last executing test programs:

2m27.062333137s ago: executing program 2 (id=2845):
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x5133c4bf67cd92a7}, 0x38)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000090"], 0x0, 0x26}, 0x20)

2m27.041416428s ago: executing program 2 (id=2847):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2a4}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x60}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

2m26.94205484s ago: executing program 2 (id=2849):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
socket$inet6(0xa, 0x3, 0x33)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0))
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = socket(0x22, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000480)="0b0312002e0064000209475400f6a13bb1000000086086dd48036f60fb8ff00370abf4f8a86391d3bb5a543b33ec646c049cdc3589562e1c4980771d6f017097362e7fb84163d4fe2081835e2b41855754d94e15a48542f3e2dce209ab534db6e3e9d9e1e4bb7edd455bf7915b1d9c216b0360705147f13185d631bd500ae689758bc0149704a2c1afe833e12b3966e739d79e3d72321831c5f138599f26c926580147d5dca0c5c5a15bdd7d54cc8c7bfb7e95af5dc412cf3d3d006c6fec7c9da123ed1493d32c2fe537f945ddb2dda126c238ce85feafc9d760b42ced2646fbaa65", 0xe2, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14)
socket$unix(0x1, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="200002000c14040026bd7000fbdbdf2508000100200100000008003d0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x8800)

2m26.87711479s ago: executing program 2 (id=2852):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x4000000}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000f0100000022bf002002000004b2600abc6dd57415618800e2be633fa68fe270ea9c2eded8a5e1d3a9", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r7}, 0x38)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000020000000000000000800018150000", @ANYRES32=r0, @ANYBLOB="00000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500002bbcfb6b0680e5e67b6113ebe354000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14935f68ea2513066ca10000001000010000000000000000000000000a1400000011000100000000aedec30c14fa03c398f3f01e6a4e924439757593b96302e6f544b1cfdafd405207871169dd7daf12ecbb14c13827c848476a44460eff7855df5f5884d598108e9357e2a59c3ec8ecd3953b2c9f1a2f5aabd64efb063759e84461b1e46611a38e0cb59f723b412254023061b5129c0d75b1888da851f0b75849f92c01e471fd920c32c89a55557ccdfec10f"], 0x28}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000004000))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)

2m26.810339s ago: executing program 2 (id=2853):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x70}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffe0, 0x0, @empty}, 0x1c)

2m24.981516103s ago: executing program 2 (id=2894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3b, 0x301, 0x70bd2b, 0x25dfdbfa, {0xc}}, 0x14}}, 0x4000000)

2m24.833047985s ago: executing program 32 (id=2894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3b, 0x301, 0x70bd2b, 0x25dfdbfa, {0xc}}, 0x14}}, 0x4000000)

591.395427ms ago: executing program 3 (id=4306):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0xffffffffffffffe4)

590.992467ms ago: executing program 3 (id=4307):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x4d, "c4669fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7800001022f987617c31851f00", 0x32}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x26, 0x0, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000420001728d5c2130e5cd5500713c"], 0x14}}, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000040)=0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7ff, 0x6c, &(0x7f0000000400)=""/108, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x2, 0x10, 0x8}], 0x10, 0x3e4}, 0x94)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)
r4 = socket$inet6(0xa, 0xa, 0x9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
socket(0x840000000002, 0x3, 0xfa)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0)

461.325054ms ago: executing program 3 (id=4310):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x3, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)

388.971074ms ago: executing program 1 (id=4313):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x20, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0xa, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x81}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x101}]}, {0x4, 0x6, "484bda0e49f16f3910e1c6c0e6b52b42700190635b17eb3b6abe56429f3296ce55a825a67a446e3f7f5ae2e59fb3a358382789132c5139e09ae217b0ab9fc1045272abb47179d3e29bb1acf0225e18a7f28d6ef418808fbdf83d1c77654ef2418ce70085dd4ce2"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x70}}, 0x20048000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
socket$kcm(0x29, 0x6, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0xfffffa4e}], 0x1, 0x2102, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005700)="03", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xb0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "d417cdc1a85408e88a04fcc9a4a00b90f4147cc3a9ee76034687050dcc70a6b440c20912ff8e267e7d8fc007a3e8bab4a8e6c16e399b72fa50917fd0fdaef9996aacc4d654d7ca9d500c4b9b9c83d4d66d292f052a5a4665707f9ea155f80d889467e195ff595f61f76f2746ba1d8aeaff713df9786465ea62d13dc0b64ee85fb85b25330970091ce29201"}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x54}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x17c}}, 0x40000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028fd7000000000000003009931ced95ae5a8ab35e2632912264221ed0db26410385689c26bf5d368d7c9a3315852160ef04881c418ea125361c8209fee1f8c8975b18cace59d4a6facd6fdb662522cf4f63c36dfabbf036116456cbf12ca191b9c12ca44ff636589bf5c896f64f33503a5f12a490f3a57aad9721709f62622185eb0e0da5f669758cd8d7a52b3ecf6ceab120572e184b78b5245980f82c5622376ca7af67a270c99aa1192baa66298521b69b0cc8d7322f2c1722278fa179ea12e9544b445fa5f3fc9a5ffa052fc66e84a3dc4c96c670d421256c6bd00"/238, @ANYRES32=r9, @ANYBLOB="2600330030b80400ffffffffffff08021100000050505050505094000800890001002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r10}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)

382.948634ms ago: executing program 1 (id=4315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000680)={0x1, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
close(r4)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b00)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/205, 0xcd}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4127, 0x101f}, {&(0x7f0000000000)=""/84, 0x54}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)

331.794921ms ago: executing program 3 (id=4316):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x4d, "c4669fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7800001022f987617c31851f00", 0x32}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x26, 0x0, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000420001728d5c2130e5cd5500713c"], 0x14}}, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000040)=0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7ff, 0x6c, &(0x7f0000000400)=""/108, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x2, 0x10, 0x8}], 0x10, 0x3e4}, 0x94)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)
r4 = socket$inet6(0xa, 0xa, 0x9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
socket(0x840000000002, 0x3, 0xfa)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0)

331.260379ms ago: executing program 0 (id=4317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000400000000000000bb1581c1e557d7f9e7907fa6d300"/37, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48)

327.689521ms ago: executing program 1 (id=4318):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x2)
shutdown(r0, 0x1) (async)
write(r0, &(0x7f0000000100)="3b153dd910ac79c6d8cb43fac6f45c5b721fba83d3f527473f031ec6443f53f2f27694473e0752a7cb416f4029a54087902bf3283efe2951dc9243c424341d24622efa90f8f507cb828ba65b81cbf6f22e0da6bf1bc4854c4d270e4528457e", 0x5f) (async)
shutdown(r0, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'bond_slave_1\x00', {0x2}, 0x1000})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0x13, 0x0, &(0x7f0000000280)=""/4096, 0x1000}, &(0x7f00000012c0)=0x40) (async)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000001300)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4008080)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff}) (async)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async)
r6 = getuid()
ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000014c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r6}) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000001500)={'veth0_to_bridge\x00', 0x7d84})
r8 = accept$ax25(r4, &(0x7f0000001540)={{0x3, @netrom}, [@remote, @null, @rose, @remote, @rose, @rose, @remote, @rose]}, &(0x7f00000015c0)=0x48)
ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000001600)={@null, @null})
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x5c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x5c}}, 0x808) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r0, 0x0, 0x24, 0x78, &(0x7f0000001780)="dd8ab80fbd8480528bbefc608c0723d0fea8af040773a3457af50f2df408826a9b241982", &(0x7f00000017c0)=""/120, 0x4000, 0x0, 0xcc, 0x1a, &(0x7f0000001840)="251cd706f2211cf24dfb7dec3feea7b7becbf3d4fc92c92f66aaf2d29aa8464bd651b00410f8153353509b7eb4ce75c8a4ad0cabd8207f6f7f22c22e1a5e1c92daf8971bde25af7628208bcf784fedfe60717f7743d14dfa684262eaf001b053ce44d73b05beae40c0816527bbd5e964ae34cd48642252fa9ff362a3f02d81e54aee8326bdccb9b4656e639ae66cd0215c3fa7ed8460c4451cbb5d830a091dc4e51626cfbe3e821e40ac36361ffc713e86d2d1e9d3dbeaa001c52846ee455edb4d0983d7ba7ffad89b07b7e4", &(0x7f0000001940)="f71e116142db898c05d2285f0a518be1f6f96744e7101c5ea46d", 0x0, 0x0, 0x7}, 0x50) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x24}}, 0x4c801)
sendmsg$NFT_BATCH(r3, &(0x7f0000002100)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x200, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x303, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x31}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x37}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x512}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWSET={0x154, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3db6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x700, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1c38}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xc5, 0xc, "e05e977e76d2dbae66f50b81fb3737b9b5b8b7545cf25bfd5de85d176f8a34f5cbc0093ace0d080ad12ac015116d45ede480d2c102ee29047e695f7fc10669f72503edd965d37c066af9fd6da454fb71b8bcb70b71490d86e0b2f1589adfcbfe5b955084eccb36006e9feb45b21ddc1b1132e2a7c5f0de0741e5d35d1e6922d3e38f87c989648b4c96d5d0fbff1e0345790a56a33e5b2c5611d94bf0d7ce2c643f11f9ff9c6e9660bdd6f7efc914364e20a5930ce9f45b29ebb98704213abd4fff"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4d4}, 0x1, 0x0, 0x0, 0x40001}, 0x60040011) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x24040800) (async)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000002280)={0x830, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}}, 0x108)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000023c0)={'filter\x00', 0x4}, 0x68)

245.207181ms ago: executing program 0 (id=4319):
socket(0x840000000002, 0x3, 0xfa)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe80000000003b000000000000000000fe8000000000000000000000000000aa87"], 0x0)

244.086308ms ago: executing program 1 (id=4320):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
r2 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4938065559470e03f", 0x2c}], 0x1}}], 0x1, 0xc044)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x29fb, 0x4)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r3, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}, {0x6, 0x60}]})
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd7d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000109078c205000100000000"], 0x4a)
write$ppp(r1, &(0x7f0000000200)='Av', 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xc60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000800000002000000040000004bd2a1c3f3a111d8494b3d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50)
close(r8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000009a00000056ffffff03000000a0220000", @ANYRES32=r8, @ANYBLOB="0e0000b0000000000000000000000000fcff0000c6d9ffd9890ef221dcd6035c751a1bdb0680ab3eb6b16e99d2a0f719aabf0d39a8b51aefc192ac07e07796b4ea83ae9dfa933f81543e6548e1b64a087c7f2b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000000000000900"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r8, &(0x7f0000006840), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

242.238738ms ago: executing program 3 (id=4321):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x8000000}}}}]}]}, 0x68}}, 0x0)

238.581679ms ago: executing program 0 (id=4322):
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="80010000100001000000000000000000fe880000000000000000000000000001fe80006df867ce33db75618b486f690000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0800000000000000000000000000000000000000000000000000000000000000000000000200048000000000000000008d001400736d33000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000000000000776c3dac4c123121daa2ff5cd87186c96a82d89c65ea6ba138aa025681856d0f5f5e956336d23906f1a7e9087ab152c38d015e5be92b828b1f0eb091afe0a4e2ce000000"], 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

171.843932ms ago: executing program 3 (id=4323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x3, 0x5, 0x5, 0xa, 0xfffffffffffffffe, 0x10}, @jmp={0x5, 0x0, 0x4, 0x1, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @alu={0xa, 0x1, 0xb, 0x7, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xa3, &(0x7f0000000140)=""/163, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0x7, 0xb}, {0x1, 0x5, 0x5, 0x8}, {0x0, 0x3, 0xf, 0x5}, {0x5, 0xc, 0x0, 0x1}, {0x1, 0x2, 0xf, 0x8}, {0x4, 0x1, 0x10, 0xd}, {0x5, 0x1, 0xe, 0x3}], 0x10, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='ext4_da_write_pages\x00', r0, 0x0, 0x2}, 0x18)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=<r3=>0x0)
sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x21c, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x14}, [@nested={0x18, 0x8e, 0x0, 0x1, [@generic="7b4f1f8f53887dd9c0f0067bd2efa6953d5ac7b6"]}, @nested={0x1c, 0x12c, 0x0, 0x1, [@typed={0xc, 0x119, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x86, 0x0, 0x0, @uid=r3}, @generic, @nested={0x4, 0x9f}]}, @nested={0xb0, 0xd0, 0x0, 0x1, [@typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@private0}, @generic="a2dc382da6c8e49ac2b0371395cd2e5d39544510a94d9b58edff6176776365758e01b23b64db114bc4286a8726845271eaf6a0b919", @typed={0x8, 0x37, 0x0, 0x0, @fd=r1}, @generic="a715662e2c85f518cdec74c00301374d666f49fb3a619bc3e07821b61ec3b21c37d919a0740ef9694f0057d572bf775dd110459e760acd23d8cf13c2ae397642d1c29a3731016e609e644a1a1b4e3f", @nested={0x4, 0x10a}, @nested={0x4, 0x122}, @nested={0x4, 0x7}]}, @nested={0x124, 0x2, 0x0, 0x1, [@generic="d18ffe2e2521a66500be087506ea03d0a500ccdfb7238feeabad919b2f19c7a8d7d7470558f54411fc7ff9198b268e5731ddde06d6ae1b6fc798eb9df814d2f17039cd2f1e035c4baaddf5f14ca6913e59f74debd39df6353b6789d7401b721e9f8b10984e2cf55ff55ec363a1446970a9f9cc514a7386f85a42ccfaf4264e16", @generic="f7374d7ebbbf795eed2fad0d1840", @generic="8ae22abcf02f2077a536e2addb01704b49af549c5e464c65ba31260e3acb9cf2590df48e340742c8f037b62525759b7ca592080e9c2b67aa6576c3847e9c9a8a5b5b3e9318968657ef686542c8ef164be96415facae5c2bbe44bd8cb9d627a3ab00204f56cb43b7f2b7484111debb1bdf5887c4fdae6b38c15413f6bc9c47b240c0c004c797b0d27045a7280aa66f0d35b89"]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20004804}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40085}, 0x1000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r2)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf0, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0xf, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0xf}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6439, @empty, 0x1ff}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40840}, 0x4000080)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000b00)={'ip_vti0\x00', r5, 0x10, 0x700, 0x4, 0x3, {{0x4b, 0x4, 0x2, 0x4, 0x12c, 0x64, 0x0, 0x7, 0x0, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0x62, [@multicast1, @multicast2, @broadcast, @local, @local, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @ssrr={0x89, 0x1f, 0xa5, [@multicast1, @remote, @multicast1, @multicast1, @private=0xa010100, @empty, @multicast2]}, @ssrr={0x89, 0x2b, 0xfd, [@remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @empty]}, @timestamp={0x44, 0x10, 0x5a, 0x0, 0x8, [0x8, 0x8, 0x0]}, @generic={0x86, 0x6, "83af7546"}, @end, @timestamp_prespec={0x44, 0x44, 0xd5, 0x3, 0x7, [{@local, 0x7fff}, {@empty, 0x8}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x8}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x54, 0x92, 0x3, 0x1, [{@multicast2, 0x6}, {@multicast1, 0x97}, {@empty, 0x6}, {@rand_addr=0x64010101, 0x800000}, {@empty, 0x1}, {@multicast2, 0x2}, {@local, 0x40}, {@rand_addr=0x64010102, 0x8}, {@remote, 0x5}, {@multicast1, 0x5}]}]}}}}})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000cc0)={@broadcast, @broadcast, 0x1, 0x7, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, @loopback, @broadcast, @local]}, 0x2c)
r7 = socket$inet6(0xa, 0x2, 0xff)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000d00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e24, 0x0, 0x4e21, 0xb22f, 0xa, 0x20, 0x0, 0x33, 0x0, r3}, {0x6, 0x0, 0xb, 0x9, 0x7, 0xb, 0x8, 0x9}, {0x9, 0x4f4, 0x4, 0xc00000}, 0x0, 0x6e6bb8, 0x1}, {{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@empty, 0x3503, 0x4, 0x0, 0x9, 0x4, 0x80, 0xfff}}, 0xe8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000e40)={'pimreg1\x00', &(0x7f0000000e00)=@ethtool_sfeatures={0x3b, 0x3, [{0xda0}, {0xff, 0x9}, {0x4, 0x6}]}})
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x3fa, 0x100, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvfrom$unix(r9, &(0x7f0000000fc0)=""/139, 0x8b, 0x40002120, 0x0, 0x0)
r10 = socket$kcm(0x29, 0x8, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000001080)={r2, r0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r10, &(0x7f0000001480)={&(0x7f00000010c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001140)="35a3816322500b18f9908f0c228b5e7c9dca40f136804c92c1229ff53a60be41132bab0e76a22d59de0d8e6747145bf45ce897091abf868e18854c9e98294da80852b4672ed05866c7eeeabeee10b9533fc3060ef9bb5f634c9cb384310725468726c94dccb52f1608b17d0f12f629a0933df4d91cabe408d3c338683c7f370ac05d2696f9ec6297cc68e8a6d4f0f9a4767194998790bc006bcd67e3708639cc3cd0816df9fa16fa8e984dce68750e841ca208421360ff4cbe68f57781fad8065c20ce7131df381a080fe530ce1c5ce89de8b9a71aaf9fe2ada70668ad678b974c5f662ef9eac6c13186900296", 0xed}, {&(0x7f0000001240)="a028800f77a9575a31c01c03bde22162f3e34a7848d6141e5c4ea799cb2b5abacae2731ab589a27b8563c617fe436e2b2210e4aa59ab0875a8b7fe040f74f3a8ce0aa2e728213e2c3770677d1695c39495cc6cabbc4f8ecc3c28dc68afb0caf7df034fbc928f90d8bd1f6a92c8b0c43645bc8fcf52dcdf1343a42133409a3e3d51bcd5fad8e1813edb4e57c4cea7680fa19a9f21b878682dbbe4059df20bacb45fbfd43627411c744356bbe831662a7a153ecfd4551ddb53df0b7775fe9ea540b85e746b6180dcf947992565b29cf95b81cdf49f74cb78c45f13b04b2e531cfd0282f32d9be2dbcd64941736a8", 0xed}, {&(0x7f0000001340)="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", 0xfa}], 0x3}, 0x20)
r11 = accept4(r2, &(0x7f0000001500)=@can, &(0x7f0000001580)=0x80, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), r11)
unshare(0x80)
unshare(0x400)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x80, 0x1405, 0x5570d22091ccd546, 0x70bd26, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x80}}, 0x85)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x20040810)

