last executing test programs:

895.428892ms ago: executing program 1 (id=4976):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9203803afffe8000000000000000000000000000bbff020000000000000000000000000001860090780001000000000000000000001f0aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f6d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000000260004002618fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000190b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a02745000400000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0)

893.552347ms ago: executing program 1 (id=4978):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000000000500010006727d00050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000080)
unshare(0x22020400)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x7000)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x56, "53f47e507a6fee1f3457997cafdcd52af7aefd59be3e69c45b230cc3bfbca9a76f3672d3c9cc05fb625df9b95b000ff9e6cf0fdfdce7d18e634f094615712902e1b94ca55e4b763eac8d1b0e7575eacb189697eaa3dd"}, &(0x7f0000000000)=0x5e)

830.662965ms ago: executing program 1 (id=4980):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r1, 0xffffc000)
r2 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x1da2, 0x8, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x7, 0x3, 0x10, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x0, 0x87f}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x38, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0xffffffffffffffff, 0x5d, 0x8}, 0xc)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@o_path={&(0x7f0000001740)='./file0\x00', 0x0, 0x10, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{}, &(0x7f00000017c0), &(0x7f0000001800)}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), 0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb426, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{}, &(0x7f0000001900), &(0x7f0000001940)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0e00000006000000000090000500000040060000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000004000000000000000000e7ff0000000000000000"], 0x50)

828.954767ms ago: executing program 1 (id=4983):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x20000000}, 0x20)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000f14010028bd05000000df250800030046000000080001000000000009004500756d616400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000)
socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRESDEC=r4], 0x38}}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x8864, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000500008804c00008024000100861da818f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c14000200776730000000000000000000000000000d6ead9d770541ce6a8a1c0a8ec420f4de2f389aff75e089a10d59387e1cd1b313c50195bb15910dd98c8de928a036299fc6cd668be9808e260d420d66127627d383fbb791b8e556beeb0a59b92c2de998e368f089c0828c47799a3ba3874b58ef7599318ce9830e0d4cd1aaab6ae90737fc51a551ff1c44"], 0x78}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000a141c75507f2ece81eb3da0000000000000012c10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="180200eee8000000000000000300000018000000030000000000000004000000950000000000000039ea392d46243a4963532367f6a3f06650b96d5fa0e254fd9c41af6c4ac9d4be5be93064efe7a3fa7fbcfbef31e61be905b8906a7d9c92d26d865fb1276ad6465615a2"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7100ffdbdf251b000000070021"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48080)

749.378565ms ago: executing program 1 (id=4984):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001"], 0x25c}}, 0x0)

745.54623ms ago: executing program 1 (id=4987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x80, 0x0}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
readv(r8, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)
sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000640)=@isdn={0x22, 0x5d, 0xb2, 0x2, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)="080e724ee937db30fc6ac63f568609f81df2b9ac62e4724458c4d606065162c2ad4fde1bcf38d4d6314ba2aaa9961832121249b86466b23835a10e2401758cd8d4588b7865e34ce788655d8ef52962f9b3a4b25baa7df68c40ed00a3569b16fa9b864d99e1a96763a88d25b4946c86a2ae6887bff3d329f67f3160e63708c29d4d74f29c42ef8df9d977c2ae105fa8818d0ec51cc96a83fafa99cf76e271e31abc35477a53ae8fda5cf572c061a42c7bb7bc32908b1f54b32d427a743238900cac833479480c83d1ae831abb72105681cad7", 0xd2}, {&(0x7f00000007c0)="81c35b1dfec93c9a491f848003a27f0a51a3e4d2efbbc0ede00cc18d35cc8bc813c0144fa2cd9a583369625013132773b16f8ffd3687b422fee661ae9f635f3c5bbf730fb8da2af3528ffca3b5448b69dd2b1ce51f2297601b1bb04366ea447fb48e1b2aaf8c06bf92dcf2b595b1e752c5", 0x71}], 0x2}, 0x4044)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x48}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000480001002abd7000fddbdf250a002000", @ANYRES32=0x0, @ANYBLOB="02000000080002000100000014000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)

297.456873ms ago: executing program 2 (id=4998):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4018810)

296.338029ms ago: executing program 2 (id=5000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000000000000000000020000000800", @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d030000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r11, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000015c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xffffff33}, 0x3, 0x0, 0x2, 0x401, 0x16, 'syz0\x00', "afb5f82e68578bffa16f123b4afbdb533ccdf7ee6904b342c7c4010379139ca0", "8853adffb2bfddf9dbee9dcc287dd1490064c46c7ca92cc40e13fc106ef6fb9e", [{0xa9, 0x1, {0x0, 0x27}}, {0x2, 0xd, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x2}}, {0x8, 0x5, {0x2, 0x4}}, {0x400, 0x9, {0x2, 0xd2f}}, {0x8001, 0x0, {0x1, 0x100}}, {0x7, 0x8, {0x2, 0x6}}, {0x7, 0xffff, {0x0, 0x6621}}, {0x5, 0x3, {0x0, 0x5d7}}, {0x8, 0x7, {0x0, 0xfff}}, {0x3, 0x1, {0x2, 0x79b5}}, {0x4, 0x5, {0x1, 0x8dd}}, {0x0, 0x6, {0x0, 0x7f}}, {0x4b8, 0xffff, {0x1, 0x401}}, {0x6, 0x3, {0x3, 0x4}}, {0xa55, 0x5, {0x0, 0x9}}, {0x100, 0x8, {0x3, 0xffffffff}}, {0xd, 0x2, {0x0, 0x80000000}}, {0x2, 0xdd, {0x1, 0x3}}, {0x2, 0x80, {0x2, 0x9}}, {0x8001, 0x100, {0x3, 0x66b}}, {0xfff, 0x9, {0x0, 0x1}}, {0xf85, 0x7, {0x2, 0xfffffc00}}, {0x1a, 0xfff, {0x2, 0xfffffff5}}, {0x8000, 0x2, {0x3, 0x81}}, {0x6, 0xa, {0x0, 0x3}}, {0x86b, 0x225, {0x1, 0x81}}, {0x2, 0x6, {0x2, 0x7}}, {0x1, 0xe, {0x3, 0x6}}, {0x7a7, 0x7, {0x1, 0x9}}, {0x80, 0x4, {0x3}}, {0x7, 0xa, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x3}}, {0xa, 0x8000, {0x2, 0x7}}, {0x1, 0x5e, {0x3, 0x1000}}, {0x100, 0xd9f, {0x0, 0x82}}, {0x26, 0x8, {0x3, 0x8}}, {0x2, 0x581, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x3}}, {0x1, 0x8001, {0x2, 0xe98f}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000800)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80021008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r12, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x60a2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008814)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x9, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x70}}, 0x20040054)

230.622132ms ago: executing program 0 (id=5001):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c884)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x1000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

181.28918ms ago: executing program 2 (id=5002):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x0, 0x1})

180.295307ms ago: executing program 2 (id=5003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xa}, {0xfff1, 0xffff}, {0x8, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000206030000000002000000000500000705000100070000000900020073797a31000000000800078008001300000000000500050002000000050004000100000010000300686173683a69702c6d616300"], 0x54}}, 0x20004000)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x24, @short}, 0x14, &(0x7f0000001140)={&(0x7f0000001100)="083a359751bbdcd92090c0d33bb90b2dc8c4df5f4d", 0x15}}, 0x44800)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'veth0_macvtap\x00'})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
accept4$vsock_stream(r9, &(0x7f0000000340)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x180800)
r10 = socket(0x2, 0x2, 0x1)
bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e)
connect$unix(r10, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100004000000000000fffffff400000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000000c0a01031000000000000000070000080900020073797a31000000000900010073797a30000000001400038010000080080003400000000204000b80140000001000010000000000000000000084000a"], 0xc4}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffcd, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)

128.131067ms ago: executing program 0 (id=5004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

127.915728ms ago: executing program 0 (id=5005):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000017b76fdb0095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

77.952934ms ago: executing program 2 (id=5006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x8, 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="9423000040100100080020002f00000008001f000400000008000a0064"], 0x60}, 0x1, 0xba01}, 0x0) (async, rerun: 64)
r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x1412, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20080042) (async, rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x24}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="640100000201050000000000000000000a0000070800164000007e1c24000e800c00028005000100110000001400018008000100ac14141808000200ac1e01010c0010800800014000000003140005800f0001086e657462696f732d6e7300004400018006000340000100002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000000c00028005000100060000000400198098000e800c000280050001003a0000002c00018014000300fc010000000000000000000000000000140004000000f23e8aef00000000ffffffffffff0c04cf02800500010088000000064b9919da0003400000000006000340000100002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa14000180080001000000000008000200640101001c0019800800010002000000080001004006000008000200000100000a000740000000010a3c5145e934b71d2dc30bda1ac07e232ac70c930087b180c535fc742f2214a19dbbd9"], 0x164}, 0x1, 0x0, 0x0, 0x4048090}, 0x40)

77.509021ms ago: executing program 0 (id=5007):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_OIF={0x8}]}, 0x38}}, 0x0)

1.606332ms ago: executing program 0 (id=5008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg\x00', <r2=>0x0}) (async)
r3 = socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'nr0\x00', {0x2, 0x4e23, @broadcast}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=@newchain={0x10c, 0x64, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0x6, 0x7}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x9, 0x3, 0x0, 0x4}, {0xf001, 0x1, 0x2, 0xa}, {0x8, 0x3, 0x5b, 0x3}, {0xe72, 0xe, 0xf8, 0x49f}, {0x6, 0x0, 0x23, 0x10}, {0xaa67, 0x0, 0xc3, 0x8000}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xffe0}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0x9}}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x3, 0x4, 0xcc, 0x6}, {0x9, 0x5, 0x7}, {0x8cd, 0x4, 0x7, 0x2}, {0x2, 0x0, 0xff, 0x9}, {0x6, 0x4, 0x10, 0x572}, {0x7, 0x26, 0x0, 0x1}, {0x3e1, 0x4d, 0x2, 0x2}, {0xd267, 0xfd, 0x4, 0x3}, {0x7ff, 0x1, 0x2, 0x6}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc810) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@RTM_DELMDB={0xf8, 0x55, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x4, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x4, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x4, {@ip4=@rand_addr=0x64010100, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@in6_addr=@private1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@loopback, 0x109ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0xf8}}, 0x0)

436.802µs ago: executing program 0 (id=5009):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/54], 0xfdef)

0s ago: executing program 2 (id=5010):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14001800210800000000000000001d0100000004"], 0x14}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, 0x0, 0x4000)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0)
unshare(0x400)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}, 0x1c)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}}}, 0x0, 0x0, 0x33, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x3}, 0x37})

kernel console output (not intermixed with test programs):

