last executing test programs:

1.099416788s ago: executing program 2 (id=5754):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010003b15000000f80000000000cb9b00", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616ec3ff00180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000814a020008001c00", @ANYRES32=r1, @ANYBLOB], 0x50}}, 0x8000)

830.443925ms ago: executing program 2 (id=5757):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f00000008c0)=[{&(0x7f0000000600)="6090a0c1a3efd91f97a28e47fed3b2c0c010fe36a83f43183f5065cae2a38b1f366d166df62e24e445ff652b2088edb2af34c99b6f25a4fb0137d8070c4fe0a63250fe728c68b7a5b1336895988406a7f6211ff3de5e1b0561a165c9249b0552f4f52d37a37e372cf49c86afb00db2baa400"/123}, {&(0x7f0000000140)="51e91886f7f13ece7075a9176632694b4e7cf2001396dc8ac2a7f6dbc1037f48b2549529d72d1fe24ce0608d08c79692d6e5e5c2629ed5eebc9b"}, {&(0x7f0000000680)="1808b5007e536f9757c820531253d8b3c493cebd99da2a0f141c634d0c153de7c1cf465327c0125fde15bb0cade2ab062045a2ed5301ebdb94ba47509331664fe2b2f57ceb20a0ddab49d1eb45ec1066f40fc1a8107fd30facc4f342b57bc542e62521c58671e9d79c5a0fbc3b946da7d39be501024b2d2f3aa2da461b06711676f498cd5c56d02f53e13dbf001af6a56c1e387260f59ea169904f0cb2"}, {&(0x7f0000000240)="fc51316467c8f4a3f35ac8b965a9228d2b106fc7203f5b3c8e382951e35becf76bb0dd7551d3427d7f5ecafb6b9f50c36e"}, {&(0x7f0000000740)="bb0f2fc18102558dc368e889177bc4c3f055a8ff988e836af516a1b9d0c1ff24c07b7c421e5b4c165603c1f0e7681188070b03724f9104d739cea8ab325ac149ca1e29ae3ae204ab9f73d4375a470aec9e74c535a9e0d6bbefcb966461baaae3291fbb0103b8125e76aa0bec4817ca78eb40849fc635800e4cfde492a49fa69d2be0a530a4d01eeb"}, {&(0x7f0000000a80)="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"}]}, 0x48050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x24004800)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

662.041922ms ago: executing program 2 (id=5761):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x8, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000090a010400000000000000000000200009000200737a3100000000140000001000010000000000000000000084000a00"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000d8a5383940a0c45f00af73ab69191fab3e45f1b72eb072d698084cbb59c6be67caab2ec1003792cddb5b0495de35", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r8, &(0x7f0000000040), 0x2)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000080000000b000000000000006c383596da0505c64eb08e5287ac3ad4240bafe794e4da819f3666a2061b3c6150679fde45d74c7264aac6543cdc65fa0d5c4977b009898286ed3a77ecaacea78e0ea6ae8e175750e79e8e683e5805aa08dacecb9a0910673266eb35392c3a900796d4eae6a6b330a9c171e3fb9e6e1987ff0ad4ad910ee91676ac4de367e88927aab9c3bdff9f1d479dd7ec170b1028fe547cfa2058746ac4f5", @ANYBLOB="44e8accb8fae4f0a3d499d", @ANYRES32=r8, @ANYRES64, @ANYRES32, @ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20)
pipe(&(0x7f0000000440)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6   \x00'}, 0x20)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000050000000200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="85101d00faffff18c89dfff197d33a80e4f9741e1cfd610affaf89175742a42d820b7b8906beb6dd702581c14a1a7bce1673de3d8714da4834cb4992e8a7c85a67a8beb588a7557ae4fe7a6e57715e01f8a683c4ebcbb21ab9b6e0792577f925fab5"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x22, '\x00', r2, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0x4, 0x4}, 0x10, 0x0, r4, 0x0, &(0x7f0000000600)=[r5, r11, r10, r12, r13]}, 0x94)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05"], 0x1c}}, 0x0)
r14 = socket(0x8, 0x80000, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x4810)

559.664004ms ago: executing program 2 (id=5763):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x34, r1, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x23, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xe, 0xc, 0x2, 0x27a8, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @ldst={0x2, 0x2, 0x6, 0xb, 0x5, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000003c0)='syzkaller\x00', 0xcb, 0x2a, &(0x7f0000000400)=""/42, 0x40f00, 0x26, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r2, r2, r2, r5], &(0x7f00000006c0)=[{0x1, 0x5, 0x4, 0x3}, {0x3, 0x2, 0xe}, {0x0, 0x2, 0x7, 0x8}, {0x2, 0x4, 0x8, 0xc}, {0x4, 0x2, 0x3, 0xc}, {0x1, 0x2, 0xf, 0xa}, {0x4, 0x4, 0xd, 0x3}, {0x5, 0x4, 0xe, 0x5}, {0x2, 0x1, 0x3, 0x9}]}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0x8, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x0, 0xff7, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet(r6, &(0x7f0000001e00), 0x1, 0x0)
recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde3}, 0x2043)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000080)={{0x1fbf, 0x4}, {0x0, 0x2}, 0x2, 0x1})
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

510.541246ms ago: executing program 1 (id=5764):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @local})
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

375.243909ms ago: executing program 2 (id=5766):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={<r2=>r1}) (async, rerun: 32)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xfb]}}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26}, 0x28) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20000000) (async)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18)
ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r0, @ANYBLOB="fdaf00000000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)

374.788564ms ago: executing program 0 (id=5767):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000010480002802c0008"], 0x78}}, 0x0)

299.731055ms ago: executing program 2 (id=5768):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0xf020, 0x1, 0x2, 0x9, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x65, 0x0, 0xea, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0xb, 0x9b, [@multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x2, [{@empty, 0x3}, {@empty, 0xd3bd}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x3c, 0x3, 0x3, [{@remote, 0x8000}, {@private=0xa010101, 0x2}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x71, 0x1, 0xe, [{@local, 0x5}]}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x6020400) (async)
socket(0x10, 0x3, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0xf020, 0x1, 0x2, 0x9, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x65, 0x0, 0xea, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0xb, 0x9b, [@multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x2, [{@empty, 0x3}, {@empty, 0xd3bd}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x3c, 0x3, 0x3, [{@remote, 0x8000}, {@private=0xa010101, 0x2}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x71, 0x1, 0xe, [{@local, 0x5}]}]}}}}}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async)

298.99805ms ago: executing program 0 (id=5769):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @rand_addr=' \x01\x00', 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x5}, {0x0, 0x4bca9cf2}]}, @union={0x800, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3, 0x9}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xb}, {0xc, 0x5}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x3}]}]}}, &(0x7f0000000180)=""/220, 0x8a, 0xdc, 0x1}, 0x28)
shutdown(r5, 0x1)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x4c22})
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}, {&(0x7f0000000800)="86f43342143ba9ed0848ea3addb525cc98a3c10121122d9f27eed99b6d3c36b9f2eaa7b6046c0db82620693bdcbeb0f7fecf82c5065ce3444f7202d807b42900ae3c4f747f99d809d0a4f6c36131d5ebd6423f0ce694701d5b50dbadb79027c662d2fd99e0eb0ae9f199b945a0a181fd8dd7e78f9c54bce947d330469ced415deb4a30de3469bd30a2cc5693c351419beed32dee1fce6a59f479df8ac83af651113cf088a433bb7266fda2d2a42b58ee2f6c56aa0984d32d940ecaa8f218c5ca3f0db9d9c52d555319c513371ff0eb43a480b48e1a08c678d4cc488033f42aff8b0530faf7680ce0f6ef6d93c292e2e24fe9", 0xf2}], 0x3}, 0x40050)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x1, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r7, 0x0, 0x10047, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c001e0000af05000000000000000000010000080800034000001000319929e1084137251952827711255202e83bd9f8ee7a5f1f1fbef066604a68994fbfb870d492d125056c7bd170f570aae095e3da1965616e5c254abbfacd877af9c165b0b8b432b79f895535d355088deebac4dd3f4d01e5c33c6b9b7552287eec88b77c95a0bb61067f4b42ec988a27f3cc786e75e0275fc08f08e687b3255fdb39ee785d74ed944facca6f4139e2371ce1d04ab1014fdcab07aa5781f9774943b5fcb6560ba796796c32a382d4bd4920a3db32d68cdc73dc0537ad57dfd2e9270fec09e8e4cd982fca9aedd6ca9ac8a7f34e0f03e300adc16a4fb4b1387da61b9b543192d43e88608960db4a2fbce67a531548f07ef5b99e7400fed9d31f8c1925539c1cab80e116e98d0fe0769f3d7d0766c162980000000000000000000000001c000000fd72a52f361c0e4c38a33266f4c9b5c40f0093e0546e8aba82184cf702f85da3699dcc168c17700a7dddfffbca402d47c3d1e48a02db9d446176916cce8d34cbf827cbb82c9dad988a5c2c90abce6f15c59e086bc9b4aab99480a4d33f49c52f37c8a2ab44cab5696e7d73e88b7bbc915d7f4f35b73149c994a366fdac3de5bebcf5a9fda96e36328320"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x44, 0x4a, 0x800, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x44}}, 0x48804)

250.426664ms ago: executing program 1 (id=5770):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000080"], 0xb8}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x18}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xd}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

248.943825ms ago: executing program 0 (id=5771):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffffb9)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0x0, &(0x7f0000000180)=""/177}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', <r5=>0x0, 0x7, 0x10, 0x9, 0x8, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x6, 0x1}, @noop]}}}}})
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000140)='./file0\x00', r3}, 0x18)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @loopback, 0x7, 0x8, 0xd503, 0x400, 0xffffffff00000000, 0x30020, r5})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

178.53322ms ago: executing program 1 (id=5772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xf40, 0x30, 0x25, 0x0, 0x0, {}, [{0xf2c, 0x1, [@m_pedit={0xf28, 0x1, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x0, 0x3, 0x2, 0x2, 0x8}, 0x59, 0xa, [{0x6, 0x0, 0x8, 0x2, 0x7, 0x6}, {0x7, 0x7, 0x4a48db7, 0x80, 0x2, 0x7}, {0x8, 0x4, 0xe36a, 0xb, 0xfffffffd, 0x8}, {0x6, 0x3, 0x3, 0xd0e, 0x1}, {0x80000001, 0x8cd9, 0x94, 0x6, 0x800, 0xffff}, {0x1, 0x2, 0x5, 0x4, 0x8, 0x5}, {0xc, 0x8, 0x1000, 0x163, 0x6, 0x800}]}, [{0xffffffc0, 0x3, 0x401, 0xa70e, 0x800}, {0x1, 0xc3, 0x8c, 0x3, 0x6, 0x8}, {0x3, 0x68, 0x0, 0x2e, 0xdd, 0x100}, {0xffffffff, 0xd973, 0x0, 0x0, 0xf0e7, 0x10}, {0x8001, 0x7, 0x1a5, 0xca, 0x3ab, 0x1}, {0x5, 0x9, 0xd9, 0x0, 0x1, 0x4}, {0x7f, 0x5, 0xc, 0x4, 0x81, 0x4}, {0xe00, 0x9, 0x6, 0x8, 0xb57, 0x4}, {0x2, 0xe7, 0x1ff8000, 0x81, 0x7, 0x9}, {0x5, 0xffff, 0x9, 0x1, 0x80000000, 0xffff}, {0x3, 0x3ff, 0xff, 0xff, 0x8000, 0x9}, {0x5, 0x0, 0x93, 0x4f, 0xd57, 0x7d9}, {0x0, 0x2, 0xffff0322, 0x29c, 0x1, 0x6}, {0xea73, 0x8, 0x3, 0xfffffe00, 0x8, 0xe}, {0x5, 0xe, 0x40, 0x2, 0x7, 0x1000}, {0x5, 0x2, 0x7, 0x1, 0x2, 0xf8000000}, {0x6, 0xc37e, 0x31a, 0x0, 0x7, 0x4}, {0x7, 0x5, 0x7, 0xb, 0x7, 0x2}, {0x5, 0x9, 0xf, 0x3, 0x81, 0x200}, {0x2, 0x2, 0x5, 0x3, 0x4e371ad4, 0x6}, {0x2, 0x3, 0x120f, 0x7, 0x3, 0x1}, {0x248, 0x8, 0x1, 0x5, 0x7, 0xfffffffc}, {0xffffffff, 0x1, 0x2, 0x6, 0xf, 0xa}, {0x4, 0x800, 0x500, 0x0, 0x0, 0xe}, {0xf, 0x8, 0x3, 0x4, 0x5, 0x39765f47}, {0x2, 0xfffff001, 0xfffffff7, 0x9, 0x4, 0xfffffffa}, {0x9, 0x5, 0x6, 0x7ff, 0x5d, 0xfffffffe}, {0xc133, 0x6, 0x57, 0x101, 0xe, 0xfff}, {0x8, 0x4, 0xffffffd2, 0x7ff, 0x9, 0x80000001}, {0x10, 0x0, 0x8, 0x0, 0x9}, {0x7, 0x0, 0x4cf, 0x24000, 0xe7, 0x2}, {0xd, 0x6, 0x5d000000, 0xe645, 0x1, 0x88c}, {0x8, 0x2, 0x8, 0x5, 0xfffffffb, 0x4}, {0x80, 0xfffffe00, 0x9, 0x0, 0x40}, {0x0, 0x401, 0x9c, 0xe9, 0x7fffffff, 0x401}, {0x1800, 0x3, 0x6, 0x0, 0x2, 0x8}, {0x3, 0x5, 0x0, 0x2, 0x80000001, 0xd99328}, {0x9, 0x9, 0x9, 0x10001, 0xfff, 0xb}, {0xa, 0x8, 0x9, 0x80, 0x9, 0x6}, {0x1, 0x1, 0x1, 0xfffffffd, 0x3d6, 0x9}, {0x3, 0xfd53, 0x4, 0x1, 0x5, 0x5}, {0x0, 0xfffffffe, 0x980, 0x9, 0x6, 0x9d1}, {0x6a7f, 0x1000, 0x2, 0x4, 0x9}, {0x1, 0x5, 0x381a, 0x401, 0x3, 0x7}, {0x4, 0xff, 0x2, 0x8, 0x3, 0x9}, {0x6, 0x9, 0x40, 0xa4, 0x400, 0x4}, {0x0, 0xa841, 0x20, 0xb, 0x9, 0x5}, {0x6, 0xfffffff7, 0x6, 0x0, 0x2, 0x1}, {0x7, 0x0, 0x95, 0x401, 0x1ff, 0x3}, {0x8, 0x4, 0x2, 0x1, 0x8, 0xfff}, {0xffffffff, 0x9, 0x7fff, 0xc, 0x3, 0x4}, {0xab, 0x2, 0x5a, 0x6, 0x2, 0x5}, {0x7, 0x401, 0x1, 0x9, 0x8, 0x3}, {0x5, 0x5, 0x4, 0xae0d, 0x9, 0x7}, {0x3, 0x1, 0xfffffffb, 0x200, 0x2, 0xcbbf}, {0x4, 0x93e, 0x0, 0x8, 0xde, 0x80000000}, {0x2, 0x681, 0xfffff599, 0x8, 0x10, 0xff}, {0x6, 0x1, 0x7, 0x3, 0x6, 0xffff}, {0x9, 0x4, 0x4, 0x2, 0x7, 0x1a7b}, {0xc, 0x7, 0x7, 0x2, 0x56a5, 0x1}, {0x486, 0x1, 0x6, 0x2, 0x5, 0x401}, {0x6, 0x3, 0xbccb, 0x0, 0x6, 0x2}, {0x4, 0xffff, 0x7fff, 0xffff7fff, 0x0, 0x5}, {0x2, 0xe1, 0x9, 0x5, 0x0, 0x673f}, {0xa820000, 0x3ff, 0x5, 0x800, 0x7ff, 0x10000}, {0xc9, 0x4, 0x2, 0x4, 0x5, 0x47ba48b9}, {0x3, 0x8, 0x774, 0x4, 0x80}, {0xff, 0x2, 0xd, 0x5, 0x8, 0x7}, {0x5, 0x479, 0x3, 0x1ff, 0x100, 0x53}, {0x800, 0xf8, 0xffffffff, 0xfffffffc, 0x0, 0x7fffffff}, {0x4, 0xfffffc01, 0x6, 0xfffffffe, 0x7}, {0x58, 0x4, 0x3b91, 0x8001, 0x97, 0x8}, {0x8, 0x6, 0x3e6, 0x1, 0x1000, 0x2}, {0x7f, 0x101, 0x9, 0x3, 0x5}, {0xfffffc01, 0x6, 0x5, 0x3, 0x3, 0x3f89}, {0x1, 0x3b7f, 0x8, 0x74d0, 0x6, 0x2}, {0x0, 0x40, 0x37, 0x0, 0x4, 0x6}, {0x7fff, 0x100, 0x911, 0x8, 0x2, 0xf7}, {0x30000, 0x5, 0x2, 0x10000, 0x5aa, 0x9}, {0xa8, 0x3ff, 0x5, 0x6, 0x5, 0x7}, {0x0, 0x7, 0x101, 0x6b5c, 0x7fffffff, 0x5f7}, {0x1, 0x29, 0x6, 0x3, 0x1972c8fd, 0x19}, {0x9, 0x6, 0x40, 0x4, 0x1}, {0xe, 0x64a, 0x6, 0xffff0001, 0x8845}, {0x0, 0x9, 0x8, 0x4, 0x80, 0x6}, {0x40, 0x8, 0x6, 0x361, 0x1, 0xfffffff8}, {0x0, 0x1, 0x7c, 0x2, 0x3, 0x1}, {0x9, 0x0, 0x9ed, 0x3, 0xffffff91, 0x6}, {0x6, 0x80000001, 0x5, 0xd7, 0x3f, 0x8}, {0x7, 0x7, 0x0, 0x5f, 0x1ff}, {0x5, 0x2, 0x7, 0x0, 0x5, 0x61}, {0x7, 0x81, 0x9000000, 0x5, 0x9, 0x1}, {0x8, 0xff, 0x4, 0x5, 0x4, 0x10000}, {0x9, 0x2, 0x3, 0x8, 0x7, 0x217}, {0x0, 0x6, 0x0, 0x7, 0x10, 0x2}, {0xa1, 0x5, 0x200, 0x9, 0x1, 0x5}, {0xd824, 0x5, 0xada9, 0x5, 0xfffffffb, 0x4}, {0x3, 0x3, 0x8001, 0x396, 0x3, 0x5}, {0xe1f1, 0x3, 0x80000, 0x8000, 0x7, 0x3e5}, {0x145, 0x6, 0x4, 0xadf5, 0x9, 0x3}, {0x5, 0x2, 0x3ff, 0x8, 0x6, 0x7f}, {0x9, 0x2, 0x6ca, 0x100, 0x9766, 0x5}, {0xd7, 0xe, 0x0, 0x5, 0x5, 0x2}, {0x9, 0x9, 0x1000, 0x40, 0x80000001, 0xe1f4}, {0x7, 0x0, 0x8, 0xa, 0x80000001, 0x35}, {0x80, 0xfffffff8, 0x3, 0x7, 0x9, 0x8}, {0x6, 0x2, 0x3, 0x8, 0x2, 0x5}, {0x6, 0x5, 0x80000000, 0x2, 0xc28, 0x3ff}, {0xa20a, 0x7d, 0x800, 0x4, 0x2060, 0xfffffced}, {0x2, 0x6, 0x0, 0x7d30, 0xfffff644, 0x5}, {0x3, 0x8001, 0x7, 0x0, 0x9, 0xd}, {0x10, 0x9, 0x1a5, 0x3, 0x8000, 0x7}, {0x1, 0x6, 0x7, 0x2, 0x9, 0x6}, {0x5, 0x8, 0x9, 0x3, 0x6, 0xfffffff4}, {0x2, 0x3, 0x6, 0xffffffff, 0x10}, {0x80000000, 0x80000000, 0x10, 0x1, 0x9, 0x5fe}, {0xffffffa4, 0x5, 0x7, 0x7, 0x80000001, 0x10}, {0xffffffff, 0x7, 0xcd, 0x9, 0x1, 0x1}, {0x2, 0x7a, 0xc47, 0x9, 0x6, 0x6}, {0x4, 0x0, 0x4, 0x101, 0x3, 0x4}, {0x7, 0x1, 0x3, 0x1, 0x0, 0x4}, {0x3ff, 0x610d, 0x0, 0xc, 0x75, 0x4}, {0x6a, 0xd1, 0x2, 0x101, 0x8, 0xa}, {0x81, 0xfffffffc, 0x3, 0x7, 0x800, 0x4}, {0xf548, 0xfffffffe, 0x457, 0x4, 0x6, 0x80b}, {0x7, 0x2, 0x2, 0x7ff, 0x6, 0x3}, {0x25, 0x0, 0x3, 0x4, 0x8001, 0x8}, {0xbd81, 0xff, 0x200, 0x80, 0x8, 0x2}], [{0x4, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x64b7ac7a868626cf}, {0x3}, {}, {0x5}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x4}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0xe}, {0x5}, {0x6}, {0x5, 0x1}, {0x2}, {0x5}, {0x1}, {0xc79e285db43c765}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x3}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf40}}, 0x0)