171.517733ms ago: executing program 0 (id=4324):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x498a, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

101.726498ms ago: executing program 1 (id=4325):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'gre0\x00', <r2=>0x0, 0x8000, 0x8, 0x3, 0x7, {{0x9, 0x4, 0x3, 0x9, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @empty, {[@noop, @end, @cipso={0x86, 0xd, 0x2, [{0x1, 0x7, "f785635bc5"}]}]}}}}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14)
close(r1)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000005c0)=@newae={0x64, 0x1e, 0x705, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in=@broadcast}, [@lifetime_val={0x24, 0x9, {0x0, 0x0, 0x5}}]}, 0x64}}, 0x0)

100.628139ms ago: executing program 0 (id=4326):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x88, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x2, 0xd, 0x8}, {0x2, 0x4, 0xd}, {0x4, 0x5, 0x5, 0xd}, {0x4, 0x4, 0xc, 0x7}, {0x1, 0x4, 0x9, 0x3}, {0x3, 0x1, 0x10, 0x1}, {0x2, 0x1, 0x7, 0xa}, {0x1, 0x4, 0x2, 0x4}, {0x5, 0x2, 0x3, 0xa}]}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='rpcb_unregister\x00', r2, 0x0, 0x1ff}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r6=>0x0, 0x4, 0x5, 0x9, 0x7fffffff, 0x3a, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x700, 0x8000, 0x5, 0x2}})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000700)={0x7, 0x8, 0xc918, 0x1ff, <r8=>0x0}, &(0x7f0000000740)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000780)={r8, 0x4e, 0x3, 0x80000000, 0xcb0, 0x3}, &(0x7f00000007c0)=0x14)
unshare(0x12040100)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000800), &(0x7f0000000840)=0x4)
preadv(r2, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/125, 0x7d}, {&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/44, 0x2c}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000c00)=""/147, 0x93}, {&(0x7f0000000cc0)=""/90, 0x5a}], 0x9, 0x1, 0x4)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f40)={'wlan0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000f80)={<r10=>r2, 0x5, 0x10000, 0x5})
setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000fc0), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(r10, &(0x7f0000001000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4309(morus1280-sse2))\x00'}, 0x58)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r3)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r10)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x8, 0x7, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffff9, 0x5, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4081)
r12 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000001240)="b79ed742eeb132121902d9899d3b696e9da881af8e5fe1474f1dcc120970527b767ac97cbd6756ef60510364ab7d056ea3cf13587eae85c80d7fe529faf50803d1df713f88c69cf054a61edbc1cc54f4a1ba46dfabc4058df0be31137689d721d64461453d232be9ab85f99f68249fed63dadeb3037223d1b749e3fb93dcd4bfa75a2cf7545f04003d9de68db3b693c1d27616861f42c302abeadd6a31c707602ab45880", 0xa4)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001300)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000001400)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001440)={{{@in=@local, @in6=@private2, 0x4e22, 0xfd34, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x67, r5, r13}, {0x8, 0x100000001, 0x9, 0x10001, 0x4, 0xffffffffffff8001, 0x2, 0xff}, {0x5, 0x100000001, 0x4, 0x50ba2e5}, 0x8, 0x0, 0x2, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in=@private=0xa010102, 0x3506, 0x0, 0x1, 0xf, 0x0, 0x7, 0x4}}, 0xe8)

620.467µs ago: executing program 1 (id=4327):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x12)
close(0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010009"], 0x64}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000240)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @random="21b506c80ded"}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x6c, 0xe0}}}, 0x2f) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))

0s ago: executing program 0 (id=4328):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x4d, "c4669fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7800001022f987617c31851f00", 0x32}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x26, 0x0, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000420001728d5c2130e5cd5500713c"], 0x14}}, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000040)=0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7ff, 0x6c, &(0x7f0000000400)=""/108, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x2, 0x10, 0x8}], 0x10, 0x3e4}, 0x94)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)
r4 = socket$inet6(0xa, 0xa, 0x9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
socket(0x840000000002, 0x3, 0xfa)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0)

kernel console output (not intermixed with test programs):

