last executing test programs:

1.802087546s ago: executing program 0 (id=9007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x95, 0x6, "0bf88d4291b2f1f4a73028e947d54a774869b6e3d6a449f1773450b99ff346e6de42294aeed45014001db3dcac2e4a94e18207bdb0f943fe88630356f9fbc6fa34988644e7ac3fa8c00f775a2f4f18f7f4d60534adcbe91d402977c92aa9f83907dbdf32e6badcbc66f1ea3e5dbe742c077c29e3560e389577dce72e2854fb7a645cdfb97fd8d4dcc29844ac1afb9b611c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x150}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

1.620221393s ago: executing program 0 (id=9010):
close(0x3)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa)
close(r2)
listen(r1, 0x100)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000060000080000000000000074656d5f753a6f626a6563745f723a78636f6e736f6c655f6465766963655f743a733000000f000700756e636f6e66696e4564000014000200fc0100000000000000000000fcf5c17c1b832a89200acf00000000"], 0x64}, 0x2, 0x34005}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)

1.617922782s ago: executing program 0 (id=9012):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010003000000000000000100000a28000000000a01040000000000000000010480030900010073797a300000000008000240020000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000f893fa2ad94d45ea00000a"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010003000000000000000100000a28000000000a01040000000000000000010480030900010073797a300000000008000240020000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000f893fa2ad94d45ea00000a"], 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c9d32c7aaa40d38332877877f9b2b9dfeb5582d1224beecf159d32040356aeae87e34006c907d7c205c4ff008e5de76200f246cc372d2a4d28b4955a8e0bdba4ea40d7a1e41025ac1e0f2ff1f605b4f9cf91df42a3954474a9e918f1f702ed436ec26c76120ae713e7df86350bbd92a2f54a35aa642a4fc0762057b23d435010c46d32a0007e58902735c865bc06a1733594b925c5c9b3d227a26d2a0fd00d3b0124ba0806186737a4081002ddab0591ff4e499e25709340c46f0519124c6c5e06ce9e4a1d727b8032754ebef436e311a56c1009c7fc41566acf0b645222900000000000000", @ANYRESOCT=r3, @ANYBLOB="205000000000000000001b000000", @ANYRESDEC=r2, @ANYRES64=<r6=>r4, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x8800c}, 0x4000000)
sendmmsg(r4, 0x0, 0x0, 0x80) (async)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES8=r4, @ANYBLOB="07000000000200000001000a00000008000300ac1414aa000000000000"], 0x28}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES8=r4, @ANYBLOB="07000000000200000001000a00000008000300ac1414aa000000000000"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES8=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4040081}, 0x20040014) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES8=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4040081}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r10=>0x0})
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB="f6fff86c5439f54ed40897054a6231884c00", @ANYRES32=r12, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000)
sendmsg$nl_xfrm(r7, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="6300008eef060000a2e7daf4303f", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

1.38771173s ago: executing program 2 (id=9017):
close(0x3)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000001680))
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000081c0)={'tunl0\x00', &(0x7f0000008100)={'gretap0\x00', 0x0, 0x700, 0xf758, 0x9, 0x5c, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, {[@noop]}}}}})
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000240004"], 0x38}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000)
close(0x3)

1.300445668s ago: executing program 2 (id=9018):
close(0x3)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa)
close(r2)
listen(r1, 0x100)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000060000080000000000000074656d5f753a6f626a6563745f723a78636f6e736f6c655f6465766963655f743a733000000f000700756e636f6e66696e4564000014000200fc0100000000000000000000fcf5c17c1b832a89200acf00000000"], 0x64}, 0x2, 0x34005}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)

1.299437096s ago: executing program 2 (id=9019):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000012"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000040), 0x1000, r1}, 0x38)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="0f", 0x1}], 0x1}, 0x40040) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="0f", 0x1}], 0x1}, 0x40040)

1.220097514s ago: executing program 2 (id=9020):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x9}, 0x4e)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040), 0x4)

1.219469511s ago: executing program 2 (id=9021):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r1, 0x1, 0x4a, &(0x7f0000000000)="11237c5c", 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000040))
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0xf, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000300)=""/211, 0x34, 0xd3, 0x0, 0x726, 0x10000, @value=r3}, 0x28)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x5)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008001"], 0x26}}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4)

989.988969ms ago: executing program 2 (id=9022):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f0000000100)="e849df97e5c55edcf538ce3975328beb6acb2040dc53b025aaa0629dc2b53db30c8e92e86bd501ff8650f9b09b6e015abf399ee9ad9ec1d3cfd6d976bdea3abd1ccab303a347ebfb03a297e8791825c1094fe14f1f392df10826a21db20df419cdb456f39806882e9aeb58f5244c6f50bacfb03a6df137ef421017fae2a3607a545c7a796d2f0c3c78ebc171ada8114e270fc02e550f64006db5a79b66dc", 0x9e}, {&(0x7f00000001c0)="173a70f79806d4d5a38de54f056c865b836848d169e0b9745b66f65f4e5ebc0dea990266279c42f9cd6170eddf6c960a1d3629e0e8da0a64de23453574d218", 0x3f}, {&(0x7f0000000200)="5ee618432901b69480dc9755ab4fc23d00690b642fd74cf40b124eac6d1536a91fa03b528f671f7e3c42dc0eaa93dbe6eac601f73c2c6f5a9c4ea8a92872848bc873ef37edca91910346ba72126d2c0f2cd42c590486fe6e4d486122292637434ec82698813cd1bb9accb10d", 0x6c}, {&(0x7f0000000280)="833a1233179c6f07c448ae941b123676a8cc9a2cd1e4a4623ebaa2a8c8cf6cb2f13878b674eb19be76ec301992a7240208f073afaed46ec11aeffc421c8ea8122cbf4683e3dc6c20df8128db1f87eb451f434a6f78c65c878ccef32911c99f93b99ebdb719853680c0705fbf41ea3b2596da9bbca10f18dc7283f83b01ba89c8ed1b88bd3bce7a6d75f0faebd9e17f2d64b347", 0x93}], 0x4, 0x8, 0x0, 0x3, 0x3, 0x5, 0x3, 0x4})
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'nq\x00', 0x1d, 0x2, 0x2d}, {@loopback, 0x4e22, 0x2000, 0xc24, 0x9, 0x5}}, 0x44)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r5, 0x3)
accept4(r5, 0x0, 0x0, 0x0)
shutdown(r5, 0x1)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
sendmsg(r0, &(0x7f0000001100)={&(0x7f0000000b80)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000c00)="a5130056961fae862d4af46c1afc9fadfd79dcded87d353d796b7d9f0e8368bb4849ca755b8d6d0f623c1bd52b79ea6d65fbed5aa488ff1d972b462e35fdce60c5bad9f6e587bb1e122068b45829000ebc84070d26ccc73423eafc8a2c1adbbb38852e3ac652e25639691d871d45434a", 0x70}, {&(0x7f0000000c80)="ed74363883540ecc9de4e92e4c4ba41a871836a42b9b8db219e635910e6d57b86dafe6779e3076d5c9ab82d0eb4303f963bf04f2019f9c28f21b64ef98c9749435cd5d18b772af84bc045805c083497014b6556a8fedfd5aa2d27ad2439a1e0857063221209cc5d66de55ea4f15e06e499c8647b150d36d0e9907eaab1a698aa732c676a3869ec7ba044e6d7ad45e6601b4cfd2132479274242ef159568024afd18328f3859e4bcd6518e5e2be8e81324b521fea5ffb2d3757d847fe13931e978f40858eb6706ca75997ade3db983e9715cc37e0ef9d33081345358bfaa36dd0cec061", 0xe3}, {&(0x7f0000000d80)="2e2683f939f0e88f46b1919a840dd28d10d9a3f3c0f8128664ec2f9c555210d5e7a9c6e2ea9427c6656be28b6ef3cd053c764d367df198d9cdfaebcd3b7c3e46a49a89120b898010eb3ef82621eab78ba0123bf1077239eb425f71f49664421bdebfd7774a8d1b08447d1575b9d43e943194d0c12236d8ea03a267a9e025c1b43bb79963ed8a404b180c14717dfc47d5459b59569f1f51381fd054faff83798d8159a80fe476ae4583450a3b8569b007bb80ac39c03fa29b", 0xb8}, {&(0x7f0000000e40)="c787401f4149b61e926e22a8acc373af3e491ec03e5ff64fcf8f0e2ca71806ec3b5442b3fced7c66bd4fa8e8558093c96c81876f99331631260fce44c6522dffa15500babd1b3d8c4d0da5300ea3c367ed6fe851ddad9a408099e7ed626b248a0fcfc2873e0aafe7265b7c405b51d947bc0965b44df0bcd43fcd57f922b3c0106b8b8c8af84b6aac4b05ddb653b2c4df72885a8f5fae58f2b2121a450417f864c4ee560da1872a3f55cdc3abbe197c25c3d6ec9dac3866dd1cba956e76ec31f14bad3d294d61ce78baef6e827c058abb9e4d0cc14e66549ecef4fcf8980386bcfae81c2dbeab0f46dc278b625431839059ed012215b673750dfe", 0xfa}, {&(0x7f0000000f40)="dab91267533ddc608b7785043e80c2ec0b769d5032162e1c9beb889965b2bdc7b41b", 0x22}], 0x5, &(0x7f0000001000)=[{0xc8, 0x10b, 0x2, "cf50b66a4feaccd70de467014f81fff3c030d6b9f05c14d45a17fdbc132a276e79fcc388484d313f6c7ea6632655bd744790e0f4869dab12b3266358756e94b677a9fa2fbdb47561872e256f0f5ff3e01acd4bc0d621f54a548222a8f037bac98c474c7a29bd005fb0e1d6ff802324808441971c13bd8532522ba2fba98cb5a993e8d2c0e31d7a2a1d004ddf490faa48197b16e7c18555fe48c7b0e25bd4e2cebd603f7a4265c4af05f5ab88484f77f058"}], 0xc8}, 0x4)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0099"], 0x14}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe, 0x100010, r3, 0x20000)
read(r2, &(0x7f0000000000)=""/31, 0x1f)

720.434447ms ago: executing program 0 (id=9023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a30000000000500010007000000050004000016000005000500020000001c000780050015000000000008001240000000000500140006"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000000)=0x2, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0x0, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

580.040627ms ago: executing program 0 (id=9024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x20000000000001a4, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008c64b0c36a39538d175c979be196fde1fa058b92d7218b8d05d474371cd907af43bf7bb46980f16cef9c77785c556ae0ed1b151ada607f9ed072a12e72cbcbaa940b88f42b77ef92403b029d5239f89122170b1f6b3d17b45b7e872c866dbfe9232edc4cae711f807d6f84e0c0863da53f5feb81c32657cfbd2f1fe4218a5b6d39f5dbddf5af6d7e1ec1b0a7b833fa9c9ee5cfcc7d3ed424abdf940e4c7a0a8fe0d525f89dd19203711df09737", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008b420bfc839b146980000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

498.600013ms ago: executing program 1 (id=9026):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

449.597013ms ago: executing program 0 (id=9027):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x400)
socket(0x40000000015, 0x5, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b9adb7bff7ba6e0671beefb7e4217aa00000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

220.464197ms ago: executing program 1 (id=9028):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0xfffffffd}}, 0x10)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000c40)=""/3, &(0x7f0000000c80)=0x3)

217.767855ms ago: executing program 1 (id=9029):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@empty, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) (async, rerun: 64)
r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
bind$netlink(0xffffffffffffffff, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

50.323352ms ago: executing program 1 (id=9030):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)

623.447µs ago: executing program 1 (id=9031):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff0000000000b4b303a6110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