176.025649ms ago: executing program 1 (id=5773):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000})
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="73619454b396dea70e00", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000300016802c00018028000100ffff"], 0x68}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25190000002000018014000200626174616476300000000000000000000800030004000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)

105.941597ms ago: executing program 0 (id=5774):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (rerun: 64)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32)
recvmmsg(r10, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) (rerun: 32)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4)
write$bt_hci(r10, &(0x7f0000000200)=ANY=[], 0x6)

100.283746ms ago: executing program 0 (id=5775):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000019480002802c0008"], 0x78}}, 0x0)

869.386µs ago: executing program 1 (id=5776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000f40018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) (async)
listen(r3, 0x8) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) (async, rerun: 32)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}}) (async)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)

370.147µs ago: executing program 0 (id=5777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0xf4, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0xf, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x30, 0x9, 0x0, 0x1, [@m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

0s ago: executing program 1 (id=5778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f00000000c0)={0x16e4, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x110c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5b, 0x2, "9b87589e93cf30a476d31a0de915b2b85b1fe49bd716d13451eaa30d171f7152a2917189e82bb37cddde4d6c77e1951168be689d07265c01848ca96a945a00d2309508889079707d5ff14c0ab4926e1769d76dbd2c5d13"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "ce9ea78c85086d432b976a141f478ece42c0a6ba1b12634217112a2d045d2c684dd3b83e0fa57d6891040a2cd89244fe7712122c6ef30e2249c0fb62afe7cd9b3cf4774a8fc02d65c6ada9873f886160657ce09e38ec48fa1de697c411c481bebb33a85e0a6406087657fdb774aacd78c08a1719bb50c130fed1dc17a7a5606bad3d6e24e50fab370d"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xf3, 0x7f, [@fast_bss_trans={0x37, 0x9a, {0x8, 0x3, "bad0ff66c821e20925dd947566d29755", "7227cb7193a6082dced2543de73932667649af1df3e228ab7cbbd4275667ae56", "6fc21ee77f1fde5657405c085750c920fd3036b32ff9fe9a54316e0635cb916a", [{0x2, 0x1b, "ec263b0a80534cbb4f0cb6edb0a86478aaccc09f5acf5c3a9e84f8"}, {0x3, 0x12, "bfd9c1fbbc5b8ad762433496080a7c9589a5"}, {0x1, 0x15, "04aaaba64422c220843203eb5ac3d1814aeffa447a"}]}}, @erp={0x2a, 0x1, {0x1}}, @rann={0x7e, 0x15, {{0x0, 0x22}, 0x8, 0x4, @device_b, 0x9, 0x9, 0x40}}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @random_vendor={0xdd, 0x27, "b5aefc97b7b24e9e38b048e95bffff85d252177c6458dba99170e073ee51c6dbbce2f6e155afc6"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc8, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0x74, 0x36}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xae, 0x8}}, @random_vendor={0xdd, 0xa3, "1e40eb43099b0b2d2441fd3da90efeb90bd53eeb8fa3eb282b0acd38f6f60f2433df71e35cd5ed4f6dc7d457ea63bd283d51bd38f13c94618694b3ef46acf411e416587b5c40672c47073dff7224c772b8fd95593d2521ccdd0f866a38b72bc84136122457d3d73329aaec767c32dbe15a38a1bae504fab536479fb22864699222b841c292df4c05bf9e443d837f249827525cd926d828341924c78cf5f75a3c66a566"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x9d, 0x81}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x10, 0xe, 0x4}}]}, @NL80211_ATTR_FTM_RESPONDER={0x3c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa4, 0x2, "9306f9e663d52dc6f9aca4546f9ae4d40a40ec19ba78b9094a88e79423be489d9554e116c0ce9a5fd4faac79792e7eae878e27e196a934ec0db2b65216a0f06f0a51b424081aa2a4c138a3103fcd8b255b928117e813e9f24dde5b2db8842b54fdc3d6c47a5a26db10bc719b8e487cf16adee57d0f44dd2bc414105715b171d6327dd2ce6ad4dde3cfd9f4fb4255ba64b9044a91ea8c04e6174dedffd400384f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4f, 0x3, "8f1580df31af9c87db1fbb07102f720225644e7d431925d513e20eca1bd9c62804b4d378deb34ad3132cdec4ca0baeb818df6f6a91c150919d31c9505c6d51af34e6ad75cde59fcaa94ca1"}, @NL80211_FTM_RESP_ATTR_LCI={0x8e, 0x2, "9ae89a079133f9b4bb0eb8d5123de0028603d153cfb7c888b21332e917ffa95461727a983e41e6bc79cfa9db25bf6b2e6806e13f99e2c2f6f8e67fb0e11546a1ec76505f055523c0ee8efb7d78a8726516e3ee086619bf0570212d9994963999aa8402b8fd5c8a1252519aed3dccdc45ca3f90d43f6cacad6483799ed5478578059e66b68fc982ff0bb2"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "fb6bb0571af221df96182fba7cdd688de8b80ec4849e2e7ee56f873c4187fab137c6893149d5c24fa516b24d55f08d74cc673d1723eb30e961b46ff656dc6613097ba7f9a0598c015be94bca8dfe8e9abdb268d11cd86ca0f13b652f03c3d9805915828ee89527c5c6dcb6c6d9a02d908f1e4e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe4, 0x3, "9340f82cdb2e60ad532a5d997080ff745953f5599261782ad960ab7aa7dffda1d6dbbede0f5ae6bb07d906595928c01191c210b48315e579f1a9123ba0a84bb29367b4c8418a1b302e798cdddd9592af82ff541792aaa9bbdd8c999723565f99771a14fd6ac400925728562898405f1c933db3a8b586e68f522624f7feb44a43b865905fa3e1e54c004ae030be47308699da65e854dcc381ad22026dbae390e9e7cc54c2977f0d4e215c1e04512953da77f09e255471ecff1621b7eacd00174c69ec76c7af16698488d9d9a66c6821534099ed069bb991d71e8bfe0e52cb6333"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdf, 0x3, "716a96a763147193d05af586f71a8fc8c098a7038163e8cd76a2bc484296242f43106e4ffdcc3ac5b93be7a3706a2e0193ae2b9743826f84620d3f742dbc8197164ca2b813f64ebb0cdb66a1e76c9627395525989a56ebf6598961ee2f6263b7fb92eebf8eb2064af5ecf897df7995cc2504ca350ac0d69150a167571292f89431ac8d315b5060ac0973cb603213a6be26720def66970e54ba2ec66f637214e4eeed7191c007baf5ad30c26946a6a544cd5c9d5f5035547e36bf8217530d5ab9f2a76fb6881c2dc054b2178160ebfc312a9150da597b8f647ca574"}]}, @NL80211_ATTR_BEACON_TAIL={0x21, 0xf, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x48}}]}]}, 0x16e4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
syz_80211_join_ibss(&(0x7f0000001840)='wlan1\x00', &(0x7f0000001880)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_join_ibss(&(0x7f00000018c0)='wlan1\x00', &(0x7f0000001900)=@default_ap_ssid, 0x6, 0x0) (async)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf3, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000051)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a80)={'wlan1\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', <r5=>0x0}) (async)
syz_80211_join_ibss(&(0x7f0000001b00)='wlan0\x00', &(0x7f0000001b40)=@default_ibss_ssid, 0x6, 0x2)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x6c, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x613}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}, {0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x10480) (async)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x6000004}, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001e40))
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001e80)={<r8=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0xb0, 0x1, 0x100, 0x41, 0x80, 0xa6}, &(0x7f0000001f40)=0x9c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001f80)={r8}, 0x8) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8014) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0x6, 0x17, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x910}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0xa}, @func]}, &(0x7f0000002180)='GPL\x00', 0x9, 0xd0, &(0x7f00000021c0)=""/208, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002300)={0x3, 0x5, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002340)=[{0x4, 0x4, 0xf, 0x2}, {0x0, 0x5, 0x5, 0xa}], 0x10, 0x81}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002500)={'syztnl1\x00', &(0x7f0000002440)={'erspan0\x00', <r10=>0x0, 0x40, 0x8, 0x100, 0x1, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x66, 0x0, 0xd2, 0x8, 0x0, @rand_addr=0x64010102, @local, {[@noop, @generic={0x82, 0x3, "c2"}, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x1, [0xfffffea6]}, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0x3, [{@multicast1, 0x2}]}, @generic={0x82, 0x12, "f7a3d44c3704ac333825d291c0439909"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x3c, 0x0, 0x2, [0x4, 0x9, 0x3, 0x4ed684ca, 0x80]}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x7, [{@empty, 0xf}, {@empty, 0x7}, {@private=0xa010102, 0x1}]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002540)={r9, r10, 0x25, 0x10, @void}, 0x10) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000002580)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0x8c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8810) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002780)={'bridge_slave_1\x00'})
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)

kernel console output (not intermixed with test programs):

