last executing test programs:

1.958856354s ago: executing program 1 (id=4043):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000000914011cf2ff0800"/24], 0x18}}, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
listen(0xffffffffffffffff, 0x8) (async, rerun: 32)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 64)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6682c0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="830cb719ffffbbbbbbbbbbbb88a820008100400086dd67c172f500303aff00000000000000000000ffffac1414aafe8000"/61], 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) (rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

1.957662337s ago: executing program 1 (id=4044):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0xea13dac1233fa6b2)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @local}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x50}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
readv(r8, 0x0, 0x0)
connect$unix(r7, 0x0, 0x0)
socket(0x1, 0x803, 0x0)
r9 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r9, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
splice(r5, &(0x7f00000000c0)=0x1b, r10, &(0x7f00000001c0)=0x2, 0x7, 0x9)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xce, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.859030922s ago: executing program 1 (id=4045):
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}}, &(0x7f0000000300)=0x90)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x3ed40000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_buf(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='softirq_noise\x00', r6}, 0x18) (async, rerun: 32)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000002c0)) (async, rerun: 32)
vmsplice(r5, 0x0, 0x0, 0x6)
r8 = socket$alg(0x26, 0x5, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0) (async)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, 0x0, 0x0) (async)
r11 = accept4(r8, 0x0, 0x0, 0x80000) (async, rerun: 32)
r12 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
sendmmsg$inet6(r12, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x60040000) (async, rerun: 32)
recvmmsg(r12, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/7, 0x7}, 0x8}], 0x1, 0x40002042, 0x0) (rerun: 32)
sendmsg$inet(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a80)='U', 0x1}], 0x1}, 0x8801) (async, rerun: 32)
write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0001fcffb00008000200bbbbbbbbbbbbaaaaaaaaaa39000d020000601d01000040038094cfd534384bed524ac7853b4f963b1372602b829c89ba6919a380bd7809a6f0c42738f988a7982f51e61b00a6e34a188302bea8cb2cd48de731327e39"], 0x60) (rerun: 32)
recvmsg$can_raw(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYRES64=r5, @ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004031)

1.790234865s ago: executing program 1 (id=4047):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000000000000a14800000000003090001"], 0x44}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r4 = socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r6=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r6, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r9, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x20008080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000540)={0xc, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}]}, 0x210)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0xa}, 0x28)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r10}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.115162675s ago: executing program 2 (id=4058):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000100", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000400000019000000140004006e6963766630000000000000000000000800050006000000"], 0x44}}, 0x40048a4)

1.057688827s ago: executing program 2 (id=4059):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6b97, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x100000000000000, 0xfffffffffffffffc}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r10, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async)
sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r12) (async)
r13 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)

1.056523285s ago: executing program 2 (id=4061):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x5, 0x4)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x400, 0x70bd2a, 0xffffffff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004)

967.593662ms ago: executing program 2 (id=4062):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x4, 0xd, &(0x7f00000032c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r5, 0x8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
sendmmsg$inet(r6, 0x0, 0x0, 0x4880)
read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}], 0x2)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

860.562885ms ago: executing program 1 (id=4064):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ae000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x33, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080)
r3 = socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r5)
sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r11, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbd23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x40)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r12=>0x0, <r13=>0x0})
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000b40)={'bridge_slave_0\x00', {0x2, 0x0, @remote}})
pselect6(0x40, &(0x7f00000000c0)={0xd, 0xfffffffffffffffb, 0x5, 0x80, 0x3ff, 0x1, 0xb1f2}, &(0x7f0000000100)={0x8, 0x8, 0x200, 0x1, 0xcc75, 0x10000, 0x2, 0x1}, &(0x7f0000000140)={0x9, 0xc3a0, 0x3, 0x9, 0x8, 0x1, 0x7, 0x6}, &(0x7f00000001c0)={r12, r13+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x5]}, 0x8})
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000340)={0x744, r15, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @beacon=[@NL80211_ATTR_IE={0x148, 0x2a, [@dsss={0x3, 0x1, 0xb1}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x2c, 0xa, 0x400, @device_b, 0x7, @value=@broadcast, 0x6, 0x6, 0x1, [{{0x1}, @device_b, 0x4}]}}, @random={0x5, 0x14, "3f80866a3981d87c7ea437ebbe872c7c8bd63940"}, @perr={0x84, 0xe8, {0x4, 0xe, [{{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_b, 0xd, @value=@broadcast, 0x1f}, {{}, @device_b, 0x4, @void, 0xa}, {{}, @device_b, 0xd483, @void, 0x32}, {{}, @device_a, 0x6, @void, 0x21}, {{}, @broadcast, 0x4, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_b, 0xbed2, @value=@device_b, 0x10}, {{}, @device_b, 0x5, @void, 0xe}, {{}, @broadcast, 0x7ff, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_a, 0x3762, @value=@device_b, 0x3c}, {{0x0, 0x1}, @broadcast, 0x800, @value=@device_b, 0x14}]}}, @link_id={0x65, 0x12, {@random="9334adf9bb29", @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0x1dc, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ssid={0x0, 0x14, @random="791a994939e85aa064dee0e6183c1307c26df58f"}, @peer_mgmt={0x75, 0x6, {0x1, 0x1, @val=0x1, @void, @void}}, @perr={0x84, 0x68, {0x6, 0x6, [{{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x3e}, {{}, @broadcast, 0x8000, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0x85, @value=@broadcast, 0x7}, {{}, @device_a, 0xd30, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x9b3, @value, 0x14}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x4}]}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x8, 0x68, 0xfffffff8, @device_a, 0x8, @void, 0x0, 0x78, 0x4, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0xefcc}, {{0x1, 0x0, 0x1}, @device_b, 0x2}]}}, @ibss={0x6, 0x2, 0x800}, @random={0x7, 0x7b, "af57e7944ec40d2675f8e2ba77eff7de1675c8303071f8e0c1acefa8ce392d762faf43d892711655883920b91986f360950034f49cde55c506842fc4213cf125a126489c1ea43c58f774d13a2094bba42a0ae0aa2d6b6fcdd00adde580b5c563e8a03107217957507a43d618f1d2f9ee9278b13e3b4c2c5b72e17d"}, @tim={0x5, 0x7a, {0x0, 0xc3, 0x6, "8bc045fde4a4a4754ddac37b2db10b70fa45887cb94ad3844ed8a996ef7c6130005c6c640fce6193f673ea33d32afd2f0fe6f6191b1b15b393537e8c42c5012e13eb52628e7525ac63bc49c7c6ad9e5b806050c455731abbe6fc4e4d9cacb955d49beffb5e2693c938c93bb80ed7c6a7390db0e6dffaea"}}, @cf={0x4, 0x6, {0xc, 0x0, 0x65d, 0x8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xbe, 0x80, [@mesh_chsw={0x76, 0x6, {0x0, 0xc, 0x1e, 0xf8}}, @mesh_chsw={0x76, 0x6, {0x6, 0x0, 0x3a, 0x7}}, @random_vendor={0xdd, 0x87, "d52d7d5070eabcccbeb0d05ec72917d3851132f49d91ccdd9e47376251225d9dfc3bcab60827173499e7e8dd53005a79bb67442dc22ac7de9a168ac3e1300b79390372d5b01dab01f335010c42a0517d727240f82b6ab1446ae7630ca218bf7f8017d674a882292d1b6fa84d7a69e0ca4f3326f55711ba8e45ff540c2a9b9384cbe952b9fe72a7"}, @prep={0x83, 0x1f, {{}, 0x0, 0x2, @device_b, 0x800000, @void, 0x6b0, 0x5, @broadcast, 0x80}}]}, @NL80211_ATTR_FTM_RESPONDER={0x288, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "483af8fa6aaefdec21d37a48ace6bafab1ead4101e5b2c49fef8a1df4b167826658111ca613f81b7d8d0264bc28839c791af759ab41d1c2cefc556aa91e28716cb124ee1c737c2835fd583836832dbe734c28a99b3032791d192697c415d965fb5ae7927bf56a53f8d9cb542a4ed7d5378cc46167190c8510ce1d5ce3bcd5eaf51"}, @NL80211_FTM_RESP_ATTR_LCI={0xb8, 0x2, "965aadaf04228287304b0e5f38c6b506d132c2d6211712091420d22e5595c8e6cb5c5d1d9fab68f83bbc214f6718d1060160b087384fccf9fd6c0433617b4768fc587c8d6e7322b2839b0be293c40aee3f19e338a3e92001bb4b28ee91320c5ff853abca1df8d0aa82630d8861b15580b27bdec3ea11738d384ecfebbb53eadc5f2397bde74045b58e547238280a50a417083ce92edbff64463d77eb03240aad8ed8741e4e42076040ed12206d4bc190460d4ceb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x67, 0x3, "3e68cb6e500c188b165920e25b1d3f24a3d8f61ad5e8a8635abfce5da177004c6412c964e2ac14f8524fbabb5b110543ae7fa1ec64b6f10ab635cbe84ca5d72fbf0428ce045ea35f9c0ac69dc0ec76a57f0435302d8e3202b1d659e436101b72e3c39d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd7, 0x3, "d1a28c1dbfdfba506e90113d3d34d5da0359b1b93a2ea4fe9b7a3e4176e42d9654ec11b47ba1e2b8c0c0bb319ee9901eb196a674f51667781d550e5306cc02ae812afad3d25edc6ac6ebc3486382eeec4a709403ca15ff3293b43793939cbb54be773835bdcba6af56beb23f51ff43d453c74452a6e429e3f18fa22c4ea7fc9ddf1e371d1f79b4b57f1f1434493dbdbddeca306480832435730f86c6d31e290fee91f63a6a63d573df602bea3edc657a1d9e42a518c20a7bdea26bb4179b29ea21753125912bab0d9a319ad0348177875578e0"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4e, 0x80, [@tim={0x5, 0x48, {0x7, 0xca, 0x61, "f461cc6df2b1ee0785353f8bc01e45defc7d76a06639004411dc8185296284844df862e2c2fe6d5606b034feba90ada2211aca42828c3b85d36ab60b9f263581e9555ae168"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}]}]}, 0x744}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)

566.499111ms ago: executing program 0 (id=4070):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x115, r2}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r4}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@mpls_getroute={0xd4, 0x1a, 0x10, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x0, 0x80, 0x3, 0x0, 0x3, 0xfe, 0x2, 0x3600}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_DST={0x8, 0x1, {0x4}}, @RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x8}, {0x7}, {0x89, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x49}, {0x3}, {0x3}, {0x0, 0x0, 0x1}, {0x200}, {0xffff7}, {0x7a0cb}, {0x1}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x1}, {0x6}, {0x6}, {0x54ed5, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x4fc}, {0x1, 0x0, 0x1}, {0xac03}, {0x4}, {0x8, 0x0, 0x1}, {0xbb01}, {0x7de8, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x4, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x22, "bbce86960cb3e23549b301684d2b"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x2e)

402.685698ms ago: executing program 0 (id=4071):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x11, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x2, 0x1, 0x2000}}, 0x1c}}, 0x20004005)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x5d, 0xd3, 0x9, 0x4, @private1, @remote, 0x0, 0x10, 0x400, 0x10000}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf13}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x48814)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x40000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)

319.468818ms ago: executing program 0 (id=4072):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1) (async)
r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@default, @netrom, @null, @default, @bcast, @default, @null, @rose]}, &(0x7f0000000300)=0x48, 0x0)
getsockname$ax25(r2, &(0x7f00000004c0)={{0x3, @rose}, [@netrom, @default, @rose, @remote, @remote, @netrom, @default, @netrom]}, &(0x7f00000006c0)=0x5)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x25, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02000000250000008000000000bb5a0000000000", @ANYRES32=0x0, @ANYRES8=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async)
unshare(0x2c020400) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r8, 0x0, 0x0) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, 0x0)
bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x81, 0x0, 0x4, 0x5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', 0x0}) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

240.552261ms ago: executing program 0 (id=4073):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x40440c0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304fdffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000ef0000200012800b000100000100000000000008000500000004000000000000000000000000b4", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x88, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xa98, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e20, @rand_addr=0x640100fe}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x7}]}, &(0x7f0000000200)=0x10)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001240)={'gre0\x00', 0x0})
setsockopt$ax25_int(r9, 0x101, 0x4, &(0x7f0000000140), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000008a50c5e69efac7ed0000000018ad209a", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

238.983045ms ago: executing program 0 (id=4074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r3, 0x1, 0xfffffffc}, 0x14}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
unshare(0x24060400)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r5, &(0x7f0000000780), 0x0}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x10)

140.828544ms ago: executing program 0 (id=4075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
recvfrom$ax25(r6, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r9, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

70.186851ms ago: executing program 2 (id=4076):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x40090)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00', @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0)=0x6, 0x4)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
r6 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2)
close(0xffffffffffffffff)

69.790388ms ago: executing program 2 (id=4077):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000014)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x208000, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff81, 0x1, 0x3, 0xffffffe2, 0x1}}, {0x6, 0x2, [0x3962]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r10=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='\x00'/17], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x800)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @local})
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)

