last executing test programs:

1.818100049s ago: executing program 0 (id=2485):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4)
r2 = socket(0x28, 0x5, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x29)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0080)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000000000009, 0x7})
mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x4, 0x20010, r2, 0x4a9f6000)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0xfe00, 0x8, 0x8, 0x80000000}, {0x6, 0x4, 0x40, 0xdaf}, {0x7, 0x3, 0xff, 0x7f}, {0x0, 0xb, 0x6, 0x1}, {0x1, 0x6, 0x81, 0xfffffd1a}, {0x2, 0x3, 0x52, 0x401}]}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x8ffd, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055b0e2843cb487ed4657c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5", 0x5c}], 0x1}}], 0x2, 0x0)
sendto$inet(r8, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)

1.699456634s ago: executing program 0 (id=2487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r1, 0x23d40000)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x554, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4107, 0x100b}, 0x7ffffffe}], 0x1, 0x40002020, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000009502000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xffffffffffffffa0, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000240)={0x75, "2b718b9eb5fda7a6aa10ec901cb7925e0a67fbbf54fb77d43f20d452c9548abe4e242bf5e47e6b982029791fcc7854c738376eca62b4509441dfa6bcafa30f9e182b1221d487d232c054d75a9620fe1065350c16d0670962da3065d3336e0478c7d6436953a4fcfbf6582e23d483e41180cb1d656eb4d38c4f9031ce3b00f5fd"})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x24, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x40, 0x0, 0x1, [@typed={0x4, 0x14e}]}]}]}, 0x24}}, 0x4010)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x40, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000001, 0x2]}})

1.619647882s ago: executing program 0 (id=2488):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00010000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="99ae"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r1, 0x0, 0x6}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f00}, 0x48)

1.338820948s ago: executing program 0 (id=2490):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0x6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b41b00000000000061100c080000000063013400000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.338562898s ago: executing program 0 (id=2491):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x4)
socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bind$isdn_base(r0, &(0x7f0000000300)={0x22, 0x2, 0xe8, 0x3, 0x2}, 0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, <r3=>0xffffffffffffffff}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000140005002001e0ffffff000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000)

1.294135604s ago: executing program 0 (id=2493):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r1, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x6, &(0x7f0000000440)=0x7, 0x4)
r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@rose, @netrom, @default, @bcast, @rose, @default, @rose, @netrom]}, &(0x7f0000000200)=0x48)
getsockname$netrom(r3, &(0x7f00000002c0)={{0x3, @netrom}, [@null, @netrom, @default, @null, @netrom, @remote, @bcast, @bcast]}, &(0x7f0000000340)=0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000004c0)={<r6=>r3, 0x0, 0x3ff, 0x8})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500))
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x9, &(0x7f0000000640)="ca922b1c12b19420278d2b75668d2676f60c935f953086b11c8622767b6dac567154a7744101de05aab0aa80920f013a8ffd")
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x800)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)
preadv(r10, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x21)

1.285089174s ago: executing program 1 (id=2495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10)
shutdown(r0, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'dvmrp1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0xc}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x0, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRESDEC, @ANYRESDEC, @ANYRES32=r8, @ANYRESHEX=r10, @ANYRES16=r7, @ANYRES16=r12], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r15}, 0x38)
bind$bt_hci(r14, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
write$bt_hci(r14, &(0x7f0000000000)=ANY=[], 0xa)
setsockopt(r13, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

530.640786ms ago: executing program 1 (id=2497):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYBLOB="c3"], 0x4) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

370.729394ms ago: executing program 1 (id=2498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r1, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc014)
r2 = socket(0x2, 0x80802, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x18, &(0x7f0000000000)=""/2, &(0x7f00000001c0)=0x2)
connect$ax25(r0, &(0x7f0000000040)={{0x3, @default, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48)
socket$inet(0x2, 0x80000, 0x26d4e461)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)={0x8}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50eaff00100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100010000"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

361.75767ms ago: executing program 1 (id=2499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000fdff2b000000044dec7c0ad4fd71745b32ca40042c00000002000000000000000000000b00000000000000000100000d00b0f5c9ad6f3ef7e00000000000000000000009030000000000a813127850969b8797fd05fc7337975c463d655413c60c2f1ab0efc0f50f58db4aa3dd417fea6c913b067df1811482ecaa7fa79f355eda4157d380d331e856b30189c5a9edd171a72a711f11c541f80ddf0f02658d099f75c01cfe76d9b64b81ce8627497d2ffafe102691d8c7a3247910253840a3308e237e21ce522bf3947a920d13"], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @multicast}, 0x10)
shutdown(r0, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'dvmrp1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0xc}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x0, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC, @ANYRESDEC, @ANYRES32=r7, @ANYRESHEX=r9, @ANYRES16=r6, @ANYRES16=r11], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r14}, 0x38)
bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
write$bt_hci(r13, &(0x7f0000000000)=ANY=[], 0xa)
setsockopt(r12, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

240.049184ms ago: executing program 2 (id=2500):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x4)
socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bind$isdn_base(r0, &(0x7f0000000300)={0x22, 0x2, 0xe8, 0x3, 0x2}, 0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, <r3=>0xffffffffffffffff}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000140005002001ffffffffffff00000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000)

238.623572ms ago: executing program 2 (id=2501):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000010000000000eeff84000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94)

237.353907ms ago: executing program 2 (id=2502):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0xfffffffffffffc43, 0xed, 0x5e9}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x804)

209.875327ms ago: executing program 2 (id=2503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000018000180140002007665746830"], 0x2c}}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', <r4=>0x0, 0x700, 0x7, 0xc, 0x3, {{0x19, 0x4, 0x2, 0x1f, 0x64, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@cipso={0x86, 0x2c, 0x3, [{0x0, 0xe, "a877a7462f1fc1895d4546c0"}, {0x1, 0x7, '-w!o,'}, {0x4, 0x11, "35f0cf89452ed73b0efc226277a252"}]}, @timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x6, [{@private=0xa010100, 0x7}]}, @cipso={0x86, 0x17, 0x2, [{0x5, 0x11, "658a9ad4be8f8445e13e2cd1b46bfd"}]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={<r5=>0x0, @empty}, &(0x7f0000000380)=0xc)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="10002abd7000fedbdf251800000008000700400000000500050001000000940002808c0005002e70d1ff54ebfc7e4cab98c8d2b0f1d24230d2855caf9545bbb9e2820e95a4fe0ec537e022bb3427458760e51586c900329bc7a74b3b93a3c9a74fa4da36a6433110c5fb255c8a8c18b142b32633564fab624b83e05235c8b0417c3d03840e14514e94b6843a195dfd1546dbf95299df0e715c154524529261a28698f3fe1a1d31d9a2ba17937a9804000100440001800800030001000000140002006970365f76746930000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000001400020076657468315f746f5f687372000000005800018008000300030000001400020070696d367265673000000000000000001400020074756e6c3000000000000000000000000800030003000000140002007665745b310000000000000000000000080003000118000005000600010000002c00018008000100aa51f6b4bb9dea6113b454d5575828672944", @ANYRES32=r4, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000"], 0x188}}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x42240, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000800)={'wg1\x00', @local})
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c)
r7 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x64, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r8, &(0x7f00000006c0)="3a21b862c70a5fef0cad54880996b55ffac842e8e7310821b68bf895c4d546c476a244d6e16babd29b45aa9ed436b551dbb1244fa4adf283642c96613cb966ceb089e957780ca5b8e80b6aece40aa9f97ef8063c9016f7262c8c02bc5ca4fb78d7251bf978ab2b9ee7931fb7a3612cb73e5321c12bd67cf1125947fe6a88bef285c556464a53787e79cab3f189b9f45ce6a6534c8b9766bc50cd6441"}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc)
sendmsg$can_raw(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0xe, 0x0, 0x0, 0x0, "d2519ef57d0c36ec3c6b88d7902b4baeca4aa15da9708331da195214ecaff8cefadd19aba48028e22b9b74b7c8717c6e62894c69366b1ecf7f545e7985d9ffdb"}, 0x48}, 0x1, 0x0, 0x0, 0x7496520f65ab2dd7}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000018000180140002007665746830"], 0x2c}}, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x700, 0x7, 0xc, 0x3, {{0x19, 0x4, 0x2, 0x1f, 0x64, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@cipso={0x86, 0x2c, 0x3, [{0x0, 0xe, "a877a7462f1fc1895d4546c0"}, {0x1, 0x7, '-w!o,'}, {0x4, 0x11, "35f0cf89452ed73b0efc226277a252"}]}, @timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x6, [{@private=0xa010100, 0x7}]}, @cipso={0x86, 0x17, 0x2, [{0x5, 0x11, "658a9ad4be8f8445e13e2cd1b46bfd"}]}]}}}}}) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty}, &(0x7f0000000380)=0xc) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="10002abd7000fedbdf251800000008000700400000000500050001000000940002808c0005002e70d1ff54ebfc7e4cab98c8d2b0f1d24230d2855caf9545bbb9e2820e95a4fe0ec537e022bb3427458760e51586c900329bc7a74b3b93a3c9a74fa4da36a6433110c5fb255c8a8c18b142b32633564fab624b83e05235c8b0417c3d03840e14514e94b6843a195dfd1546dbf95299df0e715c154524529261a28698f3fe1a1d31d9a2ba17937a9804000100440001800800030001000000140002006970365f76746930000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000001400020076657468315f746f5f687372000000005800018008000300030000001400020070696d367265673000000000000000001400020074756e6c3000000000000000000000000800030003000000140002007665745b310000000000000000000000080003000118000005000600010000002c00018008000100aa51f6b4bb9dea6113b454d5575828672944", @ANYRES32=r4, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000"], 0x188}}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x42240, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000800)={'wg1\x00', @local}) (async)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) (async)
accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x64, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1}, 0x4) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r8, &(0x7f00000006c0)="3a21b862c70a5fef0cad54880996b55ffac842e8e7310821b68bf895c4d546c476a244d6e16babd29b45aa9ed436b551dbb1244fa4adf283642c96613cb966ceb089e957780ca5b8e80b6aece40aa9f97ef8063c9016f7262c8c02bc5ca4fb78d7251bf978ab2b9ee7931fb7a3612cb73e5321c12bd67cf1125947fe6a88bef285c556464a53787e79cab3f189b9f45ce6a6534c8b9766bc50cd6441"}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) (async)
sendmsg$can_raw(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0xe, 0x0, 0x0, 0x0, "d2519ef57d0c36ec3c6b88d7902b4baeca4aa15da9708331da195214ecaff8cefadd19aba48028e22b9b74b7c8717c6e62894c69366b1ecf7f545e7985d9ffdb"}, 0x48}, 0x1, 0x0, 0x0, 0x7496520f65ab2dd7}, 0x800) (async)

203.682379ms ago: executing program 1 (id=2504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20000400) (async, rerun: 64)
r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x18, 0x0, 0x1, 0xa, 0x6, @link_local}, 0x14) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async, rerun: 32)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, <r6=>0x0}, &(0x7f00000004c0)=0xc)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000500)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r6})
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4000, r5}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000280)="1aab05499307fdbe510f23cc3e8337dacb0fbef57d4e552b506eb32a92a2cfa8a3d784004ebb0deccc029af44403b68f9d2afb72f5ee85df77a319c352c43dee6af8a5afb59f22d530d4a24861e29e1d08de0ca6d6c0c6eb3df77c6e7bf49a5889d6043c8fffba7d9f36bcbb48280f3776ae8f9e9d1c2521ad83ad8fa67d5ff612d9c80b09bc2e51537b742614cfe5c4b2214a6b6a5a017a26169940dd2136d50a93e4dcaa4d17512c831593e66408210c722ac486bda51b7da33463ae682c37260ec0c991a119ce8ef50abe59d5d8038bf19495f11c906fac788acb6333aeda9be43b", &(0x7f0000000380)=""/1, &(0x7f00000003c0)="65c88531e99694def42ac2ffdff7df7034179468363d712ed2466c929c35aa99ebe817d0e7dded24a44dde2d2c2180e508102d73e27b8735a9b3174615d06eebb1c2bc59a9eb29749324a5afebd9aa9666f9f424e72a9dc353f36ad9e1b56872af20391635c3295026b77fc4fd19c6fc537c7c4af6ecc18e7ac6ab1aabffb37e0e", &(0x7f0000000540)="22ff1568c12d4aa716051c91b5896d153018273b24738738e23a19d6e1559f54a669539612aee432b2549ed97c305e51a8a2c830e3ec765c11a8306c0fd71b3adf048da4344a295e023c6ede9ecac8086c2016d457e57fe00b048224cec6304e0aff7066015c325bb31c15649fd3e9124fdfbaabbb8cfe85fa9f66e228b557bd946bf90da2e33bde1a7816a9afe42ecc4930783a0066ae3ca5902d55a16bd051b4ca0329fc17b0832a0de044d4730962c0ef953c3e4e0c58182e98", 0x6, r7, 0x4}, 0x38)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in=@empty, 0x4e23, 0x7, 0x4e20, 0x2, 0x2, 0x20, 0x20, 0x32, r3, r6}, {0x7, 0x0, 0xdf, 0x8, 0x8, 0x2, 0xfffffffffffffff9, 0xfff}, {0xa84, 0xa6, 0x6, 0xfff}, 0x1, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4d3, 0x2b}, 0xa, @in=@multicast1, 0x3500, 0x0, 0x2, 0xb, 0xe, 0x5, 0x6}}, 0xe8)
r8 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x9, [@volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @enum64={0x9, 0x3, 0x0, 0x13, 0x1, 0x0, [{0x10, 0xe6, 0x5f}, {0xc, 0x2, 0xb}, {0x6, 0x5, 0x8}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @struct={0x10, 0x1, 0x0, 0x4, 0x0, 0x1ff, [{0x7, 0x3, 0x6}]}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @enum64={0x8, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x1, 0x8, 0x81}, {0x6, 0x1, 0x9}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10}, {0x2, 0x4}, {0x7}]}, @fwd={0x6}]}, {0x0, [0xca104837f7eac5dc, 0x61, 0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000001240)=""/4096, 0xe1, 0x1000, 0x1, 0x4}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xfff, '\x00', r3, r10, 0x4, 0x4, 0x3}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xb8, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x8, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x3}, {0xffff, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x66ce}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x4008010) (rerun: 64)

