting to 1000
[  501.619013][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  502.358270][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3870'.
[  502.441526][T20021] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3872'.
[  502.446005][T20021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3872'.
[  502.685516][T20043] syzkaller0: entered promiscuous mode
[  502.688202][T20043] syzkaller0: entered allmulticast mode
[  502.981066][T20052] netlink: 'syz.0.3882': attribute type 1 has an invalid length.
[  503.357614][T20059] xt_addrtype: ipv6 does not support BROADCAST matching
[  503.363018][T20059] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3885'.
[  503.464157][T20063] siw: device registration error -23
[  503.479149][T20063] wg1 speed is unknown, defaulting to 1000
[  503.514279][T20065] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  503.662786][T20086] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  503.675722][T20089] netlink: 'syz.2.3890': attribute type 1 has an invalid length.
[  503.702382][T20089] bond33: (slave vxcan7): The slave device specified does not support setting the MAC address
[  503.707473][T20089] bond33: (slave vxcan7): Error -95 calling set_mac_address
[  503.912503][T20104] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  504.500516][T20108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3898'.
[  504.549290][T20112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3899'.
[  504.552735][T20112] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3899'.
[  504.556578][T20112] netlink: 'syz.2.3899': attribute type 6 has an invalid length.
[  504.559479][T20112] netlink: 'syz.2.3899': attribute type 5 has an invalid length.
[  504.562214][T20112] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3899'.
[  504.570555][T20112] netlink: 'syz.2.3899': attribute type 4 has an invalid length.
[  504.665716][T20116] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3900'.
[  504.767202][T20127] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  504.783743][T20125] batadv_slave_0: left promiscuous mode
[  504.810805][T20132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3904'.
[  505.846076][T20162] netlink: 'syz.0.3914': attribute type 6 has an invalid length.
[  505.848556][T20162] netlink: 'syz.0.3914': attribute type 5 has an invalid length.
[  505.859986][T20162] netlink: 'syz.0.3914': attribute type 4 has an invalid length.
[  505.864497][T20162] netlink: 'syz.0.3914': attribute type 4 has an invalid length.
[  506.870968][T20207] wg1 speed is unknown, defaulting to 1000
[  507.188345][T20215] @: renamed from veth0_vlan
[  507.474729][T20239] __nla_validate_parse: 11 callbacks suppressed
[  507.474740][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3937'.
[  507.491173][T20240] xt_hashlimit: invalid interval
[  507.682140][T20256] netlink: 'syz.1.3940': attribute type 6 has an invalid length.
[  507.693580][T20252] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  507.854755][T20270] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3944'.
[  507.859276][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3944'.
[  507.999005][T20271] wg1 speed is unknown, defaulting to 1000
[  508.527022][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'.
[  508.726079][T20291] veth0_to_bond: entered allmulticast mode
[  508.729102][T20291] syzkaller1: entered promiscuous mode
[  508.730816][T20291] syzkaller1: entered allmulticast mode
[  508.750057][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'.
[  508.943147][T20304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.945670][T20304] syzkaller0: entered promiscuous mode
[  508.947867][T20304] syzkaller0: entered allmulticast mode
[  508.990997][T20309] veth0_to_bond: left allmulticast mode
[  508.992811][T20309] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  509.019520][T20311] tipc: Resetting bearer <eth:syzkaller0>
[  509.037643][T20302] tipc: Resetting bearer <eth:syzkaller0>
[  509.048372][T20302] tipc: Disabling bearer <eth:syzkaller0>
[  511.570707][T20354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3967'.
[  511.859473][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'.
[  512.197271][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'.
[  513.194422][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3992'.
[  514.241462][T20479] sctp: [Deprecated]: syz.0.3998 (pid 20479) Use of int in maxseg socket option.
[  514.241462][T20479] Use struct sctp_assoc_value instead
[  514.299543][T20481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.308958][T20481] syzkaller1: tun_chr_ioctl cmd 1074025677
[  514.310677][T20481] syzkaller1: Refused to change device type
[  514.396149][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'.
[  514.478135][T20495] netlink: 'syz.1.4002': attribute type 6 has an invalid length.
[  516.671716][T20542] netlink: 'syz.0.4014': attribute type 12 has an invalid length.
[  516.679459][T20543] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4014'.
[  516.685081][T20547] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4014'.
[  516.809254][T20555] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  516.904241][T20569] netlink: 'syz.0.4022': attribute type 5 has an invalid length.