0s ago: executing program 1 (id=4078):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x80, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x80}}, 0x84000)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
close(r2)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000380)=@bcast)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}]}, 0x20}, 0x1, 0x7}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xf, 0xc, 0x29, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x7, 0x7831, 0x6f, 0x5}})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/208, 0xd0}, 0x7}], 0x1, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000240)={@mcast1}, &(0x7f0000000640)=0x14)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020500040e000000000000000000000005000600000000000a00000000000000ff0100000000000000000000000000010000000000000000020001aeb4e7153e3e4b5a45e8487fb60000000000000000000000000005000500000000000a00000000000000fe8000"/125], 0x70}, 0x1, 0x7}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffffff, 0x20}, 0xc)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r9, 0x89e2)

kernel console output (not intermixed with test programs):

nabled bearer <eth:syzkaller0>, priority 0
[  234.470888][T14522] tipc: Resetting bearer <eth:syzkaller0>
[  234.476640][T14523] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2239'.
[  234.541598][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.958034][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'.
[  235.129569][T14515] tipc: Disabling bearer <eth:syzkaller0>
[  235.243449][T14565] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  235.246766][T14565] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  235.249416][T14565] tipc: Enabling of bearer <eth:macvtap0> rejected, max 3 bearers permitted
[  235.384996][T14569] bridge15: entered promiscuous mode
[  235.395593][T14569] bridge15: entered allmulticast mode
[  235.430147][T14574] vlan2: entered allmulticast mode
[  235.581687][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.675464][T14581] xt_l2tp: missing protocol rule (udp|l2tpip)
[  235.679783][T14582] xt_l2tp: missing protocol rule (udp|l2tpip)
[  236.405028][T14604] syzkaller1: entered promiscuous mode
[  236.407261][T14604] syzkaller1: entered allmulticast mode
[  236.485100][T14609] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2261'.
[  236.621533][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.686927][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2266'.
[  236.707590][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2266'.
[  236.797187][T14623] vlan0: entered allmulticast mode
[  236.799444][T14623] bridge_slave_0: entered allmulticast mode
[  236.815865][T14624] vlan0: entered allmulticast mode
[  237.661459][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.667192][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2273'.
[  237.672705][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'.
[  237.755122][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'.
[  237.860704][T14677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  237.864225][T14677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  237.877801][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'.
[  237.937187][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.940142][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.942868][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.945382][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.947956][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.950686][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  237.953351][T14687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  238.476059][T14697] Bluetooth: MGMT ver 1.23
[  238.708149][T14717] __nla_validate_parse: 9 callbacks suppressed
[  238.708159][T14717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2287'.
[  238.782472][T14728] netlink: 'syz.0.2289': attribute type 21 has an invalid length.
[  238.791629][T14728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2289'.
[  238.810274][T14728] netlink: 'syz.0.2289': attribute type 21 has an invalid length.
[  238.810662][T14725] 8021q: adding VLAN 0 to HW filter on device bond12
[  238.816990][T14728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2289'.
[  238.917914][T14737] netlink: 'syz.1.2291': attribute type 3 has an invalid length.
[  238.945485][T14739] batadv0: entered promiscuous mode
[  238.979197][T14741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2291'.
[  239.048231][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'.
[  239.232110][T14764] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2297'.
[  239.235829][T14763] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2297'.
[  239.276254][T14768] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.284180][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'.
[  239.310400][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2300'.
[  239.313592][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2300'.
[  239.317105][T14772] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  239.386075][T14778] batadv_slave_0: Caught tx_queue_len zero misconfig
[  239.507567][T14786] lo speed is unknown, defaulting to 1000
[  239.511032][T14786] wg1 speed is unknown, defaulting to 1000
[  239.761232][T14798] netlink: 'syz.2.2307': attribute type 4 has an invalid length.
[  240.132809][T14823] lo: Caught tx_queue_len zero misconfig
[  240.722577][ T5877] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  241.149022][T14863] netlink: 'syz.2.2323': attribute type 10 has an invalid length.
[  241.207695][T14866] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  241.476873][T14885] netlink: 'syz.2.2330': attribute type 17 has an invalid length.
[  241.575710][T14894] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  241.578529][T14894] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  241.581214][T14894] tipc: Resetting bearer <eth:syzkaller0>
[  241.703715][T14904] tun0: tun_chr_ioctl cmd 1074025681
[  241.806148][T14907] Can't find ip_set type hash:n
[  241.865964][T14915] lo: Caught tx_queue_len zero misconfig
[  241.907942][T14918] gtp0: entered promiscuous mode
[  241.909855][T14918] gtp0: entered allmulticast mode
[  241.975745][T14926] bpq0: entered allmulticast mode
[  242.040181][T14932] batadv_slave_1: Caught tx_queue_len zero misconfig
[  242.081165][T14938] dvmrp0: left allmulticast mode
[  242.124378][T14938] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  242.266309][T14957] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  242.732365][T14984] nbd5: detected capacity change from 0 to 127
[  242.736290][   T55] block nbd5: Receive control failed (result -32)
[  243.218030][T15025] tipc: Resetting bearer <eth:syzkaller0>
[  243.240505][T15025] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  243.243903][T15025] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  243.248696][T15025] mac80211_hwsim hwsim30 wlan1: left allmulticast mode
[  243.252988][T15025] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  243.255671][T15025] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  243.258574][T15025] macsec5: left promiscuous mode
[  243.260890][T15025] macsec5: left allmulticast mode
[  243.274058][T15027] netlink: 'syz.0.2366': attribute type 29 has an invalid length.
[  243.277428][T15027] netlink: 'syz.0.2366': attribute type 29 has an invalid length.
[  243.557630][T15042] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.561107][T15042] tipc: Resetting bearer <eth:syzkaller0>
[  243.963843][T15065] __nla_validate_parse: 18 callbacks suppressed
[  243.963855][T15065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2375'.
[  244.722279][T15081] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2379'.
[  244.971361][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'.
[  245.058857][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'.
[  245.258105][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'.
[  245.299350][T15107] syzkaller0: entered promiscuous mode
[  245.301186][T15107] syzkaller0: entered allmulticast mode
[  245.424763][T15109] sctp: [Deprecated]: syz.2.2388 (pid 15109) Use of int in maxseg socket option.
[  245.424763][T15109] Use struct sctp_assoc_value instead
[  245.619022][T15117] atomic_op ffff88810e36d198 conn xmit_atomic 0000000000000000
[  246.765381][T15129] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.768345][T15129] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  246.770689][T15129] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  246.775623][T15129] tipc: Resetting bearer <eth:syzkaller0>
[  246.816806][T15134] sctp: [Deprecated]: syz.0.2395 (pid 15134) Use of int in max_burst socket option deprecated.
[  246.816806][T15134] Use struct sctp_assoc_value instead
[  246.861714][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'.
[  247.060380][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'.
[  247.070154][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'.
[  247.126958][ T5694] syzkaller0: tun_net_xmit 76
[  247.129005][ T5694] syzkaller0: tun_net_xmit 48
[  247.140559][T15151] syzkaller0: create flow: hash 3226542975 index 1
[  247.151871][T10433] syzkaller0: tun_net_xmit 76
[  247.211729][ T5911] syzkaller0: tun_net_xmit 76
[  247.288271][T15161] IPv6: sit4: Disabled Multicast RS
[  247.290674][T15161] sit4: entered allmulticast mode
[  247.596167][T15172] net_ratelimit: 3325 callbacks suppressed
[  247.596189][T15172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.707326][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'.
[  247.710285][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2409'.
[  247.732032][ T5911] syzkaller0: tun_net_xmit 76
[  247.750223][T15178] bond13: (slave bridge0): Releasing backup interface
[  247.886871][T15150] syzkaller0: delete flow: hash 3226542975 index 1
[  248.020677][T15200] netlink: 'syz.2.2414': attribute type 4 has an invalid length.
[  249.565539][T15216] netlink: 'syz.2.2420': attribute type 6 has an invalid length.
[  249.661103][T15224] __nla_validate_parse: 3 callbacks suppressed
[  249.661118][T15224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2423'.
[  249.671976][T15224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2423'.
[  249.692017][T15225] tipc: Resetting bearer <eth:syzkaller0>
[  249.969944][T15237] tunl0: Caught tx_queue_len zero misconfig
[  250.486932][T15242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2428'.
[  250.554511][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'.
[  250.557317][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'.
[  250.560504][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'.
[  250.564516][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'.
[  250.696410][T15252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2431'.
[  250.737095][T15257] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  250.849628][T15269] lo speed is unknown, defaulting to 1000
[  250.853645][T15269] wg1 speed is unknown, defaulting to 1000
[  251.415349][T15291] bridge0: the hash_elasticity option has been deprecated and is always 16
[  251.418293][T15291] bridge0: entered allmulticast mode
[  251.555656][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2441'.
[  251.559825][T15293] bond6: entered allmulticast mode
[  251.567052][T15293] 8021q: adding VLAN 0 to HW filter on device bond6
[  251.678524][T15302] netlink: 'syz.2.2445': attribute type 1 has an invalid length.
[  251.698185][T15299] veth15: entered promiscuous mode
[  251.700783][T15299] bridge3: port 1(veth15) entered blocking state
[  251.709133][T15299] bridge3: port 1(veth15) entered disabled state
[  251.711972][T15299] veth15: entered allmulticast mode
[  251.720791][T15302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.781881][T15307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.787165][T15307] syzkaller0: entered promiscuous mode
[  251.789809][T15307] syzkaller0: entered allmulticast mode
[  251.815339][T15307] tipc: Resetting bearer <eth:syzkaller0>
[  251.821345][T15305] tipc: Resetting bearer <eth:syzkaller0>
[  251.840469][T15305] tipc: Disabling bearer <eth:syzkaller0>
[  251.952632][T15316] netlink: 'syz.1.2449': attribute type 2 has an invalid length.
[  252.040042][T15327] lo speed is unknown, defaulting to 1000
[  252.045545][T15327] wg1 speed is unknown, defaulting to 1000
[  252.065229][T15328] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2450'.
[  252.076227][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  252.193648][T15331] lo speed is unknown, defaulting to 1000
[  252.197244][T15331] wg1 speed is unknown, defaulting to 1000
[  252.976531][T15351] tipc: Resetting bearer <eth:syzkaller0>
[  253.239736][T15362] netlink: 'syz.1.2457': attribute type 10 has an invalid length.
[  253.280537][T15358] netlink: 'syz.2.2456': attribute type 2 has an invalid length.
[  253.285041][T15358] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  253.288062][T15358] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  253.291021][T15358] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  253.735697][T15383] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode
[  253.739050][T15383] hsr0: entered promiscuous mode
[  254.683465][T15473] netlink: set zone limit has 8 unknown bytes
[  254.741952][T15478] netlink: 'syz.2.2485': attribute type 1 has an invalid length.
[  254.766821][T15478] bond15: (slave gretap3): making interface the new active one
[  254.770607][T15478] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  254.808867][T15484] __nla_validate_parse: 10 callbacks suppressed
[  254.808884][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2486'.
[  254.822313][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'.
[  254.828072][T15484] netlink: 'syz.2.2486': attribute type 16 has an invalid length.
[  254.831110][T15484] netlink: 'syz.2.2486': attribute type 17 has an invalid length.
[  255.001996][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'.
[  255.048126][T15507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2492'.
[  255.060038][T15507] netlink: 'syz.2.2492': attribute type 11 has an invalid length.
[  255.126836][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'.
[  255.285648][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'.
[  255.288915][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'.
[  255.299097][T15535] geneve6: entered promiscuous mode
[  255.301184][T15535] geneve6: entered allmulticast mode
[  255.306037][ T8044] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.312132][ T8044] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.319567][ T8044] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.325949][ T8044] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.350013][T15540] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2499'.
[  255.472102][T15551] sctp: [Deprecated]: syz.2.2503 (pid 15551) Use of struct sctp_assoc_value in delayed_ack socket option.
[  255.472102][T15551] Use struct sctp_sack_info instead
[  255.483380][T15551] sctp: [Deprecated]: syz.2.2503 (pid 15551) Use of struct sctp_assoc_value in delayed_ack socket option.
[  255.483380][T15551] Use struct sctp_sack_info instead
[  255.597756][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'.
[  255.604287][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'.
[  255.803454][T15574] netlink: 'syz.2.2510': attribute type 10 has an invalid length.
[  255.808361][T15574] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  255.877351][T15586] syzkaller1: tun_chr_ioctl cmd 2148553947
[  255.979900][T15588] unknown channel width for channel at 909000KHz?
[  255.998938][T15596] lo speed is unknown, defaulting to 1000
[  256.005053][T15596] wg1 speed is unknown, defaulting to 1000
[  256.856195][T15664] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  256.917384][T15671] netlink: 'syz.1.2532': attribute type 10 has an invalid length.
[  256.923365][T15671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  256.927364][T15671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.276106][T15688] IPVS: Scheduler module ip_vs_sip not found
[  257.678700][T15709] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  257.686668][T15709] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  257.733415][T15721] gretap2: entered promiscuous mode
[  257.737075][T15721] bond13: (slave gretap2): making interface the new active one
[  257.740165][T15721] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  257.798222][T15720] nbd: must specify at least one socket
[  257.989455][T15744] batadv1: entered promiscuous mode
[  258.007155][T15745] batadv1: entered promiscuous mode
[  258.027246][T15747] lo speed is unknown, defaulting to 1000
[  258.030938][T15747] wg1 speed is unknown, defaulting to 1000
[  258.137573][T15755] netlink: 'syz.1.2558': attribute type 11 has an invalid length.
[  258.283210][T15761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.285880][T15761] syzkaller0: entered promiscuous mode
[  258.287861][T15761] syzkaller0: entered allmulticast mode
[  258.304440][T15761] tipc: Resetting bearer <eth:syzkaller0>
[  258.320983][T15760] tipc: Resetting bearer <eth:syzkaller0>
[  258.335651][T15760] tipc: Disabling bearer <eth:syzkaller0>
[  258.475481][T15773] validate_nla: 2 callbacks suppressed
[  258.475492][T15773] netlink: 'syz.1.2562': attribute type 1 has an invalid length.
[  258.553140][T15779] syzkaller1: entered promiscuous mode
[  258.554893][T15779] syzkaller1: entered allmulticast mode
[  258.577435][T15781] bond6: option mode: unable to set because the bond device is up
[  258.587713][T15781] bridge0: port 1(syz_tun) entered blocking state
[  258.590642][T15781] bridge0: port 1(syz_tun) entered disabled state
[  258.593997][T15781] syz_tun: entered allmulticast mode
[  258.598045][T15781] syz_tun: entered promiscuous mode
[  258.602894][T15781] syz1: rxe_newlink: already configured on syz_tun
[  258.731219][T15788] netlink: 'syz.1.2568': attribute type 4 has an invalid length.
[  258.745463][T15788] netlink: 'syz.1.2568': attribute type 4 has an invalid length.
[  258.748607][T15790] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  258.947574][T15798] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.218636][T15808] bridge0 (unregistering): left allmulticast mode
[  259.278109][T15810] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  259.356966][T15817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.398368][T15822] netlink: 'syz.1.2578': attribute type 39 has an invalid length.
[  259.425889][T15826] tipc: Resetting bearer <eth:team0>
[  259.433520][T15826] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  259.667063][T15844] siw: device registration error -23
[  259.719431][T15835] lo speed is unknown, defaulting to 1000
[  259.722654][T15835] wg1 speed is unknown, defaulting to 1000
[  259.953916][T15870] __nla_validate_parse: 32 callbacks suppressed
[  259.953928][T15870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2589'.
[  260.256621][T15882] lo speed is unknown, defaulting to 1000
[  260.259416][T15882] wg1 speed is unknown, defaulting to 1000
[  260.302471][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2592'.
[  260.595359][T15887] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.2593'.
[  260.610286][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'.
[  260.614330][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'.
[  260.688435][T15892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.705485][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'.
[  260.781555][ T5857] Bluetooth: hci0: command tx timeout
[  260.791244][T15895] netlink: 'syz.1.2597': attribute type 1 has an invalid length.
[  261.003489][T15911] tipc: Resetting bearer <eth:syzkaller0>
[  261.009428][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[  261.028286][T15911] team0: entered promiscuous mode
