last executing test programs:

1.639565016s ago: executing program 0 (id=2851):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x1000}) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = accept(r1, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000280)=0x80)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4000801)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$pppl2tp(r3, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e20, 0x4, @local, 0x4}}}, 0x3a)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x4000000000000c4, 0x10160, 0x0) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x8, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}]}]}, 0x17c}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) (async, rerun: 64)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000080)=""/64, 0x40, 0x8, 0x2})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1.579951038s ago: executing program 0 (id=2852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000054}, 0x490)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64)
r4 = accept4(r3, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80, 0x800)
recvfrom$netrom(r4, &(0x7f00000002c0)=""/68, 0x44, 0x40000020, &(0x7f0000000340)={{0x3, @bcast, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
ioctl$SIOCNRDECOBS(r3, 0x541b)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

1.389845877s ago: executing program 0 (id=2856):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
socket$isdn_base(0x22, 0x3, 0x0)

1.388886935s ago: executing program 0 (id=2858):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
close(r3)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

1.32954603s ago: executing program 0 (id=2860):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r2) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000140009052cbd7000fddbdf25022000cb", @ANYRES32=r6, @ANYBLOB="080004006401010108000200ac1414aa08000a0001000000080001007f00000108000900310004000800090003010000f8b1f83c28d1f437a74fea8dd4e669e74b90281e9a47b6e9686995e041c20752851645a54402d6962f89fb1a3ecf1873b377686d3495ce9778cb64ce8b510450bca9236693e9aebda4f89dc36c77427773158798490f8949ba419470de2bf1e4125cb5d5d9e4ae7bb9657cf69087e2fdd5fa01e1ddd3"], 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0) (async)
r8 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r8, 0x4)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x15, 0x0)
r9 = accept4$unix(r8, 0x0, 0x0, 0x0)
recvfrom$unix(r9, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25250000000a000100772ce48c0e2e6284217c8c70c470616e3000000005002b00000000000600060000000000ac4b6ff0"], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25250000000a000100772ce48c0e2e6284217c8c70c470616e3000000005002b00000000000600060000000000ac4b6ff0"], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0)
clock_gettime(0x812f3c4a9f652968, 0x0) (async)
clock_gettime(0x812f3c4a9f652968, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

797.652791ms ago: executing program 1 (id=2874):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(0x4)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
socket$key(0xf, 0x3, 0x2) (async)
r13 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e50a000102e1c80150322356d0a8255983eb68c723646a685d86788e988a89d5"], 0x10}}, 0x0)
sendmsg$key(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

658.682345ms ago: executing program 1 (id=2877):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
close(r0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='batadv_slave_1\x00')
write$tun(r1, &(0x7f00000003c0)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x60, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa7, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb5)

529.360312ms ago: executing program 1 (id=2881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000ffffff7f0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) (async)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x8)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xf8, 0x76, &(0x7f0000000540)="cdab386e778c52721742df4fef8925ec4c1604efb024868bc2022c4349ee2f37b8bb682b3b64e81177cf24802d29a4527ea34ca395e19c5c0273c6819dda16912e42735f2b81998e4d92c537200e601aa0453faf2355d5cbff96a44cd764f06cccbd374eaabf8e4023a5f43a9cdf3a95be5c8d1ad55352796d38b3911090265fb242bd52f971f2c3148b1fc9a17536be34708b33d9d791e3aca6028f30717d1c89964688c6c8938e05d1ce9fce5f108ae1a0e53a345eacc49a02a385aae33b025d070678a31693d806116395b278c9fb08e1aca17400a6be87476b32b44f2458c054555427447cb4515a584b45254bddfb888ba6c0915b75", &(0x7f0000000440)=""/118, 0x0, 0x0, 0x9d, 0xf0, &(0x7f0000000880)="412872e2e8bd28468973e5370aee2af09cf7d817b61d32b271113c23543749d93896f4af1cf99857c3c1153a16ca9b8a9878d8ac926b60bfa3b149554e9b5696327f13d643073a94eed09f4c98d567a677e0a2824097a9cb7fcb918176bccf67f7bb14d747d3e690fde0a8e691acdb0215761bece0f2fad26d9441b333a9fb4159e71848e7c7e314929a34af49799bebdc975b190a7bd9e0925aa7fa44", &(0x7f0000000940)="e2b165ecb686d077ee6b6f13de02b19bd016daa7e9f6071e4211d0b4bcd3249ee71848fba9b397fd36c7763c0235eea2bb015db577ab16ad9ff6b8525ee77d1f8478461c69ed4d89cf379fbd941c1b17aaf3f75307c2f135918b8d6f5b9684c24b59543c7e1e072aaad136a7124612d67071670df8129f84860c633f7c08cd6fe1a2b389d24341ce4d95e7e27714219d1359b248c70c4f487ddc5462b897021dffc78a4a23d3be9852cdd16afc606cc258a7dbf487697c339b2a74dd4565809f15ee6df4f558d9891b6e55b76ec2d2d456a8e09b6209d613d447cfd81e4967442d50da03fe57c21e529abee606b24c48", 0x7, 0x0, 0x10}, 0x50) (async)
getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000240)="81", 0x1, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=@newqdisc={0x144, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xd}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x54, 0x2, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x17}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1d}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x8e6a}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xf}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xa0}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x3}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x81b3, 0xbf97, 0x0, 0x100, 0x5, 0x4}}, {0xc, 0x2, [0xfb, 0x7, 0x9181, 0x3]}}, {{0x1c, 0x1, {0x83, 0x1, 0x1, 0x6d0d2bb, 0x2, 0x2, 0x4, 0x9}}, {0x16, 0x2, [0x65, 0x400, 0x8, 0x7fff, 0xfffc, 0x8, 0x5, 0x9, 0xd63f]}}, {{0x1c, 0x1, {0x10, 0x0, 0x81, 0x2, 0x2, 0x6, 0x2, 0x9}}, {0x16, 0x2, [0xfff, 0x80, 0x4005, 0xf22, 0x9, 0xe, 0x40, 0x7, 0x1]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x93, 0xc}}]}, 0x144}}, 0x20008084)

519.549005ms ago: executing program 2 (id=2883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

427.338099ms ago: executing program 1 (id=2884):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="07000000010000", 0x7)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000080)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'nr0\x00', <r6=>0x0})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000040))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xb748, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x3e3}, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x4f4, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x254, 0x1, [@m_mirred={0x114, 0xe, 0x0, 0x0, {{0xb, 0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3eed, 0x400, 0x6, 0x8, 0x469}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x0, 0x7fffffff, 0x1}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfffffffc, 0x0, 0x1, 0x1}, 0x0, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7, 0x5, 0x6, 0x2}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x6, 0x7, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x11f4, 0x8003, 0x20000000, 0x2, 0x8}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x3, 0x6, 0x800, 0x9}, 0x1, r8}}]}, {0x6, 0x6, "ab24"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbedit={0x13c, 0x17, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xee, 0x6, "346ed638221f9667fc57bfbc9e4747f503b0e5fb72d008edb22bf166d5189e348fceaddca3ea955d3d4b33edeab392084c9254f41efbf2a0813f00e9d23338d835b751df91943339baad07c08c7bd4432672855d645a242db22569f4145717c445eb16b15c0c54e6b4951f5c24e0ecd7ee14f0591754792a6a83552cd98736a261d1c88e98d7ad333f038edc22c2a77f845b0a0de258786323997b24424adbafb5eef196b752a525bfce92478fd241606170601e1970e55ac95633c674db4106504e6a3effe1c276f02b39d7f33214945ab0d6b6e00668edf73c15faea4733624164fc22b128ffd59b91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x28c, 0x1, [@m_nat={0x18c, 0x1f, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x80000000, 0x8, 0x0, 0x2}, @empty, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x10001, 0x20000000, 0x1040, 0xcf1}, @remote, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x0, 0x54, 0xa}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xffff51f7, 0x10000000, 0x7}, @local, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4000, 0x80, 0x10000000, 0xe, 0x6}, @rand_addr=0x64010102, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5ff, 0x8, 0x0, 0x3, 0x4}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x74, 0x6, "efc2f12a68f56b3cd645faaf7975f371bbe669c271bd4892fd27068ff6010686cc6b3fe1bf8d5d88d8bc358c4e0b537422e810055a70af94856a14ace43572ab4b80e49893ae02cc182fcadcf69f0c994350416a7e8974cb6801b5808f900e313463a9895bb8fcd6e022e20ca759db84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xfc, 0x7, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x7, 0x0, 0x3}, {0x8, 0x2, 0x6, 0x70}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x90, 0x6, "95ab42119b07de8742926f95036cd69c020cbf215150220eb1b4b78f69109a18a09b370591cd7bd919b1917a5b161a9afc2654680b135bb097e4ac199e2d95cebb16db5d102cf96774d07b0f105c7cbdfb4417cddb2fea07223c7f7de4d1a99746b30426dc165f84eee2efa7689773b13669d3235b0068388f8a19e9b007c016c1ea4cc54f5a515c94a2791d"}, {0xc}, {0xc, 0x8, {0x1, 0xd4fa42eb5d9bc981}}}}]}]}, 0x4f4}, 0x1, 0x2b1e}, 0x2000c000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

425.649997ms ago: executing program 2 (id=2885):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "eb"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x5, @empty, 0x80000000}}]}, 0x80}, 0x1, 0x7}, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x94, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x602151d}]}, 0x94}}, 0x40)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="8001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/312], 0x180}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f0000001f00))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmmsg$alg(r5, &(0x7f0000004180), 0x0, 0x4000180)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x10}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xca}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x81}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffb9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x35a}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5afe92af}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1e}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r10}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)

425.343261ms ago: executing program 0 (id=2886):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000080)={0x40000008})
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x2054)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', <r6=>0x0, 0x29, 0x0, 0x7, 0xffffffff, 0xd, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8000, 0x9, 0xecd}})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x10)
sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x840)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x114}], 0x1}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x28)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r8, 0x107, 0x2, 0x0, &(0x7f0000000100))
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)

274.631811ms ago: executing program 2 (id=2887):
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xf, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffc392}}, @jmp={0x5, 0x0, 0x9, 0x6, 0x6, 0x1, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x1, 0x3, 0x2, 0xffffffffffffffe0, 0x10}], &(0x7f0000000380)='GPL\x00', 0xc66, 0x93, &(0x7f0000000600)=""/147, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xe, 0x0, 0x5}, 0x10, 0x239fa, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000006c0)=[{0x4, 0x2, 0x5000000}, {0x1, 0x2, 0x4, 0x9}], 0x10, 0x3}, 0x94)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x4, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r5=>0x0, 0x29, 0x6, 0x83, 0x3, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0xfd7, 0x473}})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="5000000013002f0a253d70000000000007006800", @ANYRES32=r7, @ANYBLOB="400900006522020030001a80090006"], 0x50}}, 0x8004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', <r9=>0x0})
getpeername$packet(r0, &(0x7f0000000b00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0xf, 0x8, 0x2, 0x16, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x68, 0x5, 0x40}})
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000c40)={@dev, @dev, <r12=>0x0}, &(0x7f0000000c80)=0xc)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000cc0)={<r13=>0x0, @private, @private}, &(0x7f0000000d00)=0xc)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@remote, @in6=@private1}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000800)=0xe8)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=@newtaction={0x1f84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1f70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x14c, 0x5, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0x98, 0x1, 0x1}, {0x4b, 0x9, 0x3}, {0x5, 0x10, 0x4, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x101, 0x3, 0x0, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1f2f, 0x2d3, 0x2, 0x6, 0xadd}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x3, 0xfffffffffffffff2, 0x3, 0x51}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x91, 0x6, "f3c2989ef93a86f59c57f57e68336e6a7a18da40316856ab86b3dfaccfa001fa9db874101955638de4e1162a9245c9cff93ad0bf061a7d8b928ff73f97b5b9a6cf56cc869211d3e31b07b190d9eb2ac24facad08238b6e36ceca945cc3cfb8d5fdaad1e95a900cc57a6f2a8932905d647f412b1877dadfe243b622d12a874d201dd0b674b28cb79aa8d04dec36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x21c, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7e, 0xb, 0x0, 0x7277497e, 0x7ff}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x8, 0x1, 0x2, 0xf5}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x7, 0x80000001, 0x752}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0xfffffffa, 0x1, 0x6, 0x800}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf76b, 0x1000000, 0x3, 0x9, 0x8}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x3, 0x8, 0x7}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x10000000, 0x2, 0x40}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x52, 0x3, 0x3, 0x7, 0x6}, 0x3, r13}}]}, {0xee, 0x6, "635b14c9a89551a23e2d0795867f6ae0a1761de60d5cbd732b81a0c923d67a40ba014cd09c6477af99b8a9405c119cdae02df0d843348e0bf100bb073bfa68fd1708dc62c40f7da07d5329d92729d6dafc5b5d3421717a4f5fc80329f51f0ef2d9421e547d25746a0ac5e47669391cf683ec89ab7fade278cfb29c698fee2fd35cc4ba2af99ac88f0cb05da2e944bac8bd1f3e4007eb8df289f6d192fb51c627257d5cffa5894f5012d25e00d42cf291c132dff43943b6869bb4caccd827e7b557df2900565b82f4428274d51cb049c412563dcbf062ced4b8b52ee30a28838372f3f892a7344950735d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xd4, 0x12, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x200, 0xffffffffffffffff, 0x80000001, 0x2}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x3}, 0xe}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x1000, 0x6, 0x0, 0x1}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="407ec25a3e50"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa}]}, {0x6, 0x6, "22ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xe4, 0x8, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x74, 0x6, "fa4492f4599b5b5afd5c7c51f2433b9d2a66368f0a1e6a20ddfa9e1e8c1b11de3aa932b408a647d0f9336bc487152cfca60cecfc4dd0683bb25f9c166dad82b856f2929fe3e53df9c598e3bc151cec676fb83ae975be0494c070bfdc4bf894adfa5dc02a9155e8c5161e4dcb1ed4e548"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x184c, 0x4, 0x0, 0x0, {{0xb}, {0x820, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa1, 0x6, 0x10, 0x1ff, 0x400, 0x5, 0x8000, 0x9, 0x76d, 0xc, 0xc, 0xffff, 0x1, 0x4, 0x9, 0x2, 0x4, 0x41f, 0x3c18, 0x2, 0x2, 0x100, 0x2, 0x4c2b, 0x0, 0x18, 0x3d, 0x8, 0xe44, 0x2, 0x8, 0x5, 0xb8, 0x602, 0x1, 0x3, 0x1d, 0x256d, 0x1, 0x7, 0x8, 0x0, 0x7, 0x6, 0x9, 0x0, 0x1, 0x6, 0x6, 0x8001, 0xc, 0x6, 0x8, 0x3, 0x5, 0xe, 0xfffffff8, 0xffffffff, 0x8, 0x9, 0x8000000, 0x6, 0xfffffffd, 0x1, 0x29a5, 0xffffffff, 0x2, 0x2c, 0xebd, 0x9, 0x3, 0xc000, 0x1000, 0x9, 0x8, 0x0, 0x8, 0x4, 0x2, 0x9, 0x84, 0x4, 0x100, 0x9, 0x2, 0xffffffff, 0x7, 0x4, 0xdf, 0x6, 0x8000, 0x10001, 0x5, 0x3, 0x100, 0x7, 0x9, 0x2, 0xe2, 0x8c, 0x101, 0x7, 0x4, 0x6, 0x2, 0x8, 0x40, 0xf, 0x7, 0x9, 0x401, 0xffffffff, 0x9, 0x441, 0x9, 0x4, 0x9, 0x3, 0x5, 0x2000, 0xb, 0x2, 0x101, 0x9, 0x7, 0x0, 0x5, 0x9, 0xc895, 0x2, 0x5, 0x3, 0x5, 0x1, 0xffffffff, 0x4, 0x5, 0x7, 0x0, 0x4f, 0xfffffffa, 0x5, 0x1, 0x9, 0x7397b80e, 0x3, 0x8, 0x6, 0x3, 0x6, 0xffffffff, 0x6, 0x8, 0x1, 0xff, 0x1, 0x405b2e70, 0x9, 0x1, 0xffffff81, 0x2, 0x7, 0x9, 0x10, 0x2, 0x5, 0x6, 0x6, 0x2, 0x8, 0x5, 0x5, 0x86, 0x0, 0x179, 0x42ce, 0x10, 0xd7f, 0x6, 0x8, 0x7793, 0x9, 0xc9d2, 0xa2, 0x8, 0xe, 0x100, 0x8, 0x101, 0x3, 0x8000, 0x5, 0x1, 0x8, 0x6, 0x4, 0x1, 0x5, 0x66, 0x3, 0x8, 0x542, 0x65f, 0x419df5e2, 0x1000, 0x1, 0x3, 0x8, 0x0, 0x4, 0x7f, 0x7, 0x8, 0x8, 0xfffffffd, 0x2, 0x0, 0x10, 0x1, 0xf5, 0x101, 0x9, 0xc, 0xffffffff, 0x100, 0x5, 0x5, 0x8, 0x1, 0x6, 0x101, 0x6491, 0xb, 0x10000, 0x8, 0x80000001, 0x9, 0x3, 0x9, 0x5, 0x2, 0x2, 0xffffe94a, 0x0, 0x2, 0x7, 0xfffffff8, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x3, 0x4, 0xf, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x1, 0x71e, 0x6, 0x6, 0xea, 0x3e5, 0x180, 0x7, 0x8abc, 0x101, 0x10000, 0x3d11, 0x9, 0x8, 0x9, 0x89, 0x8, 0x9, 0x2, 0x8, 0x4, 0x5, 0x0, 0x23b, 0xfffffff7, 0x10, 0xc, 0x400, 0xfffff07b, 0x5, 0x6, 0x3ff, 0x0, 0x3, 0x7, 0x0, 0x7fff, 0xfffffff8, 0x5, 0x650, 0x846, 0x939b, 0xfffffff9, 0xc, 0x4, 0xf, 0xd6d, 0x9, 0x4, 0x8d0, 0x3, 0x81, 0x0, 0x6c, 0x2, 0x7, 0x5, 0x560f, 0x9, 0xfff, 0x4, 0x9, 0x2e3, 0x0, 0x2, 0x5, 0xe297, 0x5, 0x5, 0xfffffffc, 0x3, 0xfffffff8, 0x80, 0x8a, 0x1, 0xffff, 0x1773, 0x2, 0x200, 0xfffffff0, 0x3, 0x8, 0xd016, 0xe, 0x7, 0x2, 0xf7, 0x4, 0x8, 0x5, 0xc4, 0x5, 0xfffffff4, 0x4, 0x5, 0x2b84cc74, 0x99b, 0x53, 0x80000000, 0x6, 0x5fa, 0x3, 0xac3e, 0x0, 0x4, 0x9, 0x100, 0xc5a, 0x7fff, 0x39, 0xe, 0x5, 0x1, 0x80000001, 0x0, 0xa, 0xb0a, 0xfffff71a, 0x401, 0x0, 0x6, 0x6, 0x6, 0x0, 0x3, 0x5e8a, 0x8, 0x9, 0xe, 0x7, 0x9, 0xff, 0xf, 0x0, 0x2, 0x7fff, 0xfffffff7, 0x1, 0xa, 0x6, 0x6c1b, 0x1, 0x7a42, 0x4, 0x0, 0x8, 0x8, 0xff, 0x400, 0x5, 0x3, 0xdaf2, 0x7, 0x7, 0x62, 0x0, 0xd037, 0x5, 0x7, 0x5, 0x2, 0xfffffff4, 0xf020, 0x7, 0xf, 0xfff, 0x1, 0x7242, 0x1, 0xa3, 0x3, 0x4, 0x3, 0x7b, 0x8, 0x2935, 0x3, 0x7, 0x0, 0x9, 0xffff, 0x768d, 0x1, 0x5, 0xff, 0x7, 0x5, 0x9, 0x1, 0x7, 0x8000, 0x6, 0x81, 0x4, 0x9, 0x7, 0x400, 0x0, 0x2, 0xfffffffa, 0x7, 0x2, 0x6, 0x8, 0x64, 0x3, 0x3, 0x1, 0x1000000, 0x28, 0x3ff, 0x6, 0x3, 0x3ff, 0xa, 0x800, 0x80000000, 0xfffffffa, 0x24d3ddf1, 0x0, 0x6, 0x3e, 0x8, 0x10, 0x10000, 0x4, 0xfffff530, 0xffff9274, 0x251face5, 0x0, 0x1, 0x375d, 0x7, 0x2, 0x4, 0x2, 0x2, 0x9, 0x0, 0x1, 0x5, 0x5, 0x0, 0x3, 0xc0000000, 0x7, 0x800, 0x7, 0x5, 0x81, 0x9, 0xe, 0x8, 0x81, 0x101]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1f84}}, 0x0)
r15 = socket(0x10, 0x80003, 0x0)
r16 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'lo\x00', <r17=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f00000000000f000100000e00"}}}]}, 0x48}}, 0x0)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r19=>0x0})
accept4(r15, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000480)=0x80, 0x40800)
sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x120, r18, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEYS={0xf4, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a62386e166"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x10, 0x4, "86871a201f375ad611b8ba48"}, @NL80211_KEY_SEQ={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5ed8a0c131"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "052e80db87e6dfcd94da1bf4f8"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1464}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000840}, 0x8008000)
r20 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804)