129.170462ms ago: executing program 2 (id=2505):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x1a)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c8005001500090000000500010006010000050005000a000000050004000000000009ee010073797a3000702c6d6163000000"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_crypto(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf0, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES8=r4, @ANYRES16=r5, @ANYRES64=r10, @ANYBLOB="f21e2a97dea7d3cc72846b273550efcdd9aca15306a622217e9f874a583f7d5c840e874bc496decc566080e364f0fdfcedd44c3a2064c003afab72f9866592297e967a6bd8c8fe2d5ecc191c10b640abe58cae2cf523b6eb872fd9f422e73f1d23e3a68599092b86966b911ea9345b510c7c85dc74ea6503dfe1c7a94034c46ea71797fb1266aefb61efd2a20a35a708d6a1a2d7023216", @ANYRESOCT=r12], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)

127.657153ms ago: executing program 1 (id=2506):
r0 = socket$unix(0x1, 0x5, 0x0)
shutdown(r0, 0x0) (async)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) (async)
listen(r0, 0x7)
connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r4, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfffe, 0x8, 0xa902, 0x6, 0x1}, &(0x7f0000000080)=0x14) (async)
unshare(0x6a040000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
close(r6) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f03c9c2b718210ec6600000000000000001000000000000000"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async)
bpf$LINK_DETACH(0x22, 0x0, 0x0) (async)
bpf$LINK_DETACH(0x22, 0x0, 0x0)

