last executing test programs:

1.677628036s ago: executing program 2 (id=12008):
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
accept(r1, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080004000000000004001200080005"], 0x48}}, 0x0)

1.207546669s ago: executing program 1 (id=12013):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x300, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

1.206713936s ago: executing program 1 (id=12014):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r5, &(0x7f0000000100), 0x0, 0x726, 0x7)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) (async)
r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
close(r7) (async)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)={0x14, 0x18, 0x1, 0x800000, 0x25dfdbfb, {0x1c, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af00413f9e339a1f88c700140012800b00010062617461647600000400028008001f000000c968a28548355282962b4acccf2d7fafd506fd6df53163afd4d1f7bdf06d82ad537ce1acf1c3ae05fdd46f0f0d069b422093cdc14299989845b28bee8cf630cae9f528e1c069f4c3454b0188cf690900b79660"], 0x3c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r10 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r10, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r13 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000c40))
connect$can_bcm(r13, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="09000000000000000000070000002800018014000400fc000000000000000000000000000000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="d185947486342940feae9f6b8fef7d76a8fa35b953638674795788e0"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="09000000000000000000070000002800018014000400fc000000000000000000000000000000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="d185947486342940feae9f6b8fef7d76a8fa35b953638674795788e0"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5)

1.098169408s ago: executing program 1 (id=12015):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000380)={'ip6erspan0\x00', @ifru_data=&(0x7f0000000340)="e5c2b1c14656e67ab74d132a887a520afc6b298bcf1949a7aee68b5a2b9abe64"})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x84, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004040}, 0x80)

1.048310431s ago: executing program 1 (id=12017):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

1.001197542s ago: executing program 1 (id=12018):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000011150afc818e3ecbb14ce7becdbf50672c0c84003dea7769724bb478a76697291b1185c5fdb2acd99ce2b8decee6b8fbe0bc5acb9f4a5fbad4b5810fbf6a032b5be767420f3d019d892a52df10ea18aef8b7333750", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x27)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={r5, 0x7}, 0x8)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000000040)=0x7f00, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20)
recvmsg(r0, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000002004002001c00128009000100626f6e64f026f491d36e214f000000000c00028008f112ae02e290bb"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20040040)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'veth0_vlan\x00'}}, 0x1e)

817.132044ms ago: executing program 2 (id=12021):
socket(0x21, 0x3, 0xa)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r0 = socket$inet6(0xa, 0x4, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, 0x0, 0x20000)
socket$inet_udp(0x2, 0x2, 0x0)

489.165377ms ago: executing program 2 (id=12026):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

425.743691ms ago: executing program 2 (id=12028):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})

425.389414ms ago: executing program 2 (id=12029):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e02000010008108b5b980ecdb4cb92e25031417f9899c4f478bf2c9802a5e936eadf9b75fdd12aa48c9dd000e000100240248ff050005dceb6856324db5e43bdb1d34033ec6bb0676e54848dc0000cdf8097926911a8d4bb7ab9464385796775e0b49ad9ebe24bbeb0dd49faba6149f78482b30f9a4c251936b663ea29e9adbf8e8cbfe817832ffae3edaf11f", 0x39}], 0x1, 0x0, 0xffffff80}, 0x200408c0) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r4, 0xe096044a3fc9e6f1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r2, 0x20, 0x70bd2c, 0x7f, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff7, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x2}, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="b0ce9e2b5c24", {0x5}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1d, @void}}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xc}, @device_a, @broadcast, @initial, {0xe, 0x9}}, 0x24, @void}}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x15)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0xe7, 0x0, &(0x7f0000000340)=""/83, 0x53}, &(0x7f0000000400)=0x40)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r7=>0x0, 0xfe4b, 0x3, [0x1000, 0x4, 0x4]}, &(0x7f0000000140)=0xe)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r7, 0x3}, &(0x7f00000001c0)=0x8)

357.632949ms ago: executing program 2 (id=12030):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
sendmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000000000002000006040000000078be1e1c7665e748ffffff05000000006100"], 0x0, 0x37, 0x0, 0x8}, 0x28)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559e6f70000", 0x28}], 0x1}, 0x40b50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x4030582a, &(0x7f00000000c0)={0x0, r2, 0x4, 0x0, 0x0, 0x80000})
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000340)=<r8=>0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800)
bind$unix(r10, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r12, 0x8b32, &(0x7f0000000040))
bind$unix(r10, &(0x7f0000003000)=@abs={0x1}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r14, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)

357.110265ms ago: executing program 0 (id=12031):
r0 = socket$inet6(0xa, 0x4, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3a70dcc2a39a2265}, 0x800)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0)
bind$llc(r2, &(0x7f0000000180)={0x1a, 0x201, 0xfd, 0x3, 0x52, 0xfa, @broadcast}, 0x10)
r3 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80800)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000240)=@req3={0xb, 0x61a1, 0x5b75, 0x8, 0x4, 0x12e6, 0xc}, 0x1c)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x801, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000380)={0xd}, 0x1)
getsockname$llc(r2, &(0x7f00000003c0), &(0x7f0000000400)=0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x140e, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x24000870)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540)=0x9, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000580)={0x2, 0x10, "dd1c58d2cfdf7855d753ea415d6a3295"})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x537, @private1, 0xf5484f0}], 0x68)
ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000640)={'netdevsim0\x00', 0x800, 0x2})
r5 = openat$cgroup(r2, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000780)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r7, 0x200, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80000}, 0x40810)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40180000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80))
sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xc8, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044004)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c80)=<r10=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={r10, r2, 0x0, 0x4, &(0x7f0000000cc0)='sip\x00'}, 0x30)

277.927465ms ago: executing program 0 (id=12032):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b88e44506c1f244, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001b40)={@host})

276.784698ms ago: executing program 0 (id=12033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, 0x6, 0xa, 0x101, 0x70bd27, 0x25dfdbfe, {0x3, 0x0, 0x9}, [@nested={0xad, 0x14e, 0x0, 0x1, [@typed={0x7e, 0x50, 0x0, 0x0, @binary="6b540e9bcdf17f051131f1222e3803c912f5143f3cca142fc54968983fb8a2470401bab2f6e20b34ba8cb4694cb184036ab5ee764026bc4e6ba1c581bf275db12d7095d1b20f6c601846f63d1fbc0d47383ea622febe461a941744d911902f6c81e664a6c19392fda53bcc1ab1ee860d0b27858357896c82f576"}, @generic="fdd6252a8aed49199cadd8c595aa1ecd8bebf4711718389fc0c43a039405eb8ea23bbc0fc06ddc66f0"]}, @typed={0x8, 0xf2, 0x0, 0x0, @uid=r1}, @generic="0ad16be934a0949fe2eb7aba1e6acc8022afb9768e3aae58cba40c53e0ad82a5225837a41337bbe416c1f33829c571e81da038fa9d0459cb027ac3f5173c275d013679654787565dfea9a3a71fc6ebb07eccf37afc898afc4a8f7ce388279a4831abf8678c776d68106ad193a6659e31a7d4abe93287"]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, &(0x7f0000000380)=""/122, 0x7a, 0x12042, 0x0, 0x0)
socket(0xa, 0x5, 0x3) (async)
r3 = socket(0xa, 0x5, 0x3)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000400))
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={<r4=>r0})
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x29}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff15}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd18}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xb}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1800}, 0x24000000)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000680)=0xff, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000680)=0xff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8)
write$6lowpan_control(r5, &(0x7f0000000700)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
sendmsg$nl_generic(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, 0x1e, 0x300, 0x70bd28, 0x25dfdbfe, {0x7}, [@generic="d0591c71782cb426ae027cb5a9240059a0aeb18e3d32c82fa56317a406ec4d92e6cf34d816e5951699fe6b0d481752046fc824197702ccdc147c44c09fcf338c8c70a6e55d4bb556d06d63adab0d545e0115d7f2488793c0f207aed3913aef278354c3332ec3388575aded1b45e6ddf30e30"]}, 0x88}}, 0x800)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000900)=@add_del={0x2, &(0x7f00000008c0)='dvmrp0\x00'}) (async)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000900)=@add_del={0x2, &(0x7f00000008c0)='dvmrp0\x00'})
socket(0xf, 0x0, 0x7) (async)
r6 = socket(0xf, 0x0, 0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000940)=r5, 0x4)
bind$inet6(r3, &(0x7f0000000980)={0xa, 0x4e21, 0xb, @mcast2, 0x5}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000980)={0xa, 0x4e21, 0xb, @mcast2, 0x5}, 0x1c)
getsockopt$inet_int(r6, 0x0, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async)
getsockopt$inet_int(r6, 0x0, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000a40)=0x1, 0x4)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x0, 0x1, 0xc]}, &(0x7f0000000b00)=0x44)
getsockname$packet(r3, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000b40)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14)
sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000c00)="a7a8d2eabb428eff5a41b3d397493906929b8b2479b1b87f136f8193dde4c52c9ea70ea9b6b8aef18bd70263a52c901cd70cd2e72166bc44f7354407ae5ffe8e083a33cbedeab297973c66bd0c", 0x4d}, {&(0x7f0000000c80)="b095bb442267fbb9032747b1", 0xc}, {&(0x7f0000000cc0)="66128cbd50f6ad0e42bb3a12f27f1b78d2752b6ed8467c26e13c12a192271191674d3e220fc717fb0813bc2081ca71a29158b6e3c2804d4a0e25619a825e9edf624c29719039ffd90a9768", 0x4b}, {&(0x7f0000000d40)="1e3822139e0a24d38e25749a4b7e8484b84feddc71751dfc4e82167f42b96f89b65e6bcbeed58112dcae7d95918301bcc53c3212a555b2914f16e33886fc690d1ce33d7620", 0x45}, {&(0x7f0000000dc0)="fa0326e13add50e03f7fd4e8cc09af2811634c7b59d409", 0x17}], 0x5}, 0x40005) (async)
sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000c00)="a7a8d2eabb428eff5a41b3d397493906929b8b2479b1b87f136f8193dde4c52c9ea70ea9b6b8aef18bd70263a52c901cd70cd2e72166bc44f7354407ae5ffe8e083a33cbedeab297973c66bd0c", 0x4d}, {&(0x7f0000000c80)="b095bb442267fbb9032747b1", 0xc}, {&(0x7f0000000cc0)="66128cbd50f6ad0e42bb3a12f27f1b78d2752b6ed8467c26e13c12a192271191674d3e220fc717fb0813bc2081ca71a29158b6e3c2804d4a0e25619a825e9edf624c29719039ffd90a9768", 0x4b}, {&(0x7f0000000d40)="1e3822139e0a24d38e25749a4b7e8484b84feddc71751dfc4e82167f42b96f89b65e6bcbeed58112dcae7d95918301bcc53c3212a555b2914f16e33886fc690d1ce33d7620", 0x45}, {&(0x7f0000000dc0)="fa0326e13add50e03f7fd4e8cc09af2811634c7b59d409", 0x17}], 0x5}, 0x40005)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000f00)={0x0, @l2={0x1f, 0x7, @none, 0x0, 0x7f424a4354fde070}, @l2tp={0x2, 0x0, @rand_addr=0x64010101}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x266, 0x0, 0x0, 0x0, 0x15, &(0x7f0000000ec0)='veth1_vlan\x00', 0xffffffffffffffff, 0x6, 0xd2})
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000f80)={r7, @local, @multicast2}, 0xc)
r8 = socket$inet6(0xa, 0x6, 0x80)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000fc0)={0x3, 'veth0_vlan\x00', {0xffff}, 0x7})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x2b, 0x3, 0x0, 0x2, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='GPL\x00', 0x4, 0x98, &(0x7f0000001100)=""/152, 0x41100, 0xaf917fec21f554ad, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000011c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x6a77, r5, 0x6, 0x0, &(0x7f0000001200)=[{0x5, 0x1, 0x7, 0x998f82fc5a72133e}, {0x3, 0x3, 0x8}, {0x1, 0x4, 0x0, 0xa}, {0x2, 0x2, 0xf, 0x5}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0xc, @value=r5}, 0x94)
sendto$inet(r2, &(0x7f0000001340)="1d952d5a55cb82acc71aafc09940c222a2da064a8842718702483ed217fb1de9b80f1d95ea81055fb9b89402650f3828b4cf0aaaf1ef439ccb844b046f95243f1f25f3d3a99ff52666a555a3b2ad7d748a34d1cdd15d4c4fc45775949c1fd0d9f0f3e7ec9dadaca78cccb8321f2cc7e35b3e34ffe6a81d851d4f6c362127f04bc9c84a", 0x83, 0x8040, &(0x7f0000001400)={0x2, 0x4e20, @multicast2}, 0x10) (async)
sendto$inet(r2, &(0x7f0000001340)="1d952d5a55cb82acc71aafc09940c222a2da064a8842718702483ed217fb1de9b80f1d95ea81055fb9b89402650f3828b4cf0aaaf1ef439ccb844b046f95243f1f25f3d3a99ff52666a555a3b2ad7d748a34d1cdd15d4c4fc45775949c1fd0d9f0f3e7ec9dadaca78cccb8321f2cc7e35b3e34ffe6a81d851d4f6c362127f04bc9c84a", 0x83, 0x8040, &(0x7f0000001400)={0x2, 0x4e20, @multicast2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x7, &(0x7f0000001440)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000001480)='syzkaller\x00', 0x0, 0xff, &(0x7f00000014c0)=""/255, 0x40f00, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000016c0)=[r5, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000001700)=[{0x1, 0x4, 0x3, 0xa}, {0x2, 0x1, 0x0, 0xb}, {0x0, 0x1, 0xf, 0x3}, {0x5, 0x2, 0x2, 0xa}, {0x3, 0x3, 0x3, 0x4}, {0x5, 0x3, 0x2, 0x6}, {0x4, 0x4, 0x6, 0xc}], 0x10, 0xffff15ed}, 0x94)

137.836909ms ago: executing program 0 (id=12034):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x4000000, {0x2, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800)
getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000640)=""/154, &(0x7f0000000040)=0x9a)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0x8e}, {&(0x7f0000000200)="092ce9d4910bcf2f45e29bbf3cb135c8ac8f358df216429d0202404451dfabd293d2295dc504d4ed0bc05789862758e1ed07575c244b2deb71b7529d7d0d99163e83e2fbccd313721480396ffb293aca67c15b5f32feb1a0806e18af231db4e9ae5419e12427626da9ba4e3680b1e600"/127, 0x7f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f0000000600)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x70}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853", 0x5b}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63", 0xaa}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf", 0x7d}], 0x5}}], 0x4, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

136.812637ms ago: executing program 1 (id=12035):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/user\x00')
unshare(0x6a040000)
socket(0x27, 0x1003, 0x9)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xb6, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0x10000002})
ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x5, 0x0, 0x7, 0x8001}, {0x6, 0x0, 0x0, 0x200000}]}, 0x10)
connect$unix(r5, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x4, 0x2, 0x0, 0x4, 0x0, 0x10001, [{0x5, 0x3, 0x3}, {0x7, 0x2, 0x1000}]}]}, {0x0, [0x30, 0x0, 0x61, 0x61, 0x5f]}}, &(0x7f0000000240)=""/83, 0x43, 0x53, 0x1, 0x6}, 0x28)

136.376847ms ago: executing program 0 (id=12036):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b000200000005000500ef"], 0x3c}}, 0x20000034)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r4 = socket$inet(0xa, 0x801, 0x84)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r11)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="31070000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x2}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))