208.36611ms ago: executing program 1 (id=2888):
r0 = epoll_create1(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0xaf294b17a31401d5}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000680)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001e5a29e193fa8ea73000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000d05000300be5500000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x6, 0x3, 0x0, 0x1, [@generic="9e71"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4004040) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

98.772091ms ago: executing program 1 (id=2889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r1)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x20, 0x2, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xffffffff}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, 0x0, &(0x7f0000000080))
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080)
getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000000440))
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x6, 0x0, 0x2, 0x1, 0x0, 0x80}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @private2, 0x4}]}, &(0x7f0000000280)=0x10)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r13, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={r12, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)

98.231097ms ago: executing program 2 (id=2890):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xa4, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfe24, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="f37bb9edf99b"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xa4}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', <r3=>0x0, 0x4, 0x38, 0x3, 0x3, 0x14, @private0, @local, 0x10, 0x8000, 0x19b1, 0xfffffffa}})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=@delqdisc={0x210, 0x25, 0x707eee80d4f62e75, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0xb}, {0xffff, 0xfff2}, {0x4, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x6a}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xf}}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x9, 0x6895, 0x6, 0x2, 0x8, 0x1, 0x4}}, {0xc, 0x2, [0x10, 0x8, 0x6, 0x9]}}, {{0x1c, 0x1, {0x5, 0x24, 0x3, 0x5, 0x0, 0xf, 0x8, 0x7}}, {0x12, 0x2, [0x28, 0x7, 0x7ff, 0x1, 0x6, 0x1, 0x7]}}, {{0x1c, 0x1, {0x1, 0x2, 0x7, 0x6, 0x2, 0x8, 0xbbc, 0x7}}, {0x12, 0x2, [0x1, 0x6, 0x2, 0x1, 0x8, 0x3, 0x81]}}, {{0x1c, 0x1, {0x4, 0x40, 0x1000, 0x11e, 0x0, 0x8, 0x17, 0x4}}, {0xc, 0x2, [0x7, 0xfff, 0x8000, 0xe8a1]}}, {{0x1c, 0x1, {0x7, 0x7, 0x4, 0x1, 0x1, 0x3, 0x3, 0x3}}, {0xa, 0x2, [0x6, 0x8, 0x0]}}, {{0x1c, 0x1, {0x1, 0x3, 0x9, 0x3c2, 0x2, 0x1, 0x8, 0x1}}, {0x6, 0x2, [0x200]}}, {{0x1c, 0x1, {0x2, 0x5, 0xf3ea, 0x3d7, 0x0, 0x101, 0x81, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x0, 0x4, 0x61d, 0x2, 0x2, 0x80, 0x7, 0x8}}, {0x14, 0x2, [0x5, 0xc365, 0xce9, 0x3ff, 0xa, 0x5, 0x2, 0x86]}}, {{0x1c, 0x1, {0x0, 0xd, 0x7fff, 0x2, 0x1, 0x7fff, 0x0, 0x1}}, {0x6, 0x2, [0x3ff]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0xc5, 0x80}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

96.878356ms ago: executing program 2 (id=2891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

0s ago: executing program 2 (id=2892):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24040090)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000030801010000000000000000000000001c000480080001400000000008000840e6dd4f252600000004040007400000000005005e"], 0x38}}, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x64b}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="7800000010001fff27bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00210000440800004c0012800b00010065727370616e00003c000280050008005900000008000700ac1414aa050013000000000006000f00090038c60800150013bf0b00060010004e230000060011004e2200000a00010001"], 0x78}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x7, &(0x7f0000000240)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x6, 0x7ff}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]})

kernel console output (not intermixed with test programs):