0s ago: executing program 1 (id=9032):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x144}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465"], 0xfc}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000400006803c00040067", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$igmp6(0xa, 0x3, 0x2) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r10)
sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800)
r12 = epoll_create(0x3ff)
epoll_create1(0x80000) (async)
r13 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000240)={0xa0000000}) (async)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r13, &(0x7f0000000280)={0x2000000})
epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r13, &(0x7f0000000000)={0x20000001})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r14 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r14, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
connect$unix(r14, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xae65}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x803}, 0x4048040) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xae65}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x803}, 0x4048040)

kernel console output (not intermixed with test programs):

id length.
[  627.857654][T26185] netlink: 'syz.2.5668': attribute type 4 has an invalid length.
[  627.877338][T26186] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  627.988866][T26198] xt_hashlimit: size too large, truncated to 1048576
[  628.038204][T26200] IPVS: set_ctl: invalid protocol: 44 172.20.20.45:20001
[  628.092217][T26202] Bluetooth: MGMT ver 1.23
[  628.100586][T26202] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  628.104446][T26202] veth0_macvtap: left promiscuous mode
[  628.114934][T26202] bond0: (slave veth0_macvtap): Enslaving as an active interface with a down link
[  628.351508][T26218] __nla_validate_parse: 3 callbacks suppressed
[  628.351520][T26218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5678'.
[  628.673374][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'.
[  629.087796][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5687'.
[  629.126332][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5688'.
[  629.198100][T26254] netlink: 'syz.2.5689': attribute type 1 has an invalid length.
[  629.198844][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5688'.
[  629.214838][T26259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5688'.
[  629.460783][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  629.853770][T26285] netlink: 'syz.2.5696': attribute type 10 has an invalid length.
[  629.856569][T26285] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5696'.
[  629.860688][T26285] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  629.864128][T26285] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  629.977114][T26286] netlink: 'syz.2.5696': attribute type 27 has an invalid length.
[  630.648248][T26354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5719'.
[  630.687498][T26355] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5718'.
[  630.710657][T26356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5719'.
[  630.715127][T26355] netlink: 'syz.2.5718': attribute type 1 has an invalid length.
[  631.330670][T26359] netlink: 'syz.1.5720': attribute type 1 has an invalid length.
[  632.138808][T26377] netlink: 'syz.1.5724': attribute type 2 has an invalid length.
[  632.266060][T26378] netlink: 'syz.1.5724': attribute type 1 has an invalid length.
[  632.771898][T26408] xt_hashlimit: size too large, truncated to 1048576
[  633.577874][T26417] __nla_validate_parse: 8 callbacks suppressed
[  633.577891][T26417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5733'.
[  633.617204][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.621234][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.625027][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.631858][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.635553][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.640433][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.644370][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.648505][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.652547][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5734'.
[  633.725210][T26426] openvswitch: netlink: Missing valid actions attribute.
[  633.728228][T26426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  633.736971][T26426] syzkaller1: tun_chr_ioctl cmd 1074025677
[  633.740186][T26426] syzkaller1: linktype set to 0
[  634.021990][T26444] .70: renamed from hsr0
[  634.030729][T26444] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  634.035140][T26444] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  634.040603][T26444] .70: entered allmulticast mode
[  634.044036][T26444] hsr_slave_0: entered allmulticast mode
[  634.047388][T26444] hsr_slave_1: entered allmulticast mode
[  634.053413][T26444] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  634.175378][T26446] xt_check_table_hooks: 55 callbacks suppressed
[  634.175393][T26446] x_tables: unsorted underflow at hook 2
[  634.262743][T26458] bond0: Removing last ns target with arp_interval on
[  634.266441][T26458] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.407184][T26487] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  635.462295][T26490] netlink: 'syz.0.5753': attribute type 210 has an invalid length.
[  636.366582][T26532] netlink: 'syz.1.5769': attribute type 1 has an invalid length.
[  637.194915][T26544] netlink: 'syz.0.5771': attribute type 1 has an invalid length.
[  637.225921][T26545] netlink: 'syz.1.5773': attribute type 1 has an invalid length.
[  637.534291][T26554] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  638.337386][T26578] netlink: 'syz.1.5784': attribute type 1 has an invalid length.
[  638.341017][T26578] IPv6: NLM_F_CREATE should be specified when creating new route
[  638.343708][T26578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  638.346056][T26578] IPv6: NLM_F_CREATE should be set when creating new route
[  638.348729][T26578] IPv6: NLM_F_CREATE should be set when creating new route
[  638.351150][T26578] IPv6: NLM_F_CREATE should be set when creating new route
[  638.367959][T26578] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  638.380184][T26580] syzkaller1: tun_chr_ioctl cmd 1074025677
[  638.382368][T26580] syzkaller1: linktype set to 0
[  638.633160][T26605] __nla_validate_parse: 115 callbacks suppressed
[  638.633173][T26605] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5791'.
[  638.638519][T26605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5791'.
[  638.647050][T26605] xt_hashlimit: size too large, truncated to 1048576
[  638.697947][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5791'.
[  638.982704][T19570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.986262][T19570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.010555][T26628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.017025][T26628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.490311][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5802'.
[  639.493301][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5802'.
[  639.553321][T26652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5804'.
[  639.567403][T26652] vlan6: entered promiscuous mode
[  639.573159][T26652] erspan0: entered promiscuous mode
[  641.076507][T26706] 8021q: VLANs not supported on ip_vti0
[  641.084754][T26707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'.
[  641.088508][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'.
[  641.149766][T26712] netlink: 'syz.0.5821': attribute type 1 has an invalid length.
[  641.152634][T26712] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5821'.
[  641.509236][T26717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5824'.
[  641.983387][T26733] openvswitch: netlink: Actions may not be safe on all matching packets
[  642.137954][T26751] netlink: 'syz.2.5833': attribute type 11 has an invalid length.
[  642.278911][T26759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  643.294359][T26779] erspan1: entered promiscuous mode
[  643.296138][T26779] erspan1: entered allmulticast mode
[  643.406875][T26789] netlink: 'syz.2.5844': attribute type 1 has an invalid length.
[  643.556877][T26794] xt_hashlimit: size too large, truncated to 1048576
[  643.752006][T26806] __nla_validate_parse: 4 callbacks suppressed
[  643.752023][T26806] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5849'.
[  643.757785][T26806] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5849'.
[  643.794367][T26810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5850'.
[  643.797251][T26810] nbd: must specify a size in bytes for the device
[  643.909376][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5851'.
[  643.977292][T26815] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5851'.
[  643.983364][T26815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5851'.
[  643.989442][T26815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5851'.
[  643.996290][T26815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5851'.
[  644.008497][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5852'.
[  644.013745][T26818] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.031630][T26849] vlan7: entered promiscuous mode
[  645.033267][T26849] gretap0: entered promiscuous mode
[  645.115259][T26851] delete_channel: no stack
[  645.121415][T26854] netlink: 'syz.0.5863': attribute type 1 has an invalid length.
[  645.142181][T26854] 8021q: adding VLAN 0 to HW filter on device bond10
[  645.155316][T26854] bond10: (slave gretap2): making interface the new active one
[  645.159947][T26854] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  645.781498][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5872'.
[  646.576361][T26897] netlink: 'syz.1.5875': attribute type 1 has an invalid length.
[  648.274440][T26928] x_tables: duplicate underflow at hook 4
[  649.148394][T26958] __nla_validate_parse: 7 callbacks suppressed
[  649.148411][T26958] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.5895'.
[  649.340562][T26960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5896'.
[  650.421969][T26976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5900'.
[  650.694460][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'.
[  650.697538][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'.
[  650.940157][T27002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5909'.
[  651.177254][T27021] xt_hashlimit: size too large, truncated to 1048576
[  651.454616][T27045] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5922'.
[  652.024827][T27076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5930'.
[  652.394090][T27084] xt_hashlimit: size too large, truncated to 1048576
[  653.167211][T27131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5946'.
[  653.272063][T27143] xt_hashlimit: size too large, truncated to 1048576
[  653.280677][T27145] netlink: 'syz.0.5952': attribute type 1 has an invalid length.
[  653.285573][T27145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5952'.
[  653.761877][T27162] bond0: Removing last ns target with arp_interval on
[  653.979658][T27185] bond0: Removing last ns target with arp_interval on
[  654.222854][T27206] dummy0: mtu less than device minimum
[  654.529744][T27228] __nla_validate_parse: 5 callbacks suppressed
[  654.529759][T27228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5978'.
[  654.534905][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5978'.
[  654.537922][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5978'.
[  654.546689][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  654.551861][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  654.554753][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  654.557566][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  654.585305][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5979'.
[  654.750193][T27243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5984'.
[  654.789392][T27248] No such timeout policy "syz1"
[  654.791798][T27249] No such timeout policy "syz1"
[  654.795893][T27249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5985'.
[  654.799681][T27248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'.
[  654.804129][T27248] veth1_to_team: left promiscuous mode
[  654.807198][T27248] veth1: left promiscuous mode
[  654.887862][T27252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5986'.
[  654.930591][T27253] netlink: 'syz.2.5986': attribute type 2 has an invalid length.
[  654.933874][T27253] netlink: 'syz.2.5986': attribute type 2 has an invalid length.
[  654.938560][T27252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5986'.
[  654.942700][T27253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5986'.
[  655.037202][T27257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.040848][T27257] netlink: 'syz.2.5987': attribute type 1 has an invalid length.
[  657.701292][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  657.710167][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  657.887763][T27403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.975229][T27407] netlink: 'syz.1.6031': attribute type 1 has an invalid length.
[  658.204682][T27421] Cannot find add_set index 2 as target
[  658.405443][T27430] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003
[  658.750359][T27457] xt_hashlimit: size too large, truncated to 1048576
[  658.959158][T27478] xt_hashlimit: size too large, truncated to 1048576
[  659.555447][T27500] __nla_validate_parse: 9 callbacks suppressed
[  659.555460][T27500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6058'.
[  659.567260][T27500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6058'.
[  659.856646][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6061'.
[  659.863770][T27516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6061'.
[  660.545766][T27518] netlink: 'syz.1.6062': attribute type 3 has an invalid length.
[  660.730630][T27531] netlink: 'syz.0.6065': attribute type 1 has an invalid length.
[  660.765516][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6066'.
[  660.782540][T27533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6066'.
[  660.786438][T27533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6066'.
[  660.881142][T27541] xt_hashlimit: size too large, truncated to 1048576
[  661.312693][T27554] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  663.764406][T27533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.769044][T27539] netlink: 'syz.0.6066': attribute type 2 has an invalid length.
[  663.772416][T27539] netlink: 'syz.0.6066': attribute type 2 has an invalid length.
[  663.847046][T27560] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.850498][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'.
[  663.853368][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'.
[  663.872548][T27561] xt_hashlimit: size too large, truncated to 1048576
[  663.882456][T27560] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.933943][T27560] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.995066][T27560] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  664.110341][ T5853] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  664.124420][ T5853] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  664.152284][ T5853] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  664.166152][ T5853] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  664.222965][T27591] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6082'.
[  664.225864][T27591] netlink: 'syz.2.6082': attribute type 1 has an invalid length.
[  664.234304][T27593] netlink: 'syz.1.6083': attribute type 12 has an invalid length.
[  664.314656][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.320786][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.326828][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.331354][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  664.449234][T27613] netlink: 'syz.2.6088': attribute type 1 has an invalid length.
[  665.034625][T27630] __nla_validate_parse: 2 callbacks suppressed
[  665.034640][T27630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6093'.
[  665.194293][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6097'.
[  665.204469][T27647] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  665.206826][T27647] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  665.278431][T27651] netlink: 'syz.2.6099': attribute type 1 has an invalid length.