dependency failed, not supported in mode balance-tlb(5)
[  193.933017][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.936773][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.940026][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.943402][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.947027][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.950567][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.954242][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.957788][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.961105][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.964523][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.967948][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.971213][T16199] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  193.995379][   T33] audit: type=1800 audit(1756157522.170:7): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2994" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=4530 res=0 errno=0
[  194.004996][   T33] audit: type=1804 audit(1756157522.180:8): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2994" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=4530 res=1 errno=0
[  194.055778][T16205] syz_tun: entered allmulticast mode
[  194.061911][T16204] syz_tun: left allmulticast mode
[  194.078107][T16207] validate_nla: 6 callbacks suppressed
[  194.078121][T16207] netlink: 'syz.0.2996': attribute type 21 has an invalid length.
[  194.082659][T16207] netlink: 'syz.0.2996': attribute type 1 has an invalid length.
[  194.085598][T16207] netlink: 'syz.0.2996': attribute type 1 has an invalid length.
[  194.094754][T16207] 8021q: adding VLAN 0 to HW filter on device bond22
[  194.103818][T16207] bond22: (slave veth7): Enslaving as an active interface with a down link
[  194.113313][T16207] 8021q: adding VLAN 0 to HW filter on device batadv2
[  194.115621][T16207] bond22: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  194.218956][T16212] macsec0: entered promiscuous mode
[  194.220949][T16212] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  194.223266][T16212] macsec0: entered allmulticast mode
[  194.225220][T16212] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  194.275887][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2999'.
[  194.321330][T16222] wg1 speed is unknown, defaulting to 1000
[  194.363780][T16222] lo speed is unknown, defaulting to 1000
[  194.387081][T16229] netlink: 'syz.1.3004': attribute type 30 has an invalid length.
[  194.465484][T16237] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3006'.
[  194.468884][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  194.521034][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'.
[  194.524519][T16241] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3008'.
[  194.610621][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'.
[  194.685544][T16253] wg1 speed is unknown, defaulting to 1000
[  194.688624][T16252] wg1 speed is unknown, defaulting to 1000
[  194.722095][T16253] lo speed is unknown, defaulting to 1000
[  194.767944][T16252] lo speed is unknown, defaulting to 1000
[  195.024881][T16265] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3014'.
[  195.142636][T16277] pim6reg: entered allmulticast mode
[  195.156972][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.161621][T16276] pim6reg: left allmulticast mode
[  195.323199][T16287] netlink: 'syz.0.3022': attribute type 10 has an invalid length.
[  195.508072][T16316] wg1 speed is unknown, defaulting to 1000
[  195.532964][T16317] batman_adv: batadv0: Adding interface: ip6gretap4
[  195.535750][T16317] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.546026][T16317] batman_adv: batadv0: Interface activated: ip6gretap4
[  195.587790][T16316] lo speed is unknown, defaulting to 1000
[  195.784360][T16340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.374471][T16353] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  196.402710][T16355] bond8: (slave veth1): Releasing active interface
[  196.411489][T16355] team0: Port device bond9 removed
[  196.415661][T16355] team0: Port device bond10 removed
[  196.426798][T13683] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.595409][T16366] wg1 speed is unknown, defaulting to 1000
[  196.631377][T16366] lo speed is unknown, defaulting to 1000
[  196.816906][T13683] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.244671][T16408] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  197.420596][T16423] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  197.423814][T16423] syzkaller0: entered promiscuous mode
[  197.425597][T16423] syzkaller0: entered allmulticast mode
[  197.649431][T16437] netlink: zone id is out of range
[  197.651265][T16437] netlink: zone id is out of range
[  197.653313][T16437] netlink: zone id is out of range
[  197.655032][T16437] netlink: zone id is out of range
[  197.657735][T16437] netlink: zone id is out of range
[  197.805664][T16453] net_ratelimit: 33 callbacks suppressed
[  197.805680][T16453] IPv4: Oversized IP packet from 127.202.26.0
[  198.065383][T16471] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  198.227238][T16476] nbd: must specify a size in bytes for the device
[  198.416953][T16483] wg1 speed is unknown, defaulting to 1000
[  198.449443][T16483] lo speed is unknown, defaulting to 1000
[  198.768295][T16494] __nla_validate_parse: 30 callbacks suppressed
[  198.768311][T16494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3086'.
[  198.823399][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'.
[  198.826256][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'.
[  198.829431][T16496] netlink: 'syz.1.3087': attribute type 13 has an invalid length.
[  198.991473][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3089'.
[  199.016183][T16515] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.058493][T16515] batadv_slave_0: entered promiscuous mode
[  199.062628][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'.
[  199.069476][T16515] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3090'.
[  199.073287][T16515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3090'.
[  199.148062][T16517] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  199.195048][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  199.222796][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3094'.
[  199.226491][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3094'.
[  199.356231][T16538] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  199.366744][T16538] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  199.403795][T16540] pim6reg1: entered promiscuous mode
[  199.405762][T16540] pim6reg1: entered allmulticast mode
[  199.643872][T16560] netlink: 'syz.1.3103': attribute type 21 has an invalid length.
[  199.648297][T16560] IPv6: NLM_F_CREATE should be specified when creating new route
[  199.653418][T16560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  199.656440][T16560] IPv6: NLM_F_CREATE should be set when creating new route
[  199.659495][T16560] IPv6: NLM_F_CREATE should be set when creating new route
[  199.662454][T16560] IPv6: NLM_F_CREATE should be set when creating new route
[  199.667510][T16560] netlink: 'syz.1.3103': attribute type 21 has an invalid length.
[  199.670515][T16560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  199.693983][T16563] netlink: 'syz.1.3104': attribute type 1 has an invalid length.
[  199.697367][T16563] netlink: 'syz.1.3104': attribute type 1 has an invalid length.
[  199.770280][T16563] netlink: 'syz.1.3104': attribute type 1 has an invalid length.
[  199.781402][T16563] 8021q: adding VLAN 0 to HW filter on device bond22
[  199.795462][T16563] vlan6: entered allmulticast mode
[  199.797669][T16563] veth1: entered allmulticast mode
[  199.799966][T16563] bond22: (slave vlan6): Opening slave failed
[  200.308194][T16604] netlink: 'syz.1.3113': attribute type 10 has an invalid length.
[  200.335056][T16608] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  200.756232][T16635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.041748][T16637] IPVS: Unknown mcast interface: nr0
[  201.584884][T16675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.632025][T16684] netlink: 'syz.1.3126': attribute type 1 has an invalid length.
[  201.654351][T16684] bond23: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  201.659932][ T5744] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  201.664626][T16684] 8021q: adding VLAN 0 to HW filter on device bond23
[  201.675942][T16684] veth9: entered promiscuous mode
[  201.679870][T16684] bond23: (slave veth9): Enslaving as a backup interface with a down link
[  201.686452][T16684] bond23: (slave ip6gretap3): Removing an active aggregator
[  201.689503][T16684] bond23: (slave ip6gretap3): Releasing backup interface
[  201.692289][T16684] bond23: (slave ip6gretap3): the permanent HWaddr of slave - aa:21:bc:a3:b3:99 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  201.700815][T16684] bond23: (slave veth9): Releasing backup interface
[  201.861399][T16709] tap0: tun_chr_ioctl cmd 1074025675
[  201.863363][T16709] tap0: persist disabled
[  202.583566][T16712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  203.115599][T16763] netlink: 'syz.2.3144': attribute type 9 has an invalid length.
[  203.659680][T16768] openvswitch: netlink: Missing valid actions attribute.
[  203.662594][T16768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.738082][T16774] bpq0: entered promiscuous mode
[  203.772403][T16779] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  203.772403][T16778] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  203.976116][T16799] __nla_validate_parse: 23 callbacks suppressed
[  203.976136][T16799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'.
[  204.100081][T16806] syzkaller0: entered promiscuous mode
[  204.103513][T16806] syzkaller0: entered allmulticast mode
[  204.278640][T16820] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  204.571628][T16836] syzkaller0: entered promiscuous mode
[  204.573788][T16836] syzkaller0: entered allmulticast mode
[  204.703580][T16839] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3164'.
[  204.763918][T16841] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3165'.
[  204.794248][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3167'.
[  204.830016][T16850] bridge0: port 1(syz_tun) entered blocking state
[  204.832941][T16850] bridge0: port 1(syz_tun) entered disabled state
[  204.835918][T16850] syz_tun: entered allmulticast mode
[  204.845402][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3168'.
[  204.853905][T16850] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  204.879821][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3170'.
[  205.109524][T16886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.122494][T16886] syzkaller0: entered promiscuous mode
[  205.124506][T16886] syzkaller0: entered allmulticast mode
[  205.138882][T16886] tipc: Resetting bearer <eth:syzkaller0>
[  205.150726][T16881] tipc: Resetting bearer <eth:syzkaller0>
[  205.154938][T16881] tipc: Disabling bearer <eth:syzkaller0>
[  205.248904][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'.
[  205.254435][T16902] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3183'.
[  205.259885][T16904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.263368][T16904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.277454][T16902] syzkaller0: Caught tx_queue_len zero misconfig
[  205.308573][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'.
[  205.362035][T16914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3186'.
[  205.434307][T16919] IPVS: length: 209 != 24
[  206.092885][T16950] validate_nla: 9 callbacks suppressed
[  206.092903][T16950] netlink: 'syz.2.3198': attribute type 1 has an invalid length.
[  206.113229][T16950] 8021q: adding VLAN 0 to HW filter on device bond13
[  206.128923][T16950] bond13: (slave ip6gretap6): making interface the new active one
[  206.136440][T16950] bond13: (slave ip6gretap6): Enslaving as an active interface with an up link
[  206.160400][T16950] veth15: entered promiscuous mode
[  206.191355][T16954] sctp: [Deprecated]: syz.1.3199 (pid 16954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.191355][T16954] Use struct sctp_sack_info instead
[  206.232616][T16950] erspan0: entered allmulticast mode
[  206.410155][T16971] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  206.451899][T16975] openvswitch: netlink: IPv4 tun info is not correct
[  206.467835][T16975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.695405][T17016] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.701033][T17014] netlink: 'syz.1.3222': attribute type 29 has an invalid length.
[  206.710487][T17009] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  206.716110][T17009] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  206.717129][ T6993] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:20b0:c7ff:fe42:f729 error=-28
[  206.734284][T17018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.740596][T17018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.744516][T17018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.750395][T17018] hsr0: entered promiscuous mode
[  206.752997][T17018] hsr0: entered allmulticast mode
[  206.755196][T17018] hsr_slave_0: entered allmulticast mode
[  206.759073][T17018] hsr_slave_1: entered allmulticast mode
[  206.764069][T17018] tipc: Resetting bearer <eth:syzkaller0>
[  206.769164][T17017] tipc: Disabling bearer <eth:syzkaller0>
[  207.084143][T17058] bond0: Device is already in use.
[  207.785966][T17085] 8021q: adding VLAN 0 to HW filter on device bond15
[  207.791837][T17085] bond14: (slave bond15): Enslaving as an active interface with an up link
[  207.797485][T17085] 8021q: adding VLAN 0 to HW filter on device bond14
[  207.807083][T17085] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  207.862707][T17095] erspan0: left allmulticast mode
[  207.911659][T17095] veth0_to_team: left allmulticast mode
[  207.916457][T17095] hsr0: left promiscuous mode
[  207.919841][T17095] hsr0: left allmulticast mode
[  207.922554][T17095] hsr_slave_0: left allmulticast mode
[  207.924866][T17095] hsr_slave_1: left allmulticast mode
[  207.939872][T17095] macvlan0: left promiscuous mode
[  207.942090][T17095] macvlan0: left allmulticast mode
[  207.944600][T17095] gretap3: left promiscuous mode
[  207.947319][T17095] gretap3: left allmulticast mode
[  207.958778][T17095] veth15: left promiscuous mode
[  207.967948][ T5895] lo speed is unknown, defaulting to 1000
[  207.969607][T17103] macvtap0: entered allmulticast mode
[  207.970396][ T5895] syz1: Port: 1 Link DOWN
[  208.026159][T17110] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  208.033297][T17110] syzkaller0: Caught tx_queue_len zero misconfig
[  208.036279][T17110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  208.917684][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  208.984301][T17136] wg1 speed is unknown, defaulting to 1000
[  208.998895][T17132] __nla_validate_parse: 31 callbacks suppressed
[  208.998943][T17132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3258'.
[  209.039902][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'.
[  209.043642][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'.
[  209.053871][T17136] lo speed is unknown, defaulting to 1000
[  209.069837][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3260'.
[  209.096073][T17139] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3260'.
[  209.197661][T17136] netlink: 'syz.1.3259': attribute type 38 has an invalid length.
[  209.201133][T17136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3259'.
[  209.259720][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'.
[  209.281397][T17167] tunl0: entered promiscuous mode
[  209.285622][T17167] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3267'.
[  209.405666][T17177] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3271'.
[  209.413964][T17177] batadv0: entered promiscuous mode
[  209.416124][T17177] batadv0: entered allmulticast mode
[  209.423661][T17181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'.
[  209.441817][T17183] netlink: 'syz.1.3273': attribute type 30 has an invalid length.
[  209.448468][ T7857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.451616][ T7857] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.454569][ T7857] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.458841][ T7857] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.527401][T17192] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  209.743950][T17210] netlink: 'syz.0.3281': attribute type 2 has an invalid length.
[  209.790190][T17214] netlink: 'syz.1.3285': attribute type 1 has an invalid length.