[  516.907822][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4022'.
[  516.935298][T20571] sctp: [Deprecated]: syz.2.4023 (pid 20571) Use of int in maxseg socket option.
[  516.935298][T20571] Use struct sctp_assoc_value instead
[  516.945819][T20571] sctp: [Deprecated]: syz.2.4023 (pid 20571) Use of int in maxseg socket option.
[  516.945819][T20571] Use struct sctp_assoc_value instead
[  518.826004][ T5197] Bluetooth: hci0: command tx timeout
[  519.116553][T20631] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  519.230312][T20642] sctp: [Deprecated]: syz.2.4045 (pid 20642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.230312][T20642] Use struct sctp_sack_info instead
[  519.342810][T20650] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4047'.
[  519.714410][T20660] dvmrp0: entered allmulticast mode
[  520.202288][T20685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4054'.
[  520.206450][T20685] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4054'.
[  520.210148][T20685] netlink: 'syz.0.4054': attribute type 6 has an invalid length.
[  520.213257][T20685] netlink: 'syz.0.4054': attribute type 4 has an invalid length.
[  520.741388][T20687] netlink: 'syz.1.4055': attribute type 6 has an invalid length.
[  520.744790][T20687] netlink: 'syz.1.4055': attribute type 6 has an invalid length.
[  520.858474][T20694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4058'.
[  520.894334][T20696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4059'.
[  520.900415][T20696] nft_compat: unsupported protocol 0
[  520.961471][T20699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4059'.
[  520.964044][T20699] netlink: 'syz.1.4059': attribute type 7 has an invalid length.
[  520.966747][T20699] netlink: 'syz.1.4059': attribute type 8 has an invalid length.
[  520.969260][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'.
[  520.969326][T20698] netlink: 'syz.0.4060': attribute type 6 has an invalid length.
[  521.719495][T20717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4064'.
[  521.922931][T20720] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4065'.
[  521.928992][T20719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4065'.
[  521.967195][T20719] wg1 speed is unknown, defaulting to 1000
[  522.096496][    C0] ------------[ cut here ]------------
[  522.098742][    C0] ODEBUG: free active (active state 0) object: ffff8881a2c00890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  522.103683][    C0] WARNING: CPU: 0 PID: 20719 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  522.107279][    C0] Modules linked in:
[  522.109167][    C0] CPU: 0 UID: 0 PID: 20719 Comm: syz.0.4065 Not tainted syzkaller #0 PREEMPT(full) 
[  522.113461][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.117181][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  522.119277][    C0] Code: 4c 89 ff e8 77 f5 92 fd 4d 8b 0f 48 c7 c7 00 0e bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca 5c f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 37 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  522.126204][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  522.128355][    C0] RAX: 480ab85f5cf18c00 RBX: dffffc0000000000 RCX: ffff88810b641d00
[  522.131159][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  522.133921][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  522.136925][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a38fa80
[  522.139727][    C0] R13: ffffffff8bbf0f80 R14: ffff8881a2c00890 R15: ffffffff8b6cf600
[  522.142507][    C0] FS:  00007fbe976dd6c0(0000) GS:ffff88818eb40000(0000) knlGS:0000000000000000
[  522.145697][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.148233][    C0] CR2: 0000200000011000 CR3: 00000001b9a74000 CR4: 00000000000006f0
[  522.151162][    C0] Call Trace:
[  522.152412][    C0]  <IRQ>
[  522.153482][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  522.155520][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  522.157567][    C0]  kfree+0x115/0x6d0
[  522.159075][    C0]  rose_timer_expiry+0x4cb/0x600
[  522.160923][    C0]  call_timer_fn+0x17e/0x5f0
[  522.162640][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  522.164676][    C0]  ? call_timer_fn+0xbe/0x5f0