[  665.408468][T27660] netlink: 'syz.2.6101': attribute type 1 has an invalid length.
[  665.411177][T27660] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6101'.
[  665.414218][T27660] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6101'.
[  665.417188][T27660] netlink: 'syz.2.6101': attribute type 1 has an invalid length.
[  665.421944][T27660] netlink: 634 bytes leftover after parsing attributes in process `syz.2.6101'.
[  665.483400][T27666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6103'.
[  665.487132][T27666] openvswitch: netlink: Unknown key attributes 2
[  665.494596][T27666] xt_l2tp: missing protocol rule (udp|l2tpip)
[  665.577663][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6104'.
[  666.068873][T27673] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  666.199392][T27691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6111'.
[  666.212860][T27691] netlink: 'syz.1.6111': attribute type 2 has an invalid length.
[  666.215722][T27691] netlink: 'syz.1.6111': attribute type 2 has an invalid length.
[  666.224361][T27691] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6111'.
[  666.278131][T27699] netlink: 'syz.0.6108': attribute type 1 has an invalid length.
[  666.285457][T27699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6108'.
[  666.330993][T27702] xt_hashlimit: size too large, truncated to 1048576
[  666.731960][T27717] netlink: 'syz.1.6118': attribute type 1 has an invalid length.
[  670.262887][T27865] __nla_validate_parse: 4 callbacks suppressed
[  670.262899][T27865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6162'.
[  670.290765][T27865] 8021q: adding VLAN 0 to HW filter on device bond13
[  670.298558][T27865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6162'.
[  670.338479][T27873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'.
[  670.403977][T27876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6164'.
[  670.761973][T27888] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  671.432937][T27920] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6179'.
[  671.445264][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6180'.
[  671.477805][T27923] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6180'.
[  671.524498][T27927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6181'.
[  671.952083][T27961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  672.083368][T27977] bond0: Caught tx_queue_len zero misconfig
[  672.213468][T27987] netlink: 'syz.2.6195': attribute type 5 has an invalid length.
[  672.388471][T27996] tunl0: Caught tx_queue_len zero misconfig
[  672.644890][T28007] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  672.647339][T28007] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  672.738990][T26465] Bluetooth: hci2: command 0x0405 tx timeout
[  672.750423][T28016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6203'.
[  672.780266][T28016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6203'.
[  672.785095][T28016] netlink: 'syz.0.6203': attribute type 2 has an invalid length.
[  672.788213][T28016] netlink: 'syz.0.6203': attribute type 2 has an invalid length.
[  673.000530][T28044] netlink: 'syz.1.6213': attribute type 1 has an invalid length.
[  673.024504][T28044] bond14: entered promiscuous mode
[  673.026359][T28044] bond14: entered allmulticast mode
[  673.028184][T28044] 8021q: adding VLAN 0 to HW filter on device bond14
[  673.096915][T28067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.101658][T28067] x_tables: duplicate underflow at hook 1
[  673.141690][T28072] tipc: MTU too low for tipc bearer
[  673.207606][T28081] netlink: 'syz.1.6224': attribute type 21 has an invalid length.
[  673.212687][T28081] IPv6: NLM_F_CREATE should be specified when creating new route
[  673.392996][T28103] xt_hashlimit: size too large, truncated to 1048576
[  673.444051][T28108] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved
[  673.493088][T28111] netlink: 'syz.2.6233': attribute type 1 has an invalid length.
[  673.577503][T28125] netlink: 'syz.0.6237': attribute type 6 has an invalid length.
[  673.581099][T28125] netlink: 'syz.0.6237': attribute type 6 has an invalid length.
[  673.639494][T28135] netlink: 'syz.1.6240': attribute type 4 has an invalid length.
[  673.712615][T28140] veth55: entered allmulticast mode
[  673.722343][T28140] bond15: (slave veth55): Enslaving as an active interface with an up link
[  674.015470][T28165] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  674.025083][T28165] batman_adv: batadv0: Removing interface: ipvlan2
[  674.500759][T28175] netlink: 'syz.1.6253': attribute type 1 has an invalid length.
[  674.656560][T28187] xt_hashlimit: size too large, truncated to 1048576
[  675.657972][T28234] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  675.663866][T28234] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  675.697158][T28242] __nla_validate_parse: 25 callbacks suppressed
[  675.697171][T28242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6270'.
[  675.703990][T28242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6270'.
[  676.104341][T28251] bond13: entered promiscuous mode
[  676.106500][T28251] 8021q: adding VLAN 0 to HW filter on device bond13
[  676.246670][T28256] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6274'.
[  676.727686][T28263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6276'.
[  676.784987][T28266] xt_hashlimit: size too large, truncated to 1048576
[  677.433755][T28344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  677.473345][T28346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6300'.
[  677.476871][T28346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6300'.
[  677.484192][T28346] validate_nla: 9 callbacks suppressed
[  677.484204][T28346] netlink: 'syz.1.6300': attribute type 1 has an invalid length.
[  677.551988][T28348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6301'.
[  677.555020][T28348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6301'.
[  677.558132][T28348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6301'.
[  680.659462][T28359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  680.902580][T28395] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  680.905605][T28395] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  681.177818][T28427] xt_hashlimit: size too large, truncated to 1048576
[  681.760898][T28472] netlink: 'syz.1.6333': attribute type 1 has an invalid length.
[  681.763681][T28472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6333'.
[  682.584718][T28495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6343'.
[  682.590589][T28495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6343'.
[  682.652512][T28500] netlink: 'syz.1.6345': attribute type 29 has an invalid length.
[  682.656523][T28501] netlink: 'syz.1.6345': attribute type 29 has an invalid length.
[  682.867989][T28514] xt_hashlimit: size too large, truncated to 1048576
[  682.898973][T28517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6351'.
[  682.932020][T28520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6352'.
[  682.993497][T28527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6354'.
[  683.048184][T28535] netlink: 'syz.1.6357': attribute type 7 has an invalid length.
[  683.053668][T28535] netlink: 'syz.1.6357': attribute type 8 has an invalid length.
[  683.056707][T28535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6357'.
[  683.124971][T28540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6358'.
[  683.137921][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'.
[  683.157014][T28542] 8021q: adding VLAN 0 to HW filter on device bond17
[  683.168225][T28542] bond16: (slave bond17): Enslaving as an active interface with an up link
[  683.252041][T28547] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6360'.
[  686.543894][T28563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.827614][T28625] __nla_validate_parse: 2 callbacks suppressed
[  686.827634][T28625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6377'.
[  687.161555][T28635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6383'.
[  687.424163][T28646] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  687.458074][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6387'.
[  687.464915][T28646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6387'.
[  687.510506][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6390'.
[  687.558078][T28660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6392'.
[  688.533005][T28711] netlink: 'syz.1.6406': attribute type 1 has an invalid length.
[  688.535674][T28711] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6406'.
[  689.253491][T28741] xt_hashlimit: size too large, truncated to 1048576
[  689.308846][T28743] x_tables: duplicate underflow at hook 3
[  689.438148][T28756] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  689.441330][T28756] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  689.513952][T28759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6420'.
[  689.519494][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6420'.
[  689.827083][T28773] netlink: 'syz.1.6424': attribute type 4 has an invalid length.
[  689.830621][T28773] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6424'.
[  689.834411][T28773] wlan1: mtu greater than device maximum
[  689.894056][T28774] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  690.066429][T28776] xt_hashlimit: size too large, truncated to 1048576
[  690.308906][T28789] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  690.413012][T28802] netlink: 'syz.0.6433': attribute type 1 has an invalid length.
[  690.416039][T28802] netlink: 'syz.0.6433': attribute type 1 has an invalid length.
[  690.420315][T28802] sock: sock_set_timeout: `syz.0.6433' (pid 28802) tries to set negative timeout
[  690.900676][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  691.785848][T28854] netlink: 'syz.2.6447': attribute type 11 has an invalid length.
[  691.792496][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  692.250066][T28861] __nla_validate_parse: 8 callbacks suppressed
[  692.250078][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'.
[  692.255392][T28861] openvswitch: netlink: Key type 29 is not supported
[  692.353054][T28870] sctp: [Deprecated]: syz.1.6452 (pid 28870) Use of int in maxseg socket option.
[  692.353054][T28870] Use struct sctp_assoc_value instead
[  692.360022][T28870] x_tables: duplicate underflow at hook 2
[  692.551623][T28850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.643779][T28882] netlink: 'syz.1.6455': attribute type 1 has an invalid length.
[  692.943316][T28913] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6466'.
[  692.947263][T28913] x_tables: unsorted underflow at hook 4
[  693.073336][T28933] netlink: 'syz.1.6472': attribute type 1 has an invalid length.
[  693.076725][T28933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6472'.
[  693.124523][T28936] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  693.157169][T28936] syzkaller0: entered promiscuous mode
[  693.159065][T28936] syzkaller0: entered allmulticast mode
[  695.025763][T28952] 8021q: VLANs not supported on lo
[  695.312913][T28972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6484'.
[  695.315930][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6484'.
[  695.335651][T28973] netlink: 'syz.2.6484': attribute type 2 has an invalid length.
[  695.338796][T28973] netlink: 'syz.2.6484': attribute type 2 has an invalid length.
[  695.344242][T28972] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6484'.
[  695.456555][T28981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  695.677354][T28996] netlink: 'syz.0.6492': attribute type 1 has an invalid length.
[  695.712126][T28999] netlink: 'syz.1.6493': attribute type 1 has an invalid length.
[  695.906719][T29013] syzkaller1: entered promiscuous mode
[  695.909634][T29013] syzkaller1: entered allmulticast mode
[  696.358226][T29040] netlink: 'syz.2.6506': attribute type 21 has an invalid length.
[  696.361555][T29040] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6506'.
[  696.594450][T29067] netlink: 'syz.0.6512': attribute type 1 has an invalid length.
[  696.597021][T29067] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6512'.
[  696.600574][T29065] netlink: 'syz.2.6511': attribute type 1 has an invalid length.
[  696.602998][T29065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6511'.
[  696.639645][T29070] netlink: 'syz.0.6512': attribute type 1 has an invalid length.
[  696.642292][T29070] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6512'.
[  697.780968][T29121] __nla_validate_parse: 5 callbacks suppressed
[  697.780984][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6526'.
[  697.786542][T29123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6526'.
[  698.107397][T29141] netlink: 'syz.1.6532': attribute type 1 has an invalid length.
[  698.110199][T29141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6532'.
[  698.916999][T29146] netlink: 'syz.1.6534': attribute type 1 has an invalid length.
[  698.920930][T29146] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.6534'.
[  699.011982][T29150] xt_hashlimit: size too large, truncated to 1048576
[  700.442358][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6543'.
[  700.575289][T29189] Bluetooth: hci1: too big key_count value 29096
[  700.657005][T29194] validate_nla: 1 callbacks suppressed
[  700.657023][T29194] netlink: 'syz.0.6547': attribute type 12 has an invalid length.
[  700.704030][T29196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6548'.
[  700.733685][T29198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6548'.
[  700.917956][T29214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6552'.
[  700.923926][T29214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6552'.
[  700.976988][T29216] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  701.445163][T29226] netlink: 'syz.1.6556': attribute type 9 has an invalid length.
[  701.447994][T29226] netlink: 'syz.1.6556': attribute type 6 has an invalid length.
[  701.451325][T29226] netlink: 'syz.1.6556': attribute type 7 has an invalid length.
[  701.453896][T29226] netlink: 'syz.1.6556': attribute type 8 has an invalid length.
[  704.446692][T29226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.676931][T29279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6570'.
[  704.775185][T29289] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6572'.
[  705.653740][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6575'.
[  705.691175][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6576'.
[  705.709061][T29311] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  705.832183][T29326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  705.837919][T29321] netlink: 'syz.1.6580': attribute type 7 has an invalid length.
[  705.848028][T29327] netlink: 'syz.0.6581': attribute type 1 has an invalid length.
[  705.853919][T29327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6581'.
[  705.958435][T29341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6588'.
[  706.191815][T29354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6591'.
[  706.198158][T29354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6591'.
[  706.985915][T29386] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  706.988383][T29386] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  707.165212][T29395] netlink: 'syz.2.6602': attribute type 1 has an invalid length.
[  707.167907][T29395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6602'.
[  707.618830][T29401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6604'.
[  707.873074][T29416] xt_hashlimit: size too large, truncated to 1048576
[  708.776500][T29455] netlink: 'syz.1.6621': attribute type 13 has an invalid length.
[  708.906040][T29464] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  709.005066][T29472] batadv_slave_0: entered promiscuous mode
[  709.012552][T29471] batadv_slave_0: left promiscuous mode
[  709.788805][T29490] syzkaller1: entered promiscuous mode
[  709.790610][T29490] syzkaller1: entered allmulticast mode
[  709.992386][T29499] netlink: 'syz.1.6635': attribute type 89 has an invalid length.
[  710.841421][T29508] __nla_validate_parse: 5 callbacks suppressed
[  710.841433][T29508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6638'.