[  209.833403][T17223] wg1 speed is unknown, defaulting to 1000
[  209.880248][T17223] lo speed is unknown, defaulting to 1000
[  210.009866][T17247] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  210.721137][T17266] netlink: 'syz.2.3301': attribute type 1 has an invalid length.
[  210.724420][T17266] netlink: 'syz.2.3301': attribute type 1 has an invalid length.
[  210.857955][T17269] netlink: 'syz.1.3302': attribute type 1 has an invalid length.
[  211.296452][T17290] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  211.545293][T17319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.680850][T17328] netlink: 'syz.0.3318': attribute type 21 has an invalid length.
[  211.683846][T17328] netlink: 'syz.0.3318': attribute type 4 has an invalid length.
[  211.686929][T17328] netlink: 'syz.0.3318': attribute type 3 has an invalid length.
[  211.708652][T17336] 8021q: VLANs not supported on wg1
[  211.732156][T17333] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.816003][T17345] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  211.821135][T17345] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  211.828593][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.831490][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.834299][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.837913][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.841356][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.844279][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.847257][T17348] netlink: 'syz.1.3325': attribute type 2 has an invalid length.
[  211.945257][T17365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.047336][T17368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.165622][T17394] wg1 speed is unknown, defaulting to 1000
[  212.168817][T17392] wg1 speed is unknown, defaulting to 1000
[  212.216015][T17394] lo speed is unknown, defaulting to 1000
[  212.261593][T17392] lo speed is unknown, defaulting to 1000
[  212.526159][T17401] erspan0: left allmulticast mode
[  212.537778][T17401] bridge0: port 1(syz_tun) entered blocking state
[  212.540658][T17401] bridge0: port 1(syz_tun) entered forwarding state
[  212.546186][T17401] 8021q: adding VLAN 0 to HW filter on device team0
[  212.552423][T17401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.590417][T17403] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  212.628772][T17403] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  212.669975][T17403] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  212.710605][T17403] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  212.905691][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  212.915191][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  212.924193][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  212.932909][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  212.939175][T17406] tunl0: left promiscuous mode
[  213.037588][T17417] team0: Port device 0! added
[  213.067107][T17417] team0: Port device 0! removed
[  213.807787][T17444] tun0: tun_chr_ioctl cmd 2147767520
[  214.326842][T17476] __nla_validate_parse: 102 callbacks suppressed
[  214.326889][T17476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3364'.
[  214.399153][T17480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.402347][T17480] syzkaller0: entered promiscuous mode
[  214.404707][T17480] syzkaller0: entered allmulticast mode
[  214.409693][T17480] tipc: Resetting bearer <eth:syzkaller0>
[  214.412232][T17479] tipc: Resetting bearer <eth:syzkaller0>
[  214.415528][T17479] tipc: Disabling bearer <eth:syzkaller0>
[  214.476249][T17482] tipc: Enabled bearer <udp:syz0>, priority 10
[  214.495248][T17484] syzkaller1: entered promiscuous mode
[  214.497497][T17484] syzkaller1: entered allmulticast mode
[  214.552842][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'.
[  214.702916][T17498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.980576][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3380'.
[  215.023206][T17523] bridge0: port 1(syz_tun) entered disabled state
[  215.048077][T17523] bond17: left promiscuous mode
[  215.050584][T17523] wireguard0: left promiscuous mode
[  215.062221][T17523] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  215.064805][T17523] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  215.068203][T17523] macsec0: left promiscuous mode
[  215.070252][T17523] macsec0: left allmulticast mode
[  215.073373][T17523] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  215.082808][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.086268][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.089240][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.092027][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.140768][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'.
[  215.163538][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'.
[  215.166767][T17543] batman_adv: batadv0: Removing interface: ip6gretap4
[  215.488481][T17564] bond1: option mode: unable to set because the bond device has slaves
[  215.497347][T17564] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  215.500761][ T6993] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:20b0:c7ff:fe42:f729 error=-28
[  215.500917][T17564] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  215.510742][T17564] syz_tun: left allmulticast mode
[  215.512488][T17564] syz_tun: left promiscuous mode
[  215.514223][T17564] bridge0: port 1(syz_tun) entered disabled state
[  215.518949][T17564] bond17: (slave wireguard0): Releasing backup interface
[  215.522169][T17564] bond19: (slave geneve8): Releasing active interface
[  215.525168][T17564] bond21: (slave gretap2): Releasing active interface
[  215.529583][T17564] bond22: (slave veth7): Releasing active interface
[  215.533448][T17564] bond1: (slave macvlan1): Releasing backup interface
[  215.536001][T17564] bond1: (slave macvlan1): the permanent HWaddr of slave - 22:b0:c7:42:f7:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  215.543448][T17564] bond1: (slave macvlan2): Releasing backup interface
[  215.590405][T17572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3394'.
[  215.793158][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'.
[  215.828431][T17595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3401'.
[  215.833020][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'.
[  215.862035][T17596] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  215.876807][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'.
[  215.976300][T17619] openvswitch: netlink: IPv4 tun info is not correct
[  216.143201][T17650] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  216.146357][T17641] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  217.020935][T17677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.160327][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x600
[  217.907966][T17705] validate_nla: 71 callbacks suppressed
[  217.907988][T17705] netlink: 'syz.1.3427': attribute type 5 has an invalid length.
[  218.273785][T17765] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode
[  218.288509][T17765] netlink: 'syz.0.3444': attribute type 10 has an invalid length.
[  218.361514][T17779] netlink: 'syz.1.3449': attribute type 1 has an invalid length.
[  219.383550][T17826] __nla_validate_parse: 16 callbacks suppressed
[  219.383569][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'.
[  219.399015][T17829] netlink: 'syz.2.3464': attribute type 1 has an invalid length.
[  219.427996][T17829] bond16: (slave geneve4): making interface the new active one
[  219.430770][T17829] bond16: (slave geneve4): Enslaving as an active interface with an up link
[  219.435328][T17829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3464'.
[  219.439216][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  219.442643][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  219.446288][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  219.450098][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  219.454651][T17829] 8021q: adding VLAN 0 to HW filter on device bond16
[  219.461081][T17833] macvlan3: entered promiscuous mode
[  219.463109][T17833] macvlan3: entered allmulticast mode
[  219.465477][T17833] bond24: (slave macvlan3): Opening slave failed
[  219.523895][T17835] wg1 speed is unknown, defaulting to 1000
[  219.538251][T17842] netlink: 'syz.1.3469': attribute type 1 has an invalid length.
[  219.542288][T17842] netlink: 'syz.1.3469': attribute type 1 has an invalid length.
[  219.559527][T17835] lo speed is unknown, defaulting to 1000
[  219.725630][T17862] sch_tbf: burst 240 is lower than device lo mtu (1550) !
[  219.777149][T17874] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3474'.
[  219.785615][T17866] geneve4: entered promiscuous mode
[  219.793406][T17873] geneve4: entered promiscuous mode
[  219.856079][T17876] xt_socket: unknown flags 0xfc
[  219.862584][T17876] netlink: 'syz.0.3476': attribute type 16 has an invalid length.
[  219.865307][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'.
[  219.882516][T17880] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.976108][T17880] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.987951][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3480'.
[  220.006891][T17892] dvmrp8: entered allmulticast mode
[  220.012024][T17891] dvmrp8: left allmulticast mode
[  220.027663][T17894] bridge0: port 1(batadv0) entered blocking state
[  220.029794][T17894] bridge0: port 1(batadv0) entered disabled state
[  220.031979][T17894] batadv0: entered allmulticast mode
[  220.034150][T17894] batadv0: entered promiscuous mode
[  220.040086][T17880] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  220.101481][T17880] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  220.184139][ T5744] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.191177][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.197752][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.203294][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.227281][T17911] netlink: 'syz.2.3487': attribute type 13 has an invalid length.
[  220.229841][T17911] netlink: 'syz.2.3487': attribute type 17 has an invalid length.
[  220.240794][T17911] 8021q: adding VLAN 0 to HW filter on device team0
[  220.244365][T17911] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  220.250651][T13683] lo speed is unknown, defaulting to 1000
[  220.252771][T13683] syz1: Port: 1 Link ACTIVE
[  220.273194][T17907] wg1 speed is unknown, defaulting to 1000
[  220.318208][T17907] lo speed is unknown, defaulting to 1000
[  220.537295][ T6993] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  220.541055][ T6993] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  221.011967][T17919] ksmbd: Unknown IPC event: 3, ignore.
[  221.077110][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'.
[  221.080156][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'.
[  221.115059][T17944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3494'.
[  221.147068][T17937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3495'.
[  221.153416][T17937] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3495'.
[  221.165713][ T6993] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  221.347776][T17965] delete_channel: no stack
[  222.008483][T17976] netlink: 'syz.2.3505': attribute type 7 has an invalid length.
[  222.013095][T17976] : entered promiscuous mode
[  222.083049][T17976] batadv1: entered promiscuous mode
[  222.085190][T17976] batadv1: entered allmulticast mode
[  222.346138][T18001] sctp: [Deprecated]: syz.2.3511 (pid 18001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.346138][T18001] Use struct sctp_sack_info instead
[  222.712264][T18047] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  222.758942][T18058] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  222.769346][T18057] atomic_op ffff88803cda5998 conn xmit_atomic 0000000000000000
[  222.838842][T18065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  223.225238][T18084] bridge10: port 1(veth9) entered blocking state
[  223.228680][T18084] bridge10: port 1(veth9) entered disabled state
[  223.231133][T18084] veth9: entered allmulticast mode
[  223.233693][T18084] veth9: entered promiscuous mode
[  223.262432][T18084] bridge10: port 2(veth0_to_bond) entered blocking state
[  223.265407][T18084] bridge10: port 2(veth0_to_bond) entered disabled state
[  223.268338][T18084] veth0_to_bond: entered allmulticast mode
[  223.271318][T18084] veth0_to_bond: entered promiscuous mode
[  223.277535][T18084] vlan1: entered allmulticast mode
[  223.279314][T18084] veth0_to_hsr: entered allmulticast mode
[  223.281499][T18084] bridge10: port 3(vlan1) entered blocking state
[  223.283766][T18084] bridge10: port 3(vlan1) entered disabled state
[  223.286519][T18084] vlan1: entered promiscuous mode
[  223.288986][T18084] veth0_to_hsr: entered promiscuous mode
[  223.392519][T18093] openvswitch: netlink: Missing valid actions attribute.
[  223.395232][T18093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.399474][T18093] openvswitch: netlink: Missing valid actions attribute.
[  223.402278][T18093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.406015][T18093] openvswitch: netlink: Missing valid actions attribute.
[  223.408961][T18093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.412556][T18093] openvswitch: netlink: Missing valid actions attribute.
[  223.415294][T18093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.419566][T18093] openvswitch: netlink: Missing valid actions attribute.
[  223.814915][T18118] validate_nla: 3 callbacks suppressed
[  223.814933][T18118] netlink: 'syz.0.3546': attribute type 2 has an invalid length.
[  224.173928][T18143] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  224.177844][T18143] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  224.180900][T18143] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  224.298079][T18152] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.340002][T18152] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.380562][T18152] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.420431][T18152] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.486549][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.494566][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.502542][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.509676][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.558369][T18156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.610531][T18159] __nla_validate_parse: 22 callbacks suppressed
[  224.610553][T18159] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3555'.
[  224.620346][T18159] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.669900][T18159] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.720027][T18159] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.753337][T18167] netlink: 5468 bytes leftover after parsing attributes in process `syz.0.3557'.
[  224.780504][T18159] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.861581][T18174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3559'.
[  224.922058][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'.
[  224.943697][T18188] syzkaller1: entered promiscuous mode
[  224.946255][T18188] syzkaller1: entered allmulticast mode
[  224.954144][T18183] netlink: 'syz.2.3561': attribute type 10 has an invalid length.
[  224.954268][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  225.222886][T18201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3567'.
[  225.267358][T18210] mac80211_hwsim hwsim66 wlan1: left allmulticast mode
[  225.415282][T18226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3572'.
[  225.440968][T18228] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  225.444186][T18228] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  225.476827][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.596156][T18237] netlink: 'syz.0.3575': attribute type 2 has an invalid length.
[  225.730009][T18240] veth0_to_bond: left allmulticast mode
[  225.732395][T18240] veth0_to_bond: left promiscuous mode
[  225.734957][T18240] bridge10: port 2(veth0_to_bond) entered disabled state
[  225.742047][T18240] veth9: left allmulticast mode
[  225.744203][T18240] veth9: left promiscuous mode
[  225.746453][T18240] bridge10: port 1(veth9) entered disabled state
[  225.751672][T18240] vlan1: left allmulticast mode
[  225.753833][T18240] veth0_to_hsr: left allmulticast mode
[  225.756202][T18240] vlan1: left promiscuous mode
[  225.758846][T18240] veth0_to_hsr: left promiscuous mode
[  225.761394][T18240] bridge10: port 3(vlan1) entered disabled state
[  225.898027][T18247] netlink: 'syz.0.3577': attribute type 16 has an invalid length.