[  522.166554][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  522.168446][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  522.170276][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.171972][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  522.173956][    C0]  __run_timer_base+0x61a/0x860
[  522.175766][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  522.177765][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  522.179981][    C0]  run_timer_softirq+0xb7/0x180
[  522.181744][    C0]  handle_softirqs+0x286/0x870
[  522.183528][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  522.185317][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  522.187370][    C0]  __irq_exit_rcu+0xca/0x1f0
[  522.189032][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  522.190919][    C0]  irq_exit_rcu+0x9/0x30
[  522.192411][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  522.194407][    C0]  </IRQ>
[  522.195532][    C0]  <TASK>
[  522.196746][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.198938][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  522.200782][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b ad d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  522.207790][    C0] RSP: 0018:ffffc90005576cd8 EFLAGS: 00000206
[  522.210046][    C0] RAX: 480ab85f5cf18c00 RBX: 0000000000000000 RCX: 480ab85f5cf18c00
[  522.212864][    C0] RDX: 0000000000000000 RSI: ffffffff8d8f2bf3 RDI: ffffffff8bbf0460
[  522.215784][    C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25
[  522.218736][    C0] R10: ffffc90005576e98 R11: ffffffff81ac2cb0 R12: 0000000000000002
[  522.221613][    C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246
[  522.224464][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.226516][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  522.228791][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.230743][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.232638][    C0]  ? internal_create_group+0x66d/0x1110
[  522.234561][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.236592][    C0]  unwind_next_frame+0xc2/0x2390
[  522.238438][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.240365][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.242268][    C0]  ? sysfs_add_file_mode_ns+0x238/0x300
[  522.244319][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  522.246719][    C0]  arch_stack_walk+0x11c/0x150
[  522.248507][    C0]  ? internal_create_group+0x66d/0x1110
[  522.250484][    C0]  stack_trace_save+0x9c/0xe0
[  522.251873][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  522.253468][    C0]  ? stack_depot_save_flags+0x40/0x860
[  522.255174][    C0]  kasan_save_track+0x3e/0x80
[  522.256690][    C0]  ? kasan_save_track+0x3e/0x80
[  522.258139][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  522.259590][    C0]  ? kmem_cache_alloc_noprof+0x367/0x6e0
[  522.261285][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  522.262982][    C0]  ? kernfs_new_node+0x102/0x210
[  522.264426][    C0]  ? __kernfs_create_file+0x4b/0x2e0
[  522.266150][    C0]  ? sysfs_add_file_mode_ns+0x238/0x300
[  522.268172][    C0]  ? internal_create_group+0x66d/0x1110
[  522.270250][    C0]  __kasan_slab_alloc+0x6c/0x80
[  522.272070][    C0]  kmem_cache_alloc_noprof+0x367/0x6e0
[  522.274132][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  522.276241][    C0]  __kernfs_new_node+0xd7/0x7e0
[  522.278001][    C0]  ? __lock_acquire+0xab9/0xd20
[  522.279803][    C0]  ? __pfx___kernfs_new_node+0x10/0x10
[  522.281826][    C0]  ? kernfs_root+0x1c/0x230
[  522.283517][    C0]  ? kernfs_root+0x1c/0x230
[  522.285267][    C0]  ? kernfs_root+0x1c/0x230
[  522.287164][    C0]  ? kernfs_root+0x1c/0x230
[  522.288890][    C0]  kernfs_new_node+0x102/0x210
[  522.290724][    C0]  __kernfs_create_file+0x4b/0x2e0
[  522.292666][    C0]  sysfs_add_file_mode_ns+0x238/0x300
[  522.294751][    C0]  internal_create_group+0x66d/0x1110
[  522.296954][    C0]  ? __pfx_internal_create_group+0x10/0x10
[  522.299189][    C0]  ? kernfs_add_one+0xf0/0x520
[  522.301001][    C0]  sysfs_create_groups+0x59/0x120
[  522.302961][    C0]  device_add_attrs+0xe0/0x5a0
[  522.304788][    C0]  ? __pfx_device_add_attrs+0x10/0x10
[  522.306990][    C0]  ? device_add_class_symlinks+0x21f/0x240
[  522.309220][    C0]  device_add+0x496/0xb50
[  522.310886][    C0]  ? device_initialize+0x24b/0x440
[  522.312855][    C0]  netdev_register_kobject+0x178/0x310