[  710.855898][T29513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6639'.
[  710.860036][T29513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6639'.
[  711.506533][T29545] netlink: 'syz.1.6648': attribute type 1 has an invalid length.
[  711.514755][T29545] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6648'.
[  711.518502][T29545] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6648'.
[  711.522653][T29545] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6648'.
[  711.939769][T29571] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6655'.
[  711.946098][T29571] syzkaller1: entered promiscuous mode
[  711.947908][T29571] syzkaller1: entered allmulticast mode
[  712.253147][T29538] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  712.407863][T29592] netlink: 185416 bytes leftover after parsing attributes in process `syz.2.6660'.
[  713.282006][T29608] xt_hashlimit: size too large, truncated to 1048576
[  713.320230][T29611] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6665'.
[  713.324840][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6665'.
[  713.329980][T29612] netlink: 'syz.1.6665': attribute type 11 has an invalid length.
[  713.537892][T29648] xt_hashlimit: size too large, truncated to 1048576
[  714.644054][T29704] netlink: 'syz.0.6688': attribute type 3 has an invalid length.
[  714.654669][T29706] bond0: Removing last ns target with arp_interval on
[  714.657677][T29706] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.686193][T29707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  714.890963][T29720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  715.496319][T29730] delete_channel: no stack
[  715.629150][T29736] syzkaller0: entered promiscuous mode
[  715.631464][T29736] syzkaller0: entered allmulticast mode
[  716.661448][T29757] __nla_validate_parse: 5 callbacks suppressed
[  716.661467][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'.
[  716.667704][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'.
[  717.631200][T29758] delete_channel: no stack
[  717.695008][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6705'.
[  717.760742][T29772] netlink: 'syz.1.6707': attribute type 21 has an invalid length.
[  717.764973][T29772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6707'.
[  718.573990][T29772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  718.824474][T29809] syzkaller0: entered promiscuous mode
[  718.829114][T29809] syzkaller0: entered allmulticast mode
[  718.837058][T29809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6716'.
[  718.893186][T29815] bond0: Caught tx_queue_len zero misconfig
[  718.983675][T29823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6718'.
[  719.044697][T29828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6721'.
[  719.321637][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6727'.
[  719.326768][T29853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6727'.
[  719.335289][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6727'.
[  720.170758][T29878] 8021q: adding VLAN 0 to HW filter on device bond0
[  720.199554][   T12] bond0: (slave wlan1): link status definitely down, disabling slave
[  720.212155][   T12] bond0: now running without any active interface!
[  720.524338][T29898] xt_hashlimit: size too large, truncated to 1048576
[  720.616459][T29902] bond0: Removing last ns target with arp_interval on
[  720.619540][T29902] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.484145][T29968] netlink: 'syz.2.6767': attribute type 1 has an invalid length.
[  722.312550][T29975] netlink: 'syz.1.6769': attribute type 1 has an invalid length.
[  722.315979][T29975] __nla_validate_parse: 13 callbacks suppressed
[  722.315997][T29975] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6769'.
[  722.371028][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'.
[  722.374173][T29977] bond0: Removing last ns target with arp_interval on
[  722.379227][T29977] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.534335][T29989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6776'.
[  722.542596][T29989] xt_CT: You must specify a L4 protocol and not use inversions on it
[  723.171802][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6779'.
[  723.213825][T30001] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  723.326992][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6782'.
[  723.974824][T30056] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6796'.
[  724.576717][T30077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6803'.
[  724.792626][T30095] netlink: 'syz.1.6808': attribute type 1 has an invalid length.
[  724.838394][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6809'.
[  724.848138][T30098] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.912802][T30102] lo: Caught tx_queue_len zero misconfig
[  724.930153][T30105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6812'.
[  724.973822][T30108] dummy0: mtu less than device minimum
[  724.983016][T30111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6814'.
[  749.949373][T30144] xt_hashlimit: size too large, truncated to 1048576
[  750.433391][T30202] bpq0: entered promiscuous mode
[  750.437023][T30202] bpq0: left promiscuous mode
[  751.137747][T30229] __nla_validate_parse: 1 callbacks suppressed
[  751.137858][T30229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6847'.
[  751.474732][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6852'.
[  751.478484][T30240] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6852'.
[  751.547822][T30245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6853'.
[  751.600742][T30247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6854'.
[  752.071884][T30272] bond19: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  752.075922][T30272] bond19 (unregistering): Released all slaves
[  752.209902][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6861'.
[  752.346897][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  753.193265][T30287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6863'.
[  754.051725][T30296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  754.055758][T30296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  754.104500][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'.
[  754.107805][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'.
[  754.113212][T30297] x_tables: duplicate underflow at hook 1
[  754.982663][T30314] syzkaller0: refused to change device tx_queue_len
[  755.155971][T30329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6878'.
[  755.159110][T30326] netlink: 'syz.1.6876': attribute type 1 has an invalid length.
[  755.193069][T30333] xt_hashlimit: size too large, truncated to 1048576
[  755.245074][T30335] netlink: 'syz.2.6879': attribute type 1 has an invalid length.
[  755.247747][T30335] nbd: error processing sock list
[  755.355659][T30339] IPVS: Unknown mcast interface: dummy0
[  755.841585][T30361] netlink: 'syz.0.6889': attribute type 2 has an invalid length.
[  755.844264][T30361] netlink: 'syz.0.6889': attribute type 2 has an invalid length.
[  755.902991][T30365] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  755.906173][T30365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  756.102237][T30384] sctp: [Deprecated]: syz.1.6897 (pid 30384) Use of int in max_burst socket option deprecated.
[  756.102237][T30384] Use struct sctp_assoc_value instead
[  756.147753][T30382] netlink: 'syz.0.6896': attribute type 1 has an invalid length.
[  756.162407][T30382] bond12: entered promiscuous mode
[  756.164474][T30382] 8021q: adding VLAN 0 to HW filter on device bond12
[  756.179752][T30382] bond12: (slave bridge15): making interface the new active one
[  756.182306][T30382] bridge15: entered promiscuous mode
[  756.184998][T30382] bond12: (slave bridge15): Enslaving as an active interface with an up link
[  756.850379][T30412] netlink: 'syz.2.6905': attribute type 1 has an invalid length.
[  756.853782][T30412] xt_hashlimit: size too large, truncated to 1048576
[  757.005804][T30424] netlink: 'syz.2.6908': attribute type 1 has an invalid length.
[  757.111944][T30433] __nla_validate_parse: 5 callbacks suppressed
[  757.111960][T30433] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6910'.
[  757.118343][T30433] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6910'.
[  757.194530][T30435] SET target dimension over the limit!
[  757.253040][T30441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6912'.
[  757.256345][T30441] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  757.327888][T30444] netlink: 'syz.2.6914': attribute type 1 has an invalid length.
[  757.331397][T30444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6914'.
[  758.755620][T30485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6926'.
[  759.885981][T30507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  759.959463][T30521] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  759.967435][T30527] netlink: 'syz.0.6939': attribute type 12 has an invalid length.
[  759.975408][T30521] sctp: [Deprecated]: syz.2.6937 (pid 30521) Use of int in maxseg socket option.
[  759.975408][T30521] Use struct sctp_assoc_value instead
[  760.285386][T30551] xt_hashlimit: size too large, truncated to 1048576
[  760.473425][T30560] pimreg9: entered allmulticast mode
[  760.528814][T30561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6950'.
[  760.966080][T30563] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004
[  761.183350][T30582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'.
[  761.186516][T30582] bond0: Removing last ns target with arp_interval on
[  761.251063][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'.
[  761.254063][T30589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6957'.
[  761.312855][T30593] sctp: [Deprecated]: syz.2.6961 (pid 30593) Use of struct sctp_assoc_value in delayed_ack socket option.
[  761.312855][T30593] Use struct sctp_sack_info instead
[  761.320474][T30593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6961'.
[  762.171925][T30624] __nla_validate_parse: 4 callbacks suppressed
[  762.171942][T30624] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6970'.
[  762.181027][T30624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6970'.
[  763.059729][T30658] pim6reg1: entered promiscuous mode
[  763.061617][T30658] pim6reg1: entered allmulticast mode
[  763.340009][T30668] netlink: 'syz.0.6985': attribute type 10 has an invalid length.
[  763.388391][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6986'.
[  763.392542][T30670] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.508435][T30676] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  763.512689][T30677] bond0: (slave batadv_slave_0): Error: Device is in use and cannot be enslaved
[  763.524433][T30678] netlink: 'syz.0.6988': attribute type 1 has an invalid length.
[  763.527842][T30678] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6988'.
[  763.794880][T30695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  763.872934][T30703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6996'.
[  763.875856][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6996'.
[  763.878914][T30703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'.
[  763.915115][T30709] netlink: 'syz.1.6997': attribute type 1 has an invalid length.
[  763.918214][T30709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6997'.
[  763.925957][T30705] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  763.993952][T30711] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  764.081405][T30717] bond14: entered promiscuous mode
[  764.083537][T30717] 8021q: adding VLAN 0 to HW filter on device bond14
[  764.360969][T30743] team0: entered promiscuous mode
[  764.705561][T30751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7007'.
[  764.839441][T30754] netlink: 'syz.1.7008': attribute type 1 has an invalid length.
[  764.842724][T30754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7008'.
[  765.323370][T30765] netlink: 'syz.0.7010': attribute type 4 has an invalid length.
[  765.407027][T30770] netlink: 'syz.2.7013': attribute type 2 has an invalid length.
[  765.501681][T30778] netlink: 'syz.2.7015': attribute type 1 has an invalid length.
[  765.672338][T30782] netlink: 'syz.2.7017': attribute type 8 has an invalid length.
[  765.682564][T30782] veth1_to_team: entered promiscuous mode
[  765.685967][T30782] veth1: entered promiscuous mode
[  765.690098][T30782] hsr0: entered promiscuous mode
[  765.703221][T30782] syzkaller1: entered promiscuous mode
[  765.705690][T30782] syzkaller1: entered allmulticast mode
[  765.845608][T30794] bond0: Removing last ns target with arp_interval on
[  765.849995][T30794] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.086981][T30807] netlink: 'syz.1.7023': attribute type 1 has an invalid length.
[  766.090532][T30807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.262177][T30818] pim6reg1: entered promiscuous mode
[  766.264009][T30818] pim6reg1: entered allmulticast mode
[  769.332265][T30824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  769.400706][T30844] __nla_validate_parse: 8 callbacks suppressed
[  769.400719][T30844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7034'.
[  769.412413][T30846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7035'.
[  769.465023][T30851] batadv_slave_1: entered promiscuous mode
[  769.468219][T30850] batadv_slave_1: left promiscuous mode
[  769.510091][T30853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7038'.
[  769.516272][T30853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7038'.
[  770.086275][T30888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7048'.
[  770.094857][T30888] ip6gre1: entered promiscuous mode
[  770.097067][T30888] ip6gre1: entered allmulticast mode
[  770.109152][T30888] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  770.112503][T30888] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  770.872941][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7063'.
[  770.895880][T30946] syzkaller1: entered promiscuous mode
[  770.898209][T30946] syzkaller1: entered allmulticast mode
[  771.779765][T30954] syzkaller0: entered promiscuous mode
[  771.785005][T30954] 0: reclassify loop, rule prio 0, protocol 800
[  771.854910][T30957] netlink: 'syz.0.7068': attribute type 1 has an invalid length.
[  771.857906][T30957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7068'.
[  772.353651][T30993] xt_hashlimit: size too large, truncated to 1048576
[  772.459158][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7078'.
[  772.462806][T30993] netlink: 'syz.2.7078': attribute type 5 has an invalid length.
[  772.465977][T30993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7078'.
[  772.476431][T30993] geneve4: entered promiscuous mode
[  772.478973][T30993] geneve4: entered allmulticast mode
[  772.482720][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 36325 - 0
[  772.485490][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 36325 - 0
[  772.490077][T30995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  772.532875][T30995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  772.589069][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 36325 - 0
[  772.602566][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 36325 - 0
[  772.614391][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 36325 - 0
[  772.623701][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 36325 - 0
[  772.679676][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7079'.
[  772.972785][T31017] sctp: [Deprecated]: syz.1.7084 (pid 31017) Use of int in max_burst socket option.
[  772.972785][T31017] Use struct sctp_assoc_value instead
[  775.844369][T31072] __nla_validate_parse: 2 callbacks suppressed
[  775.844384][T31072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7099'.
[  776.723907][T31073] delete_channel: no stack
[  777.392183][T31058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  777.396651][T31062] netlink: 'syz.1.7096': attribute type 1 has an invalid length.
[  777.400319][T31062] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7096'.
[  777.482711][T31077] xt_hashlimit: size too large, truncated to 1048576
[  777.590192][T31094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7105'.
[  777.642294][T31094] netlink: 'syz.0.7105': attribute type 2 has an invalid length.
[  777.648986][T31094] netlink: 'syz.0.7105': attribute type 2 has an invalid length.