[  225.900789][T18247] netlink: 'syz.0.3577': attribute type 17 has an invalid length.
[  225.919829][T18247] 8021q: adding VLAN 0 to HW filter on device team0
[  226.096028][ T5744] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.104038][ T5744] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.112774][ T5744] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.121038][ T5744] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.217415][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3580'.
[  226.299180][T18262] sctp: [Deprecated]: syz.1.3581 (pid 18262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.299180][T18262] Use struct sctp_sack_info instead
[  226.359640][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'.
[  226.391192][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'.
[  226.893588][T18318] smc: net device bond0 erased user defined pnetid SYZ2
[  227.435499][T18352] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  227.635211][T18369] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  227.641209][T18369] veth0_to_team: entered promiscuous mode
[  227.643910][T18369] veth0_to_team: entered allmulticast mode
[  228.681827][T18405] syz_tun: entered allmulticast mode
[  228.730241][T18404] syz_tun: left allmulticast mode
[  228.969515][T18414] 8021q: adding VLAN 0 to HW filter on device bond26
[  228.973975][T18414] bond0: (slave bond26): Enslaving as an active interface with a down link
[  228.987519][T18414] bond0: (slave bond26): Releasing active interface
[  229.337432][T18421] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  229.491642][T18430] wg1 speed is unknown, defaulting to 1000
[  229.544391][T18430] lo speed is unknown, defaulting to 1000
[  229.826580][T18437] __nla_validate_parse: 14 callbacks suppressed
[  229.830769][T18437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3630'.
[  229.842338][T18437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3630'.
[  229.898584][T18436] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3629'.
[  229.944393][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'.
[  229.951038][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'.
[  230.020685][T18454] sctp: [Deprecated]: syz.0.3634 (pid 18454) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.020685][T18454] Use struct sctp_sack_info instead
[  230.092122][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'.
[  230.096160][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'.
[  230.143404][T18485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3640'.
[  230.148883][T18485] netlink: 'syz.1.3640': attribute type 1 has an invalid length.
[  230.237822][T18496] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3644'.
[  230.316293][T18505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.345918][T18507] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  230.388436][T18511] netlink: 'syz.1.3650': attribute type 1 has an invalid length.
[  230.398129][T18511] dvmrp0: entered allmulticast mode
[  230.404818][T18511] dvmrp8: entered allmulticast mode
[  230.418274][T18511] wg1 speed is unknown, defaulting to 1000
[  230.481730][T18511] lo speed is unknown, defaulting to 1000
[  230.511440][T18510] dvmrp0: left allmulticast mode
[  230.513180][T18510] dvmrp8: left allmulticast mode
[  230.685402][T18521] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  230.688909][T18521] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  230.691965][T18521] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  230.815674][T18532] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3655'.
[  230.961030][T18548] netlink: 'syz.1.3661': attribute type 1 has an invalid length.
[  230.974426][T18548] 8021q: adding VLAN 0 to HW filter on device bond27
[  230.984204][T18548] gretap3: entered promiscuous mode
[  231.037366][T18552] macvlan3: entered promiscuous mode
[  231.039633][T18552] macvlan3: entered allmulticast mode
[  231.042606][T18552] bond27: entered promiscuous mode
[  231.045101][T18552] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  231.051580][T18552] bond27: left promiscuous mode
[  231.132257][T18571] net_ratelimit: 126 callbacks suppressed
[  231.132270][T18571] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  231.146723][T18571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.161384][T18574] netlink: 'syz.1.3669': attribute type 1 has an invalid length.
[  231.190296][T18579] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  231.211231][T18585] openvswitch: netlink: Flow key attribute not present in set flow.
[  231.300838][T18600] netlink: 'syz.1.3677': attribute type 3 has an invalid length.
[  231.385741][T18615] netlink: 'syz.1.3682': attribute type 4 has an invalid length.
[  231.429231][T18592] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  231.450779][T18625] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  231.599069][T18641] : renamed from pim6reg1
[  231.602528][T18641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.693135][T18650] Set syz0 is full, maxelem 0 reached
[  231.736006][T18659] openvswitch: netlink: Flow key attr not present in new flow.
[  231.911649][T18677] netlink: 'syz.1.3699': attribute type 2 has an invalid length.
[  232.138795][T18684] netlink: 'syz.0.3701': attribute type 46 has an invalid length.
[  232.872250][T18696] smc: net device bond0 applied user defined pnetid SYZ2
[  232.981083][T18708] openvswitch: netlink: Message has 1 unknown bytes.
[  232.983743][T18708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.010722][T18710] block nbd1: Unsupported socket: shutdown callout must be supported.
[  233.066454][T18719] delete_channel: no stack
[  233.181718][T18730] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  233.217219][T18733] syzkaller1: entered promiscuous mode
[  233.219136][T18733] syzkaller1: entered allmulticast mode
[  233.257934][T18740] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  233.283833][T18743] netlink: 'syz.1.3720': attribute type 1 has an invalid length.
[  233.435213][T18768] wg1 speed is unknown, defaulting to 1000
[  233.469371][T18768] lo speed is unknown, defaulting to 1000
[  233.868300][T18809] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  233.876099][T18809] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  233.955461][T18818] netlink: 'syz.1.3737': attribute type 6 has an invalid length.
[  234.053542][T18826] veth0_to_team: left promiscuous mode
[  234.056576][T18826] veth0_to_team: left allmulticast mode
[  234.060464][T18826] batadv_slave_0: left promiscuous mode
[  234.064973][T18826] macvtap0: left allmulticast mode
[  234.067254][T18826] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  234.076970][T18826] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  234.079892][T18826] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  234.082712][T18826] macsec0: left promiscuous mode
[  234.084883][T18826] macsec0: left allmulticast mode
[  234.093467][T18826] veth9: left promiscuous mode
[  234.096542][T18826] syzkaller0: left promiscuous mode
[  234.098852][T18826] syzkaller0: left allmulticast mode
[  234.109088][ T5867] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.114144][ T5867] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.118034][ T5867] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.121048][ T5867] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.196747][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  234.258910][T18839] siw: device registration error -23
[  234.516243][T18867] wg1 speed is unknown, defaulting to 1000
[  234.556475][T18867] lo speed is unknown, defaulting to 1000
[  234.624728][T18874] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  234.831452][T18905] __nla_validate_parse: 44 callbacks suppressed
[  234.831464][T18905] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3762'.
[  234.838761][T18905] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3762'.
[  234.927330][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'.
[  234.961378][T18930] bond0: entered promiscuous mode
[  234.963498][T18930] batadv0: entered promiscuous mode
[  234.965755][T18930] debugfs: 'hsr0' already exists in 'hsr'
[  234.968054][T18930] Cannot create hsr debugfs directory
[  234.970175][T18930] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  234.976362][T18930] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  234.981057][T18930] hsr0: entered allmulticast mode
[  234.983135][T18930] bond0: entered allmulticast mode
[  234.985244][T18930] batadv0: entered allmulticast mode
[  234.988707][T18930] 8021q: adding VLAN 0 to HW filter on device hsr0
[  234.991576][T18930] bond0: left promiscuous mode
[  234.993789][T18930] batadv0: left promiscuous mode
[  235.079032][T18932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3769'.
[  235.208200][T18939] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3771'.
[  235.354651][T18959] pim6reg: entered allmulticast mode
[  235.359832][T18958] pim6reg: left allmulticast mode
[  235.464406][T18963] : renamed from wg2
[  235.613412][T18967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3782'.
[  235.624238][T18967] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3782'.
[  235.652885][T18971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3783'.
[  236.138617][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'.
[  236.633964][T18985] wg1 speed is unknown, defaulting to 1000
[  236.703505][T18985] lo speed is unknown, defaulting to 1000
[  236.778529][T18996] validate_nla: 3 callbacks suppressed
[  236.778546][T18996] netlink: 'syz.0.3791': attribute type 5 has an invalid length.
[  236.907835][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  236.918181][T19008] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  236.923724][T19008] syzkaller0: entered promiscuous mode
[  236.926759][T19008] syzkaller0: entered allmulticast mode
[  236.934389][T19012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.937260][T19012] syzkaller0: entered promiscuous mode
[  236.939133][T19012] syzkaller0: entered allmulticast mode
[  236.945099][T19012] tipc: Resetting bearer <eth:syzkaller0>
[  236.958501][T19013] tipc: Resetting bearer <eth:syzkaller0>
[  236.964032][T19013] tipc: Disabling bearer <eth:syzkaller0>
[  237.070112][T19032] syzkaller0: entered promiscuous mode
[  237.072339][T19032] syzkaller0: entered allmulticast mode
[  237.075699][T19031] netlink: 'syz.1.3804': attribute type 1 has an invalid length.
[  237.078421][T19029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.093996][T19031] 8021q: adding VLAN 0 to HW filter on device bond29
[  237.099192][T19029] tipc: Resetting bearer <eth:syzkaller0>
[  237.109600][T19029] tipc: Disabling bearer <eth:syzkaller0>
[  237.120487][T19031] 8021q: adding VLAN 0 to HW filter on device bond29
[  237.123585][T19031] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address
[  237.128855][T19031] bond29: (slave vxcan1): Error -95 calling set_mac_address
[  237.161851][T19036] veth15: entered promiscuous mode
[  237.165338][T19036] bond29: (slave veth15): Enslaving as an active interface with a down link
[  237.171935][T19031] erspan0: entered allmulticast mode
[  237.175589][T19031] bond29: (slave erspan0): making interface the new active one
[  237.178357][T19031] bond29: (slave erspan0): Enslaving as an active interface with an up link
[  237.215379][T19043] netlink: 'syz.0.3805': attribute type 13 has an invalid length.
[  237.218432][T19043] netlink: 'syz.0.3805': attribute type 17 has an invalid length.
[  237.303180][T19038] wg1 speed is unknown, defaulting to 1000
[  237.373624][T19038] lo speed is unknown, defaulting to 1000
[  237.558334][T19061] netlink: 'syz.2.3809': attribute type 10 has an invalid length.
[  237.756395][T19082] hsr_slave_1 (unregistering): left promiscuous mode
[  237.940111][T19103] IPv6: Can't replace route, no match found
[  237.943484][T19103] netlink: 'syz.2.3819': attribute type 29 has an invalid length.
[  237.985066][T19109] siw: device registration error -23
[  238.161240][T19121] netlink: 'syz.2.3825': attribute type 1 has an invalid length.
[  238.662366][T19171] netlink: 'syz.1.3842': attribute type 7 has an invalid length.
[  238.881282][T19186] unknown channel width for channel at 909000KHz?
[  239.503144][T19214] dvmrp1: entered allmulticast mode
[  239.900054][T19246] __nla_validate_parse: 20 callbacks suppressed
[  239.900074][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3867'.
[  240.536395][T19260] syzkaller0: entered promiscuous mode
[  240.538633][T19260] syzkaller0: entered allmulticast mode
[  240.543835][T19260] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.550035][T19260] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  240.552589][T19260] net_ratelimit: 2 callbacks suppressed
[  240.552599][T19260] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  240.561745][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'.
[  240.668241][T19265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.675680][T19265] syzkaller0: entered promiscuous mode
[  240.680144][T19265] syzkaller0: entered allmulticast mode
[  240.689772][T19265] tipc: Resetting bearer <eth:syzkaller0>
[  240.694929][T19264] tipc: Resetting bearer <eth:syzkaller0>
[  240.702383][T19264] tipc: Disabling bearer <eth:syzkaller0>
[  240.718712][T19267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.733770][T19267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3872'.
[  240.737947][T19267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3872'.
[  240.741594][T19267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3872'.
[  240.745527][T19267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3872'.
[  240.747134][T19269] netlink: 'syz.1.3873': attribute type 21 has an invalid length.
[  240.751979][T19269] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3873'.
[  240.754981][T19269] netlink: 'syz.1.3873': attribute type 5 has an invalid length.
[  240.759393][T19269] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3873'.
[  240.763589][T19266] tipc: Disabling bearer <eth:syzkaller0>
[  240.767659][T19269] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3873'.
[  240.785314][T19271] IPv4: Oversized IP packet from 127.202.26.0
[  240.852691][T19273] wg1 speed is unknown, defaulting to 1000
[  240.921757][T19287] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  240.953859][T19273] lo speed is unknown, defaulting to 1000
[  241.009179][T19299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3881'.
[  241.048872][T19303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.053427][T19304] tipc: Resetting bearer <eth:syzkaller0>
[  241.058733][T19302] tipc: Disabling bearer <eth:syzkaller0>
[  241.118516][T19312] syzkaller0: entered promiscuous mode
[  241.121154][T19312] syzkaller0: entered allmulticast mode
[  241.131030][T19314] mac80211_hwsim hwsim66 5: renamed from wlan1
[  241.316105][T19332] syzkaller1: entered promiscuous mode
[  241.318831][T19332] syzkaller1: entered allmulticast mode
[  241.375153][T19343] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  241.393077][T19348] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  241.443634][T19359] wg1 speed is unknown, defaulting to 1000
[  241.491347][T19359] lo speed is unknown, defaulting to 1000
[  241.718432][T19389] bond0: entered promiscuous mode
[  241.726221][T19389] batadv0: entered promiscuous mode
[  241.740100][T19389] debugfs: 'hsr0' already exists in 'hsr'
[  241.742623][T19389] Cannot create hsr debugfs directory
[  241.745018][T19389] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  241.749755][T19389] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  241.755686][T19389] 8021q: adding VLAN 0 to HW filter on device hsr0
[  241.815651][T19406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.834426][T19406] syzkaller0: entered promiscuous mode
[  241.839124][T19406] syzkaller0: entered allmulticast mode
[  241.843305][T19406] validate_nla: 2 callbacks suppressed
[  241.843317][T19406] netlink: 'syz.2.3911': attribute type 21 has an invalid length.
[  241.849783][T19406] netlink: 'syz.2.3911': attribute type 5 has an invalid length.
[  241.852930][T19406] netlink: 'syz.2.3911': attribute type 6 has an invalid length.
[  241.869137][T19405] tipc: Resetting bearer <eth:syzkaller0>
[  241.879736][T19405] tipc: Disabling bearer <eth:syzkaller0>
[  242.130410][T19433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.133654][T19433] syzkaller0: entered promiscuous mode
[  242.135704][T19433] syzkaller0: entered allmulticast mode
[  242.145213][T19433] bridge_slave_1: mtu less than device minimum
[  242.168965][T19441] netlink: 'syz.2.3921': attribute type 5 has an invalid length.
[  242.189184][T19432] tipc: Resetting bearer <eth:syzkaller0>