attribute type 1 has an invalid length.
[   77.574376][ T6943] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.590768][ T6943] bond2: (slave bridge5): making interface the new active one
[   77.595435][ T6943] bond2: (slave bridge5): Enslaving as an active interface with an up link
[   77.770924][ T6952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[   78.850231][ T6982] hsr0 speed is unknown, defaulting to 1000
[   78.895202][ T6996] netlink: 'syz.0.344': attribute type 13 has an invalid length.
[   78.897800][ T6996] netlink: 'syz.0.344': attribute type 17 has an invalid length.
[   78.997385][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.999669][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.002753][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.005185][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.020644][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.052397][ T7005] netlink: 'syz.1.349': attribute type 10 has an invalid length.
[   79.066979][ T7005] netlink: 'syz.1.349': attribute type 10 has an invalid length.
[   79.206293][ T7030] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   79.213476][ T7030] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   79.258277][ T7029] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   79.456690][ T7044] __nla_validate_parse: 11 callbacks suppressed
[   79.456699][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.360'.
[   80.103614][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'.
[   80.109596][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'.
[   80.431500][ T7082] netlink: 830 bytes leftover after parsing attributes in process `syz.0.371'.
[   80.527546][ T7096] netlink: 'syz.2.376': attribute type 2 has an invalid length.
[   80.669153][ T7105] bond0: (slave syz_tun): Releasing backup interface
[   80.681067][ T7105] bond0: (slave team0): Releasing backup interface
[   80.690181][ T7105] bridge_slave_0: left allmulticast mode
[   80.694896][ T7105] bridge_slave_0: left promiscuous mode
[   80.700596][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.709001][ T7105] bridge_slave_1: left allmulticast mode
[   80.711440][ T7105] bridge_slave_1: left promiscuous mode
[   80.717343][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.736527][ T7105] bond0: (slave bond_slave_0): Releasing backup interface
[   80.755136][ T7105] bond0: (slave bond_slave_1): Releasing backup interface
[   80.772921][ T7105] team0: Port device team_slave_0 removed
[   80.782976][ T7105] team0: Port device team_slave_1 removed
[   80.800813][ T7107] team0: Mode changed to "activebackup"
[   81.085250][   T24] cfg80211: failed to load regulatory.db
[   81.856046][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'.
[   82.689148][ T7200] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   82.730322][ T7216] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[   82.735245][ T7216] netlink: 172 bytes leftover after parsing attributes in process `syz.0.410'.
[   82.779384][ T7220] syzkaller1: entered promiscuous mode
[   82.781306][ T7220] syzkaller1: entered allmulticast mode
[   83.552722][ T7232] syzkaller0: entered promiscuous mode
[   83.555302][ T7232] syzkaller0: entered allmulticast mode
[   83.651335][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.414'.
[   83.739425][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[   83.743087][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[   83.753122][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.416'.
[   83.895616][ T5835] Bluetooth: hci0: command 0x0c20 tx timeout
[   84.069658][ T7277] netlink: 'syz.0.428': attribute type 5 has an invalid length.
[   84.155648][ T7286] openvswitch: netlink: Flow key attr not present in new flow.
[   84.392138][ T7315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.460769][ T7325] netlink: 'syz.2.441': attribute type 30 has an invalid length.
[   84.467039][ T7323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.473729][ T7323] pimreg: entered allmulticast mode
[   84.477593][ T7323] pimreg: left allmulticast mode
[   84.541147][ T7329] hsr0 speed is unknown, defaulting to 1000
[   84.611830][ T7339] bridge0: port 3(syz_tun) entered blocking state
[   84.614932][ T7339] bridge0: port 3(syz_tun) entered disabled state
[   84.617828][ T7339] syz_tun: entered allmulticast mode
[   84.622512][ T7339] syz_tun: entered promiscuous mode
[   84.625474][ T7339] bridge0: port 3(syz_tun) entered blocking state
[   84.628256][ T7339] bridge0: port 3(syz_tun) entered forwarding state
[   84.767669][ T7350] __nla_validate_parse: 6 callbacks suppressed
[   84.767685][ T7350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.451'.
[   84.833330][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[   84.878116][ T7357] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   84.941203][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[   84.943204][ T7371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.954497][ T7371] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.457'.
[   85.097440][ T7388] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.461'.
[   85.188376][ T7401] xfrm2: entered allmulticast mode
[   85.261279][ T7407] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   85.291867][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.298973][ T7409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.468'.
[   85.306457][ T7407] bond2: (slave bridge1): making interface the new active one
[   85.310406][ T7407] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   85.333397][ T7407] gretap1: entered promiscuous mode
[   85.417615][ T7413] netlink: zone id is out of range
[   85.420431][ T7413] netlink: zone id is out of range
[   85.423450][ T7413] netlink: zone id is out of range
[   85.425764][ T7413] netlink: zone id is out of range
[   85.427841][ T7413] netlink: zone id is out of range
[   85.430402][ T7413] netlink: zone id is out of range
[   85.456409][ T7413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.471'.
[   85.459437][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'.
[   85.556309][ T7417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.473'.
[   85.557103][ T7420] netlink: 'syz.0.474': attribute type 21 has an invalid length.
[   85.562569][ T7420] netlink: 128 bytes leftover after parsing attributes in process `syz.0.474'.
[   85.567996][ T7420] netlink: 'syz.0.474': attribute type 5 has an invalid length.
[   85.907509][   T33] audit: type=1800 audit(1753334217.474:3): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.482" name=35FFFF dev="tmpfs" ino=719 res=0 errno=0
[   86.042862][ T7453] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   86.046419][ T7454] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   86.712284][ T7508] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.718265][ T7508] bond0: (slave bond5): Enslaving as an active interface with an up link
[   86.756304][ T7508] syz.1.497 (7508) used greatest stack depth: 19856 bytes left
[   86.878967][ T7523] netlink: 'syz.2.503': attribute type 39 has an invalid length.
[   86.934616][ T7531] netlink: 'syz.2.503': attribute type 12 has an invalid length.
[   87.052353][ T7532] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.146656][ T7532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.222426][ T7532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.311681][ T7532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.366910][ T7563] Cannot find del_set index 286 as target
[   87.400487][ T7563] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.415706][ T5862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.436517][ T5862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.445189][ T5862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.455201][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.632054][ T7596] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   87.729049][ T7604] veth0_vlan: left promiscuous mode
[   87.732773][ T7604] veth0_vlan: entered promiscuous mode
[   87.737733][ T7604] team0: Device veth0_vlan failed to register rx_handler
[   87.746835][ T7605] batadv_slave_0: entered promiscuous mode
[   87.859620][ T7618] batman_adv: batadv0: Adding interface: ipvlan2
[   87.861782][ T7618] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.871227][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.874740][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.877944][ T7618] batman_adv: batadv0: Interface activated: ipvlan2
[   88.089254][ T7636] validate_nla: 2 callbacks suppressed
[   88.089273][ T7636] netlink: 'syz.2.536': attribute type 16 has an invalid length.
[   89.040635][ T7659] netlink: 'syz.2.542': attribute type 3 has an invalid length.
[   89.567858][ T7670] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   89.577763][ T7670] x_tables: duplicate underflow at hook 1
[   89.629674][ T7672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.665080][ T7672] syzkaller0: entered promiscuous mode
[   89.667515][ T7672] syzkaller0: entered allmulticast mode
[   89.677169][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[   89.689471][ T7671] tipc: Resetting bearer <eth:syzkaller0>
[   89.902292][ T7661] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   90.015772][ T7675] __nla_validate_parse: 20 callbacks suppressed
[   90.015800][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[   90.077260][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[   90.718676][ T7671] tipc: Disabling bearer <eth:syzkaller0>
[   91.067084][ T7710] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   91.070633][ T7710] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   91.081556][ T7710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.558'.
[   91.085834][ T5835] Bluetooth: hci0: command 0x0c20 tx timeout
[   91.088612][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'.
[   91.195106][ T7723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[   91.228815][ T7723] net_ratelimit: 17 callbacks suppressed
[   91.228830][ T7723] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   91.242002][ T7729] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[   91.403671][ T7737] "syz.2.569" (7737) uses obsolete ecb(arc4) skcipher
[   91.478398][ T7747] xt_CT: No such helper "pptp"
[   91.480916][ T7747] --map-set only usable from mangle table
[   91.495794][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[   91.510558][ T7751] macvlan3: entered allmulticast mode
[   91.512530][ T7751] veth1_vlan: entered allmulticast mode
[   91.525223][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.534514][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.557475][ T7756] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   91.562889][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.852749][ T7779] netlink: 152 bytes leftover after parsing attributes in process `syz.2.582'.
[   92.183545][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'.
[   92.198094][ T7793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.201620][ T7793] syzkaller0: entered promiscuous mode
[   92.205813][ T7793] syzkaller0: entered allmulticast mode
[   92.220380][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'.
[   92.228127][ T7793] tipc: Resetting bearer <eth:syzkaller0>
[   92.233691][ T7792] tipc: Resetting bearer <eth:syzkaller0>
[   92.242489][ T7792] tipc: Disabling bearer <eth:syzkaller0>
[   92.455400][ T7799] netlink: 'syz.0.590': attribute type 4 has an invalid length.
[   92.738616][ T7814] xt_limit: Overflow, try lower: 0/0
[   92.836348][ T7814] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   92.861942][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[   93.046338][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'.
[   93.663870][ T7846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[   93.914123][ T7867] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.007978][ T7872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.011611][ T7872] syzkaller0: entered promiscuous mode
[   94.014627][ T7872] syzkaller0: entered allmulticast mode
[   94.030909][ T7872] tipc: Resetting bearer <eth:syzkaller0>
[   94.035519][ T7871] tipc: Resetting bearer <eth:syzkaller0>
[   94.047507][ T7871] tipc: Disabling bearer <eth:syzkaller0>
[   94.109434][ T7874] x_tables: duplicate underflow at hook 3
[   94.314982][ T7889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[   94.357420][ T7889] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.690904][ T7910] netlink: 'syz.0.622': attribute type 12 has an invalid length.
[   94.892601][ T7938] x_tables: duplicate underflow at hook 1
[   94.976262][ T7947] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   95.023146][ T7952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.027666][ T7951] syzkaller0: entered promiscuous mode
[   95.029836][ T7951] syzkaller0: entered allmulticast mode
[   95.062782][ T7951] tipc: Resetting bearer <eth:syzkaller0>
[   95.071335][ T7950] tipc: Resetting bearer <eth:syzkaller0>
[   95.081610][ T7950] tipc: Disabling bearer <eth:syzkaller0>
[   95.118738][ T7962] __nla_validate_parse: 14 callbacks suppressed
[   95.118749][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[   95.123697][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'.
[   95.129661][ T7962] netlink: 'syz.1.641': attribute type 13 has an invalid length.
[   95.133193][ T7962] netlink: 'syz.1.641': attribute type 12 has an invalid length.
[   95.142149][ T7964] xt_socket: unknown flags 0x8
[   95.165494][ T7966] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   95.168425][ T7966] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   95.171500][ T7966] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   95.201137][ T7966] netlink: 88 bytes leftover after parsing attributes in process `syz.1.643'.
[   95.233490][ T7973] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   95.238580][ T7973] bond0: (slave lo): Error: Device can not be enslaved while up
[   95.318750][ T7980] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.372886][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[   95.497201][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'.
[   95.500250][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'.
[   95.529072][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'.
[   95.566456][ T8011] xt_TCPMSS: Only works on TCP SYN packets
[   95.580141][ T8014] geneve2: entered promiscuous mode
[   95.587229][   T33] audit: type=1800 audit(1753334227.154:4): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="memory.events" dev="tmpfs" ino=1075 res=0 errno=0
[   95.596107][ T8011] xt_TCPMSS: Only works on TCP SYN packets
[   95.659216][ T8023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[   95.688425][ T8023] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.741123][ T8028] xt_SECMARK: invalid mode: 0
[   95.789161][ T8031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.664'.
[   95.793060][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'.
[   95.883989][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[   95.995999][ T8041] xt_TPROXY: Can be used only with -p tcp or -p udp
[   96.196040][ T8055] vlan2: entered promiscuous mode
[   96.198180][ T8055] vlan2: entered allmulticast mode
[   96.199978][ T8055] hsr_slave_1: entered allmulticast mode
[   96.216125][ T8056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[   96.304774][ T8059] hsr0 speed is unknown, defaulting to 1000
[   96.519878][ T8071] netlink: 'syz.0.678': attribute type 1 has an invalid length.
[   96.522685][ T8072] netlink: 'syz.0.678': attribute type 1 has an invalid length.
[   96.550860][ T8071] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.573583][ T8073] bond3: (slave bridge2): making interface the new active one
[   96.578094][ T8073] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   96.592340][ T8072] bond3: (slave bridge3): Enslaving as an active interface with a down link
[   96.609826][ T8071] macvlan4: entered promiscuous mode
[   96.611706][ T8071] macvlan4: entered allmulticast mode
[   96.613809][ T8071] bond3: entered promiscuous mode
[   96.616071][ T8071] bridge2: entered promiscuous mode
[   96.618323][ T8071] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   96.621305][ T8071] bond3: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   96.627935][ T8071] bond3: left promiscuous mode
[   96.629463][ T8071] bridge2: left promiscuous mode
[   96.646176][ T8076] syzkaller0: entered promiscuous mode
[   96.648404][ T8076] syzkaller0: entered allmulticast mode
[   96.652981][ T8076] vlan0: mtu less than device minimum
[   97.016721][ T8102] netlink: 'syz.0.689': attribute type 29 has an invalid length.
[   97.020312][ T8102] netlink: 'syz.0.689': attribute type 29 has an invalid length.
[   97.089957][ T8114] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[   97.123822][ T8114] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.136996][ T8114] bond7: (slave gretap2): making interface the new active one
[   97.140956][ T8114] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   97.424262][ T8137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13
[   97.474693][ T8140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.478082][ T8140] syzkaller0: entered promiscuous mode
[   97.480544][ T8140] syzkaller0: entered allmulticast mode
[   97.486300][ T8140] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   97.514461][ T8140] tipc: Resetting bearer <eth:syzkaller0>
[   97.518761][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[   97.546320][ T8139] tipc: Disabling bearer <eth:syzkaller0>
[   97.622050][ T8147] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   97.627956][ T8147] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   97.632634][ T8147] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   98.681145][ T8184] macsec2: entered promiscuous mode
[   98.685575][ T8184] team0: entered promiscuous mode
[   98.690116][ T8184] team_slave_0: entered promiscuous mode
[   98.692913][ T8184] team_slave_1: entered promiscuous mode
[   98.697216][ T8184] macsec2: entered allmulticast mode
[   98.699664][ T8184] team0: entered allmulticast mode
[   98.701976][ T8184] team_slave_0: entered allmulticast mode
[   98.704855][ T8184] team_slave_1: entered allmulticast mode
[   98.959445][ T8202] netlink: 'syz.2.723': attribute type 4 has an invalid length.
[   98.967135][ T8202] netlink: 'syz.2.723': attribute type 17 has an invalid length.
[   99.099884][ T8219] hsr0 speed is unknown, defaulting to 1000
[   99.387339][ T8246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.391242][ T8246] syzkaller0: entered promiscuous mode
[   99.393508][ T8246] syzkaller0: entered allmulticast mode
[   99.446181][ T8245] tipc: Resetting bearer <eth:syzkaller0>
[   99.475434][ T8245] tipc: Disabling bearer <eth:syzkaller0>
[   99.820539][ T8282] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[   99.837914][ T8282] 8021q: adding VLAN 0 to HW filter on device bond8
[   99.950243][ T8282] bond8: (slave ip6erspan0): making interface the new active one
[   99.955784][ T8282] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link
[  100.129365][ T8303] netlink: 'syz.0.754': attribute type 10 has an invalid length.
[  100.185718][ T8307] __nla_validate_parse: 22 callbacks suppressed
[  100.185730][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.756'.
[  100.278841][ T8314] netlink: 172 bytes leftover after parsing attributes in process `syz.0.759'.
[  100.577683][ T8324] syz.0.763 (8324) used greatest stack depth: 19408 bytes left
[  100.737664][ T8337] tun0: tun_chr_ioctl cmd 1074025675
[  100.739660][ T8337] tun0: persist enabled
[  100.741679][ T8337] tun0: tun_chr_ioctl cmd 1074025675
[  100.749562][ T8337] tun0: persist disabled
[  101.071691][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  101.671321][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.776'.
[  101.676272][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'.
[  101.744518][ T8372] ipvlan3: entered promiscuous mode
[  101.747489][ T8372] ipvlan3: entered allmulticast mode
[  101.749804][ T8372] batadv0: entered allmulticast mode
[  101.753063][ T8372] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  101.894577][ T8380] _Z`Ԁ@: entered promiscuous mode
[  102.238300][ T8401] netlink: 51 bytes leftover after parsing attributes in process `syz.0.787'.
[  102.309169][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'.
[  102.312356][ T8407] openvswitch: netlink: Flow key attr not present in new flow.
[  102.440344][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'.
[  102.467956][ T5861] bond0: (slave bond5): link status definitely down, disabling slave
[  102.558660][ T8418] policy can only be matched on NF_INET_PRE_ROUTING
[  102.558681][ T8418] unable to load match
[  102.760537][ T8427] netlink: 'syz.2.796': attribute type 11 has an invalid length.
[  102.761016][ T8426] xt_hashlimit: max too large, truncated to 1048576
[  103.214873][ T8444] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.219449][ T8444] bond0: (slave bond4): Enslaving as an active interface with an up link
[  103.451713][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  103.562631][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'.
[  103.568490][ T8480] netlink: 'syz.1.811': attribute type 7 has an invalid length.
[  103.576526][ T8480] netlink: 'syz.1.811': attribute type 8 has an invalid length.
[  103.693492][ T8492] !: renamed from dummy0 (while UP)
[  103.762044][ T8498] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  103.779771][ T8498] hsr0 speed is unknown, defaulting to 1000
[  103.858856][ T8504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.862406][ T8504] syzkaller0: entered promiscuous mode
[  103.864478][ T8504] syzkaller0: entered allmulticast mode
[  103.888948][ T8503] tipc: Resetting bearer <eth:syzkaller0>
[  103.904459][ T8503] tipc: Disabling bearer <eth:syzkaller0>
[  104.847427][ T8582] bond5: entered promiscuous mode
[  104.849668][ T8582] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.961996][ T8594] hsr0 speed is unknown, defaulting to 1000
[  105.224541][ T8616] __nla_validate_parse: 2 callbacks suppressed
[  105.224558][ T8616] netlink: 428 bytes leftover after parsing attributes in process `syz.1.833'.