.418959][T16083] netlink: 'syz.2.3145': attribute type 282 has an invalid length.
[  232.435759][T16082] lo speed is unknown, defaulting to 1000
[  232.439692][T16082] lo speed is unknown, defaulting to 1000
[  232.455850][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  232.518379][T16082] wg1 speed is unknown, defaulting to 1000
[  232.606750][T16091] lo speed is unknown, defaulting to 1000
[  232.610375][T16091] lo speed is unknown, defaulting to 1000
[  232.621127][T16092] lo speed is unknown, defaulting to 1000
[  232.627672][T16091] wg1 speed is unknown, defaulting to 1000
[  232.642614][T16092] lo speed is unknown, defaulting to 1000
[  232.646782][T16092] wg1 speed is unknown, defaulting to 1000
[  232.958235][T16108] netlink: 'syz.1.3151': attribute type 5 has an invalid length.
[  232.970290][T16110] xt_l2tp: invalid flags combination: 8
[  233.074259][ T5923] tipc: Node number set to 2313816557
[  233.231370][T16124] bond3: option mode: unable to set because the bond device has slaves
[  233.252261][T16124] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  233.262284][T16124] macvlan2: entered promiscuous mode
[  233.271256][T16124] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[  233.280858][T16124] netlink: 'syz.0.3157': attribute type 10 has an invalid length.
[  233.287480][T16124] bond3: option mode: unable to set because the bond device has slaves
[  233.743401][T16151] netlink: 'syz.0.3166': attribute type 12 has an invalid length.
[  233.829067][T16155] lo speed is unknown, defaulting to 1000
[  233.831782][T16155] lo speed is unknown, defaulting to 1000
[  233.835978][T16155] wg1 speed is unknown, defaulting to 1000
[  234.110292][T16161] vlan0: entered promiscuous mode
[  234.129662][T16163] sctp: [Deprecated]: syz.1.3170 (pid 16163) Use of int in max_burst socket option.
[  234.129662][T16163] Use struct sctp_assoc_value instead
[  234.171827][T16166] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  234.177928][T16166] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  234.633396][T16200] netlink: 'syz.2.3177': attribute type 1 has an invalid length.
[  234.656131][T16200] bond26: (slave geneve0): making interface the new active one
[  234.660368][T16200] bond26: (slave geneve0): Enslaving as an active interface with an up link
[  234.663733][ T6930] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  234.668313][ T6930] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  234.671927][ T6930] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  234.675783][ T6930] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  234.679632][T16200] __nla_validate_parse: 13 callbacks suppressed
[  234.679640][T16200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3177'.
[  234.688592][T16200] 8021q: adding VLAN 0 to HW filter on device bond26
[  235.052170][T16203] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3179'.
[  235.058911][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'.
[  235.499627][T16219] team0: Device gtp1 is up. Set it down before adding it as a team port
[  235.573246][T16227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3184'.
[  235.726828][T16216] lo speed is unknown, defaulting to 1000
[  235.735620][T16216] lo speed is unknown, defaulting to 1000
[  235.739402][T16216] wg1 speed is unknown, defaulting to 1000
[  235.809986][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  235.812914][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3189'.
[  235.818524][T16242] netlink: 'syz.2.3189': attribute type 15 has an invalid length.
[  235.843730][T16243] lo speed is unknown, defaulting to 1000
[  235.847403][T16243] lo speed is unknown, defaulting to 1000
[  235.850547][T16243] wg1 speed is unknown, defaulting to 1000
[  235.918433][T16245] netlink: 'syz.2.3190': attribute type 13 has an invalid length.
[  235.921292][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'.
[  236.089587][T16258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3193'.
[  236.128980][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'.
[  236.162506][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'.
[  236.601280][T16283] netlink: 'syz.1.3201': attribute type 1 has an invalid length.
[  236.606758][T16283] netlink: 'syz.1.3201': attribute type 2 has an invalid length.
[  236.684275][T16285] bridge14: entered allmulticast mode
[  236.803009][T16296] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  236.835353][T16296] 8021q: adding VLAN 0 to HW filter on device bond27
[  236.865643][T16296] 8021q: adding VLAN 0 to HW filter on device bond27
[  236.871085][T16296] bond27: (slave wlan0): making interface the new active one
[  236.877803][T16296] bond27: (slave wlan0): Enslaving as an active interface with an up link
[  237.558580][T16350] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  237.609986][T16350] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  237.667328][T16350] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  237.731482][T16350] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  237.800533][ T5892] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  237.810591][ T5892] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  237.825221][ T5892] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  237.840516][ T5892] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  238.090350][T16376] netlink: 'syz.0.3228': attribute type 1 has an invalid length.
[  238.349784][T16386] netlink: 'syz.2.3233': attribute type 1 has an invalid length.
[  238.371334][T16386] 8021q: adding VLAN 0 to HW filter on device bond29
[  238.406714][T16386] macvlan1: entered promiscuous mode
[  238.409165][T16386] macvlan1: entered allmulticast mode
[  238.412506][T16386] bond29: entered promiscuous mode
[  238.417447][T16386] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  238.422345][T16386] bond29: left promiscuous mode
[  238.557083][T16395] lo speed is unknown, defaulting to 1000
[  238.560292][T16395] lo speed is unknown, defaulting to 1000
[  238.565553][T16395] wg1 speed is unknown, defaulting to 1000
[  238.610412][T16398] veth1: mtu greater than device maximum
[  238.620846][T16398] netlink: 'syz.1.3237': attribute type 8 has an invalid length.
[  238.742199][T16410] batadv_slave_0: left promiscuous mode
[  238.749363][T16410] batadv_slave_0: entered allmulticast mode
[  238.752772][T16410] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  239.595944][T16466] netlink: 'syz.0.3256': attribute type 1 has an invalid length.
[  239.613196][T16466] bond28: entered promiscuous mode
[  239.615791][T16466] 8021q: adding VLAN 0 to HW filter on device bond28
[  239.622660][T16466] vxcan10: entered allmulticast mode
[  239.701510][T16469] netlink: 'syz.0.3257': attribute type 58 has an invalid length.
[  239.705086][T16469] __nla_validate_parse: 18 callbacks suppressed
[  239.705098][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3257'.
[  240.018760][T16489] sock: sock_timestamping_bind_phc: sock not bind to device
[  240.052828][T16490] lo speed is unknown, defaulting to 1000
[  240.056456][T16490] lo speed is unknown, defaulting to 1000
[  240.060166][T16490] wg1 speed is unknown, defaulting to 1000
[  240.110780][T16500] vlan2: entered promiscuous mode
[  240.203531][T16506] lo speed is unknown, defaulting to 1000
[  240.206595][T16506] lo speed is unknown, defaulting to 1000
[  240.209346][T16506] wg1 speed is unknown, defaulting to 1000
[  240.416509][T16525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3273'.
[  240.420337][T16528] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3273'.
[  240.530009][T16534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3276'.
[  240.702607][T16553] lo speed is unknown, defaulting to 1000
[  240.713148][T16553] lo speed is unknown, defaulting to 1000
[  240.721465][T16553] wg1 speed is unknown, defaulting to 1000
[  240.731024][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3285'.
[  240.829348][T16569] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.830475][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'.
[  240.836594][T16571] netlink: 'syz.2.3288': attribute type 1 has an invalid length.
[  240.842590][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'.
[  240.877864][T16569] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.983025][T16569] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.041135][T16569] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.156831][ T5892] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.160255][ T5892] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.174920][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.201837][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.229970][T16596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3295'.
[  241.305943][T16606] lo speed is unknown, defaulting to 1000
[  241.308789][T16606] lo speed is unknown, defaulting to 1000
[  241.311451][T16606] wg1 speed is unknown, defaulting to 1000
[  241.353097][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'.
[  241.408862][T16615] lo speed is unknown, defaulting to 1000
[  241.411903][T16615] lo speed is unknown, defaulting to 1000
[  241.416043][T16615] wg1 speed is unknown, defaulting to 1000
[  242.114351][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'.
[  242.231085][T16650] pim6reg1: entered promiscuous mode
[  242.233194][T16650] pim6reg1: entered allmulticast mode
[  242.511337][T16666] lo speed is unknown, defaulting to 1000
[  242.520295][T16666] lo speed is unknown, defaulting to 1000
[  242.524666][T16666] wg1 speed is unknown, defaulting to 1000
[  242.991967][T16686] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  242.997412][T16686] syz_tun: left promiscuous mode
[  243.104034][T16686] bond1: (slave macvlan0): Releasing backup interface
[  243.118011][T16686] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  243.128999][T16686] bond0 (unregistering): Released all slaves
[  254.856327][T16716] __nla_validate_parse: 9 callbacks suppressed
[  254.856350][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3330'.
[  254.871197][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3330'.
[  254.936344][T16718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3331'.
[  254.970849][T16724] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  255.031662][T16735] lo speed is unknown, defaulting to 1000
[  255.047409][T16735] lo speed is unknown, defaulting to 1000
[  255.051110][T16735] wg1 speed is unknown, defaulting to 1000
[  255.101995][T16742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.105163][T16742] syzkaller0: entered promiscuous mode
[  255.107145][T16742] syzkaller0: entered allmulticast mode
[  255.133850][T16742] tipc: Resetting bearer <eth:syzkaller0>
[  255.238145][T16741] tipc: Resetting bearer <eth:syzkaller0>
[  255.247633][T16741] tipc: Disabling bearer <eth:syzkaller0>
[  255.478348][T16766] netlink: 'syz.0.3343': attribute type 11 has an invalid length.
[  255.616562][T16772] lo speed is unknown, defaulting to 1000
[  255.620178][T16772] lo speed is unknown, defaulting to 1000
[  255.623033][T16772] wg1 speed is unknown, defaulting to 1000
[  255.629611][T16774] netlink: 'syz.0.3346': attribute type 22 has an invalid length.
[  255.632267][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'.
[  255.644283][T16774] netlink: 'syz.0.3346': attribute type 22 has an invalid length.
[  255.650426][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'.
[  255.698325][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3347'.
[  255.845707][T16791] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.889854][T16788] delete_channel: no stack
[  256.001302][T16798] gretap4: entered promiscuous mode
[  256.022105][T16805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3353'.
[  256.043044][T16805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.198251][T16815] netlink: 'syz.0.3356': attribute type 26 has an invalid length.
[  256.206758][T16810] netlink: 'syz.0.3356': attribute type 1 has an invalid length.
[  256.269192][T16815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3356'.
[  256.272516][T16815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.639142][T16849] netlink: 'syz.1.3368': attribute type 2 has an invalid length.
[  256.639177][T16848] netlink: 'syz.1.3368': attribute type 2 has an invalid length.
[  256.647908][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'.
[  256.690909][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'.
[  256.848786][T16865] 8021q: adding VLAN 0 to HW filter on device bond1
[  256.860642][T16865] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  256.865090][T16865] bond1: (slave macvlan8): Enslaving as a backup interface with a down link
[  256.873088][T16865] bond15: (slave geneve6): Releasing active interface
[  256.887223][T16865] bond1: (slave macvlan8): Releasing backup interface
[  256.893623][ T5858] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  256.899205][ T5858] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  256.911607][ T5858] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  256.916661][ T5858] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  257.798608][T16915] lo speed is unknown, defaulting to 1000
[  257.802544][T16915] lo speed is unknown, defaulting to 1000
[  257.812209][T16915] wg1 speed is unknown, defaulting to 1000
[  257.905316][T16918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.532865][T16936] bond0 (unregistering): Released all slaves
[  258.756727][T16947] bridge0: port 1(veth13) entered blocking state
[  258.759174][T16947] bridge0: port 1(veth13) entered disabled state
[  258.761866][T16947] veth13: entered allmulticast mode
[  258.769660][T16947] veth13: entered promiscuous mode
[  258.786548][T16946] veth0_to_bond: left allmulticast mode
[  258.788396][T16946] veth0_to_bond: left promiscuous mode
[  258.790585][T16946] bridge8: port 2(veth0_to_bond) entered disabled state
[  258.809061][T16946] bridge0: port 2(veth0_to_bond) entered blocking state
[  258.811399][T16946] bridge0: port 2(veth0_to_bond) entered disabled state
[  258.813703][T16946] veth0_to_bond: entered allmulticast mode
[  258.832782][T16946] veth0_to_bond: entered promiscuous mode
[  258.952587][T16965] delete_channel: no stack
[  259.515587][T16998] macsec5: entered promiscuous mode
[  259.521812][T16998] batadv0: entered promiscuous mode
[  259.525428][T16998] batadv0: left promiscuous mode
[  259.853672][T17029] lo speed is unknown, defaulting to 1000
[  259.881103][T17029] lo speed is unknown, defaulting to 1000
[  259.884916][T17029] wg1 speed is unknown, defaulting to 1000
[  259.895781][T17033] __nla_validate_parse: 13 callbacks suppressed
[  259.895790][T17033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3423'.
[  260.007053][T17038] netlink: 'syz.2.3425': attribute type 10 has an invalid length.
[  260.014366][T17038] netlink: 'syz.2.3425': attribute type 10 has an invalid length.
[  260.069826][T17044] 8021q: adding VLAN 0 to HW filter on device bond1
[  260.250519][T17055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3429'.
[  260.480322][T17063] 8021q: VLANs not supported on ipvlan1
[  260.719482][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'.
[  260.728652][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3438'.
[  260.783034][T17080] lo speed is unknown, defaulting to 1000
[  260.788842][T17080] lo speed is unknown, defaulting to 1000
[  260.793513][T17080] wg1 speed is unknown, defaulting to 1000
[  260.914061][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3441'.
[  261.032556][T17091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3443'.
[  261.060857][T17089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3442'.
[  261.452597][T17112] lo speed is unknown, defaulting to 1000
[  261.460559][T17112] lo speed is unknown, defaulting to 1000
[  261.465153][T17112] wg1 speed is unknown, defaulting to 1000
[  261.642466][T17123] ip6gre4: entered allmulticast mode
[  261.682294][T17126] bond0: (slave rose0): Error: Device can not be enslaved while up
[  261.811288][T17139] vlan0: entered allmulticast mode
[  261.826222][T17139] bridge_slave_0: entered allmulticast mode
[  261.934784][T17147] bond0: (slave rose0): Error: Device can not be enslaved while up
[  261.995642][T17149] lo speed is unknown, defaulting to 1000
[  262.003466][T17149] lo speed is unknown, defaulting to 1000
[  262.020117][T17149] wg1 speed is unknown, defaulting to 1000
[  262.087872][T17154] bond1: option mode: unable to set because the bond device is up
[  262.108815][T17154] bond27: (slave wlan0): Releasing active interface
[  262.118242][T17154] bond26: (slave geneve0): Releasing active interface
[  262.129674][ T6930] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  262.132886][ T6930] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  262.136517][ T6930] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  262.139551][ T6930] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  262.248987][T17162] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  262.270032][T17162] pimreg3: entered allmulticast mode
[  262.492663][T17186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.499232][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3474'.
[  262.569040][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3475'.
[  262.750172][T17203] lo speed is unknown, defaulting to 1000
[  262.753914][T17203] lo speed is unknown, defaulting to 1000
[  262.757819][T17203] wg1 speed is unknown, defaulting to 1000
[  262.828207][T17206] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  262.859737][T17206] bond17: entered promiscuous mode
[  262.863018][T17206] bond17: entered allmulticast mode
[  262.868738][T17206] 8021q: adding VLAN 0 to HW filter on device bond17
[  263.096453][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3482'.
[  263.204742][T17228] netlink: 'syz.2.3485': attribute type 58 has an invalid length.
[  263.303786][T17237] netlink: 'syz.2.3489': attribute type 1 has an invalid length.
[  263.337174][T17237] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.347902][T17237] vlan2: entered allmulticast mode
[  263.349660][T17237] batadv0: entered allmulticast mode
[  263.352311][T17237] bond0: (slave vlan2): Opening slave failed
[  263.421565][T17241] netlink: 'syz.0.3490': attribute type 1 has an invalid length.
[  263.426999][T17241] netlink: 'syz.0.3490': attribute type 3 has an invalid length.
[  263.915699][T17276] netlink: 'syz.0.3500': attribute type 1 has an invalid length.
[  263.918879][T17276] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  264.453294][T17309] lo speed is unknown, defaulting to 1000
[  264.460073][T17309] lo speed is unknown, defaulting to 1000
[  264.460274][T17310] lo speed is unknown, defaulting to 1000
[  264.463679][T17309] wg1 speed is unknown, defaulting to 1000
[  264.466450][T17310] lo speed is unknown, defaulting to 1000
[  264.477228][T17310] wg1 speed is unknown, defaulting to 1000
[  264.801621][T17318] netlink: 'syz.2.3509': attribute type 8 has an invalid length.
[  265.009920][T17340] __nla_validate_parse: 5 callbacks suppressed
[  265.009930][T17340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3514'.
[  265.059077][T17332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.079426][T17331] tipc: Disabling bearer <eth:syzkaller0>
[  265.084101][T17344] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  265.236888][T17348] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004
[  265.331692][T17354] gretap0: entered promiscuous mode
[  265.491728][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3523'.
[  265.776826][T17384] bridge20: entered allmulticast mode
[  265.914807][T17394] lo speed is unknown, defaulting to 1000
[  265.918891][T17394] lo speed is unknown, defaulting to 1000
[  265.928341][T17394] wg1 speed is unknown, defaulting to 1000
[  266.101303][T17411] lo speed is unknown, defaulting to 1000
[  266.110757][T17411] lo speed is unknown, defaulting to 1000
[  266.119644][T17411] wg1 speed is unknown, defaulting to 1000
[  266.177777][T17414] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'.
[  266.211237][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3532'.
[  266.419597][T17411] netlink: 'syz.2.3536': attribute type 2 has an invalid length.
[  266.783070][T17443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3544'.
[  266.940372][T17455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3547'.
[  266.948357][T17455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3547'.
[  266.996724][T17459] bond0: (slave rose0): Error: Device can not be enslaved while up
[  267.052881][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'.
[  267.071155][T17458] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (247)
[  267.085414][T17458] netlink: 'syz.0.3548': attribute type 1 has an invalid length.
[  267.092960][T17465] netlink: 'syz.2.3551': attribute type 1 has an invalid length.
[  267.140770][T17465] bond30: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  267.146325][T17465] bond30: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  267.150717][T17465] bond30: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  267.181841][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3552'.
[  267.187259][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'.
[  267.281306][ T5892] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  267.284860][ T5892] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  267.305604][ T5923] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  267.925394][ T5923] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  267.974270][ T5923] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  268.002053][T17538] netlink: 'syz.0.3573': attribute type 58 has an invalid length.