[  242.201517][T19432] tipc: Disabling bearer <eth:syzkaller0>
[  242.292886][T19458] netlink: 'syz.2.3928': attribute type 6 has an invalid length.
[  242.350885][T19467] 0: renamed from hsr0
[  242.358033][T19467] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  242.362398][T19467] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.371022][T19467] 0: entered allmulticast mode
[  242.373155][T19467] hsr_slave_0: entered allmulticast mode
[  242.375535][T19467] hsr_slave_1: entered allmulticast mode
[  242.378944][T19467] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  242.393316][T19459] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:65535
[  243.151007][T19534] netlink: 'syz.0.3946': attribute type 13 has an invalid length.
[  243.154798][T19534] netlink: 'syz.0.3946': attribute type 17 has an invalid length.
[  243.158651][T19534] netlink: 'syz.0.3946': attribute type 27 has an invalid length.
[  243.172821][T19534] wg1 speed is unknown, defaulting to 1000
[  243.231974][T19534] lo speed is unknown, defaulting to 1000
[  243.590335][T19562] wg1 speed is unknown, defaulting to 1000
[  243.619547][T19561] wg1 speed is unknown, defaulting to 1000
[  243.681559][T19562] lo speed is unknown, defaulting to 1000
[  243.755368][T19561] lo speed is unknown, defaulting to 1000
[  243.940670][T19591] macsec1: entered promiscuous mode
[  243.942865][T19591] team0: entered promiscuous mode
[  244.030308][T19598] wg1 speed is unknown, defaulting to 1000
[  244.041026][T19599] wg1 speed is unknown, defaulting to 1000
[  244.084640][T19598] lo speed is unknown, defaulting to 1000
[  244.184717][T19599] lo speed is unknown, defaulting to 1000
[  244.348355][T19625] can: request_module (can-proto-0) failed.
[  244.374116][T19625] batadv_slave_1: entered promiscuous mode
[  244.422745][T19621] netlink: 'syz.2.3964': attribute type 1 has an invalid length.
[  244.425853][T19621] nbd: error processing sock list
[  244.428565][T19621] block nbd1: shutting down sockets
[  244.484771][T19630] macvlan3: entered promiscuous mode
[  244.492248][T19630] macvlan3: entered allmulticast mode
[  244.494445][T19630] bond23: (slave macvlan3): Opening slave failed
[  244.685257][T19653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.964642][T19674] __nla_validate_parse: 24 callbacks suppressed
[  244.964655][T19674] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3983'.
[  245.162362][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  245.840247][T19696] netlink: 'syz.2.3988': attribute type 1 has an invalid length.
[  245.843150][T19696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3988'.
[  245.852625][T19696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3988'.
[  245.866776][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'.
[  245.881395][T19700] bridge0: port 2(erspan0) entered blocking state
[  245.883836][T19700] bridge0: port 2(erspan0) entered disabled state
[  245.886000][T19700] erspan0: entered allmulticast mode
[  245.889340][T19700] erspan0: entered promiscuous mode
[  245.895108][T19700] erspan0: left allmulticast mode
[  245.898661][T19700] erspan0: left promiscuous mode
[  245.901220][T19700] bridge0: port 2(erspan0) entered disabled state
[  245.907925][T19700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3990'.
[  245.980186][T19703] bpq0: left promiscuous mode
[  245.984873][T19703] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004
[  246.360314][T19723] can: request_module (can-proto-5) failed.
[  246.429521][T19728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3998'.
[  246.439105][T19728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3998'.
[  246.462576][T19732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.488709][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4000'.
[  246.491972][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4000'.
[  246.730531][T19758] can: request_module (can-proto-0) failed.
[  246.733891][T19758] 8021q: adding VLAN 0 to HW filter on device bond24
[  247.076011][T19777] validate_nla: 1 callbacks suppressed
[  247.076022][T19777] netlink: 'syz.0.4011': attribute type 12 has an invalid length.
[  248.207217][T19827] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  248.211447][T19828] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  248.221233][T19827] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  248.225165][T19827] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  248.777099][T19839] syzkaller0: Caught tx_queue_len zero misconfig
[  248.861144][T19855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  249.044428][T19858] IPVS: set_ctl: invalid protocol: 1 172.30.0.3:20004
[  249.111845][T19866] netlink: 'syz.2.4033': attribute type 13 has an invalid length.
[  249.115002][T19866] netlink: 'syz.2.4033': attribute type 17 has an invalid length.
[  249.118706][T19867] syzkaller0: entered promiscuous mode
[  249.121657][T19867] syzkaller0: entered allmulticast mode
[  249.126428][T19866] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  249.132066][T19865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.142729][T19865] tipc: Resetting bearer <eth:syzkaller0>
[  249.149258][T19865] tipc: Disabling bearer <eth:syzkaller0>
[  249.754214][T19909] wg1 speed is unknown, defaulting to 1000
[  249.772500][T19917] openvswitch: netlink: Flow key attr not present in new flow.
[  249.826582][T19909] lo speed is unknown, defaulting to 1000
[  249.899906][T19928] syzkaller0: left promiscuous mode
[  249.901970][T19928] syzkaller0: left allmulticast mode
[  250.017327][T19940] __nla_validate_parse: 14 callbacks suppressed
[  250.017349][T19940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4055'.
[  250.096174][T19959] syzkaller1: entered promiscuous mode
[  250.100338][T19959] syzkaller1: entered allmulticast mode
[  250.144416][T19960] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4059'.
[  250.152297][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4059'.
[  250.184861][T19964] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  250.197917][T19964] syzkaller0: entered promiscuous mode
[  250.200330][T19964] syzkaller0: entered allmulticast mode
[  250.221461][T19966] netlink: 'syz.0.4063': attribute type 13 has an invalid length.
[  250.224216][T19966] netlink: 'syz.0.4063': attribute type 17 has an invalid length.
[  250.243881][T19966] gretap0: refused to change device tx_queue_len
[  250.249868][T19966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  250.260811][T19968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'.
[  250.293156][T19971] netlink: 'syz.0.4065': attribute type 3 has an invalid length.
[  250.299193][T19971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.330027][T19977] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  250.381357][T19991] netlink: 'syz.1.4072': attribute type 2 has an invalid length.
[  250.389214][T19991] : entered promiscuous mode
[  250.391461][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'.
[  250.485722][T20000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4075'.
[  250.498620][T20012] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4078'.
[  250.506383][T20012] IPVS: length: 209 != 24
[  250.785086][T20021] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  250.854314][T20021] netlink: 'syz.1.4080': attribute type 10 has an invalid length.
[  250.891820][T20028] netlink: 'syz.1.4081': attribute type 1 has an invalid length.
[  250.912467][T20028] bond31: (slave geneve4): making interface the new active one
[  250.916389][T20028] bond31: (slave geneve4): Enslaving as an active interface with an up link
[  250.921355][ T5867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  250.928612][ T5867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  250.932160][ T5867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  250.936044][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4081'.
[  250.936850][ T5867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  250.948103][T20028] 8021q: adding VLAN 0 to HW filter on device bond31
[  250.952318][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4081'.
[  250.973091][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'.
[  251.994586][T20100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.001862][T20100] syzkaller0: entered promiscuous mode
[  252.004215][T20100] syzkaller0: entered allmulticast mode
[  252.010914][T20100] tipc: Resetting bearer <eth:syzkaller0>
[  252.019584][T20098] tipc: Resetting bearer <eth:syzkaller0>
[  252.037436][T20098] tipc: Disabling bearer <eth:syzkaller0>
[  252.054247][T20094] bridge0: port 1(team0) entered blocking state
[  252.057626][T20094] bridge0: port 1(team0) entered disabled state
[  252.060457][T20094] team0: entered allmulticast mode
[  252.065638][T20094] team0: entered promiscuous mode
[  252.092869][T20094] team0: left allmulticast mode
[  252.094644][T20094] team0: left promiscuous mode
[  252.096468][T20094] bridge0: port 1(team0) entered disabled state
[  252.116809][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.181450][ T7857] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  253.055254][T20143] vxcan0: entered promiscuous mode
[  253.146480][T20157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.185446][T20162] netlink: 'syz.1.4119': attribute type 14 has an invalid length.
[  253.191089][T20162] netlink: 'syz.1.4119': attribute type 11 has an invalid length.
[  253.303133][T20181] 8021q: adding VLAN 0 to HW filter on device bond2
[  253.308849][T20181] bond29: (slave erspan0): Releasing active interface
[  253.314097][T20181] bond29: (slave veth15): Releasing active interface
[  253.320468][T20181] bond31: (slave geneve4): Releasing active interface
[  253.325023][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.332608][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.336401][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  253.340541][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  254.081683][T20193] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  254.180425][T20184] Bluetooth: hci1: Opcode 0x080f failed: -4
[  254.187113][T20201] netlink: 'syz.0.4134': attribute type 1 has an invalid length.
[  254.373769][T20232] netlink: 'syz.2.4142': attribute type 10 has an invalid length.
[  254.509599][T20249] syzkaller0: entered promiscuous mode
[  254.511821][T20249] syzkaller0: entered allmulticast mode
[  254.593167][T20262] batadv0: entered promiscuous mode
[  254.595497][T20262] batadv0: entered allmulticast mode
[  254.734414][T20275] wg1 speed is unknown, defaulting to 1000
[  254.748647][T20278] netlink: 'syz.1.4159': attribute type 2 has an invalid length.
[  254.793723][T20286] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  254.801768][T20275] lo speed is unknown, defaulting to 1000
[  254.815083][T20290] netlink: 'syz.0.4164': attribute type 10 has an invalid length.
[  255.055530][T20306] netlink: 'syz.2.4168': attribute type 1 has an invalid length.
[  255.098244][T20306] __nla_validate_parse: 36 callbacks suppressed
[  255.098261][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'.
[  255.105448][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'.
[  255.122568][T20308] batadv_slave_1: left promiscuous mode
[  255.125271][T20308] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  255.157024][T20311] bond13: (slave ip6gretap6): Releasing active interface
[  255.162970][T20311] bond14: (slave bond15): Releasing backup interface
[  255.169539][T20311] bond16: (slave geneve4): Releasing active interface
[  255.177158][T20311] batadv0: left allmulticast mode
[  255.179804][T20311] batadv0: left promiscuous mode
[  255.182928][T20311] bridge0: port 1(batadv0) entered disabled state
[  255.190935][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  255.196109][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  255.200092][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  255.204380][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  255.213425][T20311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  255.224198][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4169'.
[  255.232221][T20317] syzkaller0: entered promiscuous mode
[  255.234998][T20317] syzkaller0: entered allmulticast mode
[  255.239105][T20316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.255917][T20319] tipc: Resetting bearer <eth:syzkaller0>
[  255.260724][T20319] tipc: Disabling bearer <eth:syzkaller0>
[  255.268035][T20321] batman_adv: batadv0: Adding interface: gretap4
[  255.270239][T20321] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.279014][T20321] batman_adv: batadv0: Interface activated: gretap4
[  255.330189][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4173'.
[  255.358083][T20328] netlink: 'syz.2.4174': attribute type 10 has an invalid length.
[  255.486787][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  255.640499][T20338] wg1 speed is unknown, defaulting to 1000
[  255.688733][T20343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4177'.
[  255.715423][T20338] lo speed is unknown, defaulting to 1000
[  255.875348][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4183'.
[  256.041106][T20380] batman_adv: batadv0: Interface deactivated: gretap4
[  256.043501][T20380] batman_adv: batadv0: Removing interface: gretap4
[  256.215553][T20388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4190'.
[  256.529022][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'.
[  256.555820][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'.
[  256.862942][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'.
[  256.964444][T20429] netlink: 'syz.0.4201': attribute type 3 has an invalid length.
[  256.977437][T20427] netlink: 'syz.2.4200': attribute type 1 has an invalid length.
[  257.027387][T20434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.030334][T20433] syzkaller0: entered promiscuous mode
[  257.032762][T20433] syzkaller0: entered allmulticast mode
[  257.043636][T20433] tipc: Resetting bearer <eth:syzkaller0>
[  257.050145][T20433] tipc: Disabling bearer <eth:syzkaller0>
[  257.536557][T20458] syzkaller1: entered promiscuous mode
[  257.538705][T20458] syzkaller1: entered allmulticast mode
[  257.562226][T20461] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.772566][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.776510][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.780959][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.784330][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.787772][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.791200][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.794924][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.800063][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.803333][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.807007][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.810701][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.813903][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.818940][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.822101][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.825507][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.829158][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.832264][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  257.835439][T20471] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  258.005544][T20488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.359249][T20517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.366899][T20517] syzkaller0: entered promiscuous mode
[  258.369054][T20517] syzkaller0: entered allmulticast mode
[  258.419649][T20517] tipc: Resetting bearer <eth:syzkaller0>
[  258.425125][T20516] tipc: Resetting bearer <eth:syzkaller0>
[  258.429682][T20516] tipc: Disabling bearer <eth:syzkaller0>
[  258.871975][T20540] validate_nla: 2 callbacks suppressed
[  258.871990][T20540] netlink: 'syz.1.4236': attribute type 12 has an invalid length.
[  258.902271][T20542] netlink: 'syz.1.4237': attribute type 10 has an invalid length.