0s ago: executing program 0 (id=12037):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000040))
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
listen(r6, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r10 = accept(r6, 0x0, 0x0)
recvfrom$l2tp6(r10, &(0x7f00000000c0)=""/230, 0xe6, 0x10020, 0x0, 0x0)
shutdown(r10, 0x0) (async)
shutdown(r10, 0x0)
socket(0x200000000000011, 0x2, 0x0) (async)
r11 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="885f2a2c47057478998e4376e274fddeaf226fb2f4010c885b34fdae4de6c7f4ecd40643207b33211eb8c6f9622685769dd27a8298ec9770662da1b218ad8c03162cf7995277586d83c175a2870b9e34a0a545947d77daa2a3d04735e36cd152a4a31dc58b3461dcc2ef42e33cff2c0fa2d306d783998ebda44ca643c3fb8e4333f9b84504ee14ced9b89aefe517f7868db7f639081432972337e2dcb3"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="885f2a2c47057478998e4376e274fddeaf226fb2f4010c885b34fdae4de6c7f4ecd40643207b33211eb8c6f9622685769dd27a8298ec9770662da1b218ad8c03162cf7995277586d83c175a2870b9e34a0a545947d77daa2a3d04735e36cd152a4a31dc58b3461dcc2ef42e33cff2c0fa2d306d783998ebda44ca643c3fb8e4333f9b84504ee14ced9b89aefe517f7868db7f639081432972337e2dcb3"], 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