[  268.216670][T17548] netlink: 'syz.0.3576': attribute type 1 has an invalid length.
[  268.307183][T17552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.363208][T17554] IPVS: Error joining to the multicast group
[  268.742730][T17580] netlink: 'syz.1.3589': attribute type 2 has an invalid length.
[  268.751613][T17580] netlink: 'syz.1.3589': attribute type 2 has an invalid length.
[  268.756669][T17580] netlink: 'syz.1.3589': attribute type 1 has an invalid length.
[  268.888929][T17587] netlink: 'syz.2.3592': attribute type 7 has an invalid length.
[  268.892147][T17587] netlink: 'syz.2.3592': attribute type 8 has an invalid length.
[  269.039821][T17599] hsr_slave_1 (unregistering): left promiscuous mode
[  269.311277][T17623] netlink: 'syz.1.3600': attribute type 1 has an invalid length.
[  269.319324][T17633] netlink: 'syz.1.3600': attribute type 1 has an invalid length.
[  269.341758][T17633] bond19: entered promiscuous mode
[  269.344264][T17633] 8021q: adding VLAN 0 to HW filter on device bond19
[  269.569403][T17648] netlink: 'syz.1.3609': attribute type 1 has an invalid length.
[  269.600972][T17660] bond20: (slave gretap5): making interface the new active one
[  269.604939][T17660] bond20: (slave gretap5): Enslaving as an active interface with an up link
[  269.693275][T17666] netlink: 'syz.1.3613': attribute type 1 has an invalid length.
[  269.730754][T17666] 8021q: adding VLAN 0 to HW filter on device bond21
[  269.747198][T17666] vlan4: entered allmulticast mode
[  269.750322][T17666] bond21: (slave vlan4): Opening slave failed
[  269.959053][T17691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.286649][T17713] __nla_validate_parse: 15 callbacks suppressed
[  270.286663][T17713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3630'.
[  270.308317][T17718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3628'.
[  270.313696][T17718] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  270.501833][T17728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.584316][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3637'.
[  270.640682][T17747] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3638'.
[  270.701772][T17753] pim6reg: entered allmulticast mode
[  270.730755][T17753] pim6reg: left allmulticast mode
[  270.833038][T17767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3644'.
[  271.029765][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'.
[  271.120930][T17784] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  271.171521][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'.
[  271.280017][T17798] IPVS: set_ctl: invalid protocol: 248 172.30.0.2:20000
[  271.465013][T17806] lo speed is unknown, defaulting to 1000
[  271.483695][T17806] lo speed is unknown, defaulting to 1000
[  271.488198][T17806] wg1 speed is unknown, defaulting to 1000
[  271.654157][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  271.661828][T17815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3664'.
[  272.258030][T17849] : entered promiscuous mode
[  272.262977][T17849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3677'.
[  272.319987][T17852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3678'.
[  272.454037][T17865] erspan0: entered promiscuous mode
[  272.583549][T17876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.593528][T17876] syzkaller0: entered promiscuous mode
[  272.596514][T17876] syzkaller0: entered allmulticast mode
[  272.614851][T17876] tipc: Resetting bearer <eth:syzkaller0>
[  272.632069][T17875] tipc: Resetting bearer <eth:syzkaller0>
[  272.644640][T17875] tipc: Disabling bearer <eth:syzkaller0>
[  273.253356][T17928] batadv3: entered allmulticast mode
[  273.255930][T17928] 8021q: adding VLAN 0 to HW filter on device batadv3
[  273.445796][T17951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.449156][T17951] syzkaller0: entered promiscuous mode
[  273.451498][T17951] syzkaller0: entered allmulticast mode
[  273.466196][T17951] tipc: Resetting bearer <eth:syzkaller0>
[  273.470303][T17949] tipc: Resetting bearer <eth:syzkaller0>
[  273.484539][T17949] tipc: Disabling bearer <eth:syzkaller0>
[  273.523306][T17954] bond0: (slave rose0): Error: Device can not be enslaved while up
[  273.612274][T17964] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.887123][T17982] lo speed is unknown, defaulting to 1000
[  273.890148][T17982] lo speed is unknown, defaulting to 1000
[  273.892735][T17982] wg1 speed is unknown, defaulting to 1000
[  274.026579][T17999] validate_nla: 7 callbacks suppressed
[  274.026589][T17999] netlink: 'syz.1.3729': attribute type 7 has an invalid length.
[  274.451181][T18035] openvswitch: netlink: Tunnel attr 518 out of range max 16
[  274.466992][T18032] can: request_module (can-proto-0) failed.
[  274.543062][T18039] xfrm1: entered promiscuous mode
[  274.546119][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  274.548948][T18039] xfrm1: entered allmulticast mode
[  274.696141][T18043] netlink: 'syz.0.3741': attribute type 15 has an invalid length.
[  274.897839][T18056] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  274.900546][T18056] netlink: 'syz.0.3746': attribute type 3 has an invalid length.
[  274.912317][T18056] veth21: entered promiscuous mode
[  275.111153][T18071] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  275.158788][T18073] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.217741][T18073] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.272342][T18073] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.319125][T18073] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.378775][ T5858] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.391039][ T5858] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.404757][ T5858] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.415456][ T5892] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.038367][T18097] wg1: entered promiscuous mode
[  276.042746][T18097] wg1: entered allmulticast mode
[  276.169974][T18101] __nla_validate_parse: 22 callbacks suppressed
[  276.169989][T18101] netlink: 378 bytes leftover after parsing attributes in process `syz.0.3759'.
[  276.237233][T18103] netlink: 'syz.0.3760': attribute type 2 has an invalid length.
[  276.304530][T18105] netlink: 'syz.0.3761': attribute type 1 has an invalid length.
[  276.326973][T18105] 8021q: adding VLAN 0 to HW filter on device bond29
[  276.331420][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3761'.
[  276.336116][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3761'.
[  276.773569][T18120] syzkaller1: entered promiscuous mode
[  276.775718][T18120] syzkaller1: entered allmulticast mode
[  276.987222][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3769'.
[  277.041297][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'.
[  277.205729][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3772'.
[  277.373128][T18157] nbd: must specify at least one socket
[  277.407236][T18157] lo speed is unknown, defaulting to 1000
[  277.411063][T18157] lo speed is unknown, defaulting to 1000
[  277.414817][T18157] wg1 speed is unknown, defaulting to 1000
[  277.537943][T18168] openvswitch: netlink: IPv4 tunnel dst address is zero
[  277.679023][T18173] lo speed is unknown, defaulting to 1000
[  277.681899][T18173] lo speed is unknown, defaulting to 1000
[  277.686305][T18173] wg1 speed is unknown, defaulting to 1000
[  277.741980][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'.
[  277.792480][T18177] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  277.803014][T18177] netlink: 'syz.2.3782': attribute type 5 has an invalid length.
[  277.806796][T18177] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3782'.
[  277.931932][T18182] netlink: 'syz.0.3784': attribute type 1 has an invalid length.
[  277.963825][T18182] 8021q: adding VLAN 0 to HW filter on device bond30
[  277.981507][T18182] bond25: (slave wlan0): Releasing active interface
[  277.997025][T18182] bond30: (slave wlan0): Enslaving as an active interface with a down link
[  278.073601][T18191] netlink: 'syz.2.3785': attribute type 3 has an invalid length.
[  278.080787][T18191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3785'.
[  278.191108][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'.
[  278.373932][T18218] vlan0: entered promiscuous mode
[  278.443371][T18224] lo speed is unknown, defaulting to 1000
[  278.452510][T18224] lo speed is unknown, defaulting to 1000
[  278.457039][T18224] wg1 speed is unknown, defaulting to 1000
[  278.639752][T18239] 8021q: VLANs not supported on nlmon0
[  279.017902][T18263] vlan0: entered allmulticast mode
[  279.019777][T18263] hsr0: entered allmulticast mode
[  279.021973][T18263] hsr_slave_0: entered allmulticast mode
[  279.024622][T18263] hsr_slave_1: entered allmulticast mode
[  279.503409][T18298] 8021q: adding VLAN 0 to HW filter on device bond31
[  279.531473][T18301] delete_channel: no stack
[  279.591126][T18303] bond3: option mode: unable to set because the bond device has slaves
[  279.600845][T18304] netlink: 'syz.0.3819': attribute type 1 has an invalid length.
[  279.760845][T18315] lo speed is unknown, defaulting to 1000
[  279.770196][T18315] lo speed is unknown, defaulting to 1000
[  279.777321][T18315] wg1 speed is unknown, defaulting to 1000
[  279.936292][T18324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.155203][T18338] macsec5: entered promiscuous mode
[  280.157689][T18338] batadv0: entered promiscuous mode
[  280.161096][T18338] batadv0: left promiscuous mode
[  280.249302][   T33] audit: type=1107 audit(1757435119.906:10): pid=18342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+mRѝ*|e÷p8`j?(]4ix2~4D䪤ߕ`{!ܘgtk)l/hR!z$c@#x'
[  280.854003][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  280.879006][T18388] netlink: 'syz.2.3849': attribute type 1 has an invalid length.
[  280.912859][T18388] 8021q: adding VLAN 0 to HW filter on device bond32
[  280.922334][T18386] lo speed is unknown, defaulting to 1000
[  280.926730][T18386] lo speed is unknown, defaulting to 1000
[  280.930463][T18386] wg1 speed is unknown, defaulting to 1000
[  281.178282][T18403] __nla_validate_parse: 12 callbacks suppressed
[  281.178297][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3848'.
[  281.246949][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3850'.
[  281.259503][T18391] bond22 (unregistering): Released all slaves
[  281.493199][T18416] lo speed is unknown, defaulting to 1000
[  281.505417][T18416] lo speed is unknown, defaulting to 1000
[  281.515801][T18416] wg1 speed is unknown, defaulting to 1000
[  281.772630][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3862'.
[  282.030782][T18456] veth1: mtu less than device minimum
[  282.121835][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'.
[  282.164544][T18464] lo speed is unknown, defaulting to 1000
[  282.167049][T18464] lo speed is unknown, defaulting to 1000
[  282.169895][T18464] wg1 speed is unknown, defaulting to 1000
[  282.205017][T18466] netlink: 'syz.0.3874': attribute type 12 has an invalid length.
[  282.209890][T18466] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3874'.
[  282.251162][T18467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.818201][T18481] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[  282.843550][T18481] bond22: entered promiscuous mode
[  282.847403][T18481] 8021q: adding VLAN 0 to HW filter on device bond22
[  282.900956][T18481] 8021q: adding VLAN 0 to HW filter on device bond22
[  282.904694][T18481] bond22: (slave wireguard2): The slave device specified does not support setting the MAC address
[  282.909380][T18481] bond22: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  282.918535][T18481] bond22: (slave wireguard2): making interface the new active one
[  282.934182][T18481] wireguard2: entered promiscuous mode
[  282.937067][T18481] bond22: (slave wireguard2): Enslaving as an active interface with an up link
[  282.949594][T18481] bond22: (slave wireguard3): The slave device specified does not support setting the MAC address
[  282.961997][T18481] bond22: (slave wireguard3): Enslaving as a backup interface with an up link
[  283.023723][T18491] netlink: 'syz.1.3881': attribute type 1 has an invalid length.
[  283.046530][T18491] bond23: entered promiscuous mode
[  283.048591][T18491] 8021q: adding VLAN 0 to HW filter on device bond23
[  283.057061][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'.
[  283.206596][T18499] netlink: 'syz.1.3884': attribute type 30 has an invalid length.
[  283.335171][T18509] netlink: 'syz.2.3887': attribute type 1 has an invalid length.
[  283.337832][T18509] netlink: 'syz.2.3887': attribute type 1 has an invalid length.
[  284.243156][T18522] lo speed is unknown, defaulting to 1000
[  284.246641][T18522] lo speed is unknown, defaulting to 1000
[  284.249302][T18522] wg1 speed is unknown, defaulting to 1000
[  284.318251][T18532] syz_tun: entered promiscuous mode
[  284.465252][T18548] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  284.553243][T18556] lo speed is unknown, defaulting to 1000
[  284.562819][T18556] lo speed is unknown, defaulting to 1000
[  284.566274][T18556] wg1 speed is unknown, defaulting to 1000
[  284.683268][T18574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3906'.
[  284.690232][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'.
[  284.777736][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'.
[  284.781101][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'.
[  284.988054][T18590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.991063][T18590] syzkaller0: entered promiscuous mode
[  284.992908][T18590] syzkaller0: entered allmulticast mode
[  284.996805][T18589] tipc: Resetting bearer <eth:syzkaller0>
[  285.011782][T18589] tipc: Disabling bearer <eth:syzkaller0>
[  285.613536][T18641] xt_l2tp: unknown flags: 51
[  286.025359][T18678] sctp: [Deprecated]: syz.2.3944 (pid 18678) Use of int in maxseg socket option.
[  286.025359][T18678] Use struct sctp_assoc_value instead
[  286.098125][T18687] netlink: 'syz.1.3946': attribute type 1 has an invalid length.
[  286.147205][T18696] netlink: 'syz.2.3948': attribute type 12 has an invalid length.
[  286.158553][T18688] 8021q: adding VLAN 0 to HW filter on device bond24
[  286.693521][T18741] netlink: 'syz.0.3961': attribute type 74 has an invalid length.
[  286.744780][T18741] netlink: 'syz.0.3961': attribute type 10 has an invalid length.
[  286.897815][T18760] netlink: 'syz.0.3966': attribute type 8 has an invalid length.
[  287.177397][T18775] netlink: 'syz.2.3968': attribute type 1 has an invalid length.
[  287.180199][T18775] netlink: 'syz.2.3968': attribute type 3 has an invalid length.
[  287.183675][T18775] __nla_validate_parse: 7 callbacks suppressed
[  287.183685][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3968'.
[  287.257354][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  287.858630][T18787] bridge0: port 3(batadv3) entered blocking state
[  287.861012][T18787] bridge0: port 3(batadv3) entered disabled state
[  287.863496][T18787] batadv3: entered allmulticast mode
[  287.873714][T18787] batadv3: entered promiscuous mode
[  288.200805][T18814] atomic_op ffff888107b4f198 conn xmit_atomic 0000000000000000
[  288.354516][ T5858] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  288.358016][ T5858] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  288.460282][T18834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3990'.
[  288.472406][T18834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3990'.
[  288.892193][T18858] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4000'.
[  288.899047][T18858] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4000'.
[  289.142415][T18896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.182833][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'.
[  289.212680][T18903] lo speed is unknown, defaulting to 1000
[  289.216393][T18903] lo speed is unknown, defaulting to 1000
[  289.219191][T18903] wg1 speed is unknown, defaulting to 1000
[  289.219558][T18907] netlink: 'syz.2.4013': attribute type 2 has an invalid length.
[  289.241212][T18907] : entered promiscuous mode
[  289.282442][T18911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4014'.
[  289.299415][T18914] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  289.517322][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'.
[  289.558431][T18927] netlink: 'syz.1.4019': attribute type 1 has an invalid length.
[  289.624460][T18927] 8021q: adding VLAN 0 to HW filter on device bond25
[  289.885204][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4024'.
[  289.937044][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4025'.
[  290.322396][T18979] lo speed is unknown, defaulting to 1000
[  290.329208][T18979] lo speed is unknown, defaulting to 1000
[  290.333803][T18970] pim6reg99999999: entered allmulticast mode
[  290.344777][T18979] wg1 speed is unknown, defaulting to 1000
[  290.602933][T18998] vxcan0: left promiscuous mode
[  290.607946][T18998] vxcan1: left promiscuous mode
[  290.609632][T18998] veth0: left promiscuous mode
[  290.612418][T18998] wg0: left promiscuous mode
[  290.614616][T18998] wg1: left promiscuous mode
[  290.616366][T18998] wg2: left promiscuous mode
[  290.618078][T18998] veth0_to_bridge: left promiscuous mode
[  290.620110][T18998] bridge_slave_0: left promiscuous mode
[  290.622107][T18998] veth1_to_bridge: left promiscuous mode
[  290.625192][T18998] bridge_slave_1: left promiscuous mode
[  290.627350][T18998] bond_slave_0: left promiscuous mode
[  290.629635][T18998] veth0_to_team: left promiscuous mode
[  290.631633][T18998] team_slave_0: left promiscuous mode
[  290.633529][T18998] veth1_to_team: left promiscuous mode
[  290.637141][T18998] team_slave_1: left promiscuous mode
[  290.640114][T18998] veth0_to_batadv: left promiscuous mode
[  290.642305][T18998] batadv_slave_0: left promiscuous mode
[  290.644963][T18998] xfrm0: left promiscuous mode
[  290.646790][T18998] veth0_to_hsr: left promiscuous mode
[  290.649179][T18998] veth1_to_hsr: left promiscuous mode
[  290.651598][T18998] veth1_virt_wifi: left promiscuous mode
[  290.654425][T18998] veth0_virt_wifi: left promiscuous mode
[  290.657281][T18998] macsec0: left promiscuous mode
[  290.659230][T18998] geneve0: left promiscuous mode
[  290.660955][T18998] geneve1: left promiscuous mode
[  290.669079][T18998] vti0: left promiscuous mode
[  290.671159][T18998] bridge1: left promiscuous mode
[  290.673124][T18998] batadv1: left promiscuous mode
[  290.677881][T18998] gre1: left promiscuous mode
[  290.679770][T18998] sit1: left promiscuous mode
[  290.681564][T18998] vxlan0: left promiscuous mode
[  290.683380][T18998] vxlan1: left promiscuous mode
[  290.686273][T18998] sit2: left promiscuous mode
[  290.688056][T18998] vxcan2: left promiscuous mode
[  290.689831][T18998] vxcan3: left promiscuous mode
[  290.691614][T18998] mac80211_hwsim hwsim4 veth1_to_bod: left promiscuous mode
[  290.694515][T18998] sit3: left promiscuous mode
[  290.696173][T18998] syztnl1: left promiscuous mode
[  290.698062][T18998] erspan1: left promiscuous mode
[  290.699771][T18998] ipip0: left promiscuous mode
[  290.701565][T18998] mac80211_hwsim hwsim13 wlan2: left promiscuous mode
[  290.704163][T18998] bond1: left promiscuous mode
[  290.705811][T18998] ip6gre1: left promiscuous mode
[  290.707577][T18998] bond2: left promiscuous mode
[  290.709565][T18998] bond3: left promiscuous mode
[  290.711417][T18998] macvlan2: left promiscuous mode
[  290.713412][T18998] bond5: left promiscuous mode
[  290.715891][T18998] gre2: left promiscuous mode
[  290.717954][T18998] vlan2: left promiscuous mode
[  290.720280][T18998] macvlan5: left promiscuous mode
[  290.725488][T18998] bond4: left promiscuous mode
[  290.727195][T18998] ip6tnl1: left promiscuous mode
[  290.728917][T18998] mac80211_hwsim hwsim17 wlan3: left promiscuous mode
[  290.731411][T18998] geneve2: left promiscuous mode
[  290.733347][T18998] mac80211_hwsim hwsim19 wlan4: left promiscuous mode
[  290.736515][T18998] ip6gretap1: left promiscuous mode
[  290.738674][T18998] vlan3: left promiscuous mode
[  290.740791][T18998] hsr0: left promiscuous mode
[  290.743503][T18998] macvlan7: left promiscuous mode
[  290.746172][T18998] ip6tnl2: left promiscuous mode
[  290.748071][T18998] syztnl0: left promiscuous mode
[  290.749914][T18998] bond7: left promiscuous mode
[  290.751733][T18998] bridge2: left promiscuous mode
[  290.753645][T18998] mac80211_hwsim hwsim20 wlan5: left promiscuous mode
[  290.756459][T18998] gre3: left promiscuous mode
[  290.758391][T18998] bond8: left promiscuous mode
[  290.760182][T18998] macvlan8: left promiscuous mode
[  290.762057][T18998] bridge3: left promiscuous mode
[  290.764107][T18998] bridge4: left promiscuous mode
[  290.765958][T18998] bridge5: left promiscuous mode
[  290.767859][T18998] geneve3: left promiscuous mode
[  290.769978][T18998] ip6tnl3: left promiscuous mode
[  290.771829][T18998] @: left promiscuous mode
[  290.773554][T18998] bond9: left promiscuous mode
[  290.775678][T18998] bond10: left promiscuous mode
[  290.777594][T18998] gtp0: left promiscuous mode
[  290.779486][T18998] bond11: left promiscuous mode
[  290.781610][T18998] ip6tnl4: left promiscuous mode
[  290.783690][T18998] bond12: left promiscuous mode
[  290.785803][T18998] bond13: left promiscuous mode
[  290.787731][T18998] bond14: left promiscuous mode