cess `syz.1.1483'.
[  210.881566][T10394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1483'.
[  210.914205][T10397] syzkaller0: entered promiscuous mode
[  210.916444][T10397] syzkaller0: entered allmulticast mode
[  211.002123][T10404] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  211.229790][T10422] vlan4: entered promiscuous mode
[  211.231994][T10422] bond0: entered promiscuous mode
[  211.236020][T10422] bond_slave_0: entered promiscuous mode
[  211.239296][T10422] bond_slave_1: entered promiscuous mode
[  211.316129][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'.
[  211.517314][T10417] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.063767][T10480] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  212.173656][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  212.625591][T10510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  212.907079][T10535] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  212.915285][T10538] sch_fq: defrate 0 ignored.
[  213.106873][T10555] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  213.109339][T10555] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  213.555858][T10580] syzkaller1: entered promiscuous mode
[  213.557847][T10580] syzkaller1: entered allmulticast mode
[  214.701908][T10640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  214.842041][T10654] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.848539][T10653] v: renamed from veth1_to_bond
[  215.606740][T10700] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  215.835140][T10714] __nla_validate_parse: 39 callbacks suppressed
[  215.835151][T10714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1586'.
[  215.841154][T10714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1586'.
[  215.935805][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1587'.
[  216.210364][T10728] syzkaller0: entered promiscuous mode
[  216.216306][T10728] syzkaller0: entered allmulticast mode
[  216.506316][T10747] syzkaller1: entered promiscuous mode
[  216.508169][T10747] syzkaller1: entered allmulticast mode
[  216.622281][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'.
[  216.627227][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'.
[  216.681451][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  216.692274][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  216.692832][ T5863] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.699262][ T5863] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.702342][ T5863] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.709385][ T5863] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.717400][T10776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1605'.
[  216.722289][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'.
[  216.782702][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1607'.
[  216.826283][T10781] tap1: tun_chr_ioctl cmd 1074025678
[  216.828797][T10781] tap1: group set to 0
[  217.256997][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  218.303070][T10866] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.306487][T10866] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  218.312802][T10866] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  218.357604][T10866] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.360812][T10866] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  218.366458][T10866] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  218.410129][T10866] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.414918][T10866] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  218.419527][T10866] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  218.473748][T10866] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.478080][T10866] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  218.482031][T10866] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  218.531949][T10888] vlan0: entered promiscuous mode
[  218.568363][ T5674] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.571442][ T5674] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  218.578649][ T5674] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  218.607950][ T5674] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.611369][ T5674] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  218.615278][ T5674] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  218.619749][T10890] validate_nla: 18 callbacks suppressed
[  218.619764][T10890] netlink: 'syz.0.1647': attribute type 2 has an invalid length.
[  218.651132][ T5674] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.657890][ T5674] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  218.660936][ T5674] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  218.664586][ T5674] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.667348][ T5674] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  218.670137][ T5674] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  218.826611][T10905] netlink: 'syz.2.1652': attribute type 1 has an invalid length.
[  218.844741][T10907] netlink: 'syz.1.1654': attribute type 1 has an invalid length.
[  218.854165][T10907] netlink: 'syz.1.1654': attribute type 2 has an invalid length.
[  218.861379][T10907] netlink: 'syz.1.1654': attribute type 1 has an invalid length.
[  219.344189][T10955] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  219.347640][T10955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.589802][T10986] netlink: 'syz.0.1682': attribute type 83 has an invalid length.
[  219.797109][T11009] netlink: 'syz.1.1688': attribute type 2 has an invalid length.
[  219.800831][T11009] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.809540][T11009] netlink: 'syz.1.1688': attribute type 2 has an invalid length.
[  220.093420][T11042] bond0: Unable to set up delay as MII monitoring is disabled
[  220.115569][T11040] netlink: 'syz.1.1700': attribute type 7 has an invalid length.
[  220.118899][T11040] netlink: 'syz.1.1700': attribute type 8 has an invalid length.
[  220.142800][T11039] nbd0: detected capacity change from 0 to 127
[  220.254467][   T56] block nbd0: Receive control failed (result -104)
[  220.760567][T11084] openvswitch: netlink: IPv4 tun info is not correct
[  220.932388][T11095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.997874][T11098] __nla_validate_parse: 62 callbacks suppressed
[  220.997887][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  221.003657][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  221.006451][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  221.009836][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  221.016810][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  221.174190][T11108] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.214325][T11108] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.217577][T11108] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  221.224539][T11108] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  221.262789][T11112] veth9: entered promiscuous mode
[  221.268335][T11112] erspan0: entered allmulticast mode
[  221.319324][T11121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1722'.
[  221.322408][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'.
[  221.326016][T11121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1722'.
[  221.328891][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'.
[  221.332027][T11121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1722'.
[  221.413969][T11125] syzkaller1: entered allmulticast mode
[  221.612500][T11140] erspan0: left allmulticast mode
[  221.672278][T11140] bridge0: port 3(dummy0) entered disabled state
[  221.720463][T11140] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  221.737590][T11140] vlan2: left promiscuous mode
[  221.740080][T11140] vlan2: left allmulticast mode
[  221.742332][T11140] hsr_slave_1: left allmulticast mode
[  221.749783][T11140] ip6erspan0: left allmulticast mode
[  221.780640][T11140] vlan4: left promiscuous mode
[  221.798294][T11140] bond0: left promiscuous mode
[  221.800351][T11140] bond_slave_0: left promiscuous mode
[  221.803032][T11140] bond_slave_1: left promiscuous mode
[  221.821455][T11140] veth9: left promiscuous mode
[  222.188373][T11183] sctp: [Deprecated]: syz.2.1742 (pid 11183) Use of int in maxseg socket option.
[  222.188373][T11183] Use struct sctp_assoc_value instead
[  222.995722][T11247] Bluetooth: MGMT ver 1.23
[  223.249852][T11262] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  223.254358][T11262] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  223.313604][T11272] IPv6: sit2: Disabled Multicast RS
[  223.315767][T11272] sit2: entered allmulticast mode
[  223.450150][ T1115] block nbd0: Connection timed out, retrying (0/1 alive)
[  223.454122][ T1115] block nbd0: Connection timed out, retrying (0/1 alive)
[  223.457878][ T1115] block nbd0: Connection timed out, retrying (0/1 alive)
[  223.460730][ T1115] block nbd0: Connection timed out, retrying (0/1 alive)
[  223.464151][ T1115] block nbd0: Dead connection, failed to find a fallback
[  223.467445][ T1115] block nbd0: shutting down sockets
[  223.469888][ T1115] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.473909][ T1115] Buffer I/O error on dev nbd0, logical block 3, async page read
[  223.477070][ T1115] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.480334][ T1115] Buffer I/O error on dev nbd0, logical block 2, async page read
[  223.483467][ T1115] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.487071][ T1115] Buffer I/O error on dev nbd0, logical block 1, async page read
[  223.490156][ T1115] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.494187][ T1115] Buffer I/O error on dev nbd0, logical block 0, async page read
[  223.503507][T10106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.507527][T10106] Buffer I/O error on dev nbd0, logical block 0, async page read
[  223.510925][T10106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.515043][T10106] Buffer I/O error on dev nbd0, logical block 1, async page read
[  223.518748][T10106] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.521942][T10106] Buffer I/O error on dev nbd0, logical block 2, async page read
[  223.526431][T10106] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.529935][T10106] Buffer I/O error on dev nbd0, logical block 3, async page read
[  223.533222][T10106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.537122][T10106] Buffer I/O error on dev nbd0, logical block 0, async page read
[  223.540456][T10106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.545084][T10106] Buffer I/O error on dev nbd0, logical block 1, async page read
[  223.551629][T10106] ldm_validate_partition_table(): Disk read failed.
[  223.556280][T10106] Dev nbd0: unable to read RDB block 0
[  223.560765][T10106]  nbd0: unable to read partition table
[  223.572015][T10106] ldm_validate_partition_table(): Disk read failed.
[  223.575533][T10106] Dev nbd0: unable to read RDB block 0
[  223.579940][T10106]  nbd0: unable to read partition table
[  223.704826][T11291] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  223.931467][T11306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.959850][T11308] validate_nla: 8 callbacks suppressed
[  223.959865][T11308] netlink: 'syz.0.1778': attribute type 10 has an invalid length.
[  223.965953][T11308] dummy0: left allmulticast mode
[  223.967989][T11308] dummy0: left promiscuous mode
[  223.970220][T11308] bridge0: port 3(dummy0) entered disabled state
[  223.977966][T11308] netlink: 'syz.0.1778': attribute type 10 has an invalid length.
[  223.985041][T11308] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  224.001593][T11313] netlink: 'syz.1.1779': attribute type 7 has an invalid length.
[  224.005027][T11313] netlink: 'syz.1.1779': attribute type 8 has an invalid length.
[  224.008196][T11313] netlink: 'syz.1.1779': attribute type 4 has an invalid length.
[  224.271341][T11330] netlink: 'syz.0.1784': attribute type 10 has an invalid length.
[  224.278097][T11330] bond0: (slave dummy0): Releasing backup interface
[  224.285105][T11330] netlink: 'syz.0.1784': attribute type 10 has an invalid length.
[  224.291489][T11330] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  224.341038][T11332] netlink: 'syz.1.1785': attribute type 21 has an invalid length.
[  224.346382][T11332] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.349481][T11332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.352873][T11332] IPv6: NLM_F_CREATE should be set when creating new route
[  224.355681][T11332] IPv6: NLM_F_CREATE should be set when creating new route
[  224.358481][T11332] IPv6: NLM_F_CREATE should be set when creating new route
[  225.026269][T11404] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  225.050304][T11404] 8021q: adding VLAN 0 to HW filter on device bond4
[  226.069567][T11434] __nla_validate_parse: 32 callbacks suppressed
[  226.069583][T11434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1816'.
[  226.130823][T11438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1818'.
[  226.134581][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  226.137856][T11438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1818'.
[  226.141189][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  226.147376][T11438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1818'.
[  226.188842][T11442] netlink: 'syz.2.1820': attribute type 10 has an invalid length.
[  226.221978][T11441] delete_channel: no stack
[  226.317212][T11451] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  226.578616][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1826'.
[  227.286164][T11485] 8021q: adding VLAN 0 to HW filter on device bond5
[  227.313848][T11485] 8021q: adding VLAN 0 to HW filter on device bond5
[  227.317266][T11485] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  227.325509][T11485] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  227.390381][T11496] bond5: (slave bridge4): Enslaving as an active interface with a down link
[  227.469024][T11500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1836'.
[  227.473112][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'.
[  227.476848][T11500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1836'.
[  227.585473][T11507] gretap0: entered promiscuous mode
[  227.919558][T11541] bond0: entered promiscuous mode
[  227.925683][T11541] bond0: left promiscuous mode
[  227.969006][T11544] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  228.360789][T11573] IPVS: set_ctl: invalid protocol: 41 172.20.20.37:20003
[  228.548095][T11591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.692174][T11617] Bluetooth: MGMT ver 1.23
[  229.065570][T11658] sctp: [Deprecated]: syz.0.1884 (pid 11658) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.065570][T11658] Use struct sctp_sack_info instead
[  229.248103][T11678] validate_nla: 11 callbacks suppressed
[  229.248115][T11678] netlink: 'syz.2.1889': attribute type 4 has an invalid length.
[  229.255498][T11678] netlink: 'syz.2.1889': attribute type 4 has an invalid length.
[  229.334350][T11683] syzkaller1: entered promiscuous mode
[  229.341559][T11683] syzkaller1: entered allmulticast mode
[  229.360405][T11683] syzkaller1: left promiscuous mode
[  229.365778][T11683] syzkaller1: left allmulticast mode
[  229.615177][T11712] netlink: 'syz.2.1897': attribute type 1 has an invalid length.
[  229.639552][T11712] 8021q: adding VLAN 0 to HW filter on device bond8
[  229.709238][T11719] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  229.880969][T11724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.884695][T11724] syzkaller0: entered promiscuous mode
[  229.886625][T11724] syzkaller0: entered allmulticast mode
[  229.898845][T11723] tipc: Resetting bearer <eth:syzkaller0>
[  229.915755][T11723] tipc: Disabling bearer <eth:syzkaller0>
[  230.043724][T11730] netlink: 'syz.2.1904': attribute type 21 has an invalid length.
[  230.152936][T11736] openvswitch: netlink: Flow actions attr not present in new flow.
[  230.235322][T11738] netlink: 'syz.2.1908': attribute type 13 has an invalid length.
[  230.570384][T11747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.375986][T11787] __nla_validate_parse: 87 callbacks suppressed
[  231.376002][T11787] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1920'.
[  231.380360][T11786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1922'.
[  231.402743][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  231.413546][T11786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1922'.
[  231.416965][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  231.420090][T11786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1922'.
[  231.451373][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  231.462693][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  231.496633][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'.
[  231.510047][T11795] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1925'.
[  231.534057][T11795] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  231.560606][T11795] 8021q: adding VLAN 0 to HW filter on device bond9
[  231.703702][T11811] geneve5: entered promiscuous mode
[  232.188503][T11844] netlink: 'syz.0.1937': attribute type 1 has an invalid length.
[  232.841387][T11878] netlink: 'syz.1.1950': attribute type 42 has an invalid length.
[  233.795451][T11898] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.804927][T11898] bond0: (slave rose0): Enslaving as an active interface with an up link
[  234.288690][T11927] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  234.348243][T11930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  234.807335][T11965] netlink: 'syz.0.1978': attribute type 2 has an invalid length.
[  234.810642][T11965] netlink: 'syz.0.1978': attribute type 8 has an invalid length.
[  234.871442][T11972] netlink: 'syz.0.1980': attribute type 4 has an invalid length.
[  234.875978][T11972] netlink: 'syz.0.1980': attribute type 17 has an invalid length.
[  235.026761][T11982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  235.134351][T12000] chnl_net:caif_netlink_parms(): no params data found
[  235.191462][T12006] chnl_net:caif_netlink_parms(): no params data found
[  235.233947][T12009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.017261][T12048] bridge_slave_1 (unregistering): left allmulticast mode
[  236.020428][T12048] bridge_slave_1 (unregistering): left promiscuous mode
[  236.023957][T12048] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.255494][T12065] netlink: 'syz.2.2008': attribute type 1 has an invalid length.
[  236.259230][T12065] netlink: 'syz.2.2008': attribute type 4 has an invalid length.
[  236.316248][T12068] syzkaller1: entered promiscuous mode
[  236.318705][T12068] syzkaller1: entered allmulticast mode
[  236.396280][T12073] __nla_validate_parse: 39 callbacks suppressed
[  236.396299][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'.
[  236.407155][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'.
[  236.498944][T12080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2012'.
[  236.578146][T12091] vlan4: entered promiscuous mode
[  236.582301][T12091] bond0: entered promiscuous mode
[  236.823985][T12108] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2021'.
[  236.833336][T12109] pimreg: entered allmulticast mode
[  236.835890][T12108] pimreg: left allmulticast mode
[  236.839232][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'.
[  236.868758][T12106] ieee802154 phy0 wpan0: encryption failed: -22
[  237.181834][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'.
[  237.353493][T12134] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  237.355958][T12134] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2030'.
[  237.373034][T12134] NCSI netlink: No device for ifindex 813332851
[  237.457221][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'.
[  237.595407][T12160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2038'.
[  237.598351][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'.
[  237.798313][T12187] netlink: 'syz.0.2045': attribute type 23 has an invalid length.
[  238.135788][T12205] openvswitch: netlink: IP tunnel TTL not specified.
[  238.357005][T12220] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  238.599631][T12229] netlink: 'syz.0.2061': attribute type 1 has an invalid length.
[  238.981183][T12276] raw_sendmsg: syz.0.2074 forgot to set AF_INET. Fix it!
[  239.035617][T12276] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  239.779302][T12359] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  240.217322][T12401] bridge0: port 1(syz_tun) entered blocking state
[  240.219826][T12401] bridge0: port 1(syz_tun) entered disabled state
[  240.224945][T12401] syz_tun: entered allmulticast mode
[  240.227606][T12401] syz_tun: entered promiscuous mode
[  241.110757][T12463] netlink: 'syz.0.2111': attribute type 3 has an invalid length.
[  241.406934][T12485] netlink: 'syz.2.2118': attribute type 1 has an invalid length.