[  522.314981][    C0]  register_netdevice+0x126c/0x1ae0
[  522.317076][    C0]  ? __pfx_register_netdevice+0x10/0x10
[  522.319340][    C0]  ? alloc_netdev_mqs+0xc89/0x11b0
[  522.321285][    C0]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  522.323212][    C0]  ? alloc_netdev_mqs+0xe2a/0x11b0
[  522.325207][    C0]  ? __ip_tunnel_create+0x3ba/0x560
[  522.327313][    C0]  __ip_tunnel_create+0x3e7/0x560
[  522.329303][    C0]  ? __pfx___ip_tunnel_create+0x10/0x10
[  522.331431][    C0]  ? net_generic+0x1e/0x240
[  522.333173][    C0]  ip_tunnel_init_net+0x2ba/0x800
[  522.335185][    C0]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  522.337419][    C0]  ? rcu_is_watching+0x15/0xb0
[  522.339264][    C0]  vti_init_net+0x2f/0x100
[  522.341013][    C0]  ops_init+0x35c/0x5c0
[  522.342597][    C0]  setup_net+0xfe/0x320
[  522.344327][    C0]  ? __pfx_setup_net+0x10/0x10
[  522.346480][    C0]  ? copy_net_ns+0x337/0x4e0
[  522.348439][    C0]  ? down_read_killable+0x1d1/0x350
[  522.350631][    C0]  ? preinit_net+0x47d/0x780
[  522.352446][    C0]  copy_net_ns+0x34e/0x4e0
[  522.354229][    C0]  create_new_namespaces+0x3f3/0x720
[  522.356506][    C0]  ? security_capable+0x7e/0x2e0
[  522.358338][    C0]  unshare_nsproxy_namespaces+0x11c/0x170
[  522.359988][    C0]  ksys_unshare+0x4c8/0x8c0
[  522.361336][    C0]  ? __pfx_ksys_unshare+0x10/0x10
[  522.362850][    C0]  __x64_sys_unshare+0x38/0x50
[  522.364290][    C0]  do_syscall_64+0xfa/0xfa0
[  522.365694][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.367327][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.369150][    C0]  ? exc_page_fault+0xab/0x100
[  522.370603][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.372606][    C0] RIP: 0033:0x7fbe9678efc9
[  522.374315][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.380547][    C0] RSP: 002b:00007fbe976dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  522.383082][    C0] RAX: ffffffffffffffda RBX: 00007fbe969e5fa0 RCX: 00007fbe9678efc9
[  522.385565][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  522.388307][    C0] RBP: 00007fbe96811f91 R08: 0000000000000000 R09: 0000000000000000
[  522.390787][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.393155][    C0] R13: 00007fbe969e6038 R14: 00007fbe969e5fa0 R15: 00007ffd79eb3c98
[  522.395503][    C0]  </TASK>
[  522.396714][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  522.398865][    C0] CPU: 0 UID: 0 PID: 20719 Comm: syz.0.4065 Not tainted syzkaller #0 PREEMPT(full) 
[  522.401646][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.404730][    C0] Call Trace:
[  522.405875][    C0]  <IRQ>
[  522.407006][    C0]  dump_stack_lvl+0x99/0x250
[  522.408375][    C0]  ? __asan_memcpy+0x40/0x70
[  522.409732][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  522.411270][    C0]  ? __pfx__printk+0x10/0x10
[  522.412619][    C0]  vpanic+0x237/0x6d0
[  522.413802][    C0]  ? __pfx_vpanic+0x10/0x10
[  522.415321][    C0]  panic+0xb9/0xc0
[  522.416477][    C0]  ? __pfx_panic+0x10/0x10
[  522.417784][    C0]  __warn+0x31b/0x4b0
[  522.418963][    C0]  ? debug_print_object+0x16b/0x1e0
[  522.420486][    C0]  ? debug_print_object+0x16b/0x1e0
[  522.421985][    C0]  report_bug+0x2be/0x4f0
[  522.423235][    C0]  ? debug_print_object+0x16b/0x1e0
[  522.424770][    C0]  ? debug_print_object+0x16b/0x1e0
[  522.426357][    C0]  ? debug_print_object+0x16d/0x1e0
[  522.427914][    C0]  handle_bug+0x84/0x160
[  522.429316][    C0]  exc_invalid_op+0x1a/0x50
[  522.430928][    C0]  asm_exc_invalid_op+0x1a/0x20
[  522.432480][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  522.434230][    C0] Code: 4c 89 ff e8 77 f5 92 fd 4d 8b 0f 48 c7 c7 00 0e bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca 5c f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 d7 37 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  522.440062][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  522.441978][    C0] RAX: 480ab85f5cf18c00 RBX: dffffc0000000000 RCX: ffff88810b641d00
[  522.444475][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  522.447592][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  522.449788][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a38fa80
[  522.452128][    C0] R13: ffffffff8bbf0f80 R14: ffff8881a2c00890 R15: ffffffff8b6cf600