[  261.030276][T15911] team0: entered allmulticast mode
[  261.096001][T15922] ipip1: entered promiscuous mode
[  261.405540][T15940] netlink: 'syz.1.2608': attribute type 13 has an invalid length.
[  261.408902][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'.
[  261.439400][T15940] lo speed is unknown, defaulting to 1000
[  261.443660][T15940] wg1 speed is unknown, defaulting to 1000
[  261.816265][T15946] sock: sock_set_timeout: `syz.0.2609' (pid 15946) tries to set negative timeout
[  261.981838][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2613'.
[  262.000700][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'.
[  262.006720][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.010475][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.013842][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.016898][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.020005][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.023206][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.026509][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.029488][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.032782][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.035831][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.038926][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.042149][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.045308][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.048326][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.051487][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.054852][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.057956][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.061035][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.064444][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.067465][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.070545][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.073619][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.076702][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.079636][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.082916][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.085938][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.089266][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.092335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.095424][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.098400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.101610][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.104657][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.107807][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.110801][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.114008][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.116947][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.119996][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.123066][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.126156][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.129074][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.132143][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.134613][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.137320][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.140283][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.143500][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.146616][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.149486][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.152254][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.154895][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.157568][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.160573][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.163456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.166067][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.168644][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.171758][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.174375][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.177084][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.180048][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.183773][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.186713][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.189769][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.192417][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.195426][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.198073][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.200689][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.203279][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.205837][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.208403][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.210885][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.213549][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.216028][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.218606][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.221093][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.223570][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.226435][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.229231][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.232306][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.234878][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.237616][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.240506][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.243389][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.246046][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.248802][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.251532][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.254484][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.256854][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.259261][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.261700][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.264239][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.267205][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.270185][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.273129][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.275758][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.278046][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.280459][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.282894][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.285339][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.287694][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.290138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.292527][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.295418][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.298333][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.300817][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.303332][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.305765][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.308176][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.311027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.313738][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.316517][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.319488][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.322359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.324797][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.327260][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.329667][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.332324][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.334734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.337227][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.339882][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.342550][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.345069][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.347995][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.350382][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.352872][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.355184][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.357563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.359923][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.362465][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  262.364867][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  262.446323][T15967] netlink: 'syz.1.2615': attribute type 10 has an invalid length.
[  262.514024][T15979] tipc: Resetting bearer <eth:syzkaller0>
[  262.654401][T15990] dvmrp8: entered allmulticast mode
[  262.835630][T15996] lo speed is unknown, defaulting to 1000
[  262.851114][T15996] wg1 speed is unknown, defaulting to 1000
[  263.322547][T16015] team_slave_1: Caught tx_queue_len zero misconfig
[  263.474457][T16023] netlink: 'syz.2.2632': attribute type 5 has an invalid length.
[  263.665996][T16036] IPVS: ip_vs_add_dest(): server weight less than zero
[  263.747165][T16041] netlink: 'syz.0.2637': attribute type 2 has an invalid length.
[  263.782859][T16045] lo speed is unknown, defaulting to 1000
[  263.787217][T16045] wg1 speed is unknown, defaulting to 1000
[  263.792744][T16051] netlink: 'syz.0.2639': attribute type 30 has an invalid length.
[  263.844101][T16051] netlink: 'syz.0.2639': attribute type 30 has an invalid length.
[  264.562911][T16087] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  264.603250][T16099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.606508][T16099] syzkaller0: MTU too low for tipc bearer
[  264.608323][T16099] tipc: Disabling bearer <eth:syzkaller0>
[  264.616608][T16099] veth1_to_bridge: entered promiscuous mode
[  264.621954][T16099] veth1_to_bridge: entered allmulticast mode
[  264.705566][T16105] netlink: 'syz.0.2656': attribute type 13 has an invalid length.
[  264.744242][T16107] bond17: entered promiscuous mode
[  264.746264][T16107] bond17: entered allmulticast mode
[  264.748586][T16107] 8021q: adding VLAN 0 to HW filter on device bond17
[  264.767056][T16105] lo speed is unknown, defaulting to 1000
[  264.770648][T16105] wg1 speed is unknown, defaulting to 1000
[  264.807319][T16107] lo speed is unknown, defaulting to 1000
[  264.810431][T16107] wg1 speed is unknown, defaulting to 1000
[  265.012789][T16124] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  265.046922][T16124] __nla_validate_parse: 22 callbacks suppressed
[  265.046936][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'.
[  265.062136][T16124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  265.065472][T16124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  265.763708][T16133] veth1_virt_wifi: mtu less than device minimum
[  266.049366][T16149] netlink: 'syz.2.2666': attribute type 10 has an invalid length.
[  266.049476][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.052553][T16149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2666'.
[  266.052579][T16149] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  266.096800][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.113769][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.123239][T16152] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.126134][T16152] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.129106][T16152] netlink: 'syz.0.2668': attribute type 5 has an invalid length.
[  266.161552][T16152] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2668'.
[  266.210151][T16165] netlink: 'syz.1.2672': attribute type 1 has an invalid length.
[  266.235113][T16167] gretap3: entered allmulticast mode
[  266.266502][T16165] netlink: 'syz.1.2672': attribute type 1 has an invalid length.
[  266.269571][T16165] netlink: 'syz.1.2672': attribute type 1 has an invalid length.
[  266.279366][T16165] netlink: 'syz.1.2672': attribute type 1 has an invalid length.
[  266.287576][T16167] gretap3: entered allmulticast mode
[  266.295681][T16167] bond16: (slave gretap3): making interface the new active one
[  266.299635][T16167] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  266.460065][T16186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2678'.
[  266.547505][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2679'.
[  266.606961][T16199] vlan2: entered allmulticast mode
[  266.608619][T16199] bond8: entered allmulticast mode
[  266.799323][T16216] !: entered promiscuous mode
[  266.806515][T16216] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  267.061156][T16235] lo speed is unknown, defaulting to 1000
[  267.066335][T16235] wg1 speed is unknown, defaulting to 1000
[  267.382576][T16251] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  267.385658][T16251] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  267.396469][T16252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.492088][T16254] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  267.581559][T16256] delete_channel: no stack
[  267.769232][T16280] !: renamed from dummy0
[  267.776767][T16280] NCSI netlink: No device for ifindex 3321692160
[  268.338198][T16314] lo speed is unknown, defaulting to 1000
[  268.347720][T16314] wg1 speed is unknown, defaulting to 1000
[  268.840295][T16345] bridge0: entered allmulticast mode
[  269.266756][T16349] team0: Device gtp1 is up. Set it down before adding it as a team port
[  269.380981][T16353] siw: device registration error -23
[  269.543112][T16360] bond0 (unregistering): left promiscuous mode
[  269.547144][T16360] bond_slave_0: left promiscuous mode
[  269.549899][T16360] bond_slave_1: left promiscuous mode
[  269.563229][T16360] !: left promiscuous mode
[  269.627785][T16360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.634623][T16360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.640263][T16360] bond0 (unregistering): (slave 0!): Releasing backup interface
[  269.645458][T16360] bond0 (unregistering): Released all slaves
[  269.661914][T16370] validate_nla: 66 callbacks suppressed
[  269.661931][T16370] netlink: 'syz.0.2712': attribute type 20 has an invalid length.
[  269.668751][T16374] x9: renamed from bridge_slave_0
[  269.668899][T16371] netlink: 'syz.0.2712': attribute type 20 has an invalid length.
[  269.752202][T16371] netlink: 'syz.0.2712': attribute type 20 has an invalid length.
[  269.785825][T16370] netlink: 'syz.0.2712': attribute type 20 has an invalid length.
[  269.815179][T16380] tipc: Resetting bearer <eth:syzkaller0>
[  269.830804][T16380] bridge14: the hash_elasticity option has been deprecated and is always 16
[  269.835215][T16380] bridge14: entered allmulticast mode
[  269.912237][T16387] IPVS: Error connecting to the multicast addr
[  270.009807][T16401] netlink: 'syz.1.2722': attribute type 11 has an invalid length.
[  270.013053][T16401] netlink: 'syz.1.2722': attribute type 11 has an invalid length.
[  270.075289][T16407] __nla_validate_parse: 17 callbacks suppressed
[  270.075309][T16407] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2724'.
[  270.082396][T16406] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2724'.
[  270.148013][T16410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.153929][T16410] syzkaller0: entered promiscuous mode
[  270.156183][T16410] syzkaller0: entered allmulticast mode
[  270.176070][T16410] tipc: Resetting bearer <eth:syzkaller0>
[  270.179055][T16410] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2725'.
[  270.184262][T16409] tipc: Resetting bearer <eth:syzkaller0>
[  270.196347][T16409] tipc: Disabling bearer <eth:syzkaller0>
[  270.264682][T16415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2727'.
[  270.439409][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'.
[  270.443569][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'.
[  270.446937][T16428] netlink: 'syz.1.2730': attribute type 11 has an invalid length.
[  270.450699][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'.
[  270.454198][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'.
[  270.457568][T16428] netlink: 'syz.1.2730': attribute type 11 has an invalid length.
[  270.508587][T16430] netlink: 844 bytes leftover after parsing attributes in process `syz.1.2731'.
[  270.974679][T16452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2736'.
[  271.153440][T16458] netlink: 'syz.2.2738': attribute type 25 has an invalid length.
[  271.879533][T16474] netlink: 'syz.1.2743': attribute type 1 has an invalid length.
[  271.907353][T16474] bond18: entered promiscuous mode
[  271.909963][T16474] 8021q: adding VLAN 0 to HW filter on device bond18
[  271.926102][T16474] bond18: (slave bridge17): making interface the new active one
[  271.928935][T16474] bridge17: entered promiscuous mode
[  271.931876][T16474] bond18: (slave bridge17): Enslaving as an active interface with an up link
[  272.453114][T16501] bond0: Device is already in use.
[  273.625839][T16540] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  273.648076][T16535] tipc: Resetting bearer <eth:syzkaller0>
[  273.901168][T16546] netlink: 'syz.1.2766': attribute type 13 has an invalid length.
[  273.985726][T16555] vlan1: entered allmulticast mode
[  273.988989][T16555] gretap0: entered allmulticast mode
[  274.186312][T16560] xt_l2tp: missing protocol rule (udp|l2tpip)
[  274.273231][T16568] netlink: 'syz.0.2773': attribute type 1 has an invalid length.
[  274.298517][T16568] 8021q: adding VLAN 0 to HW filter on device bond10
[  274.326886][T16568] 8021q: adding VLAN 0 to HW filter on device bond10
[  274.329590][T16568] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address
[  274.334677][T16568] bond10: (slave vxcan5): Error -95 calling set_mac_address
[  274.370336][T16575] veth13: entered promiscuous mode
[  274.380135][T16575] bond10: (slave veth13): Enslaving as an active interface with a down link
[  274.393114][T16577] tipc: Resetting bearer <eth:syzkaller0>
[  274.406052][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.409059][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.465115][T16581] xt_HMARK: spi-set and port-set can't be combined
[  274.511844][T16587] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20002
[  274.607351][T16598] syz.0.2780 (16598) used greatest stack depth: 18360 bytes left
[  274.741970][T16611] netlink: 'syz.2.2782': attribute type 8 has an invalid length.
[  274.750543][T16608] netlink: 'syz.2.2782': attribute type 8 has an invalid length.
[  274.968066][T16628] lo speed is unknown, defaulting to 1000
[  274.973017][T16628] wg1 speed is unknown, defaulting to 1000
[  275.245208][T16633] batadv0: entered promiscuous mode
[  275.405648][T16662] netlink: 'syz.1.2796': attribute type 10 has an invalid length.
[  275.466472][T16666] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  275.476233][T16664] __nla_validate_parse: 18 callbacks suppressed
[  275.476251][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'.
[  275.485407][T16666] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  275.488544][T16666] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2798'.
[  275.506024][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'.
[  275.594394][T16672] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2800'.
[  275.597672][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'.
[  275.723928][T16676] lo speed is unknown, defaulting to 1000
[  275.728326][T16676] wg1 speed is unknown, defaulting to 1000
[  275.738411][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'.
[  276.079174][T16693] ip6gre0: Caught tx_queue_len zero misconfig
[  276.210907][T16696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2806'.
[  276.214848][T16696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2806'.
[  276.466517][T16699] batadv_slave_1: entered promiscuous mode
[  276.478767][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'.
[  276.535665][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'.