[  258.905959][T20542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.909562][T20542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.855316][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.860855][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.864663][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.867846][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.872104][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.878473][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.883582][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.886860][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.889975][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.896757][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.899989][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.903282][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.906814][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.910078][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.913369][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.916357][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.919720][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.923102][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.934911][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.938475][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.942260][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.945874][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.950709][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.957263][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.960404][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.963733][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.968625][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.972670][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.976392][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.981065][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.984478][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.990155][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.993702][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.997500][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.001203][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.004556][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.007951][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.011596][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.014744][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.024902][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.028411][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.031633][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.034653][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.040263][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.045364][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.052930][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.056208][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.059469][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.062522][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.065960][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.070071][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.073831][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.077962][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.081930][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.085856][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.090931][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.094928][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.099184][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.102846][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.106108][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.109177][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.113056][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.117554][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.121121][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.124569][T20583] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  260.150371][T20601] __nla_validate_parse: 19 callbacks suppressed
[  260.150384][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4258'.
[  260.199843][T20606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4259'.
[  261.009129][T20613] syzkaller1: left promiscuous mode
[  261.011619][T20613] syzkaller1: left allmulticast mode
[  261.127794][T20618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4263'.
[  261.134942][T20618] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4263'.
[  261.155572][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'.
[  261.159652][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4264'.
[  261.173586][T20622] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  261.247037][T20634] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4267'.
[  261.286562][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4269'.
[  261.295131][T20641] wg1 speed is unknown, defaulting to 1000
[  261.330671][T20641] lo speed is unknown, defaulting to 1000
[  262.168740][T20648] can: request_module (can-proto-0) failed.
[  262.171796][T20648] batadv_slave_0: entered promiscuous mode
[  262.184015][T20648] batadv_slave_0: left promiscuous mode
[  262.332837][T20660] netlink: 'syz.1.4275': attribute type 1 has an invalid length.
[  262.347477][T20660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4275'.
[  262.351166][T20660] 8021q: adding VLAN 0 to HW filter on device bond32
[  262.485576][T20673] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4278'.
[  263.234242][T20716] net veth1_virt_wifi : renamed from virt_wifi0
[  263.239928][T20716] netlink: 'syz.0.4289': attribute type 3 has an invalid length.
[  263.243673][T20716] netlink: 'syz.0.4289': attribute type 4 has an invalid length.
[  263.718451][T20751] tap0: tun_chr_ioctl cmd 1074025677
[  263.720580][T20751] tap0: linktype set to 0
[  263.832125][T20757] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  263.835919][T20757] CPU: 1 UID: 0 PID: 20757 Comm: syz.1.4301 Not tainted syzkaller #0 PREEMPT(full) 
[  263.835932][T20757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.835938][T20757] Call Trace:
[  263.835943][T20757]  <TASK>
[  263.835946][T20757]  dump_stack_lvl+0x189/0x250
[  263.835963][T20757]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.835972][T20757]  ? __pfx__printk+0x10/0x10
[  263.835982][T20757]  ? kernfs_root+0x1c/0x230
[  263.835995][T20757]  ? kernfs_path_from_node+0x2f/0x290
[  263.836003][T20757]  ? kernfs_path_from_node+0x250/0x290
[  263.836011][T20757]  ? kernfs_path_from_node+0x2f/0x290
[  263.836020][T20757]  sysfs_warn_dup+0x8e/0xa0
[  263.836028][T20757]  sysfs_do_create_link_sd+0xc0/0x110
[  263.836036][T20757]  device_add_class_symlinks+0x1cf/0x240
[  263.836045][T20757]  device_add+0x475/0xb50
[  263.836057][T20757]  wiphy_register+0x1ba6/0x28d0
[  263.836073][T20757]  ? __pfx_wiphy_register+0x10/0x10
[  263.836082][T20757]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  263.836093][T20757]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  263.836103][T20757]  ieee80211_register_hw+0x3425/0x4080
[  263.836114][T20757]  ? ieee80211_register_hw+0x1401/0x4080
[  263.836124][T20757]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  263.836133][T20757]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.836145][T20757]  ? __hrtimer_setup+0x187/0x210
[  263.836152][T20757]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  263.836164][T20757]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  263.836178][T20757]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  263.836186][T20757]  ? trace_kmalloc+0x1f/0xd0
[  263.836195][T20757]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  263.836205][T20757]  ? kstrndup+0xbf/0x160
[  263.836216][T20757]  hwsim_new_radio_nl+0xea4/0x1b10
[  263.836225][T20757]  ? __pfx___nla_validate_parse+0x10/0x10
[  263.836241][T20757]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  263.836252][T20757]  ? __nla_parse+0x40/0x60
[  263.836263][T20757]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  263.836274][T20757]  genl_family_rcv_msg_doit+0x215/0x300
[  263.836283][T20757]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  263.836293][T20757]  ? bpf_lsm_capable+0x9/0x20
[  263.836305][T20757]  ? security_capable+0x7e/0x2e0
[  263.836316][T20757]  genl_rcv_msg+0x60e/0x790
[  263.836324][T20757]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.836331][T20757]  ? __kasan_slab_alloc+0x6c/0x80
[  263.836340][T20757]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  263.836349][T20757]  ? __netlink_lookup+0xbd/0x810
[  263.836354][T20757]  ? rcu_is_watching+0x15/0xb0
[  263.836363][T20757]  netlink_rcv_skb+0x208/0x470
[  263.836373][T20757]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.836381][T20757]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.836417][T20757]  ? lock_release+0x4b/0x3e0
[  263.836429][T20757]  ? down_read+0x1ad/0x2e0
[  263.836437][T20757]  genl_rcv+0x28/0x40
[  263.836444][T20757]  netlink_unicast+0x82f/0x9e0
[  263.836455][T20757]  ? __pfx_netlink_unicast+0x10/0x10
[  263.836465][T20757]  ? netlink_sendmsg+0x642/0xb30
[  263.836476][T20757]  ? skb_put+0x11b/0x210
[  263.836484][T20757]  netlink_sendmsg+0x805/0xb30
[  263.836496][T20757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.836507][T20757]  ? futex_unqueue+0x22/0x240
[  263.836515][T20757]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.836522][T20757]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.836529][T20757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.836539][T20757]  __sock_sendmsg+0x21c/0x270
[  263.836549][T20757]  ____sys_sendmsg+0x505/0x830
[  263.836557][T20757]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.836565][T20757]  ? import_iovec+0x74/0xa0
[  263.836574][T20757]  ___sys_sendmsg+0x21f/0x2a0
[  263.836581][T20757]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.836607][T20757]  ? futex_wait+0x285/0x360
[  263.836621][T20757]  ? __fget_files+0x2a/0x420
[  263.836628][T20757]  ? __fget_files+0x3a0/0x420
[  263.836636][T20757]  __x64_sys_sendmsg+0x19b/0x260
[  263.836644][T20757]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.836652][T20757]  ? rcu_is_watching+0x15/0xb0
[  263.836659][T20757]  ? rcu_is_watching+0x15/0xb0
[  263.836666][T20757]  do_syscall_64+0xfa/0x3b0
[  263.836673][T20757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.836681][T20757]  ? exc_page_fault+0x9f/0xf0
[  263.836691][T20757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.836697][T20757] RIP: 0033:0x7fa02f58ebe9
[  263.836706][T20757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.836713][T20757] RSP: 002b:00007fa0303d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.836723][T20757] RAX: ffffffffffffffda RBX: 00007fa02f7b5fa0 RCX: 00007fa02f58ebe9
[  263.836729][T20757] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  263.836734][T20757] RBP: 00007fa02f611e19 R08: 0000000000000000 R09: 0000000000000000
[  263.836738][T20757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.836743][T20757] R13: 00007fa02f7b6038 R14: 00007fa02f7b5fa0 R15: 00007ffca1ff1b78
[  263.836752][T20757]  </TASK>
[  264.013067][T20759] nbd: must specify a device to reconfigure
[  264.063691][T20759] netlink: 'syz.0.4302': attribute type 11 has an invalid length.
[  264.170981][T20781] tipc: Failed to remove unknown binding: 66,1,1/2334898432:70251725/70251727
[  264.174333][T20781] tipc: Failed to remove unknown binding: 66,1,1/2334898432:70251725/70251727
[  264.185543][T20779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  264.234688][T20790] sctp: [Deprecated]: syz.0.4313 (pid 20790) Use of int in maxseg socket option.
[  264.234688][T20790] Use struct sctp_assoc_value instead
[  264.276199][T20798] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  264.364906][T20810] netlink: del zone limit has 4 unknown bytes
[  264.394892][T20815] netlink: 'syz.1.4321': attribute type 11 has an invalid length.
[  264.403887][T20815] netlink: 'syz.1.4321': attribute type 11 has an invalid length.
[  264.780640][T20851] erspan0: left allmulticast mode
[  264.795199][T20851] 8021q: adding VLAN 0 to HW filter on device team0
[  264.806144][T20851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.937690][T20866] netlink: 'syz.1.4338': attribute type 10 has an invalid length.
[  264.940553][T20866] veth0_macvtap: left promiscuous mode
[  264.942712][T20866] team0: Device veth0_macvtap failed to register rx_handler
[  265.084620][T20885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.090092][T20884] tipc: Disabling bearer <eth:syzkaller0>
[  265.223124][T20893] syzkaller0: entered promiscuous mode
[  265.225045][T20893] syzkaller0: entered allmulticast mode
[  265.369369][T20895] netlink: 'syz.0.4347': attribute type 7 has an invalid length.
[  265.372788][T20895] __nla_validate_parse: 21 callbacks suppressed
[  265.372802][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'.
[  265.462060][T20897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4348'.
[  265.683279][T20902] netlink: 'syz.0.4350': attribute type 1 has an invalid length.
[  265.686064][T20902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4350'.
[  265.689898][T20902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4350'.
[  265.743071][T20907] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  265.855301][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'.
[  265.858935][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'.
[  265.863115][T20916] veth0_to_bond: entered allmulticast mode
[  265.881008][T20924] netlink: 'syz.0.4358': attribute type 2 has an invalid length.
[  265.883625][T20924] netlink: 'syz.0.4358': attribute type 5 has an invalid length.
[  265.886523][T20924] netlink: 'syz.0.4358': attribute type 11 has an invalid length.
[  265.892697][T20924] netlink: 'syz.0.4358': attribute type 21 has an invalid length.
[  265.896131][T20924] netlink: 'syz.0.4358': attribute type 1 has an invalid length.
[  266.047701][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'.
[  266.069753][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4362'.
[  266.896079][T20954] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  267.769419][T20965] wg1 speed is unknown, defaulting to 1000
[  267.825778][T20965] lo speed is unknown, defaulting to 1000
[  267.832568][T20972] netlink: 'syz.1.4372': attribute type 1 has an invalid length.
[  267.835274][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4372'.
[  267.932652][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'.
[  268.176737][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.179792][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.182589][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.186802][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.066862][T21038] netlink: 'syz.2.4392': attribute type 10 has an invalid length.
[  269.323642][T21077] wg1 speed is unknown, defaulting to 1000
[  269.372406][T21089] geneve5: entered allmulticast mode
[  269.375395][T21077] lo speed is unknown, defaulting to 1000
[  269.375520][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.381373][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.385024][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.389806][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.217093][T21119] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.220522][T21119] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.220526][T21121] validate_nla: 1 callbacks suppressed
[  270.220539][T21121] netlink: 'syz.1.4412': attribute type 1 has an invalid length.
[  270.263498][T21119] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.268259][T21119] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.308953][T21119] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.312924][T21119] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.360427][T21119] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.363707][T21119] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.394295][T21145] __nla_validate_parse: 6 callbacks suppressed
[  270.394308][T21145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4417'.
[  270.434759][ T6993] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.443463][ T6993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.449551][ T6993] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.453683][ T6993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.458301][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'.
[  270.463807][ T6993] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.468081][ T6993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.479784][ T6993] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.483200][ T6993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.515891][T21160] netlink: 'syz.0.4421': attribute type 7 has an invalid length.
[  270.521129][T21161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4421'.
[  270.539135][T21157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4420'.
[  270.543005][T21157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4420'.
[  270.562783][T21168] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  270.641008][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'.
[  270.646391][T21168] netlink: 'syz.0.4423': attribute type 4 has an invalid length.
[  270.650296][T21168] netlink: 'syz.0.4423': attribute type 4 has an invalid length.