.
[  386.426199][T23593] tun0: tun_chr_ioctl cmd 2148045848
[  386.428498][T23593] tun0: tun_chr_ioctl cmd 21731
[  386.888650][T23636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.979317][T23646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7768'.
[  386.996705][T23648] "syz.1.7769" (23648) uses obsolete ecb(arc4) skcipher
[  387.967759][T23664] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  387.970870][T23664] syzkaller0: entered promiscuous mode
[  387.972692][T23664] syzkaller0: entered allmulticast mode
[  388.027621][T23670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.231433][T23692] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  388.564443][T23712] lo speed is unknown, defaulting to 1000
[  388.999585][T23755] pim6reg: entered allmulticast mode
[  389.305576][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7832'.
[  389.434719][T23807] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  389.442047][T23807] syzkaller0: entered promiscuous mode
[  389.444084][T23807] syzkaller0: entered allmulticast mode
[  389.487470][T23811] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  389.508198][T23815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.510637][T23815] syzkaller0: entered promiscuous mode
[  389.517834][T23815] syzkaller0: entered allmulticast mode
[  389.543530][T23815] tipc: Resetting bearer <eth:syzkaller0>
[  389.556362][T23814] tipc: Resetting bearer <eth:syzkaller0>
[  389.573795][T23814] tipc: Disabling bearer <eth:syzkaller0>
[  389.887246][T23837] IPVS: Error connecting to the multicast addr
[  390.212551][T23849] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.7858'.
[  390.920419][T23865] netlink: 'syz.0.7866': attribute type 13 has an invalid length.
[  391.579323][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7883'.
[  391.822643][T23928] tun0: tun_chr_ioctl cmd 2148553947
[  392.275368][T23981] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7909'.
[  392.708484][T24009] netlink: 'syz.2.7923': attribute type 7 has an invalid length.
[  392.711552][T24009] netlink: 'syz.2.7923': attribute type 8 has an invalid length.
[  392.855472][T24027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7931'.
[  392.859045][T24027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7931'.
[  393.149187][T24054] Bluetooth: MGMT ver 1.23
[  393.779369][T24085] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7959'.
[  393.937671][T24095] sctp: [Deprecated]: syz.0.7964 (pid 24095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.937671][T24095] Use struct sctp_sack_info instead
[  393.976155][T24100] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  394.170283][T24110] netlink: 'syz.1.7969': attribute type 2 has an invalid length.
[  394.177198][T24110] : entered promiscuous mode
[  394.299410][T24113] netlink: 'syz.1.7970': attribute type 12 has an invalid length.
[  394.525825][T24124] netlink: 'syz.1.7975': attribute type 23 has an invalid length.
[  395.028587][T24150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7987'.
[  395.133297][T24169] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7990'.
[  396.303470][T24219] netlink: 'syz.2.8011': attribute type 10 has an invalid length.
[  396.306622][T24219] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8011'.
[  396.311509][T24219] team0: entered promiscuous mode
[  396.314553][T24219] C: entered promiscuous mode
[  396.317504][T24219] team_slave_1: entered promiscuous mode
[  396.320207][T24219] hsr_slave_0: entered promiscuous mode
[  396.327479][T24219] bridge3: entered promiscuous mode
[  396.330056][T24219] 8021q: adding VLAN 0 to HW filter on device team0
[  396.551263][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8023'.
[  396.598014][T24246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8024'.
[  396.956683][T24277] netlink: 'syz.0.8038': attribute type 21 has an invalid length.
[  397.014856][T24280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.308850][T24297] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8047'.
[  397.417538][T24303] wg1 speed is unknown, defaulting to 1000
[  397.420028][T24303] wg1 speed is unknown, defaulting to 1000
[  397.423964][T24303] wg1 speed is unknown, defaulting to 1000
[  397.431945][T24303] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  397.447527][T24303] wg1 speed is unknown, defaulting to 1000
[  397.450313][T24303] wg1 speed is unknown, defaulting to 1000
[  397.453262][T24303] wg1 speed is unknown, defaulting to 1000
[  398.261073][T24384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8087'.
[  398.266533][T24384] openvswitch: netlink: Flow actions attr not present in new flow.
[  398.851972][T24436] nbd4: detected capacity change from 0 to 127
[  398.856233][   T57] block nbd4: Receive control failed (result -32)
[  399.028896][T24455] lo speed is unknown, defaulting to 1000
[  399.031589][T24455] wg1 speed is unknown, defaulting to 1000
[  399.350379][T24488] netlink: 'syz.0.8123': attribute type 26 has an invalid length.
[  400.421314][T24537] netlink: 'syz.2.8143': attribute type 1 has an invalid length.
[  400.477724][T24543] syz.1.8146 uses old SIOCAX25GETINFO
[  400.820837][T24560] lo speed is unknown, defaulting to 1000
[  400.828980][T24560] wg1 speed is unknown, defaulting to 1000
[  401.044758][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8161'.
[  401.378383][T24602] netlink: 'syz.1.8172': attribute type 1 has an invalid length.
[  401.416888][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'.
[  401.420493][T24604] netlink: 'syz.0.8173': attribute type 6 has an invalid length.
[  401.496947][   T33] audit: type=1800 audit(1755717957.736:10): pid=24606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8174" name="memory.events" dev="tmpfs" ino=14003 res=0 errno=0
[  402.745346][T24646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8192'.
[  402.749267][T24646] openvswitch: netlink: Flow actions attr not present in new flow.
[  403.794624][T24674] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  403.803904][T24674] syzkaller0: entered promiscuous mode
[  403.806178][T24674] syzkaller0: entered allmulticast mode
[  403.842362][T24682] team0: No ports can be present during mode change
[  404.021474][T24701] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  404.026594][T24701] syzkaller0: entered promiscuous mode
[  404.028807][T24701] syzkaller0: entered allmulticast mode
[  405.883226][T24730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8226'.
[  406.214046][T24762] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  406.222306][T24762] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  406.230053][T24760] lo speed is unknown, defaulting to 1000
[  406.234415][T24760] wg1 speed is unknown, defaulting to 1000
[  406.399252][T24775] bridge5: entered allmulticast mode
[  406.836466][T24807] netlink: 'syz.0.8258': attribute type 4 has an invalid length.
[  406.842720][T24807] netlink: 'syz.0.8258': attribute type 4 has an invalid length.
[  406.960347][T24817] netlink: 'syz.1.8260': attribute type 1 has an invalid length.
[  407.027479][T24822] netlink: 'syz.0.8262': attribute type 23 has an invalid length.
[  407.117756][T24827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8264'.
[  408.200208][T24878] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8288'.
[  408.206097][T24878] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  409.239386][T24922] netlink: 'syz.2.8306': attribute type 7 has an invalid length.
[  409.340862][T24927] netlink: 'syz.2.8307': attribute type 5 has an invalid length.
[  409.421534][T24933] netlink: 'syz.0.8308': attribute type 7 has an invalid length.
[  409.425570][T24933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8308'.
[  409.659687][T24960] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  409.664477][T24960] tipc: Bearer <udp:s>: trying with adjusted priority
[  409.666824][T24960] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  409.948851][T24987] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8330'.
[  409.991635][T24997] : renamed from bond_slave_0
[  410.136877][T25012] syzkaller0: entered promiscuous mode
[  410.138688][T25012] syzkaller0: entered allmulticast mode
[  410.349683][T25028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.379391][T25028] syzkaller0: entered promiscuous mode
[  410.381117][T25028] syzkaller0: entered allmulticast mode
[  410.386684][T25028] tipc: Resetting bearer <eth:syzkaller0>
[  410.401200][T25027] tipc: Resetting bearer <eth:syzkaller0>
[  411.711706][T25027] tipc: Disabling bearer <eth:syzkaller0>
[  412.337195][T25100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8379'.
[  412.340896][T25100] openvswitch: netlink: Flow actions attr not present in new flow.
[  412.627133][T25112] netlink: 'syz.0.8384': attribute type 32 has an invalid length.
[  412.742642][T25118] netlink: 'syz.0.8387': attribute type 9 has an invalid length.
[  412.745816][T25118] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.8387'.
[  413.203458][T25145] netlink: 'syz.1.8398': attribute type 9 has an invalid length.
[  413.265574][T25148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.269703][T25148] syzkaller0: entered promiscuous mode
[  413.271508][T25148] syzkaller0: entered allmulticast mode
[  413.302183][T25148] tipc: Resetting bearer <eth:syzkaller0>
[  413.309540][T25147] tipc: Resetting bearer <eth:syzkaller0>
[  413.327875][T25147] tipc: Disabling bearer <eth:syzkaller0>
[  413.417640][T25161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8408'.
[  413.421114][T25161] netlink: 'syz.0.8408': attribute type 6 has an invalid length.
[  413.425501][T25161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8408'.
[  413.496894][T25170] vlan0: entered promiscuous mode
[  413.718155][T25194] IPVS: Error connecting to the multicast addr
[  413.821612][T25201] netlink: 'syz.0.8426': attribute type 10 has an invalid length.
[  413.835710][T25201] dummy0: entered allmulticast mode
[  413.838148][T25201] team0: Port device dummy0 added
[  414.127614][T25217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8432'.
[  414.131685][T25212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8432'.
[  414.135406][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8433'.
[  414.690914][ T5863] cgroup: fork rejected by pids controller in /syz0
[  415.189014][T23084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  415.193529][T23084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  415.197688][T23084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  415.204057][T23084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  415.207292][T23084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  415.239843][T25274] lo speed is unknown, defaulting to 1000
[  415.243861][T25274] wg1 speed is unknown, defaulting to 1000
[  415.300138][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8463'.
[  415.416326][T25274] chnl_net:caif_netlink_parms(): no params data found
[  415.633211][T25297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8470'.
[  415.636721][T25297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8470'.
[  415.692502][T25274] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.695381][T25274] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.698159][T25274] bridge_slave_0: entered allmulticast mode
[  415.702708][T25274] bridge_slave_0: entered promiscuous mode
[  415.707239][T25274] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.709942][T25274] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.715569][T25274] bridge_slave_1: entered allmulticast mode
[  415.719726][T25274] bridge_slave_1: entered promiscuous mode
[  415.750611][T25274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.756804][T25274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.793209][T25274] team0: Port device team_slave_0 added
[  415.800738][T25274] team0: Port device team_slave_1 added
[  415.831353][T25274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.834230][T25274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.844180][T25274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.855840][T25274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.858568][T25274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.869015][T25274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.920056][T25274] hsr_slave_0: entered promiscuous mode
[  415.923300][T25274] hsr_slave_1: entered promiscuous mode
[  416.054879][T25315] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8476'.
[  416.089487][T25317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8477'.
[  416.276589][T25274] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  416.284250][T25274] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  416.295027][T25274] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  416.301076][T25274] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  416.412822][T25274] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.436334][T25274] 8021q: adding VLAN 0 to HW filter on device team0
[  416.445069][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.448073][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.483942][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.487682][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.653556][T25274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.714654][T25274] veth0_vlan: entered promiscuous mode
[  416.729254][T25274] veth1_vlan: entered promiscuous mode
[  416.771062][T25274] veth0_macvtap: entered promiscuous mode
[  416.779780][T25274] veth1_macvtap: entered promiscuous mode
[  416.824735][T25274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.835733][T25274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.849568][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.863208][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.866786][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.882336][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.944506][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.948531][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.976155][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.979191][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.235833][ T5237] Bluetooth: hci2: command tx timeout
[  417.370215][T25400] netlink: 'syz.1.8512': attribute type 30 has an invalid length.
[  418.924850][T25513] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  418.996683][T25517] batman_adv: batadv0: Adding interface: gretap1
[  418.999205][T25517] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.013778][T25517] batman_adv: batadv0: Interface activated: gretap1
[  419.234344][T25540] __nla_validate_parse: 3 callbacks suppressed
[  419.234356][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8577'.
[  419.272733][T25545] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8579'.
[  419.312110][ T5237] Bluetooth: hci2: command tx timeout
[  419.316981][   T33] audit: type=1800 audit(1755717975.546:11): pid=25549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8581" name="blkio.bfq.time_recursive" dev="tmpfs" ino=134 res=0 errno=0
[  419.360767][T25553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8583'.
[  419.370211][T25553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8583'.
[  419.617159][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8589'.
[  419.786165][T25592] netlink: 'syz.2.8598': attribute type 1 has an invalid length.
[  420.060954][T25613] syzkaller0: entered promiscuous mode
[  420.063284][T25613] syzkaller0: entered allmulticast mode
[  420.103641][T25624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8614'.
[  421.402089][ T5237] Bluetooth: hci2: command tx timeout
[  421.737941][T25651] netlink: 'syz.1.8627': attribute type 3 has an invalid length.
[  421.740695][T25651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8627'.
[  421.841521][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8632'.
[  421.860370][T25666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8633'.
[  421.980741][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8639'.
[  422.175455][T25698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.241711][T25706] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  422.689469][T25742] netlink: 'syz.1.8667': attribute type 46 has an invalid length.
[  423.297850][T25778] netlink: 'syz.1.8682': attribute type 1 has an invalid length.
[  423.483917][ T5237] Bluetooth: hci2: command tx timeout
[  423.513604][T25793] bridge_slave_1: left allmulticast mode
[  423.515814][T25793] bridge_slave_1: left promiscuous mode
[  423.517787][T25793] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.531371][T25793] bridge_slave_0: left allmulticast mode
[  423.537281][T25793] bridge_slave_0: left promiscuous mode
[  423.548054][T25793] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.751597][T25807] tc_dump_action: action bad kind
[  423.996932][T25828] netlink: 'syz.1.8701': attribute type 3 has an invalid length.
[  424.074694][T25835] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  424.080265][T25835] macvtap1: entered promiscuous mode
[  424.088145][T25835] mac80211_hwsim hwsim32 wlan1: left promiscuous mode
[  424.199797][T25842] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  427.306659][T25852] __nla_validate_parse: 4 callbacks suppressed
[  427.306672][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8712'.
[  427.316775][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8712'.
[  427.328751][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8712'.
[  427.333368][T25852] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  427.445490][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8719'.
[  427.480402][T25868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.589318][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8725'.
[  427.639739][T25883] tipc: Started in network mode
[  427.643228][T25883] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  427.650569][T25883] tipc: Enabled bearer <udp:syz0>, priority 10
[  428.444059][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8772'.
[  428.451213][T25975] vlan1: entered promiscuous mode
[  428.541126][T25987] netlink: 'syz.0.8778': attribute type 32 has an invalid length.
[  428.544313][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8778'.
[  428.547430][T25987] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  428.761936][ T5906] tipc: Node number set to 4269801488
[  428.786261][T26014] svc: failed to register nfsdv3 RPC service (errno 111).
[  428.789231][T26014] svc: failed to register nfsaclv3 RPC service (errno 111).
[  429.543320][T26020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8790'.
[  429.565463][T26022] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  429.948333][T26041] lo speed is unknown, defaulting to 1000
[  429.953752][T26041] wg1 speed is unknown, defaulting to 1000
[  430.684015][T26049] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  430.705820][T26049] syzkaller0: entered promiscuous mode
[  430.708208][T26049] syzkaller0: entered allmulticast mode
[  430.837068][T26057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8803'.
[  431.017208][T26062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8805'.
[  431.020702][T26062] openvswitch: netlink: Flow actions attr not present in new flow.
[  431.140595][T26075] netlink: 'syz.1.8811': attribute type 1 has an invalid length.
[  433.027624][T26163] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  433.214717][T26188] netlink: 'syz.2.8863': attribute type 1 has an invalid length.
[  433.217700][T26188] __nla_validate_parse: 2 callbacks suppressed
[  433.217709][T26188] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8863'.
[  433.556598][T26216] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8876'.
[  434.326189][T26246] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  434.371038][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'.
[  434.958950][T26289] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8909'.
[  434.965675][T26289] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8909'.
[  435.488012][T26310] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8919'.
[  435.589401][T26316] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8922'.
[  435.757513][T26326] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  435.758871][ T2313] IPVS: starting estimator thread 0...
[  435.862009][T26329] IPVS: using max 61 ests per chain, 146400 per kthread
[  436.353797][T26378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8949'.
[  437.698979][T26419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8967'.
[  437.952505][T23084] Bluetooth: hci2: command 0x0405 tx timeout
[  438.282447][T26443] C: left promiscuous mode
[  438.289310][T26443] team0: Port device C removed
[  438.292255][T26443] team_slave_1: left promiscuous mode
[  438.296306][T26443] team0: Port device team_slave_1 removed
[  438.299327][T26443] hsr_slave_0: left promiscuous mode
[  438.315995][T26443] team0: Port device hsr_slave_0 removed
[  438.319803][T26443] bond0: (slave geneve5): Releasing active interface
[  438.353889][T26443] bond1: (slave vti0): Releasing backup interface
[  438.360156][T26443] bridge3: left promiscuous mode
[  438.364164][T26443] team0: Port device bridge3 removed
[  438.381120][T26447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  439.158846][T26500] netlink: 'syz.1.8999': attribute type 10 has an invalid length.
[  439.162408][T26500] netlink: 'syz.1.8999': attribute type 10 has an invalid length.
[  439.407942][T26508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9004'.
[  439.496767][T26510] lo speed is unknown, defaulting to 1000