[  105.234351][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'.
[  105.249997][ T8594] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.373154][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  105.381945][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  105.439244][ T8628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.445917][ T8628] netlink: 100 bytes leftover after parsing attributes in process `syz.2.837'.
[  105.688668][ T8650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.846'.
[  105.691975][ T8650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.846'.
[  106.096909][ T8679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.858'.
[  106.107751][ T8673] netlink: 'syz.2.857': attribute type 2 has an invalid length.
[  106.110983][ T8673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.857'.
[  106.113142][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  106.290966][ T8697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.866619][ T8705] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  106.872121][ T8705] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  106.916386][ T8707] macvlan2: entered promiscuous mode
[  106.918394][ T8707] macvlan2: entered allmulticast mode
[  106.920775][ T8707] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  107.306821][ T8738] netlink: 'syz.1.876': attribute type 21 has an invalid length.
[  107.368154][ T8742] IPv6: NLM_F_REPLACE set, but no existing node found!
[  107.419589][ T8744] netlink: 'syz.1.879': attribute type 7 has an invalid length.
[  107.685465][ T8755] Cannot find set identified by id 65535 to match
[  107.867741][ T8764] netlink: 'syz.1.884': attribute type 16 has an invalid length.
[  107.870981][ T8764] netlink: 'syz.1.884': attribute type 17 has an invalid length.
[  107.887473][ T8764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.118863][ T8766] openvswitch: netlink: Missing valid actions attribute.
[  108.121751][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.350719][ T8778] netlink: 'syz.2.889': attribute type 4 has an invalid length.
[  108.356491][ T8778] wlan1: mtu less than device minimum
[  108.365454][ T8778] netlink: 'syz.2.889': attribute type 3 has an invalid length.
[  108.370660][ T8778] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  109.668265][ T8831] netlink: 'syz.0.902': attribute type 6 has an invalid length.
[  109.795163][ T8836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.800268][ T8836] syzkaller0: entered promiscuous mode
[  109.802555][ T8836] syzkaller0: entered allmulticast mode
[  109.833429][ T8838] tipc: Resetting bearer <eth:syzkaller0>
[  109.867745][ T8838] tipc: Disabling bearer <eth:syzkaller0>
[  110.149277][ T8871] openvswitch: netlink: Flow actions attr not present in new flow.
[  110.159133][ T8864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.270500][ T8882] __nla_validate_parse: 15 callbacks suppressed
[  110.270535][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[  110.383408][ T8897] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  110.386628][ T8897] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  110.528631][ T8917] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  110.547429][ T8917] bond0: (slave bond_slave_0): Releasing backup interface
[  110.552370][ T8917] bond0: (slave bond_slave_1): Releasing backup interface
[  110.557693][ T8917] team_slave_0: left promiscuous mode
[  110.560335][ T8917] team_slave_0: left allmulticast mode
[  110.565605][ T8917] team0: Port device team_slave_0 removed
[  110.569122][ T8917] team_slave_1: left promiscuous mode
[  110.571813][ T8917] team_slave_1: left allmulticast mode
[  110.576399][ T8917] team0: Port device team_slave_1 removed
[  110.579731][ T8917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.583716][ T8917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.597827][ T8917] bond0: (slave wlan1): Releasing backup interface
[  110.605192][ T8917] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  110.610624][ T8917] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.615428][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.927'.
[  110.624945][ T8917] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.628715][ T8917] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.752821][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'.
[  110.903717][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  110.909129][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  110.913873][ T8935] sctp: [Deprecated]: syz.1.932 (pid 8935) Use of int in maxseg socket option.
[  110.913873][ T8935] Use struct sctp_assoc_value instead
[  111.142489][ T8946] netlink: 104 bytes leftover after parsing attributes in process `syz.1.935'.
[  111.335629][ T8948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.370826][ T8948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.412522][ T8948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.493406][ T8948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.589980][ T5849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.611221][ T5849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.623076][ T5856] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.640377][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.657812][ T8965] hsr0 speed is unknown, defaulting to 1000
[  111.697284][ T8968] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (65485) !
[  112.021040][ T8983] netlink: 68 bytes leftover after parsing attributes in process `syz.1.946'.
[  112.059877][ T8985] IPv6: NLM_F_REPLACE set, but no existing node found!
[  112.066402][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'.
[  112.071341][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'.
[  112.076466][ T8983] pim6reg1: entered promiscuous mode
[  112.078756][ T8983] pim6reg1: entered allmulticast mode
[  112.126611][ T8983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.946'.
[  112.505720][ T9024] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  112.590874][ T9024] tipc: Resetting bearer <eth:syzkaller0>
[  112.595304][ T9031] validate_nla: 7 callbacks suppressed
[  112.595316][ T9031] netlink: 'syz.2.962': attribute type 4 has an invalid length.
[  112.601023][ T9034] netlink: 'syz.2.962': attribute type 4 has an invalid length.
[  112.610896][ T9031] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  112.620696][ T9023] tipc: Resetting bearer <eth:syzkaller0>
[  113.551741][ T9023] tipc: Disabling bearer <eth:syzkaller0>
[  113.558262][ T9037] !: renamed from dummy0 (while UP)
[  113.867177][ T9061] netlink: 'syz.0.970': attribute type 26 has an invalid length.
[  114.020063][ T9068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.029584][ T9068] syzkaller0: entered promiscuous mode
[  114.031928][ T9068] syzkaller0: entered allmulticast mode
[  114.038740][ T9067] tipc: Resetting bearer <eth:syzkaller0>
[  114.052075][ T9067] tipc: Disabling bearer <eth:syzkaller0>
[  114.427709][ T9092] netlink: 'syz.0.979': attribute type 2 has an invalid length.
[  114.444866][ T9053] Bluetooth: hci1: Opcode 0x080f failed: -4
[  114.537735][ T9098] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  114.680122][ T9109] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  114.698796][ T9109] netlink: 'syz.0.986': attribute type 83 has an invalid length.
[  115.027959][ T5218] Bluetooth: hci2: link tx timeout
[  115.030988][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.034894][ T5218] Bluetooth: hci2: link tx timeout
[  115.036794][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.082411][ T9144] netlink: 'syz.0.996': attribute type 8 has an invalid length.
[  115.141289][ T5218] Bluetooth: hci2: link tx timeout
[  115.143193][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.164782][ T5218] Bluetooth: hci2: link tx timeout
[  115.166932][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.182934][ T5218] Bluetooth: hci2: link tx timeout
[  115.184959][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.291344][ T9160] xt_hashlimit: invalid interval
[  115.375005][ T9166] __nla_validate_parse: 72 callbacks suppressed
[  115.375021][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'.
[  115.397899][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'.
[  115.407240][ T9166] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.411724][ T9168] netlink: 'syz.0.1002': attribute type 2 has an invalid length.
[  115.417514][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'.
[  115.594826][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  115.598940][ T9190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1008'.
[  115.652014][ T9197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1010'.
[  115.656817][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'.
[  115.668849][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'.
[  115.671950][ T9194] netlink: 'syz.0.1009': attribute type 1 has an invalid length.
[  115.675926][ T9194] netlink: 'syz.0.1009': attribute type 2 has an invalid length.
[  115.679098][ T9194] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1009'.
[  115.746742][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  115.790021][ T9209] ipt_ECN: cannot use operation on non-tcp rule
[  115.804854][ T5218] Bluetooth: hci1: command 0x080f tx timeout
[  115.908118][ T9220] Cannot find del_set index 4 as target
[  115.919421][ T9221] netlink: 'syz.2.1020': attribute type 4 has an invalid length.
[  116.063565][ T9229] bond6: entered promiscuous mode
[  116.067269][ T9229] bond6: entered allmulticast mode
[  116.069830][ T9229] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.078471][ T9232] bridge0: port 3(syz_tun) entered disabled state
[  116.097082][ T9232] syz_tun (unregistering): left allmulticast mode
[  116.101441][ T9232] syz_tun (unregistering): left promiscuous mode
[  116.105164][ T9232] bridge0: port 3(syz_tun) entered disabled state
[  116.206490][ T5218] Bluetooth: hci2: link tx timeout
[  116.209162][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.212009][ T5218] Bluetooth: hci2: link tx timeout
[  116.214496][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.218304][ T5218] Bluetooth: hci2: link tx timeout
[  116.220255][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.298639][ T9243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.708332][ T5218] Bluetooth: hci2: link tx timeout
[  116.710506][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.839108][ T5218] Bluetooth: hci2: link tx timeout
[  116.841351][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.004946][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  117.619834][ T9349] hsr0 speed is unknown, defaulting to 1000
[  117.639492][ T9342] vlan3: entered allmulticast mode
[  117.641199][ T9342] hsr0: entered allmulticast mode
[  117.643106][ T9342] hsr_slave_0: entered allmulticast mode
[  117.709836][ T9349] syzkaller1: entered promiscuous mode
[  117.711854][ T9349] syzkaller1: entered allmulticast mode
[  118.456352][ T9371] syzkaller0: entered promiscuous mode
[  118.458549][ T9371] syzkaller0: entered allmulticast mode
[  118.875325][ T9389] validate_nla: 3 callbacks suppressed
[  118.875339][ T9389] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  118.881787][ T9391] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  118.931519][ T9394] nbd: couldn't find device at index 0
[  119.009307][ T9398] hsr0 speed is unknown, defaulting to 1000
[  119.084365][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  119.089760][ T9407] syzkaller0: entered allmulticast mode
[  119.789611][ T9464] netem: incorrect ge model size
[  119.805145][ T9464] netem: change failed
[  120.140122][ T9495] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  120.146978][ T9495] tipc: New replicast peer: 0.0.0.0
[  120.149618][ T9492] netlink: 'syz.2.1092': attribute type 4 has an invalid length.
[  120.154984][ T9495] tipc: Enabled bearer <udp:syz2>, priority 6
[  120.356622][ T9504] veth0_to_bridge: entered promiscuous mode
[  120.393390][ T9504] veth0_to_bridge: left promiscuous mode
[  120.496731][ T9512] x_tables: duplicate underflow at hook 1
[  120.576511][ T9514] x_tables: duplicate underflow at hook 2
[  121.654980][ T9525] __nla_validate_parse: 31 callbacks suppressed
[  121.655001][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1104'.
[  121.692432][ T9527] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  121.697173][ T9527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1105'.
[  121.697564][ T9521] hsr0 speed is unknown, defaulting to 1000
[  121.705998][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'.
[  121.710297][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'.
[  121.715145][ T9527] netlink: 'syz.0.1105': attribute type 142 has an invalid length.
[  121.810731][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  121.821378][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'.
[  121.858316][ T5849] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.858328][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  121.858339][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'.
[  121.861896][ T5849] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.861924][ T5849] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.893007][ T5849] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.989833][ T9545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1111'.
[  121.998009][ T9545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.001143][ T9545] IPv6: NLM_F_CREATE should be set when creating new route
[  122.071334][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'.
[  122.213306][ T9563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.280793][ T9570] netlink: 'syz.1.1120': attribute type 12 has an invalid length.
[  122.389915][ T9583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.393185][ T9585] syzkaller0: entered promiscuous mode
[  122.396705][ T9585] syzkaller0: entered allmulticast mode
[  122.418926][ T9585] tipc: Resetting bearer <eth:syzkaller0>
[  122.433365][ T9585] tipc: Disabling bearer <eth:syzkaller0>
[  123.057544][ T9615] xt_ipcomp: unknown flags F7
[  123.252901][ T9622] hsr0 speed is unknown, defaulting to 1000
[  123.253547][ T9624] netlink: 'syz.1.1136': attribute type 10 has an invalid length.
[  123.269114][ T9624] team0: Port device geneve0 added
[  123.295750][ T9624] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  123.350055][ T9627] af_packet: tpacket_rcv: packet too big, clamped from 4518 to 3710. macoff=82
[  123.437189][ T9634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.440358][ T9634] syzkaller0: entered promiscuous mode
[  123.442552][ T9634] syzkaller0: entered allmulticast mode
[  123.470037][ T9634] tipc: Resetting bearer <eth:syzkaller0>
[  123.569837][ T9638] bond7: entered promiscuous mode
[  123.572026][ T9638] bond7: entered allmulticast mode
[  123.576166][ T9638] 8021q: adding VLAN 0 to HW filter on device bond7
[  123.579671][ T9633] tipc: Resetting bearer <eth:syzkaller0>
[  123.591114][ T9633] tipc: Disabling bearer <eth:syzkaller0>
[  123.841800][ T9655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.844859][ T9655] syzkaller0: entered promiscuous mode
[  123.847272][ T9655] syzkaller0: entered allmulticast mode
[  123.866186][ T9655] tipc: Resetting bearer <eth:syzkaller0>
[  123.873453][ T9657] bridge_slave_0: left allmulticast mode
[  123.877794][ T9657] bridge_slave_0: left promiscuous mode
[  123.880884][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.889083][ T9657] bridge_slave_1: left allmulticast mode
[  123.891421][ T9657] bridge_slave_1: left promiscuous mode
[  123.893804][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.905647][ T9657] bond0: (slave bond_slave_0): Releasing backup interface
[  123.913179][ T9657] bond0: (slave bond_slave_1): Releasing backup interface
[  123.927771][ T9657] team0: Port device team_slave_0 removed
[  123.941274][ T9657] team0: Port device team_slave_1 removed
[  123.945507][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.948558][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.953010][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.958033][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.976049][ T9657] team0: Port device geneve0 removed
[  123.983339][ T9657] bond2: (slave bridge5): Releasing active interface
[  123.996056][ T9657] bond0: (slave bond5): Releasing backup interface
[  124.002643][ T9657] batman_adv: batadv0: Interface deactivated: ipvlan2
[  124.010934][ T9657] batman_adv: batadv0: Removing interface: ipvlan2
[  124.017622][ T9657] bond7: (slave gretap2): Releasing active interface
[  124.027407][ T9657] bond8: (slave ip6erspan0): Releasing active interface
[  124.036260][ T9654] tipc: Resetting bearer <eth:syzkaller0>
[  124.047135][ T9654] tipc: Disabling bearer <eth:syzkaller0>
[  124.140348][ T9660] netlink: 'syz.1.1148': attribute type 15 has an invalid length.
[  124.165997][ T9663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.561720][ T9699] xt_nat: multiple ranges no longer supported
[  124.577295][ T9700] xt_hashlimit: size too large, truncated to 1048576
[  124.726570][ T9711] batadv_slave_0: entered allmulticast mode
[  124.749001][ T9713] batadv_slave_0: left allmulticast mode
[  124.907033][ T9737] hsr0 speed is unknown, defaulting to 1000
[  124.969736][ T9743] syzkaller1: entered promiscuous mode
[  124.971547][ T9743] syzkaller1: entered allmulticast mode
[  125.108180][ T9753] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  125.328500][ T9764] netlink: 'syz.1.1180': attribute type 5 has an invalid length.
[  125.348507][ T9766] netlink: 'syz.1.1180': attribute type 5 has an invalid length.
[  125.503530][ T9774] netlink: 'syz.1.1182': attribute type 1 has an invalid length.
[  125.542587][ T9776] netlink: 'syz.2.1184': attribute type 2 has an invalid length.
[  125.630963][ T9781] netlink: 'syz.1.1185': attribute type 8 has an invalid length.
[  125.683557][ T9785] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  125.853858][ T9802] netlink: 'syz.1.1195': attribute type 12 has an invalid length.
[  126.012220][ T9821] netlink: 'syz.1.1200': attribute type 1 has an invalid length.
[  126.108258][ T9832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  126.137304][ T9832] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  126.139840][ T9832] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  126.149782][ T9836] netlink: 'syz.1.1205': attribute type 2 has an invalid length.
[  126.326652][ T9850] netlink: 'syz.1.1209': attribute type 2 has an invalid length.
[  126.496297][ T9869] unsupported nla_type 58
[  126.579742][ T9884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15
[  126.616003][ T9884] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  126.731144][ T9896] can: request_module (can-proto-0) failed.
[  126.912018][ T9915] delete_channel: no stack
[  126.948265][ T8214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.950883][ T8214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.970476][ T9923] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  126.975213][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.995885][ T9923] tipc: Resetting bearer <eth:syzkaller0>
[  127.005907][ T9922] tipc: Resetting bearer <eth:syzkaller0>
[  127.987006][ T5897] tipc: Node number set to 1512978548
[  128.087887][ T9922] tipc: Disabling bearer <eth:syzkaller0>
[  128.115184][ T9926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.188021][ T9942] __nla_validate_parse: 38 callbacks suppressed
[  128.188032][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'.
[  128.430151][ T9959] tipc: Enabled bearer <udp:syz2>, priority 6
[  128.453136][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1237'.
[  128.519730][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  128.587183][ T9977] trusted_key: syz.2.1241 sent an empty control message without MSG_MORE.
[  128.637541][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.653030][ T9979] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  128.657525][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.660601][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.663558][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.668462][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.671669][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  128.675565][ T9979] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1242'.
[  130.317843][T10053] validate_nla: 6 callbacks suppressed
[  130.317858][T10053] netlink: 'syz.0.1267': attribute type 3 has an invalid length.
[  130.369381][T10055] bridge0: entered promiscuous mode
[  130.433528][T10056] netlink: 'syz.0.1268': attribute type 4 has an invalid length.
[  130.734386][T10066] lo speed is unknown, defaulting to 1000
[  130.737096][T10066] lo speed is unknown, defaulting to 1000
[  130.741340][T10066] lo speed is unknown, defaulting to 1000
[  130.761480][T10066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  130.793572][T10066] lo speed is unknown, defaulting to 1000
[  130.797498][T10066] lo speed is unknown, defaulting to 1000
[  130.802639][T10066] lo speed is unknown, defaulting to 1000
[  131.974029][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  132.288608][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.115588][T10174] netlink: 'syz.1.1306': attribute type 4 has an invalid length.
[  133.320051][T10185] __nla_validate_parse: 62 callbacks suppressed
[  133.320065][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  133.344550][T10189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1308'.
[  133.408057][T10183] netlink: 'syz.1.1308': attribute type 5 has an invalid length.
[  133.458899][T10197] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1310'.
[  133.599223][T10203] syz_tun: entered allmulticast mode
[  133.615650][T10203] syz_tun: left allmulticast mode
[  133.737172][T10221] netlink: 'syz.0.1319': attribute type 58 has an invalid length.
[  133.975692][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'.
[  134.023549][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'.
[  134.027709][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'.
[  134.269701][T10273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'.
[  134.562960][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'.