[  276.544519][T16699] batadv_slave_1 (unregistering): left promiscuous mode
[  276.687973][T16710] macsec3: entered allmulticast mode
[  276.689708][T16710] ip6gretap0: entered allmulticast mode
[  276.697985][T16710] ip6gretap0: left allmulticast mode
[  276.715494][T16713] netlink: 'syz.0.2810': attribute type 3 has an invalid length.
[  276.922919][T16729] netlink: 'syz.2.2814': attribute type 7 has an invalid length.
[  276.926888][T16730] netlink: 'syz.2.2814': attribute type 7 has an invalid length.
[  276.970412][T16729] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.084666][T16729] bond0 (unregistering): Released all slaves
[  277.159780][T16745] workqueue: Failed to create a rescuer kthread for wq "nbd1-recv": -EINTR
[  277.160066][T16745] block (null): Could not allocate knbd recv work queue.
[  277.176542][T16745] nbd: failed to add new device
[  277.190470][T16747] bond19: entered promiscuous mode
[  277.193581][T16747] bond19: entered allmulticast mode
[  277.195833][T16747] 8021q: adding VLAN 0 to HW filter on device bond19
[  277.678846][T16772] lo speed is unknown, defaulting to 1000
[  277.681568][T16772] wg1 speed is unknown, defaulting to 1000
[  278.114464][T16795] bond0: entered promiscuous mode
[  278.116431][T16795] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.397138][T16823] tipc: Disabling bearer <udp:syz2>
[  278.401174][T16823] netlink: 'syz.2.2835': attribute type 2 has an invalid length.
[  278.456685][T16832] 8021q: VLANs not supported on sit0
[  278.586040][T16844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.761473][   T33] kauditd_printk_skb: 55 callbacks suppressed
[  278.761492][   T33] audit: type=1800 audit(1758912947.334:71): pid=16853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2844" name="memory.events" dev="tmpfs" ino=5225 res=0 errno=0
[  302.187804][T16858] tipc: New replicast peer: 255.255.255.255
[  302.190155][T16858] tipc: Enabled bearer <udp:syz2>, priority 10
[  302.293305][T16865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.355800][T16873] __nla_validate_parse: 80 callbacks suppressed
[  302.355814][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2854'.
[  302.355917][T16872] netlink: 'syz.1.2853': attribute type 5 has an invalid length.
[  302.459412][T16876] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  302.552864][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'.
[  302.560189][T16880] netlink: 'syz.1.2856': attribute type 5 has an invalid length.
[  302.653396][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  302.670334][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  302.676091][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'.
[  302.725675][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'.
[  302.755139][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2858'.
[  302.900634][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2860'.
[  302.913095][T16893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  302.998193][T16899] siw: device registration error -23
[  303.066169][T16901] syz_tun: Device is already in use.
[  303.075421][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'.
[  303.243309][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'.
[  303.247693][T16916] netlink: 'syz.0.2867': attribute type 26 has an invalid length.
[  303.343349][T16931] netlink: zone id is out of range
[  303.349918][T16931] netlink: zone id is out of range
[  303.354415][T16931] netlink: get zone limit has 8 unknown bytes
[  303.518301][T16950] bridge18: entered promiscuous mode
[  303.520417][T16950] bridge18: entered allmulticast mode
[  303.569084][T16956] bond0: Caught tx_queue_len zero misconfig
[  303.645647][T16965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.680621][T16962] lo speed is unknown, defaulting to 1000
[  303.687581][T16962] wg1 speed is unknown, defaulting to 1000
[  303.792461][T16974] netlink: 'syz.0.2884': attribute type 4 has an invalid length.
[  304.153032][T16990] netlink: 'syz.0.2888': attribute type 29 has an invalid length.
[  304.156840][T16990] netlink: 'syz.0.2888': attribute type 29 has an invalid length.
[  304.384381][T17010] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.585562][T17028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  305.298835][T17034] netlink: 'syz.2.2903': attribute type 9 has an invalid length.
[  305.335555][T17036] netlink: 'syz.2.2904': attribute type 1 has an invalid length.
[  305.339137][T17036] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  305.601915][T17055] syzkaller0: entered promiscuous mode
[  305.607008][T17055] syzkaller0: entered allmulticast mode
[  305.617417][T17055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.658829][T17054] tipc: Resetting bearer <eth:syzkaller0>
[  306.978818][T17054] tipc: Disabling bearer <eth:syzkaller0>
[  307.241774][T17091] netlink: 'syz.0.2917': attribute type 46 has an invalid length.
[  307.954174][T17108] bond6: option mode: unable to set because the bond device is up
[  307.968739][T17108] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  307.974604][T17108] bond6: (slave macvlan1): Enslaving as an active interface with a down link
[  307.981121][T17108] syz1: rxe_newlink: already configured on syz_tun
[  308.168118][T17131] __nla_validate_parse: 47 callbacks suppressed
[  308.168131][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'.
[  308.200136][T17128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.207462][T17129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.227133][T17133] vlan2: entered promiscuous mode
[  308.275867][T17133] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2930'.
[  308.398857][T17143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2932'.
[  308.453609][T17146] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.456891][T17146] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  308.605726][T17150] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  308.671112][T17151] netlink: 'syz.0.2934': attribute type 10 has an invalid length.
[  309.320384][T17160] netlink: 'syz.1.2938': attribute type 1 has an invalid length.
[  309.339029][T17160] 8021q: adding VLAN 0 to HW filter on device bond20
[  309.358751][T17159] lo speed is unknown, defaulting to 1000
[  309.364921][T17159] wg1 speed is unknown, defaulting to 1000
[  309.477506][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'.
[  309.484091][T17168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2940'.
[  309.495787][T17164] gtp1: entered promiscuous mode
[  309.497862][T17164] gtp1: entered allmulticast mode
[  310.153096][T17185] lo speed is unknown, defaulting to 1000
[  310.156019][T17185] wg1 speed is unknown, defaulting to 1000
[  310.466419][T17199] netlink: 'syz.2.2948': attribute type 1 has an invalid length.
[  310.477564][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'.
[  310.489383][T17199] 8021q: adding VLAN 0 to HW filter on device bond18
[  310.493265][T17201] gretap0: left promiscuous mode
[  310.529841][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'.
[  310.621696][T17208] xt_l2tp: wrong L2TP version: 1
[  310.687938][T17219] netlink: 'syz.2.2952': attribute type 1 has an invalid length.
[  310.838280][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'.
[  310.852755][T17229] netlink: 'syz.0.2955': attribute type 21 has an invalid length.
[  310.937848][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2958'.
[  311.097173][T17249] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  311.189170][T17257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2963'.
[  311.290618][T17261] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  312.003020][T17288] netlink: 'syz.1.2974': attribute type 10 has an invalid length.
[  312.218473][T17299] dvmrp8: entered allmulticast mode
[  312.257399][T17301] netlink: 'syz.2.2979': attribute type 3 has an invalid length.
[  312.337993][T17307] netlink: 'syz.2.2979': attribute type 4 has an invalid length.
[  313.186614][T17308] delete_channel: no stack
[  313.188795][T17308] delete_channel: no stack
[  313.215768][T17324] __nla_validate_parse: 13 callbacks suppressed
[  313.215787][T17324] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2985'.
[  313.336899][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'.
[  313.344097][T17333] netlink: 'syz.0.2989': attribute type 10 has an invalid length.
[  313.464579][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'.
[  313.476631][T17339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2990'.
[  313.677710][T17349] syzkaller1: entered promiscuous mode
[  313.679865][T17349] syzkaller1: entered allmulticast mode
[  313.703337][T17350] lo speed is unknown, defaulting to 1000
[  313.713287][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'.
[  313.716602][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2993'.
[  313.723357][T17350] wg1 speed is unknown, defaulting to 1000
[  313.973046][T17365] netlink: 'syz.2.2999': attribute type 5 has an invalid length.
[  314.060266][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'.
[  314.117288][T17372] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3001'.
[  314.125243][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3001'.
[  314.201258][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3002'.
[  314.562359][T17390] tipc: Resetting bearer <eth:syzkaller0>
[  314.645562][ T5694] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.649047][ T5694] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.652062][ T5694] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.656482][ T5694] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.725666][T17408] netlink: 'syz.2.3011': attribute type 8 has an invalid length.
[  314.778211][T17413] netlink: 'syz.2.3011': attribute type 8 has an invalid length.
[  314.880039][T17420] syzkaller0: entered promiscuous mode
[  314.883366][T17420] syzkaller0: entered allmulticast mode
[  314.887920][T17418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.932739][T17418] tipc: Resetting bearer <eth:syzkaller0>
[  314.959029][T17418] tipc: Disabling bearer <eth:syzkaller0>
[  315.135423][T17443] netlink: 'syz.0.3023': attribute type 30 has an invalid length.
[  315.291118][T17468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.394129][T17472] lo speed is unknown, defaulting to 1000
[  315.409207][T17472] wg1 speed is unknown, defaulting to 1000
[  315.494208][T17481] netlink: 'syz.2.3032': attribute type 1 has an invalid length.
[  315.672117][T17499] bridge15: entered promiscuous mode
[  315.674096][T17499] bridge15: entered allmulticast mode
[  315.678800][T17499] team0: Port device bridge15 added
[  316.174768][T17533] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  316.497705][T17567] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  316.554658][T17576] netlink: 'syz.1.3053': attribute type 10 has an invalid length.
[  316.611799][T17579] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  317.397051][T17585] netlink: 'syz.0.3055': attribute type 83 has an invalid length.
[  317.422063][T17585] lo speed is unknown, defaulting to 1000
[  317.425386][T17585] wg1 speed is unknown, defaulting to 1000
[  317.578155][T17594] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  317.749250][T17614] IPv6: sit4: Disabled Multicast RS
[  317.752741][T17614] sit4: entered allmulticast mode
[  317.852843][T17621] netlink: 'syz.0.3065': attribute type 13 has an invalid length.
[  318.006608][T17624] 8021q: adding VLAN 0 to HW filter on device bond12
[  318.032057][T17624] macvlan3: entered promiscuous mode
[  318.033747][T17624] macvlan3: entered allmulticast mode
[  318.048674][T17624] bond12: entered promiscuous mode
[  318.051669][T17624] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  318.057437][T17624] bond12: left promiscuous mode
[  318.218780][T17639] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  318.328819][T17650] netlink: 'syz.0.3073': attribute type 1 has an invalid length.
[  318.336408][T17651] erspan0: entered allmulticast mode
[  318.370023][T17650] 8021q: adding VLAN 0 to HW filter on device bond13
[  318.425576][T17658] __nla_validate_parse: 19 callbacks suppressed
[  318.425601][T17658] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3076'.
[  318.474108][T17660] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  318.522402][T17664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3079'.
[  318.526000][T17664] ip6tnl0: Caught tx_queue_len zero misconfig
[  318.584215][T17665] lo speed is unknown, defaulting to 1000
[  318.590482][T17665] wg1 speed is unknown, defaulting to 1000
[  318.957593][T17691] siw: device registration error -23
[  318.967645][T17691] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  319.076518][T17698] netlink: 'syz.2.3088': attribute type 1 has an invalid length.
[  319.079091][T17698] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3088'.
[  319.156983][T17700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3089'.
[  319.326673][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'.
[  319.329705][T17709] netlink: 'syz.2.3092': attribute type 2 has an invalid length.
[  319.346571][T17709] netlink: 'syz.2.3092': attribute type 1 has an invalid length.
[  319.349582][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'.
[  319.359604][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'.
[  319.616217][T17713] tipc: Resetting bearer <eth:syzkaller0>
[  319.715364][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'.
[  319.719804][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'.
[  319.724532][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'.
[  319.840610][T17743] 8021q: VLANs not supported on team0
[  319.912505][T17749] netlink: 'syz.2.3105': attribute type 7 has an invalid length.
[  319.916759][T17749] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  319.983333][T17749] 8021q: adding VLAN 0 to HW filter on device bond19
[  320.013530][T17754] bond19: (slave gretap4): making interface the new active one
[  320.022146][T17754] bond19: (slave gretap4): Enslaving as an active interface with an up link
[  320.398217][T17768] netlink: 'syz.0.3109': attribute type 12 has an invalid length.
[  320.400995][T17768] netlink: 'syz.0.3109': attribute type 14 has an invalid length.
[  321.082916][T17818] lo speed is unknown, defaulting to 1000
[  321.089209][T17818] wg1 speed is unknown, defaulting to 1000
[  321.626422][T17867] lo speed is unknown, defaulting to 1000
[  321.630422][T17867] wg1 speed is unknown, defaulting to 1000
[  321.938255][T17874] netlink: 'syz.2.3133': attribute type 1 has an invalid length.
[  321.979385][T17877] netlink: 'syz.0.3134': attribute type 6 has an invalid length.
[  322.006456][T17874] 8021q: adding VLAN 0 to HW filter on device bond20
[  322.078406][T17874] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  322.091440][T17874] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  322.093642][T17874] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  322.101844][T17874] erspan0: entered allmulticast mode
[  322.283476][T17890] openvswitch: netlink: Flow key attr not present in new flow.
[  322.286873][T17890] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  322.353992][T17901] syz_tun: left allmulticast mode
[  322.358045][T17901] syz_tun: left promiscuous mode
[  322.359882][T17901] bridge0: port 1(syz_tun) entered disabled state
[  322.490045][T17907] lo speed is unknown, defaulting to 1000
[  322.543207][T17907] wg1 speed is unknown, defaulting to 1000
[  322.603228][T17916] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (13)
[  323.346046][T17955] netlink: 'syz.2.3150': attribute type 4 has an invalid length.
[  323.444874][T17957] 8021q: adding VLAN 0 to HW filter on device bond21
[  323.486045][T17960] lo speed is unknown, defaulting to 1000
[  323.490035][T17960] wg1 speed is unknown, defaulting to 1000
[  323.539081][T17966] __nla_validate_parse: 19 callbacks suppressed
[  323.539096][T17966] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3153'.
[  323.584425][T17968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.717714][T17974] syzkaller0: mtu less than device minimum
[  323.952372][T17989] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3159'.
[  323.956207][T17989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3159'.
[  323.959810][T17989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3159'.
[  324.041635][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'.
[  324.158649][T17999] netlink: 'syz.1.3160': attribute type 1 has an invalid length.
[  324.163906][T17999] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3160'.
[  324.167543][T17999] netlink: 'syz.1.3160': attribute type 2 has an invalid length.
[  324.170574][T17999] netlink: 'syz.1.3160': attribute type 1 has an invalid length.
[  324.280617][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'.
[  324.308433][T18003] tipc: Resetting bearer <eth:syzkaller0>
[  324.341031][T18008] lo speed is unknown, defaulting to 1000
[  324.344687][T18008] wg1 speed is unknown, defaulting to 1000
[  324.536741][T18013] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3163'.
[  324.652991][T18029] erspan0: left allmulticast mode
[  324.659431][T18029] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  324.662270][T18029] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  324.666543][T18029] bond6: left allmulticast mode
[  324.674197][T18029] geneve6: left promiscuous mode
[  324.675869][T18029] geneve6: left allmulticast mode
[  324.678193][T18029] team0: left promiscuous mode
[  324.694351][T18029] team0: left allmulticast mode
[  324.696668][T18029] bond17: left promiscuous mode
[  324.698350][T18029] bond17: left allmulticast mode
[  324.700251][T18029] bridge14: left allmulticast mode
[  324.715871][T18029] bond0: left promiscuous mode
[  324.738391][T18032] syzkaller1: entered promiscuous mode
[  324.740288][T18032] syzkaller1: entered allmulticast mode
[  324.787015][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'.
[  324.829240][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'.
[  324.843069][T18036] geneve3: entered promiscuous mode
[  324.844881][T18036] geneve3: entered allmulticast mode
[  324.847606][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.850502][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.854907][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.873485][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.928917][T18038] lo speed is unknown, defaulting to 1000
[  324.934477][T18038] wg1 speed is unknown, defaulting to 1000
[  325.230229][T18049] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  325.263688][T18048] macvlan0: left promiscuous mode
[  325.265347][T18048] macvlan0: left allmulticast mode
[  325.276694][T18048] netlink: 'syz.0.3171': attribute type 1 has an invalid length.
[  325.581009][T18060] 8021q: VLANs not supported on ip6tnl0
[  326.089383][T18077] sock: sock_timestamping_bind_phc: sock not bind to device
[  326.203355][T18085] 8021q: adding VLAN 0 to HW filter on device bond22
[  326.243119][T18088] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  326.245844][T18088] tipc: Bearer <udp:s>: trying with adjusted priority
[  326.248216][T18088] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  326.411777][T18090] netlink: 'syz.2.3183': attribute type 4 has an invalid length.
[  332.222017][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.416252][T18124] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  347.775147][T18148] bond0: Caught tx_queue_len zero misconfig
[  348.028544][T18157] IPv6: sit4: Disabled Multicast RS
[  348.033957][T18157] __nla_validate_parse: 8 callbacks suppressed
[  348.033969][T18157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3197'.
[  348.206580][T18166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3200'.