[  439.499733][T26510] wg1 speed is unknown, defaulting to 1000
[  439.826921][T26527] netlink: 'syz.2.9011': attribute type 10 has an invalid length.
[  440.447642][T26553] sock: sock_set_timeout: `syz.1.9023' (pid 26553) tries to set negative timeout
[  440.740400][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9030'.
[  441.140021][T26596] netlink: 'syz.1.9042': attribute type 8 has an invalid length.
[  441.341005][T26606] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  441.655545][T26624] netlink: 'syz.1.9056': attribute type 3 has an invalid length.
[  441.688924][T26628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.692740][T26628] syzkaller0: entered promiscuous mode
[  441.694994][T26628] syzkaller0: entered allmulticast mode
[  441.738045][T26628] tipc: Resetting bearer <eth:syzkaller0>
[  441.746147][T26627] tipc: Resetting bearer <eth:syzkaller0>
[  441.768103][T26627] tipc: Disabling bearer <eth:syzkaller0>
[  441.989309][T26650] netlink: 26 bytes leftover after parsing attributes in process `syz.0.9068'.
[  442.377397][T26681] ip6erspan0: entered allmulticast mode
[  442.400629][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.405066][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.024588][T26713] infiniband syz1: set down
[  443.028939][T26713] infiniband syz1: added syz_tun
[  443.121395][T26713] RDS/IB: syz1: added
[  443.125033][T26713] smc: adding ib device syz1 with port count 1
[  443.127120][T26713] smc:    ib device syz1 port 1 has pnetid 
[  443.488288][T26730] sctp: [Deprecated]: syz.2.9106 (pid 26730) Use of int in max_burst socket option.
[  443.488288][T26730] Use struct sctp_assoc_value instead
[  445.160713][T26784] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.9128'.
[  445.591347][T26822] netlink: 'syz.2.9145': attribute type 21 has an invalid length.
[  445.596300][T26822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9145'.
[  445.691264][T26828] lo speed is unknown, defaulting to 1000
[  445.733403][T26828] wg1 speed is unknown, defaulting to 1000
[  445.792480][   T33] audit: type=1800 audit(1755718002.026:12): pid=26832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9147" name="memory.events" dev="tmpfs" ino=993 res=0 errno=0
[  446.046617][T26843] netlink: 'syz.1.9153': attribute type 10 has an invalid length.
[  446.159110][T26853] netlink: 'syz.1.9156': attribute type 3 has an invalid length.
[  446.268913][   T57] block nbd5: Receive control failed (result -32)
[  446.708542][T26878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9168'.
[  447.190336][T26886] netlink: 'syz.1.9172': attribute type 1 has an invalid length.
[  447.193504][T26886] netlink: 'syz.1.9172': attribute type 1 has an invalid length.
[  447.196300][T26886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9172'.
[  447.500408][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9182'.
[  447.572177][T26922] Bluetooth: MGMT ver 1.23
[  447.647285][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9187'.
[  448.253337][T26954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9196'.
[  448.261321][T26953] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9197'.
[  448.420307][T26968] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9205'.
[  449.678633][T27080] netlink: 'syz.1.9257': attribute type 3 has an invalid length.
[  449.807823][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9264'.
[  450.045121][   T33] audit: type=1800 audit(1755718006.286:13): pid=27096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9264" name="memory.events" dev="tmpfs" ino=1186 res=0 errno=0
[  450.498428][T27112] netlink: del zone limit has 4 unknown bytes
[  450.706853][T27130] netlink: 'syz.0.9281': attribute type 21 has an invalid length.
[  450.709379][T27130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9281'.
[  450.830085][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9285'.
[  450.861731][T27143] netlink: 'syz.0.9286': attribute type 1 has an invalid length.
[  450.871943][T27143] netlink: 15 bytes leftover after parsing attributes in process `syz.0.9286'.
[  451.096164][T27159] netlink: 'syz.2.9294': attribute type 1 has an invalid length.
[  451.308704][T27172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9300'.
[  452.098003][T27204] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9312'.
[  452.158653][T27208] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  452.436017][T27221] geneve0: entered promiscuous mode
[  452.439613][ T5717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.443786][ T5717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.445587][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9319'.
[  452.447220][ T5717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.453100][ T5717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.742937][T27236] netlink: 'syz.1.9326': attribute type 3 has an invalid length.
[  454.027750][T27271] lo speed is unknown, defaulting to 1000
[  454.041268][T27271] wg1 speed is unknown, defaulting to 1000
[  454.605030][T27314] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  454.945734][T27337] syzkaller0: entered promiscuous mode
[  454.947578][T27337] syzkaller0: entered allmulticast mode
[  455.096472][   T33] audit: type=1804 audit(1755718011.336:14): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9371" name="/newroot/3190/cgroup.controllers" dev="tmpfs" ino=16106 res=1 errno=0
[  455.125646][   T33] audit: type=1800 audit(1755718011.346:15): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9371" name="cgroup.controllers" dev="tmpfs" ino=16106 res=0 errno=0
[  455.142021][   T33] audit: type=1800 audit(1755718011.346:16): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9371" name="cgroup.controllers" dev="tmpfs" ino=16106 res=0 errno=0
[  455.206795][T27350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9374'.
[  456.373790][T27390] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  456.377033][T27390] syzkaller0: entered promiscuous mode
[  456.378868][T27390] syzkaller0: entered allmulticast mode
[  456.397081][T27390] sch_fq: defrate 257 ignored.
[  456.484582][T27395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9393'.
[  456.487731][T27395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9393'.
[  456.554995][T27399] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  456.557942][T27399] tipc: Bearer <udp:s>: trying with adjusted priority
[  456.560617][T27399] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  456.605924][T27401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9396'.
[  456.807692][T27413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9402'.
[  456.811248][T27413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9402'.
[  457.244893][T27439] netlink: 'syz.1.9409': attribute type 1 has an invalid length.
[  457.248087][T27439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9409'.
[  457.301267][T27445] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9412'.
[  457.367427][T27449] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9415'.
[  457.436058][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9418'.
[  458.435757][T27505] netlink: 'syz.1.9436': attribute type 10 has an invalid length.
[  458.443043][T27505] netlink: 'syz.1.9436': attribute type 10 has an invalid length.
[  459.018854][T27537] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  459.138541][T27545] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9454'.
[  459.828261][T27602] tipc: Invalid UDP bearer configuration
[  459.828306][T27602] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  460.109382][T27624] syzkaller0: entered promiscuous mode
[  460.111183][T27624] syzkaller0: entered allmulticast mode
[  461.771110][T27646] lo speed is unknown, defaulting to 1000
[  461.775065][T27646] wg1 speed is unknown, defaulting to 1000
[  461.805640][T27650] __nla_validate_parse: 3 callbacks suppressed
[  461.805660][T27650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9501'.
[  461.811895][T27650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  461.925959][T27652] lo speed is unknown, defaulting to 1000
[  461.935991][T27652] lo speed is unknown, defaulting to 1000
[  461.944916][T27652] lo speed is unknown, defaulting to 1000
[  461.963885][T27652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  461.994099][T27652] lo speed is unknown, defaulting to 1000
[  461.997106][T27652] lo speed is unknown, defaulting to 1000
[  462.000455][T27652] lo speed is unknown, defaulting to 1000
[  462.004572][T27652] lo speed is unknown, defaulting to 1000
[  462.007557][T27652] lo speed is unknown, defaulting to 1000
[  462.190325][T27668] sctp: [Deprecated]: syz.0.9509 (pid 27668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.190325][T27668] Use struct sctp_sack_info instead
[  462.743351][T27709] netlink: zone id is out of range
[  462.745582][T27709] netlink: zone id is out of range
[  462.747646][T27709] netlink: zone id is out of range
[  462.749448][T27709] netlink: zone id is out of range
[  462.751139][T27709] netlink: zone id is out of range
[  462.753372][T27709] netlink: zone id is out of range
[  462.755221][T27709] netlink: zone id is out of range
[  462.756826][T27709] netlink: zone id is out of range
[  463.727597][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9552'.
[  464.807479][T27806] net_ratelimit: 16 callbacks suppressed
[  464.807496][T27806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.996756][T27815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9579'.
[  465.050309][T27819] netlink: 'syz.0.9581': attribute type 10 has an invalid length.
[  465.059221][T27819] syz_tun: entered promiscuous mode
[  465.094730][T27819] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  465.485321][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9595'.
[  465.566837][T27852] vlan0: entered promiscuous mode
[  465.568898][T27852] bridge0: entered promiscuous mode
[  466.687482][T27920] netlink: 596 bytes leftover after parsing attributes in process `syz.0.9628'.
[  467.081542][T27936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9634'.
[  467.600494][T27964] bond0: (slave syz_tun): Releasing backup interface
[  467.628612][T27964] bond0: (slave bond_slave_0): Releasing backup interface
[  467.643598][T27964] bond0: (slave bond_slave_1): Releasing backup interface
[  467.677152][T27964] team0: Port device team_slave_0 removed
[  467.700854][T27964] team0: Port device team_slave_1 removed
[  467.710284][T27964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.718789][T27964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.723298][T27964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.726302][T27964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.744974][T27964] batman_adv: batadv0: Interface deactivated: gretap1
[  467.747212][T27964] batman_adv: batadv0: Removing interface: gretap1
[  467.960816][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9657'.
[  468.013248][T27995] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9661'.
[  468.131121][T28002] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9664'.
[  468.134752][T28002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9664'.
[  468.137942][T28002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9664'.
[  468.707079][T28017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9671'.
[  468.787448][T28020] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  468.969074][T28028] lo speed is unknown, defaulting to 1000
[  468.974218][T28028] wg1 speed is unknown, defaulting to 1000
[  469.197183][T28051] _Z`Ԁ@: entered promiscuous mode
[  469.199123][T28028] lo speed is unknown, defaulting to 1000
[  469.922229][T28082] nbd6: detected capacity change from 0 to 549764202496
[  469.932436][   T56] block nbd6: Receive control failed (result -32)
[  470.286944][T28108] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9711'.
[  470.538176][T28126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9720'.
[  470.548340][T28126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9720'.
[  470.974032][T28152] netlink: 'syz.0.9731': attribute type 83 has an invalid length.
[  471.017732][T28152] lo speed is unknown, defaulting to 1000
[  471.021089][T28152] wg1 speed is unknown, defaulting to 1000
[  471.221373][T28152] lo speed is unknown, defaulting to 1000
[  472.369745][T28190] netlink: 'syz.2.9746': attribute type 21 has an invalid length.
[  472.372898][T28190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9746'.
[  472.615828][T28206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9753'.
[  472.962158][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9760'.
[  473.039232][T28224] syz_tun: left promiscuous mode
[  473.051392][T28224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  473.059027][  T794] lo speed is unknown, defaulting to 1000
[  473.061218][  T794] syz2: Port: 1 Link ACTIVE
[  473.115078][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9764'.
[  473.707613][T28269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9781'.
[  474.096127][ T5237] Bluetooth: hci2: link tx timeout
[  474.099121][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.103127][T23084] Bluetooth: hci2: link tx timeout
[  474.104841][T23084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.107212][T23084] Bluetooth: hci2: link tx timeout
[  474.109030][T23084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.113211][T23084] Bluetooth: hci2: link tx timeout
[  474.115049][T23084] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.171419][T28274] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9783'.
[  474.322761][T28283] netlink: 'syz.0.9782': attribute type 1 has an invalid length.
[  474.325617][T28283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9782'.
[  475.010229][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9796'.
[  475.318049][T28326] atomic_op ffff888029662198 conn xmit_atomic 0000000000000000
[  475.328252][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9807'.
[  476.115064][T23084] Bluetooth: hci2: command 0x0405 tx timeout
[  476.499167][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9817'.
[  476.516170][T28349] vlan2: entered promiscuous mode
[  476.518266][T28349] bridge0: entered promiscuous mode
[  476.544786][T28346] lo speed is unknown, defaulting to 1000
[  476.548389][T28346] wg1 speed is unknown, defaulting to 1000
[  476.631422][T28356] pimreg: entered allmulticast mode
[  476.645092][T28356] pimreg: left allmulticast mode
[  476.813794][T28346] lo speed is unknown, defaulting to 1000
[  478.976970][T28446] netlink: 'syz.0.9858': attribute type 1 has an invalid length.
[  478.985540][T28446] __nla_validate_parse: 3 callbacks suppressed
[  478.985558][T28446] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9858'.
[  478.991578][T28446] netlink: 'syz.0.9858': attribute type 2 has an invalid length.
[  478.999345][T28446] netlink: 'syz.0.9858': attribute type 1 has an invalid length.
[  479.047341][T28453] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  479.069662][T28450] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  479.076715][T28450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9860'.
[  479.194626][T28460] netlink: 268 bytes leftover after parsing attributes in process `syz.0.9864'.
[  479.198598][T28460] unsupported nla_type 65024
[  479.233633][T28463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  479.236579][T28463] IPv6: NLM_F_CREATE should be set when creating new route
[  479.239580][T28463] IPv6: NLM_F_CREATE should be set when creating new route
[  479.440477][T28470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9868'.
[  479.536518][T28474] bridge0: port 1(erspan0) entered blocking state
[  479.539184][T28474] bridge0: port 1(erspan0) entered disabled state
[  479.543194][T28474] erspan0: entered allmulticast mode
[  479.548366][T28474] erspan0: entered promiscuous mode
[  479.551909][T28474] bridge0: port 1(erspan0) entered blocking state
[  479.554659][T28474] bridge0: port 1(erspan0) entered forwarding state
[  479.584364][T28474] erspan0: left allmulticast mode
[  479.586509][T28474] erspan0: left promiscuous mode
[  479.589873][T28474] bridge0: port 1(erspan0) entered disabled state
[  479.605923][T28476] netlink: 'syz.2.9871': attribute type 7 has an invalid length.
[  479.608394][T28476] netlink: 'syz.2.9871': attribute type 3 has an invalid length.
[  479.610797][T28476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9871'.
[  480.134441][T28505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9884'.
[  480.316660][T28519] sctp: [Deprecated]: syz.1.9891 (pid 28519) Use of struct sctp_assoc_value in delayed_ack socket option.
[  480.316660][T28519] Use struct sctp_sack_info instead
[  480.407917][T28527] netlink: 'syz.0.9895': attribute type 15 has an invalid length.
[  480.610448][T28546] netlink: 'syz.1.9904': attribute type 1 has an invalid length.
[  480.613938][T28546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9904'.
[  480.617550][T28546] netlink: 'syz.1.9904': attribute type 1 has an invalid length.
[  480.755126][T28550] wireguard0: entered promiscuous mode
[  480.759506][T28550] wireguard0: entered allmulticast mode
[  481.118068][T28584] lo speed is unknown, defaulting to 1000
[  481.147532][T28586] syzkaller0: entered promiscuous mode
[  481.149358][T28586] syzkaller0: entered allmulticast mode
[  481.158111][T28584] wg1 speed is unknown, defaulting to 1000
[  482.640720][T28589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9923'.
[  482.733679][T28594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.736232][T28594] syzkaller0: entered promiscuous mode
[  482.737943][T28594] syzkaller0: entered allmulticast mode
[  482.758902][T28594] tipc: Resetting bearer <eth:syzkaller0>
[  482.766018][T28593] tipc: Resetting bearer <eth:syzkaller0>
[  482.780803][T28593] tipc: Disabling bearer <eth:syzkaller0>
[  482.795849][T28584] lo speed is unknown, defaulting to 1000
[  483.357348][T28628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9939'.
[  483.708938][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9949'.
[  484.999958][T28690] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9963'.
[  485.726857][T28694] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9965'.
[  485.948234][T28712] netlink: 'syz.0.9974': attribute type 6 has an invalid length.
[  486.048072][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9979'.
[  486.083273][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9979'.
[  486.124561][T28728] team0: left promiscuous mode
[  486.141523][T28728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  486.150036][  T794] lo speed is unknown, defaulting to 1000
[  486.158930][  T794] s: Port: 1 Link ACTIVE
[  486.455116][T28764] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  486.458865][T28762] IPVS: stopping master sync thread 28764 ...
[  486.724721][T28787] netlink: 'syz.0.10006': attribute type 12 has an invalid length.
[  486.938645][T28801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10012'.
[  487.063517][T28807] netlink: 204 bytes leftover after parsing attributes in process `syz.1.10015'.
[  487.067106][T28807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10015'.
[  487.869314][T28861] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  487.876537][T28861] syzkaller0: entered promiscuous mode
[  487.878480][T28861] syzkaller0: entered allmulticast mode
[  488.549486][T28887] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  489.156053][T28908] netlink: 'syz.1.10055': attribute type 11 has an invalid length.
[  489.270052][T28916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10059'.
[  489.741567][T28950] batadv2: entered allmulticast mode
[  489.744724][T28950] 8021q: adding VLAN 0 to HW filter on device batadv2
[  489.850213][T28963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10080'.
[  490.142276][T28985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.145863][T28985] syzkaller0: entered promiscuous mode
[  490.148080][T28985] syzkaller0: entered allmulticast mode
[  490.182439][T28985] tipc: Resetting bearer <eth:syzkaller0>
[  490.188354][T28983] tipc: Resetting bearer <eth:syzkaller0>
[  490.213130][T28983] tipc: Disabling bearer <eth:syzkaller0>
[  490.312518][T28995] netlink: 'syz.0.10096': attribute type 1 has an invalid length.
[  490.315657][T28995] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10096'.
[  490.319284][T28995] netlink: 'syz.0.10096': attribute type 1 has an invalid length.
[  490.322552][T28995] netlink: 'syz.0.10096': attribute type 2 has an invalid length.
[  490.368616][T29002] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  490.372209][T29001] IPVS: stopping backup sync thread 29002 ...
[  490.409580][T29004] netlink: 'syz.0.10100': attribute type 1 has an invalid length.
[  490.415704][T29004] netlink: 'syz.0.10100': attribute type 2 has an invalid length.
[  490.418830][T29004] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.10100'.
[  490.529987][T29013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10105'.
[  490.536464][T29013] openvswitch: netlink: Flow actions attr not present in new flow.
[  490.719104][T29029] netlink: 'syz.2.10111': attribute type 13 has an invalid length.
[  490.894012][T29041] wg2: entered promiscuous mode
[  490.895577][T29041] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  490.923541][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10118'.
[  490.959220][T29048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10120'.
[  491.184164][T29072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.187265][T29072] syzkaller0: entered promiscuous mode