[  777.733133][T31114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.830626][T31118] syzkaller1: entered promiscuous mode
[  777.832928][T31118] syzkaller1: entered allmulticast mode
[  777.898985][T31127] pim6reg: entered allmulticast mode
[  777.911178][T31127] pim6reg: left allmulticast mode
[  777.947381][T31136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7118'.
[  777.955712][T31136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7118'.
[  778.113379][T31160] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  778.215553][T31160] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  778.275690][T31160] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  778.320624][T31160] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36325 - 0
[  778.325369][T31168] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7128'.
[  778.413542][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 36325 - 0
[  778.438478][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 36325 - 0
[  778.441894][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 36325 - 0
[  778.461830][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 36325 - 0
[  778.533420][T31185] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  778.538025][T31185] bond19 (unregistering): Released all slaves
[  778.670082][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 36325 - 0
[  778.673980][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'.
[  778.677738][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 36325 - 0
[  778.682682][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'.
[  778.686308][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 36325 - 0
[  778.689976][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 36325 - 0
[  778.817211][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7139'.
[  778.922485][T31214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7142'.
[  778.966878][T31216] ip6tnl3: entered promiscuous mode
[  779.017132][T31219] netlink: 'syz.2.7144': attribute type 5 has an invalid length.
[  779.638013][T31271] xt_hashlimit: size too large, truncated to 1048576
[  779.692082][T31275] netlink: 'syz.0.7148': attribute type 4 has an invalid length.
[  779.735095][T31276] netlink: Conntrack attr has 3 unknown bytes
[  779.738927][T31276] netlink: 'syz.1.7151': attribute type 1 has an invalid length.
[  780.543119][T31289] xt_l2tp: missing protocol rule (udp|l2tpip)
[  780.576453][T31292] 8021q: adding VLAN 0 to HW filter on device team0
[  780.642013][T31293] netlink: 'syz.0.7154': attribute type 5 has an invalid length.
[  781.389179][T31309] IPVS: Error connecting to the multicast addr
[  781.782277][T31339] __nla_validate_parse: 4 callbacks suppressed
[  781.782295][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7169'.
[  781.788870][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7169'.
[  781.840172][T31346] vlan3: entered promiscuous mode
[  781.842190][T31346] bridge0: entered promiscuous mode
[  781.941329][T31346] netlink: 'syz.1.7170': attribute type 1 has an invalid length.
[  781.944235][T31346] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7170'.
[  782.340501][T31360] netlink: 'syz.2.7174': attribute type 4 has an invalid length.
[  782.381417][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7175'.
[  782.384372][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7175'.
[  782.996640][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7180'.
[  783.001126][T31378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7180'.
[  783.004581][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7180'.
[  783.007443][T31378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7180'.
[  783.037892][T31381] netlink: 'syz.0.7181': attribute type 7 has an invalid length.
[  783.040861][T31381] netlink: 'syz.0.7181': attribute type 8 has an invalid length.
[  783.425848][T31396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7185'.
[  784.863582][T31447] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  785.094661][T31472] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  785.097024][T31472] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  786.021773][T31481] 8021q: VLANs not supported on ip6gre0
[  786.174834][T31488] xt_l2tp: missing protocol rule (udp|l2tpip)
[  786.177782][T31488] xt_CONNSECMARK: invalid mode: 254
[  786.238137][T31495] bond19: entered promiscuous mode
[  786.243791][T31495] 8021q: adding VLAN 0 to HW filter on device bond19
[  786.813414][T31525] netlink: 'syz.0.7222': attribute type 1 has an invalid length.
[  786.874119][T31532] __nla_validate_parse: 11 callbacks suppressed
[  786.874131][T31532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7224'.
[  786.892570][T31532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7224'.
[  786.895741][T31532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7224'.
[  786.901876][T31532] netlink: 'syz.0.7224': attribute type 2 has an invalid length.
[  786.906178][T31532] netlink: 'syz.0.7224': attribute type 2 has an invalid length.
[  786.911414][T31532] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7224'.
[  787.070848][T31540] netlink: 'syz.0.7228': attribute type 3 has an invalid length.
[  787.311333][T31556] bond0: entered promiscuous mode
[  787.313449][T31556] bond_slave_0: entered promiscuous mode
[  787.315575][T31556] bond_slave_1: entered promiscuous mode
[  787.318384][T31556] batadv0: entered promiscuous mode
[  787.322635][T31556] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  787.326115][T31556] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  787.331371][T31556] 8021q: adding VLAN 0 to HW filter on device hsr1
[  787.336953][T31556] bond0: left promiscuous mode
[  787.344859][T31556] bond_slave_0: left promiscuous mode
[  787.346929][T31556] bond_slave_1: left promiscuous mode
[  787.349772][T31556] batadv0: left promiscuous mode
[  787.386523][T31562] xt_hashlimit: size too large, truncated to 1048576
[  787.444857][T31569] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7236'.
[  788.501130][T31614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  788.503654][T31614] IPv6: NLM_F_CREATE should be set when creating new route
[  788.506100][T31614] IPv6: NLM_F_CREATE should be set when creating new route
[  788.512898][T31614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  788.561762][T31623] sock: sock_timestamping_bind_phc: sock not bind to device
[  788.746340][T31629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7256'.
[  788.831804][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7259'.
[  788.847570][T31641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7259'.
[  788.851585][T31641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7259'.
[  789.068788][T31649] xt_hashlimit: size too large, truncated to 1048576
[  789.085679][T31648] netlink: 'syz.0.7261': attribute type 1 has an invalid length.
[  789.165678][T31655] netlink: 'syz.2.7260': attribute type 1 has an invalid length.
[  789.197390][T31655] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  789.290481][T31668] netlink: 'syz.0.7267': attribute type 21 has an invalid length.
[  789.293019][T31669] netlink: 'syz.0.7267': attribute type 21 has an invalid length.
[  789.295619][T31669] netlink: 'syz.0.7267': attribute type 6 has an invalid length.
[  789.300251][T31668] netlink: 'syz.0.7267': attribute type 6 has an invalid length.
[  789.303612][T31662] syzkaller0: entered promiscuous mode
[  789.306031][T31662] syzkaller0: entered allmulticast mode
[  789.316201][T31669] IPVS: set_ctl: invalid protocol: 216 255.255.255.255:20001
[  789.341842][T31669] netlink: 'syz.0.7267': attribute type 1 has an invalid length.
[  789.344573][T31669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7267'.
[  789.365236][T31668] netlink: 'syz.0.7267': attribute type 1 has an invalid length.
[  789.532310][T31698] xt_hashlimit: size too large, truncated to 1048576
[  789.811619][T31710] netlink: 'syz.2.7277': attribute type 89 has an invalid length.
[  789.823220][T31710] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  789.911088][T31715] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  789.913663][T31715] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  790.403101][T31723] syzkaller0: entered promiscuous mode
[  790.405049][T31723] syzkaller0: entered allmulticast mode
[  790.551552][T31725] .70: renamed from hsr0
[  790.554625][T31725] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  790.558145][T31725] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  790.564757][T31725] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  791.935506][T31761] netlink: 'syz.2.7292': attribute type 1 has an invalid length.
[  791.938065][T31761] __nla_validate_parse: 7 callbacks suppressed
[  791.938074][T31761] netlink: 936 bytes leftover after parsing attributes in process `syz.2.7292'.
[  792.235106][T31764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7293'.
[  792.242192][T31764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7293'.
[  792.279304][T31768] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  793.625254][T31792] bond20: invalid ARP target 0.0.0.0 specified for addition
[  793.628412][T31792] bond20: option arp_ip_target: invalid value (0)
[  793.633382][T31792] bond20 (unregistering): Released all slaves
[  795.338088][T31773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  795.442464][T31809] dummy0: mtu less than device minimum
[  795.469287][T31807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7306'.
[  795.520280][T31822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7309'.
[  795.618240][T31830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7311'.
[  795.642714][T31831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7312'.
[  795.643514][T31830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7311'.
[  795.652100][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7311'.
[  795.676370][T31831] netlink: 'syz.2.7312': attribute type 2 has an invalid length.
[  795.680496][T31831] netlink: 'syz.2.7312': attribute type 2 has an invalid length.
[  795.684223][T31831] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7312'.
[  795.964683][T31840] netlink: 'syz.2.7314': attribute type 1 has an invalid length.
[  795.982617][T31840] 8021q: adding VLAN 0 to HW filter on device bond15
[  795.996309][T31840] 8021q: adding VLAN 0 to HW filter on device batadv1
[  796.002702][T31840] bond15: (slave batadv1): making interface the new active one
[  796.006405][T31840] bond15: (slave batadv1): Enslaving as an active interface with an up link
[  796.020706][T31840] bond15 (unregistering): (slave batadv1): Releasing active interface
[  796.025488][T31840] bond15 (unregistering): Released all slaves
[  796.957411][T31901] __nla_validate_parse: 5 callbacks suppressed
[  796.957429][T31901] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7332'.
[  798.659688][T26465] Bluetooth: hci2: command 0x0405 tx timeout
[  799.251369][T31981] pim6reg: entered allmulticast mode
[  799.255034][T31981] pim6reg: left allmulticast mode
[  799.514225][T32004] xt_hashlimit: size too large, truncated to 1048576
[  799.535330][T32005] netlink: 'syz.2.7359': attribute type 1 has an invalid length.
[  799.541421][T32005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7359'.
[  799.793627][T32028] sctp: [Deprecated]: syz.0.7369 (pid 32028) Use of int in maxseg socket option.
[  799.793627][T32028] Use struct sctp_assoc_value instead
[  799.803998][T32028] netlink: 'syz.0.7369': attribute type 39 has an invalid length.
[  800.340796][T32052] syzkaller1: entered promiscuous mode
[  800.343120][T32052] syzkaller1: entered allmulticast mode
[  800.612835][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7376'.
[  800.752109][T32067] bond20: option updelay: invalid value (18446744073709493611)
[  800.754602][T32067] bond20: option updelay: allowed values 0 - 2147483647
[  800.758503][T32067] bond20 (unregistering): Released all slaves
[  800.967241][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7382'.
[  800.970261][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7382'.
[  801.798410][T32094] xt_hashlimit: size too large, truncated to 1048576
[  802.130192][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7396'.
[  802.133169][T32129] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7396'.
[  802.136117][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7396'.
[  802.141149][T32129] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7396'.
[  802.145446][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7396'.
[  802.437251][T32140] xt_CT: No such helper "syz1"
[  802.444111][T32140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7399'.
[  803.477343][T32185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7415'.
[  803.734577][T32209] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7421'.
[  803.792684][T32217] netlink: 'syz.2.7421': attribute type 1 has an invalid length.
[  803.795168][T32217] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7421'.
[  803.868301][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7425'.
[  804.090695][T32246] xt_hashlimit: size too large, truncated to 1048576
[  805.026999][T32265] netlink: 'syz.1.7437': attribute type 2 has an invalid length.
[  805.029666][T32265] netlink: 'syz.1.7437': attribute type 2 has an invalid length.
[  805.123913][T32279] netlink: 'syz.1.7441': attribute type 30 has an invalid length.
[  805.126744][T32279] bond0: option arp_missed_max: invalid value (0)
[  805.130632][T32279] bond0: option arp_missed_max: allowed values 1 - 255
[  805.388348][T32304] syzkaller0: entered promiscuous mode
[  805.393119][T32304] syzkaller0: entered allmulticast mode
[  805.630456][T32314] IPVS: sh: FWM 3 0x00000003 - no destination available
[  805.635471][ T6256] IPVS: starting estimator thread 0...
[  805.731887][T32319] IPVS: using max 47 ests per chain, 112800 per kthread
[  805.851999][T32336] dvmrp1: entered allmulticast mode
[  805.854766][T32336] dvmrp1: left allmulticast mode
[  805.942865][T24900] IPVS: stop unused estimator thread 0...
[  806.157611][T32348] netlink: 'syz.0.7460': attribute type 1 has an invalid length.
[  806.174664][T32351] openvswitch: netlink: Duplicate or invalid key (type 0).
[  806.177434][T32351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  806.185192][T32348] bond13: entered promiscuous mode
[  806.187633][T32348] 8021q: adding VLAN 0 to HW filter on device bond13
[  806.210199][T32348] 8021q: adding VLAN 0 to HW filter on device bond13
[  806.213386][T32348] bond13: (slave vti1): The slave device specified does not support setting the MAC address
[  806.216694][T32348] bond13: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  806.224805][T32348] bond13: (slave vti1): making interface the new active one
[  806.227184][T32348] vti1: entered promiscuous mode
[  806.230966][T32348] bond13: (slave vti1): Enslaving as an active interface with an up link
[  806.357405][T32359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  807.143937][T32395] netlink: 'syz.1.7475': attribute type 1 has an invalid length.
[  807.146408][T32395] __nla_validate_parse: 8 callbacks suppressed
[  807.146415][T32395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7475'.
[  808.025449][T32402] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7477'.
[  808.165307][T32410] sock: sock_timestamping_bind_phc: sock not bind to device
[  808.295037][T32421] syzkaller0: entered promiscuous mode
[  808.297291][T32421] syzkaller0: entered allmulticast mode
[  809.135250][T32441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7490'.
[  809.146479][T32441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7490'.
[  809.150018][T32441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'.
[  809.153197][T32441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'.
[  809.156137][T32441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7490'.
[  809.385363][T32451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  809.387853][T32451] IPv6: NLM_F_CREATE should be set when creating new route
[  809.390244][T32451] IPv6: NLM_F_CREATE should be set when creating new route
[  809.392660][T32451] IPv6: NLM_F_CREATE should be set when creating new route
[  809.396379][T32451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  809.481004][T32462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7497'.
[  809.499156][T32462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7497'.
[  809.505223][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7497'.