0s ago: executing program 2 (id=2507):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000024f5638c074706e20000000008000140af6a000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028"], 0xdc}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={<r7=>0x0, 0x10}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e20, 0xe, @loopback, 0xfbd8}}, 0x2, 0x10, 0xffff04b5, 0x5, 0x40, 0x3, 0xa}, &(0x7f0000000480)=0x9c) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r8=>0x0, 0x80, 0x1, 0x9, 0xe, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x6c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0x4}, {0xa, 0xf}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x5, 0xfffffffe, 0x80000001, 0x9, 0x0, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE={0x14, 0x6, {0x401, 0xc3b8, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44146' (ED25519) to the list of known hosts.
syzkaller login: [   48.082699][ T5833] cgroup: Unknown subsys name 'net'
[   48.226050][ T5833] cgroup: Unknown subsys name 'cpuset'
[   48.231847][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.594581][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.766887][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.774196][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.777302][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.779767][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.782450][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.785266][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.787719][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.790621][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.815232][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.819346][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.844312][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.847557][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.850787][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.853856][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.856742][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.104395][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.186235][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.301771][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.305218][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.308444][ T5843] bridge_slave_0: entered allmulticast mode
[   54.312370][ T5843] bridge_slave_0: entered promiscuous mode
[   54.322850][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.336342][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.339474][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.342558][ T5843] bridge_slave_1: entered allmulticast mode
[   54.346997][ T5843] bridge_slave_1: entered promiscuous mode
[   54.416664][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.441867][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.446049][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.448970][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.451987][ T5847] bridge_slave_0: entered allmulticast mode
[   54.456081][ T5847] bridge_slave_0: entered promiscuous mode
[   54.479216][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.482328][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.485774][ T5847] bridge_slave_1: entered allmulticast mode
[   54.489605][ T5847] bridge_slave_1: entered promiscuous mode
[   54.551335][ T5843] team0: Port device team_slave_0 added
[   54.554196][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.557288][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.560432][ T5852] bridge_slave_0: entered allmulticast mode
[   54.565922][ T5852] bridge_slave_0: entered promiscuous mode
[   54.583844][ T5843] team0: Port device team_slave_1 added
[   54.589496][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.593581][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.597323][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.600472][ T5852] bridge_slave_1: entered allmulticast mode
[   54.604460][ T5852] bridge_slave_1: entered promiscuous mode
[   54.621431][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.691341][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.696788][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.699688][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.711304][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.717218][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.720160][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.731094][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.737487][ T5847] team0: Port device team_slave_0 added
[   54.742835][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.756499][ T5847] team0: Port device team_slave_1 added
[   54.835602][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.838484][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.850130][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.856846][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.859840][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.870275][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.876820][ T5852] team0: Port device team_slave_0 added
[   54.889654][ T5843] hsr_slave_0: entered promiscuous mode
[   54.892357][ T5843] hsr_slave_1: entered promiscuous mode
[   54.898532][ T5852] team0: Port device team_slave_1 added
[   54.974031][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.976779][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.988259][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.011230][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.014779][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.025382][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.036313][ T5847] hsr_slave_0: entered promiscuous mode
[   55.039546][ T5847] hsr_slave_1: entered promiscuous mode
[   55.042373][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.045038][ T5847] Cannot create hsr debugfs directory
[   55.182393][ T5852] hsr_slave_0: entered promiscuous mode
[   55.186117][ T5852] hsr_slave_1: entered promiscuous mode
[   55.189195][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.191680][ T5852] Cannot create hsr debugfs directory
[   55.360298][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.376101][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.383150][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.409928][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.469000][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.482042][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.507607][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.518345][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.599534][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.610158][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.616969][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.633373][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.662136][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.686107][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.727566][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.730781][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.738876][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.741953][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.752136][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.796985][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   55.809582][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.812552][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.831322][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.834631][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.844063][ T5848] Bluetooth: hci1: command tx timeout
[   55.846644][ T5848] Bluetooth: hci0: command tx timeout
[   55.880547][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.923254][   T55] Bluetooth: hci2: command tx timeout
[   55.939161][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.966281][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.969425][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.988458][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.991512][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.068640][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.082276][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.091442][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.159140][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.172969][ T5843] veth0_vlan: entered promiscuous mode
[   56.182309][ T5843] veth1_vlan: entered promiscuous mode
[   56.236153][ T5843] veth0_macvtap: entered promiscuous mode
[   56.255695][ T5843] veth1_macvtap: entered promiscuous mode
[   56.272187][ T5847] veth0_vlan: entered promiscuous mode
[   56.287823][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.305680][ T5847] veth1_vlan: entered promiscuous mode
[   56.315599][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.329647][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.349679][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.364700][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.377219][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.405811][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.411269][ T5847] veth0_macvtap: entered promiscuous mode
[   56.421088][ T5847] veth1_macvtap: entered promiscuous mode
[   56.450357][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.458071][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.464208][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.472679][ T5852] veth0_vlan: entered promiscuous mode
[   56.484150][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.494794][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.507443][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.514557][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.516497][ T5852] veth1_vlan: entered promiscuous mode
[   56.522760][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.527281][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.543135][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.586587][ T5852] veth0_macvtap: entered promiscuous mode
[   56.599949][ T5852] veth1_macvtap: entered promiscuous mode
[   56.606932][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.622137][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.625966][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.639577][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.650322][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.665346][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.668992][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.699016][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.716776][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.721429][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.726706][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.788636][ T5910] netlink: 'syz.0.1': attribute type 6 has an invalid length.
[   56.798229][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.801367][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.807778][ T5912] vlan2: entered promiscuous mode
[   56.810185][ T5912] vlan2: entered allmulticast mode
[   56.812511][ T5912] hsr_slave_1: entered allmulticast mode
[   56.851921][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.856306][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.878113][ T5914] warning: `syz.2.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.924776][ T5914] can: request_module (can-proto-0) failed.
[   57.009530][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.013846][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.050560][ T5924] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   57.115878][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.168863][ T5930] veth2: entered allmulticast mode
[   57.762351][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.924517][   T55] Bluetooth: hci0: command tx timeout
[   57.926703][   T55] Bluetooth: hci1: command tx timeout
[   57.956430][ T5948] netlink: 'syz.2.15': attribute type 6 has an invalid length.
[   58.003178][   T55] Bluetooth: hci2: command tx timeout
[   58.115563][ T5957] vxlan0: entered promiscuous mode
[   58.117568][ T5957] vxlan0: entered allmulticast mode
[   58.137736][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.165865][ T5855] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.177525][ T5855] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.181036][ T5855] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.211330][ T5855] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.351782][ T5967] Zero length message leads to an empty skb
[   58.357751][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.428133][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   58.437743][ T5971] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   58.511173][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'.
[   58.622311][ T5983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.29'.
[   58.743165][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   58.750713][ T5995] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   58.835672][ T5999] ip6tnl1: entered promiscuous mode
[   58.837922][ T5999] ip6tnl1: entered allmulticast mode
[   58.841045][ T5999] team0: Device ip6tnl1 is of different type
[   59.117486][ T6013] vxlan0: entered promiscuous mode
[   59.133005][ T6013] vxlan0: entered allmulticast mode
[   59.140726][ T5855] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.153705][ T5855] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.162143][ T5855] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.173143][ T5855] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.520056][ T6037] vxlan0: entered promiscuous mode
[   59.522291][ T6037] vxlan0: entered allmulticast mode
[   59.526955][ T5855] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.530350][ T5855] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.545097][ T5855] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.553365][ T5855] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.645476][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'.
[   59.649598][ T6047] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   59.761911][ T6058] tipc: Started in network mode
[   59.765202][ T6058] tipc: Node identity , cluster identity 4711
[   59.770496][ T6058] tipc: Failed to obtain node identity
[   59.773646][ T6058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.834640][ T6058] syzkaller0: entered promiscuous mode
[   59.837668][ T6058] syzkaller0: entered allmulticast mode
[   59.857108][ T6058] xt_limit: Overflow, try lower: 604147548/4200216962
[   60.003416][   T55] Bluetooth: hci1: command tx timeout
[   60.005736][   T55] Bluetooth: hci0: command tx timeout
[   60.083002][ T5848] Bluetooth: hci2: command tx timeout
[   60.157276][ T2254] cfg80211: failed to load regulatory.db
[   60.681054][ T6096] tipc: Started in network mode
[   60.682743][ T6096] tipc: Node identity 7, cluster identity 4711
[   60.690443][ T6096] tipc: Node number set to 7
[   60.702009][ T6096] netlink: 'syz.0.58': attribute type 29 has an invalid length.
[   60.711659][ T6098] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.729373][ T6098] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   60.900907][ T6112] netlink: 'syz.1.65': attribute type 3 has an invalid length.
[   61.082214][ T6136] netlink: 'syz.2.75': attribute type 7 has an invalid length.
[   61.091372][ T6138] pim6reg1: entered promiscuous mode
[   61.097112][ T6138] pim6reg1: entered allmulticast mode
[   61.099310][ T6136] netlink: 'syz.2.75': attribute type 8 has an invalid length.
[   61.237203][ T6154] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   61.252115][ T6156] pim6reg1: entered promiscuous mode
[   61.257330][ T6156] pim6reg1: entered allmulticast mode
[   61.260608][ T6154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.379530][ T6169] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   61.384449][ T6157] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.389931][ T6157] team0: Port device bond1 added
[   61.398504][ T6171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.452729][ T6174] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   61.511961][ T6179] netlink: 'syz.1.91': attribute type 13 has an invalid length.
[   61.633658][ T6184] netlink: 'syz.1.93': attribute type 21 has an invalid length.
[   61.636277][ T6184] netlink: 'syz.1.93': attribute type 5 has an invalid length.
[   61.639440][ T6184] netlink: 'syz.1.93': attribute type 6 has an invalid length.
[   61.645144][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.086796][ T5848] Bluetooth: hci0: command tx timeout
[   62.087554][   T55] Bluetooth: hci1: command tx timeout
[   62.168828][   T55] Bluetooth: hci2: command tx timeout
[   62.392546][ T6200] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[   62.419286][ T6200] bond2: entered promiscuous mode
[   62.421562][ T6200] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.438840][ T6201] bond2: (slave bridge1): making interface the new active one
[   62.442450][ T6201] bridge1: entered promiscuous mode
[   62.447755][ T6201] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   62.467874][ T6200] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[   62.611795][ T6218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   62.709710][ T6224] __nla_validate_parse: 13 callbacks suppressed
[   62.709724][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   62.716965][ T6224] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   62.719969][ T6224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.786864][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'.
[   62.790794][ T6230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.833989][ T6232] syzkaller0: entered promiscuous mode
[   62.836426][ T6232] syzkaller0: entered allmulticast mode
[   63.425827][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   63.430598][ T6242] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   63.449529][ T6237] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   63.452436][ T2254] IPVS: starting estimator thread 0...
[   63.466619][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.469810][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.475310][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.478506][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.543791][ T6244] IPVS: using max 46 ests per chain, 110400 per kthread
[   63.591559][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.599299][ T6251] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   63.602282][ T6251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.725010][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   63.742796][ T6262] netlink: 'syz.1.119': attribute type 13 has an invalid length.
[   63.801647][ T6268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.122'.