[  348.224484][T18166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  348.274739][T18170] pim6reg: entered allmulticast mode
[  348.966772][T18219] nftables ruleset with unbound set
[  349.308417][T18239] macvtap0: entered promiscuous mode
[  349.310634][T18239] macvtap0: entered allmulticast mode
[  349.313379][T18239] veth0_macvtap: entered allmulticast mode
[  349.325663][T18244] netlink: 'syz.2.3221': attribute type 13 has an invalid length.
[  349.372069][T18244] lo speed is unknown, defaulting to 1000
[  349.376336][T18244] wg1 speed is unknown, defaulting to 1000
[  349.620032][T18260] netlink: 'syz.1.3225': attribute type 11 has an invalid length.
[  349.908473][T18277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.913751][T18277] syzkaller0: entered promiscuous mode
[  349.916000][T18277] syzkaller0: entered allmulticast mode
[  349.923013][T18277] wg2: Caught tx_queue_len zero misconfig
[  349.938598][T18277] tipc: Resetting bearer <eth:syzkaller0>
[  350.168527][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'.
[  350.192333][T18286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'.
[  350.406563][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'.
[  350.450603][T18309] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  350.468966][T18309] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  350.530572][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3236'.
[  350.537543][T18311] netlink: 'syz.2.3236': attribute type 1 has an invalid length.
[  350.559914][T18311] macvlan1: Device is already in use.
[  350.563726][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'.
[  350.719610][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'.
[  350.724125][T18321] veth0: entered promiscuous mode
[  350.727992][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'.
[  350.760955][T18321] veth0 (unregistering): left promiscuous mode
[  350.900732][T18330] lo speed is unknown, defaulting to 1000
[  350.904802][T18330] wg1 speed is unknown, defaulting to 1000
[  350.991646][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'.
[  351.029991][T18336] C: renamed from lo (while UP)
[  351.034919][T18336] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  351.120451][T18340] netlink: 'syz.0.3244': attribute type 2 has an invalid length.
[  351.559871][T18357] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  352.637062][T18407] tipc: Disabling bearer <eth:team0>
[  352.644448][T18407] team0 (unregistering): Port device bridge15 removed
[  352.939785][T18445] netlink: 'syz.2.3264': attribute type 10 has an invalid length.
[  353.015316][T18452] netlink: 'syz.2.3266': attribute type 10 has an invalid length.
[  353.019576][T18451] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  353.074381][T18457] __nla_validate_parse: 7 callbacks suppressed
[  353.074397][T18457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3268'.
[  353.141045][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'.
[  353.144084][T18460] netlink: 'syz.2.3268': attribute type 5 has an invalid length.
[  353.146804][T18460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3268'.
[  353.363382][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'.
[  353.396345][T18469] tipc: Resetting bearer <eth:gre0>
[  353.398256][T18469] tipc: Resetting bearer <eth:gre0>
[  353.416621][T18469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.420699][T18471] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  353.422219][ T5764] syz1: Port: 1 Link ACTIVE
[  353.564636][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.576129][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.579851][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.589267][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.592410][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.596262][T18483] tipc: Resetting bearer <eth:gre0>
[  353.599398][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'.
[  353.631684][T10433] syz1: Port: 1 Link DOWN
[  353.643958][T18487] C speed is unknown, defaulting to 1000
[  353.646758][T18487] wg1 speed is unknown, defaulting to 1000
[  353.873972][T18489] veth1_to_bridge: left promiscuous mode
[  353.876100][T18489] veth1_to_bridge: left allmulticast mode
[  353.881094][T18489] xfrm0: left allmulticast mode
[  353.889635][T18489] veth0_macvtap: left allmulticast mode
[  353.892938][T18489] macvtap0: left promiscuous mode
[  353.895012][T18489] macvtap0: left allmulticast mode
[  353.908990][T18489] macsec2: left promiscuous mode
[  353.912801][T18489] macsec2: left allmulticast mode
[  353.915034][T18489] mac80211_hwsim hwsim26 wlan1: left allmulticast mode
[  353.926092][T18489] team1: left promiscuous mode
[  353.928421][T18489] team1: left allmulticast mode
[  353.930725][T18489] team2: left promiscuous mode
[  353.933521][T18489] team2: left allmulticast mode
[  353.935840][T18489] macsec3: left promiscuous mode
[  353.937864][T18489] macsec3: left allmulticast mode
[  353.951864][T18489] veth13: left promiscuous mode
[  353.987377][T18489] bridge15: left promiscuous mode
[  353.989301][T18489] bridge15: left allmulticast mode
[  353.995711][T18489] gretap2: left promiscuous mode
[  354.000299][T18489] ipip1: left promiscuous mode
[  354.005723][T18489] gretap3: left allmulticast mode
[  354.008647][T18489] bridge0: left allmulticast mode
[  354.011188][T18489] bond18: left promiscuous mode
[  354.014421][T18489] bridge17: left promiscuous mode
[  354.027512][T18489] vlan1: left allmulticast mode
[  354.029495][T18489] gretap0: left allmulticast mode
[  354.034397][T18489] bond19: left promiscuous mode
[  354.036342][T18489] bond19: left allmulticast mode
[  354.040445][T18489] bridge18: left promiscuous mode
[  354.043027][T18489] bridge18: left allmulticast mode
[  354.072965][T18489] gtp1: left promiscuous mode
[  354.074926][T18489] gtp1: left allmulticast mode
[  354.085005][T18489] geneve3: left promiscuous mode
[  354.087093][T18489] geneve3: left allmulticast mode
[  354.093621][T18489] tipc: Resetting bearer <eth:syzkaller0>
[  354.096740][T18489] syzkaller0: left promiscuous mode
[  354.098844][T18489] syzkaller0: left allmulticast mode
[  354.146462][ T5694] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.151899][ T5694] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.166263][ T5694] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.169102][ T5694] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.520698][T18525] siw: device registration error -23
[  354.737209][T18558] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.740400][T18558] syzkaller0: entered promiscuous mode
[  354.743552][T18558] syzkaller0: entered allmulticast mode
[  354.795505][T18564] C speed is unknown, defaulting to 1000
[  354.798698][T18564] wg1 speed is unknown, defaulting to 1000
[  354.913668][T18567] C speed is unknown, defaulting to 1000
[  354.916308][T18567] wg1 speed is unknown, defaulting to 1000
[  355.057489][T18580] netlink: 'syz.0.3298': attribute type 3 has an invalid length.
[  356.464512][T18634] bond3: (slave gretap1): Releasing active interface
[  356.468618][T18634] bond8: (slave veth7): Releasing backup interface
[  356.473496][T18634] bond9: (slave bridge5): Releasing active interface
[  356.477466][T18634] bond14: (slave veth13): Releasing active interface
[  356.480955][T18634] bond15: (slave gretap3): Releasing active interface
[  356.487223][T18634] bond6: (slave macvlan1): Releasing active interface
[  356.491786][T18634] bond19: (slave gretap4): Releasing active interface
[  356.578527][T18640] gre0: MTU too low for tipc bearer
[  356.580453][T18640] tipc: Disabling bearer <eth:gre0>
[  356.730004][T18649] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.816233][T18658] bond24: entered promiscuous mode
[  356.817919][T18658] bond24: entered allmulticast mode
[  356.819299][T18660] netlink: 'syz.0.3320': attribute type 13 has an invalid length.
[  356.819905][T18658] 8021q: adding VLAN 0 to HW filter on device bond24
[  356.830473][T18660] netlink: 'syz.0.3320': attribute type 17 has an invalid length.
[  356.849268][T18660] erspan0: left allmulticast mode
[  356.865984][T18660] !: left promiscuous mode
[  356.869333][T18660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.886937][T18658] C speed is unknown, defaulting to 1000
[  356.890092][T18658] wg1 speed is unknown, defaulting to 1000
[  356.935484][T18651] C speed is unknown, defaulting to 1000
[  356.952754][T18651] wg1 speed is unknown, defaulting to 1000
[  357.194177][T18668] netlink: 'syz.2.3324': attribute type 29 has an invalid length.
[  357.211857][T18668] netlink: 'syz.2.3324': attribute type 29 has an invalid length.
[  357.538536][T18673] tipc: Resetting bearer <eth:syzkaller0>
[  357.541104][T18673] syzkaller0: left promiscuous mode
[  357.543615][T18673] syzkaller0: left allmulticast mode
[  358.090067][T18688] __nla_validate_parse: 37 callbacks suppressed
[  358.090083][T18688] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3329'.
[  358.203921][T18698] team0: Mode changed to "activebackup"
[  358.365324][T18708] netlink: 'syz.1.3335': attribute type 1 has an invalid length.
[  358.389900][T18708] 8021q: adding VLAN 0 to HW filter on device bond21
[  358.413085][T18709] veth19: entered promiscuous mode
[  358.419994][T18709] bond21: (slave veth19): Enslaving as an active interface with a down link
[  358.530350][T18725] netlink: 'syz.1.3338': attribute type 10 has an invalid length.
[  358.719796][T18742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3343'.
[  359.046422][T18770] netlink: 'syz.0.3352': attribute type 1 has an invalid length.
[  359.065005][T18770] 8021q: adding VLAN 0 to HW filter on device bond14
[  359.088126][T18770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.094511][T18770] bond14: (slave batadv0): making interface the new active one
[  359.098229][T18770] bond14: (slave batadv0): Enslaving as an active interface with an up link
[  359.154505][T18776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3354'.
[  359.242692][T18781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  359.245270][T18781] IPv6: NLM_F_CREATE should be set when creating new route
[  359.247631][T18781] IPv6: NLM_F_CREATE should be set when creating new route
[  359.249968][T18781] IPv6: NLM_F_CREATE should be set when creating new route
[  359.272745][T18781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  359.295923][T18782] pim6reg: entered allmulticast mode
[  359.298386][T18782] pim6reg: left allmulticast mode
[  359.588870][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3360'.
[  360.117178][T18807] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  360.166918][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'.
[  360.175346][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'.
[  360.269422][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'.
[  360.567889][T18828] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  360.618790][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[  361.053101][T18849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'.
[  361.257004][T18857] C speed is unknown, defaulting to 1000
[  361.259713][T18857] wg1 speed is unknown, defaulting to 1000
[  361.599772][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'.
[  361.608276][T18870] netlink: 'syz.2.3381': attribute type 1 has an invalid length.
[  362.160203][T18919] netlink: 'syz.1.3394': attribute type 10 has an invalid length.
[  362.350959][T18923] C speed is unknown, defaulting to 1000
[  362.357548][T18923] wg1 speed is unknown, defaulting to 1000
[  362.435982][T18926] pim6reg1: entered promiscuous mode
[  362.439964][T18926] pim6reg1: entered allmulticast mode
[  362.576058][T18930] mac80211_hwsim hwsim30 wlan1: left allmulticast mode
[  362.580866][T18930] netlink: 'syz.2.3397': attribute type 10 has an invalid length.
[  362.587892][T18930] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  362.816514][T18936] bond0: Device is already in use.
[  363.030004][T18953] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  363.357596][T18983] pim6reg1: entered promiscuous mode
[  363.359380][T18983] pim6reg1: entered allmulticast mode
[  363.419647][T18990] __nla_validate_parse: 5 callbacks suppressed
[  363.419661][T18990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3411'.
[  363.463400][T18983] netlink: 'syz.0.3411': attribute type 21 has an invalid length.
[  363.466180][T18983] netlink: 'syz.0.3411': attribute type 22 has an invalid length.
[  363.468774][T18983] netlink: 'syz.0.3411': attribute type 23 has an invalid length.
[  363.472207][T18983] netlink: 'syz.0.3411': attribute type 25 has an invalid length.
[  363.475285][T18983] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3411'.
[  363.510517][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[  363.513871][T18994] erspan0: Device is already in use.
[  363.616609][T19003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3418'.
[  363.617881][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3419'.
[  363.623615][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3419'.
[  363.626629][T19008] netlink: 'syz.2.3419': attribute type 4 has an invalid length.
[  363.735665][T19024] bridge20: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  363.762268][T19024] netlink: 'syz.1.3422': attribute type 11 has an invalid length.
[  363.768773][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'.
[  363.840720][T19031] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3425'.
[  363.918422][T19033] C speed is unknown, defaulting to 1000
[  363.921956][T19033] wg1 speed is unknown, defaulting to 1000
[  363.958540][T19046] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  364.145584][T19054] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3431'.
[  364.150549][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3431'.
[  364.771457][T19099] syzkaller1: entered promiscuous mode
[  364.773243][T19099] syzkaller1: entered allmulticast mode
[  364.936466][T19115] netlink: 'syz.0.3446': attribute type 21 has an invalid length.
[  364.940509][T19115] netlink: 'syz.0.3446': attribute type 28 has an invalid length.
[  364.944336][T19113] batadv0: Device is already in use.
[  365.160284][T19141] bridge_slave_0: invalid flags given to default FDB implementation
[  365.269208][T19148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.273644][T19148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.874337][T19156] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  366.135175][T19165] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003
[  366.358247][T19181] tipc: Enabled bearer <ib:veth0_virt_wifi>, priority 10
[  366.361689][T19181] tipc: New replicast peer: 255.255.255.255
[  366.418057][T19188] IPv4: Oversized IP packet from 127.202.26.0
[  366.462588][T19193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.720369][T19198] macsec6: entered promiscuous mode
[  366.723365][T19198] ipvlan1: entered promiscuous mode
[  366.858359][T19212] mac80211_hwsim hwsim30 wlan1: left allmulticast mode
[  366.865888][T19212] validate_nla: 2 callbacks suppressed
[  366.865898][T19212] netlink: 'syz.2.3477': attribute type 10 has an invalid length.
[  366.961337][T19218] netlink: 'syz.1.3479': attribute type 16 has an invalid length.
[  366.965021][T19218] netlink: 'syz.1.3479': attribute type 17 has an invalid length.
[  367.050223][T19223] netem: incorrect gi model size
[  367.052474][T19223] netem: change failed
[  367.363825][T19248] ip6gre3: entered allmulticast mode
[  367.746078][T19287] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.755823][T19289] netlink: 'syz.2.3499': attribute type 6 has an invalid length.
[  367.766415][T19289] 0X: renamed from caif0
[  367.773800][T19289] 0X: entered allmulticast mode
[  367.776069][T19289] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  367.838025][T19297] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  367.980307][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.024187][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.026942][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.029760][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.032647][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.035510][T19310] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[  368.480333][T19339] vxcan4: entered allmulticast mode
[  368.517616][T19341] __nla_validate_parse: 35 callbacks suppressed
[  368.517633][T19341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3516'.
[  368.606564][T19341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3516'.
[  368.701814][T19354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  368.705249][T19354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  368.764362][T19357] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3519'.
[  368.767552][T19357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3519'.
[  368.830601][T19361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3522'.
[  368.838798][T19361] team0: Port device geneve0 added
[  368.841070][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.848015][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.853091][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.857702][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.075068][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3529'.
[  369.416880][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'.
[  369.548536][T19408] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3536'.
[  369.557289][T19408] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3536'.
[  369.560966][T19408] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3536'.
[  369.603483][T19414] sock: sock_set_timeout: `syz.1.3538' (pid 19414) tries to set negative timeout
[  369.657808][T19410] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  369.972886][T19450] bridge16: port 1(ipvlan2) entered blocking state
[  369.975316][T19450] bridge16: port 1(ipvlan2) entered disabled state
[  369.978119][T19450] ipvlan2: entered allmulticast mode
[  369.980245][T19450] macvlan1: entered allmulticast mode
[  369.985271][T19450] ipvlan2: left allmulticast mode
[  369.987013][T19450] macvlan1: left allmulticast mode
[  370.385111][T19484] pim6reg1: entered promiscuous mode
[  370.387090][T19484] pim6reg1: entered allmulticast mode
[  370.638057][T19509] bridge0: entered allmulticast mode
[  370.775627][T19511] block nbd6: shutting down sockets
[  371.375545][T19536] bond1: option mode: unable to set because the bond device is up
[  371.396022][T19536] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[  371.714566][T19551] syzkaller1: entered promiscuous mode
[  371.717150][T19551] syzkaller1: entered allmulticast mode
[  371.846432][T19559] bond1: option mode: unable to set because the bond device has slaves
[  371.969934][T19567] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001
[  372.233814][T19586] validate_nla: 11 callbacks suppressed
[  372.233829][T19586] netlink: 'syz.0.3587': attribute type 1 has an invalid length.
[  372.269136][T19586] bond15: entered promiscuous mode
[  372.272173][T19586] 8021q: adding VLAN 0 to HW filter on device bond15
[  372.316387][T19586] 8021q: adding VLAN 0 to HW filter on device bond16
[  372.322610][T19586] bond15: (slave bond16): making interface the new active one
[  372.325706][T19586] bond16: entered promiscuous mode
[  372.328647][T19586] bond15: (slave bond16): Enslaving as an active interface with an up link
[  372.615042][T19608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  372.847185][T19624] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  372.850250][T19624] CPU: 0 UID: 0 PID: 19624 Comm: syz.0.3596 Not tainted syzkaller #0 PREEMPT(full) 
[  372.850270][T19624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.850280][T19624] Call Trace:
[  372.850288][T19624]  <TASK>
[  372.850296][T19624]  dump_stack_lvl+0x189/0x250