[  809.514287][T32462] netlink: 'syz.0.7497': attribute type 2 has an invalid length.
[  809.517429][T32462] netlink: 'syz.0.7497': attribute type 2 has an invalid length.
[  809.536394][T32465] netlink: 'syz.2.7498': attribute type 1 has an invalid length.
[  809.551552][T32465] bond15: entered promiscuous mode
[  809.553585][T32465] 8021q: adding VLAN 0 to HW filter on device bond15
[  809.822035][T32490] batadv_slave_0: entered promiscuous mode
[  809.834649][T32489] batadv_slave_0: left promiscuous mode
[  810.566013][T32531] netlink: 'syz.2.7521': attribute type 6 has an invalid length.
[  811.326488][T32548] netlink: 'syz.0.7526': attribute type 83 has an invalid length.
[  811.528777][T32553] macsec0: entered allmulticast mode
[  811.535094][T32553] veth1_macvtap: entered allmulticast mode
[  811.537926][T32553] macsec0: left allmulticast mode
[  811.541351][T32553] veth1_macvtap: left allmulticast mode
[  812.472172][T32593] netlink: 'syz.1.7535': attribute type 1 has an invalid length.
[  812.474932][T32593] __nla_validate_parse: 6 callbacks suppressed
[  812.474940][T32593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7535'.
[  812.604587][T32616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7541'.
[  812.775198][T32630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7545'.
[  812.840601][T32633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7545'.
[  812.844205][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7545'.
[  813.339212][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7549'.
[  813.343006][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7549'.
[  813.368196][T32648] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7550'.
[  813.658039][T32665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7555'.
[  813.673648][T32665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7555'.
[  813.679318][T32665] netlink: 'syz.0.7555': attribute type 2 has an invalid length.
[  813.682033][T32665] netlink: 'syz.0.7555': attribute type 2 has an invalid length.
[  813.782596][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  813.805669][T32676] dummy0: mtu less than device minimum
[  813.809102][T32676] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  813.815031][T32676] netlink: 'syz.0.7558': attribute type 11 has an invalid length.
[  814.467937][T32690] hsr_slave_0 (unregistering): left promiscuous mode
[  814.652723][T32694] netlink: 'syz.1.7563': attribute type 1 has an invalid length.
[  815.487472][T32730] netlink: 'syz.1.7574': attribute type 12 has an invalid length.
[  815.829065][  T302] ieee802154 phy0 wpan0: encryption failed: -22
[  815.957745][  T310] openvswitch: netlink: IPv4 tun info is not correct
[  817.146072][  T349] netlink: 'syz.1.7601': attribute type 4 has an invalid length.
[  817.152516][  T350] xt_hashlimit: size too large, truncated to 1048576
[  817.604510][  T384] __nla_validate_parse: 10 callbacks suppressed
[  817.604523][  T384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7609'.
[  817.638587][  T388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7610'.
[  818.845881][  T446] xt_cgroup: path and classid specified
[  819.276387][  T471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7631'.
[  819.297155][  T471] bond20: entered promiscuous mode
[  819.303093][  T471] 8021q: adding VLAN 0 to HW filter on device bond20
[  819.393661][  T477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7633'.
[  820.861130][  T496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'.
[  820.875193][  T496] tun0: tun_chr_ioctl cmd 1074812118
[  820.877716][  T496] tun0: tun_chr_ioctl cmd 1074033169
[  821.290555][  T517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7640'.
[  821.312144][  T517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7640'.
[  821.316055][  T517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7640'.
[  821.325675][  T517] netlink: 'syz.2.7640': attribute type 2 has an invalid length.
[  821.329305][  T517] netlink: 'syz.2.7640': attribute type 2 has an invalid length.
[  821.333136][  T517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7640'.
[  821.503993][  T529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7644'.
[  821.738225][  T562] netlink: 'syz.1.7654': attribute type 2 has an invalid length.
[  821.747182][  T562] netlink: 'syz.1.7654': attribute type 2 has an invalid length.
[  821.912915][  T591] xt_hashlimit: size too large, truncated to 1048576
[  822.085356][  T615] netlink: 'syz.0.7662': attribute type 1 has an invalid length.
[  822.875139][  T624] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  822.877878][  T624] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  822.939527][  T630] xt_hashlimit: size too large, truncated to 1048576
[  822.957158][  T635] xt_hashlimit: size too large, truncated to 1048576
[  823.332063][  T664] netlink: 'syz.2.7680': attribute type 1 has an invalid length.
[  823.334624][  T664] __nla_validate_parse: 9 callbacks suppressed
[  823.334633][  T664] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7680'.
[  824.165334][  T686] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  824.167803][  T686] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  824.543282][  T716] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7694'.
[  824.546383][  T716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7694'.
[  824.552032][  T716] xt_hashlimit: size too large, truncated to 1048576
[  824.603578][  T718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7694'.
[  824.963525][  T740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7701'.
[  824.967526][  T740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7701'.
[  824.998465][  T742] dummy0: mtu less than device minimum
[  825.474171][  T766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7706'.
[  826.085981][  T791] tunl0: Caught tx_queue_len zero misconfig
[  826.679956][  T799] sctp: [Deprecated]: syz.0.7717 (pid 799) Use of int in max_burst socket option.
[  826.679956][  T799] Use struct sctp_assoc_value instead
[  827.962223][  T843] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  827.964844][  T843] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  828.036739][  T853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7734'.
[  828.149728][  T866] 8021q: VLANs not supported on sit0
[  828.204129][  T876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7737'.
[  829.084355][  T889] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  829.086889][  T889] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  829.176535][  T894] xt_hashlimit: size too large, truncated to 1048576
[  829.938965][  T924] netlink: 'syz.0.7751': attribute type 4 has an invalid length.
[  830.409120][  T949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7757'.
[  830.575306][  T961] xt_hashlimit: size too large, truncated to 1048576
[  830.817387][  T974] sctp: [Deprecated]: syz.0.7763 (pid 974) Use of int in max_burst socket option.
[  830.817387][  T974] Use struct sctp_assoc_value instead
[  831.134828][  T991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7767'.
[  831.406495][  T999] netlink: 'syz.1.7770': attribute type 11 has an invalid length.
[  831.409976][  T999] netlink: 'syz.1.7770': attribute type 1 has an invalid length.
[  831.412557][  T999] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7770'.
[  831.584197][ T1013] netlink: set zone limit has 4 unknown bytes
[  831.647805][ T1019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7775'.
[  831.655051][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7775'.
[  831.658146][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7775'.
[  831.813912][ T1026] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7778'.
[  832.165260][ T1043] netlink: 'syz.1.7783': attribute type 1 has an invalid length.
[  832.169023][ T1039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.193299][ T1039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7781'.
[  832.197622][ T1039] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7781'.
[  832.202615][ T1043] team0: entered promiscuous mode
[  832.204591][ T1043] team0: left allmulticast mode
[  832.206774][ T1043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  832.278526][ T1049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7785'.
[  832.503574][ T1081] netlink: 'syz.1.7792': attribute type 1 has an invalid length.
[  832.524052][ T1081] 8021q: adding VLAN 0 to HW filter on device bond22
[  832.538376][ T1081] vlan3: entered allmulticast mode
[  832.540192][ T1081] bond22: entered allmulticast mode
[  832.546285][ T1081] team_slave_1: Caught tx_queue_len zero misconfig
[  832.589363][ T1086] netlink: 'syz.1.7793': attribute type 9 has an invalid length.
[  832.593432][ T1086] netlink: 'syz.1.7793': attribute type 9 has an invalid length.
[  832.635154][ T1094] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  832.902209][ T1120] syzkaller0: entered promiscuous mode
[  832.904110][ T1120] syzkaller0: entered allmulticast mode
[  833.644717][ T1178] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  833.772097][ T1181] netlink: 'syz.2.7816': attribute type 1 has an invalid length.
[  833.928210][ T1185] xt_hashlimit: size too large, truncated to 1048576
[  836.534750][ T1286] __nla_validate_parse: 16 callbacks suppressed
[  836.534761][ T1286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7847'.
[  836.542516][ T1286] netlink: 'syz.2.7847': attribute type 1 has an invalid length.
[  836.613931][ T1287] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7846'.
[  836.653977][ T1293] netlink: 'syz.2.7849': attribute type 1 has an invalid length.
[  836.656477][ T1293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7849'.
[  837.057449][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7850'.
[  837.061330][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7850'.
[  837.109201][ T1299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7851'.
[  837.614429][ T1326] syzkaller1: entered promiscuous mode
[  837.618084][ T1326] syzkaller1: entered allmulticast mode
[  837.780533][ T1331] No such timeout policy "syz1"
[  837.845707][ T1335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7862'.
[  837.927179][ T1340] netlink: 'syz.2.7863': attribute type 1 has an invalid length.
[  837.929802][ T1340] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7863'.
[  838.055996][ T1342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7864'.
[  838.060362][ T1342] netlink: 'syz.1.7864': attribute type 1 has an invalid length.
[  838.273362][ T1352] netlink: 'syz.1.7869': attribute type 89 has an invalid length.
[  839.566422][ T1415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7885'.
[  843.095403][ T1449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  843.218012][ T1470] __nla_validate_parse: 1 callbacks suppressed
[  843.218022][ T1470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7900'.
[  843.224762][ T1470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7900'.
[  843.234204][ T1470] ip6gre2: entered promiscuous mode
[  843.235906][ T1470] ip6gre2: entered allmulticast mode
[  843.256321][ T1470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  843.260312][ T1470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  844.094720][ T1496] netlink: 'syz.2.7907': attribute type 1 has an invalid length.
[  844.114235][ T1496] 8021q: adding VLAN 0 to HW filter on device bond16
[  844.131096][ T1496] bond16: (slave gretap2): making interface the new active one
[  844.135367][ T1496] bond16: (slave gretap2): Enslaving as an active interface with an up link
[  844.263798][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7910'.
[  844.270804][ T1516] netlink: 'syz.1.7911': attribute type 9 has an invalid length.
[  844.296622][ T1519] netlink: 'syz.2.7912': attribute type 3 has an invalid length.
[  844.300804][ T1519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7912'.
[  844.346108][ T1526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7914'.
[  844.358238][ T1527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7914'.
[  844.361550][ T1527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7914'.
[  844.365360][ T1526] netlink: 'syz.2.7914': attribute type 2 has an invalid length.
[  844.367899][ T1526] netlink: 'syz.2.7914': attribute type 2 has an invalid length.
[  844.374289][ T1527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7914'.
[  844.462917][ T1542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7918'.
[  844.484319][ T1542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7918'.
[  844.969339][ T1575] vxcan2: entered allmulticast mode
[  845.285032][ T1597] geneve1: entered promiscuous mode
[  845.610158][ T1620] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  845.618537][ T1620] netlink: 'syz.1.7944': attribute type 1 has an invalid length.
[  845.965084][ T1630] sctp: [Deprecated]: syz.1.7947 (pid 1630) Use of int in max_burst socket option deprecated.
[  845.965084][ T1630] Use struct sctp_assoc_value instead
[  847.097221][ T1670] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  847.683580][ T1680] netlink: 'syz.1.7962': attribute type 3 has an invalid length.
[  847.686196][ T1680] netlink: 'syz.1.7962': attribute type 2 has an invalid length.
[  847.690378][ T1680] netlink: 'syz.1.7962': attribute type 2 has an invalid length.
[  847.943202][ T1711] dvmrp1: entered allmulticast mode
[  847.945892][ T1711] dvmrp1: left allmulticast mode
[  847.947661][ T1711] lo: left allmulticast mode
[  848.776713][ T1737] xt_hashlimit: size too large, truncated to 1048576
[  848.867582][ T1742] __nla_validate_parse: 3 callbacks suppressed
[  848.867594][ T1742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7978'.
[  849.602171][ T1786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7988'.
[  849.690202][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7991'.
[  849.715604][ T1798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  850.042738][ T1830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8001'.
[  850.287101][ T1850] lo: entered allmulticast mode
[  850.289188][ T1850] lo: left allmulticast mode
[  850.616842][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8017'.
[  850.697419][ T1888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.783919][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8022'.
[  850.786872][ T1895] veth1: Caught tx_queue_len zero misconfig
[  850.879576][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8025'.
[  851.176491][ T1914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8030'.
[  851.213625][ T1914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8030'.
[  851.521001][ T1938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8036'.
[  851.536222][ T1938] netlink: 'syz.2.8036': attribute type 2 has an invalid length.
[  851.543157][ T1938] netlink: 'syz.2.8036': attribute type 2 has an invalid length.
[  851.666960][ T1946] xt_hashlimit: size too large, truncated to 1048576
[  851.714342][ T1950] netlink: 'syz.1.8039': attribute type 2 has an invalid length.
[  851.732492][ T1950] netlink: 'syz.1.8039': attribute type 1 has an invalid length.
[  851.741905][ T1950] netlink: 'syz.1.8039': attribute type 2 has an invalid length.
[  852.209150][ T2001] sctp: [Deprecated]: syz.2.8054 (pid 2001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  852.209150][ T2001] Use struct sctp_sack_info instead
[  852.333652][ T2024] netlink: 'syz.2.8061': attribute type 13 has an invalid length.
[  855.317637][ T2036] xt_hashlimit: size too large, truncated to 1048576
[  855.334170][ T2024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  855.404099][ T2040] xt_hashlimit: size too large, truncated to 1048576
[  855.417470][ T2042] __nla_validate_parse: 14 callbacks suppressed
[  855.417509][ T2042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8065'.
[  855.429777][ T2042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8065'.
[  855.444562][ T2044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8064'.
[  855.462187][ T2044] erspan0: entered promiscuous mode
[  855.465334][ T2044] erspan0: left promiscuous mode
[  855.467427][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8067'.
[  855.543999][ T2061] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8066'.
[  855.600681][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8072'.
[  855.606332][ T2067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8072'.