[   63.814070][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   63.915355][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   63.937534][ T6276] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   63.963274][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.967248][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.973741][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.976795][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.042834][ T6290] netlink: 'syz.1.132': attribute type 6 has an invalid length.
[   64.220589][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'.
[   64.247141][ T6309] netlink: 'syz.0.140': attribute type 9 has an invalid length.
[   64.250105][ T6309] netlink: 140 bytes leftover after parsing attributes in process `syz.0.140'.
[   64.311312][ T6315] netlink: 'syz.1.143': attribute type 13 has an invalid length.
[   64.391712][ T6317] batadv_slave_1: entered promiscuous mode
[   64.475828][ T6316] batadv_slave_1: left promiscuous mode
[   64.501530][ T6330] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000
[   64.545587][ T6332] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   65.276991][ T6352] netlink: 'syz.1.155': attribute type 13 has an invalid length.
[   65.482603][ T6358] vlan2: entered allmulticast mode
[   65.641161][ T6368] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   65.645140][ T6368] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   65.729258][ T6376] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   66.326377][ T6421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   66.567499][ T6441] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   66.570983][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.614719][ T6447] netlink: 'syz.0.185': attribute type 6 has an invalid length.
[   66.946452][ T6473] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[   66.950083][ T6473] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[   67.082044][ T6490] netlink: 'syz.0.198': attribute type 21 has an invalid length.
[   67.089542][ T6490] netlink: 'syz.0.198': attribute type 5 has an invalid length.
[   67.093703][ T6490] netlink: 'syz.0.198': attribute type 6 has an invalid length.
[   67.135937][ T6495] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   67.138462][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.240823][ T6504] team0: Port device geneve0 added
[   67.248790][ T6504] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   67.408691][ T6520] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   67.622563][ T6536] bridge1: port 1(veth3) entered blocking state
[   67.625374][ T6536] bridge1: port 1(veth3) entered disabled state
[   67.627701][ T6536] veth3: entered allmulticast mode
[   67.630782][ T6536] veth3: entered promiscuous mode
[   67.640676][ T6536] bridge1: port 2(veth0_to_bond) entered blocking state
[   67.643250][ T6536] bridge1: port 2(veth0_to_bond) entered disabled state
[   67.645759][ T6536] veth0_to_bond: entered allmulticast mode
[   67.649089][ T6536] veth0_to_bond: entered promiscuous mode
[   67.664735][ T6538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.667107][ T6538] syzkaller0: entered promiscuous mode
[   67.669161][ T6538] syzkaller0: entered allmulticast mode
[   67.724960][ T6545] tipc: Resetting bearer <eth:syzkaller0>
[   67.743696][ T6545] tipc: Disabling bearer <eth:syzkaller0>
[   67.768374][ T6476] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[   67.773408][ T6476] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[   67.852538][ T6556] __nla_validate_parse: 29 callbacks suppressed
[   67.852553][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   67.874338][ T6556] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   68.075262][ T6578] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   68.334121][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   68.387553][ T6608] validate_nla: 2 callbacks suppressed
[   68.387565][ T6608] netlink: 'syz.2.236': attribute type 13 has an invalid length.
[   68.539911][ T6610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.550681][ T6610] syzkaller0: entered promiscuous mode
[   68.554146][ T6610] syzkaller0: entered allmulticast mode
[   68.561257][ T6610] tipc: Resetting bearer <eth:syzkaller0>
[   68.564428][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.574617][ T6609] tipc: Resetting bearer <eth:syzkaller0>
[   68.588244][ T6609] tipc: Disabling bearer <eth:syzkaller0>
[   68.658028][ T6622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.241'.
[   68.659553][ T6624] netlink: 'syz.1.242': attribute type 6 has an invalid length.
[   68.697432][ T6630] netlink: 156 bytes leftover after parsing attributes in process `syz.1.244'.
[   68.806502][ T6641] tipc: Started in network mode
[   68.808197][ T6641] tipc: Node identity 9a8a9b5854d, cluster identity 4711
[   68.811466][ T6641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.815070][ T6641] syzkaller0: entered promiscuous mode
[   68.815412][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'.
[   68.817012][ T6641] syzkaller0: entered allmulticast mode
[   68.831542][ T6641] tipc: Resetting bearer <eth:syzkaller0>
[   68.853133][ T6640] tipc: Resetting bearer <eth:syzkaller0>
[   68.870826][ T6640] tipc: Disabling bearer <eth:syzkaller0>
[   69.014115][ T6665] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   69.020258][ T6665] netlink: 146844 bytes leftover after parsing attributes in process `syz.2.257'.
[   69.042496][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   69.096589][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'.
[   69.102004][ T6681] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   69.107467][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.108495][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.264'.
[   69.201715][ T6688] netlink: 'syz.2.268': attribute type 6 has an invalid length.
[   69.211728][ T6690] netlink: 156 bytes leftover after parsing attributes in process `syz.0.269'.
[   69.245785][ T6692] netlink: 'syz.2.270': attribute type 1 has an invalid length.
[   69.275212][ T6692] bond3: (slave bridge2): making interface the new active one
[   69.278070][ T6692] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   69.317944][ T6701] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   69.329767][ T6701] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   69.394884][ T6712] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   69.437211][ T6717] syzkaller1: entered promiscuous mode
[   69.439464][ T6717] syzkaller1: entered allmulticast mode
[   69.906712][ T6723] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   69.919184][ T6723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.273515][ T6735] netlink: 'syz.2.282': attribute type 12 has an invalid length.
[   70.449943][ T6747] syzkaller1: entered promiscuous mode
[   70.452529][ T6747] syzkaller1: entered allmulticast mode
[   70.482710][ T6754] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   70.585578][ T6770] netlink: 'syz.0.292': attribute type 6 has an invalid length.
[   70.614248][ T6774] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   70.897889][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.900755][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.965211][ T6810] 8021q: VLANs not supported on ip_vti0
[   70.967171][ T6811] 8021q: VLANs not supported on ip_vti0
[   71.232269][ T6829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.260568][ T6831] netlink: 'syz.1.314': attribute type 13 has an invalid length.
[   71.309136][ T6833] netlink: 'syz.1.315': attribute type 11 has an invalid length.
[   71.556649][ T6846] netlink: 'syz.0.321': attribute type 21 has an invalid length.
[   71.558691][ T6847] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   71.560299][ T6846] netlink: 'syz.0.321': attribute type 5 has an invalid length.
[   72.282845][ T6863] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   72.289601][ T6863] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   73.232410][ T6887] __nla_validate_parse: 11 callbacks suppressed
[   73.232423][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[   73.244431][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[   73.312212][ T6892] syz_tun: entered allmulticast mode
[   73.437950][ T6892] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   73.445502][ T6891] syz_tun: left allmulticast mode
[   73.457404][ T6902] validate_nla: 7 callbacks suppressed
[   73.457413][ T6902] netlink: 'syz.2.341': attribute type 13 has an invalid length.
[   73.480811][ T6904] pimreg: entered allmulticast mode
[   73.774054][ T6943] netlink: 'syz.1.356': attribute type 12 has an invalid length.
[   73.777059][ T6943] netlink: 'syz.1.356': attribute type 29 has an invalid length.
[   73.780136][ T6943] netlink: 148 bytes leftover after parsing attributes in process `syz.1.356'.
[   73.789568][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   73.794862][ T6945] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   73.798339][ T6945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.800654][ T6943] netlink: 'syz.1.356': attribute type 2 has an invalid length.
[   73.807793][ T6943] netlink: 'syz.1.356': attribute type 3 has an invalid length.
[   73.862744][ T6953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'.
[   73.920430][ T6955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.362'.
[   73.970559][ T6959] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   73.973803][ T6959] netlink: 'syz.0.363': attribute type 4 has an invalid length.
[   73.976331][ T6959] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.363'.
[   74.004460][ T6965] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.034206][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.369'.
[   74.067607][ T6969] netlink: 'syz.2.368': attribute type 83 has an invalid length.
[   74.090895][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'.
[   74.175905][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'.
[   74.241553][ T6990] netlink: 'syz.0.377': attribute type 6 has an invalid length.
[   74.278102][ T6993] netlink: 'syz.0.378': attribute type 8 has an invalid length.
[   74.610821][ T7018] Illegal XDP return value 195166350 on prog  (id 67) dev N/A, expect packet loss!
[   74.708904][ T7026] atomic_op ffff888109bda198 conn xmit_atomic 0000000000000000
[   74.807317][ T7038] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   74.920305][ T7050] syzkaller1: entered promiscuous mode
[   74.923195][ T7050] syzkaller1: entered allmulticast mode
[   74.949215][ T7050] bond4: entered promiscuous mode
[   74.951236][ T7050] bond4: entered allmulticast mode
[   74.955775][ T7050] 8021q: adding VLAN 0 to HW filter on device bond4
[   75.194200][ T7091] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   75.197743][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.809650][ T7115] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.854634][ T7120] tipc: Started in network mode
[   75.856301][ T7120] tipc: Node identity 7e2469758bbf, cluster identity 4711
[   75.858749][ T7120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.861806][ T7120] syzkaller0: entered promiscuous mode
[   75.865026][ T7120] syzkaller0: entered allmulticast mode
[   76.293640][ T7130] tipc: Resetting bearer <eth:syzkaller0>
[   76.301940][ T7118] tipc: Resetting bearer <eth:syzkaller0>
[   76.309471][ T7118] tipc: Disabling bearer <eth:syzkaller0>
[   76.399196][ T7133] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   76.433055][ T7143] pimreg: left allmulticast mode
[   76.489762][ T7147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.497871][ T7147] syzkaller0: entered promiscuous mode
[   76.499781][ T7147] syzkaller0: entered allmulticast mode
[   76.521808][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   76.529940][ T7146] tipc: Resetting bearer <eth:syzkaller0>
[   76.539961][ T7146] tipc: Disabling bearer <eth:syzkaller0>
[   76.784086][ T7162] trusted_key: syz.2.436 sent an empty control message without MSG_MORE.
[   77.257340][ T7208] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.302661][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[   77.624288][ T7232] Bluetooth: MGMT ver 1.23
[   77.674699][ T7235] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   78.607093][ T7252] __nla_validate_parse: 23 callbacks suppressed
[   78.607102][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'.
[   78.649705][ T7254] xt_limit: Overflow, try lower: 271964/0
[   78.655839][ T7257] netlink: 140 bytes leftover after parsing attributes in process `syz.2.473'.
[   78.659442][ T7257] nbd: must specify at least one socket
[   78.721428][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[   78.907620][ T7280] validate_nla: 13 callbacks suppressed
[   78.909735][ T7280] netlink: 'syz.2.481': attribute type 12 has an invalid length.
[   78.912319][ T7280] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.481'.
[   79.081652][ T7288] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.550435][ T7291] netlink: 'syz.2.486': attribute type 1 has an invalid length.
[   79.553806][ T7291] netlink: 'syz.2.486': attribute type 2 has an invalid length.
[   79.556472][ T7291] netlink: 'syz.2.486': attribute type 8 has an invalid length.
[   79.563121][ T7291] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.486'.
[   79.571657][ T7292] netlink: 'syz.2.486': attribute type 1 has an invalid length.
[   79.583840][ T7292] netlink: 'syz.2.486': attribute type 2 has an invalid length.
[   79.587114][ T7292] netlink: 'syz.2.486': attribute type 8 has an invalid length.
[   79.596236][ T7292] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.486'.
[   79.616085][ T7295] syzkaller1: entered promiscuous mode
[   79.617928][ T7295] syzkaller1: entered allmulticast mode
[   79.795967][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[   79.872330][ T7303] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[   79.899068][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'.
[   79.902099][ T7305] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[   79.907833][ T7305] netlink: 'syz.1.491': attribute type 2 has an invalid length.
[   79.911545][ T7305] netlink: 80 bytes leftover after parsing attributes in process `syz.1.491'.
[   79.933652][ T7307] netlink: 128 bytes leftover after parsing attributes in process `syz.1.492'.
[   80.605179][ T7321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.607701][ T7321] syzkaller0: entered promiscuous mode
[   80.609619][ T7321] syzkaller0: entered allmulticast mode
[   80.641560][ T7321] tipc: Resetting bearer <eth:syzkaller0>
[   80.646877][ T7320] tipc: Resetting bearer <eth:syzkaller0>
[   80.658045][ T7320] tipc: Disabling bearer <eth:syzkaller0>
[   80.695361][ T7326] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   81.350161][ T7338] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   81.354698][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.740662][ T7353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.745626][ T7353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.776909][ T7361] geneve2: entered promiscuous mode
[   81.778770][ T7361] geneve2: entered allmulticast mode
[   81.782723][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   81.789302][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   81.802079][ T7353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.806153][ T7353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.892271][ T7397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.997411][ T7403] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   83.000047][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.290705][ T7353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.297864][ T7353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.301807][ T7353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.365797][ T7353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.370094][ T7353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.374801][ T7353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.451001][ T5855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.455345][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   83.458308][ T5855] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.469766][ T5855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.473454][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   83.476755][ T5855] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.488653][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.492990][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   83.496240][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.510519][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.519155][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   83.522296][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.597646][ T7438] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   83.648175][ T7445] delete_channel: no stack
[   83.668317][ T7442] __nla_validate_parse: 18 callbacks suppressed
[   83.668325][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'.
[   83.673243][ T7448] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   83.745898][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'.
[   83.815197][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'.
[   83.818166][ T7469] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   83.820773][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.959605][ T7487] validate_nla: 15 callbacks suppressed
[   83.959615][ T7487] netlink: 'syz.2.557': attribute type 13 has an invalid length.
[   84.024542][ T7495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.561'.
[   84.038090][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'.
[   84.042416][ T7497] netlink: 156 bytes leftover after parsing attributes in process `syz.0.562'.
[   84.047171][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[   84.105164][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'.
[   84.144038][ T7508] netlink: 'syz.0.566': attribute type 21 has an invalid length.
[   84.144885][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'.
[   84.148976][ T7508] netlink: 128 bytes leftover after parsing attributes in process `syz.0.566'.
[   84.157008][ T7508] netlink: 'syz.0.566': attribute type 5 has an invalid length.
[   84.160309][ T7508] netlink: 'syz.0.566': attribute type 6 has an invalid length.
[   84.236154][ T5907] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   84.589341][ T7525] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   84.681021][ T7528] netlink: 'syz.0.574': attribute type 2 has an invalid length.
[   84.684528][ T7528] netlink: 'syz.0.574': attribute type 8 has an invalid length.
[   85.029400][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.033554][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.046764][ T7536] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   85.069346][ T7535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   85.343862][ T7540] bridge_slave_0: left promiscuous mode
[   85.345955][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.352216][ T7540] bridge_slave_1: left allmulticast mode
[   85.354845][ T7540] bridge_slave_1: left promiscuous mode
[   85.357883][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.366246][ T7540] bond0: (slave bond_slave_0): Releasing backup interface