[  491.189181][T29072] syzkaller0: entered allmulticast mode
[  491.225678][T29072] tipc: Resetting bearer <eth:syzkaller0>
[  491.229092][T29070] tipc: Resetting bearer <eth:syzkaller0>
[  491.242600][T29070] tipc: Disabling bearer <eth:syzkaller0>
[  491.468017][T29099] tipc: Enabled bearer <udp:s>, priority 10
[  492.220101][T29164] syzkaller1: entered promiscuous mode
[  492.223943][T29164] syzkaller1: entered allmulticast mode
[  492.371451][T29172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10175'.
[  492.671994][T29202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10190'.
[  492.690209][T29202] tipc: Disabling bearer <eth:team0>
[  492.716164][T29207] C: renamed from team_slave_0
[  492.719209][T29207] netlink: 'syz.0.10194': attribute type 3 has an invalid length.
[  492.721708][T29207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10194'.
[  492.729947][T29207] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  492.777900][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10195'.
[  493.519978][T29255] netlink: 'syz.0.10213': attribute type 1 has an invalid length.
[  493.707570][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10217'.
[  494.098577][T29285] netlink: 'syz.0.10227': attribute type 2 has an invalid length.
[  495.096434][T29319] xt_socket: unknown flags 0xd0
[  495.127830][T29320] netlink: 'syz.2.10239': attribute type 1 has an invalid length.
[  495.130323][T29320] NCSI netlink: No device for ifindex 0
[  495.150821][T29322] syzkaller1: entered promiscuous mode
[  495.153528][T29322] syzkaller1: entered allmulticast mode
[  495.200938][T29324] wg1: entered promiscuous mode
[  495.202822][T29324] wg1: entered allmulticast mode
[  495.479105][T29343] __nla_validate_parse: 3 callbacks suppressed
[  495.479120][T29343] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10250'.
[  495.554242][T29349] sctp: [Deprecated]: syz.1.10253 (pid 29349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.554242][T29349] Use struct sctp_sack_info instead
[  496.369416][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10276'.
[  496.379163][T29417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10276'.
[  496.976010][T29435] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10283'.
[  496.980019][T29434] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10283'.
[  497.573874][T29487] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10305'.
[  497.677748][T29491] lo speed is unknown, defaulting to 1000
[  497.680415][T29491] wg1 speed is unknown, defaulting to 1000
[  497.812656][T29491] lo speed is unknown, defaulting to 1000
[  497.994402][T29515] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  498.198003][T29529] netlink: 'syz.0.10325': attribute type 1 has an invalid length.
[  498.225539][T29529] gretap2: entered promiscuous mode
[  498.230245][T29529] bond2: (slave gretap2): making interface the new active one
[  498.236999][T29529] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  498.242232][T29529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10325'.
[  498.248258][T29529] 8021q: adding VLAN 0 to HW filter on device bond2
[  498.290624][T29536] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.10327'.
[  498.296672][T29536] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  498.299505][T29536] openvswitch: netlink: Message has 8454 unknown bytes.
[  498.695858][T29572] netlink: 'syz.1.10344': attribute type 1 has an invalid length.
[  498.699457][T29572] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10344'.
[  498.703189][T29572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10344'.
[  498.757939][T29579] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  498.798783][T29584] netlink: 'syz.2.10349': attribute type 15 has an invalid length.
[  498.837852][T29584] syzkaller0: entered promiscuous mode
[  498.839849][T29584] syzkaller0: entered allmulticast mode
[  500.906416][T29640] __nla_validate_parse: 1 callbacks suppressed
[  500.906435][T29640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10370'.
[  500.915941][T29640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10370'.
[  501.019245][T29655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10376'.
[  501.036128][T29654] lo speed is unknown, defaulting to 1000
[  501.039888][T29654] wg1 speed is unknown, defaulting to 1000
[  501.189606][T29654] lo speed is unknown, defaulting to 1000
[  501.235301][T29669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10382'.
[  501.418058][T29679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10386'.
[  501.439362][   T33] audit: type=1800 audit(1755718057.676:17): pid=29676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10383" name="memory.events" dev="tmpfs" ino=13900 res=0 errno=0
[  501.651200][T29696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10394'.
[  501.701156][T29700] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  501.990132][T29718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10405'.
[  503.062156][T29748] nbd7: detected capacity change from 0 to 875674160
[  503.066067][   T56] block nbd7: Receive control failed (result -32)
[  503.689216][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10435'.
[  503.710881][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10435'.
[  504.410262][T29809] netlink: 'syz.2.10443': attribute type 1 has an invalid length.
[  504.436064][T29809] bond4 (unregistering): Released all slaves
[  504.620839][T29815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10445'.
[  505.207955][T29829] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  505.218922][T29830] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  505.383568][T29844] lo speed is unknown, defaulting to 1000
[  505.386295][T29844] wg1 speed is unknown, defaulting to 1000
[  505.548754][T29844] lo speed is unknown, defaulting to 1000
[  505.580903][T29856] batman_adv: batadv0: Adding interface: macvlan1
[  505.587458][T29856] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.603440][T29856] batman_adv: batadv0: Interface activated: macvlan1
[  506.008505][T29882] __nla_validate_parse: 4 callbacks suppressed
[  506.008519][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10472'.
[  506.395742][T29924] openvswitch: netlink: IP tunnel dst address not specified
[  506.428436][T29926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.430888][T29926] syzkaller0: entered promiscuous mode
[  506.433147][T29926] syzkaller0: entered allmulticast mode
[  506.450260][T29926] tipc: Resetting bearer <eth:syzkaller0>
[  506.458349][T29925] tipc: Resetting bearer <eth:syzkaller0>
[  506.475468][T29925] tipc: Disabling bearer <eth:syzkaller0>
[  508.379708][T29980] netlink: 160 bytes leftover after parsing attributes in process `syz.2.10521'.
[  508.389564][T29980] NCSI netlink: No device for ifindex 0
[  508.631377][T30009] netlink: 'syz.2.10534': attribute type 21 has an invalid length.
[  508.635806][T30009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10534'.
[  509.076597][T30046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10552'.
[  509.679924][T30089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10573'.
[  510.049709][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027c05400: rx timeout, send abort
[  510.379989][T30105] netlink: 'syz.1.10581': attribute type 8 has an invalid length.
[  510.554097][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027c05400: abort rx timeout. Force session deactivation
[  510.582334][T30113] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10584'.
[  510.658420][T30125] bond0: option xmit_hash_policy: invalid value (8)
[  510.946929][T30143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.650374][T30173] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10609'.
[  511.656045][T30170] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10609'.
[  512.226956][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10621'.
[  512.315499][T30196] lo speed is unknown, defaulting to 1000
[  512.319118][T30196] wg1 speed is unknown, defaulting to 1000
[  512.453010][T30196] lo speed is unknown, defaulting to 1000
[  512.627755][T30201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10624'.
[  513.090801][T30223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10633'.
[  513.347738][   T33] audit: type=1800 audit(1755718069.586:18): pid=30233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10636" name="memory.events" dev="tmpfs" ino=18282 res=0 errno=0
[  514.138394][T30286] wg1: left promiscuous mode
[  514.140076][T30286] wg1: left allmulticast mode
[  514.143305][T30286] wg2: left promiscuous mode
[  514.145283][T30286] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  514.150381][ T2313] lo speed is unknown, defaulting to 1000
[  514.162386][ T2313] s: Port: 1 Link DOWN
[  514.191433][T30294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10663'.
[  514.226255][T30295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10662'.
[  514.258815][T30300] netlink: 'syz.0.10666': attribute type 12 has an invalid length.
[  514.262636][T30300] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.10666'.
[  514.292468][T30297] netlink: 'syz.2.10664': attribute type 1 has an invalid length.
[  514.300435][T30303] IPVS: length: 163 != 8
[  514.366494][T30297] bond4: (slave veth11): Enslaving as an active interface with a down link
[  514.377807][T30297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10664'.
[  514.385552][T30297] 8021q: adding VLAN 0 to HW filter on device bond4
[  515.613090][T30348] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10684'.
[  515.957976][T30371] team1: entered promiscuous mode
[  515.960204][T30371] team1: entered allmulticast mode
[  516.667259][T30365] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  516.922209][T30430] netlink: 'syz.2.10721': attribute type 1 has an invalid length.
[  516.925350][T30430] netlink: 'syz.2.10721': attribute type 2 has an invalid length.
[  516.980830][T30433] __nla_validate_parse: 2 callbacks suppressed
[  516.980847][T30433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10723'.
[  516.999276][T30436] syz_tun: entered allmulticast mode
[  517.024311][T30436] dvmrp1: entered allmulticast mode
[  517.031411][T30435] syz_tun: left allmulticast mode
[  517.301385][T30461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.358852][T30463] v: renamed from ip6_vti0 (while UP)
[  517.717603][T30492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10749'.
[  517.722715][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10749'.
[  517.769523][T30497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10751'.
[  517.774062][T30497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10751'.
[  518.172083][T30529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10766'.
[  518.177858][T30529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.393336][T30551] netlink: 'syz.2.10776': attribute type 96 has an invalid length.
[  518.635944][T30581] lo: entered allmulticast mode
[  518.647755][T30581] dvmrp1: entered allmulticast mode
[  518.653825][T30580] lo: left allmulticast mode
[  518.725346][T30587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10792'.
[  519.088215][T30608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10801'.
[  519.551217][T30638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10815'.
[  519.554606][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10815'.
[  520.496469][T30721] bond0: invalid ARP target 0.0.0.0 specified for addition
[  520.499763][T30721] bond0: option arp_ip_target: invalid value (0)
[  520.560689][T30727] tipc: Enabled bearer <eth:geneve1>, priority 1
[  520.590562][T30729] bond2: (slave gretap2): Releasing active interface
[  520.595633][T30729] bond2: (slave gretap2): the permanent HWaddr of slave - a6:cb:91:84:c6:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  520.600824][T30729] bond2: (slave gretap3): making interface the new active one
[  520.610892][T30729] bond2: (slave gretap3): Releasing active interface
[  520.617167][T30729] bond4: (slave batadv1): Releasing active interface
[  520.625354][T30729] bond0: (slave veth13): Releasing active interface
[  521.131683][T30755] sctp: [Deprecated]: syz.1.10870 (pid 30755) Use of int in max_burst socket option deprecated.
[  521.131683][T30755] Use struct sctp_assoc_value instead
[  521.600561][T30779] ipvlan2: entered promiscuous mode
[  522.255511][T30824] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  522.258750][T30824] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  523.118518][T30845] __nla_validate_parse: 5 callbacks suppressed
[  523.118531][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10910'.
[  523.125039][T30845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10910'.
[  523.129060][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10910'.
[  523.132261][T30845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10910'.
[  523.538708][T30880] netlink: 728 bytes leftover after parsing attributes in process `syz.1.10924'.
[  523.622509][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10923'.
[  523.734273][T30891] lo speed is unknown, defaulting to 1000
[  523.737917][T30891] wg1 speed is unknown, defaulting to 1000
[  523.940709][T30891] lo speed is unknown, defaulting to 1000
[  524.299271][T30923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.337427][T30924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  524.348305][T30924] syzkaller0: entered promiscuous mode
[  524.350045][T30924] syzkaller0: entered allmulticast mode
[  524.377591][T30924] tipc: Resetting bearer <eth:syzkaller0>
[  524.384479][T30922] tipc: Resetting bearer <eth:syzkaller0>
[  524.398580][T30922] tipc: Disabling bearer <eth:syzkaller0>
[  524.453794][T30934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10946'.
[  524.463401][T30935] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  524.818214][T30963] sctp: [Deprecated]: syz.2.10962 (pid 30963) Use of int in max_burst socket option.
[  524.818214][T30963] Use struct sctp_assoc_value instead
[  524.829293][T30965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10961'.
[  525.213228][T30991] netlink: 'syz.1.10975': attribute type 1 has an invalid length.
[  525.257122][T30991] vlan0: entered allmulticast mode
[  525.258994][T30991] bond7: entered allmulticast mode
[  525.532251][T31024] netlink: ct family unspecified
[  525.533988][T31024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.604090][T31032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.790028][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11004'.
[  526.266130][T31103] netlink: 'syz.2.11026': attribute type 1 has an invalid length.
[  526.341698][T31111] netlink: 'syz.2.11031': attribute type 1 has an invalid length.
[  526.376153][T31115] netlink: 'syz.0.11032': attribute type 1 has an invalid length.
[  526.379026][T31115] netlink: 'syz.0.11032': attribute type 2 has an invalid length.
[  526.382261][T31115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11032'.
[  526.411579][T31119] netlink: 'syz.0.11035': attribute type 21 has an invalid length.
[  526.471343][T31125] sctp: [Deprecated]: syz.2.11036 (pid 31125) Use of int in max_burst socket option.
[  526.471343][T31125] Use struct sctp_assoc_value instead
[  526.533848][T31128] netlink: 'syz.2.11038': attribute type 3 has an invalid length.
[  526.610734][T31132] lo speed is unknown, defaulting to 1000
[  526.614647][T31132] wg1 speed is unknown, defaulting to 1000
[  526.694108][T31135] lo speed is unknown, defaulting to 1000
[  526.697152][T31135] wg1 speed is unknown, defaulting to 1000
[  526.776625][T31132] lo speed is unknown, defaulting to 1000
[  527.041203][T31135] lo speed is unknown, defaulting to 1000
[  527.565830][T31181] 8021q: adding VLAN 0 to HW filter on device bond5
[  527.579456][T31185] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  527.676826][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  527.793390][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  528.231698][T31240] __nla_validate_parse: 3 callbacks suppressed
[  528.231715][T31240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11085'.
[  528.319961][T31242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  528.357688][T31242] netlink: 'syz.0.11086': attribute type 4 has an invalid length.
[  528.363434][T31242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11086'.
[  528.373134][T31242] : renamed from bond0 (while UP)
[  529.116819][T31269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11098'.
[  529.337065][T31280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11102'.
[  529.340933][T31280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11102'.
[  529.399455][T31282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  529.451230][T31282] netlink: 'syz.1.11103': attribute type 4 has an invalid length.
[  529.454564][T31282] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11103'.
[  529.544002][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11107'.
[  529.966186][T31339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11130'.
[  529.969208][T31339] 8021q: VLANs not supported on ipvlan1
[  530.068948][T31355] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  530.160849][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11141'.
[  530.219826][T31364] lo speed is unknown, defaulting to 1000
[  530.229249][T31364] wg1 speed is unknown, defaulting to 1000
[  530.436763][T31364] lo speed is unknown, defaulting to 1000
[  531.330036][T31449] lo speed is unknown, defaulting to 1000
[  531.335752][T31449] wg1 speed is unknown, defaulting to 1000
[  531.630266][T31449] lo speed is unknown, defaulting to 1000
[  531.784617][T31449] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11178'.
[  532.123705][T31477] dummy0: entered allmulticast mode
[  532.125838][T31476] dummy0: left allmulticast mode
[  532.208645][T31486] netlink: 'syz.0.11193': attribute type 2 has an invalid length.
[  532.211745][T31486] netlink: 'syz.0.11193': attribute type 2 has an invalid length.
[  532.620106][T31533] IPv6: sit1: Disabled Multicast RS
[  532.627776][T31533] sit1: entered allmulticast mode
[  532.990858][T31573] lo speed is unknown, defaulting to 1000
[  532.998828][T31573] wg1 speed is unknown, defaulting to 1000
[  533.171268][T31573] lo speed is unknown, defaulting to 1000
[  534.085772][T31573] __nla_validate_parse: 2 callbacks suppressed
[  534.085786][T31573] netlink: 248 bytes leftover after parsing attributes in process `syz.1.11233'.
[  534.358388][T31654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11259'.
[  534.591018][T31684] netlink: 'syz.0.11274': attribute type 5 has an invalid length.
[  534.595286][T31684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11274'.
[  534.693457][T31699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11277'.
[  534.696381][T31699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11277'.
[  534.707588][T31699] batadv0: entered promiscuous mode
[  534.710131][T31699] team0: entered promiscuous mode
[  534.712544][T31699] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  534.748382][T31702] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11283'.
[  534.836203][T31713] netlink: 'syz.2.11288': attribute type 21 has an invalid length.
[  534.839516][T31713] netlink: 'syz.2.11288': attribute type 6 has an invalid length.
[  534.845753][T31713] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11288'.
[  535.076535][T31737] sctp: [Deprecated]: syz.2.11298 (pid 31737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  535.076535][T31737] Use struct sctp_sack_info instead
[  535.410649][ T5717] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  536.230941][T31807] netlink: 'syz.2.11328': attribute type 2 has an invalid length.
[  536.299932][T31809] netlink: 'syz.0.11329': attribute type 9 has an invalid length.
[  536.300793][T31811] team0: Refused to change device type
[  536.304660][T31809] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11329'.
[  536.563459][T31831] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  536.600693][T31835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11339'.
[  536.604475][T31835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11339'.
[  536.607320][T31835] netlink: 'syz.2.11339': attribute type 1 has an invalid length.
[  537.540912][T31901] lo speed is unknown, defaulting to 1000
[  537.544583][T31901] wg1 speed is unknown, defaulting to 1000
[  537.601570][T31904] lo speed is unknown, defaulting to 1000
[  537.613712][T31904] wg1 speed is unknown, defaulting to 1000
[  537.762603][T31901] lo speed is unknown, defaulting to 1000
[  537.850304][T31914] lo speed is unknown, defaulting to 1000
[  537.855983][T31914] wg1 speed is unknown, defaulting to 1000
[  537.915348][T31904] lo speed is unknown, defaulting to 1000
[  538.179644][T31914] lo speed is unknown, defaulting to 1000
[  538.962743][T31958] netlink: 'syz.2.11387': attribute type 13 has an invalid length.
[  538.965509][T31958] netlink: 'syz.2.11387': attribute type 17 has an invalid length.
[  539.064009][T31958] 8021q: adding VLAN 0 to HW filter on device team0
[  539.070601][T31958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  539.076011][T10931] lo speed is unknown, defaulting to 1000
[  539.079109][T10931] s: Port: 1 Link ACTIVE
[  539.100877][T31959] lo speed is unknown, defaulting to 1000
[  539.104294][T31959] wg1 speed is unknown, defaulting to 1000
[  539.210344][T31959] lo speed is unknown, defaulting to 1000
[  540.630571][T31975] team0: Refused to change device type
[  540.650192][T31977] netlink: 'syz.1.11393': attribute type 1 has an invalid length.