[  290.790090][T18998] vlan4: left promiscuous mode
[  290.791855][T18998] veth1: left promiscuous mode
[  290.793704][T18998] gre4: left promiscuous mode
[  290.795654][T18998] ip6gre2: left promiscuous mode
[  290.797575][T18998] macsec1: left promiscuous mode
[  290.799510][T18998] veth2: left promiscuous mode
[  290.801397][T18998] veth3: left promiscuous mode
[  290.803201][T18998] vxlan2: left promiscuous mode
[  290.805058][T18998] bridge6: left promiscuous mode
[  290.806858][T18998] vxcan4: left promiscuous mode
[  290.808694][T18998] vxcan5: left promiscuous mode
[  290.810538][T18998] : left promiscuous mode
[  290.812354][T18998] ip6gre3: left promiscuous mode
[  290.814431][T18998] bond15: left promiscuous mode
[  290.816424][T18998] gretap1: left promiscuous mode
[  290.818257][T18998] vxcan6: left promiscuous mode
[  290.820177][T18998] vxcan7: left promiscuous mode
[  290.822015][T18998] bridge7: left promiscuous mode
[  290.824275][T18998] ip6gretap2: left promiscuous mode
[  290.826372][T18998] bridge8: left promiscuous mode
[  290.828271][T18998] veth4: left promiscuous mode
[  290.830323][T18998] mac80211_hwsim hwsim25 wlan6: left promiscuous mode
[  290.832862][T18998] ip6erspan0: left promiscuous mode
[  290.835053][T18998] bridge9: left promiscuous mode
[  290.836991][T18998] bond17: left promiscuous mode
[  290.839337][T18998] bond16: left promiscuous mode
[  290.841344][T18998] bridge10: left promiscuous mode
[  290.843103][T18998] bond18: left promiscuous mode
[  290.845078][T18998] gretap2: left promiscuous mode
[  290.847263][T18998] gretap3: left promiscuous mode
[  290.849465][T18998] sit4: left promiscuous mode
[  290.851381][T18998] pimreg3: left promiscuous mode
[  290.853386][T18998] mac80211_hwsim hwsim28 wlan7: left promiscuous mode
[  290.855871][T18998] vlan0003: left promiscuous mode
[  290.857832][T18998] bond19: left promiscuous mode
[  290.859886][T18998] sit5: left promiscuous mode
[  290.861840][T18998] ip6gretap3: left promiscuous mode
[  290.864076][T18998] mac80211_hwsim hwsim31 wlan8: left promiscuous mode
[  290.866796][T18998] bond20: left promiscuous mode
[  290.868736][T18998] veth6: left promiscuous mode
[  290.870772][T18998] veth7: left promiscuous mode
[  290.872670][T18998] bond21: left promiscuous mode
[  290.874809][T18998] bridge11: left promiscuous mode
[  290.876857][T18998] batadv2: left promiscuous mode
[  290.878849][T18998] ip6erspan1: left promiscuous mode
[  290.881336][T18998] mac80211_hwsim hwsim34 wlan9: left promiscuous mode
[  290.884356][T18998] ip6tnl5: left promiscuous mode
[  290.886651][T18998] veth8: left promiscuous mode
[  290.888950][T18998] veth9: left promiscuous mode
[  290.890835][T18998] bond22: left promiscuous mode
[  290.893080][T18998] ip6gretap4: left promiscuous mode
[  290.897798][T18998] vlan6: left promiscuous mode
[  290.900958][T18998] bridge12: left promiscuous mode
[  290.904646][T18998] bond23: left promiscuous mode
[  290.906642][T18998] vxcan9: left promiscuous mode
[  290.912634][T18998] bond24: left promiscuous mode
[  290.917877][T18998] bond26: left promiscuous mode
[  290.925417][T18998] bond28: left promiscuous mode
[  290.928529][T18998] ip6gre4: left allmulticast mode
[  290.934969][T18998] veth21: left promiscuous mode
[  290.942376][ T5879] lo speed is unknown, defaulting to 1000
[  290.945569][ T5879] syz2: Port: 1 Link DOWN
[  290.950965][T19007] hsr_slave_0: left promiscuous mode
[  290.953456][T19007] hsr_slave_1: left promiscuous mode
[  290.976255][ T5858] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.980636][ T5858] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.990400][ T5858] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.997460][ T5858] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  291.416538][T19029] netlink: 'syz.2.4047': attribute type 1 has an invalid length.
[  291.447977][T19029] 8021q: adding VLAN 0 to HW filter on device bond33
[  291.611352][T19042] lo speed is unknown, defaulting to 1000
[  291.616365][T19042] lo speed is unknown, defaulting to 1000
[  291.620384][T19042] wg1 speed is unknown, defaulting to 1000
[  291.935100][T19065] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  292.340110][T19082] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  292.645736][T19110] netlink: 'syz.0.4072': attribute type 10 has an invalid length.
[  292.969649][T19118] __nla_validate_parse: 7 callbacks suppressed
[  292.969663][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4076'.
[  292.976606][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4076'.
[  293.391737][T19138] syzkaller1: entered promiscuous mode
[  293.393681][T19138] syzkaller1: entered allmulticast mode
[  294.199053][T19149] netlink: 'syz.1.4085': attribute type 1 has an invalid length.
[  294.202632][T19149] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4085'.
[  294.206078][T19149] netlink: 'syz.1.4085': attribute type 1 has an invalid length.
[  294.208869][T19148] netlink: 'syz.1.4085': attribute type 1 has an invalid length.
[  294.212487][T19148] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4085'.
[  294.218122][T19148] netlink: 'syz.1.4085': attribute type 1 has an invalid length.
[  294.390898][T19157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4088'.
[  294.581327][T19169] netlink: 'syz.0.4094': attribute type 1 has an invalid length.
[  294.586075][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'.
[  294.643816][T19181] netlink: 'syz.1.4098': attribute type 1 has an invalid length.
[  294.688175][T19181] bond26: (slave bridge17): Enslaving as a backup interface with an up link
[  294.699617][T19169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4094'.
[  294.783311][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'.
[  294.806236][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4099'.
[  294.843801][T19199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4102'.
[  294.880577][T19199] netlink: 'syz.1.4102': attribute type 4 has an invalid length.
[  294.909814][T19199] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  295.061067][T19215] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  295.112718][T19224] siw: device registration error -23
[  295.497953][   T33] audit: type=1800 audit(1757435135.156:11): pid=19246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4117" name="cgroup.controllers" dev="tmpfs" ino=6425 res=0 errno=0
[  295.985037][T19297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.989614][T19297] syzkaller0: entered promiscuous mode
[  295.991989][T19297] syzkaller0: entered allmulticast mode
[  296.008622][T19297] tipc: Resetting bearer <eth:syzkaller0>
[  296.015244][T19296] tipc: Resetting bearer <eth:syzkaller0>
[  296.023496][T19296] tipc: Disabling bearer <eth:syzkaller0>
[  296.172687][T19309] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16)
[  296.329650][T19325] lo speed is unknown, defaulting to 1000
[  296.332769][T19325] lo speed is unknown, defaulting to 1000
[  296.338755][T19325] wg1 speed is unknown, defaulting to 1000
[  297.538530][T19379] sock: sock_timestamping_bind_phc: sock not bind to device
[  297.657322][T19391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.662933][T19391] tipc: Resetting bearer <eth:syzkaller0>
[  297.677264][T19391] validate_nla: 4 callbacks suppressed
[  297.677274][T19391] netlink: 'syz.1.4165': attribute type 1 has an invalid length.
[  297.726114][T19399] netlink: 'syz.0.4168': attribute type 15 has an invalid length.
[  297.730517][T19390] tipc: Disabling bearer <eth:syzkaller0>
[  298.042023][T19420] __nla_validate_parse: 16 callbacks suppressed
[  298.042033][T19420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4177'.
[  298.077347][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'.
[  298.134026][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  298.183081][T19434] netlink: 'syz.2.4181': attribute type 1 has an invalid length.
[  298.249383][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4181'.
[  298.253300][T19434] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4181'.
[  298.264089][T19434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4181'.
[  298.293485][T19445] bond0: entered promiscuous mode
[  298.299758][T19445] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  298.309871][T19445] bond0: left promiscuous mode
[  298.311983][T19445] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  298.385247][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4185'.
[  298.623165][T19464] openvswitch: netlink: IP tunnel TTL not specified.
[  298.772200][T19475] netlink: 'syz.0.4195': attribute type 1 has an invalid length.
[  298.795717][T19475] 8021q: adding VLAN 0 to HW filter on device bond31
[  298.802510][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  298.852582][T19482] lo speed is unknown, defaulting to 1000
[  298.862641][T19482] lo speed is unknown, defaulting to 1000
[  298.868606][T19482] wg1 speed is unknown, defaulting to 1000
[  298.875309][ T5858] nci: nci_rsp_packet: unknown rsp opcode 0xc06
[  299.491835][T19500] dvmrp1: entered allmulticast mode
[  299.493784][T19501] dvmrp1: left allmulticast mode
[  299.679266][T19511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4203'.
[  299.764777][T19510] macvlan1: entered allmulticast mode
[  299.871022][T19520] netlink: 'syz.1.4208': attribute type 1 has an invalid length.
[  299.903639][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'.
[  299.906904][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4208'.
[  299.970895][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4211'.
[  300.151798][T19552] lo speed is unknown, defaulting to 1000
[  300.158589][T19552] lo speed is unknown, defaulting to 1000
[  300.161603][T19552] wg1 speed is unknown, defaulting to 1000
[  300.539674][T19562] lo speed is unknown, defaulting to 1000
[  300.542511][T19562] lo speed is unknown, defaulting to 1000
[  300.547094][T19562] wg1 speed is unknown, defaulting to 1000
[  300.892162][T19575] netlink: 'syz.1.4226': attribute type 11 has an invalid length.
[  300.988181][T19578] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  301.025528][T19586] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  301.028763][T19586] bond1: (slave macvlan9): Enslaving as a backup interface with an up link
[  301.038245][T19586] bond0: (slave wlan1): Releasing backup interface
[  301.043287][T19586] bond20: (slave gretap5): Releasing active interface
[  301.050906][T19586] bond22: (slave wireguard2): Releasing backup interface
[  301.053746][T19586] wireguard2: left promiscuous mode
[  301.058568][T19586] bond22: (slave wireguard3): making interface the new active one
[  301.066491][T19586] wireguard3: entered promiscuous mode
[  301.076313][T19586] bond22: (slave wireguard3): Releasing backup interface
[  301.078646][T19586] wireguard3: left promiscuous mode
[  301.091199][T19586] bond26: (slave bridge17): Releasing backup interface
[  301.105929][T19586] bond1: (slave macvlan9): Releasing backup interface
[  301.681250][T19657] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  302.209704][T19669] sock: sock_timestamping_bind_phc: sock not bind to device
[  302.260380][T19673] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.299967][T19673] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.360895][T19673] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.409032][T19673] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.465310][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.476426][ T5892] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.483785][ T5892] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.496129][ T6930] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.207557][T19730] lo speed is unknown, defaulting to 1000
[  303.210335][T19730] lo speed is unknown, defaulting to 1000
[  303.215056][T19730] wg1 speed is unknown, defaulting to 1000
[  303.228134][T19735] __nla_validate_parse: 2 callbacks suppressed
[  303.228143][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'.
[  303.471877][T19746] lo speed is unknown, defaulting to 1000
[  303.475239][T19746] lo speed is unknown, defaulting to 1000
[  303.478023][T19746] wg1 speed is unknown, defaulting to 1000
[  303.625981][T19752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4283'.
[  303.709600][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4286'.
[  303.731171][T19760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'.
[  303.742802][T19760] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4285'.
[  303.760583][T19760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'.
[  303.884342][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4289'.
[  303.890720][T19769] netlink: 'syz.2.4289': attribute type 7 has an invalid length.
[  303.895780][T19769] netlink: 'syz.2.4289': attribute type 8 has an invalid length.
[  303.898872][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'.
[  304.003742][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4295'.
[  304.109925][T19793] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4298'.
[  304.168410][T19804] netlink: 'syz.2.4303': attribute type 9 has an invalid length.
[  304.190541][T19802] lo speed is unknown, defaulting to 1000
[  304.193046][T19802] lo speed is unknown, defaulting to 1000
[  304.197338][T19802] wg1 speed is unknown, defaulting to 1000
[  304.279491][T19815] lo speed is unknown, defaulting to 1000
[  304.285612][T19815] lo speed is unknown, defaulting to 1000
[  304.288379][T19815] wg1 speed is unknown, defaulting to 1000
[  304.320033][T19822] netlink: 'syz.1.4308': attribute type 83 has an invalid length.
[  304.556677][T19836] sock: sock_timestamping_bind_phc: sock not bind to device
[  305.373652][T19879] lo speed is unknown, defaulting to 1000
[  305.379654][T19879] lo speed is unknown, defaulting to 1000
[  305.383564][T19879] wg1 speed is unknown, defaulting to 1000
[  305.445458][T19882] lo speed is unknown, defaulting to 1000
[  305.448228][T19882] lo speed is unknown, defaulting to 1000
[  305.450961][T19882] wg1 speed is unknown, defaulting to 1000
[  305.838709][T19914] syzkaller1: entered promiscuous mode
[  305.840876][T19914] syzkaller1: entered allmulticast mode
[  305.867572][T19910] netlink: 'syz.2.4337': attribute type 8 has an invalid length.
[  307.401123][T20033] netem: incorrect ge model size
[  307.403517][T20033] netem: change failed
[  307.408597][T20034] netem: incorrect ge model size
[  307.412370][T20034] netem: change failed
[  308.070131][T20098] netlink: 'syz.1.4397': attribute type 1 has an invalid length.
[  308.091948][T20098] 8021q: adding VLAN 0 to HW filter on device bond29
[  308.331481][T20127] netlink: 'syz.1.4405': attribute type 1 has an invalid length.
[  308.339196][T20127] __nla_validate_parse: 16 callbacks suppressed
[  308.339208][T20127] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4405'.
[  308.544525][T20147] netlink: 'syz.1.4412': attribute type 4 has an invalid length.
[  308.547977][T20147] netlink: 'syz.1.4412': attribute type 4 has an invalid length.
[  308.620449][T20154] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.4414'.
[  308.623664][T20154] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.627252][T20154] openvswitch: netlink: Message has 252 unknown bytes.
[  308.667824][T20156] pim6reg1: entered allmulticast mode
[  308.881568][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4417'.
[  308.886089][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4417'.
[  309.040287][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4421'.
[  309.218257][T20175] lo speed is unknown, defaulting to 1000
[  309.221101][T20175] lo speed is unknown, defaulting to 1000
[  309.223797][T20175] wg1 speed is unknown, defaulting to 1000
[  309.731458][T20216] netlink: 'syz.1.4437': attribute type 1 has an invalid length.
[  309.732720][T20213] lo speed is unknown, defaulting to 1000
[  309.737800][T20213] lo speed is unknown, defaulting to 1000
[  309.740184][T20216] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4437'.
[  309.742338][T20213] wg1 speed is unknown, defaulting to 1000
[  309.751060][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4437'.
[  309.760575][T20216] 8021q: VLANs not supported on vxcan1
[  309.772686][T20218] lo speed is unknown, defaulting to 1000
[  309.782258][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'.
[  309.788126][T20218] lo speed is unknown, defaulting to 1000
[  309.790906][T20218] wg1 speed is unknown, defaulting to 1000
[  310.072965][T20244] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4446'.
[  310.082652][T20244] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4446'.
[  310.086895][T20244] sock: sock_timestamping_bind_phc: sock not bind to device
[  310.093143][T20244] sock: sock_timestamping_bind_phc: sock not bind to device
[  310.272075][T18489] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  310.276814][T18489] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  310.290123][T20271] netlink: 'syz.2.4455': attribute type 8 has an invalid length.
[  310.295484][ T5923] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  310.306239][T20271] bond0: entered promiscuous mode
[  310.313237][T20271] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  310.316340][T20271] debugfs: 'hsr1' already exists in 'hsr'
[  310.318611][T20271] Cannot create hsr debugfs directory
[  310.320756][T20271] hsr1: entered promiscuous mode
[  310.335474][T20273] netlink: 'syz.0.4456': attribute type 1 has an invalid length.
[  310.532858][T20287] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  310.595738][ T5923] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  310.719452][T20300] netlink: 'syz.0.4468': attribute type 1 has an invalid length.
[  310.955641][T20327] netlink: 'syz.0.4475': attribute type 3 has an invalid length.
[  310.959105][T20327] netlink: 'syz.0.4475': attribute type 1 has an invalid length.
[  310.988522][T20327] 8021q: adding VLAN 0 to HW filter on device bond33
[  311.002654][T20327] vlan0: entered allmulticast mode
[  311.007431][T20327] batadv0: entered allmulticast mode
[  311.011689][T20327] bond33: (slave vlan0): Opening slave failed
[  311.216032][T20339] sctp: [Deprecated]: syz.0.4480 (pid 20339) Use of int in max_burst socket option.
[  311.216032][T20339] Use struct sctp_assoc_value instead
[  311.334206][ T5923] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  312.408223][T20350] pim6reg: entered allmulticast mode
[  312.416983][T20350] pim6reg: left allmulticast mode
[  312.512158][T20353] lo speed is unknown, defaulting to 1000
[  312.517239][T20353] lo speed is unknown, defaulting to 1000
[  312.519774][T20353] wg1 speed is unknown, defaulting to 1000
[  312.642728][T20353] netlink: 'syz.1.4485': attribute type 2 has an invalid length.
[  312.955167][T20384] netlink: 'syz.1.4492': attribute type 21 has an invalid length.
[  312.958427][T20384] netlink: 'syz.1.4492': attribute type 22 has an invalid length.
[  312.963370][T20384] netlink: 'syz.1.4492': attribute type 23 has an invalid length.
[  313.038712][T20398] sctp: [Deprecated]: syz.2.4496 (pid 20398) Use of int in max_burst socket option deprecated.
[  313.038712][T20398] Use struct sctp_assoc_value instead
[  313.079283][T20396] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  313.455179][T20423] __nla_validate_parse: 16 callbacks suppressed
[  313.455189][T20423] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4504'.
[  313.542604][T20425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4505'.
[  313.596863][T20430] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  313.605073][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4507'.
[  313.701407][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4509'.
[  313.704858][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4509'.
[  313.972427][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4513'.
[  314.091901][T20454] 8021q: adding VLAN 0 to HW filter on device bond36
[  314.108832][T20454] 8021q: adding VLAN 0 to HW filter on device bond36
[  314.111381][T20454] bond36: (slave vxcan9): The slave device specified does not support setting the MAC address
[  314.115653][T20454] bond36: (slave vxcan9): Error -95 calling set_mac_address
[  314.159840][T20458] bond36: (slave bridge28): Enslaving as an active interface with a down link
[  314.204879][T20462] lo speed is unknown, defaulting to 1000
[  314.207889][T20462] lo speed is unknown, defaulting to 1000
[  314.210659][T20462] wg1 speed is unknown, defaulting to 1000
[  314.374056][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  314.408163][T20430] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  314.827205][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'.
[  314.901759][T20505] lo speed is unknown, defaulting to 1000
[  314.905956][T20505] wg1 speed is unknown, defaulting to 1000
[  315.054562][T20515] vlan0: entered promiscuous mode
[  315.056950][T20515] vlan0: entered allmulticast mode
[  315.059303][T20515] bond0: entered allmulticast mode
[  315.061687][T20515] team0: entered allmulticast mode
[  315.065169][T20515] syz_tun: entered allmulticast mode
[  315.067506][T20515] bond6: entered allmulticast mode
[  315.071830][T20515] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  315.089903][T20517] syz.2.4536 uses old SIOCAX25GETINFO
[  315.095300][T20517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4536'.
[  315.110013][T20517] validate_nla: 6 callbacks suppressed
[  315.110022][T20517] netlink: 'syz.2.4536': attribute type 2 has an invalid length.
[  315.135417][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4537'.