[   85.371914][ T7540] bond0: (slave bond_slave_1): Releasing backup interface
[   85.378887][ T7540] team0: Port device team_slave_0 removed
[   85.385541][ T7540] team0: Port device team_slave_1 removed
[   85.391042][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.394497][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.397948][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.401022][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.409404][ T7551] tipc: Enabled bearer <eth:team0>, priority 0
[   85.626765][ T7580] netlink: 'syz.2.594': attribute type 13 has an invalid length.
[   85.928120][ T7610] netlink: 'syz.2.605': attribute type 21 has an invalid length.
[   85.931537][ T7610] netlink: 'syz.2.605': attribute type 5 has an invalid length.
[   85.935516][ T7610] netlink: 'syz.2.605': attribute type 6 has an invalid length.
[   86.524039][ T5313] tipc: Node number set to 3462044504
[   86.748021][ T7622] bond0: option arp_all_targets: invalid value (196616)
[   86.888968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.449221][ T7663] !: renamed from dummy0 (while UP)
[   88.375351][ T7733] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.380580][ T7731] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   88.390727][ T7731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.375150][ T7776] validate_nla: 11 callbacks suppressed
[   89.375159][ T7776] netlink: 'syz.0.652': attribute type 21 has an invalid length.
[   89.379519][ T7776] __nla_validate_parse: 26 callbacks suppressed
[   89.379525][ T7776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.652'.
[   89.413506][ T7776] netlink: 'syz.0.652': attribute type 5 has an invalid length.
[   89.416403][ T7776] netlink: 'syz.0.652': attribute type 6 has an invalid length.
[   89.416638][ T7771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.651'.
[   89.419161][ T7776] netlink: 3 bytes leftover after parsing attributes in process `syz.0.652'.
[   89.478750][ T7785] netlink: 'syz.2.654': attribute type 13 has an invalid length.
[   89.890939][ T7794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.893913][ T7794] syzkaller0: entered promiscuous mode
[   89.896329][ T7794] syzkaller0: entered allmulticast mode
[   89.909897][ T7794] tipc: Resetting bearer <eth:syzkaller0>
[   89.925896][ T7797] tipc: Resetting bearer <eth:syzkaller0>
[   89.937109][ T7797] tipc: Disabling bearer <eth:syzkaller0>
[   89.969495][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[   90.020285][ T7811] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   90.174339][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[   90.178143][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[   90.244461][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[   90.248453][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[   90.252165][ T7824] netlink: 'syz.1.668': attribute type 5 has an invalid length.
[   90.255835][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'.
[   90.262839][ T7824] geneve2: entered promiscuous mode
[   90.265155][ T7824] geneve2: entered allmulticast mode
[   90.268391][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   90.272003][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   90.277338][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   90.281224][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   90.366255][ T7835] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   91.380049][ T7848] bond0: option arp_validate: invalid value (18446744073491447809)
[   91.382952][ T5855] bond0: (slave bond_slave_0): interface is now down
[   91.385731][ T5855] bond0: (slave bond_slave_1): interface is now down
[   91.404032][ T5907] bond0: (slave bond_slave_0): interface is now down
[   91.411561][ T5907] bond0: (slave bond_slave_1): interface is now down
[   91.419735][ T5907] bond0: now running without any active interface!
[   91.495979][ T7863] netlink: zone id is out of range
[   91.497849][ T7863] netlink: zone id is out of range
[   91.499917][ T7863] netlink: zone id is out of range
[   91.502146][ T7863] netlink: zone id is out of range
[   91.511792][ T7863] netlink: zone id is out of range
[   91.562287][ T7863] syzkaller1: entered promiscuous mode
[   91.565431][ T7863] syzkaller1: entered allmulticast mode
[   92.061743][ T7891] netlink: 'syz.2.689': attribute type 13 has an invalid length.
[   92.157441][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'.
[   92.275214][ T7901] bridge_slave_0: left allmulticast mode
[   92.277598][ T7901] bridge_slave_0: left promiscuous mode
[   92.280228][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.287001][ T7901] bridge_slave_1: left promiscuous mode
[   92.289693][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.297669][ T7901] veth0_to_bond: left allmulticast mode
[   92.300145][ T7901] veth0_to_bond: left promiscuous mode
[   92.302696][ T7901] bridge1: port 2(veth0_to_bond) entered disabled state
[   92.310663][ T7901] bond0: (slave bond_slave_0): Releasing backup interface
[   92.319911][ T7901] bond0: (slave bond_slave_1): Releasing backup interface
[   92.334966][ T7901] team0: Port device team_slave_0 removed
[   92.345697][ T7901] team0: Port device team_slave_1 removed
[   92.360082][ T7901] team0: Port device bond1 removed
[   92.362399][ T7901] veth3: left allmulticast mode
[   92.364590][ T7901] veth3: left promiscuous mode
[   92.366879][ T7901] bridge1: port 1(veth3) entered disabled state
[   92.376184][ T7901] bond3: (slave bridge2): Releasing active interface
[   92.820278][ T7929] netem: incorrect ge model size
[   92.825307][ T7929] netem: change failed
[   92.879236][ T7933] netlink: 'syz.1.705': attribute type 13 has an invalid length.
[   92.896118][ T7933] tipc: Resetting bearer <eth:team0>
[   93.320493][ T7971] netlink: 'syz.1.715': attribute type 21 has an invalid length.
[   93.334540][ T7971] netlink: 'syz.1.715': attribute type 5 has an invalid length.
[   93.337031][ T7971] netlink: 'syz.1.715': attribute type 6 has an invalid length.
[   93.883830][ T7981] dummy0: entered allmulticast mode
[   94.096796][ T7998] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   94.213848][ T8013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.217515][ T8013] syzkaller0: entered promiscuous mode
[   94.220993][ T8013] syzkaller0: entered allmulticast mode
[   94.247032][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[   94.261803][ T8013] tipc: Disabling bearer <eth:syzkaller0>
[   94.497532][ T8049] __nla_validate_parse: 15 callbacks suppressed
[   94.497542][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'.
[   94.540744][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.746'.
[   94.749782][ T8060] syzkaller0: entered promiscuous mode
[   94.752197][ T8060] syzkaller0: entered allmulticast mode
[   94.901395][ T8064] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.751'.
[   95.138475][ T8069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.639441][ T8087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.758'.
[   95.650818][ T8085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.758'.
[   95.707887][ T8094] validate_nla: 1 callbacks suppressed
[   95.707897][ T8094] netlink: 'syz.0.761': attribute type 13 has an invalid length.
[   95.771478][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[   95.816483][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[   95.823183][ T7602] net_ratelimit: 21 callbacks suppressed
[   95.823194][ T7602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.900469][ T8113] netlink: 248 bytes leftover after parsing attributes in process `syz.2.767'.
[   96.072710][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[   96.381569][ T8156] netlink: zone id is out of range
[   96.386028][ T8156] netlink: zone id is out of range
[   96.388259][ T8156] netlink: zone id is out of range
[   96.390524][ T8156] netlink: zone id is out of range
[   96.392668][ T8156] netlink: zone id is out of range
[   96.400528][ T8156] netlink: zone id is out of range
[   96.407734][ T8156] netlink: zone id is out of range
[   96.410235][ T8156] netlink: zone id is out of range
[   96.417336][ T8156] netlink: zone id is out of range
[   98.196058][ T8210] netlink: 'syz.2.787': attribute type 13 has an invalid length.
[   98.277912][ T8215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.786'.
[   98.393084][ T8233] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[   98.398498][ T8234] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[   98.412505][ T8233] netlink: 'syz.2.792': attribute type 2 has an invalid length.
[   98.418314][ T8234] netlink: 'syz.2.792': attribute type 2 has an invalid length.
[   98.447033][ T8233] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[   98.462952][ T8233] netlink: 'syz.2.792': attribute type 2 has an invalid length.
[   98.557613][ T8246] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.075435][ T8270] netlink: 'syz.1.804': attribute type 13 has an invalid length.
[   99.080960][ T8270] tipc: Resetting bearer <eth:team0>
[   99.505513][ T8306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.815'.
[   99.509558][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'.
[   99.618873][ T8314] netlink: 124 bytes leftover after parsing attributes in process `syz.2.817'.
[   99.979200][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  100.885962][ T8355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.890708][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'.
[  100.895392][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'.
[  100.916458][ T8355] syzkaller0: entered promiscuous mode
[  100.918906][ T8355] syzkaller0: entered allmulticast mode
[  101.003266][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'.
[  101.770270][ T8354] tipc: Resetting bearer <eth:syzkaller0>
[  101.804610][ T8354] tipc: Disabling bearer <eth:syzkaller0>
[  101.981418][   T33] audit: type=1800 audit(1755539041.143:2): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.841" name="memory.events" dev="tmpfs" ino=1422 res=0 errno=0
[  102.056470][ T8388] netlink: 'syz.0.842': attribute type 6 has an invalid length.
[  102.889673][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.847'.
[  102.975186][ T8422] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[  102.986456][ T8424] netlink: 'syz.2.852': attribute type 6 has an invalid length.
[  103.154236][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'.
[  103.807010][ T8456] netlink: 'syz.1.865': attribute type 10 has an invalid length.
[  103.810602][ T8456] tipc: Resetting bearer <eth:team0>
[  103.822792][ T8456] tipc: Resetting bearer <eth:team0>
[  103.827418][ T8456] 8021q: adding VLAN 0 to HW filter on device team0
[  103.836326][ T8456] bond0: (slave team0): Enslaving as an active interface with an up link
[  103.874203][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'.
[  104.166927][ T8491] net_ratelimit: 166 callbacks suppressed
[  104.166940][ T8491] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  104.172541][ T8491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.200535][ T8493] netlink: 'syz.1.879': attribute type 13 has an invalid length.
[  104.205512][ T8493] tipc: Resetting bearer <eth:team0>
[  104.207456][ T8493] tipc: Resetting bearer <eth:team0>
[  104.251804][ T8479] infiniband syz1: set down
[  104.255305][ T8479] infiniband syz1: added macvlan1
[  104.258826][ T8479] syz1: rxe_create_cq: returned err = -12
[  104.261438][ T8479] infiniband syz1: Couldn't create ib_mad CQ
[  104.265375][ T8479] infiniband syz1: Couldn't open port 1
[  104.289539][ T8479] RDS/IB: syz1: added
[  104.294655][ T8479] smc: adding ib device syz1 with port count 1
[  104.297559][ T8479] smc:    ib device syz1 port 1 has pnetid 
[  104.445587][ T8500] netlink: 'syz.1.882': attribute type 6 has an invalid length.
[  104.806685][ T8524] __nla_validate_parse: 2 callbacks suppressed
[  104.806698][ T8524] netlink: 88 bytes leftover after parsing attributes in process `syz.0.892'.
[  104.814793][ T8523] netlink: 88 bytes leftover after parsing attributes in process `syz.0.892'.
[  105.560406][ T8537] sctp: [Deprecated]: syz.1.897 (pid 8537) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.560406][ T8537] Use struct sctp_sack_info instead
[  105.755910][ T8546] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.756459][ T8547] netlink: 240 bytes leftover after parsing attributes in process `syz.1.899'.
[  105.958049][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'.
[  106.057886][ T8574] netlink: 'syz.2.910': attribute type 6 has an invalid length.
[  106.177856][ T8584] netlink: 'syz.0.915': attribute type 1 has an invalid length.
[  106.180544][ T8584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.915'.
[  106.217735][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.914'.
[  106.218484][ T8588] netlink: 256 bytes leftover after parsing attributes in process `syz.1.917'.
[  106.229330][ T5855] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  107.173428][ T8602] macsec1: entered promiscuous mode
[  107.175106][ T8602] macsec1: entered allmulticast mode
[  107.212627][ T8604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.373309][ T8621] syzkaller0: entered promiscuous mode
[  107.375197][ T8621] syzkaller0: entered allmulticast mode
[  107.379240][ T8621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.810618][ T8623] netlink: 'syz.1.931': attribute type 13 has an invalid length.
[  108.129397][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  108.150956][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  108.172277][ T8623] tipc: Resetting bearer <eth:team0>
[  109.310357][ T8650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'.
[  109.520579][ T8656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.523854][ T8656] syzkaller0: entered promiscuous mode
[  109.525704][ T8656] syzkaller0: entered allmulticast mode
[  109.529775][ T8655] tipc: Resetting bearer <eth:syzkaller0>
[  109.538979][ T8655] tipc: Disabling bearer <eth:syzkaller0>
[  109.646452][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'.
[  110.112713][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  110.214174][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'.
[  110.248294][ T8706] netlink: 'syz.2.957': attribute type 1 has an invalid length.
[  110.251360][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[  110.360139][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.364428][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.371372][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'.
[  110.439096][ T8719] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  110.442405][ T8719] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  110.446125][ T8719] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  110.921228][ T8722] netlink: 'syz.0.963': attribute type 6 has an invalid length.
[  111.234685][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.965'.
[  111.303594][ T8735] : renamed from batadv_slave_1 (while UP)
[  111.366690][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'.
[  111.452765][ T8744] netlink: 'syz.2.970': attribute type 21 has an invalid length.
[  111.456414][ T8744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'.
[  111.477277][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.970'.
[  111.616227][ T8754] netlink: 'syz.2.973': attribute type 6 has an invalid length.
[  111.778263][ T8763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.976'.
[  111.850896][ T8767] netlink: 156 bytes leftover after parsing attributes in process `syz.2.978'.
[  111.878247][ T8769] !: renamed from dummy0
[  111.942684][ T8773] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  111.972386][ T8773] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  111.977004][ T8773] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  111.983313][ T8773] bond5: (slave vti0): making interface the new active one
[  111.986958][ T8773] bond5: (slave vti0): Enslaving as an active interface with an up link
[  112.025955][ T8778] syzkaller0: entered promiscuous mode
[  112.028269][ T8778] syzkaller0: entered allmulticast mode
[  112.504612][ T8787] netlink: 'syz.2.986': attribute type 6 has an invalid length.
[  112.676508][ T8813] team0: Device macvlan1 is up. Set it down before adding it as a team port
[  112.741044][ T8823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.775487][ T8828] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  112.856659][ T8836] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  113.730415][ T8848] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.412975][ T8879] raw_sendmsg: syz.2.1019 forgot to set AF_INET. Fix it!
[  114.464517][ T8884] ipip0: entered promiscuous mode
[  114.646536][ T8891] netlink: 'syz.2.1023': attribute type 13 has an invalid length.
[  115.194812][ T8901] __nla_validate_parse: 10 callbacks suppressed
[  115.194824][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'.
[  115.679485][ T8916] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1031'.
[  115.708297][ T8918] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1032'.
[  116.696121][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'.
[  116.966376][ T8956] netlink: 'syz.2.1047': attribute type 13 has an invalid length.
[  117.014663][ T8958] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.076665][ T8975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.080710][ T8975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.345993][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  118.414949][ T8985] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1058'.
[  118.639442][ T8996] netlink: 'syz.1.1062': attribute type 3 has an invalid length.
[  118.831878][ T9003] netlink: 'syz.0.1065': attribute type 13 has an invalid length.
[  118.879124][  T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.888527][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'.
[  119.388007][  T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.941874][ T9014] netlink: 'syz.0.1070': attribute type 1 has an invalid length.
[  119.945242][ T9014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1070'.
[  119.990796][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[  120.064189][ T9026] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  120.079996][ T9026] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.101317][ T9026] bond4: (slave veth3): Enslaving as an active interface with a down link
[  120.109131][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.111770][ T9026] bond4: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  120.134389][ T9030] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.162529][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  120.163974][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.168522][ T9032] netlink: 'syz.0.1074': attribute type 30 has an invalid length.
[  120.243684][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  120.247716][ T9032] netlink: 'syz.0.1074': attribute type 30 has an invalid length.
[  120.451517][ T9048] netlink: 'syz.2.1081': attribute type 9 has an invalid length.
[  120.459090][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  120.546981][ T9050] netlink: 'syz.2.1082': attribute type 7 has an invalid length.