[  522.454459][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  522.456081][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  522.457635][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  522.459057][    C0]  kfree+0x115/0x6d0
[  522.460284][    C0]  rose_timer_expiry+0x4cb/0x600
[  522.461853][    C0]  call_timer_fn+0x17e/0x5f0
[  522.463296][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  522.465148][    C0]  ? call_timer_fn+0xbe/0x5f0
[  522.466674][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  522.468518][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  522.470188][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.471836][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  522.473580][    C0]  __run_timer_base+0x61a/0x860
[  522.475209][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  522.476841][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  522.478973][    C0]  run_timer_softirq+0xb7/0x180
[  522.480658][    C0]  handle_softirqs+0x286/0x870
[  522.482448][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  522.483960][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  522.485701][    C0]  __irq_exit_rcu+0xca/0x1f0
[  522.487175][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  522.488729][    C0]  irq_exit_rcu+0x9/0x30
[  522.490016][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  522.491585][    C0]  </IRQ>
[  522.492413][    C0]  <TASK>
[  522.493242][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.494979][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  522.496475][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b ad d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  522.502378][    C0] RSP: 0018:ffffc90005576cd8 EFLAGS: 00000206
[  522.504350][    C0] RAX: 480ab85f5cf18c00 RBX: 0000000000000000 RCX: 480ab85f5cf18c00
[  522.507102][    C0] RDX: 0000000000000000 RSI: ffffffff8d8f2bf3 RDI: ffffffff8bbf0460
[  522.509396][    C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25
[  522.511692][    C0] R10: ffffc90005576e98 R11: ffffffff81ac2cb0 R12: 0000000000000002
[  522.513947][    C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246
[  522.516364][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.517917][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  522.519779][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.521333][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.522732][    C0]  ? internal_create_group+0x66d/0x1110
[  522.524460][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.526052][    C0]  unwind_next_frame+0xc2/0x2390
[  522.527981][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.529858][    C0]  ? unwind_next_frame+0xa5/0x2390
[  522.531719][    C0]  ? sysfs_add_file_mode_ns+0x238/0x300
[  522.533708][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  522.535940][    C0]  arch_stack_walk+0x11c/0x150
[  522.537299][    C0]  ? internal_create_group+0x66d/0x1110
[  522.539031][    C0]  stack_trace_save+0x9c/0xe0
[  522.540447][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  522.542155][    C0]  ? stack_depot_save_flags+0x40/0x860
[  522.543692][    C0]  kasan_save_track+0x3e/0x80
[  522.545163][    C0]  ? kasan_save_track+0x3e/0x80
[  522.546867][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  522.548662][    C0]  ? kmem_cache_alloc_noprof+0x367/0x6e0
[  522.550659][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  522.552474][    C0]  ? kernfs_new_node+0x102/0x210
[  522.553983][    C0]  ? __kernfs_create_file+0x4b/0x2e0
[  522.555633][    C0]  ? sysfs_add_file_mode_ns+0x238/0x300
[  522.557509][    C0]  ? internal_create_group+0x66d/0x1110
[  522.559139][    C0]  __kasan_slab_alloc+0x6c/0x80
[  522.560548][    C0]  kmem_cache_alloc_noprof+0x367/0x6e0
[  522.562222][    C0]  ? __kernfs_new_node+0xd7/0x7e0
[  522.563625][    C0]  __kernfs_new_node+0xd7/0x7e0
[  522.565137][    C0]  ? __lock_acquire+0xab9/0xd20
[  522.566853][    C0]  ? __pfx___kernfs_new_node+0x10/0x10
[  522.568735][    C0]  ? kernfs_root+0x1c/0x230
[  522.570323][    C0]  ? kernfs_root+0x1c/0x230
[  522.571936][    C0]  ? kernfs_root+0x1c/0x230
[  522.573503][    C0]  ? kernfs_root+0x1c/0x230
[  522.575098][    C0]  kernfs_new_node+0x102/0x210
[  522.576630][    C0]  __kernfs_create_file+0x4b/0x2e0
[  522.578188][    C0]  sysfs_add_file_mode_ns+0x238/0x300