[  134.679573][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  135.456928][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1354'.
[  135.491010][T10342] veth7: entered promiscuous mode
[  135.532992][T10348] netlink: 'syz.0.1355': attribute type 74 has an invalid length.
[  135.533364][T10327] netlink: 'syz.1.1351': attribute type 1 has an invalid length.
[  135.589369][T10352] netlink: 'syz.0.1355': attribute type 74 has an invalid length.
[  135.618328][T10344] xt_CT: No such helper "snmp"
[  135.729827][T10369] pim6reg1: entered allmulticast mode
[  135.806494][T10376] team_slave_1: entered promiscuous mode
[  135.808549][T10376] team_slave_1: entered allmulticast mode
[  135.817294][T10382] netlink: 'syz.1.1359': attribute type 2 has an invalid length.
[  135.820670][T10382] netlink: 'syz.1.1359': attribute type 5 has an invalid length.
[  136.800410][T10402] macvlan0: entered allmulticast mode
[  136.802502][T10402] netlink: 'syz.2.1370': attribute type 1 has an invalid length.
[  136.805417][T10402] netlink: 'syz.2.1370': attribute type 2 has an invalid length.
[  136.852300][T10406] hsr0 speed is unknown, defaulting to 1000
[  136.869693][T10406] lo speed is unknown, defaulting to 1000
[  136.919816][    T9] IPVS: starting estimator thread 0...
[  136.935407][T10408] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  137.006969][T10416] IPVS: using max 48 ests per chain, 115200 per kthread
[  137.163514][T10428] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  137.183062][T10430] Bluetooth: hci1: Opcode 0x080f failed: -4
[  137.465932][T10440] hsr_slave_1 (unregistering): left promiscuous mode
[  137.664543][T10451] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  137.724046][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  137.818921][T10468] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  137.879609][T10470] netem: change failed
[  137.997989][T10483] netlink: 'syz.2.1395': attribute type 1 has an invalid length.
[  138.017094][T10483] 8021q: adding VLAN 0 to HW filter on device bond5
[  138.032519][T10483] bond5: (slave geneve2): making interface the new active one
[  138.038611][T10483] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  138.043750][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.057415][T10483] bond5: entered promiscuous mode
[  138.064784][T10483] geneve2: entered promiscuous mode
[  138.080062][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.083242][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.086439][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.140003][T10489] netlink: 'syz.2.1398': attribute type 4 has an invalid length.
[  138.451127][T10506] __nla_validate_parse: 19 callbacks suppressed
[  138.451139][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'.
[  138.549443][T10511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16
[  138.565657][ T8799] udevd[8799]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory
[  138.569132][ T8799] udevd[8799]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  138.574668][T10511] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  138.764140][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  138.913152][T10526] netlink: 'syz.1.1407': attribute type 3 has an invalid length.
[  138.916376][T10526] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1407'.
[  138.920276][T10526] NCSI netlink: No device for ifindex 0
[  139.048742][T10534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1409'.
[  139.052466][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1409'.
[  139.090946][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'.
[  139.146578][T10541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  139.222609][T10545] openvswitch: netlink: IP tunnel dst address not specified
[  139.244540][ T5835] Bluetooth: hci1: command 0x080f tx timeout
[  139.804003][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.192443][T10565] wlan1: mtu greater than device maximum
[  140.200639][T10571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.205190][T10572] syzkaller0: entered promiscuous mode
[  140.207003][T10572] syzkaller0: entered allmulticast mode
[  140.222098][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.226224][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.229135][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.232058][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.234030][ T5869] lo speed is unknown, defaulting to 1000
[  140.241534][T10565] tipc: Resetting bearer <eth:syzkaller0>
[  140.645605][T10564] tipc: Resetting bearer <eth:syzkaller0>
[  140.659661][T10564] tipc: Disabling bearer <eth:syzkaller0>
[  140.854139][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.902548][T10589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1422'.
[  140.905845][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  141.108396][T10596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1424'.
[  141.163462][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1427'.
[  141.303334][T10615] lo: entered allmulticast mode
[  141.308466][T10615] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1430'.
[  141.316750][T10615] bridge0: entered promiscuous mode
[  141.320322][T10614] lo: left allmulticast mode
[  141.358059][T10617] x_tables: duplicate underflow at hook 2
[  141.362766][T10617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.894057][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.993693][    T9] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1
[  142.004475][    T9] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22
[  142.041646][T10625] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  142.205794][T10655] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  142.222416][T10655] validate_nla: 1 callbacks suppressed
[  142.222427][T10655] netlink: 'syz.2.1443': attribute type 7 has an invalid length.
[  142.227039][T10655] netlink: 'syz.2.1443': attribute type 8 has an invalid length.
[  142.337486][T10669] netem: change failed
[  142.344157][T10669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.351146][T10665] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  142.456562][T10688] SET target dimension over the limit!
[  142.924260][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  143.127683][T10732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.130700][T10732] syzkaller0: entered promiscuous mode
[  143.132874][T10732] syzkaller0: entered allmulticast mode
[  143.151985][T10732] tipc: Resetting bearer <eth:syzkaller0>
[  143.156606][T10731] tipc: Resetting bearer <eth:syzkaller0>
[  143.167299][T10731] tipc: Disabling bearer <eth:syzkaller0>
[  143.483756][T10742] netlink: 'syz.1.1470': attribute type 3 has an invalid length.
[  143.489060][T10742] siw: device registration error -23
[  143.587201][T10756] netlink: 'syz.1.1474': attribute type 4 has an invalid length.
[  143.608945][T10756] __nla_validate_parse: 9 callbacks suppressed
[  143.608963][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  143.618823][T10756] chnl_net:caif_netlink_parms(): no params data found
[  143.651937][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'.
[  143.678380][T10763] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1476'.
[  143.784332][T10778] netlink: 'syz.2.1482': attribute type 21 has an invalid length.
[  143.786835][T10778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1482'.
[  143.789759][T10778] netlink: 'syz.2.1482': attribute type 4 has an invalid length.
[  143.792463][T10778] netlink: 'syz.2.1482': attribute type 3 has an invalid length.
[  143.803954][T10778] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1482'.
[  143.882695][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'.
[  143.974640][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  144.014758][T10803] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1490'.
[  144.070932][T10804] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17
[  144.490313][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'.
[  144.510050][T10827] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.514074][T10827] team0: Failed to send options change via netlink (err -105)
[  144.516757][T10827] team0: Port device batadv1 added
[  144.649555][T10839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1502'.
[  144.700539][T10849] x_tables: duplicate underflow at hook 2
[  144.704925][T10849] x_tables: duplicate underflow at hook 2
[  144.707626][T10849] x_tables: duplicate underflow at hook 2
[  144.709502][T10849] x_tables: duplicate underflow at hook 2
[  144.714678][T10849] x_tables: duplicate underflow at hook 2
[  144.717051][T10849] x_tables: duplicate underflow at hook 2
[  144.719048][T10849] x_tables: duplicate underflow at hook 2
[  144.721728][T10849] x_tables: duplicate underflow at hook 2
[  144.723640][T10849] x_tables: duplicate underflow at hook 2
[  144.728002][T10850] netlink: 'syz.2.1505': attribute type 2 has an invalid length.
[  144.728030][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'.
[  144.737002][T10850] `: entered promiscuous mode
[  144.772980][T10856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.858242][T10864] ip6tnl3: entered promiscuous mode
[  144.860562][T10864] ip6tnl3: entered allmulticast mode
[  144.901012][T10866] netlink: 'syz.0.1511': attribute type 12 has an invalid length.
[  145.004229][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.121209][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.124899][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.395425][T10880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18
[  145.664531][T10892] xt_hashlimit: size too large, truncated to 1048576
[  146.044086][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  146.045399][T10914] syzkaller0: entered promiscuous mode
[  146.049548][T10914] syzkaller0: entered allmulticast mode
[  146.350236][T10919] netlink: 'syz.2.1525': attribute type 1 has an invalid length.
[  146.399112][T10919] bond7: (slave bridge0): making interface the new active one
[  146.402017][T10919] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  146.765967][T10943] hsr0 speed is unknown, defaulting to 1000
[  146.769010][T10943] lo speed is unknown, defaulting to 1000
[  147.086751][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  147.926034][T10965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.929711][T10965] syzkaller0: entered promiscuous mode
[  147.932137][T10965] syzkaller0: entered allmulticast mode
[  147.941619][T10965] tipc: Resetting bearer <eth:syzkaller0>
[  147.950343][T10964] tipc: Resetting bearer <eth:syzkaller0>
[  147.960476][T10964] tipc: Disabling bearer <eth:syzkaller0>
[  148.124039][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  148.311794][T10993] macsec2: entered promiscuous mode
[  148.321422][T10993] macsec2: entered allmulticast mode
[  148.323753][T10993] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  148.506246][T11018] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  148.509918][T11018] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  148.530758][T11020] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  148.544664][T11020] netlink: 'syz.2.1559': attribute type 21 has an invalid length.
[  148.617813][T11029] __nla_validate_parse: 9 callbacks suppressed
[  148.617840][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'.
[  148.631599][T11025] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1561'.
[  149.164435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.383125][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  149.427597][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'.
[  149.431717][T11045] hsr0 speed is unknown, defaulting to 1000
[  149.462598][T11048] netlink: 'syz.1.1568': attribute type 10 has an invalid length.
[  149.466541][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1568'.
[  149.469718][T11048] team0: entered promiscuous mode
[  149.471424][T11048] batadv1: entered promiscuous mode
[  149.473253][T11048] team0: entered allmulticast mode
[  149.475149][T11048] batadv1: entered allmulticast mode
[  149.478138][T11048] 8021q: adding VLAN 0 to HW filter on device team0
[  149.480496][T11048] bridge0: port 1(team0) entered blocking state
[  149.482450][T11048] bridge0: port 1(team0) entered disabled state
[  149.486960][T11048] bridge0: port 1(team0) entered blocking state
[  149.488893][T11048] bridge0: port 1(team0) entered forwarding state
[  149.596369][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  149.600637][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  149.623172][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'.
[  149.730508][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'.
[  149.737718][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'.
[  149.741118][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'.
[  149.789906][T11071] netlink: 'syz.2.1575': attribute type 1 has an invalid length.
[  149.820348][T11071] 8021q: adding VLAN 0 to HW filter on device bond8
[  149.834695][T11074] sctp: [Deprecated]: syz.1.1576 (pid 11074) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.834695][T11074] Use struct sctp_sack_info instead
[  149.846969][T11071] 8021q: adding VLAN 0 to HW filter on device bond8
[  149.850197][T11071] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  149.857414][T11071] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  150.204146][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  150.630902][T11099] netlink: 'syz.0.1582': attribute type 12 has an invalid length.
[  150.634549][T11099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1582'.
[  151.244179][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  151.777577][T11127] veth1_to_bridge: entered promiscuous mode
[  151.779607][T11127] veth1_to_bridge: entered allmulticast mode
[  152.225437][T11169] Unsupported ieee802154 address type: 0
[  152.284426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  152.536684][T11197] bridge_slave_0: entered allmulticast mode
[  152.701307][T11215] netlink: zone id is out of range
[  152.705485][T11215] netlink: zone id is out of range
[  152.707212][T11215] netlink: set zone limit has 4 unknown bytes
[  152.739026][T11220] netlink: 'syz.2.1619': attribute type 1 has an invalid length.
[  152.770138][T11220] 8021q: adding VLAN 0 to HW filter on device bond9
[  152.785113][T11220] bond9: (slave gretap1): making interface the new active one
[  152.790494][T11220] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  152.896163][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.914779][T11240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  152.919404][T11237] delete_channel: no stack
[  153.324320][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  153.629754][T11259] netlink: 'syz.0.1631': attribute type 1 has an invalid length.
[  153.632478][T11259] netlink: 'syz.0.1631': attribute type 1 has an invalid length.
[  153.635334][T11259] __nla_validate_parse: 13 callbacks suppressed
[  153.635343][T11259] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1631'.
[  153.857419][T11270] netlink: 'syz.0.1635': attribute type 11 has an invalid length.
[  153.862940][T11270] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1635'.
[  153.906700][T11270] netlink: 'syz.0.1635': attribute type 1 has an invalid length.
[  153.933478][T11273] netlink: 'syz.2.1636': attribute type 1 has an invalid length.
[  153.966006][T11273] 8021q: adding VLAN 0 to HW filter on device bond10
[  153.994516][T11270] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  154.031386][T11270] veth3: entered promiscuous mode
[  154.045259][T11270] bond8: (slave veth3): Enslaving as a backup interface with a down link
[  154.068308][T11270] bond2: (slave bridge1): Releasing active interface
[  154.080938][T11270] bond3: (slave bridge2): Releasing active interface
[  154.083148][T11270] bond3: (slave bridge2): the permanent HWaddr of slave - 56:61:dc:b2:d3:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  154.099564][T11270] bond3: (slave bridge3): Releasing active interface
[  154.106711][T11270] bond0: (slave bond4): Releasing backup interface
[  154.112594][T11270] bond8: (slave ip6gretap2): Releasing backup interface
[  154.115689][T11270] bond8: (slave ip6gretap2): the permanent HWaddr of slave - 22:96:2a:ce:c3:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  154.124570][T11270] bond8: (slave veth3): Releasing backup interface
[  154.214315][T11287] netlink: 'syz.2.1639': attribute type 2 has an invalid length.
[  154.250924][T11287] : entered promiscuous mode
[  154.259873][T11291] xt_TCPMSS: Only works on TCP SYN packets
[  154.294746][T11289] lo: entered allmulticast mode
[  154.296693][T11289] lo: left allmulticast mode
[  154.300249][T11289] netlink: 'syz.1.1642': attribute type 1 has an invalid length.
[  154.302788][T11289] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1642'.
[  154.306073][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  154.310244][T11289] openvswitch: netlink: Flow key attr not present in new flow.
[  154.364019][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  154.371771][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'.
[  154.386795][T11300] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  154.391102][T11300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'.
[  154.427494][T11298] bridge0: port 1(team0) entered disabled state
[  154.446400][T11298] netlink: 'syz.1.1645': attribute type 8 has an invalid length.
[  154.454266][T11300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1646'.
[  154.575438][T11308] bridge0: port 2(macsec0) entered blocking state
[  154.581397][T11308] bridge0: port 2(macsec0) entered disabled state
[  154.585908][T11308] macsec0: entered allmulticast mode
[  154.589693][T11308] macsec0: entered promiscuous mode
[  154.723020][T11325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1656'.
[  154.729754][T11325] netlink: 'syz.1.1656': attribute type 1 has an invalid length.
[  154.811350][T11331] pim6reg1: entered allmulticast mode
[  154.979662][T11340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.983184][T11340] syzkaller0: entered promiscuous mode
[  154.986217][T11340] syzkaller0: entered allmulticast mode
[  155.007262][T11340] tipc: Resetting bearer <eth:syzkaller0>
[  155.010897][T11339] tipc: Resetting bearer <eth:syzkaller0>
[  155.021949][T11339] tipc: Disabling bearer <eth:syzkaller0>
[  155.332004][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'.
[  155.345313][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'.
[  155.404143][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.639635][T11370] netlink: 'syz.1.1670': attribute type 17 has an invalid length.
[  155.648158][T11370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.773843][T11381] xt_hashlimit: size too large, truncated to 1048576
[  156.443997][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  157.391883][T11440] delete_channel: no stack
[  157.484161][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  157.542877][T11445] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  157.715723][T11461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  157.826623][T11472] xt_CT: No such helper "snmp"
[  157.876164][T11480] batadv_slave_0: entered promiscuous mode
[  157.894256][T11479] batadv_slave_0: left promiscuous mode
[  158.014898][T11492] 8021q: VLANs not supported on wg0
[  158.324399][T11507] macsec1: entered promiscuous mode
[  158.326784][T11507] team0: entered promiscuous mode
[  158.329271][T11507] macsec1: entered allmulticast mode
[  158.331369][T11507] team0: entered allmulticast mode
[  158.334493][T11507] team0: Device macsec1 is already an upper device of the team interface
[  158.339943][T11507] team0: left allmulticast mode
[  158.342132][T11507] team0: left promiscuous mode
[  158.524050][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  158.813619][T11532] __nla_validate_parse: 13 callbacks suppressed
[  158.813636][T11532] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1721'.
[  158.865500][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'.
[  158.869790][T11537] bridge0: port 1(gretap0) entered blocking state
[  158.872655][T11537] bridge0: port 1(gretap0) entered disabled state
[  158.875957][T11537] gretap0: entered allmulticast mode
[  158.879338][T11537] gretap0: entered promiscuous mode
[  158.881783][T11537] bridge0: port 1(gretap0) entered blocking state
[  158.884185][T11537] bridge0: port 1(gretap0) entered forwarding state
[  159.564081][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  160.604073][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  161.644163][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.684117][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  163.724301][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.764067][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  165.804112][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  166.844094][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.884337][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  168.924067][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  169.965357][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.014070][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  172.054136][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.084022][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  174.124141][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  175.164239][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.204295][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.244086][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  178.284158][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  178.421208][ T5835] Bluetooth: hci2: link tx timeout
[  178.423114][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  179.324101][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.364031][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.444188][T11549] Bluetooth: hci2: command 0x0405 tx timeout
[  180.446551][T11549] Bluetooth: hci1: command 0x080f tx timeout
[  181.404020][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  182.444170][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.485273][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.500359][T11599] hsr0 speed is unknown, defaulting to 1000