[  120.550194][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'.
[  120.769782][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'.
[  120.990561][ T9077] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  121.009959][ T9079] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  121.033051][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  121.174120][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'.
[  121.238680][ T9099] netlink: 'syz.2.1101': attribute type 6 has an invalid length.
[  121.376364][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'.
[  121.379347][ T9113] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1105'.
[  121.410173][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  121.461463][ T9123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1107'.
[  121.491445][ T9129] netlink: 'syz.2.1111': attribute type 13 has an invalid length.
[  121.514716][ T9133] netlink: 'syz.2.1113': attribute type 9 has an invalid length.
[  121.827394][ T9164] netlink: 'syz.1.1126': attribute type 1 has an invalid length.
[  121.849850][ T9164] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.869483][ T9164] bond3: (slave veth3): Enslaving as an active interface with a down link
[  123.139686][ T9196] tipc: Trying to set illegal importance in message
[  123.222784][ T9206] pim6reg1: entered promiscuous mode
[  123.226673][ T9206] pim6reg1: entered allmulticast mode
[  123.691026][ T9228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.737769][ T9228] syzkaller0: entered promiscuous mode
[  123.739590][ T9228] syzkaller0: entered allmulticast mode
[  123.742172][ T9228] tipc: Resetting bearer <eth:syzkaller0>
[  123.765581][ T9227] tipc: Resetting bearer <eth:syzkaller0>
[  123.812822][ T9236] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20002
[  124.520444][ T9227] tipc: Disabling bearer <eth:syzkaller0>
[  124.714943][ T9264] bpq0: entered promiscuous mode
[  124.819122][ T9256] : entered promiscuous mode
[  125.701772][ T9278] validate_nla: 7 callbacks suppressed
[  125.701787][ T9278] netlink: 'syz.0.1173': attribute type 10 has an invalid length.
[  125.708264][ T9278] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  125.713630][ T9278] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  125.734814][ T9282] __nla_validate_parse: 10 callbacks suppressed
[  125.734825][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  125.844808][ T9295] syz_tun: entered promiscuous mode
[  125.853389][ T9295] macsec1: entered allmulticast mode
[  125.856582][ T9295] syz_tun: entered allmulticast mode
[  125.860583][ T9295] syz_tun: left allmulticast mode
[  125.862802][ T9295] syz_tun: left promiscuous mode
[  125.878701][ T9296] delete_channel: no stack
[  125.890600][ T9303] delete_channel: no stack
[  125.921865][ T5873] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  125.928679][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'.
[  126.719041][ T9311] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.780590][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'.
[  126.824573][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  126.829832][ T9319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1186'.
[  126.833888][ T9320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1186'.
[  126.838997][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  126.882057][ T9325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1188'.
[  126.984258][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  127.108685][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1200'.
[  127.129557][ T9354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  127.136120][ T9356] netlink: 'syz.1.1202': attribute type 2 has an invalid length.
[  127.139440][ T9356] netlink: 'syz.1.1202': attribute type 8 has an invalid length.
[  127.257302][ T9371] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.286133][ T9376] netlink: 'syz.2.1209': attribute type 13 has an invalid length.
[  127.429401][ T9388] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  127.829466][ T9426] netlink: 'syz.0.1226': attribute type 13 has an invalid length.
[  128.184970][ T9461] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  128.592029][ T9461] bond7 (unregistering): Released all slaves
[  128.924015][ T9499] netlink: 'syz.2.1252': attribute type 8 has an invalid length.
[  129.070386][ T5313] hid-generic 0005:0C45:06F5.0001: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa
[  129.789058][ T9525] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  130.140379][ T9547] netlink: 'syz.0.1266': attribute type 9 has an invalid length.
[  130.168080][ T9547] hsr0: entered promiscuous mode
[  130.170512][ T9547] macvlan2: entered promiscuous mode
[  130.172449][ T9547] macvlan2: entered allmulticast mode
[  130.177955][ T9547] hsr0: entered allmulticast mode
[  130.180413][ T9547] hsr_slave_0: entered allmulticast mode
[  130.184016][ T9547] hsr_slave_1: entered allmulticast mode
[  130.813190][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  130.998656][ T9577] __nla_validate_parse: 13 callbacks suppressed
[  130.998670][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  131.177628][ T9585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.181055][ T9585] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  131.184684][ T9585] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  131.215843][ T9585] tipc: Resetting bearer <eth:syzkaller0>
[  131.827240][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'.
[  131.834798][ T9646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1301'.
[  131.866247][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'.
[  131.909931][ T9661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.939722][ T9668] netlink: 'syz.0.1309': attribute type 13 has an invalid length.
[  131.961042][ T9672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1307'.
[  132.009242][ T9676] syzkaller1: entered promiscuous mode
[  132.011716][ T9676] syzkaller1: entered allmulticast mode
[  132.017676][ T9676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1311'.
[  132.330509][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.582592][ T9676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.588143][ T9676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.593596][ T9676] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  132.600903][ T9676] bond0 (unregistering): Released all slaves
[  132.872247][ T9700] netlink: 'syz.1.1322': attribute type 13 has an invalid length.
[  132.918862][ T9703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.921450][ T9703] syzkaller0: entered promiscuous mode
[  132.923584][ T9703] syzkaller0: entered allmulticast mode
[  132.936146][ T9703] tipc: Resetting bearer <eth:syzkaller0>
[  132.945499][ T9702] tipc: Resetting bearer <eth:syzkaller0>
[  132.951720][ T9702] tipc: Disabling bearer <eth:syzkaller0>
[  133.092414][ T9709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1325'.
[  133.145258][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'.
[  133.428876][ T9733] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1332'.
[  133.581931][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'.
[  133.668573][ T9747] netlink: 'syz.2.1339': attribute type 5 has an invalid length.
[  133.671230][ T9747] netlink: 'syz.2.1339': attribute type 6 has an invalid length.
[  134.030015][ T9767] netlink: 'syz.1.1341': attribute type 3 has an invalid length.
[  134.275134][ T9785] netlink: 'syz.2.1345': attribute type 1 has an invalid length.
[  134.396495][ T9802] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  134.450152][ T9801] delete_channel: no stack
[  134.731552][ T9820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  134.750474][ T9823] syzkaller0: entered promiscuous mode
[  134.752301][ T9823] syzkaller0: entered allmulticast mode
[  134.755709][ T9822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.771640][ T9824] tipc: Resetting bearer <eth:syzkaller0>
[  134.778654][ T9821] tipc: Resetting bearer <eth:syzkaller0>
[  134.786993][ T9821] tipc: Disabling bearer <eth:syzkaller0>
[  134.857916][ T9830] netlink: 'syz.2.1358': attribute type 13 has an invalid length.
[  135.087729][ T9844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.090761][ T9844] syzkaller0: entered promiscuous mode
[  135.093732][ T9844] syzkaller0: entered allmulticast mode
[  135.712519][ T9865] netlink: 'syz.0.1369': attribute type 21 has an invalid length.
[  135.883037][ T9843] tipc: Resetting bearer <eth:syzkaller0>
[  135.900938][ T9843] tipc: Disabling bearer <eth:syzkaller0>
[  135.909643][ T9884] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.912769][ T9884] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  135.918062][ T9884] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  135.977253][ T9898] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  135.980728][ T9898] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  135.981980][ T9884] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.989960][ T9884] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  135.998006][ T9884] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.016274][ T9900] __nla_validate_parse: 12 callbacks suppressed
[  136.016283][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'.
[  136.101770][ T9884] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.106581][ T9884] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.110257][ T9884] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.148191][ T9884] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.152519][ T9884] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.161645][ T9884] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.240007][ T5907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.242747][ T5907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  136.245818][ T5907] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  136.249485][ T9925] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1387'.
[  136.270573][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.274774][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  136.277438][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  136.280225][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.283510][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  136.286185][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  136.289616][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  136.297214][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.301184][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  136.305644][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  136.360749][ T9937] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1393'.
[  136.437025][ T9950] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1398'.
[  136.475795][ T9958] ieee802154 phy0 wpan0: encryption failed: -22
[  136.501713][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'.
[  136.523396][ T9961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  136.590502][ T9970] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1408'.
[  136.615749][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  136.626557][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'.
[  136.641437][ T9972] bond7: entered promiscuous mode
[  136.645854][ T9972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1409'.
[  136.955556][ T9990] dummy0: entered allmulticast mode
[  136.970793][ T9992] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  137.065176][ T9999] bpq0: left promiscuous mode
[  137.110348][T10006] geneve0: entered promiscuous mode
[  137.936054][T10018] ip6tnl2: entered promiscuous mode
[  137.938491][T10018] ip6tnl2: entered allmulticast mode
[  137.942394][T10018] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  138.178865][T10031] validate_nla: 3 callbacks suppressed
[  138.178878][T10031] netlink: 'syz.1.1432': attribute type 13 has an invalid length.
[  138.474041][T10057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.477403][T10057] syzkaller0: entered promiscuous mode
[  138.479659][T10057] syzkaller0: entered allmulticast mode
[  138.499120][T10057] tipc: Resetting bearer <eth:syzkaller0>
[  138.503170][T10056] tipc: Resetting bearer <eth:syzkaller0>
[  138.521544][T10056] tipc: Disabling bearer <eth:syzkaller0>
[  138.577820][T10063] netlink: 'syz.1.1445': attribute type 6 has an invalid length.
[  138.649101][T10068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  139.690254][T10106] netlink: 'syz.2.1459': attribute type 6 has an invalid length.
[  139.788068][T10112] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  139.935103][T10115] syzkaller0: entered promiscuous mode
[  139.937153][T10115] syzkaller0: entered allmulticast mode
[  140.789046][T10123] syzkaller1: entered promiscuous mode
[  140.791421][T10123] syzkaller1: entered allmulticast mode
[  141.121868][T10154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  141.383727][T10159] __nla_validate_parse: 12 callbacks suppressed
[  141.383742][T10159] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1479'.
[  141.498972][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'.
[  141.517670][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'.
[  141.566621][T10169] netlink: 'syz.0.1482': attribute type 6 has an invalid length.
[  141.847723][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'.
[  141.956455][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'.
[  141.967630][T10197] netlink: 'syz.2.1494': attribute type 6 has an invalid length.
[  142.097684][T10221] netlink: 'syz.0.1502': attribute type 3 has an invalid length.
[  142.114289][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1498'.
[  142.142626][T10229] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1503'.
[  142.411658][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1516'.
[  142.561244][T10270] bridge0: port 3(ipvlan2) entered blocking state
[  142.574898][T10270] bridge0: port 3(ipvlan2) entered disabled state
[  142.577746][T10270] ipvlan2: entered allmulticast mode
[  142.582399][T10270] bridge0: entered allmulticast mode
[  142.587492][T10270] ipvlan2: left allmulticast mode
[  142.589601][T10270] bridge0: left allmulticast mode
[  142.658261][T10274] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.1522'.
[  142.707916][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'.
[  142.731196][T10284] team0: entered promiscuous mode
[  142.735404][T10284] team_slave_0: entered promiscuous mode
[  142.737830][T10284] team_slave_1: entered promiscuous mode
[  142.740204][T10284] geneve0: entered promiscuous mode
[  142.874574][T10295] netlink: 'syz.2.1530': attribute type 6 has an invalid length.
[  142.996242][T10301] bond0: (slave team0): Releasing backup interface
[  142.999407][T10301] tipc: Resetting bearer <eth:team0>
[  143.006146][T10301] tipc: Resetting bearer <eth:team0>
[  143.008473][T10301] tipc: Resetting bearer <eth:team0>
[  143.020995][T10301] bond3: (slave veth3): Releasing active interface
[  143.026508][T10304] xt_policy: too many policy elements
[  143.069612][T10306] tipc: Resetting bearer <eth:syzkaller0>
[  143.486374][T10340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.495485][T10340] syzkaller0: entered promiscuous mode
[  143.502422][T10340] syzkaller0: entered allmulticast mode
[  143.515417][T10340] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  143.540106][T10340] tipc: Resetting bearer <eth:syzkaller0>
[  143.545360][T10339] tipc: Resetting bearer <eth:syzkaller0>
[  143.553924][T10339] tipc: Disabling bearer <eth:syzkaller0>
[  144.127333][T10364] netlink: 'syz.2.1553': attribute type 1 has an invalid length.
[  144.165131][T10364] 8021q: adding VLAN 0 to HW filter on device bond8
[  144.472601][T10383] "syz.2.1560" (10383) uses obsolete ecb(arc4) skcipher
[  144.525943][T10383] !: left allmulticast mode
[  144.569642][T10383] bridge_slave_1: left allmulticast mode
[  144.667399][T10383] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  144.682214][T10383] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  144.686600][T10383] vlan2: left promiscuous mode
[  144.688976][T10383] vlan2: left allmulticast mode
[  144.691174][T10383] hsr_slave_1: left allmulticast mode
[  144.696579][T10383] vxlan0: left promiscuous mode
[  144.698802][T10383] vxlan0: left allmulticast mode
[  144.711646][T10383] bond4: left promiscuous mode
[  144.714087][T10383] bond4: left allmulticast mode
[  144.851602][T10383] macsec1: left promiscuous mode
[  144.862979][T10383] macsec1: left allmulticast mode
[  144.915597][T10383] ipip0: left promiscuous mode
[  144.922251][T10383] bond7: left promiscuous mode
[  144.934538][T10383] geneve0: left promiscuous mode
[  144.946713][ T5873] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.950111][ T5873] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.957100][ T5873] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.960068][ T5873] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.967686][ T5873] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.970800][ T5873] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.973832][ T5873] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.977004][ T5873] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.243623][T10421] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  145.324356][T10429] netlink: 'syz.1.1572': attribute type 2 has an invalid length.
[  145.570758][T10457] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  145.653532][T10460] ieee802154 phy0 wpan0: encryption failed: -126
[  145.859106][T10493] ieee802154 phy0 wpan0: encryption failed: -22
[  146.128028][T10511] netlink: 'syz.1.1600': attribute type 13 has an invalid length.
[  146.146119][T10514] netlink: 'syz.0.1602': attribute type 6 has an invalid length.
[  146.308529][T10528] pimreg: entered allmulticast mode
[  146.325024][T10528] pimreg: left allmulticast mode
[  146.466940][T10535] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:128
[  146.470405][T10535] netlink: 'syz.1.1608': attribute type 15 has an invalid length.
[  146.474314][T10535] __nla_validate_parse: 29 callbacks suppressed
[  146.474324][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1608'.
[  146.577839][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'.
[  146.688345][T10550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1613'.
[  146.718392][T10552] netlink: 'syz.1.1615': attribute type 13 has an invalid length.
[  146.742363][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'.
[  146.854956][T10566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.858351][T10566] syzkaller0: entered promiscuous mode
[  146.865930][T10566] syzkaller0: entered allmulticast mode
[  146.883938][T10566] tipc: Resetting bearer <eth:syzkaller0>
[  146.888129][T10565] tipc: Resetting bearer <eth:syzkaller0>
[  146.898869][T10565] tipc: Disabling bearer <eth:syzkaller0>
[  146.928155][T10572] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1623'.
[  146.974200][T10575] netlink: 'syz.2.1624': attribute type 13 has an invalid length.
[  147.028212][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'.