[  242.324059][T12543] __nla_validate_parse: 42 callbacks suppressed
[  242.324072][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  242.513145][T12553] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2140'.
[  242.517448][T12553] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2140'.
[  242.520833][T12554] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2140'.
[  242.565616][T12559] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  242.630439][T12566] netlink: 'syz.0.2144': attribute type 10 has an invalid length.
[  242.636814][T12567] netlink: 'syz.0.2144': attribute type 10 has an invalid length.
[  242.687801][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2145'.
[  242.691374][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'.
[  242.695740][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2145'.
[  242.699619][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'.
[  242.705047][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2145'.
[  243.133874][T12575] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  243.151657][T12575] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.168289][T12575] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.170710][T12575] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  243.175764][T12575] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  243.229546][T12577] veth5: entered promiscuous mode
[  243.236110][T12577] bond6: (slave veth5): Enslaving as an active interface with a down link
[  243.241934][T12575] erspan0: entered allmulticast mode
[  243.447610][T12588] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  243.600774][T12598] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2155'.
[  244.089851][T12632] wg2: entered promiscuous mode
[  244.092355][T12632] wg2: entered allmulticast mode
[  244.424423][T12691] syzkaller0: Caught tx_queue_len zero misconfig
[  244.488649][T12699] smc: net device bond0 applied user defined pnetid SYZ2
[  244.491202][T12699] smc: net device bond0 erased user defined pnetid SYZ2
[  244.526094][T12705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.625104][T12719] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  244.711830][T12725] gretap0: left promiscuous mode
[  244.716542][T12725] erspan0: entered promiscuous mode
[  244.733062][T12725] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.739677][T12725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.751580][T12725] rdma_op ffff88803b1f89f0 conn xmit_rdma 0000000000000000
[  244.779005][T12730] netlink: 'syz.1.2200': attribute type 7 has an invalid length.
[  244.959034][T12746] netlink: 'syz.0.2204': attribute type 4 has an invalid length.
[  245.116225][T12761] netlink: 'syz.0.2209': attribute type 3 has an invalid length.
[  245.202170][T12769] tap0: tun_chr_ioctl cmd 1074025680
[  245.206872][T12769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.209743][T12769] D: renamed from syzkaller0
[  245.236422][T12769] tipc: Disabling bearer <eth:syzkaller0>
[  245.684190][T12790] netlink: 'syz.0.2220': attribute type 15 has an invalid length.
[  246.134617][T12797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  246.999017][T12850] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  246.999056][T12865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.001436][T12850] netlink: 'syz.0.2240': attribute type 4 has an invalid length.
[  247.004755][T12865] syzkaller0: entered promiscuous mode
[  247.008405][T12865] syzkaller0: entered allmulticast mode
[  247.016304][T12850] netlink: 'syz.0.2240': attribute type 1 has an invalid length.
[  247.031225][T12867] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  247.134889][T12865] tipc: Resetting bearer <eth:syzkaller0>
[  247.138926][T12864] tipc: Resetting bearer <eth:syzkaller0>
[  247.150545][T12864] tipc: Disabling bearer <eth:syzkaller0>
[  247.303226][T12876] nbd: must specify a device to reconfigure
[  247.349680][T12878] __nla_validate_parse: 47 callbacks suppressed
[  247.349699][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'.
[  247.451396][T12882] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2252'.
[  247.454971][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'.
[  247.457938][T12882] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2252'.
[  247.460992][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'.
[  247.465198][T12882] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2252'.
[  247.537990][T12887] dvmrp0: entered allmulticast mode
[  247.715368][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'.
[  247.727411][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'.
[  247.781562][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2256'.
[  247.947548][T12915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.984025][T12905] syzkaller0: entered promiscuous mode
[  247.985991][T12905] syzkaller0: entered allmulticast mode
[  248.003747][T12924] netlink: 'syz.1.2263': attribute type 1 has an invalid length.
[  248.081570][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'.
[  248.197661][T12940] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  248.435505][T12949] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  248.439614][T12949] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  248.494770][T12955] netlink: zone id is out of range
[  248.497268][T12955] netlink: zone id is out of range
[  248.501335][T12955] netlink: zone id is out of range
[  248.505193][T12955] netlink: zone id is out of range
[  248.506981][T12955] netlink: zone id is out of range
[  248.519819][T12955] netlink: zone id is out of range
[  248.521973][T12955] netlink: zone id is out of range
[  248.524865][T12955] netlink: zone id is out of range
[  248.526663][T12955] netlink: zone id is out of range
[  248.529107][T12955] netlink: zone id is out of range
[  248.675354][T12966] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.678555][T12966] syzkaller0: entered promiscuous mode
[  248.680632][T12966] syzkaller0: entered allmulticast mode
[  248.698265][T12966] tipc: Resetting bearer <eth:syzkaller0>
[  248.703307][T12965] tipc: Resetting bearer <eth:syzkaller0>
[  248.714953][T12965] tipc: Disabling bearer <eth:syzkaller0>
[  248.974292][T12983] chnl_net:caif_netlink_parms(): no params data found
[  249.198410][T13000] netlink: 'syz.1.2279': attribute type 1 has an invalid length.
[  249.407411][T13005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.149990][T13031] pimreg3: entered allmulticast mode
[  250.694872][T13093] erspan0: left allmulticast mode
[  250.732187][T13093] batman_adv: batadv0: Removing interface: macvlan2
[  250.737167][T13093] batman_adv: batadv0: Removing interface: ipvlan2
[  250.741709][T13093] bond5: (slave bridge4): Releasing active interface
[  250.752934][T13093] bond6: (slave veth5): Releasing active interface
[  251.364642][T13166] bridge0: port 2(veth0_to_bridge) entered blocking state
[  251.367686][T13166] bridge0: port 2(veth0_to_bridge) entered disabled state
[  251.370749][T13166] veth0_to_bridge: entered allmulticast mode
[  251.377024][T13166] veth0_to_bridge: entered promiscuous mode
[  251.440863][T13170] netlink: 'syz.0.2331': attribute type 21 has an invalid length.
[  251.601825][T13187] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  251.694161][T12289] wlan1: Trigger new scan to find an IBSS to join
[  251.753919][T13198] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  251.889966][T13203] macsec1: entered allmulticast mode
[  251.892258][T13203] batadv0: entered allmulticast mode
[  251.897987][T13203] batadv0: left allmulticast mode
[  252.233404][T13226] pim6reg9: entered allmulticast mode
[  252.469170][T13248] tun0: tun_chr_ioctl cmd 2148045848
[  252.475518][T13248] tun0: tun_chr_ioctl cmd 21731
[  252.727538][T13268] netlink: 'syz.1.2364': attribute type 7 has an invalid length.
[  252.731700][T13268] netlink: 'syz.1.2364': attribute type 8 has an invalid length.
[  252.735896][T13268] __nla_validate_parse: 29 callbacks suppressed
[  252.735905][T13268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2364'.
[  252.990438][T13297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2370'.
[  253.071171][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'.
[  253.074722][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'.
[  253.470207][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2375'.
[  253.699559][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'.
[  253.704520][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'.
[  253.708437][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'.
[  253.711644][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'.
[  253.847011][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'.
[  254.034783][T13325] netlink: 'syz.2.2381': attribute type 4 has an invalid length.
[  254.194639][T13333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  254.540636][T13364] team0: Mode changed to "broadcast"
[  254.643542][T12289] wlan1: Trigger new scan to find an IBSS to join
[  254.648981][T13372] netlink: 'syz.2.2396': attribute type 11 has an invalid length.
[  254.880840][T13405] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  254.950875][T13408] netlink: 'syz.0.2408': attribute type 4 has an invalid length.
[  254.986065][T13410] ip6gretap0: entered promiscuous mode
[  254.988353][T13410] macsec2: entered promiscuous mode
[  254.990290][T13410] macsec2: entered allmulticast mode
[  254.992194][T13410] ip6gretap0: entered allmulticast mode
[  254.995782][T13412] net_ratelimit: 14 callbacks suppressed
[  254.995795][T13412] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  255.011867][T13410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.026730][T13409] tipc: Resetting bearer <eth:syzkaller0>
[  255.046552][T13409] tipc: Disabling bearer <eth:syzkaller0>
[  255.241815][T13440] netlink: 'syz.1.2417': attribute type 2 has an invalid length.
[  255.521757][T13467] netlink: 'syz.2.2428': attribute type 10 has an invalid length.
[  255.526253][T13467] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.529617][T13467] team0: Port device bond0 added
[  255.529934][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.699775][T13485] syzkaller0: entered promiscuous mode
[  255.701735][T13485] syzkaller0: entered allmulticast mode
[  255.771743][T13489] veth0_virt_wifi: mtu less than device minimum
[  256.398452][T13534] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  256.455454][T13543] netlink: 'syz.1.2453': attribute type 21 has an invalid length.
[  256.520763][T13541] netlink: 'syz.2.2452': attribute type 3 has an invalid length.
[  256.924072][T13565] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  257.464396][T13617] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  257.494882][T13623] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  257.666913][T13639] syzkaller1: entered promiscuous mode
[  257.670111][T13639] syzkaller1: entered allmulticast mode
[  257.682943][ T7194] wlan1: Trigger new scan to find an IBSS to join
[  257.870452][T13648] __nla_validate_parse: 44 callbacks suppressed
[  257.870464][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  258.343643][T13668] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2493'.
[  258.347783][T13668] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2493'.
[  258.459539][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2492'.
[  258.592958][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.795164][T13695] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4
[  258.833593][T13690] pim6reg1: entered promiscuous mode
[  258.835856][T13690] pim6reg1: entered allmulticast mode
[  259.314655][T13709] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2503'.
[  259.621500][T13724] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  259.629795][T13724] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  259.690472][T13727] bridge0: port 2(batadv1) entered blocking state
[  259.695819][T13727] bridge0: port 2(batadv1) entered disabled state
[  259.699177][T13727] batadv1: entered allmulticast mode
[  259.702285][T13727] batadv1: entered promiscuous mode
[  259.719084][T13730] netlink: 'syz.1.2510': attribute type 8 has an invalid length.
[  259.722120][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'.
[  259.758753][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[  259.763395][T13732] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2511'.
[  259.812206][T13733] IPv6: sit1: Disabled Multicast RS
[  259.906847][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2514'.
[  260.193439][ T5869] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  260.197079][ T5869] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  260.398411][T13775] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2527'.
[  260.547555][T13781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.641713][T13792] delete_channel: no stack
[  260.648124][T13795] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  260.652068][T13795] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  260.826944][T13813] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  261.125208][T13846] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  261.127068][T13843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.131356][T13847] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  261.168682][T13850] netlink: 'syz.1.2552': attribute type 10 has an invalid length.
[  261.449487][T13880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.520291][T13882] netlink: 'syz.0.2563': attribute type 1 has an invalid length.
[  261.718052][T13894] netlink: 'syz.1.2565': attribute type 1 has an invalid length.
[  261.783419][T13894] bond7: (slave bridge7): making interface the new active one
[  261.790170][T13894] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  261.867985][T13898] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  262.175201][T13900] netlink: 'syz.2.2567': attribute type 1 has an invalid length.
[  262.869231][T13921] netlink: 'syz.2.2577': attribute type 13 has an invalid length.
[  262.875534][T13921] netlink: 'syz.2.2577': attribute type 17 has an invalid length.
[  262.891425][T13921] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  262.900954][T13942] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  262.906369][T13942] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  263.074761][T13950] __nla_validate_parse: 26 callbacks suppressed
[  263.074776][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2585'.
[  263.080265][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'.
[  263.083225][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2585'.
[  263.086747][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'.
[  263.090069][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2585'.
[  263.220287][T13954] syzkaller1: entered promiscuous mode
[  263.228070][T13954] syzkaller1: entered allmulticast mode
[  263.923566][T13969] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2591'.
[  263.927498][T13969] unsupported nla_type 58
[  263.992355][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'.
[  264.129285][T13982] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  264.417363][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'.
[  264.420691][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'.
[  265.422026][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'.
[  265.638111][T14048] validate_nla: 7 callbacks suppressed
[  265.638122][T14048] netlink: 'syz.1.2614': attribute type 10 has an invalid length.
[  265.740982][T14058] IPVS: Error connecting to the multicast addr
[  265.744991][T14059] IPVS: Error connecting to the multicast addr
[  265.803919][   T33] audit: type=1107 audit(1754606087.745:6): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.810406][   T33] audit: type=1107 audit(1754606087.755:7): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.813693][T14066] xfrm2: entered allmulticast mode
[  265.816581][   T33] audit: type=1107 audit(1754606087.755:8): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.825945][   T33] audit: type=1107 audit(1754606087.755:9): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.834714][   T33] audit: type=1107 audit(1754606087.755:10): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.847203][   T33] audit: type=1107 audit(1754606087.775:11): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.855336][   T33] audit: type=1107 audit(1754606087.775:12): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.860508][   T33] audit: type=1107 audit(1754606087.775:13): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.867120][   T33] audit: type=1107 audit(1754606087.775:14): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.871842][   T33] audit: type=1107 audit(1754606087.775:15): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  266.217146][T14095] netlink: 'syz.1.2627': attribute type 6 has an invalid length.
[  266.315731][T14097] veth13: entered promiscuous mode
[  266.324300][T14097] bond0: (slave veth13): Enslaving as an active interface with an up link
[  266.469949][T14103] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  266.502927][T14103] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.699231][T14114] pim6reg1: entered promiscuous mode
[  266.701646][T14114] pim6reg1: entered allmulticast mode
[  266.741501][T14116] pimreg: entered allmulticast mode
[  266.766198][T14116] pimreg: left allmulticast mode
[  267.050783][T14132] netlink: 'syz.0.2641': attribute type 1 has an invalid length.
[  267.053716][T14132] netlink: 'syz.0.2641': attribute type 2 has an invalid length.
[  267.965045][T14181] syzkaller0: entered promiscuous mode
[  267.966976][T14181] syzkaller0: entered allmulticast mode
[  267.969678][T14181] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  267.974486][T14181] netlink: 'syz.2.2654': attribute type 13 has an invalid length.
[  268.118665][T14186] __nla_validate_parse: 6 callbacks suppressed
[  268.118737][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'.
[  268.125667][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2656'.
[  268.189248][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2657'.
[  268.197554][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2657'.
[  268.275736][T14191] batadv_slave_1 (unregistering): left promiscuous mode
[  268.380381][T14194] sch_fq: defrate 0 ignored.
[  268.468942][T14199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.500328][T14198] tipc: Disabling bearer <eth:syzkaller0>
[  268.605431][T14208] netlink: 'syz.1.2663': attribute type 1 has an invalid length.
[  268.792117][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2671'.
[  268.798265][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  268.801945][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2671'.
[  268.805832][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  268.809169][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2671'.
[  268.970423][T14239] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  269.034258][T14245] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  269.044317][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2675'.
[  269.048470][T14246] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  269.051257][T14246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.263954][T14270] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  269.309086][T14275] netlink: 'syz.0.2688': attribute type 4 has an invalid length.
[  269.331598][T14275] netlink: 'syz.0.2688': attribute type 4 has an invalid length.
[  269.395765][T14278] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  270.481879][T14310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.495868][T14330] netlink: 'syz.1.2703': attribute type 4 has an invalid length.
[  270.498758][T14330] nbd: must specify an index to disconnect
[  270.660567][T14347] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  270.696436][T14349] bridge9: entered promiscuous mode
[  270.761712][T14360] validate_nla: 1 callbacks suppressed
[  270.761725][T14360] netlink: 'syz.1.2713': attribute type 1 has an invalid length.
[  270.792623][T14360] 8021q: adding VLAN 0 to HW filter on device bond8
[  270.844084][T14368] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  270.846145][T14370] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  270.846782][T14367] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  270.852185][T14368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.856242][T14367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.279879][T14387] netlink: 'syz.1.2719': attribute type 13 has an invalid length.
[  271.312402][T14387] erspan0: left promiscuous mode
[  271.327752][T14387] 8021q: adding VLAN 0 to HW filter on device team0
[  271.343634][T14387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.366890][T14399] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  271.529569][T14409] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  271.575383][T14420] netlink: 'syz.0.2729': attribute type 2 has an invalid length.