[  315.328077][T20531] tun0: tun_chr_ioctl cmd 1074025675
[  315.329920][T20531] tun0: persist enabled
[  315.332033][T20531] tun0: tun_chr_ioctl cmd 1074025675
[  315.334777][T20531] tun0: persist disabled
[  315.472740][T20542] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4545'.
[  315.533346][T20549] team0: Device gtp2 is up. Set it down before adding it as a team port
[  315.625369][T20552] bond37 (unregistering): Released all slaves
[  315.746392][T20570] sctp: [Deprecated]: syz.0.4553 (pid 20570) Use of int in max_burst socket option deprecated.
[  315.746392][T20570] Use struct sctp_assoc_value instead
[  315.752392][T20569] sctp: [Deprecated]: syz.0.4553 (pid 20569) Use of int in max_burst socket option deprecated.
[  315.752392][T20569] Use struct sctp_assoc_value instead
[  315.778049][T20573] netlink: 'syz.1.4551': attribute type 18 has an invalid length.
[  315.789084][T20573] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  316.036544][T20593] netlink: 'syz.0.4556': attribute type 21 has an invalid length.
[  316.113835][T20599] lo speed is unknown, defaulting to 1000
[  316.118872][T20599] wg1 speed is unknown, defaulting to 1000
[  316.179829][T20601] bond34: entered promiscuous mode
[  316.182091][T20601] bond34: entered allmulticast mode
[  316.185509][T20601] 8021q: adding VLAN 0 to HW filter on device bond34
[  316.271752][T20608] netlink: 'syz.0.4561': attribute type 11 has an invalid length.
[  317.943328][T20717] 8021q: adding VLAN 0 to HW filter on device bond30
[  318.010830][T20721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.017448][ T5923] lo speed is unknown, defaulting to 1000
[  318.019947][ T5923] syz2: Port: 1 Link ACTIVE
[  318.159839][T20743] netlink: 'syz.0.4608': attribute type 20 has an invalid length.
[  318.163769][T20743] netlink: 'syz.0.4608': attribute type 20 has an invalid length.
[  318.208474][T20745] lo speed is unknown, defaulting to 1000
[  318.211427][T20745] wg1 speed is unknown, defaulting to 1000
[  318.749637][T20769] netlink: 'syz.0.4616': attribute type 1 has an invalid length.
[  318.752244][T20769] __nla_validate_parse: 20 callbacks suppressed
[  318.752252][T20769] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4616'.
[  318.758046][T20769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4616'.
[  318.950569][T20781] delete_channel: no stack
[  319.023442][T20789] netlink: 'syz.0.4621': attribute type 2 has an invalid length.
[  319.032495][T20789] : entered promiscuous mode
[  319.139018][T20798] netlink: 'syz.0.4624': attribute type 1 has an invalid length.
[  319.142445][T20798] netlink: 'syz.0.4624': attribute type 11 has an invalid length.
[  319.146566][T20798] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4624'.
[  319.307170][T20802] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4626'.
[  319.509883][T20827] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4633'.
[  319.561885][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'.
[  319.567617][T20824] lo speed is unknown, defaulting to 1000
[  319.567931][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'.
[  319.571056][T20828] lo speed is unknown, defaulting to 1000
[  319.586117][T20824] wg1 speed is unknown, defaulting to 1000
[  319.593231][T20828] wg1 speed is unknown, defaulting to 1000
[  319.730695][T20839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4638'.
[  319.875050][T20848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'.
[  319.930769][T20851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4641'.
[  321.188044][T20904] lo speed is unknown, defaulting to 1000
[  321.190984][T20904] wg1 speed is unknown, defaulting to 1000
[  321.478476][T20916] macsec5: entered promiscuous mode
[  321.480743][T20916] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  321.503826][T20916] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  321.621036][T20928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.624148][T20928] IPv6: NLM_F_CREATE should be set when creating new route
[  321.627272][T20928] IPv6: NLM_F_CREATE should be set when creating new route
[  321.630352][T20928] IPv6: NLM_F_CREATE should be set when creating new route
[  322.242886][T20975] veth31: entered promiscuous mode
[  322.453979][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  322.761530][T21039] syzkaller0: entered promiscuous mode
[  322.763510][T21039] syzkaller0: entered allmulticast mode
[  322.775263][T21039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.875323][T21047] syz.0.4701: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  322.882056][T21047] CPU: 1 UID: 0 PID: 21047 Comm: syz.0.4701 Not tainted syzkaller #0 PREEMPT(full) 
[  322.882069][T21047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.882073][T21047] Call Trace:
[  322.882076][T21047]  <TASK>
[  322.882080][T21047]  dump_stack_lvl+0x189/0x250
[  322.882093][T21047]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.882102][T21047]  ? __pfx__printk+0x10/0x10
[  322.882111][T21047]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  322.882119][T21047]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  322.882127][T21047]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  322.882136][T21047]  warn_alloc+0x214/0x310
[  322.882149][T21047]  ? __pfx_warn_alloc+0x10/0x10
[  322.882162][T21047]  ? __get_vm_area_node+0x28f/0x300
[  322.882171][T21047]  ? xskq_create+0xbf/0x170
[  322.882182][T21047]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  322.882202][T21047]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  322.882213][T21047]  ? __kasan_kmalloc+0x93/0xb0
[  322.882223][T21047]  vmalloc_user_noprof+0xad/0xf0
[  322.882233][T21047]  ? xskq_create+0xbf/0x170
[  322.882242][T21047]  xskq_create+0xbf/0x170
[  322.882252][T21047]  xsk_init_queue+0xb0/0x110
[  322.882262][T21047]  xsk_setsockopt+0x57b/0x8d0
[  322.882272][T21047]  ? __pfx_xsk_setsockopt+0x10/0x10
[  322.882280][T21047]  ? __pfx_aa_sk_perm+0x10/0x10
[  322.882291][T21047]  ? __fget_files+0x2a/0x420
[  322.882300][T21047]  ? aa_sock_opt_perm+0xff/0x1b0
[  322.882307][T21047]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  322.882315][T21047]  ? __pfx_xsk_setsockopt+0x10/0x10
[  322.882324][T21047]  do_sock_setsockopt+0x17c/0x1b0
[  322.882333][T21047]  __x64_sys_setsockopt+0x13f/0x1b0
[  322.882342][T21047]  do_syscall_64+0xfa/0x3b0
[  322.882348][T21047]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.882357][T21047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.882363][T21047]  ? exc_page_fault+0x9f/0xf0
[  322.882373][T21047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.882380][T21047] RIP: 0033:0x7fe91538ebe9
[  322.882387][T21047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.882393][T21047] RSP: 002b:00007fe916152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  322.882401][T21047] RAX: ffffffffffffffda RBX: 00007fe9155c5fa0 RCX: 00007fe91538ebe9
[  322.882406][T21047] RDX: 0000000000000003 RSI: 000000000000011b RDI: 00000000000000a8
[  322.882410][T21047] RBP: 00007fe915411e19 R08: 0000000000000004 R09: 0000000000000000
[  322.882414][T21047] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  322.882425][T21047] R13: 00007fe9155c6038 R14: 00007fe9155c5fa0 R15: 00007fff3500a428
[  322.882436][T21047]  </TASK>
[  322.882439][T21047] Mem-Info:
[  322.985567][T21047] active_anon:4038 inactive_anon:0 isolated_anon:0
[  322.985567][T21047]  active_file:1673 inactive_file:38331 isolated_file:0
[  322.985567][T21047]  unevictable:1768 dirty:169 writeback:0
[  322.985567][T21047]  slab_reclaimable:12635 slab_unreclaimable:100362
[  322.985567][T21047]  mapped:18167 shmem:2455 pagetables:1188
[  322.985567][T21047]  sec_pagetables:0 bounce:0
[  322.985567][T21047]  kernel_misc_reclaimable:0
[  322.985567][T21047]  free:231943 free_pcp:24707 free_cma:0
[  323.007504][T21047] Node 0 active_anon:8932kB inactive_anon:0kB active_file:4856kB inactive_file:147884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37092kB dirty:328kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8700kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  323.023958][T21047] Node 1 active_anon:7288kB inactive_anon:0kB active_file:1836kB inactive_file:5440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35576kB dirty:348kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5840kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  323.043397][T21047] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  323.061517][T21047] lowmem_reserve[]: 0 811 811 811 811
[  323.074395][T21047] Node 0 DMA32 free:183552kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9068kB inactive_anon:0kB active_file:4856kB inactive_file:147884kB unevictable:3536kB writepending:328kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:39052kB local_pcp:17484kB free_cma:0kB
[  323.104888][T21047] lowmem_reserve[]: 0 0 0 0 0
[  323.107018][T21047] Node 1 DMA32 free:445028kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:12292kB local_pcp:6300kB free_cma:0kB
[  323.119879][T21047] lowmem_reserve[]: 0 0 854 854 854
[  323.121821][T21047] Node 1 Normal free:283320kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7288kB inactive_anon:0kB active_file:1836kB inactive_file:5440kB unevictable:3536kB writepending:348kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47768kB local_pcp:20028kB free_cma:0kB
[  323.138086][T21047] lowmem_reserve[]: 0 0 0 0 0
[  323.140184][T21047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  323.145846][T21047] Node 0 DMA32: 130*4kB (UME) 818*8kB (UME) 376*16kB (UME) 312*32kB (UME) 328*64kB (UM) 142*128kB (UME) 70*256kB (UME) 42*512kB (UME) 30*1024kB (UME) 3*2048kB (UM) 11*4096kB (UM) = 183576kB
[  323.153102][T21047] Node 1 DMA32: 111*4kB (UM) 105*8kB (UME) 106*16kB (UME) 108*32kB (UME) 105*64kB (UM) 102*128kB (UME) 86*256kB (UM) 91*512kB (UME) 76*1024kB (UME) 5*2048kB (UME) 64*4096kB (UM) = 445028kB
[  323.159102][T21047] Node 1 Normal: 4*4kB (UME) 5*8kB (UE) 234*16kB (U) 347*32kB (UME) 276*64kB (UME) 183*128kB (UM) 158*256kB (UM) 111*512kB (UM) 107*1024kB (UME) 2*2048kB (UE) 4*4096kB (U) = 283320kB
[  323.166124][T21047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  323.169188][T21047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  323.172118][T21047] 42459 total pagecache pages
[  323.173691][T21047] 0 pages in swap cache
[  323.175447][T21047] Free swap  = 124996kB
[  323.176903][T21047] Total swap = 124996kB
[  323.178344][T21047] 786301 pages RAM
[  323.179559][T21047] 0 pages HighMem/MovableOnly
[  323.181048][T21047] 241337 pages reserved
[  323.182710][T21047] 0 pages cma reserved
[  323.745455][T21117] lo speed is unknown, defaulting to 1000
[  323.749208][T21117] wg1 speed is unknown, defaulting to 1000
[  324.108214][T21139] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  324.109793][T21138] IPVS: stopping backup sync thread 21139 ...
[  324.287748][T21151] __nla_validate_parse: 18 callbacks suppressed
[  324.287763][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4735'.
[  324.330621][T21157] validate_nla: 1 callbacks suppressed
[  324.330634][T21157] netlink: 'syz.0.4738': attribute type 2 has an invalid length.
[  324.343239][T21157] k*]: entered promiscuous mode
[  324.358484][T21157] erspan0: left promiscuous mode
[  324.382310][T21157] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.390375][T21157] 8021q: adding VLAN 0 to HW filter on device team0
[  324.392936][T21157] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  324.401446][T21159] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  324.414738][T21157] veth0_to_team: entered promiscuous mode
[  324.417222][T21157] veth0_to_team: entered allmulticast mode
[  324.438296][T21162] netlink: 'syz.2.4740': attribute type 1 has an invalid length.
[  324.463438][T21162] 8021q: adding VLAN 0 to HW filter on device bond37
[  324.496729][T21165] lo speed is unknown, defaulting to 1000
[  324.499836][T21165] wg1 speed is unknown, defaulting to 1000
[  324.538830][T21172] syzkaller1: entered promiscuous mode
[  324.541063][T21172] syzkaller1: entered allmulticast mode
[  324.630171][T21177] tap0: tun_chr_ioctl cmd 2147767507
[  324.867294][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4747'.
[  324.876626][T21183] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4747'.
[  324.907054][T21192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4749'.
[  324.931893][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'.
[  325.108718][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4758'.
[  325.168005][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'.
[  325.171351][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'.
[  325.202582][T21228] syzkaller0: entered promiscuous mode
[  325.206844][T21228] syzkaller0: entered allmulticast mode
[  325.270285][T21238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4763'.
[  325.275923][T21238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4763'.
[  325.297342][T21237] netlink: 'syz.2.4763': attribute type 1 has an invalid length.
[  325.500177][T21259] netlink: 'syz.2.4770': attribute type 1 has an invalid length.
[  326.240953][T21315] erspan0: left promiscuous mode
[  326.255928][T21315] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  326.262206][T21317] 8021q: VLANs not supported on ip_vti0
[  326.357296][T21325] delete_channel: no stack
[  326.501692][T21333] lo speed is unknown, defaulting to 1000
[  326.540813][T21333] wg1 speed is unknown, defaulting to 1000
[  326.670519][T21349] delete_channel: no stack
[  326.830703][T21362] netlink: 'syz.1.4805': attribute type 1 has an invalid length.
[  326.877666][T21362] bond32: entered promiscuous mode
[  326.879979][T21362] 8021q: adding VLAN 0 to HW filter on device bond32
[  326.895544][T21362] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  327.307512][T21407] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  327.961384][T21434] lo speed is unknown, defaulting to 1000
[  327.964654][T21434] wg1 speed is unknown, defaulting to 1000
[  327.995770][T21434] netlink: 'syz.1.4827': attribute type 5 has an invalid length.
[  328.000584][ T5879] IPVS: starting estimator thread 0...
[  328.094364][T21437] IPVS: using max 43 ests per chain, 103200 per kthread
[  328.305987][T18489] IPVS: stop unused estimator thread 0...
[  328.426372][T21452] veth0: left promiscuous mode
[  328.429893][T21452] veth0_to_team: left promiscuous mode
[  328.431794][T21452] veth0_to_team: left allmulticast mode
[  328.437087][T21452] batadv_slave_0: left allmulticast mode
[  328.440321][T21452] vlan0: left promiscuous mode
[  328.445241][T21452] bridge1: left allmulticast mode
[  328.447346][T21452] vlan2: left promiscuous mode
[  328.449140][T21452] bridge0: left promiscuous mode
[  328.451638][T21452] ip6tnl1: left promiscuous mode
[  328.453421][T21452] ip6tnl1: left allmulticast mode
[  328.455884][T21452] vxcan3: left promiscuous mode
[  328.457796][T21452] vxcan3: left allmulticast mode
[  328.460190][T21452] bond3: left promiscuous mode
[  328.462460][T21452] batadv1: left allmulticast mode
[  328.466144][T21452] geneve3: left promiscuous mode
[  328.467997][T21452] ip6tnl4: left promiscuous mode
[  328.470051][T21452] macvlan4: left promiscuous mode
[  328.472408][T21452] veth7: left promiscuous mode
[  328.475187][T21452] geneve4: left promiscuous mode
[  328.476851][T21452] geneve4: left allmulticast mode
[  328.479162][T21452] vti0: left promiscuous mode
[  328.481435][T21452] macsec2: left promiscuous mode
[  328.484378][T21452] macsec2: left allmulticast mode
[  328.486753][T21452] macvtap1: left promiscuous mode
[  328.488949][T21452] macvtap1: left allmulticast mode
[  328.491493][T21452] gre3: left allmulticast mode
[  328.494512][T21452] geneve5: left promiscuous mode
[  328.496503][T21452] geneve5: left allmulticast mode
[  328.498778][T21452] macsec3: left promiscuous mode
[  328.500823][T21452] macsec3: left allmulticast mode
[  328.504317][T21452] bridge14: left allmulticast mode
[  328.508224][T21452] bond17: left promiscuous mode
[  328.510316][T21452] bond17: left allmulticast mode
[  328.512760][T21452] bond19: left promiscuous mode
[  328.517937][T21452] batadv3: left allmulticast mode
[  328.520440][T21452] bond22: left promiscuous mode
[  328.522794][T21452] bond23: left promiscuous mode
[  328.527802][T21452] veth31: left promiscuous mode
[  328.530564][T21452] bond32: left promiscuous mode
[  328.540267][T21468] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR
[  328.587636][T21479] netlink: 'syz.0.4840': attribute type 1 has an invalid length.
[  328.617532][T21479] bond36: (slave vxcan13): The slave device specified does not support setting the MAC address
[  328.621850][T21479] bond36: (slave vxcan13): Error -95 calling set_mac_address
[  328.669329][T21483] macvlan0: entered promiscuous mode
[  328.671715][T21483] macvlan0: entered allmulticast mode
[  328.678187][T21483] bond36: entered promiscuous mode
[  328.680787][T21483] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  328.686947][T21483] bond36: left promiscuous mode
[  329.498403][T21571] netlink: 'syz.2.4866': attribute type 10 has an invalid length.
[  329.727737][T21593] lo speed is unknown, defaulting to 1000
[  329.730729][T21593] wg1 speed is unknown, defaulting to 1000
[  329.867107][T21606] netlink: 'syz.0.4883': attribute type 13 has an invalid length.
[  329.869780][T21606] netlink: 'syz.0.4883': attribute type 17 has an invalid length.
[  329.890079][T21606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.922282][T21606] lo speed is unknown, defaulting to 1000
[  329.925162][T21606] wg1 speed is unknown, defaulting to 1000
[  330.019821][T21616] lo speed is unknown, defaulting to 1000
[  330.022388][T21616] wg1 speed is unknown, defaulting to 1000
[  330.024866][T21606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.173639][T21616] netlink: 'syz.1.4885': attribute type 2 has an invalid length.
[  330.179378][T21616] __nla_validate_parse: 84 callbacks suppressed
[  330.179387][T21616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4885'.
[  330.473848][T21632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4889'.
[  330.692806][T21656] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4898'.
[  330.762655][T21663] netlink: 'syz.0.4901': attribute type 1 has an invalid length.
[  330.765990][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4901'.
[  330.866972][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'.
[  330.870034][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4902'.
[  330.873169][T21669] netlink: 'syz.1.4902': attribute type 19 has an invalid length.
[  331.032726][T21689] lo speed is unknown, defaulting to 1000
[  331.036090][T21689] wg1 speed is unknown, defaulting to 1000
[  331.052628][T21685] netlink: 'syz.0.4908': attribute type 1 has an invalid length.
[  331.151956][T21704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4913'.
[  331.196528][T21709] netlink: 'syz.1.4915': attribute type 1 has an invalid length.
[  331.209585][T21709] bond34: entered promiscuous mode
[  331.211731][T21709] 8021q: adding VLAN 0 to HW filter on device bond34
[  331.228376][T21709] 8021q: adding VLAN 0 to HW filter on device bond35
[  331.232197][T21709] bond34: (slave bond35): making interface the new active one
[  331.235093][T21709] bond35: entered promiscuous mode
[  331.237832][T21709] bond34: (slave bond35): Enslaving as an active interface with an up link
[  331.251680][T21709] bond34: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  331.259512][T21709] bond34: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  331.312598][T21712] bond36: entered promiscuous mode
[  331.315719][T21712] 8021q: adding VLAN 0 to HW filter on device bond36
[  332.002947][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4926'.
[  332.051569][T21751] lo speed is unknown, defaulting to 1000
[  332.057344][T21751] wg1 speed is unknown, defaulting to 1000
[  332.105263][T21754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4929'.
[  332.194724][T21761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4931'.
[  332.320008][T21770] syzkaller1: entered promiscuous mode
[  332.322085][T21770] syzkaller1: entered allmulticast mode
[  332.667835][T21791] lo speed is unknown, defaulting to 1000
[  332.671732][T21791] wg1 speed is unknown, defaulting to 1000
[  332.693995][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  333.183792][T21814] lo speed is unknown, defaulting to 1000
[  333.186931][T21814] wg1 speed is unknown, defaulting to 1000
[  333.547667][T21837] dvmrp8: entered allmulticast mode
[  333.551432][T21836] dvmrp8: left allmulticast mode
[  333.989446][T21885] netlink: 'syz.1.4976': attribute type 1 has an invalid length.
[  333.992033][T21885] netlink: 'syz.1.4976': attribute type 1 has an invalid length.
[  334.099748][T21893] 8021q: adding VLAN 0 to HW filter on device bond37
[  334.113224][T21885] bond37: (slave wlan0): Enslaving as an active interface with a down link
[  334.131484][T21885] vlan4: entered allmulticast mode
[  334.133706][T21885] bond37: (slave vlan4): Opening slave failed
[  334.330406][T21906] bond37: entered promiscuous mode
[  334.332417][T21906] 8021q: adding VLAN 0 to HW filter on device bond37
[  334.368456][T21910] 8021q: adding VLAN 0 to HW filter on device bond37
[  334.371285][T21910] bond37: (slave vxcan13): The slave device specified does not support setting the MAC address
[  334.378112][T21910] bond37: (slave vxcan13): Setting fail_over_mac to active for active-backup mode
[  334.385240][T21910] bond37: (slave vxcan13): making interface the new active one