[  855.657901][ T2071] netlink: 'syz.2.8070': attribute type 1 has an invalid length.
[  855.663054][ T2071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8070'.
[  855.872585][ T2092] netlink: 'syz.1.8078': attribute type 1 has an invalid length.
[  855.875399][ T2092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8078'.
[  856.060901][ T2094] syzkaller1: entered promiscuous mode
[  856.063900][ T2094] syzkaller1: entered allmulticast mode
[  856.222449][ T2106] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8083'.
[  856.233152][ T2106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  856.462030][ T2119] xt_hashlimit: size too large, truncated to 1048576
[  856.954404][ T2158] netlink: 'syz.2.8096': attribute type 1 has an invalid length.
[  857.047727][ T2174] dummy0: mtu less than device minimum
[  857.051529][ T2171] syz.2.8100 uses old SIOCAX25GETINFO
[  857.254391][ T2196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  857.493181][ T2226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  857.565840][ T2231] xt_hashlimit: size too large, truncated to 1048576
[  858.324007][ T2248] netlink: 'syz.2.8117': attribute type 3 has an invalid length.
[  858.327329][ T2248] openvswitch: netlink: Flow key attr not present in new flow.
[  858.367869][ T2248] netlink: 'syz.2.8117': attribute type 4 has an invalid length.
[  858.426733][ T2258] lo: entered allmulticast mode
[  858.430564][ T2258] lo: left allmulticast mode
[  859.417385][ T2295] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002
[  859.500209][ T2299] sctp: [Deprecated]: syz.2.8131 (pid 2299) Use of int in max_burst socket option deprecated.
[  859.500209][ T2299] Use struct sctp_assoc_value instead
[  859.914364][ T2314] netlink: 'syz.2.8134': attribute type 27 has an invalid length.
[  860.832827][ T2340] __nla_validate_parse: 12 callbacks suppressed
[  860.832840][ T2340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8143'.
[  860.851776][ T2340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8143'.
[  860.854819][ T2340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8143'.
[  860.859998][ T2340] netlink: 'syz.2.8143': attribute type 2 has an invalid length.
[  860.862704][ T2340] netlink: 'syz.2.8143': attribute type 2 has an invalid length.
[  860.866083][ T2340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8143'.
[  860.954775][ T2351] Cannot find del_set index 4 as target
[  861.110682][ T2362] netlink: 'syz.2.8150': attribute type 1 has an invalid length.
[  861.192885][ T2371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8153'.
[  861.345668][ T2382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8156'.
[  862.140281][ T2430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8161'.
[  862.253209][ T2447] netlink: 'syz.2.8166': attribute type 1 has an invalid length.
[  862.256078][ T2447] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.8166'.
[  862.258197][ T2445] netlink: 'syz.1.8165': attribute type 1 has an invalid length.
[  862.342368][ T2452] netlink: 'syz.1.8169': attribute type 1 has an invalid length.
[  862.345030][ T2452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8169'.
[  863.231256][ T2484] netlink: 'syz.0.8178': attribute type 1 has an invalid length.
[  863.234486][ T2484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8178'.
[  863.728028][ T2541] syzkaller1: tun_chr_ioctl cmd 1074025677
[  863.732192][ T2541] syzkaller1: linktype set to 805
[  864.106864][ T2565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  865.006575][ T2594] 8021q: adding VLAN 0 to HW filter on device bond0
[  865.393007][ T2619] block nbd2: server does not support multiple connections per device.
[  865.399035][ T2619] block nbd2: shutting down sockets
[  865.591539][ T2637] netlink: 'syz.2.8216': attribute type 1 has an invalid length.
[  865.594646][ T2637] netlink: 'syz.2.8216': attribute type 2 has an invalid length.
[  866.023956][ T2651] netlink: 'syz.2.8219': attribute type 58 has an invalid length.
[  866.026604][ T2651] __nla_validate_parse: 45 callbacks suppressed
[  866.026613][ T2651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8219'.
[  866.298547][ T2673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8225'.
[  866.318497][ T2673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8225'.
[  866.322038][ T2673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8225'.
[  866.326943][ T2673] netlink: 'syz.2.8225': attribute type 2 has an invalid length.
[  866.330301][ T2673] netlink: 'syz.2.8225': attribute type 2 has an invalid length.
[  866.333487][ T2673] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8225'.
[  866.499298][ T2710] netlink: 'syz.1.8234': attribute type 1 has an invalid length.
[  866.510254][ T2710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8234'.
[  866.615325][ T2734] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  866.651980][ T2736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8242'.
[  867.681805][ T2794] netlink: 'syz.0.8256': attribute type 1 has an invalid length.
[  867.704279][ T2795] gtp7: entered promiscuous mode
[  867.706092][ T2795] gtp7: entered allmulticast mode
[  867.725694][ T2795] bond18: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  867.729839][ T2795] bond18 (unregistering): Released all slaves
[  867.743184][ T2797] netlink: 'syz.0.8256': attribute type 1 has an invalid length.
[  867.745961][ T2797] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8256'.
[  868.255461][ T2800] sctp: [Deprecated]: syz.1.8257 (pid 2800) Use of int in maxseg socket option.
[  868.255461][ T2800] Use struct sctp_assoc_value instead
[  868.628560][ T2844] netlink: 'syz.2.8265': attribute type 4 has an invalid length.
[  868.632155][ T2845] netlink: 'syz.2.8265': attribute type 4 has an invalid length.
[  868.815276][ T2857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8266'.
[  868.852249][ T2859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8268'.
[  869.711108][ T2880] netlink: zone id is out of range
[  869.713210][ T2880] netlink: zone id is out of range
[  869.714827][ T2880] netlink: zone id is out of range
[  869.716636][ T2880] netlink: zone id is out of range
[  869.718307][ T2880] netlink: zone id is out of range
[  869.722937][ T2880] netlink: zone id is out of range
[  869.742212][ T2881] netlink: 'syz.1.8273': attribute type 1 has an invalid length.
[  869.847578][ T2900] xt_hashlimit: size too large, truncated to 1048576
[  870.003297][ T2919] xt_TPROXY: Can be used only with -p tcp or -p udp
[  870.647328][ T2965] netlink: 'syz.2.8290': attribute type 16 has an invalid length.
[  870.702233][ T2970] netlink: 'syz.2.8292': attribute type 12 has an invalid length.
[  870.771871][ T2976] netlink: 'syz.1.8293': attribute type 1 has an invalid length.
[  870.895933][ T2995] netlink: 'syz.2.8300': attribute type 12 has an invalid length.
[  870.968049][ T3004] netlink: 'syz.0.8303': attribute type 2 has an invalid length.
[  871.282094][ T3016] __nla_validate_parse: 5 callbacks suppressed
[  871.282117][ T3016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8307'.
[  871.595081][ T3035] xt_socket: unknown flags 0x4
[  871.806212][ T3053] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8319'.
[  871.958209][ T3075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8327'.
[  872.176416][ T3099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8332'.
[  872.181923][ T3099] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  872.245661][ T3106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8335'.
[  872.252964][ T3106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8335'.
[  872.342337][ T3109] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  872.346164][ T3109] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  872.403233][ T3114] bond18: (slave gretap3): making interface the new active one
[  872.407330][ T3114] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  872.500260][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0
[  872.503886][ T3109] 8021q: adding VLAN 0 to HW filter on device team0
[  872.508004][ T3109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  872.669935][ T3141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8348'.
[  872.675674][ T3141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8348'.
[  872.682639][ T3143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8349'.
[  872.933680][ T3159] validate_nla: 11 callbacks suppressed
[  872.933694][ T3159] netlink: 'syz.1.8355': attribute type 1 has an invalid length.
[  873.030079][ T3166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8357'.
[  873.087790][ T3174] xt_policy: too many policy elements
[  873.339807][ T3191] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003
[  873.704157][ T3211] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  874.355141][ T3275] netlink: 'syz.0.8386': attribute type 1 has an invalid length.
[  875.172563][ T3314] netlink: 'syz.0.8400': attribute type 1 has an invalid length.
[  875.175332][ T3314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  875.231992][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  878.164949][ T3320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  878.386222][ T3364] __nla_validate_parse: 13 callbacks suppressed
[  878.386234][ T3364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8408'.
[  878.406675][ T3354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8411'.
[  878.695296][ T3394] dvmrp1: tun_chr_ioctl cmd 2147767507
[  878.701687][ T3394] netlink: 'syz.2.8418': attribute type 1 has an invalid length.
[  878.705000][ T3394] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8418'.
[  879.210116][ T3401] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8421'.
[  879.327347][ T3411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8424'.
[  879.584443][ T3444] netlink: 'syz.0.8427': attribute type 1 has an invalid length.
[  879.588489][ T3444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8427'.
[  880.227419][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8433'.
[  880.231616][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8433'.
[  880.233648][ T3513] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8433'.
[  880.239652][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8433'.
[  880.287405][ T3517] xt_hashlimit: size too large, truncated to 1048576
[  880.828553][ T3548] vlan0: invalid flags given to default FDB implementation
[  881.557195][ T3587] nbd: must specify a device to reconfigure
[  881.743834][ T3600] syzkaller0: entered promiscuous mode
[  881.745791][ T3600] syzkaller0: entered allmulticast mode
[  882.232522][ T3625] netlink: 'syz.2.8467': attribute type 1 has an invalid length.
[  882.976531][ T3638] syzkaller1: entered promiscuous mode
[  882.978863][ T3638] syzkaller1: entered allmulticast mode
[  883.020426][ T3638] netlink: 'syz.2.8471': attribute type 11 has an invalid length.
[  883.158547][ T3650] netlink: 'syz.2.8473': attribute type 61 has an invalid length.
[  883.296689][ T3659] netlink: 'syz.2.8476': attribute type 2 has an invalid length.
[  883.301453][ T3659] netlink: 'syz.2.8476': attribute type 2 has an invalid length.
[  883.390339][ T3666] dummy0: mtu less than device minimum
[  883.523059][ T3675] xt_hashlimit: size too large, truncated to 1048576
[  883.603576][ T3678] xt_hashlimit: size too large, truncated to 1048576
[  883.684765][ T3685] netlink: 'syz.1.8483': attribute type 10 has an invalid length.
[  883.688385][ T3685] netlink: 'syz.1.8483': attribute type 10 has an invalid length.
[  883.708584][ T3688] netlink: 'syz.0.8484': attribute type 30 has an invalid length.
[  883.711457][ T3688] __nla_validate_parse: 25 callbacks suppressed
[  883.711465][ T3688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8484'.
[  883.746707][ T3692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8485'.
[  884.406970][ T3699] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8486'.
[  884.463996][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  884.526550][ T3704] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  884.687707][ T3713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8488'.
[  884.693344][ T3713] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8488'.
[  884.697743][ T3713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8488'.
[  884.702563][ T3713] 8021q: VLANs not supported on ip6gre0
[  887.350658][ T3699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  887.356208][ T3710] netlink: 'syz.0.8489': attribute type 3 has an invalid length.
[  887.377938][ T3710] netlink: 'syz.0.8489': attribute type 1 has an invalid length.
[  887.386719][ T3710] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8489'.
[  887.394065][ T3710] NCSI netlink: No device for ifindex 808464432
[  888.301698][ T3747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8501'.
[  888.323933][ T3747] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8501'.
[  888.339949][ T3754] pim6reg1: entered promiscuous mode
[  888.341805][ T3754] pim6reg1: entered allmulticast mode
[  888.392916][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8505'.
[  888.530066][ T3769] netlink: 'syz.1.8508': attribute type 2 has an invalid length.
[  888.533309][ T3769] netlink: 'syz.1.8508': attribute type 2 has an invalid length.
[  889.415526][ T3815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  889.420555][ T3824] __nla_validate_parse: 7 callbacks suppressed
[  889.420571][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8521'.
[  889.468113][ T3829] xt_hashlimit: size too large, truncated to 1048576
[  889.477971][ T3833] bpq0: entered allmulticast mode
[  889.602189][ T3841] netlink: 'syz.1.8525': attribute type 72 has an invalid length.
[  889.604764][ T3841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8525'.
[  889.830112][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8532'.
[  889.834193][ T3863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8532'.
[  890.132267][ T3895] netlink: 'syz.0.8541': attribute type 10 has an invalid length.
[  890.136881][ T3895] netlink: 'syz.0.8541': attribute type 10 has an invalid length.
[  890.141450][ T3895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8541'.
[  890.147924][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8542'.
[  890.152326][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8542'.
[  891.465463][ T3949] netlink: 'syz.1.8557': attribute type 1 has an invalid length.
[  891.615661][ T3959] x_tables: ip_tables: ah match: only valid for protocol 51
[  892.154180][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8563'.
[  892.160820][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8563'.
[  892.180615][ T3967] netlink: 'syz.2.8563': attribute type 1 has an invalid length.
[  892.346964][ T3981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8569'.
[  892.390562][ T3957] delete_channel: no stack
[  892.510029][ T3999] xt_hashlimit: size too large, truncated to 1048576
[  892.701715][ T4012] bond23: entered promiscuous mode
[  892.704276][ T4012] 8021q: adding VLAN 0 to HW filter on device bond23
[  892.794901][ T4018] netlink: 'syz.1.8578': attribute type 1 has an invalid length.
[  893.298054][ T4036] netlink: 'syz.0.8585': attribute type 9 has an invalid length.
[  893.396697][ T4041] dummy0: mtu less than device minimum
[  894.405520][ T4079] IPv6: Can't replace route, no match found
[  894.673185][ T4083] syzkaller0: entered promiscuous mode
[  894.675076][ T4083] syzkaller0: entered allmulticast mode
[  895.214755][ T4111] __nla_validate_parse: 5 callbacks suppressed
[  895.214767][ T4111] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.8606'.
[  895.230718][ T4111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8606'.
[  895.235700][ T4114] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8607'.
[  895.278021][ T4117] netlink: 'syz.0.8608': attribute type 1 has an invalid length.
[  895.286865][ T4117] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8608'.
[  895.294428][ T4117] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8608'.
[  895.314315][ T4121] SET target dimension over the limit!
[  895.424286][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8611'.
[  895.455483][ T4125] 8021q: adding VLAN 0 to HW filter on device bond0
[  895.462144][ T4125] 8021q: adding VLAN 0 to HW filter on device team0
[  895.469371][ T4125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  895.585064][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8614'.
[  895.586813][ T4143] netlink: 'syz.1.8616': attribute type 10 has an invalid length.