[  183.504913][T11601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.505581][T11599] lo speed is unknown, defaulting to 1000
[  183.529965][T11602] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1730'.
[  183.658646][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.245958][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  184.252673][T11627] vlan3: entered allmulticast mode
[  184.255140][T11627] hsr0: entered allmulticast mode
[  184.256755][T11627] hsr_slave_0: entered allmulticast mode
[  184.258512][T11627] hsr_slave_1: entered allmulticast mode
[  184.395595][T11638] 8021q: adding VLAN 0 to HW filter on device bond9
[  184.398159][T11638] bridge0: port 3(bond9) entered blocking state
[  184.400343][T11638] bridge0: port 3(bond9) entered disabled state
[  184.402602][T11638] bond9: entered allmulticast mode
[  184.405936][T11638] bond9: entered promiscuous mode
[  184.408013][T11638] bridge0: port 3(bond9) entered blocking state
[  184.410351][T11638] bridge0: port 3(bond9) entered forwarding state
[  184.416225][ T8215] bridge0: port 3(bond9) entered disabled state
[  184.422375][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1741'.
[  184.425620][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1741'.
[  184.433507][T11638] !: entered promiscuous mode
[  184.439267][T11638] !: left promiscuous mode
[  184.524107][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  184.614214][T11646] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1743'.
[  184.621356][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'.
[  184.770494][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'.
[  185.496293][T11685] wlan1: mtu greater than device maximum
[  185.564115][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  185.638640][T11689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'.
[  185.861532][T11700] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  185.947584][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'.
[  185.951179][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'.
[  186.571661][T11729] openvswitch: netlink: Key type 179 is out of range max 32
[  186.614383][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  187.027082][T11771] openvswitch: netlink: IPv6 tunnel dst address is zero
[  187.035929][T11766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.476577][T11805] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 4, id = 0
[  187.644104][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  187.669733][   T33] audit: type=1800 audit(1753334319.234:5): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1798" name="memory.events" dev="tmpfs" ino=3216 res=0 errno=0
[  187.802018][T11839] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  188.002855][T11841] hsr0 speed is unknown, defaulting to 1000
[  188.016123][T11841] lo speed is unknown, defaulting to 1000
[  188.146910][T11856] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  188.214505][T11861] xt_cgroup: xt_cgroup: no path or classid specified
[  188.681293][T11901] __nla_validate_parse: 10 callbacks suppressed
[  188.681310][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'.
[  188.694165][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  188.730899][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'.
[  188.738980][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'.
[  188.747164][T11905] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  188.815957][T11912] validate_nla: 6 callbacks suppressed
[  188.815974][T11912] netlink: 'syz.0.1827': attribute type 1 has an invalid length.
[  188.821305][T11912] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1827'.
[  188.845406][T11913] netlink: 'syz.1.1826': attribute type 83 has an invalid length.
[  188.921103][T11926] netlink: 212308 bytes leftover after parsing attributes in process `syz.2.1828'.
[  188.983002][T11931] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1833'.
[  189.013569][T11931] syzkaller0: entered promiscuous mode
[  189.016097][T11931] syzkaller0: entered allmulticast mode
[  189.398942][T11965] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1843'.
[  189.418312][T11965] bond0 (unregistering): Released all slaves
[  189.443010][T11960] netlink: 'syz.0.1842': attribute type 7 has an invalid length.
[  189.446612][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'.
[  189.734150][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  190.387129][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'.
[  190.416391][T11994] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  190.489621][T11999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.764180][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  190.958501][T12001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.200290][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  191.356945][T12026] netlink: 'syz.0.1862': attribute type 1 has an invalid length.
[  191.522755][T12038] netlink: 'syz.0.1867': attribute type 1 has an invalid length.
[  191.558540][T12038] 8021q: adding VLAN 0 to HW filter on device bond9
[  191.562262][T12046] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  191.721944][T12061] veth0_macvtap: left promiscuous mode
[  191.765233][T12067] netlink: 'syz.1.1879': attribute type 1 has an invalid length.
[  191.804028][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  192.001538][T12098] tls_set_device_offload: netdev not found
[  192.243219][T12114] xt_l2tp: wrong L2TP version: 0
[  192.275784][T12118] netlink: 'syz.1.1894': attribute type 13 has an invalid length.
[  192.330159][T12118] netlink: 'syz.1.1894': attribute type 13 has an invalid length.
[  192.334888][T12118] netlink: 'syz.1.1894': attribute type 13 has an invalid length.
[  192.338978][T12118] netlink: 'syz.1.1894': attribute type 13 has an invalid length.
[  192.844264][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  192.997592][T12172] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  193.014461][T12175] ipvlan3: entered promiscuous mode
[  193.019420][T12175] ipvlan3: entered allmulticast mode
[  193.021700][T12175] bridge_slave_1: entered allmulticast mode
[  193.117068][T12172] hsr0 speed is unknown, defaulting to 1000
[  193.120932][T12172] lo speed is unknown, defaulting to 1000
[  193.517048][T12196] : renamed from bridge_slave_0
[  193.787512][T12224] __nla_validate_parse: 20 callbacks suppressed
[  193.787532][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  193.894092][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  193.986253][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  193.989368][T12235] chnl_net:caif_netlink_parms(): no params data found
[  194.054187][T12243] hsr0 speed is unknown, defaulting to 1000
[  194.058240][T12243] lo speed is unknown, defaulting to 1000
[  194.062767][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'.
[  194.112266][T12244] validate_nla: 29 callbacks suppressed
[  194.112282][T12244] netlink: 'syz.2.1931': attribute type 13 has an invalid length.
[  194.120340][T12244] netlink: 'syz.2.1931': attribute type 17 has an invalid length.
[  194.172534][T12244] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.182979][T12244] 8021q: adding VLAN 0 to HW filter on device team0
[  194.193292][T12244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.208450][T12243] bridge0: entered promiscuous mode
[  194.213095][T12258] netlink: 'syz.1.1936': attribute type 1 has an invalid length.
[  194.255914][T12258] bond10: (slave geneve4): making interface the new active one
[  194.259814][T12258] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  194.281818][T12267] veth0: entered promiscuous mode
[  194.285265][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  194.289580][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'.
[  194.295847][T12267] veth0 (unregistering): left promiscuous mode
[  194.358100][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  194.362594][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  194.376840][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  194.500157][T12289] netlink: 'syz.1.1939': attribute type 21 has an invalid length.
[  194.510017][T12289] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1939'.
[  194.796308][T12320] xt_nat: multiple ranges no longer supported
[  194.842983][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'.
[  194.852018][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'.
[  194.858674][T12325] netlink: 'syz.1.1943': attribute type 1 has an invalid length.
[  194.861665][T12325] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1943'.
[  194.866127][T12325] netlink: 'syz.1.1943': attribute type 2 has an invalid length.
[  194.869121][T12325] netlink: 'syz.1.1943': attribute type 1 has an invalid length.
[  194.924263][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  194.957958][T12327] net veth1_virt_wifi : renamed from virt_wifi0
[  195.015074][T12331] xt_TPROXY: Can be used only with -p tcp or -p udp
[  195.176521][T12341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1949'.
[  195.334171][   T72] wlan1: Trigger new scan to find an IBSS to join
[  195.336279][   T72] wlan0: Trigger new scan to find an IBSS to join
[  195.494544][T12383] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  195.728034][T12407] Bluetooth: MGMT ver 1.23
[  195.847674][T12422] veth0_to_bond: entered allmulticast mode
[  195.963994][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  195.987037][T12432] netlink: 'syz.0.1974': attribute type 1 has an invalid length.
[  196.007243][T12432] 8021q: adding VLAN 0 to HW filter on device bond10
[  196.025362][T12432] 8021q: adding VLAN 0 to HW filter on device bond10
[  196.027673][T12432] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  196.031962][T12432] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  196.087124][T12432] veth1: entered promiscuous mode
[  196.092875][T12432] bond10: (slave veth1): Enslaving as an active interface with a down link
[  196.099373][T12432] erspan0: entered allmulticast mode
[  196.157528][T12442] netlink: 'syz.0.1974': attribute type 11 has an invalid length.
[  196.288882][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'.
[  196.304282][T12448] netlink: 'syz.0.1980': attribute type 6 has an invalid length.
[  196.307519][T12448] netlink: 'syz.0.1980': attribute type 5 has an invalid length.
[  196.392947][T12449] bond7: (slave bridge0): Releasing active interface
[  196.446884][T12456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.451014][T12456] syzkaller0: entered promiscuous mode
[  196.453322][T12456] syzkaller0: entered allmulticast mode
[  196.477774][T12457] tipc: Resetting bearer <eth:syzkaller0>
[  196.497514][T12457] tipc: Disabling bearer <eth:syzkaller0>
[  196.508735][T12463] dvmrp1: entered allmulticast mode
[  196.511464][T12463] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  196.516271][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.519278][T12463] dvmrp1: left allmulticast mode
[  197.004190][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  197.728292][T12513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  198.044010][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  198.364383][ T8214] wlan0: Trigger new scan to find an IBSS to join
[  199.084036][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  199.309055][T12559] xt_TCPMSS: Only works on TCP SYN packets
[  199.317714][T12559] __nla_validate_parse: 16 callbacks suppressed
[  199.317731][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'.
[  199.505702][T12572] validate_nla: 3 callbacks suppressed
[  199.505719][T12572] netlink: 'syz.2.2022': attribute type 9 has an invalid length.
[  199.512069][T12572] netlink: 'syz.2.2022': attribute type 6 has an invalid length.
[  199.808431][T12582] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  199.860701][T12589] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  199.917012][T12593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2032'.
[  200.097638][T12610] siw: device registration error -23
[  200.124111][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  200.215203][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'.
[  200.218167][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'.
[  200.222934][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[  200.300115][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'.
[  200.300933][T12626] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  200.306550][T12626] tipc: Enabled bearer <udp:syz2>, priority 6
[  200.424396][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'.
[  200.434669][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  200.704463][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  200.710405][T12655] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2052'.
[  200.930407][T12677] 8021q: adding VLAN 0 to HW filter on device bond11
[  201.025151][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  201.028619][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'.
[  201.164092][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  201.234525][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  201.324706][   T35] wlan0: Trigger new scan to find an IBSS to join
[  201.375302][T12727] netlink: 'syz.0.2072': attribute type 10 has an invalid length.
[  201.451447][T12731] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  201.479044][T12729] IPVS: Scheduler module ip_vs_sip not found
[  201.754259][T12759] netlink: 'syz.0.2080': attribute type 1 has an invalid length.
[  201.817898][T12761] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  201.820969][T12761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.972655][T12776] netlink: 'syz.1.2084': attribute type 1 has an invalid length.
[  202.085714][T12784] pim6reg1: entered promiscuous mode
[  202.087963][T12784] pim6reg1: entered allmulticast mode
[  202.104092][T12782] netlink: zone id is out of range
[  202.220707][T12782] hsr0 speed is unknown, defaulting to 1000
[  202.227433][T12782] lo speed is unknown, defaulting to 1000
[  202.297880][ T8214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.432733][T12797] x_tables: ip_tables: icmp match: only valid for protocol 1
[  202.467074][T12806] netlink: 'syz.1.2093': attribute type 21 has an invalid length.
[  202.490452][T12800] hsr0 speed is unknown, defaulting to 1000
[  202.493466][T12800] lo speed is unknown, defaulting to 1000
[  202.615707][T12814] netlink: 'syz.2.2096': attribute type 1 has an invalid length.
[  202.622166][T12818] Timeout policy `syz1' can only be used by L3 protocol number 246
[  203.285264][T12856] can: request_module (can-proto-3) failed.
[  203.680363][T12864] netlink: 'syz.2.2106': attribute type 2 has an invalid length.
[  203.727879][T12866] ip6t_srh: unknown srh match flags  4000
[  203.933103][T12878] netlink: 'syz.0.2110': attribute type 1 has an invalid length.
[  203.949904][T12878] 8021q: adding VLAN 0 to HW filter on device bond12
[  203.950039][T12880] netlink: 'syz.1.2109': attribute type 1 has an invalid length.
[  203.963317][T12878] bond12: (slave gretap3): making interface the new active one
[  203.968582][T12878] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  203.984068][T12878] syz.0.2110 (12878) used greatest stack depth: 18728 bytes left
[  204.704966][T12890] bridge0: entered allmulticast mode
[  204.956736][T12915] __nla_validate_parse: 20 callbacks suppressed
[  204.956748][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.963962][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.972091][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.978725][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.981940][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.985042][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.986463][T12918] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.988185][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.995037][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  204.997848][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  205.000576][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  205.325004][    C1] net_ratelimit: 22 callbacks suppressed
[  205.325022][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  205.404225][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  205.600223][T12965] syzkaller0: entered promiscuous mode
[  205.602730][T12965] syzkaller0: entered allmulticast mode
[  205.884539][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  206.364133][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  206.449133][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  207.404080][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  207.484263][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  207.943766][T13023] lo: entered allmulticast mode
[  207.945797][T13023] lo: left allmulticast mode
[  207.980161][T13030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.983471][T13030] syzkaller0: entered promiscuous mode
[  207.986726][T13030] syzkaller0: entered allmulticast mode
[  208.010622][T13030] tipc: Resetting bearer <eth:syzkaller0>
[  208.021915][T13029] tipc: Resetting bearer <eth:syzkaller0>
[  208.039790][T13029] tipc: Disabling bearer <eth:syzkaller0>
[  208.386949][T13054] batadv0: entered promiscuous mode
[  208.444180][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  208.478578][T13056] syzkaller0: entered promiscuous mode
[  208.480380][T13056] syzkaller0: entered allmulticast mode
[  208.502308][T13058] hsr0 speed is unknown, defaulting to 1000
[  208.506556][T13058] lo speed is unknown, defaulting to 1000
[  208.524255][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.661328][T13059] hsr0 speed is unknown, defaulting to 1000
[  208.672221][T13059] lo speed is unknown, defaulting to 1000
[  208.826566][T13082] netlink: 'syz.1.2167': attribute type 13 has an invalid length.
[  208.831549][T13082] netlink: 'syz.1.2167': attribute type 17 has an invalid length.
[  208.843581][T13082] bridge0: left promiscuous mode
[  208.848127][T13082] 8021q: adding VLAN 0 to HW filter on device team0
[  208.855719][T13082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.928900][T13098] netlink: del zone limit has 8 unknown bytes
[  208.957041][T13100] ipt_REJECT: TCP_RESET invalid for non-tcp
[  209.025562][T13104] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  209.031501][T13105] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  210.397687][T13125] __nla_validate_parse: 13 callbacks suppressed
[  210.397706][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'.
[  210.476244][T13131] netlink: 'syz.1.2177': attribute type 62 has an invalid length.
[  210.524089][    C1] net_ratelimit: 2 callbacks suppressed
[  210.524106][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  210.614114][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.691075][T13152] : entered promiscuous mode
[  210.696849][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'.
[  210.728431][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'.
[  210.730840][T13157] netlink: 'syz.1.2190': attribute type 1 has an invalid length.
[  210.734659][T13157] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2190'.
[  210.739056][T13156] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  210.769400][T13149] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  210.833839][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2191'.
[  210.854019][T13168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2193'.
[  211.083503][T13175] netlink: 'syz.1.2195': attribute type 23 has an invalid length.
[  211.097882][T13175] tipc: Enabling of bearer <et:g> rejected, media not registered
[  211.131572][T13182] netlink: del zone limit has 8 unknown bytes
[  211.173662][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'.
[  211.211902][T13186] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  211.222349][T13184] bridge: RTM_NEWNEIGH with invalid ether address
[  211.271163][T13194] netlink: 'syz.2.2201': attribute type 4 has an invalid length.
[  211.276867][T13193] netlink: 'syz.2.2201': attribute type 4 has an invalid length.
[  211.295213][T10567] lo speed is unknown, defaulting to 1000
[  211.297060][T10567] syz2: Port: 1 Link DOWN
[  211.391712][T13212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2207'.
[  211.564212][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  211.644558][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.826520][T13232] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.295623][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'.
[  212.315960][T13256] geneve3: entered promiscuous mode
[  212.318189][T13256] geneve3: entered allmulticast mode
[  212.326819][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53511 - 0
[  212.331222][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53511 - 0
[  212.342567][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53511 - 0
[  212.346482][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53511 - 0
[  212.385299][T13262] netlink: 'syz.2.2218': attribute type 1 has an invalid length.
[  212.446594][T13262] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  212.452039][T13262] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  212.467469][T13272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2221'.
[  212.489366][T13273] gretap2: entered promiscuous mode
[  212.604032][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  212.675094][T13291] netlink: 'syz.0.2227': attribute type 9 has an invalid length.
[  212.679469][T13291] netlink: 'syz.0.2227': attribute type 7 has an invalid length.
[  212.684210][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  212.849044][T13311] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  213.155559][T13322] gretap0: entered promiscuous mode
[  213.161744][T13323] 0{X: renamed from gretap0
[  213.168267][T13323] 0{X: left promiscuous mode
[  213.174203][T13323] 0{X: entered allmulticast mode
[  214.274461][ T5869] lo speed is unknown, defaulting to 1000
[  214.285924][ T5869] syz2: Port: 1 Link ACTIVE
[  214.448616][T13386] validate_nla: 4 callbacks suppressed
[  214.448628][T13386] netlink: 'syz.1.2263': attribute type 3 has an invalid length.
[  215.434513][T13426] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  215.441556][T13426] __nla_validate_parse: 14 callbacks suppressed