[  272.619140][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  272.619155][   T33] audit: type=1800 audit(1754606094.565:39): pid=14473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2743" name=14 dev="tmpfs" ino=4637 res=0 errno=0
[  273.737290][T14510] __nla_validate_parse: 27 callbacks suppressed
[  273.737317][T14510] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2754'.
[  273.802128][T14516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2755'.
[  273.812428][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'.
[  273.875408][T14524] netlink: 'syz.0.2758': attribute type 1 has an invalid length.
[  273.917356][T14524] 8021q: adding VLAN 0 to HW filter on device bond6
[  273.938652][T14525] bond6: (slave bridge5): making interface the new active one
[  273.941895][T14525] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  273.950653][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.027223][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.090430][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.102035][T14551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'.
[  274.138949][T14554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2769'.
[  274.154034][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.231784][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.302194][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.321442][T14573] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  274.361440][T14579] netlink: 'syz.2.2779': attribute type 83 has an invalid length.
[  274.384565][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.449341][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.525263][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.601282][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.661272][T14524] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  274.807048][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'.
[  274.815949][T14617] syz_tun: left allmulticast mode
[  274.817884][T14617] syz_tun: left promiscuous mode
[  274.819840][T14617] bridge0: port 1(syz_tun) entered disabled state
[  274.830937][T14617] team0: Port device bond0 removed
[  274.844233][T14617] batadv1: left allmulticast mode
[  274.846503][T14617] batadv1: left promiscuous mode
[  274.848806][T14617] bridge0: port 2(batadv1) entered disabled state
[  274.858692][T14620] netlink: 'syz.0.2794': attribute type 1 has an invalid length.
[  274.864475][T14617] team0: Mode changed to "activebackup"
[  274.867086][T14617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2793'.
[  275.004662][T14635] netlink: 'syz.2.2799': attribute type 39 has an invalid length.
[  275.022157][T14623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  275.340041][T14653] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2806'.
[  275.406983][T14657] netlink: 'syz.1.2809': attribute type 2 has an invalid length.
[  275.477146][T14662] netlink: 'syz.0.2812': attribute type 1 has an invalid length.
[  275.480789][T14662] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2812'.
[  275.487160][T14662] NCSI netlink: No device for ifindex 813332851
[  275.938636][T14688] ip6gretap0: left allmulticast mode
[  276.453842][T14718] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  276.465456][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2830'.
[  276.620285][T14731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.046843][T14751] tipc: MTU too low for tipc bearer
[  277.073363][T13946] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.075925][T13946] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  277.082987][T13946] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  277.085482][T13946] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.088010][T13946] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  277.090483][T13946] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  277.103972][T13946] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.106575][T13946] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  277.109262][T13946] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  277.112068][T13946] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.122623][T13946] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  277.125095][T13946] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  277.450077][T14795] validate_nla: 1 callbacks suppressed
[  277.450095][T14795] netlink: 'syz.2.2849': attribute type 1 has an invalid length.
[  277.529737][T14803] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  277.706302][T14816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.190285][T14860] netlink: 'syz.1.2872': attribute type 9 has an invalid length.
[  278.238714][T14864] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  278.245004][T14864] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  278.270285][T14865] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  278.292452][T14865] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  278.628629][T14879] lo: MTU too low for tipc bearer
[  278.630293][T14879] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  278.890545][T14893] macsec0: entered allmulticast mode
[  278.894699][T14893] netlink: 'syz.1.2884': attribute type 2 has an invalid length.
[  278.909218][T14893] : entered promiscuous mode
[  278.912368][T14893] veth1_macvtap: entered allmulticast mode
[  278.916183][T14893] macsec0: left allmulticast mode
[  278.917814][T14893] veth1_macvtap: left allmulticast mode
[  279.050629][T14903] netlink: 'syz.1.2888': attribute type 8 has an invalid length.
[  279.198479][T14907] syz.1.2889 uses old SIOCAX25GETINFO
[  279.630337][T14929] __nla_validate_parse: 22 callbacks suppressed
[  279.630353][T14929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2897'.
[  279.637037][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'.
[  279.640213][T14929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2897'.
[  279.644283][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'.
[  279.647462][T14929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2897'.
[  279.752833][T14937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.759464][T14937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.763258][T14937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.768733][T14937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.771528][T14937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  280.036514][T14935] chnl_net:caif_netlink_parms(): no params data found
[  280.037988][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'.
[  280.081530][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'.
[  280.120211][T14969] netlink: 'syz.1.2906': attribute type 3 has an invalid length.
[  280.125834][T14969] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2906'.
[  280.128262][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'.
[  280.147202][T14935] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.149968][T14935] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.154042][T14935] bridge_slave_0: entered allmulticast mode
[  280.157662][T14935] bridge_slave_0: entered promiscuous mode
[  280.163635][T14935] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.166063][T14935] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.168885][T14935] bridge_slave_1: entered allmulticast mode
[  280.171924][T14935] bridge_slave_1: entered promiscuous mode
[  280.198871][T14935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.221750][T14935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.258747][T14935] team0: Port device team_slave_0 added
[  280.267152][T14935] team0: Port device team_slave_1 added
[  280.290268][T14935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.295118][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.307124][T14935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.312752][T14935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.315500][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'.
[  280.315713][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.331251][T14935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.377781][T14979] hsr_slave_1 (unregistering): left promiscuous mode
[  280.427933][T14935] hsr_slave_0: entered promiscuous mode
[  280.430267][T14935] hsr_slave_1: entered promiscuous mode
[  280.433905][T14935] debugfs: 'hsr0' already exists in 'hsr'
[  280.435778][T14935] Cannot create hsr debugfs directory
[  280.680925][T14935] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  280.689843][T14935] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  280.708997][T14935] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  280.725070][T14935] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  280.849009][T15027] netlink: 'syz.1.2919': attribute type 11 has an invalid length.
[  280.866623][T15027] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  280.902602][T14935] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.916859][T14935] 8021q: adding VLAN 0 to HW filter on device team0
[  280.920061][T15029] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  280.930842][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.933286][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.952368][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.954808][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.108407][T14935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.127214][T15046] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[  281.155509][T14935] veth0_vlan: entered promiscuous mode
[  281.169489][T14935] veth1_vlan: entered promiscuous mode
[  281.231621][T14935] veth0_macvtap: entered promiscuous mode
[  281.235626][T15050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.241557][T14935] veth1_macvtap: entered promiscuous mode
[  281.270396][T14935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.294414][T14935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.334647][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.353601][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.359152][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.371067][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.414851][T15056] netlink: 'syz.1.2929': attribute type 1 has an invalid length.
[  281.480910][T15056] bond11: (slave bridge11): making interface the new active one
[  281.487054][T15056] bond11: (slave bridge11): Enslaving as an active interface with an up link
[  281.496635][T12325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.499542][T12325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.546753][T12307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.549696][T12307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.691986][T15084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.699471][T15083] IPv6: NLM_F_REPLACE set, but no existing node found!
[  281.742450][T15088] netlink: ct family unspecified
[  281.744998][T15088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.844706][ T5843] Bluetooth: hci2: command tx timeout
[  283.010786][T15138] openvswitch: netlink: Missing valid actions attribute.
[  283.014744][T15139] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  283.019183][T15138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.517972][T15165] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.629210][T15171] netlink: 'syz.0.2971': attribute type 13 has an invalid length.
[  283.633698][T15171] netlink: 'syz.0.2971': attribute type 13 has an invalid length.
[  283.923616][ T5843] Bluetooth: hci2: command tx timeout
[  284.082166][T15198] netlink: 'syz.3.2980': attribute type 1 has an invalid length.
[  284.268026][T15206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.643647][T15221] pim6reg1: entered promiscuous mode
[  284.645501][T15221] pim6reg1: entered allmulticast mode
[  284.719581][T15223] __nla_validate_parse: 28 callbacks suppressed
[  284.719593][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2989'.
[  284.810488][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'.
[  284.815525][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'.
[  284.918355][T15239] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2995'.
[  284.921484][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'.
[  284.926680][T15239] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2995'.
[  284.930115][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'.
[  284.935085][T15239] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2995'.
[  284.964042][T15241] netlink: 'syz.3.2996': attribute type 4 has an invalid length.
[  285.415066][T15287] netlink: 'syz.0.3009': attribute type 32 has an invalid length.
[  285.432322][T15292] syzkaller1: entered promiscuous mode
[  285.434931][T15292] syzkaller1: entered allmulticast mode
[  285.760974][T15307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.779262][T15310] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.790989][T15307] syzkaller0: entered promiscuous mode
[  285.793096][T15307] syzkaller0: entered allmulticast mode
[  285.830488][T15307] tipc: Resetting bearer <eth:syzkaller0>
[  285.850467][T15306] tipc: Resetting bearer <eth:syzkaller0>
[  285.915691][T15306] tipc: Disabling bearer <eth:syzkaller0>
[  286.004525][ T5843] Bluetooth: hci2: command tx timeout
[  286.531548][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'.
[  286.535359][T15342] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  286.538083][T15342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.731417][T15344] bridge_slave_0: left allmulticast mode
[  286.782094][T15344] bridge_slave_0: left promiscuous mode
[  286.784512][T15344] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.790693][T15344] bridge_slave_1: left allmulticast mode
[  286.793238][T15344] bridge_slave_1: left promiscuous mode
[  286.795198][T15344] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.802488][T15344] bond0: (slave bond_slave_0): Releasing backup interface
[  286.810997][T15344] bond0: (slave bond_slave_1): Releasing backup interface
[  286.824548][T15344] team0: Port device team_slave_0 removed
[  286.834817][T15344] team0: Port device team_slave_1 removed
[  286.838372][T15344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.841118][T15344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.846126][T15344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.849178][T15344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.919365][T15351] openvswitch: netlink: IPv4 tunnel dst address is zero
[  286.985139][T15354] netlink: 5468 bytes leftover after parsing attributes in process `syz.3.3027'.
[  287.320758][T15379] netlink: 'syz.3.3036': attribute type 2 has an invalid length.
[  287.563840][T15398] netlink: 'syz.0.3043': attribute type 1 has an invalid length.
[  287.566895][T15398] netlink: 'syz.0.3043': attribute type 2 has an invalid length.
[  288.083551][ T5843] Bluetooth: hci2: command tx timeout
[  288.557910][T15430] macvlan2: entered promiscuous mode
[  288.559844][T15430] macvlan2: entered allmulticast mode
[  288.562309][T15430] bond1: (slave macvlan2): Opening slave failed
[  288.571168][ T5869] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.581800][ T5869] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.586095][ T5869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.594703][ T5869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.135459][T15464] tipc: Started in network mode
[  289.137242][T15464] tipc: Node identity e679783e3a3c, cluster identity 4711
[  289.140011][T15464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.143625][T15464] syzkaller0: entered allmulticast mode
[  289.172658][T15464] tipc: Resetting bearer <eth:syzkaller0>
[  289.193792][T15462] tipc: Disabling bearer <eth:syzkaller0>
[  289.863160][T15481] __nla_validate_parse: 56 callbacks suppressed
[  289.863176][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  289.869111][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  290.001440][T15487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3075'.
[  290.007780][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'.
[  290.011185][T15487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3075'.
[  290.016608][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'.
[  290.020847][T15487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3075'.
[  290.287758][T15501] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3082'.
[  290.290998][T15501] netlink: 'syz.0.3082': attribute type 1 has an invalid length.
[  290.844208][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'.
[  290.849073][T15544] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  290.851488][T15544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.015220][T15546] syzkaller0: entered promiscuous mode
[  291.017203][T15546] syzkaller0: entered allmulticast mode
[  292.315401][T15548] bridge0: port 1(ipvlan4) entered blocking state
[  292.318230][T15548] bridge0: port 1(ipvlan4) entered disabled state
[  292.321167][T15548] ipvlan4: entered allmulticast mode
[  292.324219][T15548] bridge0: entered allmulticast mode
[  292.328291][T15548] ipvlan4: left allmulticast mode
[  292.330262][T15548] bridge0: left allmulticast mode
[  292.652457][T15566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.801226][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3107'.
[  292.837821][T15580] netlink: 'syz.0.3108': attribute type 8 has an invalid length.
[  293.296924][T15588] xt_socket: unknown flags 0x50
[  293.592418][T15611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.101156][T15642] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  294.357441][T15650] IPVS: Error connecting to the multicast addr
[  294.374728][T15650] netlink: 'syz.0.3130': attribute type 3 has an invalid length.
[  294.472941][T15652] openvswitch: netlink: Missing key (keys=40, expected=100)
[  294.934114][T15684] __nla_validate_parse: 9 callbacks suppressed
[  294.934125][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3145'.
[  294.955983][T15676] netlink: 'syz.0.3139': attribute type 16 has an invalid length.
[  294.959158][T15676] netlink: 'syz.0.3139': attribute type 17 has an invalid length.
[  294.969215][T15676] erspan0: left promiscuous mode
[  294.984233][T15676] ip6gretap0: left promiscuous mode
[  294.990890][T15676] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.021161][T15676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.101387][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3149'.
[  295.105358][T15696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3149'.
[  295.108609][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'.
[  295.607284][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  295.610396][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  295.808861][T15726] netlink: 'syz.3.3159': attribute type 11 has an invalid length.
[  295.811751][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'.
[  295.816301][T15727] netlink: 'syz.0.3158': attribute type 1 has an invalid length.
[  295.820538][ T5869] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.820561][T15726] netlink: 'syz.3.3159': attribute type 11 has an invalid length.
[  295.830219][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'.
[  295.845279][ T5869] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.850623][ T5869] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.856756][ T5869] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.870844][T15727] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  295.875104][T15726] netlink: 'syz.3.3159': attribute type 1 has an invalid length.
[  295.887764][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  295.898511][T15727] 8021q: adding VLAN 0 to HW filter on device bond8
[  295.924072][T15730] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  295.927564][T15730] netlink: 'syz.3.3160': attribute type 2 has an invalid length.
[  296.003571][T15727] bond8 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  296.009039][T15727] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface
[  296.017091][T15727] bond8 (unregistering): Released all slaves
[  296.119460][T15735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.125626][T15735] syzkaller0: entered promiscuous mode
[  296.128099][T15735] syzkaller0: entered allmulticast mode
[  296.144833][T15735] sch_fq: defrate 257 ignored.
[  296.150923][T15735] tipc: Resetting bearer <eth:syzkaller0>
[  296.161447][T15734] tipc: Resetting bearer <eth:syzkaller0>
[  296.179753][T15734] tipc: Disabling bearer <eth:syzkaller0>
[  296.207811][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'.
[  296.210826][T15739] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3164'.
[  296.706339][T15771] netlink: 'syz.3.3176': attribute type 10 has an invalid length.
[  297.129640][T15795] netlink: 'syz.3.3188': attribute type 1 has an invalid length.
[  297.158338][T15795] bond2: (slave gretap1): making interface the new active one
[  297.162014][T15795] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  297.176949][T15795] syz.3.3188 (15795) used greatest stack depth: 18616 bytes left