[  270.681073][T21173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.683607][T21173] IPv6: NLM_F_CREATE should be set when creating new route
[  270.689281][T21173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.832503][T21186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.917847][T21178] tipc: Resetting bearer <eth:syzkaller0>
[  270.994675][T21178] tipc: Disabling bearer <eth:syzkaller0>
[  271.127673][T21206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.131840][T21204] syzkaller0: entered promiscuous mode
[  271.134678][T21204] syzkaller0: entered allmulticast mode
[  271.141302][T21206] tipc: Resetting bearer <eth:syzkaller0>
[  271.144450][T21203] tipc: Resetting bearer <eth:syzkaller0>
[  271.148846][T21203] tipc: Disabling bearer <eth:syzkaller0>
[  271.197740][T21208] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  271.341184][T21219] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  271.346455][T21219] netlink: 'syz.1.4433': attribute type 10 has an invalid length.
[  271.352807][T21219] syz_tun: entered promiscuous mode
[  271.360641][T21222] netlink: 'syz.0.4434': attribute type 1 has an invalid length.
[  271.363695][T21222] netlink: 'syz.0.4434': attribute type 1 has an invalid length.
[  271.370085][T21222] netlink: 'syz.0.4434': attribute type 1 has an invalid length.
[  271.374273][T21222] netlink: 'syz.0.4434': attribute type 1 has an invalid length.
[  271.384376][T21222] netlink: 'syz.0.4434': attribute type 1 has an invalid length.
[  271.449423][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4436'.
[  271.472098][T21235] bpq0: entered promiscuous mode
[  271.552772][T21246] wg1 speed is unknown, defaulting to 1000
[  271.594899][T21246] lo speed is unknown, defaulting to 1000
[  271.968726][T21283] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20002
[  271.973627][T21283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4455'.
[  272.104378][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4458'.
[  272.123015][T21293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4459'.
[  272.384513][T21319] dvmrp1: left allmulticast mode
[  272.425019][T21319] rdma_rxe: rxe_newlink: failed to add lo
[  272.433536][T21319] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  272.996083][T21351] syz_tun: entered allmulticast mode
[  273.060956][T21351] syz_tun: left allmulticast mode
[  273.112754][T21362] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  273.117692][T21362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.185578][T21381] IPv6: Can't replace route, no match found
[  273.190406][T21381] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  273.268641][T21385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  273.704557][T21412] dvmrp8: entered allmulticast mode
[  273.708152][T21411] dvmrp8: left allmulticast mode
[  274.137133][T21445] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  274.259796][T21458] bridge11: entered promiscuous mode
[  274.266945][T21458] bridge11: entered allmulticast mode
[  274.269711][T21458] team0: Port device bridge11 added
[  274.476202][T21498] wg1 speed is unknown, defaulting to 1000
[  274.558843][T21498] lo speed is unknown, defaulting to 1000
[  274.614959][T21525] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.643548][T21528] syzkaller0: entered promiscuous mode
[  274.646129][T21528] syzkaller0: entered allmulticast mode
[  274.685089][T21532] geneve5: entered promiscuous mode
[  274.688044][T21532] geneve5: entered allmulticast mode
[  274.690966][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  274.693846][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  274.696581][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  274.700482][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  274.760011][T21542] xfrm1: entered promiscuous mode
[  274.762373][T21542] xfrm1: entered allmulticast mode
[  274.873172][T21561] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  275.026728][T21580] team0: Port device dummy0 added
[  275.035409][T21580] team0: Port device dummy0 removed
[  275.596890][T21600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.820861][T21624] __nla_validate_parse: 36 callbacks suppressed
[  275.820874][T21624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4555'.
[  275.890358][T21615] syzkaller1: entered promiscuous mode
[  275.896809][T21615] syzkaller1: entered allmulticast mode
[  276.098362][T21647] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4557'.
[  276.124996][T21651] validate_nla: 39 callbacks suppressed
[  276.125013][T21651] netlink: 'syz.2.4561': attribute type 9 has an invalid length.
[  276.130182][T21651] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4561'.
[  276.178572][T21653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.181346][T21653] veth1_to_bridge: entered allmulticast mode
[  276.185570][T21653] tipc: Resetting bearer <eth:syzkaller0>
[  276.190428][T21652] tipc: Disabling bearer <eth:syzkaller0>
[  276.257943][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4563'.
[  276.409970][T21662] netlink: 'syz.2.4565': attribute type 10 has an invalid length.
[  276.434815][T21672] netlink: 'syz.2.4566': attribute type 29 has an invalid length.
[  276.659076][T21682] netlink: 'syz.2.4569': attribute type 9 has an invalid length.
[  276.662389][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4569'.
[  276.706160][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'.
[  276.723626][T21698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4572'.
[  276.749833][T21698] netlink: 'syz.1.4572': attribute type 11 has an invalid length.
[  276.752437][T21698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4572'.
[  276.787194][T21705] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4573'.
[  276.791238][T21705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4573'.
[  276.800474][T21705] rdma_rxe: rxe_newlink: failed to add lo
[  276.804758][T21705] syz_tun: left promiscuous mode
[  276.813043][T21705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.875518][T21713] xt_HMARK: proto mask must be zero with L3 mode
[  276.893756][T21715] 8021q: adding VLAN 0 to HW filter on device bond25
[  276.899830][T21715] bond25: entered promiscuous mode
[  276.901766][T21715] macvlan3: entered promiscuous mode
[  276.903604][T21715] macvlan3: entered allmulticast mode
[  276.905717][T21715] bond25: entered allmulticast mode
[  276.908088][T21715] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  276.911298][T21715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.923586][T21718] pim6reg9: entered allmulticast mode
[  276.936228][T21720] team0: Port device bridge11 removed
[  276.951822][T21720] 8021q: adding VLAN 0 to HW filter on device team0
[  276.955651][T21720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.015665][T21724] 8021q: adding VLAN 0 to HW filter on device bond26
[  277.020498][T21724] team0: Port device bond26 added
[  277.836512][T21748] dvmrp1: entered allmulticast mode
[  278.047808][T21767] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  278.794745][T21801] netlink: 'syz.2.4602': attribute type 11 has an invalid length.
[  278.835478][T21804] netlink: 'syz.2.4605': attribute type 4 has an invalid length.
[  278.849633][T13683] lo speed is unknown, defaulting to 1000
[  278.851988][T13683] syz1: Port: 1 Link DOWN
[  279.060997][T21833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.113049][T21842] veth23: entered promiscuous mode
[  279.120039][T21847] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  279.125770][T21847] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.140497][T21852] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode
[  279.169201][T21852] team0: Port device bond26 removed
[  279.179802][T21855] netlink: 'syz.1.4619': attribute type 10 has an invalid length.
[  279.183806][T21855] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  279.209980][T21858] netlink: 'syz.2.4622': attribute type 1 has an invalid length.
[  279.228169][T21858] bond20: (slave gretap5): making interface the new active one
[  279.230907][T21858] bond20: (slave gretap5): Enslaving as an active interface with an up link
[  279.237663][T21858] bond20: (slave gretap6): Enslaving as an active interface with an up link
[  280.215458][T21898] mac80211_hwsim hwsim74 wlan1: left allmulticast mode
[  280.226387][T21898] bridge11: left promiscuous mode
[  280.229322][T21898] bridge11: left allmulticast mode
[  280.232757][T21898] bond25: left promiscuous mode
[  280.234572][T21898] macvlan3: left promiscuous mode
[  280.236266][T21898] macvlan3: left allmulticast mode
[  280.333537][T21914] 8021q: adding VLAN 0 to HW filter on device bond21
[  280.341881][T21915] 8021q: adding VLAN 0 to HW filter on device bond22
[  280.460942][T21931] netlink: zone id is out of range
[  280.464839][T21931] netlink: zone id is out of range
[  280.491579][T21931] netlink: set zone limit has 4 unknown bytes
[  280.533900][T21931] netlink: del zone limit has 4 unknown bytes
[  280.844449][T21971] __nla_validate_parse: 27 callbacks suppressed
[  280.844465][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'.
[  280.851083][T21971] netlink: 'syz.1.4651': attribute type 30 has an invalid length.
[  280.855900][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'.
[  280.859139][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'.
[  280.861175][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.867649][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.896968][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.900628][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.951747][T21980] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.955490][T21981] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  281.076557][T21980] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  281.079929][T21980] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  281.084049][T21980] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  281.086658][T21980] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  281.244521][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'.
[  281.276407][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4660'.
[  281.292290][T22009] 8021q: adding VLAN 0 to HW filter on device bond23
[  281.335878][T22012] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:9
[  281.520344][T22035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4667'.
[  281.539330][T22039] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  281.618863][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4671'.
[  281.622949][T22045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4671'.
[  281.686563][T22050] wg1 speed is unknown, defaulting to 1000
[  281.741410][T22050] lo speed is unknown, defaulting to 1000
[  282.207493][T22059] block nbd1: server does not support multiple connections per device.
[  282.211190][T22059] block nbd1: shutting down sockets
[  282.301457][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4675'.
[  282.304749][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4675'.
[  282.442056][T22076] validate_nla: 3 callbacks suppressed
[  282.442066][T22076] netlink: 'syz.1.4679': attribute type 10 has an invalid length.
[  282.835514][T22153] tap0: tun_chr_ioctl cmd 35108
[  282.927985][T22155] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  283.026568][T22171] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  283.042543][T22169] wg1 speed is unknown, defaulting to 1000
[  283.089366][T22178] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.099241][T22178] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  283.133347][T22169] lo speed is unknown, defaulting to 1000
[  283.161605][T22178] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.167111][T22178] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  283.204349][T22178] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.208016][T22178] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  283.243193][T22178] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.246768][T22178] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  283.288343][ T5867] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.291088][ T5867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  283.298233][ T5867] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  283.301001][ T5867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  283.315977][ T5867] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  283.319316][ T5867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  283.322310][ T5867] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  283.332622][ T5867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  283.994163][T22224] netlink: 'syz.1.4720': attribute type 10 has an invalid length.
[  284.089944][T22234] netlink: 'syz.1.4723': attribute type 8 has an invalid length.
[  284.178778][T22251] netlink: 'syz.2.4728': attribute type 10 has an invalid length.
[  284.268617][T22270] batadv1: entered promiscuous mode
[  284.270825][T22270] batadv1: entered allmulticast mode
[  284.360943][T22279] netlink: 'syz.0.4737': attribute type 1 has an invalid length.
[  284.523316][T22299] netlink: 'syz.2.4741': attribute type 2 has an invalid length.
[  284.529869][T22299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.534882][T13683] lo speed is unknown, defaulting to 1000
[  284.537719][T13683] syz1: Port: 1 Link ACTIVE
[  284.556472][T22305] netlink: 'syz.2.4744': attribute type 21 has an invalid length.
[  284.570394][T22306] veth20: entered allmulticast mode
[  284.618907][T22307] netlink: 'syz.1.4742': attribute type 1 has an invalid length.
[  284.621555][T22307] netlink: 'syz.1.4742': attribute type 4 has an invalid length.
[  285.590433][T22351] netlink: 'syz.0.4756': attribute type 83 has an invalid length.
[  285.613573][T22361] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  285.666867][T22370] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  285.669408][T22370] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  285.672156][T22370] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  285.696131][T22374] bridge0: port 1(erspan0) entered blocking state
[  285.705224][T22374] bridge0: port 1(erspan0) entered disabled state
[  285.711783][T22374] erspan0: entered allmulticast mode
[  285.717553][T22374] erspan0: entered promiscuous mode
[  285.726202][T22374] erspan0: left allmulticast mode
[  285.736513][T22374] erspan0: left promiscuous mode
[  285.739628][T22374] bridge0: port 1(erspan0) entered disabled state
[  285.770763][T22382] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.837602][T22389] macvtap1: entered promiscuous mode
[  285.844624][T22389] mac80211_hwsim hwsim78 wlan1: entered promiscuous mode
[  285.872661][T22395] __nla_validate_parse: 30 callbacks suppressed
[  285.872674][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  285.884815][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4770'.
[  285.920147][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'.
[  286.000618][T22422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.012118][T22408] wg1 speed is unknown, defaulting to 1000
[  286.048529][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4777'.
[  286.051987][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4777'.
[  286.059099][T22408] lo speed is unknown, defaulting to 1000
[  286.062559][T22422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4771'.
[  286.245316][T22450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4784'.
[  286.283630][T22463] wg1 speed is unknown, defaulting to 1000
[  286.305568][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'.
[  286.323704][T22468] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  286.327042][T22467] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  286.330625][T22463] lo speed is unknown, defaulting to 1000
[  286.373628][T22474] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  286.426422][T22476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4792'.
[  286.434158][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4792'.
[  286.438742][T22476] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  286.443629][T22476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  286.448273][T22476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  287.171828][T22508] pim6reg: entered allmulticast mode
[  287.175458][T22508] pim6reg: left allmulticast mode
[  287.182063][T22510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.197640][T22510] syzkaller0: entered promiscuous mode
[  287.199582][T22510] syzkaller0: entered allmulticast mode
[  287.342837][T22515] syz_tun: entered allmulticast mode
[  287.355421][T22511] tipc: Resetting bearer <eth:syzkaller0>
[  287.361587][T22515] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  287.459832][T22514] syz_tun: left allmulticast mode