[  540.766608][T31985] batman_adv: batadv0: Interface deactivated: macvlan1
[  540.768897][T31985] batman_adv: batadv0: Removing interface: macvlan1
[  540.777231][T31985] bond2: (slave gretap2): Releasing active interface
[  540.814413][T31986] team0: Mode changed to "loadbalance"
[  540.860112][T31988] vti0: entered promiscuous mode
[  540.905928][T31990] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  540.908444][T31990] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  541.278104][T32005] __nla_validate_parse: 2 callbacks suppressed
[  541.278894][T32005] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11401'.
[  541.806781][T32012] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11403'.
[  541.815336][T32012] pim6reg: entered allmulticast mode
[  541.818309][T32012] pim6reg: left allmulticast mode
[  541.960094][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11405'.
[  542.095990][T32020] ip_vti0: Master is either lo or non-ether device
[  542.100700][T32020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  543.059200][T32038] can: request_module (can-proto-0) failed.
[  543.061394][T32038] netlink: 'syz.1.11409': attribute type 1 has an invalid length.
[  544.021742][T32056] ip6tnl3: entered promiscuous mode
[  544.029448][T32056] ip6tnl3: entered allmulticast mode
[  544.143927][T32074] netlink: 'syz.1.11418': attribute type 23 has an invalid length.
[  544.192001][T32079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11421'.
[  544.207491][T32079] netlink: 'syz.2.11421': attribute type 1 has an invalid length.
[  544.235970][T32079] 8021q: adding VLAN 0 to HW filter on device bond6
[  544.272246][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  544.284259][T32087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.290430][T32087] syzkaller0: entered promiscuous mode
[  544.292900][T32087] syzkaller0: entered allmulticast mode
[  544.313561][T32087] tipc: Resetting bearer <eth:syzkaller0>
[  544.316346][T32087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11422'.
[  544.398614][T32093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.441431][T32102] netlink: 'syz.2.11427': attribute type 3 has an invalid length.
[  544.444875][T32102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11427'.
[  544.459909][T32093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.554782][T32093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.579606][T32116] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20004
[  544.602529][T32118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11431'.
[  544.647496][T32093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.733386][T31872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.749491][T31872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.752719][T31872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.759076][T32127] lo speed is unknown, defaulting to 1000
[  544.777310][T32127] wg1 speed is unknown, defaulting to 1000
[  544.779304][T31872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.809663][T32131] geneve6: entered allmulticast mode
[  544.822404][ T5886] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.827019][ T5886] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.831304][ T5886] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.842248][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.850480][T32135] netlink: 'syz.0.11435': attribute type 1 has an invalid length.
[  544.973635][T32127] lo speed is unknown, defaulting to 1000
[  544.990185][T32142] syzkaller0: entered promiscuous mode
[  544.992876][T32142] syzkaller0: entered allmulticast mode
[  544.996556][T32142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11437'.
[  545.689367][T32145] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  545.695418][ T2313] lo speed is unknown, defaulting to 1000
[  545.697200][ T2313] s: Port: 1 Link DOWN
[  545.745739][T32152] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  545.749180][T32152] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  545.766813][T32150] veth1_to_team: left allmulticast mode
[  545.769426][T32150] batadv_slave_0: left promiscuous mode
[  545.771663][T32150] batadv_slave_0: left allmulticast mode
[  545.798085][T32150] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  545.821491][T32150] geneve0: left promiscuous mode
[  545.827314][T32150] batadv2: left allmulticast mode
[  545.835432][ T5717] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.838664][ T5717] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.848181][ T5717] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.851734][T32155] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  545.858069][ T5717] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.905548][T32158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11443'.
[  545.914567][T32158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11443'.
[  545.978292][T32162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  546.007219][T32165] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  546.098338][T32174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  546.184686][T32176] lo speed is unknown, defaulting to 1000
[  546.188778][T32176] wg1 speed is unknown, defaulting to 1000
[  546.312204][T32176] lo speed is unknown, defaulting to 1000
[  546.433146][T23084] Bluetooth: hci2: command 0x0405 tx timeout
[  546.530587][T32181] __nla_validate_parse: 1 callbacks suppressed
[  546.530600][T32181] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.11450'.
[  546.536408][T32181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11450'.
[  546.721236][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11453'.
[  546.880598][T32194] netlink: 'syz.2.11455': attribute type 1 has an invalid length.
[  546.881300][T32196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11455'.
[  546.884195][T32194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11455'.
[  546.926579][T32198] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11456'.
[  547.020664][T32204] netlink: 'syz.2.11457': attribute type 1 has an invalid length.
[  547.041263][T32204] 8021q: adding VLAN 0 to HW filter on device bond7
[  547.281976][T32220] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11463'.
[  547.285671][T32221] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11463'.
[  547.312941][T32220] veth0_to_bond: entered allmulticast mode
[  547.422408][T32226] lo speed is unknown, defaulting to 1000
[  547.425094][T32226] wg1 speed is unknown, defaulting to 1000
[  547.515179][T32226] lo speed is unknown, defaulting to 1000
[  547.815426][T32238] netlink: 'syz.2.11469': attribute type 1 has an invalid length.
[  547.827771][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11469'.
[  547.837801][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11469'.
[  548.199500][T32255] rdma_rxe: rxe_newlink: failed to add lo
[  548.273310][T32259] pim6reg1: entered promiscuous mode
[  548.275600][T32259] pim6reg1: entered allmulticast mode
[  548.335186][T32259] syzkaller0: left promiscuous mode
[  548.337051][T32259] syzkaller0: left allmulticast mode
[  548.356527][T32259] 8021q: adding VLAN 0 to HW filter on device bond9
[  548.360057][T32259] team0: Port device bond9 added
[  548.430624][T32265] 8021q: adding VLAN 0 to HW filter on device bond10
[  548.441670][T32265] netlink: 'syz.2.11477': attribute type 27 has an invalid length.
[  548.441701][T32266] netlink: 'syz.2.11477': attribute type 27 has an invalid length.
[  548.495622][T32270] vlan0: entered promiscuous mode
[  548.894812][T32294] syzkaller0: entered promiscuous mode
[  548.899343][T32294] syzkaller0: entered allmulticast mode
[  549.021153][T32300] lo speed is unknown, defaulting to 1000
[  549.028193][T32300] wg1 speed is unknown, defaulting to 1000
[  549.197089][T32300] lo speed is unknown, defaulting to 1000
[  549.419507][T32314] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.047378][T32348] nbd: must specify at least one socket
[  550.087396][T32350] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.166952][T32350] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.254743][T32350] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.319507][T32350] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.320797][T31872] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  550.461301][ T5717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.481386][ T5717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.507675][ T5717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.523581][ T5717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.657174][T32390] netlink: 'syz.2.11511': attribute type 7 has an invalid length.
[  550.754572][T32395] lo speed is unknown, defaulting to 1000
[  550.757880][T32395] wg1 speed is unknown, defaulting to 1000
[  550.936898][T32395] lo speed is unknown, defaulting to 1000
[  551.007997][T32410] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  551.013430][T32410] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  551.015884][T32410] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  551.333314][T32423] lo speed is unknown, defaulting to 1000
[  551.344010][T32423] wg1 speed is unknown, defaulting to 1000
[  551.356170][T32425] lo speed is unknown, defaulting to 1000
[  551.359089][T32425] wg1 speed is unknown, defaulting to 1000
[  551.452442][T32423] lo speed is unknown, defaulting to 1000
[  551.620579][T32428] macsec1: entered promiscuous mode
[  551.624994][T32428] macsec1: entered allmulticast mode
[  551.627138][T32428] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode
[  551.630934][T32425] lo speed is unknown, defaulting to 1000
[  551.821255][T32433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.833546][T32433] tipc: Resetting bearer <eth:syzkaller0>
[  551.837336][T32433] netlink: 'syz.0.11526': attribute type 12 has an invalid length.
[  551.881048][T32433] tipc: Resetting bearer <eth:syzkaller0>
[  551.932085][T32439] netlink: 'syz.1.11528': attribute type 1 has an invalid length.
[  551.991049][T32439] __nla_validate_parse: 24 callbacks suppressed
[  551.991064][T32439] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11528'.
[  552.048111][T32442] lo speed is unknown, defaulting to 1000
[  552.051242][T32442] wg1 speed is unknown, defaulting to 1000
[  552.106764][T32451] can: request_module (can-proto-3) failed.
[  552.110640][T32451] netlink: 'syz.0.11532': attribute type 10 has an invalid length.
[  552.206693][T32442] lo speed is unknown, defaulting to 1000
[  552.321644][T32466] netlink: 'syz.1.11537': attribute type 1 has an invalid length.
[  552.349316][T32465] pim6reg1: entered promiscuous mode
[  552.351511][T32465] pim6reg1: entered allmulticast mode
[  552.412513][T32469] netlink: 'syz.2.11539': attribute type 13 has an invalid length.
[  552.414945][T32469] netlink: 'syz.2.11539': attribute type 17 has an invalid length.
[  552.446886][T32469] 8021q: adding VLAN 0 to HW filter on device team0
[  552.455686][T32469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.460512][T29761] lo speed is unknown, defaulting to 1000
[  552.465650][T29761] s: Port: 1 Link ACTIVE
[  552.471264][T32465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11538'.
[  552.481021][T32465] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  552.488371][T32465] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  552.490819][T32465] tipc: Resetting bearer <eth:syzkaller0>
[  552.516666][T32465] 8021q: adding VLAN 0 to HW filter on device bond4
[  552.523941][T32465] bond4: entered promiscuous mode
[  552.526138][T32465] team0: Port device bond4 added
[  552.789014][T32500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  552.799782][T32500] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  552.805345][T32500] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  552.808368][T32500] tipc: Resetting bearer <eth:syzkaller0>
[  552.858345][T32508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11551'.
[  552.899489][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11550'.
[  552.984912][T32508] team0 (unregistering): left promiscuous mode
[  552.987204][T32508] bond4: left promiscuous mode
[  552.997669][T32508] team0 (unregistering): Port device bond4 removed
[  553.155526][T32516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11552'.
[  553.167577][T32516] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.233447][T32516] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.237596][T32526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11556'.
[  553.277771][T32516] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.316542][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.342689][T32516] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.426163][ T5717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.443675][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.460538][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.480548][T32530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11558'.
[  553.486379][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.543162][T32537] nbd: nbd0 already in use
[  553.589917][T32539] netlink: 272 bytes leftover after parsing attributes in process `syz.0.11560'.
[  553.613591][T32540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11559'.
[  553.617566][T32539] tipc: Resetting bearer <eth:syzkaller0>
[  553.628490][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11560'.
[  553.650957][T32542] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  553.657962][T32542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.796068][T32551] netlink: zone id is out of range
[  553.798200][T32551] netlink: zone id is out of range
[  553.800367][T32551] netlink: zone id is out of range
[  553.805095][T32551] netlink: zone id is out of range
[  553.807193][T32551] netlink: zone id is out of range
[  553.809156][T32551] netlink: zone id is out of range
[  553.899518][T32559] netlink: 'syz.1.11568': attribute type 2 has an invalid length.
[  553.917290][T32559] k*]: entered promiscuous mode
[  553.940729][T32559] veth0_to_team: entered promiscuous mode
[  553.942967][T32559] veth0_to_team: entered allmulticast mode
[  554.096799][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  554.100738][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  554.104516][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  554.107834][ T5717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  554.159715][T32570] netlink: 'syz.1.11573': attribute type 1 has an invalid length.
[  554.186586][T32572] veth0_vlan: left promiscuous mode
[  554.189558][T32572] vlan0: entered promiscuous mode
[  554.191610][T32572] veth0_vlan: entered promiscuous mode
[  554.268461][T32578] netlink: 'syz.0.11577': attribute type 21 has an invalid length.
[  554.353328][T32582] 8021q: adding VLAN 0 to HW filter on device bond10
[  554.417972][T32588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  554.421720][T32589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  554.536467][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812346d400: rx timeout, send abort
[  554.661675][T32611] 8021q: adding VLAN 0 to HW filter on device bond11
[  554.684515][T32608] bond12: (slave geneve8): Enslaving as an active interface with an up link
[  554.687916][ T5886] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  554.694438][ T5886] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  554.698388][ T5886] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  554.701335][ T5886] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  555.034973][T32626] veth0_to_bond: left allmulticast mode
[  555.037421][T32626] vlan0: left promiscuous mode
[  555.039116][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812346d400: abort rx timeout. Force session deactivation
[  555.109580][T32626] team1: left promiscuous mode
[  555.115029][T32626] team1: left allmulticast mode
[  555.127373][T32626] tipc: Resetting bearer <eth:syzkaller0>
[  555.130223][T32626] syzkaller0: left promiscuous mode
[  555.132418][T32626] syzkaller0: left allmulticast mode
[  555.137497][T32626] ip6tnl3: left promiscuous mode
[  555.139546][T32626] ip6tnl3: left allmulticast mode
[  555.154064][T32626] geneve6: left allmulticast mode
[  555.217875][T32242] lo speed is unknown, defaulting to 1000
[  555.220261][T32242] s: Port: 1 Link DOWN
[  555.222153][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.225378][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.238989][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.242406][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.245671][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.248798][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.259910][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.263367][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.533413][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812346c800: rx timeout, send abort
[  555.770705][T32666] validate_nla: 35 callbacks suppressed
[  555.770720][T32666] netlink: 'syz.2.11598': attribute type 1 has an invalid length.
[  555.776853][T32666] netlink: 'syz.2.11598': attribute type 2 has an invalid length.
[  555.780482][T32666] vlan0: entered promiscuous mode
[  555.896491][T32679] netlink: 'syz.1.11602': attribute type 9 has an invalid length.
[  555.925376][T32680] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  555.929605][T32680] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  555.948455][T32678] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  555.950564][T32682] netlink: 'syz.1.11602': attribute type 8 has an invalid length.
[  555.952392][T32678] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  555.976644][T32682] bond0: entered promiscuous mode
[  555.979479][T32682] bond0: left promiscuous mode
[  556.015171][T32679] lo speed is unknown, defaulting to 1000
[  556.017805][T32679] wg1 speed is unknown, defaulting to 1000
[  556.036877][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812346c800: abort rx timeout. Force session deactivation
[  556.133170][T32690] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  556.212534][T32679] lo speed is unknown, defaulting to 1000
[  556.638581][T32716] netlink: 'syz.1.11611': attribute type 1 has an invalid length.
[  556.804067][T32727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.828106][T32725] tipc: Disabling bearer <eth:syzkaller0>
[  557.047784][T32738] lo speed is unknown, defaulting to 1000
[  557.054313][T32738] wg1 speed is unknown, defaulting to 1000
[  557.082962][T32746] __nla_validate_parse: 55 callbacks suppressed
[  557.082976][T32746] netlink: 192 bytes leftover after parsing attributes in process `syz.1.11618'.
[  557.088096][T32746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11618'.
[  557.109993][T32748] lo speed is unknown, defaulting to 1000
[  557.117304][T32748] wg1 speed is unknown, defaulting to 1000
[  557.200660][T32738] lo speed is unknown, defaulting to 1000
[  557.353931][T32748] lo speed is unknown, defaulting to 1000
[  560.183218][T32761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.189537][T32761] syzkaller0: entered promiscuous mode
[  560.191320][T32761] syzkaller0: entered allmulticast mode
[  560.197684][T32765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11627'.
[  560.206782][T32765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11627'.
[  560.271248][T32760] tipc: Resetting bearer <eth:syzkaller0>
[  560.288019][T32760] tipc: Disabling bearer <eth:syzkaller0>
[  560.453131][  T308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  560.461286][  T308] syzkaller0: entered promiscuous mode
[  560.466897][  T308] syzkaller0: entered allmulticast mode
[  560.596925][  T316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11635'.
[  560.614742][  T316] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  560.787090][  T321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11634'.
[  560.800420][  T332] netlink: 'syz.2.11640': attribute type 1 has an invalid length.
[  560.820750][  T332] netlink: 'syz.2.11640': attribute type 1 has an invalid length.
[  560.982853][  T340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11644'.
[  561.269262][  T365] netlink: 'syz.2.11653': attribute type 1 has an invalid length.
[  561.297859][  T365] 8021q: adding VLAN 0 to HW filter on device bond14
[  561.333450][  T365] 8021q: adding VLAN 0 to HW filter on device bond14
[  561.336563][  T365] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  561.342732][  T365] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  561.381427][  T371] bond14: (slave bridge8): Enslaving as an active interface with a down link
[  561.439822][  T373] lo speed is unknown, defaulting to 1000
[  561.442749][  T373] wg1 speed is unknown, defaulting to 1000
[  561.546543][  T381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  561.609070][  T373] lo speed is unknown, defaulting to 1000
[  561.673926][  T388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11659'.
[  561.698337][  T388] xfrm0: entered promiscuous mode
[  561.700739][  T388] xfrm0: entered allmulticast mode
[  561.744459][  T391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11660'.
[  561.749554][  T391] net_ratelimit: 168 callbacks suppressed
[  561.749566][  T391] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  561.753869][  T391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.925173][  T397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11663'.
[  562.271687][  T411] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  562.282570][  T408] block nbd8: server does not support multiple connections per device.
[  562.287389][  T408] block nbd8: shutting down sockets