[  147.050646][T10577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.057714][T10577] syzkaller0: entered promiscuous mode
[  147.059663][T10577] syzkaller0: entered allmulticast mode
[  147.080964][T10577] syzkaller0: mtu less than device minimum
[  147.097677][T10576] tipc: Resetting bearer <eth:syzkaller0>
[  147.109849][T10576] tipc: Disabling bearer <eth:syzkaller0>
[  147.212350][T10599] netlink: 'syz.0.1633': attribute type 6 has an invalid length.
[  147.269201][T10606] netlink: 'syz.1.1636': attribute type 13 has an invalid length.
[  147.369325][T10618] netlink: 'syz.2.1632': attribute type 13 has an invalid length.
[  147.421242][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'.
[  147.525760][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.562718][T10637] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1649'.
[  147.602524][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'.
[  147.784232][T10661] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.886500][T10670] tipc: Enabled bearer <ib:team0>, priority 0
[  147.928148][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'.
[  147.936981][T10672] geneve1: entered promiscuous mode
[  148.900907][T10764] ip6erspan0: entered allmulticast mode
[  148.927801][T10766] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  149.176282][T10792] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  149.278505][T10803] validate_nla: 9 callbacks suppressed
[  149.278515][T10803] netlink: 'syz.1.1713': attribute type 13 has an invalid length.
[  149.419034][T10825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  149.429534][T10820] batadv_slave_1: entered promiscuous mode
[  149.487400][T10819] batadv_slave_1: left promiscuous mode
[  149.623612][T10846] pim6reg1: entered promiscuous mode
[  149.625523][T10846] pim6reg1: entered allmulticast mode
[  149.647759][T10852] netlink: 'syz.1.1729': attribute type 30 has an invalid length.
[  149.651527][T10852] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  149.655912][T10852] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  149.951838][T10887] syzkaller0: entered promiscuous mode
[  149.954628][T10887] syzkaller0: entered allmulticast mode
[  149.992497][T10890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  150.095682][T10895] netlink: 'syz.1.1743': attribute type 13 has an invalid length.
[  150.130578][T10897] syzkaller0: entered promiscuous mode
[  150.133281][T10897] syzkaller0: entered allmulticast mode
[  150.267422][T10909] netlink: 'syz.2.1749': attribute type 13 has an invalid length.
[  150.270855][T10909] netlink: 'syz.2.1749': attribute type 12 has an invalid length.
[  150.451525][T10918] syzkaller0: entered promiscuous mode
[  150.454709][T10918] syzkaller0: entered allmulticast mode
[  151.389018][T10944] ip6gre1: entered promiscuous mode
[  151.390957][T10944] ip6gre1: entered allmulticast mode
[  151.425817][T10950] netlink: 'syz.2.1761': attribute type 13 has an invalid length.
[  151.540397][T10970] netlink: 'syz.0.1770': attribute type 13 has an invalid length.
[  151.558438][T10971] __nla_validate_parse: 22 callbacks suppressed
[  151.558476][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1769'.
[  151.615529][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'.
[  151.619506][T10980] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  151.665371][T10986] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1775'.
[  151.741092][T10998] netlink: 'syz.1.1780': attribute type 13 has an invalid length.
[  151.802852][T11001] netlink: 'syz.1.1782': attribute type 9 has an invalid length.
[  151.805950][T11001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1782'.
[  151.832591][T11001] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  151.837722][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  151.927443][T11010] netlink: 'syz.1.1786': attribute type 1 has an invalid length.
[  151.929985][T11010] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1786'.
[  151.933781][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'.
[  151.992818][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'.
[  152.037735][T11022] syzkaller1: entered promiscuous mode
[  152.040040][T11022] syzkaller1: entered allmulticast mode
[  152.050529][T11022] syzkaller1: left promiscuous mode
[  152.060481][T11022] syzkaller1: left allmulticast mode
[  152.141119][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'.
[  152.145380][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'.
[  152.320151][T11054] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1803'.
[  152.888800][ T7602] IPVS: starting estimator thread 0...
[  152.973135][T11114] IPVS: using max 82 ests per chain, 196800 per kthread
[  153.099625][ T5855] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  172.270682][T11177] __nla_validate_parse: 47 callbacks suppressed
[  172.270691][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'.
[  172.277845][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'.
[  172.287669][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'.
[  172.290931][T11177] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  172.314481][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1844'.
[  172.346878][T11186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.441599][T11192] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  172.482511][T11195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.487624][T11195] syzkaller0: entered promiscuous mode
[  172.489574][T11195] syzkaller0: entered allmulticast mode
[  172.500541][T11195] tipc: Resetting bearer <eth:syzkaller0>
[  172.510580][T11195] validate_nla: 3 callbacks suppressed
[  172.510587][T11195] netlink: 'syz.2.1849': attribute type 1 has an invalid length.
[  172.519463][T11195] netlink: 'syz.2.1849': attribute type 4 has an invalid length.
[  172.524877][T11193] tipc: Resetting bearer <eth:syzkaller0>
[  172.534558][T11193] tipc: Disabling bearer <eth:syzkaller0>
[  172.605434][T11202] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.632642][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  180.493232][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  191.121967][T11235] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  191.350336][T11246] netlink: 'syz.1.1864': attribute type 1 has an invalid length.
[  191.354393][T11246] netlink: 'syz.1.1864': attribute type 2 has an invalid length.
[  191.358364][T11246] bridge0: port 1(syz_tun) entered blocking state
[  191.362207][T11246] bridge0: port 1(syz_tun) entered disabled state
[  191.365305][T11246] syz_tun: entered allmulticast mode
[  191.368660][T11246] syz_tun: entered promiscuous mode
[  191.372802][T11246] bridge0: port 1(syz_tun) entered blocking state
[  191.375863][T11246] bridge0: port 1(syz_tun) entered forwarding state
[  191.423285][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'.
[  191.885059][T11278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1871'.
[  191.888829][T11277] batadv_slave_1: entered promiscuous mode
[  191.910131][T11274] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1873'.
[  191.951758][T11277] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1874'.
[  191.960892][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  191.965972][T11277] syz_tun: left allmulticast mode
[  191.973594][T11277] syz_tun: left promiscuous mode
[  191.977949][T11277] bridge0: port 1(syz_tun) entered disabled state
[  192.067609][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'.
[  192.135608][T11276] batadv_slave_1: left promiscuous mode
[  192.298547][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'.
[  192.449884][T11311] : entered promiscuous mode
[  192.487212][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'.
[  192.775326][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  192.779467][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1891'.
[  192.785712][T11327] netlink: 'syz.0.1891': attribute type 7 has an invalid length.
[  192.790321][T11327] netlink: 'syz.0.1891': attribute type 8 has an invalid length.
[  193.040223][T11342] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.139309][T11349] bond0: option mode: unable to set because the bond device is up
[  193.271970][T11368] batadv_slave_1: entered promiscuous mode
[  193.424984][T11367] batadv_slave_1: left promiscuous mode
[  193.457089][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.768325][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.781438][T11434] openvswitch: netlink: Tunnel attr 6 has unexpected len 11 expected 0
[  193.898703][T11449] netlink: 'syz.0.1924': attribute type 9 has an invalid length.
[  194.007629][T11457] batadv_slave_1: entered promiscuous mode
[  194.106601][T11468] bridge_slave_1: left allmulticast mode
[  194.112511][T11468] bridge_slave_1: left promiscuous mode
[  194.116901][T11468] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.126117][T11468] bridge_slave_0: left allmulticast mode
[  194.128588][T11468] bridge_slave_0: left promiscuous mode
[  194.132434][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.287361][T11489] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  195.023916][T11527] netlink: 'syz.1.1951': attribute type 1 has an invalid length.
[  195.026915][T11527] netlink: 'syz.1.1951': attribute type 2 has an invalid length.
[  195.033380][T11527] netlink: 'syz.1.1951': attribute type 1 has an invalid length.
[  195.036592][T11527] netlink: 'syz.1.1951': attribute type 2 has an invalid length.
[  195.080103][T11532] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  195.369329][T11564] rdma_rxe: rxe_newlink: failed to add macvlan1
[  195.434635][T11569] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  195.440185][T11569] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  195.445406][T11569] syzkaller0: entered promiscuous mode
[  195.448361][T11569] syzkaller0: entered allmulticast mode
[  195.452840][T11573] netlink: 'syz.2.1963': attribute type 1 has an invalid length.
[  195.636653][T11594] batadv_slave_1: entered promiscuous mode
[  195.798643][T11593] batadv_slave_1: left promiscuous mode
[  196.637086][T11674] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  196.817350][T11679] __nla_validate_parse: 25 callbacks suppressed
[  196.817360][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2001'.
[  196.887009][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'.
[  197.092118][T11696] batadv_slave_1: entered promiscuous mode
[  197.156963][T11696] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2007'.
[  197.266510][T11695] batadv_slave_1: left promiscuous mode
[  197.397593][T11704] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  197.440353][T11704] validate_nla: 3 callbacks suppressed
[  197.440362][T11704] netlink: 'syz.1.2009': attribute type 10 has an invalid length.
[  197.445170][T11704] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  197.451258][T11704] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  197.908184][   T33] audit: type=1804 audit(1755539137.073:3): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2018" name="/newroot/673/cgroup.controllers" dev="tmpfs" ino=3434 res=1 errno=0
[  197.924319][   T33] audit: type=1800 audit(1755539137.073:4): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2018" name="cgroup.controllers" dev="tmpfs" ino=3434 res=0 errno=0
[  197.936029][   T33] audit: type=1800 audit(1755539137.093:5): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2018" name="cgroup.controllers" dev="tmpfs" ino=3434 res=0 errno=0
[  197.966088][T11734] batadv_slave_1: entered promiscuous mode
[  198.082448][T11655] Set syz1 is full, maxelem 65536 reached
[  198.087378][T11737] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2020'.
[  198.092612][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'.
[  198.140457][T11748] netlink: 'syz.0.2023': attribute type 32 has an invalid length.
[  198.144731][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'.
[  198.148097][T11748] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  198.166366][T11733] batadv_slave_1: left promiscuous mode
[  198.252817][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'.
[  198.329500][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2029'.
[  198.336528][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'.
[  198.380027][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'.
[  198.386143][T11777] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  198.434118][T11777] 8021q: adding VLAN 0 to HW filter on device bond5
[  198.450849][T11788] bond5: (slave geneve3): making interface the new active one
[  198.461544][T11788] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  198.570608][T11803] batadv_slave_1: entered promiscuous mode
[  198.673714][T11802] batadv_slave_1: left promiscuous mode
[  198.694292][T11816] nbd: socks must be embedded in a SOCK_ITEM attr
[  198.701856][T11823] block nbd64: NBD_DISCONNECT
[  198.818973][T11840] : renamed from batadv_slave_1 (while UP)
[  199.215485][T11887] netlink: 'syz.0.2063': attribute type 13 has an invalid length.
[  199.572139][T11887] tipc: Resetting bearer <eth:syzkaller0>
[  199.578326][T11887] hsr0: left allmulticast mode
[  199.580536][T11887] hsr_slave_0: left allmulticast mode
[  199.583317][T11887] hsr_slave_1: left allmulticast mode
[  199.601564][ T5907] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.604639][ T5907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  199.607710][ T5907] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.611873][ T5907] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  199.619838][ T5907] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.626959][ T5907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  199.633112][ T5907] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.638465][ T5907] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  199.644166][ T5907] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.649006][ T5907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  199.652694][ T5907] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.656995][ T5907] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  199.661209][ T5907] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.666157][ T5907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  199.669526][ T5907] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.673618][ T5907] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  199.813418][T11900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.874642][T11907] syzkaller1: entered promiscuous mode
[  199.876921][T11907] syzkaller1: entered allmulticast mode
[  200.304719][T11944] netlink: 'syz.1.2082': attribute type 21 has an invalid length.
[  200.800158][T12001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.803643][T12001] IPv6: NLM_F_CREATE should be set when creating new route
[  200.806865][T12001] IPv6: NLM_F_CREATE should be set when creating new route
[  200.810017][T12001] IPv6: NLM_F_CREATE should be set when creating new route
[  200.814416][T12001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.818056][T12001] netlink: 'syz.2.2103': attribute type 10 has an invalid length.
[  200.821781][T12001] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  200.932848][T12012] netlink: 'syz.0.2108': attribute type 13 has an invalid length.
[  200.939938][ T5907] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20001 - 0
[  200.944212][ T5907] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20001 - 0
[  200.947424][ T5907] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20001 - 0
[  200.950339][ T5907] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20001 - 0
[  201.171096][T12026] can: request_module (can-proto-0) failed.
[  201.228924][T12032] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  201.441755][T12048] netlink: 'syz.0.2119': attribute type 10 has an invalid length.
[  201.455267][T12044] netlink: 'syz.0.2119': attribute type 4 has an invalid length.
[  201.580344][T12054] Bluetooth: MGMT ver 1.23
[  201.883462][T12071] bond5: (slave vti0): Releasing backup interface
[  202.548053][T12106] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  202.718336][T12109] __nla_validate_parse: 16 callbacks suppressed
[  202.718346][T12109] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2140'.
[  202.729338][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  202.765962][T12116] validate_nla: 1 callbacks suppressed
[  202.765972][T12116] netlink: 'syz.2.2141': attribute type 1 has an invalid length.
[  202.770750][T12116] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2141'.
[  202.916111][T12125] netlink: 'syz.2.2143': attribute type 1 has an invalid length.
[  203.105703][T12131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.142540][T12133] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  203.187495][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'.
[  203.295599][T12143] netlink: 'syz.0.2153': attribute type 1 has an invalid length.
[  203.327745][T12146] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2154'.
[  203.394949][T12154] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  203.422609][T12156] netlink: 'syz.0.2157': attribute type 10 has an invalid length.
[  203.426159][T12156] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  203.523317][T12160] netlink: 'syz.0.2159': attribute type 3 has an invalid length.
[  204.076519][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'.
[  204.080356][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'.
[  204.112046][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'.
[  204.116163][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'.
[  204.150098][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'.
[  204.974187][T12203] 8021q: adding VLAN 0 to HW filter on device bond7
[  205.296107][T12223] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.867981][T12266] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  205.907962][T12271] syzkaller1: entered promiscuous mode
[  205.910070][T12271] syzkaller1: entered allmulticast mode
[  205.935026][T12274] netlink: 'syz.0.2194': attribute type 12 has an invalid length.
[  206.179411][T12281] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  207.130532][T12318] netlink: 'syz.0.2207': attribute type 1 has an invalid length.
[  207.219269][T12327] netlink: 'syz.2.2210': attribute type 15 has an invalid length.
[  207.793310][T12353] nbd1: detected capacity change from 0 to 63
[  207.798818][T12358] block nbd1: NBD_DISCONNECT
[  207.800770][T12358] block nbd1: Disconnected due to user request.
[  207.804535][T12358] block nbd1: shutting down sockets
[  207.809400][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.812450][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  207.815849][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.818847][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  207.821608][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.824786][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  207.827467][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.830486][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  207.836869][T12248] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.841732][T12248] Buffer I/O error on dev nbd1, logical block 0, async page read