[  215.441573][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'.
[  215.448126][T13426] tipc: Disabling bearer <udp:syz2>
[  215.728936][    C1] net_ratelimit: 6 callbacks suppressed
[  215.728956][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  215.814268][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  215.900238][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  215.949701][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'.
[  215.966689][T13443] openvswitch: netlink: Message has 4 unknown bytes.
[  216.006127][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'.
[  216.120524][T13469] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  216.216070][T13484] xt_check_table_hooks: 56 callbacks suppressed
[  216.216082][T13484] x_tables: duplicate underflow at hook 1
[  216.230925][T13485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.237142][T13485] syzkaller0: entered promiscuous mode
[  216.239644][T13485] syzkaller0: entered allmulticast mode
[  216.259367][T13485] tipc: Resetting bearer <eth:syzkaller0>
[  216.307841][T13485] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  216.310628][T13485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2295'.
[  216.369526][T13485] xt_CT: No such helper "snmp"
[  216.373631][T13483] tipc: Resetting bearer <eth:syzkaller0>
[  216.388017][T13483] tipc: Disabling bearer <eth:syzkaller0>
[  216.536951][T13511] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2302'.
[  216.592577][T13516] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2304'.
[  216.764126][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  216.825803][T13540] netlink: 'syz.2.2309': attribute type 8 has an invalid length.
[  216.829075][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'.
[  216.844703][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.942463][T13545] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2310'.
[  216.956165][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'.
[  216.966897][T13545] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  217.057957][T13559] netlink: 'syz.0.2313': attribute type 11 has an invalid length.
[  217.080221][T13559] bridge0: entered allmulticast mode
[  217.438965][T13587] netlink: 'syz.1.2317': attribute type 2 has an invalid length.
[  217.443268][T13587] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  217.446958][T13587] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  217.804013][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  217.884258][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.165486][T13644] ksmbd: Unknown IPC event: 0, ignore.
[  218.177278][T13648] ksmbd: Unknown IPC event: 0, ignore.
[  218.355772][T13663] 8021q: VLANs not supported on lo
[  218.479312][T13673] xt_hashlimit: size too large, truncated to 1048576
[  218.611406][T13677] ip6gretap0: entered promiscuous mode
[  218.614632][T13677] macsec3: entered promiscuous mode
[  218.621555][T13677] macsec3: entered allmulticast mode
[  218.623966][T13677] ip6gretap0: entered allmulticast mode
[  218.844007][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  219.084046][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  220.804233][T13810] netlink: 'syz.0.2382': attribute type 1 has an invalid length.
[  220.920775][T13821] __nla_validate_parse: 13 callbacks suppressed
[  220.920790][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'.
[  220.926878][    C1] net_ratelimit: 4 callbacks suppressed
[  220.926893][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  221.004512][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.118963][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  221.128590][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'.
[  221.139672][T13843] pim6reg: entered allmulticast mode
[  221.142006][T13843] pim6reg: left allmulticast mode
[  221.175267][T13851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2395'.
[  221.183121][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  221.195618][T13852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2394'.
[  221.348771][T13859] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  221.482439][T13865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.488205][T13865] syzkaller0: entered promiscuous mode
[  221.490705][T13865] syzkaller0: entered allmulticast mode
[  221.500072][T13865] tipc: Resetting bearer <eth:syzkaller0>
[  221.503614][T13864] tipc: Resetting bearer <eth:syzkaller0>
[  221.516476][T13864] tipc: Disabling bearer <eth:syzkaller0>
[  221.965188][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  222.044167][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.148424][T13904] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  222.276452][T13917] netlink: 'syz.1.2415': attribute type 1 has an invalid length.
[  222.280909][T13917] netlink: 'syz.1.2415': attribute type 1 has an invalid length.
[  222.334570][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2414'.
[  222.355306][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2414'.
[  222.369178][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2414'.
[  222.508136][T13939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2423'.
[  222.509572][T13944] netlink: 'syz.2.2425': attribute type 1 has an invalid length.
[  222.619396][T13952] net veth1_virt_wifi : renamed from virt_wifi0
[  222.644474][T13953] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  222.647066][T13953] netlink: 'syz.1.2427': attribute type 2 has an invalid length.
[  223.004134][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  223.084252][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  223.401732][T13991] IPVS: Scheduler module ip_vs_Uip not found
[  223.404549][T13949] Bluetooth: hci1: Opcode 0x080f failed: -4
[  223.575956][T14003] hsr0 speed is unknown, defaulting to 1000
[  223.580160][T14003] lo speed is unknown, defaulting to 1000
[  224.010779][T14025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.016125][T14025] syzkaller0: entered promiscuous mode
[  224.018217][T14025] syzkaller0: entered allmulticast mode
[  224.030075][T14025] tipc: Resetting bearer <eth:syzkaller0>
[  224.033407][T14024] tipc: Resetting bearer <eth:syzkaller0>
[  224.043658][T14024] tipc: Disabling bearer <eth:syzkaller0>
[  224.045861][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  224.124206][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.367498][T14042] batadv2: entered promiscuous mode
[  224.604443][ T5218] Bluetooth: hci1: command 0x080f tx timeout
[  225.086676][T14097] D: renamed from syzkaller0
[  225.094110][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.387836][T14140] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  225.530465][T14148] delete_channel: no stack
[  225.573130][T14158] netlink: 'syz.1.2488': attribute type 6 has an invalid length.
[  225.579026][T14159] netlink: 'syz.1.2488': attribute type 6 has an invalid length.
[  225.671355][T14174] netlink: 'syz.2.2487': attribute type 3 has an invalid length.
[  225.701332][T14176] x_tables: duplicate underflow at hook 2
[  225.848927][T14194] netlink: 'syz.2.2498': attribute type 4 has an invalid length.
[  225.932619][T14204] __nla_validate_parse: 26 callbacks suppressed
[  225.932634][T14204] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2499'.
[  226.006591][T14208] vlan2: entered promiscuous mode
[  226.008392][T14208] bond0: entered promiscuous mode
[  226.010195][T14208] vlan2: entered allmulticast mode
[  226.016363][T14208] bond0: entered allmulticast mode
[  226.033239][T14210] syzkaller1: entered promiscuous mode
[  226.036213][T14210] syzkaller1: entered allmulticast mode
[  226.095736][T14212] net_ratelimit: 1 callbacks suppressed
[  226.095747][T14212] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  226.124092][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  226.134948][T14223] xt_bpf: check failed: parse error
[  226.204215][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.211737][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'.
[  226.215568][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'.
[  226.225145][T14231] bridge0: port 4(vlan3) entered blocking state
[  226.227895][T14231] bridge0: port 4(vlan3) entered disabled state
[  226.230920][T14231] vlan3: entered allmulticast mode
[  226.233050][T14231] bridge0: entered allmulticast mode
[  226.239150][T14231] vlan3: left allmulticast mode
[  226.241378][T14231] bridge0: left allmulticast mode
[  226.383211][T14245] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2512'.
[  226.862549][T14278] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.2522'.
[  227.009220][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'.
[  227.119506][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'.
[  227.140549][T14300] syzkaller0: entered allmulticast mode
[  227.165433][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  227.244305][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.283742][T14309] netlink: 'syz.2.2533': attribute type 1 has an invalid length.
[  227.312184][T14309] 8021q: adding VLAN 0 to HW filter on device bond13
[  227.351915][T14312] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2534'.
[  227.589263][T14339] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  227.593146][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'.
[  227.597319][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'.
[  227.616007][T14339] 8021q: adding VLAN 0 to HW filter on device bond14
[  227.623390][T14339] vlan4: entered promiscuous mode
[  227.626046][T14339] bond14: entered promiscuous mode
[  227.627796][T14339] vlan4: entered allmulticast mode
[  227.629485][T14339] bond14: entered allmulticast mode
[  227.866374][T14366] xt_bpf: check failed: parse error
[  227.991078][T14377] bridge0: port 1(gretap0) entered disabled state
[  228.142213][T14391] syzkaller0: entered promiscuous mode
[  228.146974][T14391] syzkaller0: entered allmulticast mode
[  228.214047][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  228.284214][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.457233][T14415] netlink: 'syz.0.2565': attribute type 1 has an invalid length.
[  228.811497][ T5849] nci: nci_ntf_packet: unknown ntf opcode 0x104
[  229.244075][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.324514][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  229.478148][T14459] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  229.481631][T14459] netlink: 'syz.1.2575': attribute type 2 has an invalid length.
[  229.524479][T14461] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  229.734810][T14474] hsr0 speed is unknown, defaulting to 1000
[  229.744954][T14475] hsr0 speed is unknown, defaulting to 1000
[  229.745454][T14474] lo speed is unknown, defaulting to 1000
[  229.762857][T14475] lo speed is unknown, defaulting to 1000
[  230.030205][   T33] audit: type=1800 audit(1753334361.594:6): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2589" name=33FFFF dev="tmpfs" ino=4231 res=0 errno=0
[  230.516650][T14538] team0: Mode changed to "loadbalance"
[  230.547378][T14541] netlink: 'syz.0.2604': attribute type 2 has an invalid length.
[  231.031001][ T5856] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  231.143023][T14590] hsr0 speed is unknown, defaulting to 1000
[  231.147693][T14590] lo speed is unknown, defaulting to 1000
[  231.324107][    C1] net_ratelimit: 2 callbacks suppressed
[  231.324123][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.414290][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.048942][T14621] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  232.060128][T14623] __nla_validate_parse: 17 callbacks suppressed
[  232.060138][T14623] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2627'.
[  232.072385][T14625] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2628'.
[  232.143465][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'.
[  232.156400][T14631] 0{X: entered promiscuous mode
[  232.182419][T14636] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2633'.
[  232.260577][T14644] netlink: 'syz.0.2636': attribute type 8 has an invalid length.
[  232.276670][T14644] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2636'.
[  232.374074][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  232.444192][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.592897][T14664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2642'.
[  232.975467][T14674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2646'.
[  232.980097][T14674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2646'.
[  233.274465][T14696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2649'.
[  233.405134][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  233.484244][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  233.683049][T13468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.690103][T13468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.743533][T14721] syzkaller1: entered promiscuous mode
[  233.749044][T14721] syzkaller1: entered allmulticast mode
[  233.753686][T14721] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  233.799170][T14728] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2660'.
[  233.966720][T14734] veth0: entered promiscuous mode
[  233.970332][T14734] veth0 (unregistering): left promiscuous mode
[  234.026822][T14740] netlink: 'syz.1.2665': attribute type 1 has an invalid length.
[  234.106745][T14744] 8021q: adding VLAN 0 to HW filter on device bond11
[  234.109345][T14744] bridge0: port 4(bond11) entered blocking state
[  234.111515][T14744] bridge0: port 4(bond11) entered disabled state
[  234.113817][T14744] bond11: entered allmulticast mode
[  234.117310][T14744] bond11: entered promiscuous mode
[  234.119453][T14744] bridge0: port 4(bond11) entered blocking state
[  234.121609][T14744] bridge0: port 4(bond11) entered forwarding state
[  234.126426][T14742] tap1: tun_chr_ioctl cmd 1074025680
[  234.131485][   T69] bridge0: port 4(bond11) entered disabled state
[  234.136634][T14742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.178967][T14747] syzkaller1: entered promiscuous mode
[  234.181398][T14747] syzkaller1: entered allmulticast mode
[  234.197088][T14741] tipc: Disabling bearer <eth:syzkaller0>
[  234.373232][T14749] hsr0 speed is unknown, defaulting to 1000
[  234.377451][T14749] lo speed is unknown, defaulting to 1000
[  234.444133][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.524288][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.692375][T14771] 8021q: VLANs not supported on ipvlan1
[  234.694174][T13468] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  235.303046][T14839] netlink: 'syz.1.2694': attribute type 13 has an invalid length.
[  235.307905][T14839] netlink: 'syz.1.2694': attribute type 4 has an invalid length.
[  235.369014][T14843] tipc: Can't bind to reserved service type 1
[  235.484065][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  235.492017][T14861] sctp: [Deprecated]: syz.2.2698 (pid 14861) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.492017][T14861] Use struct sctp_sack_info instead
[  235.574183][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.647587][T14865] hsr0 speed is unknown, defaulting to 1000
[  235.651661][T14865] lo speed is unknown, defaulting to 1000
[  236.220430][T14880] netlink: 'syz.0.2707': attribute type 29 has an invalid length.
[  236.524241][    C1] net_ratelimit: 1 callbacks suppressed
[  236.524255][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  236.614105][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.873762][T14903] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  236.878327][T14903] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  237.263839][T14909] __nla_validate_parse: 26 callbacks suppressed
[  237.263853][T14909] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2717'.
[  237.454439][T14924] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  237.457223][T14924] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2723'.
[  237.460383][T14924] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  237.467092][T14925] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  237.470454][T14925] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2723'.
[  237.474935][T14925] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  237.479650][T14924] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  237.482883][T14924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2723'.
[  237.564215][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  237.565074][T14931] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2724'.
[  237.626566][T14938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2726'.
[  237.644024][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.774372][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'.
[  237.925157][T14962] netlink: 'syz.1.2734': attribute type 1 has an invalid length.
[  237.929740][T14962] netlink: 'syz.1.2734': attribute type 2 has an invalid length.
[  237.932463][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'.
[  237.966317][T14971] netlink: 'syz.1.2736': attribute type 7 has an invalid length.
[  238.027929][T14978] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2738'.
[  238.031107][T14978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2738'.
[  238.043362][T14978] 0{X: left allmulticast mode
[  238.044963][T14980] netlink: 'syz.2.2739': attribute type 32 has an invalid length.
[  238.049494][T14978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.100268][T14984] netlink: 'syz.2.2739': attribute type 9 has an invalid length.
[  238.117855][T14985] hsr0 speed is unknown, defaulting to 1000
[  238.614891][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  238.684142][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  238.762928][T15034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.766889][T15034] syzkaller0: entered promiscuous mode
[  238.769446][T15034] syzkaller0: entered allmulticast mode
[  238.801888][T15035] ip6gretap0: left allmulticast mode
[  238.809553][T14593] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.812777][T15035] netlink: 'syz.1.2751': attribute type 11 has an invalid length.
[  238.813698][T14593] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.820635][T14593] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.835335][T14593] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.842307][T15034] tipc: Resetting bearer <eth:syzkaller0>
[  238.849688][T15033] tipc: Resetting bearer <eth:syzkaller0>
[  238.860130][T15033] tipc: Disabling bearer <eth:syzkaller0>
[  239.450193][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.644039][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  239.734024][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.085568][T15119] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003
[  240.116105][T15117] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.351967][T15148] x_tables: duplicate underflow at hook 3
[  240.526841][T15153] pim6reg0: tun_chr_ioctl cmd 1074025694
[  240.569893][T15163] hsr0 speed is unknown, defaulting to 1000
[  240.572587][T15163] lo speed is unknown, defaulting to 1000
[  240.829757][T15174] syzkaller1: entered promiscuous mode
[  240.831586][T15174] syzkaller1: entered allmulticast mode
[  241.327938][T15188] sctp: [Deprecated]: syz.2.2805 (pid 15188) Use of int in max_burst socket option deprecated.
[  241.327938][T15188] Use struct sctp_assoc_value instead
[  241.724257][    C1] net_ratelimit: 2 callbacks suppressed
[  241.724267][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  241.803295][T15223] NCSI netlink: No device for ifindex 246
[  241.805427][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.959808][T15240] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  241.966382][T15214] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  241.996600][T15244] (unnamed net_device) (uninitialized): option coupled_control: invalid value (222)
[  242.388499][T15270] ipt_ECN: cannot use operation on non-tcp rule
[  242.430249][T15273] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001
[  242.438609][T15273] __nla_validate_parse: 31 callbacks suppressed
[  242.438627][T15273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2831'.
[  242.445903][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'.
[  242.460795][T15273] vlan3: entered allmulticast mode
[  242.533717][T15280] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  242.637560][T15288] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2838'.
[  242.764030][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.792496][T15305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.799613][T15305] syzkaller0: entered promiscuous mode
[  242.802087][T15305] syzkaller0: entered allmulticast mode
[  242.825670][T15305] tipc: Resetting bearer <eth:syzkaller0>
[  242.844090][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  242.887930][T15310] : entered promiscuous mode
[  242.888842][T15311] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.894755][T15312] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.941648][T15315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2847'.
[  243.228284][T15342] IPv6: sit2: Disabled Multicast RS
[  243.237342][T15342] sit2: entered allmulticast mode
[  243.347963][T15355] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  243.391208][T15360] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2859'.
[  243.476009][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'.
[  243.478990][T15369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.482551][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'.
[  243.487788][T15369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.543327][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2860'.
[  243.548249][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2860'.
[  243.584203][T15378] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.745948][T15394] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2871'.
[  243.804355][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  243.866410][T15396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  243.867421][ T5862] nci: nci_rsp_packet: unknown rsp opcode 0xe39