[  297.230551][T15808] syz.0.3192: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  297.237104][T15808] CPU: 1 UID: 0 PID: 15808 Comm: syz.0.3192 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  297.237119][T15808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.237126][T15808] Call Trace:
[  297.237130][T15808]  <TASK>
[  297.237136][T15808]  dump_stack_lvl+0x189/0x250
[  297.237153][T15808]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.237163][T15808]  ? __pfx__printk+0x10/0x10
[  297.237175][T15808]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  297.237186][T15808]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  297.237196][T15808]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  297.237206][T15808]  warn_alloc+0x214/0x310
[  297.237222][T15808]  ? __pfx_warn_alloc+0x10/0x10
[  297.237245][T15808]  ? __get_vm_area_node+0x28f/0x300
[  297.237256][T15808]  ? xskq_create+0xbf/0x170
[  297.237269][T15808]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  297.237294][T15808]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  297.237309][T15808]  ? __kasan_kmalloc+0x93/0xb0
[  297.237321][T15808]  vmalloc_user_noprof+0xad/0xf0
[  297.237333][T15808]  ? xskq_create+0xbf/0x170
[  297.237342][T15808]  xskq_create+0xbf/0x170
[  297.237352][T15808]  xsk_init_queue+0xb0/0x110
[  297.237362][T15808]  xsk_setsockopt+0x57b/0x8d0
[  297.237371][T15808]  ? __pfx_xsk_setsockopt+0x10/0x10
[  297.237380][T15808]  ? __pfx_aa_sk_perm+0x10/0x10
[  297.237392][T15808]  ? __fget_files+0x2a/0x420
[  297.237403][T15808]  ? aa_sock_opt_perm+0xff/0x1b0
[  297.237415][T15808]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  297.237424][T15808]  ? __pfx_xsk_setsockopt+0x10/0x10
[  297.237433][T15808]  do_sock_setsockopt+0x17c/0x1b0
[  297.237447][T15808]  __x64_sys_setsockopt+0x13f/0x1b0
[  297.237460][T15808]  do_syscall_64+0xfa/0x3b0
[  297.237470][T15808]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.237480][T15808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.237488][T15808]  ? exc_page_fault+0x9f/0xf0
[  297.237498][T15808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.237506][T15808] RIP: 0033:0x7fe2c678ebe9
[  297.237569][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.237576][T15808] RSP: 002b:00007fe2c75fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  297.237586][T15808] RAX: ffffffffffffffda RBX: 00007fe2c69b5fa0 RCX: 00007fe2c678ebe9
[  297.237592][T15808] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  297.237597][T15808] RBP: 00007fe2c6811e19 R08: 0000000000000004 R09: 0000000000000000
[  297.237602][T15808] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  297.237606][T15808] R13: 00007fe2c69b6038 R14: 00007fe2c69b5fa0 R15: 00007ffc22f34f08
[  297.237620][T15808]  </TASK>
[  297.237624][T15808] Mem-Info:
[  297.334144][T15808] active_anon:5867 inactive_anon:0 isolated_anon:0
[  297.334144][T15808]  active_file:1310 inactive_file:38295 isolated_file:0
[  297.334144][T15808]  unevictable:1768 dirty:193 writeback:0
[  297.334144][T15808]  slab_reclaimable:10591 slab_unreclaimable:122249
[  297.334144][T15808]  mapped:18380 shmem:2448 pagetables:983
[  297.334144][T15808]  sec_pagetables:0 bounce:0
[  297.334144][T15808]  kernel_misc_reclaimable:0
[  297.334144][T15808]  free:218882 free_pcp:29433 free_cma:0
[  297.349117][T15808] Node 0 active_anon:15176kB inactive_anon:0kB active_file:3944kB inactive_file:145072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26808kB dirty:556kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9060kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.359170][T15808] Node 1 active_anon:8292kB inactive_anon:0kB active_file:1296kB inactive_file:8108kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46712kB dirty:216kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5332kB pagetables:1676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.369686][T15808] Node 0 DMA free:6784kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB
[  297.379046][T15808] lowmem_reserve[]: 0 811 811 811 811
[  297.380752][T15808] Node 0 DMA32 free:122628kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15176kB inactive_anon:0kB active_file:3944kB inactive_file:145072kB unevictable:3536kB writepending:556kB present:1556484kB managed:831000kB mlocked:0kB bounce:0kB free_pcp:53464kB local_pcp:20712kB free_cma:0kB
[  297.390822][T15808] lowmem_reserve[]: 0 0 0 0 0
[  297.392462][T15808] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  297.401729][T15808] lowmem_reserve[]: 0 0 854 854 854
[  297.403508][T15808] Node 1 Normal free:287500kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8292kB inactive_anon:0kB active_file:1296kB inactive_file:8108kB unevictable:3536kB writepending:216kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:63944kB local_pcp:45024kB free_cma:0kB
[  297.414137][T15808] lowmem_reserve[]: 0 0 0 0 0
[  297.415762][T15808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 0*4096kB = 6784kB
[  297.419846][T15808] Node 0 DMA32: 68*4kB (UM) 37*8kB (UME) 380*16kB (UM) 420*32kB (UM) 96*64kB (UM) 41*128kB (UM) 52*256kB (UM) 30*512kB (UM) 19*1024kB (UME) 7*2048kB (UME) 7*4096kB (U) = 122616kB
[  297.425543][T15808] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  297.430730][T15808] Node 1 Normal: 424*4kB (ME) 163*8kB (ME) 73*16kB (ME) 161*32kB (UME) 48*64kB (UME) 21*128kB (UME) 24*256kB (UME) 28*512kB (UME) 24*1024kB (UME) 11*2048kB (UM) 50*4096kB (UM) = 287464kB
[  297.436949][T15808] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.440097][T15808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.446634][T15808] 42053 total pagecache pages
[  297.448662][T15808] 0 pages in swap cache
[  297.450442][T15808] Free swap  = 124996kB
[  297.452145][T15808] Total swap = 124996kB
[  297.454059][T15808] 786301 pages RAM
[  297.455609][T15808] 0 pages HighMem/MovableOnly
[  297.457120][T15808] 241319 pages reserved
[  297.458533][T15808] 0 pages cma reserved
[  298.113815][T15822] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  298.846228][T15850] sctp: [Deprecated]: syz.0.3205 (pid 15850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  298.846228][T15850] Use struct sctp_sack_info instead
[  299.641409][T15858] bridge1: entered promiscuous mode
[  299.650720][T15858] bridge1: entered allmulticast mode
[  299.988843][T15866] __nla_validate_parse: 8 callbacks suppressed
[  299.988854][T15866] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3211'.
[  299.997256][T15866] openvswitch: netlink: Flow key attr not present in new flow.
[  300.045610][T15868] netlink: 'syz.3.3212': attribute type 10 has an invalid length.
[  300.048976][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3212'.
[  300.057342][T15868] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  300.904985][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'.
[  300.907792][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'.
[  301.066325][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'.
[  301.069339][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'.
[  301.832042][T15885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  302.064544][   T33] audit: type=1800 audit(1754606124.005:40): pid=15892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3221" name=449D06 dev="tmpfs" ino=5532 res=0 errno=0
[  302.235733][T15905] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3225'.
[  302.238981][T15905] 0: renamed from hsr0
[  302.247372][T15905] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.256228][T15905] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.265056][T15905] 0: entered allmulticast mode
[  302.266623][T15905] hsr_slave_0: entered allmulticast mode
[  302.268362][T15905] hsr_slave_1: entered allmulticast mode
[  302.278178][T15905] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  303.601344][T15961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3233'.
[  303.607322][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'.
[  303.610595][T15961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3233'.
[  304.285391][T15972] syzkaller0: entered promiscuous mode
[  304.287297][T15972] syzkaller0: entered allmulticast mode
[  306.834576][T15995] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  306.851975][T15995] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  307.789538][T16009] netlink: 'syz.3.3250': attribute type 10 has an invalid length.
[  307.792044][T16009] __nla_validate_parse: 2 callbacks suppressed
[  307.792058][T16009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3250'.
[  307.808720][T16009] dummy0: entered promiscuous mode
[  307.814021][T16009] bridge0: port 1(dummy0) entered blocking state
[  307.816160][T16009] bridge0: port 1(dummy0) entered disabled state
[  307.818483][T16009] dummy0: entered allmulticast mode
[  310.375249][T16067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3267'.
[  310.531038][T16070] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  310.867202][T16074] pim6reg1: entered allmulticast mode
[  311.111895][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3271'.
[  311.115376][T16079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3271'.
[  311.469544][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  311.708604][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3279'.
[  311.712089][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3279'.
[  311.783108][T16105] ipvlan4: entered promiscuous mode
[  311.785546][T16105] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  311.916457][T16109] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  312.518186][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3283'.
[  312.560594][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3284'.
[  312.567845][T16114] bridge0: port 2(erspan0) entered blocking state
[  312.570315][T16114] bridge0: port 2(erspan0) entered disabled state
[  312.574782][T16114] erspan0: entered allmulticast mode
[  312.579290][T16114] erspan0: entered promiscuous mode
[  312.588558][T16114] erspan0: left allmulticast mode
[  312.591978][T16114] erspan0: left promiscuous mode
[  312.594702][T16114] bridge0: port 2(erspan0) entered disabled state
[  312.826790][   T24] IPVS: starting estimator thread 0...
[  312.891354][T16127] 8021q: VLANs not supported on ip6tnl0
[  312.901748][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'.
[  312.922736][T16125] IPVS: using max 61 ests per chain, 146400 per kthread
[  313.052256][T16131] netlink: 'syz.1.3291': attribute type 3 has an invalid length.
[  313.062175][T16131] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3291'.
[  313.175372][T16133] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3292'.
[  313.610786][T16156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3299'.
[  313.632745][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'.
[  313.664713][T16156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3299'.
[  313.668554][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'.
[  313.672410][T16156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3299'.
[  313.807282][T16167] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3304'.
[  313.818273][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'.
[  313.882771][T16167] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  345.343851][T16178] geneve2: entered promiscuous mode
[  345.346712][T13946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.353359][T13946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.356333][T13946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.374337][T13946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.605883][T16190] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3312'.
[  345.612357][T16190] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3312'.
[  345.710444][T16186] netlink: 'syz.1.3310': attribute type 4 has an invalid length.
[  346.349962][T16188] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  346.416473][T16205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3315'.
[  346.420358][T16205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'.
[  346.530720][T16210] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3319'.
[  347.261184][T16239] netlink: 'syz.3.3327': attribute type 1 has an invalid length.
[  347.514901][T16254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3330'.
[  347.633695][T16258] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3332'.
[  347.636497][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'.
[  347.639290][T16258] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3332'.
[  347.644811][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'.
[  348.088900][T16273] bond0: (slave dummy0): Releasing backup interface
[  348.108539][T16273] veth0_to_bridge: left allmulticast mode
[  348.112032][T16273] veth0_to_bridge: left promiscuous mode
[  348.115906][T16273] bridge0: port 2(veth0_to_bridge) entered disabled state
[  348.143386][T16273] bridge_slave_0: left allmulticast mode
[  348.145621][T16273] bridge_slave_0: left promiscuous mode
[  348.150546][T16273] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.197485][T16273] bond0: (slave bond_slave_0): Releasing backup interface
[  348.217783][T16273] bond0: (slave bond_slave_1): Releasing backup interface
[  348.238826][T16273] bond0: (slave veth13): Releasing backup interface
[  348.256162][T16273] bond6: (slave bridge5): Releasing active interface
[  348.296600][T16274] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  348.408848][T16283] netlink: 'syz.1.3339': attribute type 21 has an invalid length.
[  348.411914][T16283] netlink: 'syz.1.3339': attribute type 22 has an invalid length.
[  348.418156][T16283] netlink: 'syz.1.3339': attribute type 23 has an invalid length.
[  349.682684][T14937] Bluetooth: hci2: command 0x0405 tx timeout
[  351.614094][T16319] tap0: tun_chr_ioctl cmd 1074025680
[  351.618004][T16321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.620945][T16323] D: renamed from syzkaller0
[  351.635572][T16323] tipc: Disabling bearer <eth:syzkaller0>
[  353.033755][T16331] __nla_validate_parse: 2 callbacks suppressed
[  353.033774][T16331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3354'.
[  353.040797][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3354'.
[  353.590299][T16342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3358'.
[  353.601014][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'.
[  353.703978][T16344] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3359'.
[  355.195680][T16377] tipc: Trying to set illegal importance in message
[  355.272370][T16382] netlink: 'syz.1.3369': attribute type 3 has an invalid length.
[  355.279887][T16382] netlink: 'syz.1.3369': attribute type 3 has an invalid length.
[  356.275093][T16406] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3379'.
[  357.006747][T16419] pim6reg1: entered promiscuous mode
[  357.009028][T16419] pim6reg1: entered allmulticast mode
[  357.231561][T16421] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  357.236710][T16421] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3385'.
[  358.110622][T16450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.116794][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3396'.
[  360.196732][T16496] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  360.395796][T16499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3413'.
[  360.401999][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  360.619287][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3415'.
[  360.870893][T16519] netlink: 'syz.3.3421': attribute type 23 has an invalid length.
[  360.886098][T16518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3421'.
[  360.889910][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3421'.
[  361.008586][T16524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.013751][T16524] syzkaller0: entered promiscuous mode
[  361.016424][T16524] syzkaller0: entered allmulticast mode
[  361.050567][T16524] tipc: Resetting bearer <eth:syzkaller0>
[  361.069618][T16523] tipc: Resetting bearer <eth:syzkaller0>
[  361.128689][T16523] tipc: Disabling bearer <eth:syzkaller0>
[  361.846843][T16548] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  361.880407][T16548] bond7: (slave bridge7): Releasing active interface
[  361.897550][T16548] bond11: (slave bridge11): Releasing active interface
[  361.979397][T16549] netlink: 'syz.1.3430': attribute type 10 has an invalid length.
[  361.982479][T16549] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  361.995653][T16549] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  361.998683][T16549] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  362.139563][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'.
[  362.142787][T16557] netlink: 'syz.0.3432': attribute type 30 has an invalid length.
[  362.145404][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'.
[  362.185471][T16559] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  362.248140][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3434'.
[  362.493501][T16571] netlink: 'syz.0.3438': attribute type 2 has an invalid length.
[  362.495976][T16571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3438'.
[  362.613516][T16575] netlink: 'syz.0.3440': attribute type 21 has an invalid length.
[  362.618910][T16575] netlink: 'syz.0.3440': attribute type 4 has an invalid length.
[  362.622266][T16575] netlink: 'syz.0.3440': attribute type 3 has an invalid length.
[  362.643116][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  363.763422][T16624] __nla_validate_parse: 6 callbacks suppressed
[  363.763436][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'.
[  363.768421][T16624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3454'.
[  364.457186][T16652] netlink: 'syz.1.3464': attribute type 1 has an invalid length.
[  364.460958][T16653] netlink: 'syz.1.3464': attribute type 1 has an invalid length.
[  364.495234][T16652] 8021q: adding VLAN 0 to HW filter on device bond12
[  364.719864][T16690] netlink: 'syz.1.3468': attribute type 2 has an invalid length.
[  364.727416][T16690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3468'.
[  364.789409][T16694] IPVS: stopping backup sync thread 13898 ...
[  364.792289][T16694] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3470'.
[  364.797522][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'.
[  364.800262][T16694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3470'.
[  365.047703][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'.
[  365.956151][T16739] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  366.153335][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'.
[  366.385237][T16756] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  366.418375][T16752] validate_nla: 1 callbacks suppressed
[  366.418386][T16752] netlink: 'syz.0.3489': attribute type 6 has an invalid length.
[  366.623373][T16773] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3497'.
[  366.635600][T16774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.646874][T16774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  366.728870][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3499'.
[  366.731988][T16782] netlink: 'syz.1.3499': attribute type 7 has an invalid length.
[  366.757165][T16782] netlink: 'syz.1.3499': attribute type 8 has an invalid length.
[  367.754576][T16793] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  368.044219][T16800] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.047441][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.050118][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.057511][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.060391][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.064214][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.067094][T16801] netlink: 'syz.3.3503': attribute type 29 has an invalid length.
[  368.962479][T16816] __nla_validate_parse: 4 callbacks suppressed
[  368.988166][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3509'.
[  369.194343][T16821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.197126][T16821] IPv6: NLM_F_CREATE should be set when creating new route
[  369.200060][T16821] IPv6: NLM_F_CREATE should be set when creating new route
[  369.203258][T16821] IPv6: NLM_F_CREATE should be set when creating new route
[  369.227495][T16821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.672483][T16822] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  370.529869][T16842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3518'.
[  370.900856][T16855] syzkaller0: entered promiscuous mode
[  370.905743][T16855] syzkaller0: entered allmulticast mode
[  371.486988][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'.
[  374.480987][T16894] ip6gre0: entered allmulticast mode
[  374.489098][T16894] validate_nla: 23 callbacks suppressed
[  374.489108][T16894] netlink: 'syz.0.3536': attribute type 1 has an invalid length.
[  374.511705][T16894] 8021q: adding VLAN 0 to HW filter on device bond8