[  562.318059][  T410] netlink: 'syz.1.11669': attribute type 4 has an invalid length.
[  562.423932][  T416] bond0: entered promiscuous mode
[  562.428513][  T416] bond0: left promiscuous mode
[  562.447209][  T418] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  562.462648][  T418] bond4: (slave veth11): Releasing active interface
[  562.468596][  T418] bond5: (slave ip6gretap3): Removing an active aggregator
[  562.474091][  T418] bond5: (slave ip6gretap3): Releasing backup interface
[  562.479645][  T418] team0: Port device bond9 removed
[  562.483395][  T418] bond12: (slave geneve8): Releasing backup interface
[  562.488363][  T418] bond14: (slave bridge8): Releasing active interface
[  562.523229][  T418] netlink: 'syz.2.11672': attribute type 10 has an invalid length.
[  562.526374][  T418] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[  562.535653][  T418] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  562.539360][  T418] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  562.604444][  T428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11676'.
[  562.607495][  T428] netlink: 62 bytes leftover after parsing attributes in process `syz.0.11676'.
[  562.611352][  T429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11675'.
[  562.637176][  T428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11676'.
[  562.708029][  T437] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  562.948250][  T450] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11684'.
[  563.027179][  T457] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  563.048384][  T457] lo speed is unknown, defaulting to 1000
[  563.052361][  T457] wg1 speed is unknown, defaulting to 1000
[  563.210941][  T457] lo speed is unknown, defaulting to 1000
[  563.384252][  T461] geneve2: entered promiscuous mode
[  563.386926][  T461] geneve2: entered allmulticast mode
[  563.390619][ T5893] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 57954 - 0
[  563.396044][ T5893] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 41249 - 0
[  563.403517][ T5893] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 57954 - 0
[  563.413270][ T5893] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 41249 - 0
[  563.434154][ T5893] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 57954 - 0
[  563.454591][ T5893] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 41249 - 0
[  563.457667][ T5893] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 57954 - 0
[  563.460507][ T5893] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 41249 - 0
[  563.856111][  T481] lo speed is unknown, defaulting to 1000
[  563.867683][  T484] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  563.875768][  T481] wg1 speed is unknown, defaulting to 1000
[  564.023083][  T481] lo speed is unknown, defaulting to 1000
[  564.053408][  T489] veth0_to_team: left promiscuous mode
[  564.055155][  T489] veth0_to_team: left allmulticast mode
[  564.071517][  T489] xfrm0: left promiscuous mode
[  564.073359][  T489] xfrm0: left allmulticast mode
[  564.076126][  T489] geneve2: left promiscuous mode
[  564.077835][  T489] geneve2: left allmulticast mode
[  564.085076][ T5886] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 57954 - 0
[  564.087912][ T5886] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 41249 - 0
[  564.100775][ T5886] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 57954 - 0
[  564.104533][ T5886] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 41249 - 0
[  564.112148][ T5886] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 57954 - 0
[  564.118315][ T5886] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 41249 - 0
[  564.124431][ T5886] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 57954 - 0
[  564.129635][ T5886] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 41249 - 0
[  564.181121][  T492] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  564.416024][  T511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11703'.
[  564.424622][  T510] syzkaller1: entered allmulticast mode
[  564.627062][  T517] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  564.740145][  T522] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.747056][  T522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.781658][  T519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  564.787826][  T522] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.791417][  T522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.847812][  T522] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.851755][  T522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.922948][  T522] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  564.927404][  T522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.007368][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  565.010890][ T5717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.033582][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  565.039799][ T5717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.048863][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  565.054979][ T5717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.067270][ T5717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  565.070821][ T5717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.182647][  T536] netlink: 'syz.1.11715': attribute type 1 has an invalid length.
[  565.201626][  T536] 8021q: adding VLAN 0 to HW filter on device bond12
[  565.225969][  T536] bond12: (slave ip6gretap1): making interface the new active one
[  565.230389][  T536] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link
[  565.265377][  T536] veth23: entered promiscuous mode
[  565.269054][  T536] bond12: (slave veth23): Enslaving as an active interface with a down link
[  565.275798][  T536] erspan0: entered allmulticast mode
[  565.330172][  T546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11717'.
[  565.440223][  T551] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.443804][  T550] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.578815][  T564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11725'.
[  565.607850][  T564] 8021q: adding VLAN 0 to HW filter on device bond13
[  565.634082][  T564] bond13: (slave bridge7): Enslaving as an active interface with an up link
[  565.776296][  T583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11728'.
[  566.090769][  T609] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  566.233124][  T611] netlink: 'syz.2.11739': attribute type 10 has an invalid length.
[  566.284374][  T615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11740'.
[  566.434492][  T623] lo speed is unknown, defaulting to 1000
[  566.438023][  T623] wg1 speed is unknown, defaulting to 1000
[  566.574875][  T623] lo speed is unknown, defaulting to 1000
[  566.717374][  T592] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  566.808704][  T633] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  567.147487][  T656] netlink: 'syz.2.11753': attribute type 16 has an invalid length.
[  567.150680][  T656] netlink: 'syz.2.11753': attribute type 17 has an invalid length.
[  567.154436][  T656] tipc: Resetting bearer <eth:syzkaller0>
[  592.773248][  T669] vlan1: entered promiscuous mode
[  592.775250][  T669] hsr_slave_1: entered promiscuous mode
[  592.777024][  T669] vlan1: entered allmulticast mode
[  592.778574][  T669] hsr_slave_1: entered allmulticast mode
[  592.826485][  T669] __nla_validate_parse: 5 callbacks suppressed
[  592.826497][  T669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11757'.
[  592.890356][  T670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  593.337079][  T680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.350323][  T679] tipc: Resetting bearer <eth:syzkaller0>
[  593.719985][  T686] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11761'.
[  593.725169][  T686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11761'.
[  594.803950][  T679] tipc: Disabling bearer <eth:syzkaller0>
[  594.808132][  T685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11761'.
[  594.915915][  T693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11763'.
[  594.929961][  T695] netlink: 'syz.1.11764': attribute type 11 has an invalid length.
[  594.935387][  T695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11764'.
[  594.939491][  T695] netlink: 'syz.1.11764': attribute type 11 has an invalid length.
[  594.943850][  T695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11764'.
[  594.947794][  T693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11763'.
[  594.951412][  T695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11764'.
[  594.960441][  T695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11764'.
[  594.960621][ T5717] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  594.967161][ T5717] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.970639][ T5717] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.975845][ T5717] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  595.010763][  T697] netlink: 'syz.0.11765': attribute type 12 has an invalid length.
[  595.017031][  T697] netlink: 'syz.0.11765': attribute type 12 has an invalid length.
[  595.037672][  T700] vlan0: left promiscuous mode
[  595.044761][  T700] syzkaller0: left promiscuous mode
[  595.046385][  T700] syzkaller0: left allmulticast mode
[  595.093214][  T702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.095818][  T702] IPv6: NLM_F_CREATE should be set when creating new route
[  595.114478][  T704] vxcan2: entered promiscuous mode
[  595.252992][  T707] 8021q: adding VLAN 0 to HW filter on device team0
[  595.257254][  T707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  595.262266][T10931] lo speed is unknown, defaulting to 1000
[  595.263987][T10931] s: Port: 1 Link ACTIVE
[  595.292468][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  595.742080][ T2313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  595.804038][T31263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.806821][T31263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.817826][  T714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  595.821705][  T714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  595.924712][  T717] netlink: 'syz.0.11771': attribute type 10 has an invalid length.
[  596.008791][  T721] tipc: Resetting bearer <eth:syzkaller0>
[  596.032552][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  596.195004][  T733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  596.199508][  T733] tipc: Resetting bearer <eth:syzkaller0>
[  596.308763][  T737] netlink: 'syz.0.11779': attribute type 1 has an invalid length.
[  596.340355][  T737] 8021q: adding VLAN 0 to HW filter on device bond5
[  596.393996][  T740] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  597.083004][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  597.089773][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  597.153111][  T762] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  597.347408][  T779] lo speed is unknown, defaulting to 1000
[  597.352628][  T779] wg1 speed is unknown, defaulting to 1000
[  597.527433][T10931] lo speed is unknown, defaulting to 1000
[  597.538874][T10931] syz2: Port: 1 Link DOWN
[  597.549322][  T779] lo speed is unknown, defaulting to 1000
[  597.562103][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  597.583681][  T795] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  597.891545][  T809] __nla_validate_parse: 5 callbacks suppressed
[  597.891562][  T809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11799'.
[  597.928088][  T811] netlink: 47 bytes leftover after parsing attributes in process `syz.2.11800'.
[  597.930965][  T813] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  597.964906][  T811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11800'.
[  598.032594][  T817] netlink: 212936 bytes leftover after parsing attributes in process `syz.2.11803'.
[  598.139709][  T827] netlink: 'syz.2.11806': attribute type 2 has an invalid length.
[  598.146697][  T827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.185576][  T833] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  598.192872][  T827] 8021q: adding VLAN 0 to HW filter on device bond15
[  598.198114][  T827] bond0: (slave bond15): Enslaving as an active interface with a down link
[  598.475097][  T847] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11812'.
[  598.549477][  T850] netlink: 'syz.1.11813': attribute type 2 has an invalid length.
[  598.620920][  T850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  598.635728][  T850] veth0_to_team: entered promiscuous mode
[  598.638338][  T850] veth0_to_team: entered allmulticast mode
[  598.771966][  T854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  598.907278][  T860] netlink: 248 bytes leftover after parsing attributes in process `syz.2.11815'.
[  599.105591][  T873] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  599.116713][  T873] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  599.239387][  T881] netlink: 'syz.0.11821': attribute type 1 has an invalid length.
[  599.243003][  T881] netlink: 208 bytes leftover after parsing attributes in process `syz.0.11821'.
[  599.333325][  T886] netlink: 'syz.0.11822': attribute type 12 has an invalid length.
[  599.351145][  T887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  599.357861][  T887] syzkaller0: entered promiscuous mode
[  599.360086][  T887] syzkaller0: entered allmulticast mode
[  599.589312][  T914] nbd: couldn't find device at index 536870912
[  599.589805][  T915] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11829'.
[  599.610661][  T917] tap0: tun_chr_ioctl cmd 1074025677
[  599.616815][  T917] tap0: linktype set to 804
[  599.635785][  T920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11830'.
[  599.776607][  T933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11834'.
[  600.138589][  T951] pim6reg1: entered promiscuous mode
[  600.140704][  T951] pim6reg1: entered allmulticast mode
[  600.144941][  T953] vxcan1: entered allmulticast mode
[  600.328207][  T963] lo speed is unknown, defaulting to 1000
[  600.332204][  T963] wg1 speed is unknown, defaulting to 1000
[  600.386395][  T968] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  600.616324][  T974] validate_nla: 3 callbacks suppressed
[  600.616340][  T974] netlink: 'syz.2.11847': attribute type 14 has an invalid length.
[  600.619444][  T963] lo speed is unknown, defaulting to 1000
[  600.622773][  T974] netlink: 'syz.2.11847': attribute type 14 has an invalid length.
[  600.654614][  T974] tipc: MTU too low for tipc bearer
[  600.899399][  T992] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  600.980332][  T994] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000
[  601.188565][ T1007] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  601.472274][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.564403][ T1026] netlink: 'syz.1.11863': attribute type 13 has an invalid length.
[  602.012685][ T1042] netlink: 'syz.1.11866': attribute type 10 has an invalid length.
[  602.016712][ T1042] netlink: 'syz.1.11866': attribute type 10 has an invalid length.
[  602.036325][ T1043] netlink: 'syz.2.11865': attribute type 1 has an invalid length.
[  602.043247][ T1043] netlink: 'syz.2.11865': attribute type 1 has an invalid length.
[  602.058639][ T1043] netlink: 'syz.2.11865': attribute type 1 has an invalid length.
[  602.125406][ T1043] 8021q: adding VLAN 0 to HW filter on device bond16
[  602.299989][ T1047] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  602.840852][ T1056] netlink: 'syz.1.11871': attribute type 10 has an invalid length.
[  602.855159][ T1056] netlink: 'syz.1.11871': attribute type 10 has an invalid length.
[  602.948534][ T1064] __nla_validate_parse: 6 callbacks suppressed
[  602.948549][ T1064] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11874'.
[  602.959190][ T1064] batadv0: entered promiscuous mode
[  602.960902][ T1064] batadv0: entered allmulticast mode
[  603.354366][ T1116] netlink: 276 bytes leftover after parsing attributes in process `syz.0.11882'.
[  604.071077][ T1135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11888'.
[  604.078161][ T1135] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  604.099737][ T1150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11892'.
[  604.106159][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11893'.
[  604.130685][ T1149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11893'.
[  604.168606][ T1152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  604.176329][ T1152] syzkaller0: entered promiscuous mode
[  604.178554][ T1152] syzkaller0: entered allmulticast mode
[  604.183273][ T1153] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  604.203375][ T1154] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.11893'.
[  604.207949][ T1152] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  604.224281][ T1152] tipc: Resetting bearer <eth:syzkaller0>
[  604.228442][ T1151] tipc: Resetting bearer <eth:syzkaller0>
[  604.240808][ T1151] tipc: Disabling bearer <eth:syzkaller0>
[  605.229758][ T1170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11900'.
[  605.280442][ T1177] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.11903'.
[  605.344028][ T1180] lo speed is unknown, defaulting to 1000
[  605.347736][ T1180] wg1 speed is unknown, defaulting to 1000
[  605.360435][ T1181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11904'.
[  605.410057][ T1181] ip6gretap0: entered promiscuous mode
[  605.414303][ T1181] macsec2: entered promiscuous mode
[  605.416214][ T1181] macsec2: entered allmulticast mode
[  605.418046][ T1181] ip6gretap0: entered allmulticast mode
[  605.623533][ T1180] lo speed is unknown, defaulting to 1000
[  605.778414][ T1205] validate_nla: 3 callbacks suppressed
[  605.778431][ T1205] netlink: 'syz.1.11911': attribute type 1 has an invalid length.
[  605.786782][ T1205] netlink: 'syz.1.11911': attribute type 1 has an invalid length.
[  606.630696][ T1235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.729753][ T1240] 8021q: adding VLAN 0 to HW filter on device bond10
[  606.749329][ T1240] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  606.754503][ T1240] bond10: (slave macvlan0): Enslaving as a backup interface with a down link
[  606.767557][ T1241] vlan1: entered allmulticast mode
[  606.769550][ T1241] bridge_slave_0: entered allmulticast mode
[  606.792324][ T1240] bond12: (slave ip6gretap1): Releasing active interface
[  606.794807][ T1240] bond12: (slave ip6gretap1): the permanent HWaddr of slave - 9e:4f:0d:38:e3:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  606.803665][ T1240] bond12: (slave veth23): Releasing active interface
[  606.809422][ T1240] bond13: (slave bridge7): Releasing backup interface
[  606.816072][ T1240] bond10: (slave macvlan0): Releasing backup interface
[  606.868791][ T1244] syzkaller1: entered promiscuous mode
[  606.870898][ T1244] syzkaller1: entered allmulticast mode
[  606.990207][ T1246] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  606.995237][ T1246] macsec3: entered promiscuous mode
[  606.997511][ T1246] macsec3: entered allmulticast mode
[  606.999652][ T1246] ip6gretap0: entered allmulticast mode
[  607.037439][ T1249] lo speed is unknown, defaulting to 1000
[  607.041144][ T1249] wg1 speed is unknown, defaulting to 1000
[  607.259945][ T1249] lo speed is unknown, defaulting to 1000
[  607.379589][ T1263] syzkaller0: Caught tx_queue_len zero misconfig
[  607.445673][ T1265] netlink: 'syz.1.11931': attribute type 1 has an invalid length.
[  607.525811][ T1267] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  607.586738][ T1265] veth25: entered promiscuous mode
[  607.590148][ T1265] bond15: (slave veth25): Enslaving as a backup interface with a down link
[  607.610715][ T1265] 8021q: adding VLAN 0 to HW filter on device bond15
[  607.614703][   T13] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  607.743122][ T5886] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  607.920519][ T1285] lo speed is unknown, defaulting to 1000
[  607.926017][ T1285] wg1 speed is unknown, defaulting to 1000
[  608.031604][ T1287] openvswitch: netlink: IP tunnel dst address not specified
[  608.049752][ T1285] lo speed is unknown, defaulting to 1000
[  608.106650][ T1289] lo speed is unknown, defaulting to 1000
[  608.110345][ T1289] wg1 speed is unknown, defaulting to 1000
[  608.310546][ T1289] lo speed is unknown, defaulting to 1000
[  608.563179][ T1308] netlink: 'syz.2.11945': attribute type 1 has an invalid length.
[  608.721438][ T1314] __nla_validate_parse: 13 callbacks suppressed
[  608.721455][ T1314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11948'.
[  608.780689][ T1322] 8021q: adding VLAN 0 to HW filter on device bond5
[  608.789617][ T1322] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  608.793529][ T1322] bond5: (slave macvlan5): Enslaving as a backup interface with a down link
[  608.881049][ T1326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11951'.
[  609.121015][ T1334] netlink: 'syz.2.11953': attribute type 10 has an invalid length.
[  609.144388][ T1334] team0: Failed to send options change via netlink (err -105)
[  609.146861][ T1334] team0: Port device 0! added
[  609.303347][ T1347] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11959'.
[  609.376310][ T1342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11958'.
[  609.760394][ T1372] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11967'.
[  609.766393][ T1372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11967'.