[  334.388252][T21910] vxcan13: entered promiscuous mode
[  334.390487][T21910] bond37: (slave vxcan13): Enslaving as an active interface with an up link
[  334.521675][T21916] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  334.528686][T21909] lo speed is unknown, defaulting to 1000
[  334.590566][T21909] wg1 speed is unknown, defaulting to 1000
[  334.756208][T21921] lo speed is unknown, defaulting to 1000
[  334.759675][T21921] wg1 speed is unknown, defaulting to 1000
[  335.074834][T21942] lo speed is unknown, defaulting to 1000
[  335.077672][T21942] wg1 speed is unknown, defaulting to 1000
[  335.184822][T21942] __nla_validate_parse: 17 callbacks suppressed
[  335.184832][T21942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4992'.
[  335.248557][T21952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4996'.
[  335.253720][T21952] 8021q: VLANs not supported on nlmon0
[  335.445357][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'.
[  335.468771][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5001'.
[  335.661257][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5005'.
[  335.672224][T21984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5006'.
[  335.770349][T21994] 8021q: VLANs not supported on xfrm0
[  335.772405][T21994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5011'.
[  335.781562][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5011'.
[  335.821933][T21996] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5012'.
[  335.859275][T22000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5013'.
[  336.052258][T22012] can: request_module (can-proto-0) failed.
[  336.059853][T22012] validate_nla: 2 callbacks suppressed
[  336.059863][T22012] netlink: 'syz.0.5018': attribute type 10 has an invalid length.
[  336.069415][T22012] team0: Device dummy0 failed to register rx_handler
[  336.078571][T22012] netlink: 'syz.0.5018': attribute type 10 has an invalid length.
[  336.168970][T22027] batman_adv: batadv0: Adding interface: ip6gretap6
[  336.172075][T22027] batman_adv: batadv0: The MTU of interface ip6gretap6 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.185962][T22027] batman_adv: batadv0: Not using interface ip6gretap6 (retrying later): interface not active
[  336.508878][T22056] lo speed is unknown, defaulting to 1000
[  336.512789][T22056] wg1 speed is unknown, defaulting to 1000
[  337.109845][T22094] netlink: 'syz.1.5044': attribute type 142 has an invalid length.
[  337.151304][T22096] lo speed is unknown, defaulting to 1000
[  337.156405][T22096] wg1 speed is unknown, defaulting to 1000
[  337.263116][T22107] lo speed is unknown, defaulting to 1000
[  337.268282][T22107] wg1 speed is unknown, defaulting to 1000
[  337.649082][T22120] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (52)
[  337.823690][T22136] batadv4: entered promiscuous mode
[  337.826644][T22136] batadv4: entered allmulticast mode
[  338.122523][T22155] netlink: 'syz.0.5064': attribute type 7 has an invalid length.
[  338.141121][T22155] netlink: 'syz.0.5064': attribute type 8 has an invalid length.
[  338.198005][T22168] lo speed is unknown, defaulting to 1000
[  338.200861][T22168] wg1 speed is unknown, defaulting to 1000
[  338.325265][T22180] netlink: 'syz.0.5072': attribute type 11 has an invalid length.
[  338.512964][T22195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.626521][T22200] lo speed is unknown, defaulting to 1000
[  338.630269][T22200] wg1 speed is unknown, defaulting to 1000
[  339.020616][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  339.241669][T22261] netlink: 'syz.2.5099': attribute type 62 has an invalid length.
[  339.251894][T22265] macvlan0: entered promiscuous mode
[  339.328095][T22271] vlan3: entered promiscuous mode
[  339.329893][T22271] vlan3: entered allmulticast mode
[  339.331714][T22271] bond0: entered allmulticast mode
[  339.344908][T22271] netlink: 'syz.2.5103': attribute type 30 has an invalid length.
[  339.806531][T22304] IPv6: sit3: Disabled Multicast RS
[  340.477710][T22322] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  340.547179][T22325] __nla_validate_parse: 24 callbacks suppressed
[  340.547193][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5123'.
[  340.618071][T22333] netlink: 'syz.1.5126': attribute type 4 has an invalid length.
[  340.799388][T22339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5129'.
[  340.824353][T22343] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5130'.
[  341.009899][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'.
[  341.028936][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5137'.
[  341.098378][T22361] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  341.101605][T22361] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  341.105600][T22360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.462129][T22395] macvlan10: entered promiscuous mode
[  341.467088][T22395] vlan0: entered promiscuous mode
[  341.591306][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5154'.
[  341.623130][T22413] bond39: entered promiscuous mode
[  341.627702][T22413] 8021q: adding VLAN 0 to HW filter on device bond39
[  341.639009][T22402] 8021q: adding VLAN 0 to HW filter on device bond39
[  341.641512][T22402] bond39: (slave vcan1): The slave device specified does not support setting the MAC address
[  341.652241][T22402] bond39: (slave vcan1): Error -95 calling set_mac_address
[  341.663369][T22403] bond39: (slave vcan1): The slave device specified does not support setting the MAC address
[  341.668578][T22403] bond39: (slave vcan1): Error -95 calling set_mac_address
[  341.843254][T22427] lo speed is unknown, defaulting to 1000
[  341.853708][T22427] wg1 speed is unknown, defaulting to 1000
[  341.898164][T22437] lo speed is unknown, defaulting to 1000
[  341.901415][T22437] wg1 speed is unknown, defaulting to 1000
[  342.049307][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'.
[  342.062506][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'.
[  342.130547][T22463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'.
[  342.145123][T22463] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5170'.
[  342.340404][T22477] 8021q: adding VLAN 0 to HW filter on device bond40
[  342.344791][T22477] bond39: (slave bond40): Enslaving as an active interface with an up link
[  342.428654][T22487] lo speed is unknown, defaulting to 1000
[  342.431413][T22487] wg1 speed is unknown, defaulting to 1000
[  342.545754][T22490] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  342.548561][T22490] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  342.629133][T22502] lo speed is unknown, defaulting to 1000
[  342.631946][T22502] wg1 speed is unknown, defaulting to 1000
[  342.731203][T22505] lo speed is unknown, defaulting to 1000
[  342.733979][T22505] wg1 speed is unknown, defaulting to 1000
[  343.069929][T22514] netlink: 'syz.1.5188': attribute type 1 has an invalid length.
[  343.072553][T22514] NCSI netlink: No device for ifindex 0
[  343.662583][T22547] netlink: 'syz.0.5198': attribute type 5 has an invalid length.
[  343.809857][T22556] vlan0: entered promiscuous mode
[  343.811595][T22556] hsr0: entered promiscuous mode
[  343.813361][T22556] vlan0: left allmulticast mode
[  343.823162][T22556] team0: Port device vlan0 added
[  343.930317][T22560] sctp: [Deprecated]: syz.2.5204 (pid 22560) Use of int in maxseg socket option.
[  343.930317][T22560] Use struct sctp_assoc_value instead
[  344.567842][T22577] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  344.830692][T22602] netlink: 'syz.2.5220': attribute type 1 has an invalid length.
[  344.846689][T22602] 8021q: adding VLAN 0 to HW filter on device bond41
[  344.852691][T22602] ipvlan3: entered allmulticast mode
[  344.858154][T22602] bond41: entered allmulticast mode
[  344.947998][T22611] netlink: 'syz.2.5222': attribute type 6 has an invalid length.
[  344.952726][T22611] netlink: 'syz.2.5222': attribute type 12 has an invalid length.
[  345.107451][T22623] lo speed is unknown, defaulting to 1000
[  345.110431][T22623] wg1 speed is unknown, defaulting to 1000
[  345.707126][T22658] __nla_validate_parse: 13 callbacks suppressed
[  345.707137][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5236'.
[  345.712820][T22658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5236'.
[  345.836140][T22667] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  345.929545][T22676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5244'.
[  346.197524][T22699] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5254'.
[  346.260377][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5256'.
[  346.321600][T22723] macvlan1: left allmulticast mode
[  346.323527][T22723] pimreg: left allmulticast mode
[  346.349013][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'.
[  346.395417][T22729] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5264'.
[  346.449695][T22735] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5266'.
[  346.609842][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'.
[  346.693631][T22752] openvswitch: netlink: Message has 8 unknown bytes.
[  346.905994][T22786] IPv6: sit2: Disabled Multicast RS
[  346.908410][T22786] sit2: entered allmulticast mode
[  347.386257][T22801] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.442515][T22801] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.501109][T22801] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.544522][T22801] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.607396][T18489] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.617079][T18489] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.625368][T18489] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.641719][T18489] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  347.915576][T22811] lo speed is unknown, defaulting to 1000
[  347.918388][T22811] wg1 speed is unknown, defaulting to 1000
[  347.993102][T22819] netlink: 'syz.1.5293': attribute type 1 has an invalid length.
[  348.027206][T22819] 8021q: adding VLAN 0 to HW filter on device bond39
[  348.043536][T22819] 8021q: adding VLAN 0 to HW filter on device bond39
[  348.046665][T22819] bond39: (slave vxcan11): The slave device specified does not support setting the MAC address
[  348.052475][T22819] bond39: (slave vxcan11): Error -95 calling set_mac_address
[  348.093842][T22821] veth33: entered promiscuous mode
[  348.100277][T22821] bond39: (slave veth33): Enslaving as an active interface with a down link
[  348.109905][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.112648][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.144445][ T5907] bond37: (slave wlan0): failed to get link speed/duplex
[  348.220525][T22825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5295'.
[  348.255574][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  348.364456][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  348.379668][   T12] nci: nci_rx_work: unknown MT 0x1
[  348.474635][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  348.584702][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  348.714158][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  348.824993][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  348.934254][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  349.245549][T22864] netlink: 'syz.1.5308': attribute type 1 has an invalid length.
[  349.259652][T22864] vlan4: entered allmulticast mode
[  349.261455][T22864] batadv0: entered allmulticast mode
[  349.477445][T22894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.098353][T22964] lo speed is unknown, defaulting to 1000
[  350.101025][T22964] wg1 speed is unknown, defaulting to 1000
[  350.381112][T22981] lo speed is unknown, defaulting to 1000
[  350.386771][T22981] wg1 speed is unknown, defaulting to 1000
[  350.702359][T22999] chnl_net:caif_netlink_parms(): no params data found
[  350.825727][T23011] netlink: 'syz.2.5356': attribute type 9 has an invalid length.
[  350.828983][T23011] __nla_validate_parse: 25 callbacks suppressed
[  350.828995][T23011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5356'.
[  350.877174][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5356'.
[  350.901058][T23015] netlink: 'syz.2.5356': attribute type 9 has an invalid length.
[  350.904838][T23015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5356'.
[  350.944173][ T5858] net_ratelimit: 14 callbacks suppressed
[  350.944184][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  351.054483][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  351.185883][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  351.287280][T23062] lo speed is unknown, defaulting to 1000
[  351.291092][T23062] wg1 speed is unknown, defaulting to 1000
[  351.294595][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  351.407496][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  351.577166][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  351.673056][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'.
[  351.682244][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'.
[  351.692327][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  351.815504][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  351.824371][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'.
[  351.828624][T23107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5384'.
[  351.856065][T23104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5383'.
[  351.926124][ T5907] bond37: (slave wlan0): failed to get link speed/duplex
[  352.002038][T23120] openvswitch: netlink: IPv4 tun info is not correct
[  352.147753][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5395'.
[  352.238397][T23140] can: request_module (can-proto-0) failed.
[  352.976518][T23154] netlink: 'syz.1.5403': attribute type 1 has an invalid length.
[  353.004788][T23154] 8021q: adding VLAN 0 to HW filter on device bond40
[  353.033190][T23154] 8021q: adding VLAN 0 to HW filter on device bond40
[  353.037427][T23154] bond40: (slave vxcan11): The slave device specified does not support setting the MAC address
[  353.042070][T23154] bond40: (slave vxcan11): Error -95 calling set_mac_address
[  353.073823][T23156] veth35: entered promiscuous mode
[  353.080213][T23156] bond40: (slave veth35): Enslaving as an active interface with a down link
[  353.449782][T23186] syzkaller1: entered promiscuous mode
[  353.452106][T23186] syzkaller1: entered allmulticast mode
[  353.483325][T23189] netlink: 'syz.0.5412': attribute type 18 has an invalid length.
[  353.596077][T23202] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  353.600803][T23200] IPVS: stopping backup sync thread 23202 ...
[  353.849726][T23213] netlink: 'syz.2.5423': attribute type 11 has an invalid length.
[  353.854242][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'.
[  354.416952][T23228] netlink: 'syz.1.5428': attribute type 2 has an invalid length.
[  354.431184][T23228] veth0_to_team: entered promiscuous mode
[  354.433144][T23228] veth0_to_team: entered allmulticast mode
[  354.522171][T23234] geneve4: entered promiscuous mode
[  354.531707][T23234] geneve4: entered allmulticast mode
[  355.091677][T23268] lo speed is unknown, defaulting to 1000
[  355.095588][T23268] wg1 speed is unknown, defaulting to 1000
[  355.233849][T23274] gtp1: entered promiscuous mode
[  355.240942][T23274] gtp1: entered allmulticast mode
[  355.252954][T23274] IPv6: sit6: Disabled Multicast RS
[  355.259220][T23274] sit6: entered allmulticast mode
[  355.391961][T23286] netlink: 'syz.2.5448': attribute type 1 has an invalid length.
[  355.466149][T23296] lo speed is unknown, defaulting to 1000
[  355.477449][T23296] wg1 speed is unknown, defaulting to 1000
[  355.586421][T23301] Can't find ip_set type hash@
[  355.974593][T18489] net_ratelimit: 38 callbacks suppressed
[  355.974603][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  356.085568][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  356.194263][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  356.304315][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  356.310308][T23349] __nla_validate_parse: 3 callbacks suppressed
[  356.310321][T23349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5465'.
[  356.322539][T23349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5465'.
[  356.414666][ T5907] bond37: (slave wlan0): failed to get link speed/duplex
[  356.501470][T23357] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5469'.
[  356.524616][ T5907] bond37: (slave wlan0): failed to get link speed/duplex
[  356.634233][ T5907] bond37: (slave wlan0): failed to get link speed/duplex
[  356.744686][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  356.854425][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  357.002428][T23375] lo speed is unknown, defaulting to 1000
[  357.004681][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  357.008780][T23375] wg1 speed is unknown, defaulting to 1000
[  357.257622][T23400] netlink: 'syz.0.5481': attribute type 7 has an invalid length.
[  357.263844][T23400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5481'.
[  357.341486][T23404] lo speed is unknown, defaulting to 1000
[  357.344713][T23404] wg1 speed is unknown, defaulting to 1000
[  357.628186][T23425] netlink: 'syz.0.5492': attribute type 21 has an invalid length.
[  357.642886][T23429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5492'.
[  357.739825][T23441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5496'.
[  357.766362][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'.
[  357.959653][T23457] bond0: (slave syz_tun): Releasing backup interface
[  357.964933][T23457] syz_tun: left promiscuous mode
[  357.966814][T23457] syz_tun: left allmulticast mode
[  357.970326][T23457] bond0: (slave team0): Releasing backup interface
[  357.973306][T23457] team0: left promiscuous mode
[  357.978202][T23457] team0: left allmulticast mode
[  357.981941][T23457] bond0: (slave batadv0): Releasing backup interface
[  357.985339][T23457] batadv0: left promiscuous mode
[  357.987479][T23457] veth0_to_bond: left allmulticast mode
[  357.989395][T23457] veth0_to_bond: left promiscuous mode
[  357.991331][T23457] bridge0: port 2(veth0_to_bond) entered disabled state
[  357.995896][T23457] bond30: (slave wlan0): Releasing active interface
[  357.999937][T23457] bond0: (slave wlan1): Releasing backup interface
[  358.002888][T23457] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  358.008848][T23457] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  358.011681][T23457] bond3: (slave macvlan5): Removing an active aggregator
[  358.014796][T23457] bond3: (slave macvlan5): Releasing backup interface
[  358.016939][T23457] bond3: (slave macvlan5): the permanent HWaddr of slave - b2:bf:a5:16:24:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  358.023743][T23457] bond0: (slave bond6): Releasing backup interface
[  358.029630][T23457] bond6: left promiscuous mode
[  358.031906][T23457] bond6: left allmulticast mode
[  358.035415][T23457] bond7: (slave bridge2): Removing an active aggregator
[  358.038785][T23457] bond7: (slave bridge2): Releasing backup interface
[  358.043193][T23457] bond3: (slave macvlan8): Releasing backup interface
[  358.047891][T23457] bond15: (slave gretap1): Releasing active interface
[  358.051795][T23457] veth5: left allmulticast mode
[  358.053827][T23457] veth5: left promiscuous mode
[  358.061485][T23457] bridge8: port 1(veth5) entered disabled state
[  358.070239][T23457] bond18: (slave gretap2): Releasing active interface
[  358.075978][T23457] batman_adv: batadv0: Removing interface: ip6gretap3
[  358.084792][T23457] bond22: (slave ip6gretap4): Releasing backup interface
[  358.090216][T23457] bond23: (slave vxcan9): Releasing backup interface
[  358.096032][T23457] bond3: (slave macvlan2): Releasing backup interface
[  358.100265][T23457] veth13: left allmulticast mode
[  358.102399][T23457] veth13: left promiscuous mode
[  358.105548][T23457] bridge0: port 1(veth13) entered disabled state
[  358.110852][T23457] batadv3: left allmulticast mode
[  358.112985][T23457] batadv3: left promiscuous mode
[  358.115844][T23457] bridge0: port 3(batadv3) entered disabled state
[  358.123697][T23457] bond37: (slave vxcan13): Releasing backup interface
[  358.127340][T23457] vxcan13: left promiscuous mode
[  358.132609][T23457] batman_adv: batadv0: Removing interface: ip6gretap6
[  358.137258][T23452] lo speed is unknown, defaulting to 1000
[  358.141097][T23452] wg1 speed is unknown, defaulting to 1000
[  358.329004][T23479] netlink: 'syz.0.5508': attribute type 1 has an invalid length.
[  358.415092][T23484] lo speed is unknown, defaulting to 1000
[  358.417764][T23484] wg1 speed is unknown, defaulting to 1000
[  358.873326][T23512] netlink: 'syz.2.5521': attribute type 1 has an invalid length.
[  358.920598][T23512] 8021q: adding VLAN 0 to HW filter on device bond42
[  358.933535][T23512] bond42: (slave wlan0): Opening slave failed
[  358.956134][T23512] vlan4: entered allmulticast mode
[  358.959346][T23512] bond42: (slave vlan4): Opening slave failed
[  359.046823][T23524] netlink: 'syz.2.5526': attribute type 1 has an invalid length.
[  359.149604][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5526'.
[  359.262506][T23545] sock: sock_timestamping_bind_phc: sock not bind to device
[  359.310051][T23552] lo speed is unknown, defaulting to 1000
[  359.314815][T23552] wg1 speed is unknown, defaulting to 1000
[  359.390971][T23557] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5535'.