[  372.850322][T19624]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.850338][T19624]  ? __pfx__printk+0x10/0x10
[  372.850361][T19624]  ? kernfs_path_from_node+0x2f/0x290
[  372.850375][T19624]  ? kernfs_path_from_node+0x250/0x290
[  372.850388][T19624]  ? kernfs_path_from_node+0x2f/0x290
[  372.850404][T19624]  sysfs_warn_dup+0x8e/0xa0
[  372.850418][T19624]  sysfs_do_create_link_sd+0xc0/0x110
[  372.850433][T19624]  device_add_class_symlinks+0x1cf/0x240
[  372.850452][T19624]  device_add+0x475/0xb50
[  372.850470][T19624]  wiphy_register+0x1c81/0x2aa0
[  372.850502][T19624]  ? __pfx_wiphy_register+0x10/0x10
[  372.850517][T19624]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  372.850542][T19624]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  372.850583][T19624]  ieee80211_register_hw+0x3442/0x40a0
[  372.850616][T19624]  ? ieee80211_register_hw+0x13c1/0x40a0
[  372.850643][T19624]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  372.850664][T19624]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.850688][T19624]  ? __hrtimer_setup+0x187/0x210
[  372.850706][T19624]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  372.850729][T19624]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  372.850771][T19624]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  372.850788][T19624]  ? trace_kmalloc+0x1f/0xd0
[  372.850803][T19624]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  372.850848][T19624]  ? kstrndup+0xbf/0x160
[  372.850868][T19624]  hwsim_new_radio_nl+0xea4/0x1b10
[  372.850889][T19624]  ? __pfx___nla_validate_parse+0x10/0x10
[  372.850913][T19624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.850941][T19624]  ? __nla_parse+0x40/0x60
[  372.850956][T19624]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  372.850981][T19624]  genl_family_rcv_msg_doit+0x215/0x300
[  372.851004][T19624]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.851033][T19624]  ? bpf_lsm_capable+0x9/0x20
[  372.851049][T19624]  ? security_capable+0x7e/0x2e0
[  372.851073][T19624]  genl_rcv_msg+0x60e/0x790
[  372.851095][T19624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.851118][T19624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.851147][T19624]  netlink_rcv_skb+0x208/0x470
[  372.851160][T19624]  ? __lock_acquire+0xab9/0xd20
[  372.851179][T19624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.851198][T19624]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.851229][T19624]  ? down_read+0x1ad/0x2e0
[  372.851244][T19624]  genl_rcv+0x28/0x40
[  372.851260][T19624]  netlink_unicast+0x82f/0x9e0
[  372.851279][T19624]  ? __pfx_netlink_unicast+0x10/0x10
[  372.851293][T19624]  ? netlink_sendmsg+0x642/0xb30
[  372.851305][T19624]  ? skb_put+0x11b/0x210
[  372.851324][T19624]  netlink_sendmsg+0x805/0xb30
[  372.851346][T19624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.851379][T19624]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.851403][T19624]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.851417][T19624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.851432][T19624]  __sock_sendmsg+0x21c/0x270
[  372.851469][T19624]  ____sys_sendmsg+0x505/0x830
[  372.851491][T19624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.851516][T19624]  ? import_iovec+0x74/0xa0
[  372.851535][T19624]  ___sys_sendmsg+0x21f/0x2a0
[  372.851555][T19624]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.851601][T19624]  ? __fget_files+0x2a/0x420
[  372.851619][T19624]  ? __fget_files+0x3a0/0x420
[  372.851645][T19624]  __x64_sys_sendmsg+0x19b/0x260
[  372.851664][T19624]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.851688][T19624]  ? rcu_is_watching+0x15/0xb0
[  372.851705][T19624]  ? do_syscall_64+0xbe/0x3b0
[  372.851721][T19624]  do_syscall_64+0xfa/0x3b0
[  372.851732][T19624]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.851750][T19624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.851764][T19624]  ? exc_page_fault+0x9f/0xf0
[  372.851784][T19624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.851796][T19624] RIP: 0033:0x7f737098ec29
[  372.851835][T19624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.851848][T19624] RSP: 002b:00007f7371865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.851863][T19624] RAX: ffffffffffffffda RBX: 00007f7370bd5fa0 RCX: 00007f737098ec29
[  372.851874][T19624] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  372.851882][T19624] RBP: 00007f7370a11e41 R08: 0000000000000000 R09: 0000000000000000
[  372.851891][T19624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.851899][T19624] R13: 00007f7370bd6038 R14: 00007f7370bd5fa0 R15: 00007ffe9b4e01b8
[  372.851924][T19624]  </TASK>
[  373.118643][T19635] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.486951][T19673] lo: Caught tx_queue_len zero misconfig
[  373.493695][T19669] netlink: 'syz.0.3605': attribute type 10 has an invalid length.
[  373.529711][T19675] netlink: 'syz.1.3610': attribute type 4 has an invalid length.
[  373.657948][T19694] C speed is unknown, defaulting to 1000
[  373.661583][T19694] wg1 speed is unknown, defaulting to 1000
[  373.696202][T19697] __nla_validate_parse: 25 callbacks suppressed
[  373.696215][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'.
[  373.711539][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'.
[  373.724974][T19697] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3615'.
[  373.769266][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3616'.
[  373.848498][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'.
[  373.902066][T19707] C speed is unknown, defaulting to 1000
[  373.905017][T19707] wg1 speed is unknown, defaulting to 1000
[  374.028883][T19713] sch_fq: defrate 0 ignored.
[  374.280501][T19716] bpq0: left allmulticast mode
[  403.281454][T19738] netlink: 'syz.0.3627': attribute type 4 has an invalid length.
[  403.289017][T19739] netlink: 'syz.0.3627': attribute type 4 has an invalid length.
[  403.300995][ T5764] C speed is unknown, defaulting to 1000
[  403.314261][ T5911] C speed is unknown, defaulting to 1000
[  403.510447][T19767] C speed is unknown, defaulting to 1000
[  403.514023][T19767] wg1 speed is unknown, defaulting to 1000
[  403.640258][T19773] C speed is unknown, defaulting to 1000
[  403.650803][T19773] wg1 speed is unknown, defaulting to 1000
[  403.676212][T19776] macsec0: entered promiscuous mode
[  403.678093][T19776] macsec0: entered allmulticast mode
[  403.680606][T19776] veth1_macvtap: entered allmulticast mode
[  403.683726][T19776] macsec0: left promiscuous mode
[  403.685867][T19776] macsec0: left allmulticast mode
[  403.687878][T19776] veth1_macvtap: left allmulticast mode
[  403.698463][T19776] netlink: 'syz.2.3636': attribute type 2 has an invalid length.
[  403.701951][T19776] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3636'.
[  403.935510][T19782] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  404.293236][T19788] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  404.769205][T19805] C speed is unknown, defaulting to 1000
[  404.774754][T19805] wg1 speed is unknown, defaulting to 1000
[  404.913869][T19809] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3646'.
[  405.017207][T19812] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  405.061034][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'.
[  405.062381][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'.
[  405.070074][T19818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  405.314991][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'.
[  405.325267][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'.
[  405.419608][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'.
[  405.434514][T19836] C speed is unknown, defaulting to 1000
[  405.439113][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'.
[  405.458377][T19836] wg1 speed is unknown, defaulting to 1000
[  405.720751][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'.
[  405.858998][T19848] vlan2: entered allmulticast mode
[  406.378169][T19879] netlink: 'syz.0.3662': attribute type 1 has an invalid length.
[  406.399122][T19877] veth21: entered promiscuous mode
[  406.401977][T19877] bridge3: port 2(veth21) entered blocking state
[  406.404412][T19877] bridge3: port 2(veth21) entered disabled state
[  406.407093][T19877] veth21: entered allmulticast mode
[  406.439281][T19879] 8021q: adding VLAN 0 to HW filter on device bond17
[  406.474250][T19879] veth15: entered promiscuous mode
[  406.485989][T19879] bond17: (slave veth15): Enslaving as an active interface with a down link
[  406.495037][T19879] erspan0: entered allmulticast mode
[  406.653645][T19890] IPVS: persistence engine module ip_vs_pe_ not found
[  406.659229][T19890] syzkaller1: entered promiscuous mode
[  406.661547][T19890] syzkaller1: entered allmulticast mode
[  406.863421][T19903] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  407.429329][T19919] xt_l2tp: invalid flags combination: 0
[  407.499390][T19923] netlink: 'syz.2.3675': attribute type 33 has an invalid length.
[  407.610729][T19930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  407.679412][T19933] C speed is unknown, defaulting to 1000
[  407.685561][T19933] wg1 speed is unknown, defaulting to 1000
[  407.689477][T19932] C speed is unknown, defaulting to 1000
[  407.725546][T19932] wg1 speed is unknown, defaulting to 1000
[  407.870500][T19946] netlink: 'syz.0.3680': attribute type 83 has an invalid length.
[  408.206413][T19964] dvmrp1: entered allmulticast mode
[  408.455324][T19975] team0: Mode "broadcas" not found
[  408.912207][T20017] netlink: 'syz.1.3703': attribute type 11 has an invalid length.
[  408.952631][T20022] __nla_validate_parse: 12 callbacks suppressed
[  408.952662][T20022] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3704'.
[  409.056703][T20031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3707'.
[  409.222574][T20047] netlink: 'syz.2.3710': attribute type 13 has an invalid length.
[  409.225570][T20047] netlink: 'syz.2.3710': attribute type 17 has an invalid length.
[  409.239084][T20047] netlink: 'syz.2.3710': attribute type 27 has an invalid length.
[  409.274669][T20047] C speed is unknown, defaulting to 1000
[  409.280635][T20047] wg1 speed is unknown, defaulting to 1000
[  409.402816][T20061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3715'.
[  409.416868][T20063] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3716'.
[  409.568521][T20068] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3715'.
[  409.586621][T20068] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  409.895424][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'.
[  409.906877][T20080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3720'.
[  409.972243][T20083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3720'.
[  410.436371][T20095] netlink: 'syz.0.3724': attribute type 1 has an invalid length.
[  410.463305][T20095] 8021q: adding VLAN 0 to HW filter on device bond18
[  410.489062][T20095] veth17: entered promiscuous mode
[  410.502661][T20095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3724'.
[  410.924716][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'.
[  411.023198][T20129] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  411.144995][T20132] C speed is unknown, defaulting to 1000
[  411.148741][T20132] wg1 speed is unknown, defaulting to 1000
[  411.231349][T20140] netlink: 'syz.0.3738': attribute type 5 has an invalid length.
[  411.253384][T20132] netlink: 'syz.1.3736': attribute type 3 has an invalid length.
[  411.409686][T20148] sctp: [Deprecated]: syz.1.3740 (pid 20148) Use of int in max_burst socket option deprecated.
[  411.409686][T20148] Use struct sctp_assoc_value instead
[  411.470363][T20151] netlink: 'syz.0.3741': attribute type 10 has an invalid length.
[  411.613955][T20161] C speed is unknown, defaulting to 1000
[  411.617689][T20161] wg1 speed is unknown, defaulting to 1000
[  411.844528][T20177] netlink: 'syz.0.3750': attribute type 5 has an invalid length.
[  411.855720][T20177] geneve6: entered promiscuous mode
[  411.857743][T20177] geneve6: entered allmulticast mode
[  412.167159][T20192] nbd6: detected capacity change from 0 to 127
[  412.204124][T20196] netlink: 'syz.2.3756': attribute type 1 has an invalid length.
[  412.242302][T20196] 8021q: adding VLAN 0 to HW filter on device bond26
[  412.272627][T20196] veth19: entered promiscuous mode
[  412.275470][   T56] block nbd6: Receive control failed (result -32)
[  412.299155][T20196] bond26: (slave veth19): Enslaving as an active interface with a down link
[  412.377967][T20201] netlink: 'syz.0.3757': attribute type 2 has an invalid length.
[  412.574332][T20208] nbd: socks must be embedded in a SOCK_ITEM attr
[  412.609442][T20208] batadv0 (unregistering): left promiscuous mode
[  412.645089][T20222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  412.882570][T20225] block nbd8: server does not support multiple connections per device.
[  412.890332][T20225] block nbd8: shutting down sockets
[  413.240312][T20257] syzkaller1: entered promiscuous mode
[  413.255931][T20257] syzkaller1: entered allmulticast mode
[  413.430457][T20265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  413.917774][T20297] 8021q: adding VLAN 0 to HW filter on device bond19
[  413.998156][T20305] __nla_validate_parse: 13 callbacks suppressed
[  413.998176][T20305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3779'.
[  414.033504][T20305] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3779'.
[  414.089912][T20315] bridge19: the hash_elasticity option has been deprecated and is always 16
[  414.114118][T20315] bridge19: entered allmulticast mode
[  414.147961][T20321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.152229][T20321] syzkaller0: entered promiscuous mode
[  414.154426][T20321] syzkaller0: entered allmulticast mode
[  414.232365][T20325] ip6tnl3: entered promiscuous mode
[  414.237592][T20325] ip6tnl3: entered allmulticast mode
[  414.242336][T20325] team0: Device ip6tnl3 is of different type
[  414.245967][T20329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3786'.
[  414.324703][T20331] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.352409][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'.
[  414.359280][T20338] xfrm1: entered promiscuous mode
[  414.361096][T20338] xfrm1: entered allmulticast mode
[  414.369146][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'.
[  414.433244][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'.
[  414.459479][T20347] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3790'.
[  414.526674][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3792'.
[  414.829179][T20359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3795'.
[  414.964729][T20365] syzkaller1: entered promiscuous mode
[  414.966974][T20365] syzkaller1: entered allmulticast mode
[  415.148642][T20372] bond26: (slave veth19): Releasing active interface
[  415.213498][T20375] validate_nla: 2 callbacks suppressed
[  415.213515][T20375] netlink: 'syz.2.3798': attribute type 10 has an invalid length.
[  415.285883][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3800'.
[  415.317968][T20385] netlink: 'syz.0.3802': attribute type 1 has an invalid length.
[  415.598041][T20413] netlink: 'syz.1.3809': attribute type 7 has an invalid length.
[  415.633120][T20417] pim6reg: entered allmulticast mode
[  415.843945][T20439] bond1: option mode: unable to set because the bond device has slaves
[  415.858129][T20439] sit4: entered promiscuous mode
[  415.860282][T20439] sit4: entered allmulticast mode
[  416.034320][T20447] 8021q: adding VLAN 0 to HW filter on device bond27
[  416.058539][T20450] netlink: 'syz.0.3817': attribute type 83 has an invalid length.
[  416.093177][T20452] bond0: Caught tx_queue_len zero misconfig
[  416.143557][T20455] sch_tbf: burst 0 is lower than device ip6gre0 mtu (2560) !
[  416.486281][T20486] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  416.575542][T20503] C speed is unknown, defaulting to 1000
[  416.579021][T20503] wg1 speed is unknown, defaulting to 1000
[  416.743810][T20515] netlink: 'syz.0.3833': attribute type 6 has an invalid length.
[  416.891259][T20520] 8021q: VLANs not supported on syzkaller1
[  417.070582][T20532] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  417.242072][T20547] netlink: 'syz.1.3839': attribute type 6 has an invalid length.
[  417.246547][T20547] netlink: 'syz.1.3839': attribute type 5 has an invalid length.
[  417.380205][T20553] C speed is unknown, defaulting to 1000
[  417.393023][T20553] wg1 speed is unknown, defaulting to 1000
[  417.462234][T20564] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  417.466464][T20564] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  417.811237][T20585] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  417.825027][T20584] nbd: must specify at least one socket
[  417.931271][T20596] GUP no longer grows the stack in syz.1.3852 (20596): 200000003000-20000000a000 (200000001000)
[  417.940413][T20596] CPU: 1 UID: 0 PID: 20596 Comm: syz.1.3852 Not tainted syzkaller #0 PREEMPT(full) 
[  417.940436][T20596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  417.940445][T20596] Call Trace:
[  417.940451][T20596]  <TASK>
[  417.940458][T20596]  dump_stack_lvl+0x189/0x250
[  417.940483][T20596]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.940498][T20596]  ? __pfx__printk+0x10/0x10
[  417.940514][T20596]  ? find_vma+0xe7/0x160
[  417.940532][T20596]  ? __lock_acquire+0xab9/0xd20
[  417.940559][T20596]  __get_user_pages+0x24d0/0x2ce0
[  417.940575][T20596]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  417.940603][T20596]  ? preempt_schedule_notrace+0xd1/0x110
[  417.940629][T20596]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  417.940651][T20596]  ? rcu_is_watching+0x15/0xb0
[  417.940665][T20596]  __gup_longterm_locked+0xde9/0x1660
[  417.940690][T20596]  ? sanity_check_pinned_pages+0x123a/0x1300
[  417.940709][T20596]  gup_fast_fallback+0x1e6a/0x2010
[  417.940750][T20596]  ? __pfx_gup_fast_fallback+0x10/0x10
[  417.940764][T20596]  ? stack_trace_save+0x9c/0xe0
[  417.940777][T20596]  ? __pfx_stack_trace_save+0x10/0x10
[  417.940799][T20596]  ? pin_user_pages_fast+0x4d/0xb0
[  417.940818][T20596]  iov_iter_extract_pages+0x35a/0x5e0
[  417.940843][T20596]  extract_iter_to_sg+0xe46/0x24e0
[  417.940869][T20596]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  417.940898][T20596]  ? __asan_memset+0x22/0x50
[  417.940916][T20596]  af_alg_get_rsgl+0x436/0x810
[  417.940947][T20596]  aead_recvmsg+0x4cc/0x13f0
[  417.940973][T20596]  ? rcu_is_watching+0x15/0xb0
[  417.940992][T20596]  ? __pfx_aead_recvmsg+0x10/0x10
[  417.941013][T20596]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  417.941028][T20596]  ? __pfx_aead_recvmsg+0x10/0x10
[  417.941047][T20596]  sock_recvmsg_nosec+0x186/0x1c0
[  417.941071][T20596]  ____sys_recvmsg+0x3aa/0x460
[  417.941096][T20596]  ? __pfx_____sys_recvmsg+0x10/0x10
[  417.941124][T20596]  ? import_iovec+0x74/0xa0
[  417.941165][T20596]  ___sys_recvmsg+0x1b5/0x510
[  417.941189][T20596]  ? __pfx____sys_recvmsg+0x10/0x10
[  417.941234][T20596]  ? __might_fault+0xb0/0x130
[  417.941283][T20596]  do_recvmmsg+0x307/0x770
[  417.941307][T20596]  ? __pfx_do_recvmmsg+0x10/0x10
[  417.941322][T20596]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  417.941353][T20596]  ? __pfx_do_futex+0x10/0x10
[  417.941383][T20596]  __x64_sys_recvmmsg+0x190/0x240
[  417.941400][T20596]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  417.941416][T20596]  ? __task_pid_nr_ns+0x28/0x470
[  417.941434][T20596]  ? do_syscall_64+0xbe/0x3b0
[  417.941450][T20596]  do_syscall_64+0xfa/0x3b0
[  417.941461][T20596]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.941479][T20596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.941491][T20596]  ? exc_page_fault+0x9f/0xf0
[  417.941512][T20596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.941525][T20596] RIP: 0033:0x7ff469b8ec29