[  287.502933][T22519] validate_nla: 4 callbacks suppressed
[  287.502944][T22519] netlink: 'syz.0.4802': attribute type 13 has an invalid length.
[  287.507505][T22519] netlink: 'syz.0.4802': attribute type 17 has an invalid length.
[  287.544153][T22519] 8021q: adding VLAN 0 to HW filter on device team0
[  287.549252][T22519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.770818][T22545] tun0: tun_chr_ioctl cmd 1074025672
[  287.773236][T22545] tun0: ignored: set checksum disabled
[  287.935795][T22553] netlink: 'syz.0.4813': attribute type 21 has an invalid length.
[  287.939271][T22553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.942317][T22553] IPv6: NLM_F_CREATE should be set when creating new route
[  287.945326][T22553] IPv6: NLM_F_CREATE should be set when creating new route
[  287.948351][T22553] IPv6: NLM_F_CREATE should be set when creating new route
[  288.010030][T22509] tipc: Resetting bearer <eth:syzkaller0>
[  288.015227][T22509] tipc: Disabling bearer <eth:syzkaller0>
[  288.229699][T22580] netlink: get zone limit has 8 unknown bytes
[  288.236477][T22580] batadv0: entered promiscuous mode
[  288.656879][T22616] netlink: 'syz.2.4833': attribute type 1 has an invalid length.
[  288.703191][T22623] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  288.732932][T22626] netlink: 'syz.2.4836': attribute type 4 has an invalid length.
[  289.307663][T22631] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  289.357105][T22633] netlink: 'syz.0.4839': attribute type 2 has an invalid length.
[  289.488883][T22649] netlink: 'syz.0.4842': attribute type 9 has an invalid length.
[  289.491677][T22649] netlink: 'syz.0.4842': attribute type 6 has an invalid length.
[  289.525432][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  289.527878][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  289.530422][T22650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  290.004909][T22689] syzkaller1: entered allmulticast mode
[  290.149909][T22704] netlink: 'syz.0.4855': attribute type 5 has an invalid length.
[  290.242998][T22716] unknown channel width for channel at 909000KHz?
[  290.434361][T22752] IPv4: Oversized IP packet from 127.202.26.0
[  290.562519][T22778] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  290.595972][T22779] syzkaller1: entered promiscuous mode
[  290.599544][T22779] syzkaller1: entered allmulticast mode
[  290.818173][T22799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.821948][T22801] netlink: 'syz.0.4887': attribute type 1 has an invalid length.
[  290.916114][T22811] __nla_validate_parse: 28 callbacks suppressed
[  290.916160][T22811] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4889'.
[  290.990534][T22813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4890'.
[  291.015250][T22813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4890'.
[  291.104834][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  291.107428][T22819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  291.199025][T22835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.267480][T22839] syzkaller0: entered promiscuous mode
[  291.269845][T22839] syzkaller0: entered allmulticast mode
[  291.275448][T22838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.285315][T22844] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4898'.
[  291.299464][T22838] tipc: Resetting bearer <eth:syzkaller0>
[  291.308222][T22838] tipc: Disabling bearer <eth:syzkaller0>
[  291.414507][T22850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.417744][T22850] syzkaller0: entered promiscuous mode
[  291.419643][T22850] syzkaller0: entered allmulticast mode
[  291.437682][T22850] tipc: Resetting bearer <eth:syzkaller0>
[  291.499612][T22849] tipc: Resetting bearer <eth:syzkaller0>
[  291.504086][T22849] tipc: Disabling bearer <eth:syzkaller0>
[  291.560790][T22857] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.564776][T22857] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  291.608882][T22857] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.613074][T22857] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  291.659887][T22857] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.664232][T22857] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  291.699299][T22857] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.703252][T22857] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  291.747945][ T7857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  291.751370][ T7857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  291.757905][ T5867] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  291.761000][ T5867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  291.769991][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  291.773665][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  291.782792][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  291.783944][T22870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4906'.
[  291.786102][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  291.903755][T22876] bridge0: port 1(erspan0) entered blocking state
[  291.906206][T22876] bridge0: port 1(erspan0) entered disabled state
[  291.909088][T22876] erspan0: entered allmulticast mode
[  291.911541][T22876] erspan0: entered promiscuous mode
[  291.916471][T22876] erspan0: left allmulticast mode
[  291.918734][T22876] erspan0: left promiscuous mode
[  291.921095][T22876] bridge0: port 1(erspan0) entered disabled state
[  292.079812][T22891] syzkaller0: entered promiscuous mode
[  292.082389][T22891] syzkaller0: entered allmulticast mode
[  292.167518][T22897] wg1 speed is unknown, defaulting to 1000
[  292.205291][T22897] lo speed is unknown, defaulting to 1000
[  292.396081][T22909] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4918'.
[  292.554402][T22929] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4923'.
[  292.605828][T22936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.609316][T22926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4922'.
[  292.610079][T22936] syzkaller0: entered promiscuous mode
[  292.612752][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4922'.
[  292.612768][T22926] validate_nla: 3 callbacks suppressed
[  292.612775][T22926] netlink: 'syz.2.4922': attribute type 5 has an invalid length.
[  292.625737][T22936] syzkaller0: entered allmulticast mode
[  292.632897][T22936] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  292.637727][T22936] tipc: Resetting bearer <eth:syzkaller0>
[  292.647073][T22939] tipc: Resetting bearer <eth:syzkaller0>
[  292.650722][T22939] tipc: Disabling bearer <eth:syzkaller0>
[  292.849228][T22961] syzkaller1: entered allmulticast mode
[  292.917801][T22965] wg1 speed is unknown, defaulting to 1000
[  292.949468][T22965] lo speed is unknown, defaulting to 1000
[  293.032187][T22976] wg1 speed is unknown, defaulting to 1000
[  293.068396][T22976] lo speed is unknown, defaulting to 1000
[  293.150382][T22976] wg1 speed is unknown, defaulting to 1000
[  293.196104][T22976] lo speed is unknown, defaulting to 1000
[  293.207507][T22980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4936'.
[  293.280943][T22989] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  293.843927][T23040] veth0_to_team: entered promiscuous mode
[  293.907584][T23051] netlink: 'syz.2.4953': attribute type 1 has an invalid length.
[  294.001709][T23060] openvswitch: netlink: Flow key attr not present in new flow.
[  294.209000][T23064] netlink: 'syz.1.4957': attribute type 2 has an invalid length.
[  294.634063][T23086] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  294.637485][ T5867] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:4010:33ff:fee3:27d0 error=-28
[  295.594341][T23110] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  295.607683][T23110] bond25: entered promiscuous mode
[  295.609519][T23110] bond25: entered allmulticast mode
[  295.615018][T23110] 8021q: adding VLAN 0 to HW filter on device bond25
[  295.643267][T23112] netlink: 'syz.1.4969': attribute type 1 has an invalid length.
[  295.756209][T23131] netlink: 'syz.2.4975': attribute type 7 has an invalid length.
[  295.940176][T23164] netlink: 'syz.0.4985': attribute type 4 has an invalid length.
[  295.966454][T23166] __nla_validate_parse: 18 callbacks suppressed
[  295.966468][T23166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4988'.
[  295.980536][T23166] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4988'.
[  296.051736][T23173] bridge15: entered promiscuous mode
[  296.223104][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'.
[  296.226433][T23188] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  296.230859][T23188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.261569][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4996'.
[  296.262454][T23192] netlink: 'syz.0.4997': attribute type 1 has an invalid length.
[  296.265074][T23191] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4996'.
[  296.280371][T23192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4997'.
[  296.341112][T23203] netlink: 'syz.2.5000': attribute type 83 has an invalid length.
[  296.491900][T23210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5003'.
[  296.513348][T23210] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5003'.
[  296.555206][T23218] veth27: entered promiscuous mode
[  296.575858][T23223] netlink: 'syz.0.5007': attribute type 5 has an invalid length.
[  296.719913][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5011'.
[  296.723831][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'.
[  296.729509][T23236] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  296.734475][T23236] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  296.738905][T23236] CPU: 0 UID: 0 PID: 23236 Comm: syz.0.5011 Not tainted syzkaller #0 PREEMPT(full) 
[  296.742832][T23236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.747038][T23236] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  296.749387][T23236] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 96 30 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 5f 31 01 f8 4d 89 3e
[  296.757421][T23236] RSP: 0018:ffffc900083f70e0 EFLAGS: 00010246
[  296.760006][T23236] RAX: 0000000000000000 RBX: 1ffff110076b4b66 RCX: dffffc0000000000
[  296.763341][T23236] RDX: ffffc90003661000 RSI: 000000000000023d RDI: 000000000000023e
[  296.766657][T23236] RBP: ffffc900083f7230 R08: ffff88811e685640 R09: 0000000000000002
[  296.770005][T23236] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11021988366
[  296.773214][T23236] R13: ffff88803b5a5b30 R14: 0000000000000000 R15: ffff88803b5a5b28
[  296.776577][T23236] FS:  00007eff714d86c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  296.780351][T23236] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  296.783130][T23236] CR2: 00002000000012c0 CR3: 000000011a10c000 CR4: 00000000000006f0
[  296.786504][T23236] Call Trace:
[  296.788003][T23236]  <TASK>
[  296.789285][T23236]  ? xfrm_alloc_spi+0x2a0/0xf30
[  296.791382][T23236]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  296.793577][T23236]  ? xfrm_find_acq+0x87/0xa0
[  296.795544][T23236]  xfrm_alloc_userspi+0x70b/0xc90
[  296.797729][T23236]  ? apparmor_capable+0x137/0x1b0
[  296.799831][T23236]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  296.802182][T23236]  ? __nla_parse+0x40/0x60
[  296.804109][T23236]  xfrm_user_rcv_msg+0x7a3/0xab0
[  296.806151][T23236]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  296.808385][T23236]  ? __pfx___mutex_trylock_common+0x10/0x10
[  296.810848][T23236]  ? rcu_is_watching+0x15/0xb0
[  296.812851][T23236]  ? trace_contention_end+0x39/0x120
[  296.815109][T23236]  ? __mutex_lock+0x335/0x1350
[  296.817153][T23236]  netlink_rcv_skb+0x208/0x470
[  296.819220][T23236]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  296.821523][T23236]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  296.823773][T23236]  ? lock_release+0x4b/0x3e0
[  296.825765][T23236]  ? netlink_deliver_tap+0x2e/0x1b0
[  296.827976][T23236]  xfrm_netlink_rcv+0x79/0x90
[  296.830001][T23236]  netlink_unicast+0x82f/0x9e0
[  296.832103][T23236]  ? __pfx_netlink_unicast+0x10/0x10
[  296.834345][T23236]  ? netlink_sendmsg+0x642/0xb30
[  296.836465][T23236]  ? skb_put+0x11b/0x210
[  296.838299][T23236]  netlink_sendmsg+0x805/0xb30
[  296.840357][T23236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.842596][T23236]  ? aa_sock_msg_perm+0xf1/0x1d0
[  296.844701][T23236]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.846930][T23236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.849126][T23236]  __sock_sendmsg+0x21c/0x270
[  296.851135][T23236]  ____sys_sendmsg+0x505/0x830
[  296.853179][T23236]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.855407][T23236]  ? import_iovec+0x74/0xa0
[  296.857334][T23236]  ___sys_sendmsg+0x21f/0x2a0
[  296.859348][T23236]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.861542][T23236]  ? futex_wake+0x4b2/0x560
[  296.863490][T23236]  ? __fget_files+0x2a/0x420
[  296.865465][T23236]  ? __fget_files+0x3a0/0x420
[  296.867469][T23236]  __x64_sys_sendmsg+0x19b/0x260
[  296.869581][T23236]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  296.871907][T23236]  ? rcu_is_watching+0x15/0xb0
[  296.873940][T23236]  ? rcu_is_watching+0x15/0xb0
[  296.875976][T23236]  do_syscall_64+0xfa/0x3b0
[  296.877951][T23236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.880535][T23236]  ? exc_page_fault+0x9f/0xf0
[  296.882612][T23236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.885222][T23236] RIP: 0033:0x7eff7058ebe9
[  296.887187][T23236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.895363][T23236] RSP: 002b:00007eff714d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.898852][T23236] RAX: ffffffffffffffda RBX: 00007eff707b5fa0 RCX: 00007eff7058ebe9
[  296.902304][T23236] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  296.905753][T23236] RBP: 00007eff70611e19 R08: 0000000000000000 R09: 0000000000000000
[  296.909176][T23236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.912551][T23236] R13: 00007eff707b6038 R14: 00007eff707b5fa0 R15: 00007ffd9cfc02d8
[  296.916002][T23236]  </TASK>
[  296.917380][T23236] Modules linked in:
[  296.919333][T23236] ---[ end trace 0000000000000000 ]---
[  296.921734][T23236] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  296.924167][T23236] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 96 30 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 5f 31 01 f8 4d 89 3e
[  296.932694][T23236] RSP: 0018:ffffc900083f70e0 EFLAGS: 00010246
[  296.935009][T23236] RAX: 0000000000000000 RBX: 1ffff110076b4b66 RCX: dffffc0000000000
[  296.938032][T23236] RDX: ffffc90003661000 RSI: 000000000000023d RDI: 000000000000023e
[  296.940945][T23236] RBP: ffffc900083f7230 R08: ffff88811e685640 R09: 0000000000000002
[  296.943514][T23236] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11021988366
[  296.946216][T23236] R13: ffff88803b5a5b30 R14: 0000000000000000 R15: ffff88803b5a5b28
[  296.949183][T23236] FS:  00007eff714d86c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  296.952089][T23236] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  296.954249][T23236] CR2: 00002000000012c0 CR3: 000000011a10c000 CR4: 00000000000006f0
[  296.956990][T23236] Kernel panic - not syncing: Fatal exception in interrupt
[  296.960365][T23236] Kernel Offset: disabled
[  296.961816][T23236] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:33:45  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000e28 RDI=0000000000000e29 RBP=00000000000003f8 RSP=ffffc900083f6910
R8 =ffff8880218e8237 R9 =1ffff1100431d046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd90a R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007eff714d86c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000012c0 CR3=000000011a10c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007eff70787498 00007eff70787470 XMM03=00007eff707874a8 00007eff707874a0
XMM04=00007eff712ed100 00007eff70787460 XMM05=00007eff70787478 00007eff707874c0
XMM06=00007eff707874b8 00007eff707874b0 XMM07=00007eff707874a8 00007eff707874a0
XMM08=0a3020646165725f 6b72616d20302073 XMM09=0000000000000000 00007eff70612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82149607 RBX=0000000000000039 RCX=ffff88813020b980 RDX=0000000000000000
RSI=0000000000000039 RDI=ffff88810887ad80 RBP=ffffc900083c7bf0 RSP=ffffc900083c7750
R8 =ffff888118fe0567 R9 =1ffff110231fc0ac R10=dffffc0000000000 R11=ffffed10231fc0ad
R12=ffff88813020bed8 R13=dffffc0000000000 R14=ffff88810887ad80 R15=ffff88810887ad80
RIP=ffffffff82089305 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1ae7d7f3b0 CR3=0000000112a70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