[  374.522475][T16895] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3535'.
[  374.534012][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'.
[  374.884904][T16924] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3545'.
[  374.888177][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'.
[  375.588918][T16939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3550'.
[  375.702125][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'.
[  375.706844][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'.
[  375.721500][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'.
[  375.741781][T16943] 8021q: VLANs not supported on ipvlan1
[  375.955339][T16955] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3557'.
[  375.967860][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'.
[  376.066551][T16951] delete_channel: no stack
[  376.215929][T16964] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  376.261196][T16964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.917320][T17002] wg1: entered promiscuous mode
[  376.926466][T17002] wg1: entered allmulticast mode
[  377.398284][T17023] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  377.555190][T17035] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.692191][T17035] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.855698][T17035] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.338981][T17035] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.604236][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.607120][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.638543][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.675897][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.965902][T17085] netlink: 'syz.1.3591': attribute type 5 has an invalid length.
[  379.465950][T17101] netlink: 'syz.0.3596': attribute type 1 has an invalid length.
[  382.278234][T17101] bond9: entered promiscuous mode
[  382.280694][T17101] bond9: entered allmulticast mode
[  382.478183][T17112] netlink: 'syz.0.3599': attribute type 1 has an invalid length.
[  382.480776][T17112] __nla_validate_parse: 27 callbacks suppressed
[  382.480789][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3599'.
[  382.996457][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'.
[  383.055444][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'.
[  383.239953][T17144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3609'.
[  383.257967][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3609'.
[  383.261226][T17144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3609'.
[  383.282328][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3609'.
[  383.297974][T17144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3609'.
[  383.721982][T17171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3621'.
[  383.732631][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3621'.
[  384.197258][T17221] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  384.489420][T17256] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  384.853619][T17283] sctp: [Deprecated]: syz.3.3660 (pid 17283) Use of int in max_burst socket option.
[  384.853619][T17283] Use struct sctp_assoc_value instead
[  385.115078][T17295] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  385.316566][T17320] netlink: 'syz.0.3670': attribute type 1 has an invalid length.
[  385.319521][T17321] netlink: 'syz.0.3670': attribute type 1 has an invalid length.
[  385.323468][T17321] netlink: 'syz.0.3670': attribute type 20 has an invalid length.
[  385.326416][T17320] netlink: 'syz.0.3670': attribute type 20 has an invalid length.
[  385.714222][T17342] IPVS: Unknown mcast interface: veth1_to_bridge
[  385.717001][T17343] IPVS: Unknown mcast interface: veth1_to_bridge
[  385.838831][T17350] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  386.873657][T17369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.876469][T17369] syzkaller0: entered allmulticast mode
[  387.048068][T17380] tipc: New replicast peer: 255.255.255.255
[  387.062323][T17380] tipc: Enabled bearer <udp:syz2>, priority 10
[  387.120055][T17368] tipc: Disabling bearer <eth:syzkaller0>
[  387.920391][T17384] blkio.reset_stats is deprecated
[  387.951697][T17388] __nla_validate_parse: 39 callbacks suppressed
[  387.951713][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3692'.
[  388.034280][T17388] netlink: 'syz.1.3692': attribute type 2 has an invalid length.
[  388.076870][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'.
[  388.138595][T17407] netlink: 'syz.0.3698': attribute type 15 has an invalid length.
[  388.143204][T17411] netlink: 'syz.0.3698': attribute type 15 has an invalid length.
[  388.484710][T17421] netlink: 'syz.1.3701': attribute type 8 has an invalid length.
[  389.242460][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'.
[  389.302799][T17428] netlink: 'syz.3.3704': attribute type 1 has an invalid length.
[  389.341034][T17428] 8021q: adding VLAN 0 to HW filter on device bond3
[  389.464394][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3705'.
[  389.468234][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3705'.
[  389.471756][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3705'.
[  389.479047][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3705'.
[  389.482229][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3705'.
[  389.601118][T17428] bond3: (slave veth3): Enslaving as an active interface with a down link
[  389.759328][T17451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3713'.
[  389.849510][T17459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.853741][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.858326][T17461] netlink: 'syz.0.3717': attribute type 1 has an invalid length.
[  389.874803][T17461] 8021q: adding VLAN 0 to HW filter on device bond10
[  389.879755][T17461] x9: renamed from bridge_slave_0
[  389.894893][T17461] vlan5: entered allmulticast mode
[  389.897001][T17461] veth1: entered allmulticast mode
[  389.899758][T17461] bond10: (slave vlan5): Opening slave failed
[  389.991864][T17467] netlink: 'syz.0.3719': attribute type 1 has an invalid length.
[  389.996787][T17426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.152103][T17481] netlink: 'syz.1.3726': attribute type 1 has an invalid length.
[  390.155566][T17481] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3726'.
[  390.159478][T17481] netlink: 'syz.1.3726': attribute type 1 has an invalid length.
[  390.324811][T17490] IPv6: Can't replace route, no match found
[  390.514654][T17514] : entered promiscuous mode
[  390.722436][   T33] audit: type=1800 audit(1754606212.665:41): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3737" name="memory.events" dev="tmpfs" ino=1368 res=0 errno=0
[  390.893540][T17540] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  391.833675][T17564] netlink: 'syz.3.3753': attribute type 1 has an invalid length.
[  391.836770][T17564] block nbd1: shutting down sockets
[  391.892757][T17568] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  392.707520][T17574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.710417][T17574] syzkaller0: entered promiscuous mode
[  392.712255][T17574] syzkaller0: entered allmulticast mode
[  392.744880][T17574] tipc: Resetting bearer <eth:syzkaller0>
[  392.776184][T17574] tipc: Resetting bearer <eth:syzkaller0>
[  392.788135][T17574] tipc: Disabling bearer <eth:syzkaller0>
[  392.881922][T17587] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  392.950715][T17596] 8021q: VLANs not supported on gre0
[  392.958096][T17595] __nla_validate_parse: 16 callbacks suppressed
[  392.958113][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'.
[  393.231751][T17624] 8021q: VLANs not supported on gre0
[  393.454056][T17641] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3778'.
[  393.471067][T17643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3778'.
[  393.536998][T17654] netlink: 786 bytes leftover after parsing attributes in process `syz.0.3783'.
[  393.551387][T17656] validate_nla: 1 callbacks suppressed
[  393.551406][T17656] netlink: 'syz.1.3784': attribute type 2 has an invalid length.
[  393.557283][T17654] netlink: 'syz.0.3783': attribute type 5 has an invalid length.
[  393.558311][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'.
[  393.560804][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'.
[  393.740093][T17671] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3788'.
[  393.749805][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'.
[  393.753513][T17671] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3788'.
[  393.766210][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'.
[  394.237343][T17717] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  394.282222][T17724] sctp: [Deprecated]: syz.3.3806 (pid 17724) Use of int in max_burst socket option deprecated.
[  394.282222][T17724] Use struct sctp_assoc_value instead
[  395.083585][T17722] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  395.341164][T17779] netlink: 'syz.1.3828': attribute type 1 has an invalid length.
[  395.341173][T17778] netlink: 'syz.1.3828': attribute type 1 has an invalid length.
[  395.387448][T17782] pim6reg1: entered promiscuous mode
[  395.392883][T17782] pim6reg1: entered allmulticast mode
[  395.568096][T17792] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  395.707596][T17801] syzkaller0: tun_chr_ioctl cmd 1074025676
[  395.712102][T17801] syzkaller0: owner set to 0
[  395.748516][T17805] netlink: 'syz.1.3840': attribute type 11 has an invalid length.
[  395.883370][T17816] veth9: entered promiscuous mode
[  395.955486][T17822] pim6reg0: tun_chr_ioctl cmd 2148553947
[  396.539350][T17851] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  396.542279][T17851] openvswitch: netlink: Duplicate key (type 0).
[  396.752000][T17873] netlink: zone id is out of range
[  396.753772][T17873] netlink: zone id is out of range
[  396.944836][T17880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.947503][T17880] syzkaller0: entered promiscuous mode
[  396.949209][T17880] syzkaller0: entered allmulticast mode
[  396.966215][T17879] tipc: Resetting bearer <eth:syzkaller0>
[  396.993363][T17879] tipc: Disabling bearer <eth:syzkaller0>
[  397.260089][T17911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.541074][T17942] openvswitch: netlink: IPv4 tunnel dst address is zero
[  398.048214][T17985] __nla_validate_parse: 54 callbacks suppressed
[  398.048231][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'.
[  398.057032][T17985] veth1: entered promiscuous mode
[  398.059641][T17985] netlink: 'syz.3.3906': attribute type 1 has an invalid length.
[  398.065644][T17985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3906'.
[  398.069314][T17985] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  398.152380][T17995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.156382][T17995] syzkaller0: entered promiscuous mode
[  398.159295][T17995] syzkaller0: entered allmulticast mode
[  398.161798][T17921] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  398.178457][T17995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3908'.
[  398.211489][T17995] tipc: Resetting bearer <eth:syzkaller0>
[  398.219504][T17994] tipc: Resetting bearer <eth:syzkaller0>
[  398.232369][T17994] tipc: Disabling bearer <eth:syzkaller0>
[  398.443412][T18025] bond0: Unable to set down delay as MII monitoring is disabled
[  398.447143][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  398.450292][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  398.626702][T18040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3924'.
[  398.630272][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'.
[  398.652945][T18040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3924'.
[  398.655784][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'.
[  398.658547][T18040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3924'.
[  399.090296][T18058] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  399.094700][T18058] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.281957][T18063] tun0: tun_chr_ioctl cmd 21731
[  399.648309][T18087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.709821][T18088] syzkaller0: entered promiscuous mode
[  399.715714][T18088] syzkaller0: entered allmulticast mode
[  399.727358][T18088] tipc: Resetting bearer <eth:syzkaller0>
[  400.006459][T18091] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  400.504212][T18087] tipc: Resetting bearer <eth:syzkaller0>
[  400.531027][T18087] tipc: Disabling bearer <eth:syzkaller0>
[  400.970643][T18095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.982125][T18095] syzkaller0: entered promiscuous mode
[  400.985616][T18095] syzkaller0: entered allmulticast mode
[  401.005980][T18094] tipc: Resetting bearer <eth:syzkaller0>
[  401.040124][T18094] tipc: Disabling bearer <eth:syzkaller0>
[  401.398369][T18126] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  401.465725][T18130] IPv6: sit2: Disabled Multicast RS
[  401.531433][T18134] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  401.802129][T18153] syzkaller1: entered promiscuous mode
[  401.807873][T18153] syzkaller1: entered allmulticast mode
[  402.158297][T18182] netlink: 'syz.1.3980': attribute type 21 has an invalid length.
[  402.160815][T18182] netlink: 'syz.1.3980': attribute type 5 has an invalid length.
[  402.306069][T18195] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  402.369563][T18204] netlink: 'syz.1.3986': attribute type 2 has an invalid length.
[  402.801462][T18231] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  403.058513][T18246] netlink: 'syz.3.3999': attribute type 9 has an invalid length.
[  403.269358][T18260] __nla_validate_parse: 71 callbacks suppressed
[  403.269373][T18260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4005'.
[  403.274346][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'.
[  403.277208][T18260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4005'.
[  403.280805][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'.
[  403.286121][T18260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4005'.
[  403.349739][T18265] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  403.357417][T18265] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  403.363455][T18265] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  403.565607][T18279] ip6gre0: left allmulticast mode
[  403.571727][T18279] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  403.604464][T18283] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  403.675657][T18288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4014'.
[  403.678528][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'.
[  403.681373][T18288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4014'.
[  403.687115][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'.
[  403.689866][T18288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4014'.
[  403.945818][T18301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  404.087965][T18308] chnl_net:caif_netlink_parms(): no params data found
[  404.790671][T18346] openvswitch: netlink: Key 10 has unexpected len 2 expected 4
[  405.811737][T18385] netlink: 'syz.1.4046': attribute type 1 has an invalid length.
[  405.817677][T18385] netlink: 'syz.1.4046': attribute type 2 has an invalid length.
[  405.823672][T18385] netlink: 'syz.1.4046': attribute type 1 has an invalid length.
[  406.095581][T18418] geneve2: entered promiscuous mode
[  406.099477][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.102036][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.107457][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.110599][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.168840][T18422] syzkaller1: entered promiscuous mode
[  406.171001][T18422] syzkaller1: entered allmulticast mode
[  406.424194][T18447] netlink: 'syz.3.4064': attribute type 10 has an invalid length.
[  406.738838][T18464] netlink: 'syz.3.4068': attribute type 12 has an invalid length.
[  406.876719][T18467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.095025][T18476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.110101][T18476] syzkaller0: entered promiscuous mode
[  407.112348][T18476] syzkaller0: entered allmulticast mode
[  407.137647][T18474] tipc: Resetting bearer <eth:syzkaller0>
[  407.146917][T18473] tipc: Resetting bearer <eth:syzkaller0>
[  407.157975][T18473] tipc: Disabling bearer <eth:syzkaller0>
[  407.167012][T18480] netlink: 'syz.1.4074': attribute type 12 has an invalid length.
[  407.169721][T18481] netlink: 'syz.1.4074': attribute type 12 has an invalid length.
[  407.317972][T18498] tun0: tun_chr_ioctl cmd 2147767520
[  407.374564][T18502] team0: entered promiscuous mode
[  407.498362][T18502] team0 (unregistering): left promiscuous mode
[  407.509579][T18506] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  407.848561][T18538] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  408.754649][T18542] __nla_validate_parse: 44 callbacks suppressed
[  408.754660][T18542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4091'.
[  408.757766][T18541] tun0: tun_chr_ioctl cmd 2147767520
[  408.759353][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'.
[  408.775410][T18542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4091'.
[  408.778363][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'.
[  408.781296][T18542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4091'.
[  408.850039][T18550] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4095'.
[  408.856437][T18550] x_tables: ip_tables: udp match: only valid for protocol 17
[  408.860423][T18550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4095'.
[  408.968290][T18558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4097'.
[  409.007601][T18563] tipc: New replicast peer: 255.255.255.255
[  409.010880][T18563] tipc: Enabled bearer <udp:syz2>, priority 10
[  409.047212][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4098'.
[  409.841243][T18572] pim6reg1: entered promiscuous mode
[  409.843720][T18572] pim6reg1: entered allmulticast mode
[  409.855718][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4101'.
[  410.002842][   T24] tipc: Node number set to 3695540286
[  410.085265][T18586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.216267][T18596] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  411.123918][T18615] netlink: 'syz.1.4111': attribute type 6 has an invalid length.
[  411.240072][T18628] IPv6: Can't replace route, no match found
[  411.379063][T18641] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  412.208109][T18703] syzkaller1: entered promiscuous mode
[  412.212735][T18703] syzkaller1: entered allmulticast mode
[  412.669091][T18737] netlink: 'syz.3.4158': attribute type 3 has an invalid length.
[  412.706380][   T33] audit: type=1107 audit(1754606234.655:42): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#C;Ҕ8Y|[2FElbKHNR?H"'$P'0f޸lI(U!ϗ2`m՛7ΝEqBNJ`'
[  412.802321][T18753] netlink: 'syz.0.4164': attribute type 1 has an invalid length.
[  412.958703][T18767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.962204][T18767] syzkaller0: entered promiscuous mode
[  412.965756][T18767] syzkaller0: entered allmulticast mode
[  413.083490][T18766] tipc: Resetting bearer <eth:syzkaller0>
[  413.098140][T18766] tipc: Disabling bearer <eth:syzkaller0>
[  413.516967][T18823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.810729][T18833] __nla_validate_parse: 24 callbacks suppressed
[  413.810741][T18833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4187'.
[  413.816019][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'.
[  413.818707][T18833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4187'.
[  413.821388][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'.
[  413.825108][T18833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4187'.
[  413.867023][T18835] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  414.316470][T18850] netlink: 'syz.3.4194': attribute type 1 has an invalid length.
[  414.319287][T18850] netlink: 600 bytes leftover after parsing attributes in process `syz.3.4194'.
[  414.329620][T18850] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4194'.
[  414.340171][T18850] 8021q: VLANs not supported on ip_vti0
[  414.407668][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4196'.
[  414.410276][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4196'.
[  414.417857][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4196'.
[  414.429146][T18858] netlink: 'syz.1.4197': attribute type 1 has an invalid length.
[  414.605546][T18873] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  414.656151][T18872] delete_channel: no stack
[  414.789892][T18883] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  415.623056][T18885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.667798][T18893] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  415.716944][T18895] netlink: 'syz.0.4209': attribute type 7 has an invalid length.