[  609.770609][ T1373] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11967'.
[  609.774020][ T1373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11967'.
[  609.786012][ T1372] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11967'.
[  609.821764][ T1372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  609.845678][ T2313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.865863][ T1376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11968'.
[  610.238983][ T1393] netlink: 'syz.1.11973': attribute type 11 has an invalid length.
[  610.359455][ T1415] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  610.416308][ T1415] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  610.451361][ T1427] gtp1: entered promiscuous mode
[  610.458913][ T1415] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  610.496419][ T1415] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  610.614040][ T1433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  610.634452][ T5717] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  610.637126][ T5717] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  610.651917][ T5717] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  610.654505][ T5717] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  610.762058][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  610.836586][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  610.969268][ T1473] lo speed is unknown, defaulting to 1000
[  610.973627][ T1473] wg1 speed is unknown, defaulting to 1000
[  610.996893][ T1474] lo speed is unknown, defaulting to 1000
[  611.002951][ T1474] wg1 speed is unknown, defaulting to 1000
[  611.054174][ T1479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  611.098287][ T1473] lo speed is unknown, defaulting to 1000
[  611.294290][ T1474] lo speed is unknown, defaulting to 1000
[  611.554472][ T1502] lo speed is unknown, defaulting to 1000
[  611.558153][ T1502] wg1 speed is unknown, defaulting to 1000
[  611.708524][ T1502] lo speed is unknown, defaulting to 1000
[  612.286035][ T1531] netlink: 'syz.0.12016': attribute type 2 has an invalid length.
[  612.297988][ T1531] k*]: entered promiscuous mode
[  612.333891][ T1531] 8021q: adding VLAN 0 to HW filter on device 
[  612.343847][ T1531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  612.353618][T29761] lo speed is unknown, defaulting to 1000
[  612.356633][T29761] syz2: Port: 1 Link ACTIVE
[  612.371655][ T1531] veth0_to_team: entered promiscuous mode
[  612.374314][ T1531] veth0_to_team: entered allmulticast mode
[  612.674676][ T1553] netlink: 'syz.0.12023': attribute type 1 has an invalid length.
[  612.678184][ T1553] netlink: 'syz.0.12023': attribute type 1 has an invalid length.
[  612.954640][ T1564] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  612.957248][ T1564] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  612.959768][ T1564] tipc: Resetting bearer <eth:syzkaller0>
[  612.998102][ T1573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  613.001316][ T1573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  613.065624][ T1580] netlink: 'syz.0.12032': attribute type 13 has an invalid length.
[  613.233476][ T1594] lo speed is unknown, defaulting to 1000
[  613.237402][ T1594] wg1 speed is unknown, defaulting to 1000
[  613.350416][ T1603] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.354616][ T1603] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.393295][ T1594] lo speed is unknown, defaulting to 1000
[  613.441479][ T1603] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.445335][ T1603] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.486818][ T1603] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.489832][ T1603] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.529222][ T1603] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.532259][ T1603] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.595959][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.598643][ T5717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.603174][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.607374][ T5717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.617778][T31872] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.620520][T31872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.630024][T31872] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  613.636070][T31872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.641577][ T1602] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.645111][ T1602] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.664562][T31872] ==================================================================
[  613.667139][T31872] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1360
[  613.669514][T31872] Read of size 8 at addr ffff8881131becb0 by task kworker/u8:0/31872
[  613.672673][T31872] 
[  613.673832][T31872] CPU: 1 UID: 0 PID: 31872 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  613.673849][T31872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  613.673855][T31872] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  613.673873][T31872] Call Trace:
[  613.673878][T31872]  <TASK>
[  613.673917][T31872]  dump_stack_lvl+0x189/0x250
[  613.673929][T31872]  ? __kasan_check_byte+0x12/0x40
[  613.673942][T31872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  613.673951][T31872]  ? lock_release+0x4b/0x3e0
[  613.673964][T31872]  ? __virt_addr_valid+0x4a5/0x5c0
[  613.673975][T31872]  print_report+0xca/0x240
[  613.673983][T31872]  ? __mutex_lock+0x147/0x1360
[  613.673994][T31872]  kasan_report+0x118/0x150
[  613.674004][T31872]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  613.674014][T31872]  ? __mutex_lock+0x147/0x1360
[  613.674026][T31872]  __mutex_lock+0x147/0x1360
[  613.674038][T31872]  ? __mutex_lock+0x5b6/0x1360
[  613.674049][T31872]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  613.674060][T31872]  ? __pfx___mutex_lock+0x10/0x10
[  613.674071][T31872]  ? __lock_acquire+0xab9/0xd20
[  613.674084][T31872]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  613.674096][T31872]  ? process_scheduled_works+0x9ef/0x17b0
[  613.674104][T31872]  ? process_scheduled_works+0x9ef/0x17b0
[  613.674112][T31872]  process_scheduled_works+0xae1/0x17b0
[  613.674126][T31872]  ? __pfx_process_scheduled_works+0x10/0x10
[  613.674136][T31872]  worker_thread+0x8a0/0xda0
[  613.674145][T31872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  613.674157][T31872]  ? __kthread_parkme+0x7b/0x200
[  613.674167][T31872]  kthread+0x711/0x8a0
[  613.674177][T31872]  ? __pfx_worker_thread+0x10/0x10
[  613.674184][T31872]  ? __pfx_kthread+0x10/0x10
[  613.674194][T31872]  ? _raw_spin_unlock_irq+0x23/0x50
[  613.674203][T31872]  ? lockdep_hardirqs_on+0x9c/0x150
[  613.674212][T31872]  ? __pfx_kthread+0x10/0x10
[  613.674222][T31872]  ret_from_fork+0x3fc/0x770
[  613.674231][T31872]  ? __pfx_ret_from_fork+0x10/0x10
[  613.674240][T31872]  ? __switch_to_asm+0x39/0x70
[  613.674249][T31872]  ? __switch_to_asm+0x33/0x70
[  613.674258][T31872]  ? __pfx_kthread+0x10/0x10
[  613.674267][T31872]  ret_from_fork_asm+0x1a/0x30
[  613.674281][T31872]  </TASK>
[  613.674284][T31872] 
[  613.740275][T31872] Allocated by task 1603:
[  613.741608][T31872]  kasan_save_track+0x3e/0x80
[  613.743084][T31872]  __kasan_kmalloc+0x93/0xb0
[  613.744577][T31872]  __kmalloc_noprof+0x27a/0x4f0
[  613.746159][T31872]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  613.748055][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.749613][T31872]  register_netdevice+0x1608/0x1ae0
[  613.751186][T31872]  nsim_create+0xae8/0xf10
[  613.752533][T31872]  __nsim_dev_port_add+0x6b6/0xb10
[  613.754068][T31872]  nsim_dev_port_add_all+0x37/0xf0
[  613.755603][T31872]  nsim_dev_reload_up+0x451/0x780
[  613.757097][T31872]  devlink_reload+0x4ec/0x8d0
[  613.758504][T31872]  devlink_nl_reload_doit+0xb35/0xd50
[  613.760177][T31872]  genl_family_rcv_msg_doit+0x215/0x300
[  613.761900][T31872]  genl_rcv_msg+0x60e/0x790
[  613.763286][T31872]  netlink_rcv_skb+0x208/0x470
[  613.764696][T31872]  genl_rcv+0x28/0x40
[  613.765960][T31872]  netlink_unicast+0x82f/0x9e0
[  613.767476][T31872]  netlink_sendmsg+0x805/0xb30
[  613.769017][T31872]  __sock_sendmsg+0x21c/0x270
[  613.770483][T31872]  ____sys_sendmsg+0x505/0x830
[  613.772006][T31872]  ___sys_sendmsg+0x21f/0x2a0
[  613.773468][T31872]  __x64_sys_sendmsg+0x19b/0x260
[  613.775023][T31872]  do_syscall_64+0xfa/0x3b0
[  613.776451][T31872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.778292][T31872] 
[  613.779073][T31872] Freed by task 1602:
[  613.780312][T31872]  kasan_save_track+0x3e/0x80
[  613.781778][T31872]  kasan_save_free_info+0x46/0x50
[  613.783362][T31872]  __kasan_slab_free+0x5b/0x80
[  613.784860][T31872]  kfree+0x18e/0x440
[  613.786112][T31872]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  613.787945][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.789505][T31872]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  613.791407][T31872]  unregister_netdevice_queue+0x33c/0x380
[  613.793164][T31872]  nsim_destroy+0x1dd/0x670
[  613.794560][T31872]  __nsim_dev_port_del+0x14d/0x1b0
[  613.796171][T31872]  nsim_dev_reload_destroy+0x288/0x490
[  613.797844][T31872]  nsim_dev_reload_down+0x8a/0xc0
[  613.799424][T31872]  devlink_reload+0x1b6/0x8d0
[  613.800891][T31872]  devlink_nl_reload_doit+0xb35/0xd50
[  613.802545][T31872]  genl_family_rcv_msg_doit+0x215/0x300
[  613.804261][T31872]  genl_rcv_msg+0x60e/0x790
[  613.805644][T31872]  netlink_rcv_skb+0x208/0x470
[  613.807133][T31872]  genl_rcv+0x28/0x40
[  613.808381][T31872]  netlink_unicast+0x82f/0x9e0
[  613.809815][T31872]  netlink_sendmsg+0x805/0xb30
[  613.811263][T31872]  __sock_sendmsg+0x21c/0x270
[  613.812681][T31872]  ____sys_sendmsg+0x505/0x830
[  613.814108][T31872]  ___sys_sendmsg+0x21f/0x2a0
[  613.815521][T31872]  __x64_sys_sendmsg+0x19b/0x260
[  613.817059][T31872]  do_syscall_64+0xfa/0x3b0
[  613.818689][T31872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.820644][T31872] 
[  613.821477][T31872] Last potentially related work creation:
[  613.823240][T31872]  kasan_save_stack+0x3e/0x60
[  613.824905][T31872]  kasan_record_aux_stack+0xbd/0xd0
[  613.827014][T31872]  insert_work+0x3d/0x330
[  613.828687][T31872]  __queue_work+0xbaf/0xfb0
[  613.830050][T31872]  queue_work_on+0x181/0x270
[  613.831590][T31872]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  613.833454][T31872]  udp_tunnel_push_rx_port+0x180/0x200
[  613.835133][T31872]  geneve_offload_rx_ports+0xd7/0x160
[  613.836764][T31872]  geneve_netdevice_event+0x6a/0x80
[  613.838325][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.839956][T31872]  call_netdevice_notifiers+0x88/0xc0
[  613.841617][T31872]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  613.843533][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.845139][T31872]  register_netdevice+0x1608/0x1ae0
[  613.846775][T31872]  nsim_create+0xae8/0xf10
[  613.848239][T31872]  __nsim_dev_port_add+0x6b6/0xb10
[  613.850087][T31872]  nsim_dev_port_add_all+0x37/0xf0
[  613.851609][T31872]  nsim_dev_reload_up+0x451/0x780
[  613.853421][T31872]  devlink_reload+0x4ec/0x8d0
[  613.854856][T31872]  devlink_nl_reload_doit+0xb35/0xd50
[  613.856680][T31872]  genl_family_rcv_msg_doit+0x215/0x300
[  613.858487][T31872]  genl_rcv_msg+0x60e/0x790
[  613.859905][T31872]  netlink_rcv_skb+0x208/0x470
[  613.861418][T31872]  genl_rcv+0x28/0x40
[  613.862746][T31872]  netlink_unicast+0x82f/0x9e0
[  613.864287][T31872]  netlink_sendmsg+0x805/0xb30
[  613.865787][T31872]  __sock_sendmsg+0x21c/0x270
[  613.867283][T31872]  ____sys_sendmsg+0x505/0x830
[  613.868773][T31872]  ___sys_sendmsg+0x21f/0x2a0
[  613.870435][T31872]  __x64_sys_sendmsg+0x19b/0x260
[  613.872344][T31872]  do_syscall_64+0xfa/0x3b0
[  613.873711][T31872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.875475][T31872] 
[  613.876213][T31872] Second to last potentially related work creation:
[  613.878159][T31872]  kasan_save_stack+0x3e/0x60
[  613.879664][T31872]  kasan_record_aux_stack+0xbd/0xd0
[  613.881650][T31872]  insert_work+0x3d/0x330
[  613.883391][T31872]  __queue_work+0xcd2/0xfb0
[  613.885200][T31872]  queue_work_on+0x181/0x270
[  613.886689][T31872]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  613.888510][T31872]  udp_tunnel_push_rx_port+0x180/0x200
[  613.890576][T31872]  vxlan_offload_rx_ports+0x139/0x200
[  613.892516][T31872]  vxlan_netdevice_event+0x111/0x470
[  613.894416][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.896341][T31872]  call_netdevice_notifiers+0x88/0xc0
[  613.898234][T31872]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  613.900297][T31872]  notifier_call_chain+0x1b6/0x3e0
[  613.902175][T31872]  register_netdevice+0x1608/0x1ae0
[  613.903993][T31872]  nsim_create+0xae8/0xf10
[  613.905748][T31872]  __nsim_dev_port_add+0x6b6/0xb10
[  613.907790][T31872]  nsim_dev_port_add_all+0x37/0xf0
[  613.909835][T31872]  nsim_dev_reload_up+0x451/0x780
[  613.911860][T31872]  devlink_reload+0x4ec/0x8d0
[  613.913756][T31872]  devlink_nl_reload_doit+0xb35/0xd50
[  613.915923][T31872]  genl_family_rcv_msg_doit+0x215/0x300
[  613.918123][T31872]  genl_rcv_msg+0x60e/0x790
[  613.919911][T31872]  netlink_rcv_skb+0x208/0x470
[  613.921754][T31872]  genl_rcv+0x28/0x40
[  613.923356][T31872]  netlink_unicast+0x82f/0x9e0
[  613.925266][T31872]  netlink_sendmsg+0x805/0xb30
[  613.927172][T31872]  __sock_sendmsg+0x21c/0x270
[  613.929029][T31872]  ____sys_sendmsg+0x505/0x830
[  613.930930][T31872]  ___sys_sendmsg+0x21f/0x2a0
[  613.932774][T31872]  __x64_sys_sendmsg+0x19b/0x260
[  613.934593][T31872]  do_syscall_64+0xfa/0x3b0
[  613.935980][T31872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.937945][T31872] 
[  613.938919][T31872] The buggy address belongs to the object at ffff8881131bec00
[  613.938919][T31872]  which belongs to the cache kmalloc-256 of size 256
[  613.943879][T31872] The buggy address is located 176 bytes inside of
[  613.943879][T31872]  freed 256-byte region [ffff8881131bec00, ffff8881131bed00)
[  613.948753][T31872] 
[  613.949700][T31872] The buggy address belongs to the physical page:
[  613.951894][T31872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1131be
[  613.955291][T31872] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  613.958539][T31872] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  613.961537][T31872] page_type: f5(slab)
[  613.963155][T31872] raw: 057ff00000000040 ffff88801a441b40 ffffea00042a4600 dead000000000004
[  613.966487][T31872] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  613.969845][T31872] head: 057ff00000000040 ffff88801a441b40 ffffea00042a4600 dead000000000004
[  613.973256][T31872] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  613.976665][T31872] head: 057ff00000000001 ffffea00044c6f81 00000000ffffffff 00000000ffffffff
[  613.980081][T31872] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  613.983472][T31872] page dumped because: kasan: bad access detected
[  613.985978][T31872] page_owner tracks the page as allocated
[  613.987723][T31872] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7308, tgid 7306 (syz.0.637), ts 91713419118, free_ts 91553843499
[  613.994875][T31872]  post_alloc_hook+0x240/0x2a0
[  613.996388][T31872]  get_page_from_freelist+0x21e4/0x22c0
[  613.998118][T31872]  __alloc_frozen_pages_noprof+0x181/0x370
[  614.000008][T31872]  alloc_pages_mpol+0x232/0x4a0
[  614.001516][T31872]  allocate_slab+0x8a/0x370
[  614.002924][T31872]  ___slab_alloc+0xbeb/0x1410
[  614.004420][T31872]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  614.006391][T31872]  kmemdup_noprof+0x2b/0x70
[  614.008036][T31872]  ip6_route_net_init+0x2fd/0x7a0
[  614.010027][T31872]  ops_init+0x35c/0x5c0
[  614.011680][T31872]  setup_net+0x10c/0x320
[  614.013386][T31872]  copy_net_ns+0x31b/0x4d0
[  614.015190][T31872]  create_new_namespaces+0x3f3/0x720
[  614.017293][T31872]  unshare_nsproxy_namespaces+0x11c/0x170
[  614.019343][T31872]  ksys_unshare+0x4c8/0x8c0
[  614.021105][T31872]  __x64_sys_unshare+0x38/0x50
[  614.022755][T31872] page last free pid 23 tgid 23 stack trace:
[  614.024888][T31872]  __free_frozen_pages+0xbc4/0xd30
[  614.026474][T31872]  rcu_core+0xcab/0x1770
[  614.027784][T31872]  handle_softirqs+0x286/0x870
[  614.029278][T31872]  run_ksoftirqd+0x9b/0x100
[  614.030711][T31872]  smpboot_thread_fn+0x542/0xa60
[  614.032250][T31872]  kthread+0x711/0x8a0
[  614.033509][T31872]  ret_from_fork+0x3fc/0x770
[  614.034932][T31872]  ret_from_fork_asm+0x1a/0x30
[  614.036407][T31872] 
[  614.037158][T31872] Memory state around the buggy address:
[  614.038885][T31872]  ffff8881131beb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  614.041298][T31872]  ffff8881131bec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  614.043784][T31872] >ffff8881131bec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  614.046266][T31872]                                      ^
[  614.048009][T31872]  ffff8881131bed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  614.050476][T31872]  ffff8881131bed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  614.053006][T31872] ==================================================================
[  614.085639][T31872] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  614.087929][T31872] CPU: 1 UID: 0 PID: 31872 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  614.090868][T31872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  614.094022][T31872] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  614.096341][T31872] Call Trace:
[  614.097358][T31872]  <TASK>
[  614.098292][T31872]  dump_stack_lvl+0x99/0x250
[  614.099720][T31872]  ? __asan_memcpy+0x40/0x70
[  614.101124][T31872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.102733][T31872]  ? __pfx__printk+0x10/0x10
[  614.104192][T31872]  vpanic+0x281/0x750
[  614.105461][T31872]  ? preempt_schedule+0xae/0xc0
[  614.106972][T31872]  ? __pfx_vpanic+0x10/0x10
[  614.108413][T31872]  ? preempt_schedule_common+0x83/0xd0
[  614.110071][T31872]  ? preempt_schedule+0xae/0xc0
[  614.111616][T31872]  ? __pfx_preempt_schedule+0x10/0x10
[  614.113290][T31872]  panic+0xb9/0xc0
[  614.114475][T31872]  ? __pfx_panic+0x10/0x10
[  614.115807][T31872]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  614.117618][T31872]  ? __mutex_lock+0x147/0x1360
[  614.119129][T31872]  check_panic_on_warn+0x89/0xb0
[  614.120661][T31872]  ? __mutex_lock+0x147/0x1360
[  614.122152][T31872]  end_report+0x78/0x160
[  614.123490][T31872]  kasan_report+0x129/0x150
[  614.124923][T31872]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  614.126745][T31872]  ? __mutex_lock+0x147/0x1360
[  614.128237][T31872]  __mutex_lock+0x147/0x1360
[  614.129664][T31872]  ? __mutex_lock+0x5b6/0x1360
[  614.131155][T31872]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  614.133084][T31872]  ? __pfx___mutex_lock+0x10/0x10
[  614.134657][T31872]  ? __lock_acquire+0xab9/0xd20
[  614.136210][T31872]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  614.138131][T31872]  ? process_scheduled_works+0x9ef/0x17b0
[  614.139899][T31872]  ? process_scheduled_works+0x9ef/0x17b0
[  614.141650][T31872]  process_scheduled_works+0xae1/0x17b0
[  614.143364][T31872]  ? __pfx_process_scheduled_works+0x10/0x10
[  614.145227][T31872]  worker_thread+0x8a0/0xda0
[  614.146661][T31872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  614.148634][T31872]  ? __kthread_parkme+0x7b/0x200
[  614.150176][T31872]  kthread+0x711/0x8a0
[  614.151424][T31872]  ? __pfx_worker_thread+0x10/0x10
[  614.152990][T31872]  ? __pfx_kthread+0x10/0x10
[  614.154419][T31872]  ? _raw_spin_unlock_irq+0x23/0x50
[  614.156030][T31872]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.157630][T31872]  ? __pfx_kthread+0x10/0x10
[  614.159073][T31872]  ret_from_fork+0x3fc/0x770
[  614.160492][T31872]  ? __pfx_ret_from_fork+0x10/0x10
[  614.162090][T31872]  ? __switch_to_asm+0x39/0x70
[  614.163496][T31872]  ? __switch_to_asm+0x33/0x70
[  614.164969][T31872]  ? __pfx_kthread+0x10/0x10
[  614.166384][T31872]  ret_from_fork_asm+0x1a/0x30
[  614.167866][T31872]  </TASK>
[  614.169386][T31872] Kernel Offset: disabled
[  614.170703][T31872] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:29:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff93a83e98 RBX=0000000000043a88 RCX=0000000000040000 RDX=0000000000000000
RSI=ffff88801e9ea7d8 RDI=ffff88801e9e9cc0 RBP=0000000000000000 RSP=ffffc9000af0f738
R8 =0000000000000000 R9 =ffffffff84d00e0a R10=ffffc9000af0fa18 R11=fffff520015e1f45
R12=0000000000000000 R13=ffff88801e9ea7b0 R14=ffff88801e9ea7d8 R15=ce22207695c26522
RIP=ffffffff819da2d4 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000001d2030 CR3=000000010e9f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7883f87498 00007f7883f87470 XMM03=00007f7883f874a8 00007f7883f874a0
XMM04=00007f7884aed100 00007f7883f87460 XMM05=00007f7883f87478 00007f7883f874c0
XMM06=00007f7883f874b8 00007f7883f874b0 XMM07=00007f7883f874a8 00007f7883f874a0
XMM08=0000000000000000 00007f7883e12ee7 XMM09=0000000000000000 00007f7883e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000920f130
R8 =ffff8880205e8237 R9 =1ffff110040bd046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98c4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000ffffffff CR3=00000001091a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6ad4987498 00007f6ad4987470 XMM03=00007f6ad49874a8 00007f6ad49874a0
XMM04=00007f6ad54ed100 00007f6ad4987460 XMM05=00007f6ad4987478 00007f6ad49874c0
XMM06=00007f6ad49874b8 00007f6ad49874b0 XMM07=00007f6ad49874a8 00007f6ad49874a0
XMM08=0000000000000000 00007f6ad4812ee7 XMM09=0000000000000000 00007f6ad4812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