[  207.844805][T12248] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.848512][T12248] Buffer I/O error on dev nbd1, logical block 1, async page read
[  207.851762][T12248] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.858361][T12248] Buffer I/O error on dev nbd1, logical block 2, async page read
[  207.863201][T12248] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.866962][T12248] Buffer I/O error on dev nbd1, logical block 3, async page read
[  207.871210][T12248] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.876146][T12248] Buffer I/O error on dev nbd1, logical block 0, async page read
[  207.879710][T12248] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.883358][T12248] Buffer I/O error on dev nbd1, logical block 1, async page read
[  207.889628][T12248] ldm_validate_partition_table(): Disk read failed.
[  207.894323][T12248] Dev nbd1: unable to read RDB block 0
[  207.897723][T12248]  nbd1: unable to read partition table
[  207.906164][T12248] ldm_validate_partition_table(): Disk read failed.
[  207.911253][T12248] Dev nbd1: unable to read RDB block 0
[  207.918529][T12248]  nbd1: unable to read partition table
[  207.956801][ T9859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.959889][ T9859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.017319][T12368] netlink: 'syz.1.2224': attribute type 1 has an invalid length.
[  208.021175][T12368] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  208.061422][T12374] __nla_validate_parse: 11 callbacks suppressed
[  208.061432][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'.
[  208.086281][T12374] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  208.386529][T12402] team_slave_0: left promiscuous mode
[  208.389398][T12402] team0: Port device team_slave_0 removed
[  208.392185][T12402] team_slave_1: left promiscuous mode
[  208.398372][T12402] team0: Port device team_slave_1 removed
[  208.400604][T12402] geneve0: left promiscuous mode
[  208.403289][T12402] team0: Port device geneve0 removed
[  208.405664][T12402] bond2: (slave bridge1): Releasing backup interface
[  208.407915][T12402] bond2: (slave bridge1): the permanent HWaddr of slave - fe:3f:ce:25:b2:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  208.414913][T12402] bridge1: left promiscuous mode
[  208.416870][T12402] bond2: (slave bridge2): making interface the new active one
[  208.419330][T12402] bridge2: entered promiscuous mode
[  208.422677][T12402] bond2: (slave bridge2): Releasing backup interface
[  208.425413][T12402] bridge2: left promiscuous mode
[  208.428573][T12402] bond4: (slave veth3): Releasing active interface
[  208.434049][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2235'.
[  208.435549][T12402] netlink: 'syz.0.2236': attribute type 10 has an invalid length.
[  208.476622][T12402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.480502][T12402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.929465][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'.
[  208.932578][T12431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.216057][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'.
[  209.219966][T12449] nbd: must specify a size in bytes for the device
[  209.302835][T12457] netlink: 'syz.1.2256': attribute type 6 has an invalid length.
[  209.333503][T12461] sctp: [Deprecated]: syz.0.2258 (pid 12461) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.333503][T12461] Use struct sctp_sack_info instead
[  209.341334][T12461] bond0: Device is already in use.
[  209.373847][T12463] netlink: 'syz.1.2259': attribute type 6 has an invalid length.
[  209.397994][T12469] netlink: 'syz.1.2262': attribute type 9 has an invalid length.
[  209.471460][T12474] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  209.500901][T12474] syzkaller0: entered promiscuous mode
[  209.504598][T12474] syzkaller0: entered allmulticast mode
[  209.506739][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'.
[  209.510254][T12471] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2261'.
[  209.517586][T12471] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2261'.
[  209.671772][T12482] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2265'.
[  210.271863][T12490] netlink: 'syz.0.2268': attribute type 13 has an invalid length.
[  210.275439][T12490] netlink: 'syz.0.2268': attribute type 17 has an invalid length.
[  210.471913][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'.
[  211.214708][T12490] team0: left promiscuous mode
[  211.216848][T12490] 8021q: adding VLAN 0 to HW filter on device team0
[  211.222345][T12490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.229759][T12501] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  211.341951][T12506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'.
[  211.453864][T12515] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  212.232386][T12587] openvswitch: netlink: IPv4 tun info is not correct
[  213.007955][T12618] vxcan1: entered allmulticast mode
[  213.136943][T12630] __nla_validate_parse: 8 callbacks suppressed
[  213.136955][T12630] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2310'.
[  213.157917][T12626] IPVS: Scheduler module ip_vs_sip not found
[  213.174976][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'.
[  213.426101][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2321'.
[  213.430023][T12663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2321'.
[  213.489330][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'.
[  213.585198][T12679] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  213.594114][T12679] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  213.964491][T12703] ieee802154 phy0 wpan0: encryption failed: -126
[  214.050052][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'.
[  214.056051][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'.
[  214.158598][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2338'.
[  214.400945][T12724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  214.418864][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'.
[  215.420673][T12754] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  215.903970][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'.
[  215.956311][T12771] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  216.030240][T12775] netlink: 'syz.2.2357': attribute type 10 has an invalid length.
[  216.048627][T12775] team0: Device ipvlan1 failed to register rx_handler
[  216.144902][T12781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.301549][T12788] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.216135][T12855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.416851][T12863] v: renamed from ip6_vti0 (while UP)
[  218.262643][T12891] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  218.312828][T12901] __nla_validate_parse: 12 callbacks suppressed
[  218.363352][T12901] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2392'.
[  219.467776][T12935] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2404'.
[  219.482296][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'.
[  219.486539][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'.
[  219.506544][T12935] netlink: 'syz.2.2404': attribute type 1 has an invalid length.
[  219.569400][T12941] sctp: [Deprecated]: syz.2.2407 (pid 12941) Use of int in max_burst socket option deprecated.
[  219.569400][T12941] Use struct sctp_assoc_value instead
[  219.633114][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'.
[  219.710670][T12956] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2411'.
[  219.879026][T12966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.882291][T12966] IPv6: NLM_F_CREATE should be set when creating new route
[  219.885392][T12966] IPv6: NLM_F_CREATE should be set when creating new route
[  219.890770][T12966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.938767][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2416'.
[  220.570380][T13009] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2429'.
[  220.662277][T13012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2430'.
[  220.925499][T13035] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2437'.
[  221.497390][T13072] sctp: [Deprecated]: syz.0.2451 (pid 13072) Use of int in max_burst socket option deprecated.
[  221.497390][T13072] Use struct sctp_assoc_value instead
[  221.970798][T13108] netlink: 'syz.0.2463': attribute type 3 has an invalid length.
[  222.057719][T13113] bond7: entered promiscuous mode
[  222.843559][T13128] netlink: 'syz.0.2469': attribute type 1 has an invalid length.
[  223.095750][T13144] netlink: 'syz.0.2472': attribute type 17 has an invalid length.
[  223.098584][T13144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.111273][T13138] netlink: 'syz.2.2471': attribute type 8 has an invalid length.
[  223.338427][T13162] __nla_validate_parse: 20 callbacks suppressed
[  223.338436][T13162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2473'.
[  223.345708][T13161] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  223.512188][T13170] syz.0.2481 (13170) used greatest stack depth: 19544 bytes left
[  223.754251][T13185] netlink: del zone limit has 8 unknown bytes
[  223.989152][T13183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2486'.
[  224.237908][T13205] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2494'.
[  224.295706][T13212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2495'.
[  224.302949][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'.
[  224.511278][T13221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'.
[  224.934231][T13224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.155960][T13234] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2499'.
[  225.160611][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2499'.
Connection to localhost closed by remote host.
[  226.150074][T12865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.155547][T12865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.159903][T12865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  226.224062][T12865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.228336][T12865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.232532][T12865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  226.304459][T12865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.308894][T12865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.314692][T12865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  226.389567][T12865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.394140][T12865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.397920][T12865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  226.707296][T12865] bond5 (unregistering): (slave geneve3): Releasing active interface
[  226.987239][T12865] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  226.998460][T12865] bond0 (unregistering): Released all slaves
[  227.009826][T12865] bond1 (unregistering): Released all slaves
[  227.080912][T12865] bond2 (unregistering): Released all slaves
[  227.137676][T12865] bond3 (unregistering): Released all slaves
[  227.144054][T12865] bond4 (unregistering): Released all slaves
[  227.201400][T12865] bond5 (unregistering): Released all slaves
[  227.210322][T12865] bond6 (unregistering): Released all slaves
[  227.270832][T12865] bond7 (unregistering): Released all slaves
[  227.409439][T12865] tipc: Disabling bearer <eth:team0>
[  227.414450][T12865] tipc: Disabling bearer <ib:team0>
[  227.416965][T12865] tipc: Left network mode
[  227.832094][T12865] hsr_slave_0: left promiscuous mode
[  227.834693][T12865] hsr_slave_1: left promiscuous mode
[  227.839076][T12865] veth1_macvtap: left promiscuous mode
[  227.841093][T12865] veth0_macvtap: left promiscuous mode
[  228.525879][T12865] ------------[ cut here ]------------
[  228.528287][T12865] WARNING: CPU: 0 PID: 12865 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x289/0x2f0
[  228.532347][T12865] Modules linked in:
[  228.534521][T12865] CPU: 0 UID: 0 PID: 12865 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  228.540309][T12865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.544850][T12865] Workqueue: netns cleanup_net
[  228.546920][T12865] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  228.549142][T12865] Code: 41 5f 5d e9 69 e3 e1 f7 e8 44 b9 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 36 b9 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 28 b9 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 0f b9
[  228.557558][T12865] RSP: 0018:ffffc90009a87898 EFLAGS: 00010293
[  228.560366][T12865] RAX: ffffffff8a21f268 RBX: ffff888104c8c880 RCX: ffff88801f2e0000
[  228.564232][T12865] RDX: 0000000000000000 RSI: ffffffff8d9b6e8f RDI: ffffffff8be33400
[  228.567592][T12865] RBP: 0000000000000040 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  228.570931][T12865] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 1ffff11020991ba4
[  228.574785][T12865] R13: dffffc0000000000 R14: ffff888104c8dd20 R15: ffff888104bc8c00
[  228.578462][T12865] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  228.582228][T12865] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  228.585500][T12865] CR2: 0000200001000000 CR3: 000000000df36000 CR4: 00000000000006f0
[  228.588898][T12865] Call Trace:
[  228.590339][T12865]  <TASK>
[  228.591622][T12865]  xfrm_net_exit+0x2d/0x70
[  228.593884][T12865]  ops_undo_list+0x49a/0x990
[  228.595823][T12865]  ? __pfx_ops_undo_list+0x10/0x10
[  228.598033][T12865]  ? do_raw_spin_unlock+0x4d/0x240
[  228.600236][T12865]  cleanup_net+0x4c5/0x800
[  228.602152][T12865]  ? __pfx_cleanup_net+0x10/0x10
[  228.604415][T12865]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.606636][T12865]  ? process_scheduled_works+0x9ef/0x17b0
[  228.609071][T12865]  ? process_scheduled_works+0x9ef/0x17b0
[  228.611303][T12865]  process_scheduled_works+0xae1/0x17b0
[  228.613275][T12865]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.615328][T12865]  worker_thread+0x8a0/0xda0
[  228.617415][T12865]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.620152][T12865]  ? __kthread_parkme+0x7b/0x200
[  228.622357][T12865]  kthread+0x711/0x8a0
[  228.624327][T12865]  ? __pfx_worker_thread+0x10/0x10
[  228.626551][T12865]  ? __pfx_kthread+0x10/0x10
[  228.628568][T12865]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.630810][T12865]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.633238][T12865]  ? __pfx_kthread+0x10/0x10
[  228.635255][T12865]  ret_from_fork+0x3fc/0x770
[  228.637262][T12865]  ? __pfx_ret_from_fork+0x10/0x10
[  228.639479][T12865]  ? __switch_to_asm+0x39/0x70
[  228.641572][T12865]  ? __switch_to_asm+0x33/0x70
[  228.643810][T12865]  ? __pfx_kthread+0x10/0x10
[  228.645787][T12865]  ret_from_fork_asm+0x1a/0x30
[  228.647824][T12865]  </TASK>
[  228.649224][T12865] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  228.652318][T12865] CPU: 0 UID: 0 PID: 12865 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  228.657728][T12865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.661853][T12865] Workqueue: netns cleanup_net
[  228.663844][T12865] Call Trace:
[  228.665278][T12865]  <TASK>
[  228.666540][T12865]  dump_stack_lvl+0x99/0x250
[  228.668469][T12865]  ? __asan_memcpy+0x40/0x70
[  228.670440][T12865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.672714][T12865]  ? __pfx__printk+0x10/0x10
[  228.674745][T12865]  vpanic+0x281/0x750
[  228.676498][T12865]  ? __pfx__printk+0x10/0x10
[  228.678529][T12865]  ? __pfx_vpanic+0x10/0x10
[  228.680575][T12865]  ? is_bpf_text_address+0x292/0x2b0
[  228.682398][T12865]  panic+0xb9/0xc0
[  228.683709][T12865]  ? __pfx_panic+0x10/0x10
[  228.685254][T12865]  __warn+0x31b/0x4b0
[  228.686619][T12865]  ? xfrm_state_fini+0x289/0x2f0
[  228.688307][T12865]  ? xfrm_state_fini+0x289/0x2f0
[  228.689881][T12865]  report_bug+0x2be/0x4f0
[  228.691341][T12865]  ? xfrm_state_fini+0x289/0x2f0
[  228.692921][T12865]  ? xfrm_state_fini+0x289/0x2f0
[  228.694524][T12865]  ? xfrm_state_fini+0x28b/0x2f0
[  228.696172][T12865]  handle_bug+0x84/0x160
[  228.697545][T12865]  exc_invalid_op+0x1a/0x50
[  228.699026][T12865]  asm_exc_invalid_op+0x1a/0x20
[  228.700583][T12865] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  228.702440][T12865] Code: 41 5f 5d e9 69 e3 e1 f7 e8 44 b9 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 36 b9 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 28 b9 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 0f b9
[  228.709400][T12865] RSP: 0018:ffffc90009a87898 EFLAGS: 00010293
[  228.711565][T12865] RAX: ffffffff8a21f268 RBX: ffff888104c8c880 RCX: ffff88801f2e0000
[  228.714767][T12865] RDX: 0000000000000000 RSI: ffffffff8d9b6e8f RDI: ffffffff8be33400
[  228.717740][T12865] RBP: 0000000000000040 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  228.720868][T12865] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 1ffff11020991ba4
[  228.724104][T12865] R13: dffffc0000000000 R14: ffff888104c8dd20 R15: ffff888104bc8c00
[  228.727341][T12865]  ? xfrm_state_fini+0x288/0x2f0
[  228.729381][T12865]  ? xfrm_state_fini+0x288/0x2f0
[  228.731509][T12865]  xfrm_net_exit+0x2d/0x70
[  228.733430][T12865]  ops_undo_list+0x49a/0x990
[  228.735435][T12865]  ? __pfx_ops_undo_list+0x10/0x10
[  228.737218][T12865]  ? do_raw_spin_unlock+0x4d/0x240
[  228.739340][T12865]  cleanup_net+0x4c5/0x800
[  228.741181][T12865]  ? __pfx_cleanup_net+0x10/0x10
[  228.743337][T12865]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.745523][T12865]  ? process_scheduled_works+0x9ef/0x17b0
[  228.748021][T12865]  ? process_scheduled_works+0x9ef/0x17b0
[  228.750414][T12865]  process_scheduled_works+0xae1/0x17b0
[  228.752729][T12865]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.755232][T12865]  worker_thread+0x8a0/0xda0
[  228.757091][T12865]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.759655][T12865]  ? __kthread_parkme+0x7b/0x200
[  228.761672][T12865]  kthread+0x711/0x8a0
[  228.763412][T12865]  ? __pfx_worker_thread+0x10/0x10
[  228.765597][T12865]  ? __pfx_kthread+0x10/0x10
[  228.767593][T12865]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.769800][T12865]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.771930][T12865]  ? __pfx_kthread+0x10/0x10
[  228.773813][T12865]  ret_from_fork+0x3fc/0x770
[  228.775772][T12865]  ? __pfx_ret_from_fork+0x10/0x10
[  228.777782][T12865]  ? __switch_to_asm+0x39/0x70
[  228.779777][T12865]  ? __switch_to_asm+0x33/0x70
[  228.781801][T12865]  ? __pfx_kthread+0x10/0x10
[  228.783783][T12865]  ret_from_fork_asm+0x1a/0x30
[  228.785847][T12865]  </TASK>
[  228.787928][T12865] Kernel Offset: disabled
[  228.789803][T12865] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:46:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90009a87030
R8 =ffff888021198237 R9 =1ffff11004233046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98e4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200001000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=9dfb1353e97ef000 RBX=ffffffff81968308 RCX=9dfb1353e97ef000 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000b96030 CR3=000000002107c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