[  415.877059][T18921] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  417.198890][T18956] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  417.985682][T18960] netlink: 'syz.1.4226': attribute type 6 has an invalid length.
[  419.318877][T19034] __nla_validate_parse: 14 callbacks suppressed
[  419.318888][T19034] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4245'.
[  419.469759][T19052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4249'.
[  419.484204][T19052] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4249'.
[  419.486985][T19052] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4249'.
[  419.576116][T19057] dummy0: left allmulticast mode
[  419.577789][T19057] bridge0: port 1(dummy0) entered disabled state
[  419.584298][T19057] bond2: (slave gretap1): Releasing active interface
[  419.591764][T19057] bond3: (slave veth3): Releasing active interface
[  419.610426][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4252'.
[  419.759057][T19063] netlink: 'syz.3.4254': attribute type 338 has an invalid length.
[  419.829850][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'.
[  420.089128][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4258'.
[  420.095606][T19080] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.4258'.
[  420.189426][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4259'.
[  420.192290][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4259'.
[  420.825181][T19098] netlink: 'syz.3.4263': attribute type 11 has an invalid length.
[  420.870090][T19102] netlink: zone id is out of range
[  420.872254][T19102] netlink: zone id is out of range
[  420.875451][T19102] netlink: zone id is out of range
[  420.877343][T19102] netlink: zone id is out of range
[  421.160963][T19114] delete_channel: no stack
[  421.350708][T19135] netlink: 'syz.3.4272': attribute type 1 has an invalid length.
[  421.400260][T19135] 8021q: adding VLAN 0 to HW filter on device bond4
[  421.425740][T19131] 8021q: adding VLAN 0 to HW filter on device bond4
[  421.428129][T19131] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  421.432205][T19131] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  421.465028][T19135] gretap2: entered promiscuous mode
[  421.472046][T19135] bond4: (slave gretap2): making interface the new active one
[  421.484506][T19135] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  421.517028][T19131] macvlan2: entered promiscuous mode
[  421.518622][T19131] macvlan2: entered allmulticast mode
[  421.520633][T19131] bond4: entered promiscuous mode
[  421.525673][T19131] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  421.529460][T19131] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  421.533995][T19131] bond4: left promiscuous mode
[  421.708863][T19157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.720948][T19157] syzkaller0: entered promiscuous mode
[  421.728533][T19157] syzkaller0: entered allmulticast mode
[  421.761128][T19157] tipc: Resetting bearer <eth:syzkaller0>
[  421.835383][T19159] netlink: 'syz.0.4278': attribute type 1 has an invalid length.
[  421.947460][T19162] can: request_module (can-proto-5) failed.
[  422.488249][T19153] tipc: Resetting bearer <eth:syzkaller0>
[  422.534554][T19153] tipc: Disabling bearer <eth:syzkaller0>
[  422.842911][T19197] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  422.969596][T19219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.953486][T19269] IPv6: sit2: Disabled Multicast RS
[  424.419899][T19322] netlink: 'syz.1.4327': attribute type 13 has an invalid length.
[  424.424122][T19322] netlink: 'syz.1.4327': attribute type 17 has an invalid length.
[  424.431453][T19322] ------------[ cut here ]------------
[  424.433591][T19322] WARNING: CPU: 1 PID: 19322 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0
[  424.436786][T19322] Modules linked in:
[  424.438491][T19322] CPU: 1 UID: 0 PID: 19322 Comm: syz.1.4327 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  424.443404][T19322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  424.446403][T19322] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  424.448276][T19322] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 6d 54 f3 f7 e9 78 fe ff ff e8 53 ea 8f f7 eb 05 e8 4c ea 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  424.454718][T19322] RSP: 0018:ffffc90006af6580 EFLAGS: 00010293
[  424.456745][T19322] RAX: ffffffff8a2fc15d RBX: ffff888118b91800 RCX: ffff88810c828000
[  424.459304][T19322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  424.461934][T19322] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  424.464372][T19322] R10: dffffc0000000000 R11: fffff52000d5eca8 R12: ffff888118a760de
[  424.466978][T19322] R13: ffff888118b91890 R14: 0000000000000000 R15: 1ffff11023172312
[  424.469444][T19322] FS:  00007f0368a986c0(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  424.472229][T19322] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.474409][T19322] CR2: 000000110c3ce7d6 CR3: 0000000107b48000 CR4: 00000000000006f0
[  424.477140][T19322] Call Trace:
[  424.478165][T19322]  <TASK>
[  424.479102][T19322]  fib6_ifup+0x14a/0x180
[  424.480378][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.481823][T19322]  fib6_clean_node+0x24d/0x590
[  424.483331][T19322]  ? __pfx_fib6_clean_node+0x10/0x10
[  424.484969][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.486416][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.488027][T19322]  fib6_walk_continue+0x67b/0x910
[  424.489522][T19322]  fib6_walk+0x149/0x290
[  424.490810][T19322]  __fib6_clean_all+0x234/0x380
[  424.492298][T19322]  ? __fib6_clean_all+0x9b/0x380
[  424.493999][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.495433][T19322]  ? __pfx___fib6_clean_all+0x10/0x10
[  424.497051][T19322]  ? __pfx_fib6_clean_node+0x10/0x10
[  424.498698][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.500242][T19322]  ? addrconf_mod_dad_work+0xb9/0x120
[  424.502397][T19322]  rt6_sync_up+0x128/0x160
[  424.504443][T19322]  ? __pfx_rt6_sync_up+0x10/0x10
[  424.506293][T19322]  ? do_raw_read_unlock+0x3d/0x80
[  424.507901][T19322]  addrconf_notify+0xd55/0x1010
[  424.509439][T19322]  notifier_call_chain+0x1b6/0x3e0
[  424.511124][T19322]  __dev_notify_flags+0x21b/0x2e0
[  424.512852][T19322]  ? __pfx___dev_notify_flags+0x10/0x10
[  424.514643][T19322]  ? __dev_change_flags+0x4cc/0x6d0
[  424.516277][T19322]  ? netif_state_change+0x29e/0x3a0
[  424.517907][T19322]  ? __pfx_console_unlock+0x10/0x10
[  424.519538][T19322]  ? __pfx_netif_state_change+0x10/0x10
[  424.521319][T19322]  netif_change_flags+0xe8/0x1a0
[  424.523081][T19322]  do_setlink+0xc55/0x41c0
[  424.524612][T19322]  ? __pfx_do_setlink+0x10/0x10
[  424.526268][T19322]  ? _printk+0xcf/0x120
[  424.527590][T19322]  ? __pfx____ratelimit+0x10/0x10
[  424.529207][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.530820][T19322]  ? __mutex_trylock_common+0x153/0x260
[  424.532624][T19322]  ? __pfx___mutex_trylock_common+0x10/0x10
[  424.534449][T19322]  ? rcu_is_watching+0x15/0xb0
[  424.535949][T19322]  ? trace_contention_end+0x39/0x120
[  424.537618][T19322]  ? __mutex_lock+0x335/0x1360
[  424.539141][T19322]  ? __pfx___nla_validate_parse+0x10/0x10
[  424.540932][T19322]  ? rtnl_newlink+0x8db/0x1c70
[  424.542712][T19322]  ? __pfx___mutex_lock+0x10/0x10
[  424.544294][T19322]  ? ns_capable+0x8a/0xf0
[  424.545707][T19322]  ? rtnl_link_get_net_capable+0x16a/0x350
[  424.547580][T19322]  rtnl_newlink+0x149f/0x1c70
[  424.549095][T19322]  ? netlink_sendmsg+0x805/0xb30
[  424.550693][T19322]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.552320][T19322]  ? kasan_quarantine_put+0xdd/0x220
[  424.554119][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.555799][T19322]  ? nlmon_xmit+0xb0/0x100
[  424.557254][T19322]  ? kmem_cache_free+0x18f/0x400
[  424.559004][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.560690][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.562321][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.564090][T19322]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  424.565880][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.567454][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.569046][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.570878][T19322]  ? __dev_queue_xmit+0x1d79/0x3b50
[  424.572716][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.574266][T19322]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.576019][T19322]  rtnetlink_rcv_msg+0x7cf/0xb70
[  424.577602][T19322]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  424.579239][T19322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.580984][T19322]  ? ref_tracker_free+0x63a/0x7d0
[  424.582701][T19322]  ? __asan_memcpy+0x40/0x70
[  424.584181][T19322]  ? __pfx_ref_tracker_free+0x10/0x10
[  424.585893][T19322]  netlink_rcv_skb+0x208/0x470
[  424.587378][T19322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.589055][T19322]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.590753][T19322]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.592467][T19322]  netlink_unicast+0x82f/0x9e0
[  424.594140][T19322]  ? __pfx_netlink_unicast+0x10/0x10
[  424.595899][T19322]  ? netlink_sendmsg+0x642/0xb30
[  424.597525][T19322]  ? skb_put+0x11b/0x210
[  424.598856][T19322]  netlink_sendmsg+0x805/0xb30
[  424.600407][T19322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.602083][T19322]  ? aa_sock_msg_perm+0xf1/0x1d0
[  424.603727][T19322]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.605426][T19322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.607040][T19322]  __sock_sendmsg+0x21c/0x270
[  424.608509][T19322]  ____sys_sendmsg+0x505/0x830
[  424.610021][T19322]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.611663][T19322]  ? import_iovec+0x74/0xa0
[  424.613180][T19322]  ___sys_sendmsg+0x21f/0x2a0
[  424.614603][T19322]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.616192][T19322]  ? __fget_files+0x2a/0x420
[  424.617688][T19322]  ? __fget_files+0x3a0/0x420
[  424.619171][T19322]  __x64_sys_sendmsg+0x19b/0x260
[  424.620957][T19322]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.622896][T19322]  ? rcu_is_watching+0x15/0xb0
[  424.624479][T19322]  ? do_syscall_64+0xbe/0x3b0
[  424.626012][T19322]  do_syscall_64+0xfa/0x3b0
[  424.627468][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.629115][T19322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.631026][T19322]  ? exc_page_fault+0x9f/0xf0
[  424.632624][T19322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.634425][T19322] RIP: 0033:0x7f0367b8ebe9
[  424.635868][T19322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.641701][T19322] RSP: 002b:00007f0368a98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.644330][T19322] RAX: ffffffffffffffda RBX: 00007f0367db6090 RCX: 00007f0367b8ebe9
[  424.646717][T19322] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  424.649145][T19322] RBP: 00007f0367c11e19 R08: 0000000000000000 R09: 0000000000000000
[  424.651612][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.654098][T19322] R13: 00007f0367db6128 R14: 00007f0367db6090 R15: 00007ffe641385f8
[  424.656816][T19322]  </TASK>
[  424.657917][T19322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  424.660183][T19322] CPU: 1 UID: 0 PID: 19322 Comm: syz.1.4327 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  424.663957][T19322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  424.667067][T19322] Call Trace:
[  424.668145][T19322]  <TASK>
[  424.669056][T19322]  dump_stack_lvl+0x99/0x250
[  424.670464][T19322]  ? __asan_memcpy+0x40/0x70
[  424.671876][T19322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  424.673466][T19322]  ? __pfx__printk+0x10/0x10
[  424.674965][T19322]  vpanic+0x281/0x750
[  424.676272][T19322]  ? __pfx__printk+0x10/0x10
[  424.677993][T19322]  ? __pfx_vpanic+0x10/0x10
[  424.679400][T19322]  ? is_bpf_text_address+0x26/0x2b0
[  424.681127][T19322]  panic+0xb9/0xc0
[  424.682326][T19322]  ? __pfx_panic+0x10/0x10
[  424.683714][T19322]  __warn+0x31b/0x4b0
[  424.684924][T19322]  ? rt6_multipath_rebalance+0x455/0x8b0
[  424.686639][T19322]  ? rt6_multipath_rebalance+0x455/0x8b0
[  424.688386][T19322]  report_bug+0x2be/0x4f0
[  424.689777][T19322]  ? rt6_multipath_rebalance+0x455/0x8b0
[  424.691620][T19322]  ? rt6_multipath_rebalance+0x455/0x8b0
[  424.693920][T19322]  ? rt6_multipath_rebalance+0x457/0x8b0
[  424.695602][T19322]  handle_bug+0x84/0x160
[  424.697320][T19322]  exc_invalid_op+0x1a/0x50
[  424.698889][T19322]  asm_exc_invalid_op+0x1a/0x20
[  424.700406][T19322] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  424.702445][T19322] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 6d 54 f3 f7 e9 78 fe ff ff e8 53 ea 8f f7 eb 05 e8 4c ea 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  424.708583][T19322] RSP: 0018:ffffc90006af6580 EFLAGS: 00010293
[  424.710461][T19322] RAX: ffffffff8a2fc15d RBX: ffff888118b91800 RCX: ffff88810c828000
[  424.712990][T19322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  424.715484][T19322] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  424.717886][T19322] R10: dffffc0000000000 R11: fffff52000d5eca8 R12: ffff888118a760de
[  424.720432][T19322] R13: ffff888118b91890 R14: 0000000000000000 R15: 1ffff11023172312
[  424.723060][T19322]  ? rt6_multipath_rebalance+0x44d/0x8b0
[  424.724839][T19322]  fib6_ifup+0x14a/0x180
[  424.726177][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.727701][T19322]  fib6_clean_node+0x24d/0x590
[  424.729179][T19322]  ? __pfx_fib6_clean_node+0x10/0x10
[  424.730922][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.732469][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.734133][T19322]  fib6_walk_continue+0x67b/0x910
[  424.735728][T19322]  fib6_walk+0x149/0x290
[  424.737170][T19322]  __fib6_clean_all+0x234/0x380
[  424.738719][T19322]  ? __fib6_clean_all+0x9b/0x380
[  424.740257][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.741810][T19322]  ? __pfx___fib6_clean_all+0x10/0x10
[  424.743484][T19322]  ? __pfx_fib6_clean_node+0x10/0x10
[  424.745093][T19322]  ? __pfx_fib6_ifup+0x10/0x10
[  424.746555][T19322]  ? addrconf_mod_dad_work+0xb9/0x120
[  424.748229][T19322]  rt6_sync_up+0x128/0x160
[  424.749952][T19322]  ? __pfx_rt6_sync_up+0x10/0x10
[  424.751536][T19322]  ? do_raw_read_unlock+0x3d/0x80
[  424.753148][T19322]  addrconf_notify+0xd55/0x1010
[  424.754630][T19322]  notifier_call_chain+0x1b6/0x3e0
[  424.756191][T19322]  __dev_notify_flags+0x21b/0x2e0
[  424.757893][T19322]  ? __pfx___dev_notify_flags+0x10/0x10
[  424.759798][T19322]  ? __dev_change_flags+0x4cc/0x6d0
[  424.761519][T19322]  ? netif_state_change+0x29e/0x3a0
[  424.763182][T19322]  ? __pfx_console_unlock+0x10/0x10
[  424.764821][T19322]  ? __pfx_netif_state_change+0x10/0x10
[  424.766523][T19322]  netif_change_flags+0xe8/0x1a0
[  424.768296][T19322]  do_setlink+0xc55/0x41c0
[  424.769780][T19322]  ? __pfx_do_setlink+0x10/0x10
[  424.771323][T19322]  ? _printk+0xcf/0x120
[  424.772681][T19322]  ? __pfx____ratelimit+0x10/0x10
[  424.774282][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.775813][T19322]  ? __mutex_trylock_common+0x153/0x260
[  424.777763][T19322]  ? __pfx___mutex_trylock_common+0x10/0x10
[  424.779621][T19322]  ? rcu_is_watching+0x15/0xb0
[  424.781149][T19322]  ? trace_contention_end+0x39/0x120
[  424.782768][T19322]  ? __mutex_lock+0x335/0x1360
[  424.784221][T19322]  ? __pfx___nla_validate_parse+0x10/0x10
[  424.785995][T19322]  ? rtnl_newlink+0x8db/0x1c70
[  424.787443][T19322]  ? __pfx___mutex_lock+0x10/0x10
[  424.788988][T19322]  ? ns_capable+0x8a/0xf0
[  424.790287][T19322]  ? rtnl_link_get_net_capable+0x16a/0x350
[  424.792195][T19322]  rtnl_newlink+0x149f/0x1c70
[  424.793688][T19322]  ? netlink_sendmsg+0x805/0xb30
[  424.795183][T19322]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.796749][T19322]  ? kasan_quarantine_put+0xdd/0x220
[  424.798356][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.800092][T19322]  ? nlmon_xmit+0xb0/0x100
[  424.801521][T19322]  ? kmem_cache_free+0x18f/0x400
[  424.803215][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.804918][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.806606][T19322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.808280][T19322]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  424.809988][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.811526][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.813257][T19322]  ? __dev_queue_xmit+0x27b/0x3b50
[  424.814849][T19322]  ? __dev_queue_xmit+0x1d79/0x3b50
[  424.816413][T19322]  ? __lock_acquire+0xab9/0xd20
[  424.818016][T19322]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.819582][T19322]  rtnetlink_rcv_msg+0x7cf/0xb70
[  424.821126][T19322]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  424.822698][T19322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.824321][T19322]  ? ref_tracker_free+0x63a/0x7d0
[  424.825866][T19322]  ? __asan_memcpy+0x40/0x70
[  424.827465][T19322]  ? __pfx_ref_tracker_free+0x10/0x10
[  424.829126][T19322]  netlink_rcv_skb+0x208/0x470
[  424.830620][T19322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.832283][T19322]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.833917][T19322]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.835532][T19322]  netlink_unicast+0x82f/0x9e0
[  424.837054][T19322]  ? __pfx_netlink_unicast+0x10/0x10
[  424.838672][T19322]  ? netlink_sendmsg+0x642/0xb30
[  424.840236][T19322]  ? skb_put+0x11b/0x210
[  424.841654][T19322]  netlink_sendmsg+0x805/0xb30
[  424.843146][T19322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.844863][T19322]  ? aa_sock_msg_perm+0xf1/0x1d0
[  424.846567][T19322]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.848203][T19322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.849819][T19322]  __sock_sendmsg+0x21c/0x270
[  424.851286][T19322]  ____sys_sendmsg+0x505/0x830
[  424.852754][T19322]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.854523][T19322]  ? import_iovec+0x74/0xa0
[  424.856144][T19322]  ___sys_sendmsg+0x21f/0x2a0
[  424.857825][T19322]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.859846][T19322]  ? __fget_files+0x2a/0x420
[  424.861383][T19322]  ? __fget_files+0x3a0/0x420
[  424.862854][T19322]  __x64_sys_sendmsg+0x19b/0x260
[  424.864530][T19322]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.866227][T19322]  ? rcu_is_watching+0x15/0xb0
[  424.867710][T19322]  ? do_syscall_64+0xbe/0x3b0
[  424.869286][T19322]  do_syscall_64+0xfa/0x3b0
[  424.870865][T19322]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.872510][T19322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.874327][T19322]  ? exc_page_fault+0x9f/0xf0
[  424.875764][T19322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.877581][T19322] RIP: 0033:0x7f0367b8ebe9
[  424.878964][T19322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.884788][T19322] RSP: 002b:00007f0368a98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.887273][T19322] RAX: ffffffffffffffda RBX: 00007f0367db6090 RCX: 00007f0367b8ebe9
[  424.889683][T19322] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  424.892190][T19322] RBP: 00007f0367c11e19 R08: 0000000000000000 R09: 0000000000000000
[  424.894626][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.897103][T19322] R13: 00007f0367db6128 R14: 00007f0367db6090 R15: 00007ffe641385f8
[  424.899701][T19322]  </TASK>
[  424.901220][T19322] Kernel Offset: disabled
[  424.902677][T19322] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:37:26  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd4000887cd9 RBX=ffffea000443e6c8 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000012a3c RDI=0000000000110f9b RBP=ffffc9000398f630 RSP=ffffc9000398f3a0
R8 =ffff88802b1ca003 R9 =1ffff11005639400 R10=dffffc0000000000 R11=ffffed1005639401
R12=00007fe2c6989000 R13=ffffea000443e6c0 R14=dffffc0000000000 R15=ffffea000443e688
RIP=ffffffff820ba266 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576470500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe2c74e56c0 CR3=0000000029942000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=52dcff935b9ae235 a16f9e4fc6ad8600
XMM02=c49c2ad99fb5694c 5f3b069d4bcbfd68 XMM03=b4b340c69d8208b2 80063ee0b9a439f7
XMM04=69baebf8a9152e62 e3a77f0702271306 XMM05=98874cd3594a11a6 75998c3cdc5b37a8
XMM06=c5abe596902040ac 81662de5237da98f XMM07=93f02881b490c84c 1b3d69baebf8a915
XMM08=2e62e3a77f070227 1306b4b340c69d82 XMM09=0000000000000000 00007f6bc8e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006af5d30
R8 =ffff888021868237 R9 =1ffff1100430d046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1931 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0368a986c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3ce7d6 CR3=0000000107b48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0367c12e53
XMM06=0000000000000000 00007f0367c12e4d XMM07=0000000000000000 00007f0367c12e61
XMM08=0000000000000000 00007f0367c12ee7 XMM09=0000000000000000 00007f0367c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