[  359.422813][T23557] netlink: 'syz.0.5535': attribute type 5 has an invalid length.
[  359.426128][T23557] netlink: 'syz.0.5535': attribute type 1 has an invalid length.
[  359.582691][T23560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5536'.
[  359.885013][T23575] lo speed is unknown, defaulting to 1000
[  359.887658][T23575] wg1 speed is unknown, defaulting to 1000
[  359.995615][T23582] netlink: 'syz.1.5545': attribute type 4 has an invalid length.
[  360.707778][T23633] netlink: 'syz.0.5557': attribute type 30 has an invalid length.
[  360.743310][T23640] netlink: 'syz.1.5560': attribute type 1 has an invalid length.
[  360.764605][T23640] 8021q: adding VLAN 0 to HW filter on device bond41
[  360.928941][T23658] netlink: 'syz.1.5567': attribute type 1 has an invalid length.
[  360.958212][T23658] 8021q: adding VLAN 0 to HW filter on device bond42
[  361.074325][   T12] net_ratelimit: 30 callbacks suppressed
[  361.074337][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  361.145552][T23677] lo speed is unknown, defaulting to 1000
[  361.148392][T23677] wg1 speed is unknown, defaulting to 1000
[  361.194449][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  361.228887][T23677] netlink: 'syz.2.5574': attribute type 2 has an invalid length.
[  361.306484][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  361.415527][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  361.470272][T23690] netem: change failed
[  361.525303][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  361.634255][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  361.745061][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  361.855112][T18489] bond37: (slave wlan0): failed to get link speed/duplex
[  361.879668][T23726] __nla_validate_parse: 10 callbacks suppressed
[  361.879684][T23726] netlink: 392 bytes leftover after parsing attributes in process `syz.2.5588'.
[  361.886481][T23726] openvswitch: netlink: Flow key attr not present in new flow.
[  361.965366][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  362.030313][T23741] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  362.070634][T23741] syz.1.5593 (23741) used obsolete PPPIOCDETACH ioctl
[  362.073356][T23741] netlink: 'syz.1.5593': attribute type 9 has an invalid length.
[  362.086812][T23741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5593'.
[  362.148661][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5593'.
[  362.151921][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5593'.
[  362.911417][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5603'.
[  363.003355][T23778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5606'.
[  363.161836][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5613'.
[  363.168027][T23803] netlink: 'syz.1.5615': attribute type 1 has an invalid length.
[  363.193043][T23803] bond43: entered promiscuous mode
[  363.196822][T23803] 8021q: adding VLAN 0 to HW filter on device bond43
[  363.220801][T23803] 8021q: adding VLAN 0 to HW filter on device bond44
[  363.225774][T23803] bond43: (slave bond44): making interface the new active one
[  363.228820][T23803] bond44: entered promiscuous mode
[  363.231039][T23803] bond43: (slave bond44): Enslaving as an active interface with an up link
[  363.307259][T23817] netlink: 'syz.1.5615': attribute type 1 has an invalid length.
[  364.584134][T23846] lo speed is unknown, defaulting to 1000
[  364.586976][T23846] wg1 speed is unknown, defaulting to 1000
[  364.940861][T23879] bridge_slave_0: entered promiscuous mode
[  364.978626][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'.
[  364.982909][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5643'.
[  364.988869][T23885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5643'.
[  366.078053][T23951] lo speed is unknown, defaulting to 1000
[  366.081628][T23951] wg1 speed is unknown, defaulting to 1000
[  366.174485][ T6930] net_ratelimit: 27 callbacks suppressed
[  366.174500][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  366.379905][T23955] pimreg3: entered allmulticast mode
[  366.399129][ T5858] bond37: (slave wlan0): failed to get link speed/duplex
[  366.441982][T23962] netlink: 'syz.2.5670': attribute type 1 has an invalid length.
[  366.492561][T23962] bond43: (slave vxcan9): The slave device specified does not support setting the MAC address
[  366.502219][T23962] bond43: (slave vxcan9): Error -95 calling set_mac_address
[  366.520320][T23967] lo speed is unknown, defaulting to 1000
[  366.524174][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  366.528612][T23967] wg1 speed is unknown, defaulting to 1000
[  366.538615][T23970] netlink: 'syz.1.5671': attribute type 13 has an invalid length.
[  366.543805][T23970] netlink: 'syz.1.5671': attribute type 17 has an invalid length.
[  366.598400][T23970] ip6gretap0: left promiscuous mode
[  366.610730][T23970] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.618921][T23970] 8021q: adding VLAN 0 to HW filter on device team0
[  366.623536][T23970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  366.640954][T23972] xfrm0: entered promiscuous mode
[  366.643065][T23972] xfrm0: entered allmulticast mode
[  366.752909][T23970] lo speed is unknown, defaulting to 1000
[  366.755349][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  366.760604][T23970] wg1 speed is unknown, defaulting to 1000
[  366.864702][ T5892] bond37: (slave wlan0): failed to get link speed/duplex
[  366.901319][T23990] lo speed is unknown, defaulting to 1000
[  366.905315][T23990] wg1 speed is unknown, defaulting to 1000
[  366.936625][T23992] netlink: 'syz.1.5676': attribute type 30 has an invalid length.
[  366.974450][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  366.988997][T23993] __nla_validate_parse: 5 callbacks suppressed
[  366.989009][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5676'.
[  367.109119][T23976] bond37: (slave wlan0): failed to get link speed/duplex
[  367.233106][T24000] netlink: 'syz.1.5677': attribute type 4 has an invalid length.
[  367.255430][   T12] bond37: (slave wlan0): failed to get link speed/duplex
[  367.273306][T24009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5680'.
[  367.288137][T24009] netlink: 'syz.2.5680': attribute type 1 has an invalid length.
[  367.322490][T24009] 8021q: adding VLAN 0 to HW filter on device bond44
[  367.375364][ T6930] bond37: (slave wlan0): failed to get link speed/duplex
[  367.444826][T24007] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5679'.
[  367.455312][T24007] netlink: 'syz.1.5679': attribute type 1 has an invalid length.
[  367.458520][T24007] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5679'.
[  367.462722][T24007] netlink: 'syz.1.5679': attribute type 1 has an invalid length.
[  367.469618][T24007] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5679'.
[  367.482636][T24007] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5679'.
[  368.047923][T24074] netlink: 'syz.2.5703': attribute type 1 has an invalid length.
[  368.064783][T24074] 8021q: adding VLAN 0 to HW filter on device bond45
[  368.078733][T24074] bond45: (slave geneve4): making interface the new active one
[  368.086522][T24074] bond45: (slave geneve4): Enslaving as an active interface with an up link
[  368.094603][T23976] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.100157][T23976] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.115038][T24074] bond45: entered promiscuous mode
[  368.117261][T24074] geneve4: entered promiscuous mode
[  368.121120][T23976] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.128484][T23976] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.040336][T24130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5722'.
[  369.092339][T24132] netlink: 'syz.2.5723': attribute type 29 has an invalid length.
[  369.097208][T24132] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5723'.
[  369.104477][T24132] unsupported nla_type 58
[  369.132173][T24137] 8021q: adding VLAN 0 to HW filter on device bond45
[  369.143577][T24137] bond37: (slave wlan0): Releasing active interface
[  369.153415][T24137] bond45: (slave wlan0): Enslaving as an active interface with a down link
[  369.183574][T24137] vlan4: entered allmulticast mode
[  369.186668][T24137] bond45: (slave vlan4): Opening slave failed
[  369.188226][T24140] netlink: 844 bytes leftover after parsing attributes in process `syz.2.5726'.
[  370.313129][T24180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5737'.
[  370.400593][T24188] Unsupported ieee802154 address type: 0
[  370.618303][T24207] bond1: option mode: unable to set because the bond device is up
[  370.628349][T24207] team0: Port device vlan0 removed
[  370.635355][T24207] bond36: (slave bridge28): Releasing active interface
[  370.640088][T24207] bond39: (slave bond40): Releasing backup interface
[  370.648003][T24207] bond45: (slave geneve4): Releasing active interface
[  370.650191][T24207] geneve4: left promiscuous mode
[  370.654580][ T5939] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  370.661545][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.670535][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.674310][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.677751][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.916770][T24223] lo speed is unknown, defaulting to 1000
[  370.931433][T24223] wg1 speed is unknown, defaulting to 1000
[  371.353295][T24252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.392278][T24252] tipc: Resetting bearer <eth:syzkaller0>
[  371.523246][T24257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.527369][T24257] syzkaller0: entered promiscuous mode
[  371.530031][T24257] syzkaller0: entered allmulticast mode
[  371.568678][T24257] net_ratelimit: 15 callbacks suppressed
[  371.568692][T24257] syzkaller0: mtu less than device minimum
[  371.594880][T24256] tipc: Resetting bearer <eth:syzkaller0>
[  371.612951][T24256] tipc: Disabling bearer <eth:syzkaller0>
[  371.654293][ T5939] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  371.982494][T24301] ------------[ cut here ]------------
[  371.984535][T24301] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  371.988326][T24301] WARNING: CPU: 1 PID: 24301 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  371.991747][T24301] Modules linked in:
[  371.993763][T24301] CPU: 1 UID: 0 PID: 24301 Comm: syz.1.5778 Not tainted syzkaller #0 PREEMPT(full) 
[  371.999302][T24301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.003557][T24301] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.006793][T24301] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 30 b0 8c e8 26 42 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 a3 d7 f6 90 0f 0b 90 42 80 7c 3d
[  372.016502][T24301] RSP: 0018:ffffc900083872f0 EFLAGS: 00010246
[  372.019196][T24301] RAX: 4fb13f16462fc500 RBX: 0000000000000000 RCX: ffff88811b711cc0
[  372.023101][T24301] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  372.027009][T24301] RBP: ffff88802b2bd728 R08: 0000000000000003 R09: 0000000000000004
[  372.030802][T24301] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802b2be9d0
[  372.035219][T24301] R13: ffff88802b2bcd80 R14: 1ffff11005657ae5 R15: dffffc0000000000
[  372.038588][T24301] FS:  00007f204e1936c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  372.042422][T24301] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.045964][T24301] CR2: 0000200000001800 CR3: 000000011f6c2000 CR4: 00000000000006f0
[  372.049389][T24301] Call Trace:
[  372.050879][T24301]  <TASK>
[  372.052170][T24301]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  372.055430][T24301]  __ieee80211_link_release_channel+0x33b/0x4a0
[  372.058188][T24301]  ieee80211_if_change_type+0x14c/0x990
[  372.060570][T24301]  ieee80211_change_iface+0xd5/0x510
[  372.062868][T24301]  cfg80211_change_iface+0x795/0xef0
[  372.065534][T24301]  nl80211_set_interface+0x773/0xaa0
[  372.067892][T24301]  ? __pfx_nl80211_set_interface+0x10/0x10
[  372.070353][T24301]  ? nl80211_pre_doit+0x4fb/0x930
[  372.072551][T24301]  genl_family_rcv_msg_doit+0x215/0x300
[  372.075550][T24301]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.075670][T24302] validate_nla: 7 callbacks suppressed
[  372.075681][T24302] netlink: 'syz.0.5777': attribute type 1 has an invalid length.
[  372.078042][T24301]  ? bpf_lsm_capable+0x9/0x20
[  372.084719][T24301]  ? security_capable+0x7e/0x2e0
[  372.086403][T24301]  genl_rcv_msg+0x60e/0x790
[  372.087932][T24301]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.089590][T24301]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  372.091382][T24301]  ? __pfx_nl80211_set_interface+0x10/0x10
[  372.093354][T24301]  ? __pfx_nl80211_post_doit+0x10/0x10
[  372.095495][T24301]  ? __asan_memcpy+0x40/0x70
[  372.097041][T24301]  ? __pfx_ref_tracker_free+0x10/0x10
[  372.098818][T24301]  netlink_rcv_skb+0x208/0x470
[  372.100429][T24301]  ? __lock_acquire+0xab9/0xd20
[  372.102081][T24301]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.103757][T24301]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.105818][T24301]  ? down_read+0x1ad/0x2e0
[  372.107363][T24301]  genl_rcv+0x28/0x40
[  372.108723][T24301]  netlink_unicast+0x82f/0x9e0
[  372.110334][T24301]  ? __pfx_netlink_unicast+0x10/0x10
[  372.112151][T24301]  ? netlink_sendmsg+0x642/0xb30
[  372.114274][T24301]  ? skb_put+0x11b/0x210
[  372.115888][T24301]  netlink_sendmsg+0x805/0xb30
[  372.117782][T24301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.119790][T24301]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.121512][T24301]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.123313][T24301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.125545][T24301]  __sock_sendmsg+0x21c/0x270
[  372.127211][T24301]  __sys_sendto+0x3bd/0x520
[  372.128947][T24301]  ? __pfx___sys_sendto+0x10/0x10
[  372.130638][T24301]  ? fput_close_sync+0x119/0x200
[  372.132460][T24301]  ? __pfx_fput_close_sync+0x10/0x10
[  372.134832][T24301]  __x64_sys_sendto+0xde/0x100
[  372.136695][T24301]  do_syscall_64+0xfa/0x3b0
[  372.138704][T24301]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.140750][T24301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.143074][T24301]  ? exc_page_fault+0x9f/0xf0
[  372.144836][T24301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.146803][T24301] RIP: 0033:0x7f204d390a7c
[  372.148316][T24301] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  372.154670][T24301] RSP: 002b:00007f204e191e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  372.157669][T24301] RAX: ffffffffffffffda RBX: 00007f204e191fa0 RCX: 00007f204d390a7c
[  372.161025][T24301] RDX: 0000000000000024 RSI: 00007f204e191ff0 RDI: 0000000000000004
[  372.164901][T24301] RBP: 0000000000000000 R08: 00007f204e191e74 R09: 000000000000000c
[  372.167968][T24301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  372.170652][T24301] R13: 0000000000000000 R14: 00007f204e191ff0 R15: 0000000000000000
[  372.173524][T24301]  </TASK>
[  372.174961][T24301] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  372.177542][T24301] CPU: 1 UID: 0 PID: 24301 Comm: syz.1.5778 Not tainted syzkaller #0 PREEMPT(full) 
[  372.180494][T24301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.183964][T24301] Call Trace:
[  372.185372][T24301]  <TASK>
[  372.186647][T24301]  dump_stack_lvl+0x99/0x250
[  372.188647][T24301]  ? __asan_memcpy+0x40/0x70
[  372.190457][T24301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.192161][T24301]  ? __pfx__printk+0x10/0x10
[  372.193802][T24301]  vpanic+0x281/0x750
[  372.195122][T24301]  ? __pfx__printk+0x10/0x10
[  372.196592][T24301]  ? __pfx_vpanic+0x10/0x10
[  372.198047][T24301]  ? is_bpf_text_address+0x292/0x2b0
[  372.199780][T24301]  panic+0xb9/0xc0
[  372.200990][T24301]  ? __pfx_panic+0x10/0x10
[  372.202417][T24301]  __warn+0x31b/0x4b0
[  372.203928][T24301]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.206429][T24301]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.208840][T24301]  report_bug+0x2be/0x4f0
[  372.210470][T24301]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.212383][T24301]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.214513][T24301]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  372.216767][T24301]  handle_bug+0x84/0x160
[  372.218402][T24301]  exc_invalid_op+0x1a/0x50
[  372.220163][T24301]  asm_exc_invalid_op+0x1a/0x20
[  372.221932][T24301] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  372.224276][T24301] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 30 b0 8c e8 26 42 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 a3 d7 f6 90 0f 0b 90 42 80 7c 3d
[  372.230977][T24301] RSP: 0018:ffffc900083872f0 EFLAGS: 00010246
[  372.233357][T24301] RAX: 4fb13f16462fc500 RBX: 0000000000000000 RCX: ffff88811b711cc0
[  372.236450][T24301] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  372.239574][T24301] RBP: ffff88802b2bd728 R08: 0000000000000003 R09: 0000000000000004
[  372.242739][T24301] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802b2be9d0
[  372.245987][T24301] R13: ffff88802b2bcd80 R14: 1ffff11005657ae5 R15: dffffc0000000000
[  372.249360][T24301]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  372.251512][T24301]  __ieee80211_link_release_channel+0x33b/0x4a0
[  372.253566][T24301]  ieee80211_if_change_type+0x14c/0x990
[  372.255384][T24301]  ieee80211_change_iface+0xd5/0x510
[  372.257311][T24301]  cfg80211_change_iface+0x795/0xef0
[  372.259093][T24301]  nl80211_set_interface+0x773/0xaa0
[  372.260879][T24301]  ? __pfx_nl80211_set_interface+0x10/0x10
[  372.262794][T24301]  ? nl80211_pre_doit+0x4fb/0x930
[  372.264574][T24301]  genl_family_rcv_msg_doit+0x215/0x300
[  372.266452][T24301]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.268516][T24301]  ? bpf_lsm_capable+0x9/0x20
[  372.270117][T24301]  ? security_capable+0x7e/0x2e0
[  372.271785][T24301]  genl_rcv_msg+0x60e/0x790
[  372.273542][T24301]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.275269][T24301]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  372.277096][T24301]  ? __pfx_nl80211_set_interface+0x10/0x10
[  372.279002][T24301]  ? __pfx_nl80211_post_doit+0x10/0x10
[  372.280746][T24301]  ? __asan_memcpy+0x40/0x70
[  372.282323][T24301]  ? __pfx_ref_tracker_free+0x10/0x10
[  372.284378][T24301]  netlink_rcv_skb+0x208/0x470
[  372.286474][T24301]  ? __lock_acquire+0xab9/0xd20
[  372.288617][T24301]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.290561][T24301]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.292336][T24301]  ? down_read+0x1ad/0x2e0
[  372.293937][T24301]  genl_rcv+0x28/0x40
[  372.295307][T24301]  netlink_unicast+0x82f/0x9e0
[  372.296946][T24301]  ? __pfx_netlink_unicast+0x10/0x10
[  372.298701][T24301]  ? netlink_sendmsg+0x642/0xb30
[  372.300371][T24301]  ? skb_put+0x11b/0x210
[  372.301797][T24301]  netlink_sendmsg+0x805/0xb30
[  372.303551][T24301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.305867][T24301]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.308028][T24301]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.310252][T24301]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.312016][T24301]  __sock_sendmsg+0x21c/0x270
[  372.313651][T24301]  __sys_sendto+0x3bd/0x520
[  372.315126][T24301]  ? __pfx___sys_sendto+0x10/0x10
[  372.316742][T24301]  ? fput_close_sync+0x119/0x200
[  372.318350][T24301]  ? __pfx_fput_close_sync+0x10/0x10
[  372.320065][T24301]  __x64_sys_sendto+0xde/0x100
[  372.321651][T24301]  do_syscall_64+0xfa/0x3b0
[  372.323250][T24301]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.325464][T24301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.328077][T24301]  ? exc_page_fault+0x9f/0xf0
[  372.330020][T24301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.331994][T24301] RIP: 0033:0x7f204d390a7c
[  372.333479][T24301] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  372.340365][T24301] RSP: 002b:00007f204e191e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  372.343432][T24301] RAX: ffffffffffffffda RBX: 00007f204e191fa0 RCX: 00007f204d390a7c
[  372.346811][T24301] RDX: 0000000000000024 RSI: 00007f204e191ff0 RDI: 0000000000000004
[  372.350090][T24301] RBP: 0000000000000000 R08: 00007f204e191e74 R09: 000000000000000c
[  372.352682][T24301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  372.355882][T24301] R13: 0000000000000000 R14: 00007f204e191ff0 R15: 0000000000000000
[  372.358579][T24301]  </TASK>
[  372.360231][T24301] Kernel Offset: disabled
[  372.361681][T24301] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:26:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888021025640 RCX=bb39bf6a53843900 RDX=0000000000000006
RSI=ffffffff8dba74da RDI=ffffffff8be33800 RBP=ffffc900030ffbf8 RSP=ffffc900030ffb00
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff888021026158 R13=ffff88810ccddb00 R14=ffff888021026158 R15=0000000000000001
RIP=ffffffff819d4504 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6974ea800 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561eb2f00ce8 CR3=000000010d294000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008386a90
R8 =ffff888020f88237 R9 =1ffff110041f1046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8e9 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f204e1936c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001800 CR3=000000011f6c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f204d412e53
XMM06=0000000000000000 00007f204d412e4d XMM07=0000000000000000 00007f204d412e61
XMM08=0000000000000000 00007f204d412ee7 XMM09=0000000000000000 00007f204d412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