[  417.941538][T20596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.941550][T20596] RSP: 002b:00007ff46aa01038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  417.941566][T20596] RAX: ffffffffffffffda RBX: 00007ff469dd5fa0 RCX: 00007ff469b8ec29
[  417.941577][T20596] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  417.941594][T20596] RBP: 00007ff469c11e41 R08: 0000000000000000 R09: 0000000000000000
[  417.941603][T20596] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  417.941612][T20596] R13: 00007ff469dd6038 R14: 00007ff469dd5fa0 R15: 00007fffef336148
[  417.941635][T20596]  </TASK>
[  418.090284][T20596] sctp: [Deprecated]: syz.1.3852 (pid 20596) Use of int in maxseg socket option.
[  418.090284][T20596] Use struct sctp_assoc_value instead
[  418.197700][T20613] C speed is unknown, defaulting to 1000
[  418.200388][T20613] wg1 speed is unknown, defaulting to 1000
[  418.242397][T20615] C speed is unknown, defaulting to 1000
[  418.248085][T20615] wg1 speed is unknown, defaulting to 1000
[  418.405601][T20615] geneve0: entered promiscuous mode
[  418.620900][T20627] C speed is unknown, defaulting to 1000
[  418.629500][T20627] wg1 speed is unknown, defaulting to 1000
[  419.076498][T20662] ip6tnl0: Caught tx_queue_len zero misconfig
[  419.131661][T20667] __nla_validate_parse: 266 callbacks suppressed
[  419.131674][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3872'.
[  419.147157][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'.
[  419.169525][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'.
[  419.174370][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'.
[  419.257984][T20674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3874'.
[  419.323523][T20681] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3875'.
[  419.466151][T20690] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3878'.
[  419.511775][T20694] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3879'.
[  419.706649][T20717] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3885'.
[  419.761523][T20724] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3883'.
[  419.784965][T20727] syzkaller1: entered promiscuous mode
[  419.787017][T20727] syzkaller1: entered allmulticast mode
[  420.830590][T20807] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.023326][T20821] syzkaller1: entered promiscuous mode
[  421.025607][T20821] syzkaller1: entered allmulticast mode
[  421.256906][T20834] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.302242][T20834] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.505464][T20855] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  421.689417][T20880] C speed is unknown, defaulting to 1000
[  421.698864][T20880] wg1 speed is unknown, defaulting to 1000
[  421.719966][T20878] netlink: 'syz.2.3914': attribute type 10 has an invalid length.
[  421.732068][T20878] !: entered promiscuous mode
[  421.735214][T20878] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  423.159219][T20930] netlink: 'syz.2.3925': attribute type 3 has an invalid length.
[  423.164074][T20930] netlink: 'syz.2.3925': attribute type 1 has an invalid length.
[  423.328955][T20955] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  423.386137][T20951] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.389334][T20951] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  423.395160][T20951] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  423.398898][T20951] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  423.439281][T20951] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.442832][T20951] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  423.445981][T20951] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  423.449201][T20951] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  423.509333][T20951] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.514486][T20951] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  423.517793][T20951] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  423.520835][T20951] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  423.648270][T20951] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.656105][T20951] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  423.662488][T20951] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  423.666720][T20951] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  423.750989][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.757894][ T5877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  423.762485][ T5877] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  423.765692][ T5877] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  423.775319][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.779262][ T5877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  423.783387][ T5877] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  423.786563][ T5877] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  423.797161][ T5694] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.801708][ T5694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  423.806087][ T5694] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  423.809583][ T5694] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  423.820699][ T5694] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.824356][ T5694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  423.827561][ T5694] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  423.830562][ T5694] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  424.176125][T20995] __nla_validate_parse: 19 callbacks suppressed
[  424.176141][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3945'.
[  424.183112][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3945'.
[  424.228533][T20998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'.
[  424.256960][T20998] bond28: entered promiscuous mode
[  424.259442][T20998] 8021q: adding VLAN 0 to HW filter on device bond28
[  424.390225][T20998] bond28 (unregistering): Released all slaves
[  424.447297][T21004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3947'.
[  424.455568][T21004] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3947'.
[  424.658153][T21024] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3951'.
[  424.977913][T21047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3954'.
[  424.981083][T21047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3954'.
[  424.989710][T21049] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  425.037450][T21052] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3956'.
[  425.081830][T21055] C speed is unknown, defaulting to 1000
[  425.086548][T21055] wg1 speed is unknown, defaulting to 1000
[  425.090038][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3960'.
[  425.148754][T21063] C speed is unknown, defaulting to 1000
[  425.162730][T21063] wg1 speed is unknown, defaulting to 1000
[  425.233568][T21070] macvlan0: tun_chr_ioctl cmd 1074025681
[  425.610143][T21104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  425.806214][T21110] netlink: 'syz.1.3976': attribute type 5 has an invalid length.
[  426.286240][T21121] netlink: 'syz.2.3978': attribute type 10 has an invalid length.
[  426.408547][T21120] C speed is unknown, defaulting to 1000
[  426.412990][T21120] wg1 speed is unknown, defaulting to 1000
[  427.233694][T21138] delete_channel: no stack
[  427.401980][T21144] nbd8: detected capacity change from 0 to 127
[  427.405943][   T56] block nbd8: Receive control failed (result -32)
[  427.602422][ T5694] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  427.606308][ T5694] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  427.631660][ T5912] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  427.676782][   T33] audit: type=1800 audit(1758913096.254:72): pid=21163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3990" name="blkio.bfq.sectors" dev="tmpfs" ino=6602 res=0 errno=0
[  427.851237][T21182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.851800][T21180] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  427.854329][T21182] IPv6: NLM_F_CREATE should be set when creating new route
[  427.859789][T21182] IPv6: NLM_F_CREATE should be set when creating new route
[  427.863294][ T5764] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  427.882043][ T5912] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  427.925711][T21182] netlink: 'syz.1.3996': attribute type 1 has an invalid length.
[  427.935432][T21182] geneve4: entered promiscuous mode
[  427.937145][T21182] geneve4: entered allmulticast mode
[  427.940979][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 59768 - 0
[  427.947034][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 59768 - 0
[  427.949823][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 59768 - 0
[  427.952820][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 59768 - 0
[  427.986526][T21187] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  428.008538][T21187] syzkaller0: mtu less than device minimum
[  428.118305][T21204] netlink: 'syz.2.4005': attribute type 29 has an invalid length.
[  428.122132][T21204] netlink: 'syz.2.4005': attribute type 29 has an invalid length.
[  428.155793][T21207] netlink: zone id is out of range
[  428.157646][T21207] netlink: zone id is out of range
[  428.159411][T21207] netlink: get zone limit has 8 unknown bytes
[  428.232912][T21220] netlink: 'syz.1.4008': attribute type 1 has an invalid length.
[  428.236606][T21220] netlink: 'syz.1.4008': attribute type 2 has an invalid length.
[  428.285884][   T33] audit: type=1107 audit(1758913096.854:73): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  428.286206][   T33] audit: type=1107 audit(1758913096.864:74): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  428.569063][T21251] mac80211_hwsim hwsim3 wlan0: Caught tx_queue_len zero misconfig
[  428.616670][T21246] C speed is unknown, defaulting to 1000
[  428.629830][T21246] wg1 speed is unknown, defaulting to 1000
[  429.102546][T21294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.152526][T21301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.202942][T21308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.329237][T21321] netlink: 'syz.0.4036': attribute type 21 has an invalid length.
[  429.337527][T21321] __nla_validate_parse: 38 callbacks suppressed
[  429.337545][T21321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4036'.
[  429.337921][T21318] C speed is unknown, defaulting to 1000
[  429.350446][T21318] wg1 speed is unknown, defaulting to 1000
[  429.780062][T21334] netlink: 'syz.1.4040': attribute type 6 has an invalid length.
[  429.812296][T21336] IPVS: Error connecting to the multicast addr
[  430.004627][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'.
[  430.042195][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'.
[  430.070381][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4044'.
[  430.140801][T21358] netlink: 'syz.2.4046': attribute type 1 has an invalid length.
[  430.146019][T21358] netlink: 'syz.2.4046': attribute type 1 has an invalid length.
[  430.249371][T21369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4047'.
[  430.327204][T21371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4049'.
[  430.330506][T21371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4049'.
[  430.334421][T21371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4049'.
[  430.337328][T21371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4049'.
[  430.489947][T21375] C speed is unknown, defaulting to 1000
[  430.494056][T21375] wg1 speed is unknown, defaulting to 1000
[  430.646626][T21384] netlink: 'syz.0.4053': attribute type 1 has an invalid length.
[  430.686793][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4054'.
[  430.700039][T21384] 8021q: adding VLAN 0 to HW filter on device bond20
[  430.919224][T21408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.166411][T21433] IPVS: Unknown mcast interface: bridge_slave_0
[  431.327422][T21442] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.667356][T21455] erspan0: left allmulticast mode
[  431.674437][T21455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  431.720280][T21461] 8021q: VLANs not supported on ipvlan1
[  431.901549][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  431.906924][T21467] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  431.952932][T21471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.974201][T21473] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  431.977574][T21473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.029979][T21477] 
[  432.030929][T21477] ======================================================
[  432.033307][T21477] WARNING: possible circular locking dependency detected
[  432.035709][T21477] syzkaller #0 Not tainted
[  432.037312][T21477] ------------------------------------------------------
[  432.040903][T21477] syz.1.4078/21477 is trying to acquire lock:
[  432.042953][T21477] ffffffff8f68f958 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  432.046053][T21477] 
[  432.046053][T21477] but task is already holding lock:
[  432.048641][T21477] ffff88803eeae370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  432.051829][T21477] 
[  432.051829][T21477] which lock already depends on the new lock.
[  432.051829][T21477] 
[  432.055387][T21477] 
[  432.055387][T21477] the existing dependency chain (in reverse order) is:
[  432.058413][T21477] 
[  432.058413][T21477] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  432.061117][T21477]        lock_acquire+0x120/0x360
[  432.062873][T21477]        _raw_spin_lock_bh+0x36/0x50
[  432.064764][T21477]        nr_rt_device_down+0x12a/0x720
[  432.066550][T21477]        nr_device_event+0x137/0x150
[  432.068422][T21477]        notifier_call_chain+0x1b6/0x3e0
[  432.070546][T21477]        __dev_notify_flags+0x18d/0x2e0
[  432.072518][T21477]        netif_change_flags+0xe8/0x1a0
[  432.074613][T21477]        dev_change_flags+0x130/0x260
[  432.076348][T21477]        dev_ioctl+0x7b4/0x1150
[  432.078059][T21477]        sock_do_ioctl+0x22c/0x300
[  432.079702][T21477]        sock_ioctl+0x576/0x790
[  432.081299][T21477]        __se_sys_ioctl+0xfc/0x170
[  432.083017][T21477]        do_syscall_64+0xfa/0x3b0
[  432.084751][T21477]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.086851][T21477] 
[  432.086851][T21477] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  432.089475][T21477]        lock_acquire+0x120/0x360
[  432.091146][T21477]        _raw_spin_lock_bh+0x36/0x50
[  432.092953][T21477]        nr_rt_device_down+0xa9/0x720
[  432.094796][T21477]        nr_device_event+0x137/0x150
[  432.096490][T21477]        notifier_call_chain+0x1b6/0x3e0
[  432.098316][T21477]        __dev_notify_flags+0x18d/0x2e0
[  432.100209][T21477]        netif_change_flags+0xe8/0x1a0
[  432.101985][T21477]        dev_change_flags+0x130/0x260
[  432.103760][T21477]        dev_ioctl+0x7b4/0x1150
[  432.105409][T21477]        sock_do_ioctl+0x22c/0x300
[  432.107071][T21477]        sock_ioctl+0x576/0x790
[  432.108673][T21477]        __se_sys_ioctl+0xfc/0x170
[  432.110384][T21477]        do_syscall_64+0xfa/0x3b0
[  432.112056][T21477]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.114222][T21477] 
[  432.114222][T21477] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  432.116773][T21477]        validate_chain+0xb9b/0x2140
[  432.118467][T21477]        __lock_acquire+0xab9/0xd20
[  432.120102][T21477]        lock_acquire+0x120/0x360
[  432.121722][T21477]        _raw_spin_lock_bh+0x36/0x50
[  432.123369][T21477]        nr_rt_ioctl+0x390/0xd50
[  432.125053][T21477]        sock_do_ioctl+0xdc/0x300
[  432.126673][T21477]        sock_ioctl+0x576/0x790
[  432.128236][T21477]        __se_sys_ioctl+0xfc/0x170
[  432.129847][T21477]        do_syscall_64+0xfa/0x3b0
[  432.131493][T21477]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.133471][T21477] 
[  432.133471][T21477] other info that might help us debug this:
[  432.133471][T21477] 
[  432.136721][T21477] Chain exists of:
[  432.136721][T21477]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  432.136721][T21477] 
[  432.141136][T21477]  Possible unsafe locking scenario:
[  432.141136][T21477] 
[  432.143629][T21477]        CPU0                    CPU1
[  432.145653][T21477]        ----                    ----
[  432.147341][T21477]   lock(&nr_node->node_lock);
[  432.148909][T21477]                                lock(nr_node_list_lock);
[  432.151163][T21477]                                lock(&nr_node->node_lock);
[  432.153415][T21477]   lock(nr_neigh_list_lock);
[  432.154997][T21477] 
[  432.154997][T21477]  *** DEADLOCK ***
[  432.154997][T21477] 
[  432.157543][T21477] 2 locks held by syz.1.4078/21477:
[  432.159191][T21477]  #0: ffffffff8f68f9b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  432.162485][T21477]  #1: ffff88803eeae370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  432.165694][T21477] 
[  432.165694][T21477] stack backtrace:
[  432.167550][T21477] CPU: 1 UID: 0 PID: 21477 Comm: syz.1.4078 Not tainted syzkaller #0 PREEMPT(full) 
[  432.167562][T21477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.167568][T21477] Call Trace:
[  432.167574][T21477]  <TASK>
[  432.167580][T21477]  dump_stack_lvl+0x189/0x250
[  432.167595][T21477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.167604][T21477]  ? __pfx__printk+0x10/0x10
[  432.167615][T21477]  ? stack_trace_save+0x9c/0xe0
[  432.167628][T21477]  print_circular_bug+0x2ee/0x310
[  432.167640][T21477]  check_noncircular+0x134/0x160
[  432.167651][T21477]  validate_chain+0xb9b/0x2140
[  432.167664][T21477]  __lock_acquire+0xab9/0xd20
[  432.167678][T21477]  ? nr_rt_ioctl+0x390/0xd50
[  432.167686][T21477]  lock_acquire+0x120/0x360
[  432.167696][T21477]  ? nr_rt_ioctl+0x390/0xd50
[  432.167704][T21477]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  432.167713][T21477]  ? nr_rt_ioctl+0x390/0xd50
[  432.167720][T21477]  _raw_spin_lock_bh+0x36/0x50
[  432.167731][T21477]  ? nr_rt_ioctl+0x390/0xd50
[  432.167743][T21477]  nr_rt_ioctl+0x390/0xd50
[  432.167754][T21477]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  432.167764][T21477]  ? apparmor_capable+0x137/0x1b0
[  432.167778][T21477]  ? capable+0x89/0xe0
[  432.167785][T21477]  ? nr_ioctl+0x1b1/0x3b0
[  432.167798][T21477]  sock_do_ioctl+0xdc/0x300
[  432.167811][T21477]  ? __pfx_sock_do_ioctl+0x10/0x10
[  432.167821][T21477]  ? __lock_acquire+0xab9/0xd20
[  432.167834][T21477]  sock_ioctl+0x576/0x790
[  432.167844][T21477]  ? __pfx_sock_ioctl+0x10/0x10
[  432.167855][T21477]  ? __fget_files+0x2a/0x420
[  432.167866][T21477]  ? __fget_files+0x3a0/0x420
[  432.167875][T21477]  ? __fget_files+0x2a/0x420
[  432.167886][T21477]  ? bpf_lsm_file_ioctl+0x9/0x20
[  432.167895][T21477]  ? __pfx_sock_ioctl+0x10/0x10
[  432.167905][T21477]  __se_sys_ioctl+0xfc/0x170
[  432.167914][T21477]  do_syscall_64+0xfa/0x3b0
[  432.167921][T21477]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.167932][T21477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.167939][T21477]  ? exc_page_fault+0x9f/0xf0
[  432.167950][T21477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.167958][T21477] RIP: 0033:0x7ff469b8ec29
[  432.167967][T21477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.167973][T21477] RSP: 002b:00007ff46a9e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  432.167982][T21477] RAX: ffffffffffffffda RBX: 00007ff469dd6090 RCX: 00007ff469b8ec29
[  432.167988][T21477] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000d
[  432.167993][T21477] RBP: 00007ff469c11e41 R08: 0000000000000000 R09: 0000000000000000
[  432.167999][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.168003][T21477] R13: 00007ff469dd6128 R14: 00007ff469dd6090 R15: 00007fffef336148
[  432.168013][T21477]  </TASK>
[  440.381549][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!