[  522.579763][    C0]  internal_create_group+0x66d/0x1110
[  522.581318][    C0]  ? __pfx_internal_create_group+0x10/0x10
[  522.583076][    C0]  ? kernfs_add_one+0xf0/0x520
[  522.584387][    C0]  sysfs_create_groups+0x59/0x120
[  522.586097][    C0]  device_add_attrs+0xe0/0x5a0
[  522.587835][    C0]  ? __pfx_device_add_attrs+0x10/0x10
[  522.589736][    C0]  ? device_add_class_symlinks+0x21f/0x240
[  522.591700][    C0]  device_add+0x496/0xb50
[  522.593081][    C0]  ? device_initialize+0x24b/0x440
[  522.594470][    C0]  netdev_register_kobject+0x178/0x310
[  522.596241][    C0]  register_netdevice+0x126c/0x1ae0
[  522.597787][    C0]  ? __pfx_register_netdevice+0x10/0x10
[  522.599518][    C0]  ? alloc_netdev_mqs+0xc89/0x11b0
[  522.601028][    C0]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  522.602490][    C0]  ? alloc_netdev_mqs+0xe2a/0x11b0
[  522.604200][    C0]  ? __ip_tunnel_create+0x3ba/0x560
[  522.605866][    C0]  __ip_tunnel_create+0x3e7/0x560
[  522.607722][    C0]  ? __pfx___ip_tunnel_create+0x10/0x10
[  522.609799][    C0]  ? net_generic+0x1e/0x240
[  522.611498][    C0]  ip_tunnel_init_net+0x2ba/0x800
[  522.613404][    C0]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  522.615147][    C0]  ? rcu_is_watching+0x15/0xb0
[  522.616640][    C0]  vti_init_net+0x2f/0x100
[  522.617916][    C0]  ops_init+0x35c/0x5c0
[  522.619107][    C0]  setup_net+0xfe/0x320
[  522.620255][    C0]  ? __pfx_setup_net+0x10/0x10
[  522.621581][    C0]  ? copy_net_ns+0x337/0x4e0
[  522.622893][    C0]  ? down_read_killable+0x1d1/0x350
[  522.624321][    C0]  ? preinit_net+0x47d/0x780
[  522.625650][    C0]  copy_net_ns+0x34e/0x4e0
[  522.627335][    C0]  create_new_namespaces+0x3f3/0x720
[  522.629286][    C0]  ? security_capable+0x7e/0x2e0
[  522.630951][    C0]  unshare_nsproxy_namespaces+0x11c/0x170
[  522.632550][    C0]  ksys_unshare+0x4c8/0x8c0
[  522.633860][    C0]  ? __pfx_ksys_unshare+0x10/0x10
[  522.635300][    C0]  __x64_sys_unshare+0x38/0x50
[  522.637027][    C0]  do_syscall_64+0xfa/0xfa0
[  522.638725][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.640640][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.642878][    C0]  ? exc_page_fault+0xab/0x100
[  522.644391][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.646300][    C0] RIP: 0033:0x7fbe9678efc9
[  522.647584][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.653048][    C0] RSP: 002b:00007fbe976dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  522.655408][    C0] RAX: ffffffffffffffda RBX: 00007fbe969e5fa0 RCX: 00007fbe9678efc9
[  522.658266][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  522.661193][    C0] RBP: 00007fbe96811f91 R08: 0000000000000000 R09: 0000000000000000
[  522.664091][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.666535][    C0] R13: 00007fbe969e6038 R14: 00007fbe969e5fa0 R15: 00007ffd79eb3c98
[  522.668950][    C0]  </TASK>
[  522.670353][    C0] Kernel Offset: disabled
[  522.671541][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:59:33  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff335cf60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99ae8190 RSP=ffffc90000007150
R8 =ffff888109868237 R9 =1ffff1102130d046 R10=dffffc0000000000 R11=ffffffff8514b9d0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99ae7f00 R15=0000000000000000
RIP=ffffffff8514ba47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbe976dd6c0 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000011000 CR3=00000001b9a74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000000fff81a7b 2020200000000000 XMM03=fffffff800000107 000000000000a1bf
XMM04=0002b7fffffff800 0001070000000000 XMM05=00a1bf00000000ff f81a7b2020200000
XMM06=0000002564202000 0001180000006d00 XMM07=0000850000000000 0000000000001200
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbe9681315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3213054239c58c00 RBX=ffffffff81967b87 RCX=3213054239c58c00 RDX=0000000000000001
RSI=ffffffff8d70bfda RDI=ffffffff8bbf0460 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c632fdb R9 =1ffff110478c65fb R10=dffffc0000000000 R11=ffffed10478c65fc
R12=ffffffff8f7ccb70 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c153000
RIP=ffffffff8b45fdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3292e10440 CR3=000000010fa94000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