[  243.869788][T15403] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  243.875575][T15401] validate_nla: 8 callbacks suppressed
[  243.875587][T15401] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  243.885174][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  243.922697][T15401] bond16: entered promiscuous mode
[  243.930796][T15401] 8021q: adding VLAN 0 to HW filter on device bond16
[  243.938621][T15409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.941282][T15409] syzkaller0: entered promiscuous mode
[  243.943538][T15409] syzkaller0: entered allmulticast mode
[  243.957466][T15409] tipc: Resetting bearer <eth:syzkaller0>
[  243.963496][T15408] tipc: Resetting bearer <eth:syzkaller0>
[  243.976661][T15408] tipc: Disabling bearer <eth:syzkaller0>
[  244.352584][T15441] hsr0 speed is unknown, defaulting to 1000
[  244.370061][T15441] lo speed is unknown, defaulting to 1000
[  244.389649][T15453] netlink: 'syz.1.2884': attribute type 9 has an invalid length.
[  244.542355][T15462] SET target dimension over the limit!
[  244.553193][T15456] netlink: 'syz.2.2887': attribute type 2 has an invalid length.
[  244.924117][    C1] ==================================================================
[  244.926782][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  244.929367][    C1] Read of size 2 at addr ffff888105f8082a by task syz.1.2889/15470
[  244.932806][    C1] 
[  244.933623][    C1] CPU: 1 UID: 0 PID: 15470 Comm: syz.1.2889 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  244.933634][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.933638][    C1] Call Trace:
[  244.933643][    C1]  <IRQ>
[  244.933646][    C1]  dump_stack_lvl+0x189/0x250
[  244.933657][    C1]  ? rcu_is_watching+0x15/0xb0
[  244.933666][    C1]  ? __kasan_check_byte+0x12/0x40
[  244.933677][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.933683][    C1]  ? rcu_is_watching+0x15/0xb0
[  244.933690][    C1]  ? lock_release+0x4b/0x3e0
[  244.933698][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  244.933706][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  244.933714][    C1]  print_report+0xca/0x230
[  244.933721][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  244.933727][    C1]  kasan_report+0x118/0x150
[  244.933736][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  244.933743][    C1]  rose_timer_expiry+0x471/0x4b0
[  244.933749][    C1]  call_timer_fn+0x17e/0x5f0
[  244.933756][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  244.933761][    C1]  ? call_timer_fn+0xbe/0x5f0
[  244.933771][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  244.933779][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  244.933789][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.933795][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  244.933801][    C1]  __run_timer_base+0x61a/0x860
[  244.933813][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  244.933823][    C1]  ? lapic_next_event+0x11/0x20
[  244.933830][    C1]  ? clockevents_program_event+0x24d/0x360
[  244.933841][    C1]  run_timer_softirq+0xb7/0x180
[  244.933850][    C1]  handle_softirqs+0x286/0x870
[  244.933859][    C1]  ? do_softirq+0xec/0x180
[  244.933867][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  244.933874][    C1]  ? hash_ipmark4_add+0x15c9/0x20b0
[  244.933884][    C1]  do_softirq+0xec/0x180
[  244.933891][    C1]  </IRQ>
[  244.933893][    C1]  <TASK>
[  244.933895][    C1]  ? __pfx_do_softirq+0x10/0x10
[  244.933902][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  244.933911][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.933917][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  244.933924][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  244.933930][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  244.933938][    C1]  ? hash_ipmark4_add+0x15c9/0x20b0
[  244.933947][    C1]  hash_ipmark4_add+0x15c9/0x20b0
[  244.933960][    C1]  hash_ipmark4_uadt+0x70c/0x920
[  244.933969][    C1]  ? __pfx_hash_ipmark4_add+0x10/0x10
[  244.933977][    C1]  ? __pfx_hash_ipmark4_uadt+0x10/0x10
[  244.933985][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  244.933994][    C1]  ? call_ad+0x2d4/0xb00
[  244.934003][    C1]  call_ad+0x383/0xb00
[  244.934013][    C1]  ? __pfx_call_ad+0x10/0x10
[  244.934023][    C1]  ? __nla_parse+0x40/0x60
[  244.934032][    C1]  ip_set_ad+0x791/0x930
[  244.934041][    C1]  ? __pfx_ip_set_ad+0x10/0x10
[  244.934049][    C1]  ? __mutex_lock+0x330/0xe80
[  244.934061][    C1]  nfnetlink_rcv_msg+0xb4d/0x1130
[  244.934071][    C1]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  244.934082][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  244.934116][    C1]  ? __lock_acquire+0xab9/0xd20
[  244.934127][    C1]  netlink_rcv_skb+0x208/0x470
[  244.934134][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  244.934142][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  244.934150][    C1]  ? bpf_lsm_capable+0x9/0x20
[  244.934158][    C1]  ? security_capable+0x7e/0x2e0
[  244.934166][    C1]  nfnetlink_rcv+0x26a/0x2520
[  244.934175][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  244.934182][    C1]  ? kernel_text_address+0xa5/0xe0
[  244.934189][    C1]  ? __kernel_text_address+0xd/0x40
[  244.934198][    C1]  ? unwind_get_return_address+0x4d/0x90
[  244.934206][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  244.934214][    C1]  ? arch_stack_walk+0xfc/0x150
[  244.934225][    C1]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  244.934233][    C1]  ? stack_depot_save_flags+0x40/0x900
[  244.934241][    C1]  ? __lock_acquire+0xab9/0xd20
[  244.934250][    C1]  ? __lock_acquire+0xab9/0xd20
[  244.934258][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  244.934265][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  244.934272][    C1]  netlink_unicast+0x82f/0x9e0
[  244.934282][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  244.934291][    C1]  ? netlink_sendmsg+0x642/0xb30
[  244.934296][    C1]  ? skb_put+0x11b/0x210
[  244.934305][    C1]  netlink_sendmsg+0x805/0xb30
[  244.934313][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.934319][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  244.934327][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  244.934334][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.934340][    C1]  __sock_sendmsg+0x21c/0x270
[  244.934350][    C1]  ____sys_sendmsg+0x505/0x830
[  244.934358][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.934367][    C1]  ? import_iovec+0x74/0xa0
[  244.934376][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  244.934383][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.934396][    C1]  ? __fget_files+0x2a/0x420
[  244.934401][    C1]  ? __fget_files+0x3a0/0x420
[  244.934408][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  244.934415][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  244.934424][    C1]  ? rcu_is_watching+0x15/0xb0
[  244.934433][    C1]  ? do_syscall_64+0xbe/0x3b0
[  244.934444][    C1]  do_syscall_64+0xfa/0x3b0
[  244.934454][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.934462][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.934472][    C1]  ? exc_page_fault+0x9f/0xf0
[  244.934478][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.934485][    C1] RIP: 0033:0x7fd5bc18e9a9
[  244.934491][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.934497][    C1] RSP: 002b:00007fd5b9ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.934506][    C1] RAX: ffffffffffffffda RBX: 00007fd5bc3b5fa0 RCX: 00007fd5bc18e9a9
[  244.934511][    C1] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 000000000000000a
[  244.934515][    C1] RBP: 00007fd5bc210d69 R08: 0000000000000000 R09: 0000000000000000
[  244.934519][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.934523][    C1] R13: 0000000000000000 R14: 00007fd5bc3b5fa0 R15: 00007ffedb1006a8
[  244.934530][    C1]  </TASK>
[  244.934533][    C1] 
[  245.145787][    C1] Allocated by task 15176:
[  245.147641][    C1]  kasan_save_track+0x3e/0x80
[  245.149192][    C1]  __kasan_kmalloc+0x93/0xb0
[  245.150754][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  245.152529][    C1]  __genradix_ptr_alloc+0x352/0x4a0
[  245.154256][    C1]  __genradix_prealloc+0x44/0x90
[  245.155807][    C1]  sctp_stream_init+0x14b/0x440
[  245.157400][    C1]  sctp_association_new+0x10dd/0x25f0
[  245.159140][    C1]  sctp_connect_new_asoc+0x2c5/0x690
[  245.160932][    C1]  __sctp_connect+0x5ba/0xd50
[  245.162502][    C1]  sctp_getsockopt_connectx3+0x2c4/0x440
[  245.164349][    C1]  sctp_getsockopt+0x98a/0xb60
[  245.165894][    C1]  do_sock_getsockopt+0x372/0x450
[  245.167537][    C1]  __x64_sys_getsockopt+0x1a5/0x250
[  245.169300][    C1]  do_syscall_64+0xfa/0x3b0
[  245.170800][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.172720][    C1] 
[  245.173500][    C1] Freed by task 15176:
[  245.174849][    C1]  kasan_save_track+0x3e/0x80
[  245.176346][    C1]  kasan_save_free_info+0x46/0x50
[  245.177933][    C1]  __kasan_slab_free+0x62/0x70
[  245.179619][    C1]  kfree+0x18e/0x440
[  245.181298][    C1]  genradix_free_recurse+0x5d/0xa0
[  245.183087][    C1]  genradix_free_recurse+0x5d/0xa0
[  245.185262][    C1]  sctp_stream_free+0xd5/0x110
[  245.187275][    C1]  sctp_association_free+0x26d/0x7f0
[  245.189489][    C1]  sctp_do_sm+0x3eba/0x5a20
[  245.191471][    C1]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  245.193731][    C1]  sctp_close+0x409/0x900
[  245.195597][    C1]  inet_release+0x144/0x190
[  245.197538][    C1]  sock_close+0xc3/0x240
[  245.199316][    C1]  __fput+0x44c/0xa70
[  245.201007][    C1]  task_work_run+0x1d4/0x260
[  245.202975][    C1]  get_signal+0x11ed/0x1340
[  245.204868][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  245.207230][    C1]  exit_to_user_mode_loop+0x75/0x110
[  245.209410][    C1]  do_syscall_64+0x2bd/0x3b0
[  245.211319][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.213551][    C1] 
[  245.214546][    C1] The buggy address belongs to the object at ffff888105f80800
[  245.214546][    C1]  which belongs to the cache kmalloc-512 of size 512
[  245.219695][    C1] The buggy address is located 42 bytes inside of
[  245.219695][    C1]  freed 512-byte region [ffff888105f80800, ffff888105f80a00)
[  245.224243][    C1] 
[  245.225058][    C1] The buggy address belongs to the physical page:
[  245.227206][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888105f81400 pfn:0x105f80
[  245.230634][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  245.233472][    C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  245.236346][    C1] page_type: f5(slab)
[  245.237675][    C1] raw: 057ff00000000240 ffff88801a441c80 ffffea0004706110 ffffea00042c0b10
[  245.240893][    C1] raw: ffff888105f81400 000000000010000c 00000000f5000000 0000000000000000
[  245.244577][    C1] head: 057ff00000000240 ffff88801a441c80 ffffea0004706110 ffffea00042c0b10
[  245.247478][    C1] head: ffff888105f81400 000000000010000c 00000000f5000000 0000000000000000
[  245.250519][    C1] head: 057ff00000000002 ffffea000417e001 00000000ffffffff 00000000ffffffff
[  245.253748][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  245.257469][    C1] page dumped because: kasan: bad access detected
[  245.260036][    C1] page_owner tracks the page as allocated
[  245.262347][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5841, tgid 5841 (syz-executor), ts 57561600784, free_ts 57554127804
[  245.268726][    C1]  post_alloc_hook+0x240/0x2a0
[  245.270405][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  245.272226][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  245.274132][    C1]  alloc_pages_mpol+0x232/0x4a0
[  245.275679][    C1]  allocate_slab+0x8a/0x3b0
[  245.277158][    C1]  ___slab_alloc+0xbfc/0x1480
[  245.278657][    C1]  __kmalloc_noprof+0x305/0x4f0
[  245.280448][    C1]  fib6_info_alloc+0x30/0xf0
[  245.282058][    C1]  ip6_route_info_create+0x142/0x860
[  245.283769][    C1]  ip6_route_add+0x49/0x1b0
[  245.285283][    C1]  addrconf_permanent_addr+0x67f/0x9d0
[  245.287111][    C1]  addrconf_notify+0x887/0x1010
[  245.289122][    C1]  notifier_call_chain+0x1b6/0x3e0
[  245.291124][    C1]  __dev_notify_flags+0x18d/0x2e0
[  245.293206][    C1]  netif_change_flags+0xe8/0x1a0
[  245.295261][    C1]  do_setlink+0xc55/0x41c0
[  245.296832][    C1] page last free pid 5841 tgid 5841 stack trace:
[  245.298919][    C1]  __free_frozen_pages+0xc71/0xe70
[  245.300709][    C1]  stack_depot_save_flags+0x445/0x900
[  245.302487][    C1]  kasan_save_track+0x4f/0x80
[  245.304043][    C1]  __kasan_slab_alloc+0x6c/0x80
[  245.305663][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  245.307460][    C1]  skb_clone+0x212/0x3a0
[  245.308810][    C1]  dev_queue_xmit_nit+0x416/0xcc0
[  245.310482][    C1]  dev_hard_start_xmit+0x1be/0x830
[  245.312184][    C1]  sch_direct_xmit+0x241/0x4b0
[  245.313763][    C1]  __dev_queue_xmit+0x1857/0x3b50
[  245.315433][    C1]  ip_finish_output2+0xd03/0x1160
[  245.317111][    C1]  __ip_queue_xmit+0x1106/0x1b00
[  245.318773][    C1]  __tcp_transmit_skb+0x2215/0x3680
[  245.320831][    C1]  tcp_write_xmit+0x1862/0x67f0
[  245.322658][    C1]  __tcp_push_pending_frames+0x97/0x360
[  245.324513][    C1]  tcp_rcv_established+0xf12/0x1eb0
[  245.326315][    C1] 
[  245.327141][    C1] Memory state around the buggy address:
[  245.329326][    C1]  ffff888105f80700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.332558][    C1]  ffff888105f80780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.335688][    C1] >ffff888105f80800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.338344][    C1]                                   ^
[  245.340124][    C1]  ffff888105f80880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.342736][    C1]  ffff888105f80900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.345386][    C1] ==================================================================
[  245.348295][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  245.350736][    C1] CPU: 1 UID: 0 PID: 15470 Comm: syz.1.2889 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  245.354842][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.358410][    C1] Call Trace:
[  245.359772][    C1]  <IRQ>
[  245.360970][    C1]  dump_stack_lvl+0x99/0x250
[  245.362874][    C1]  ? __asan_memcpy+0x40/0x70
[  245.364726][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.366905][    C1]  ? __pfx__printk+0x10/0x10
[  245.368555][    C1]  panic+0x2db/0x790
[  245.369955][    C1]  ? __pfx_panic+0x10/0x10
[  245.371504][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  245.373691][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  245.375810][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.377872][    C1]  ? print_memory_metadata+0x314/0x400
[  245.379702][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.381660][    C1]  check_panic_on_warn+0x89/0xb0
[  245.383417][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.385036][    C1]  end_report+0x78/0x160
[  245.386377][    C1]  kasan_report+0x129/0x150
[  245.387815][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.389492][    C1]  rose_timer_expiry+0x471/0x4b0
[  245.391186][    C1]  call_timer_fn+0x17e/0x5f0
[  245.393114][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.395362][    C1]  ? call_timer_fn+0xbe/0x5f0
[  245.397115][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  245.398779][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.400641][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.402347][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.404134][    C1]  __run_timer_base+0x61a/0x860
[  245.405787][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  245.407515][    C1]  ? lapic_next_event+0x11/0x20
[  245.409116][    C1]  ? clockevents_program_event+0x24d/0x360
[  245.411246][    C1]  run_timer_softirq+0xb7/0x180
[  245.412894][    C1]  handle_softirqs+0x286/0x870
[  245.414442][    C1]  ? do_softirq+0xec/0x180
[  245.415877][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  245.417577][    C1]  ? hash_ipmark4_add+0x15c9/0x20b0
[  245.419287][    C1]  do_softirq+0xec/0x180
[  245.420782][    C1]  </IRQ>
[  245.421776][    C1]  <TASK>
[  245.422752][    C1]  ? __pfx_do_softirq+0x10/0x10
[  245.424313][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  245.426160][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.428201][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  245.430507][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  245.432682][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  245.434767][    C1]  ? hash_ipmark4_add+0x15c9/0x20b0
[  245.436487][    C1]  hash_ipmark4_add+0x15c9/0x20b0
[  245.438113][    C1]  hash_ipmark4_uadt+0x70c/0x920
[  245.439962][    C1]  ? __pfx_hash_ipmark4_add+0x10/0x10
[  245.441849][    C1]  ? __pfx_hash_ipmark4_uadt+0x10/0x10
[  245.444063][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  245.446037][    C1]  ? call_ad+0x2d4/0xb00
[  245.447496][    C1]  call_ad+0x383/0xb00
[  245.448845][    C1]  ? __pfx_call_ad+0x10/0x10
[  245.450427][    C1]  ? __nla_parse+0x40/0x60
[  245.451889][    C1]  ip_set_ad+0x791/0x930
[  245.453289][    C1]  ? __pfx_ip_set_ad+0x10/0x10
[  245.454863][    C1]  ? __mutex_lock+0x330/0xe80
[  245.456428][    C1]  nfnetlink_rcv_msg+0xb4d/0x1130
[  245.458057][    C1]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  245.459904][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  245.461692][    C1]  ? __lock_acquire+0xab9/0xd20
[  245.463286][    C1]  netlink_rcv_skb+0x208/0x470
[  245.464855][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  245.466618][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  245.468350][    C1]  ? bpf_lsm_capable+0x9/0x20
[  245.470067][    C1]  ? security_capable+0x7e/0x2e0
[  245.471664][    C1]  nfnetlink_rcv+0x26a/0x2520
[  245.473249][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  245.475242][    C1]  ? kernel_text_address+0xa5/0xe0
[  245.477340][    C1]  ? __kernel_text_address+0xd/0x40
[  245.479472][    C1]  ? unwind_get_return_address+0x4d/0x90
[  245.481654][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  245.483630][    C1]  ? arch_stack_walk+0xfc/0x150
[  245.485223][    C1]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  245.486878][    C1]  ? stack_depot_save_flags+0x40/0x900
[  245.488634][    C1]  ? __lock_acquire+0xab9/0xd20
[  245.490286][    C1]  ? __lock_acquire+0xab9/0xd20
[  245.491881][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  245.493583][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  245.495299][    C1]  netlink_unicast+0x82f/0x9e0
[  245.496833][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  245.498510][    C1]  ? netlink_sendmsg+0x642/0xb30
[  245.500134][    C1]  ? skb_put+0x11b/0x210
[  245.501525][    C1]  netlink_sendmsg+0x805/0xb30
[  245.503041][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.504722][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  245.506484][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  245.508534][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.510355][    C1]  __sock_sendmsg+0x21c/0x270
[  245.511842][    C1]  ____sys_sendmsg+0x505/0x830
[  245.513359][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.515036][    C1]  ? import_iovec+0x74/0xa0
[  245.516509][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  245.518021][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.519859][    C1]  ? __fget_files+0x2a/0x420
[  245.521310][    C1]  ? __fget_files+0x3a0/0x420
[  245.522748][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  245.524357][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.526109][    C1]  ? rcu_is_watching+0x15/0xb0
[  245.527644][    C1]  ? do_syscall_64+0xbe/0x3b0
[  245.529202][    C1]  do_syscall_64+0xfa/0x3b0
[  245.530712][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.532742][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.535257][    C1]  ? exc_page_fault+0x9f/0xf0
[  245.537239][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.539709][    C1] RIP: 0033:0x7fd5bc18e9a9
[  245.541518][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.548413][    C1] RSP: 002b:00007fd5b9ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.551851][    C1] RAX: ffffffffffffffda RBX: 00007fd5bc3b5fa0 RCX: 00007fd5bc18e9a9
[  245.555008][    C1] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 000000000000000a
[  245.558363][    C1] RBP: 00007fd5bc210d69 R08: 0000000000000000 R09: 0000000000000000
[  245.561645][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.564901][    C1] R13: 0000000000000000 R14: 00007fd5bc3b5fa0 R15: 00007ffedb1006a8
[  245.568203][    C1]  </TASK>
[  245.570135][    C1] Kernel Offset: disabled
[  245.571570][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:19:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820add77 RBX=0000000000000000 RCX=ffff888020b13980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900032ef630 RSP=ffffc900032ef3b8
R8 =ffffea0000d735b7 R9 =1ffffd40001ae6b6 R10=dffffc0000000000 R11=fffff940001ae6b7
R12=dffffc0000000000 R13=ffffea0000d73580 R14=ffffea0000d73588 R15=ffffea0000d73580
RIP=ffffffff81c02faf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590514500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f59f7ae56c0 CR3=0000000027f26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd5bc386478 00007fd5bc386450 XMM03=00007fd5bc386488 00007fd5bc386480
XMM04=00007fd5bceed100 00007fd5bc386440 XMM05=00007fd5bc386458 00007fd5bc3864a0
XMM06=00007fd5bc386498 00007fd5bc386490 XMM07=00007fd5bc386488 00007fd5bc386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd5bc211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0510
R8 =ffff888021488237 R9 =1ffff11004291046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8cd R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd5b9ff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001300 CR3=0000000110280000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd5bc386478 00007fd5bc386450 XMM03=00007fd5bc386488 00007fd5bc386480
XMM04=00007fd5bceed100 00007fd5bc386440 XMM05=00007fd5bc386458 00007fd5bc3864a0
XMM06=00007fd5bc386498 00007fd5bc386490 XMM07=00007fd5bc386488 00007fd5bc386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd5bc211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