VM DIAGNOSIS:
18:58:20  Registers:
info registers vcpu 0

CPU#0
RAX=89b64ee8e6d61100 RBX=ffffffff819683f8 RCX=89b64ee8e6d61100 RDX=0000000000000001
RSI=ffffffff8be33ee0 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa2ee30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b72e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7371821fb8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f4e5330d100 00007f4e527a7460 XMM05=00007f4e527a7478 00007f4e527a74c0
XMM06=00007f4e527a74b8 00007f4e527a74b0 XMM07=00007f4e527a74a8 00007f4e527a74a0
XMM08=0000000000000000 00007f4e52612f0f XMM09=0000000000000000 00007f4e52612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013a7 RDI=00000000000013a8 RBP=00000000000003f8 RSP=ffffc9000a487150
R8 =ffff8880211a0237 R9 =1ffff11004234046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78e6 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff46a9e06c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002680 CR3=000000010d4c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff469da7498 00007ff469da7470 XMM03=00007ff469da74a8 00007ff469da74a0
XMM04=00007ff46a90d100 00007ff469da7460 XMM05=00007ff469da7478 00007ff469da74c0
XMM06=00007ff469da74b8 00007ff469da74b0 XMM07=00007ff469da74a8 00007ff469da74a0
XMM08=0000000000000000 00007ff469c12f0f XMM09=0000000000000000 00007ff469c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