[  895.590265][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8614'.
[  895.590727][ T4143] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8616'.
[  895.593735][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8614'.
[  895.596767][ T4143] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  895.603458][ T4143] .70: entered promiscuous mode
[  895.605874][ T4143] bridge0: port 1(.70) entered blocking state
[  895.608103][ T4143] bridge0: port 1(.70) entered disabled state
[  895.634619][ T4150] tipc: Enabled bearer <ib:gre0>, priority 10
[  896.064900][ T4210] tipc: Resetting bearer <ib:gre0>
[  897.440619][ T4274] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  897.614246][ T4286] netlink: 'syz.0.8658': attribute type 12 has an invalid length.
[  897.634486][ T4287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  898.248383][ T4299] syzkaller0: entered promiscuous mode
[  898.251145][ T4299] syzkaller0: entered allmulticast mode
[  898.365235][ T4301] netlink: 'syz.1.8662': attribute type 1 has an invalid length.
[  899.051332][ T4328] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  899.660076][ T4357] netlink: 'syz.2.8677': attribute type 2 has an invalid length.
[  899.662677][ T4357] netlink: 'syz.2.8677': attribute type 2 has an invalid length.
[  900.410400][ T4374] __nla_validate_parse: 12 callbacks suppressed
[  900.410419][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8683'.
[  900.420399][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8682'.
[  900.423831][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8682'.
[  900.905506][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8689'.
[  900.933664][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8689'.
[  900.937011][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8689'.
[  900.962892][ T4392] netlink: 'syz.1.8689': attribute type 2 has an invalid length.
[  900.965730][ T4392] netlink: 'syz.1.8689': attribute type 2 has an invalid length.
[  900.970032][ T4393] netlink: 'syz.1.8689': attribute type 2 has an invalid length.
[  900.972671][ T4393] netlink: 'syz.1.8689': attribute type 2 has an invalid length.
[  900.979101][ T4392] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8689'.
[  900.982233][ T4393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8689'.
[  901.176970][ T4413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  901.268129][ T4420] netlink: 'syz.2.8698': attribute type 1 has an invalid length.
[  901.271221][ T4420] netlink: 'syz.2.8698': attribute type 1 has an invalid length.
[  901.387332][ T4432] netlink: 'syz.0.8700': attribute type 1 has an invalid length.
[  901.400786][ T4432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8700'.
[  901.497783][ T4443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8703'.
[  901.885119][ T4492] wg1 speed is unknown, defaulting to 1000
[  901.890410][ T4492] wg1 speed is unknown, defaulting to 1000
[  901.892817][ T4492] wg1 speed is unknown, defaulting to 1000
[  902.132847][ T6264] wg1 speed is unknown, defaulting to 1000
[  902.140516][ T4492] infiniband syz0: set down
[  902.149714][ T4492] infiniband syz0: added wg1
[  902.182673][ T4492] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  902.193560][ T4492] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  902.204954][ T4492] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  902.222664][ T4492] RDS/IB: syz0: added
[  902.227614][ T4492] smc: adding ib device syz0 with port count 1
[  902.230111][ T4492] smc:    ib device syz0 port 1 has no pnetid
[  902.236625][ T6271] wg1 speed is unknown, defaulting to 1000
[  902.245817][ T4492] wg1 speed is unknown, defaulting to 1000
[  902.401014][ T4492] wg1 speed is unknown, defaulting to 1000
[  902.583715][ T4492] wg1 speed is unknown, defaulting to 1000
[  903.242251][   T12] tipc: Subscription rejected, illegal request
[  904.169261][ T4579] xfrm0: Caught tx_queue_len zero misconfig
[  904.261186][ T4587] validate_nla: 4 callbacks suppressed
[  904.261201][ T4587] netlink: 'syz.1.8742': attribute type 1 has an invalid length.
[  904.357630][ T4600] xt_hashlimit: size too large, truncated to 1048576
[  904.647947][ T4618] netlink: 'syz.2.8750': attribute type 2 has an invalid length.
[  904.650944][ T4618] netlink: 'syz.2.8750': attribute type 1 has an invalid length.
[  904.653871][ T4618] netlink: 'syz.2.8750': attribute type 7 has an invalid length.
[  904.731684][ T4627] netlink: 'syz.2.8753': attribute type 6 has an invalid length.
[  905.135225][ T4633] wg1 speed is unknown, defaulting to 1000
[  905.615507][ T4645] __nla_validate_parse: 31 callbacks suppressed
[  905.615520][ T4645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8759'.
[  905.624646][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8759'.
[  905.628035][ T4645] openvswitch: netlink: Flow actions attr not present in new flow.
[  905.673923][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8761'.
[  905.726935][ T4658] xt_hashlimit: size too large, truncated to 1048576
[  905.762257][ T4659] wg1 speed is unknown, defaulting to 1000
[  905.834959][ T4667] dummy0: mtu less than device minimum
[  906.469463][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8770'.
[  906.551554][ T4696] x_tables: duplicate underflow at hook 2
[  906.587041][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'.
[  906.587063][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'.
[  906.674632][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'.
[  906.679173][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'.
[  906.861604][ T4726] Cannot find del_set index 1 as target
[  907.874906][ T4757] netlink: 'syz.2.8788': attribute type 1 has an invalid length.
[  907.877569][ T4757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8788'.
[  907.961669][ T4761] sctp: [Deprecated]: syz.2.8790 (pid 4761) Use of struct sctp_assoc_value in delayed_ack socket option.
[  907.961669][ T4761] Use struct sctp_sack_info instead
[  908.163489][ T4792] netlink: 'syz.2.8796': attribute type 1 has an invalid length.
[  908.169770][ T4792] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8796'.
[  908.222454][ T4800] netlink: 'syz.0.8799': attribute type 1 has an invalid length.
[  908.239953][ T4800] 8021q: adding VLAN 0 to HW filter on device bond14
[  908.252339][ T4800] bond14: (slave geneve4): making interface the new active one
[  908.256278][ T4800] bond14: (slave geneve4): Enslaving as an active interface with an up link
[  908.260752][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  908.265991][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  908.274422][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  908.280437][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.905203][ T4806] xt_hashlimit: size too large, truncated to 1048576
[  908.908048][ T4806] xt_hashlimit: invalid interval
[  909.193030][ T4827] team1: entered promiscuous mode
[  909.195345][ T4827] team1: entered allmulticast mode
[  909.198050][ T4827] 8021q: adding VLAN 0 to HW filter on device team1
[  912.242008][ T4843] __nla_validate_parse: 4 callbacks suppressed
[  912.242019][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8813'.
[  912.264201][ T4843] netlink: 'syz.2.8813': attribute type 2 has an invalid length.
[  912.267026][ T4843] netlink: 'syz.2.8813': attribute type 2 has an invalid length.
[  912.270461][ T4843] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8813'.
[  912.320913][ T4859] netlink: 'syz.2.8817': attribute type 5 has an invalid length.
[  912.326648][ T4859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8817'.
[  912.340025][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8817'.
[  912.350162][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8817'.
[  912.353161][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8817'.
[  912.433108][ T4868] xt_l2tp: missing protocol rule (udp|l2tpip)
[  912.607969][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8828'.
[  912.803270][ T4920] netlink: 'syz.2.8836': attribute type 2 has an invalid length.
[  912.969118][ T4930] block nbd3: server does not support multiple connections per device.
[  912.972484][ T4930] block nbd3: shutting down sockets
[  912.991405][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8839'.
[  912.998098][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8839'.
[  913.181579][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8846'.
[  914.036864][ T5003] IPVS: length: 35 != 24
[  914.056559][ T5003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.128433][ T5003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.192927][ T5003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.201888][ T5014] netlink: 'syz.2.8862': attribute type 1 has an invalid length.
[  914.215499][ T5014] gretap4: entered allmulticast mode
[  914.247863][ T5003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.363698][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.382774][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.397912][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.408336][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.706767][ T5059] netlink: 'syz.1.8874': attribute type 15 has an invalid length.
[  914.738041][ T5061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  915.938906][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  916.227488][ T5084] netlink: 'syz.2.8883': attribute type 1 has an invalid length.
[  916.230783][ T5084] netlink: 'syz.2.8883': attribute type 2 has an invalid length.
[  916.233843][ T5084] netlink: 'syz.2.8883': attribute type 1 has an invalid length.
[  916.236729][ T5084] netlink: 'syz.2.8883': attribute type 3 has an invalid length.
[  917.084522][ T5161] wg1 speed is unknown, defaulting to 1000
[  917.482441][ T5173] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.522117][ T5173] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.562587][ T5173] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.604600][ T5173] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.663348][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.672005][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.679983][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.687940][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.760471][ T5183] ip6tnl0: Caught tx_queue_len zero misconfig
[  917.808162][ T5188] __nla_validate_parse: 8 callbacks suppressed
[  917.808180][ T5188] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8910'.
[  917.825557][ T5188] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8910'.
[  917.930230][ T5200] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8913'.
[  918.008345][ T5207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8915'.
[  918.061181][ T5209] netlink: 'syz.1.8914': attribute type 1 has an invalid length.
[  918.064928][ T5209] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8914'.
[  918.065069][ T5211] netlink: 'syz.2.8916': attribute type 89 has an invalid length.
[  918.092751][ T5211] geneve1: left promiscuous mode
[  918.094525][ T5211] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  918.097081][ T5211] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  918.101576][ T5211] gtp0: left promiscuous mode
[  918.103196][ T5211] gtp0: left allmulticast mode
[  918.105629][ T5211] bond9: left promiscuous mode
[  918.107561][ T5211] bond9: left allmulticast mode
[  918.110188][ T5211] bond10: left promiscuous mode
[  918.112949][ T5211] vlan6: left promiscuous mode
[  918.114602][ T5211] erspan1: left promiscuous mode
[  918.116311][ T5211] erspan1: left allmulticast mode
[  918.118476][ T5211] bond13: left promiscuous mode
[  918.120918][ T5211] bond14: left promiscuous mode
[  918.122560][ T5211] hsr0: left promiscuous mode
[  918.124297][ T5211] geneve4: left promiscuous mode
[  918.126056][ T5211] geneve4: left allmulticast mode
[  918.127712][ T5211] ip6tnl3: left promiscuous mode
[  918.129884][ T5211] bond15: left promiscuous mode
[  918.132545][ T5211] gtp7: left promiscuous mode
[  918.134161][ T5211] gtp7: left allmulticast mode
[  918.136494][ T5211] team1: left promiscuous mode
[  918.138110][ T5211] team1: left allmulticast mode
[  918.148608][ T5211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8916'.
[  918.581832][ T5235] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8921'.
[  918.728826][ T5250] block nbd3: server does not support multiple connections per device.
[  918.736375][ T5250] block nbd3: shutting down sockets
[  918.772564][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8926'.
[  918.869627][ T5273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8930'.
[  918.892688][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8930'.
[  918.900999][ T5273] netlink: 'syz.1.8930': attribute type 2 has an invalid length.
[  918.903548][ T5273] netlink: 'syz.1.8930': attribute type 2 has an invalid length.
[  919.342518][ T5313] netlink: 'syz.1.8944': attribute type 21 has an invalid length.
[  919.357677][ T5313] syzkaller0: entered promiscuous mode
[  919.359886][ T5313] syzkaller0: entered allmulticast mode
[  919.603635][ T5337] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  919.608734][ T5337] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  919.744091][ T5364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  919.747237][ T5364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  920.496268][ T5387] sctp: [Deprecated]: syz.1.8962 (pid 5387) Use of int in max_burst socket option.
[  920.496268][ T5387] Use struct sctp_assoc_value instead
[  920.795273][ T5399] wg1 speed is unknown, defaulting to 1000
[  920.839726][ T5401] xt_hashlimit: overflow, rate too high: 0
[  921.467371][ T5407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  924.448438][ T5411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  924.545151][ T5445] __nla_validate_parse: 22 callbacks suppressed
[  924.545167][ T5445] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8976'.
[  924.567172][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8977'.
[  924.637611][ T5448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8977'.
[  924.720279][ T5459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8980'.
[  924.747394][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8980'.
[  924.754460][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8980'.
[  924.764012][ T5459] netlink: 'syz.0.8980': attribute type 2 has an invalid length.
[  924.767243][ T5459] netlink: 'syz.0.8980': attribute type 2 has an invalid length.
[  924.775236][ T5459] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8980'.
[  924.835408][ T5464] xt_hashlimit: size too large, truncated to 1048576
[  924.893999][ T5469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8982'.
[  924.899772][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8982'.
[  924.917644][ T5472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8985'.
[  924.928802][ T5472] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  925.937239][ T5519] xt_hashlimit: size too large, truncated to 1048576
[  926.144828][ T5528] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  926.371273][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  926.374736][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  926.391769][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  926.395053][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  926.594133][ T5566] sit4: entered promiscuous mode
[  926.597319][ T5569] IPVS: length: 35 != 412310568984
[  927.861520][ T5619] xt_hashlimit: size too large, truncated to 1048576
[  928.113444][ T5631] 
[  928.114297][ T5631] ======================================================
[  928.116419][ T5631] WARNING: possible circular locking dependency detected
[  928.118583][ T5631] syzkaller #0 Not tainted
[  928.120105][ T5631] ------------------------------------------------------
[  928.122270][ T5631] syz.1.9032/5631 is trying to acquire lock:
[  928.124306][ T5631] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  928.127641][ T5631] 
[  928.127641][ T5631] but task is already holding lock:
[  928.130010][ T5631] ffffffff8f0ab808 ((crypto_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  928.133381][ T5631] 
[  928.133381][ T5631] which lock already depends on the new lock.
[  928.133381][ T5631] 
[  928.136693][ T5631] 
[  928.136693][ T5631] the existing dependency chain (in reverse order) is:
[  928.139613][ T5631] 
[  928.139613][ T5631] -> #8 ((crypto_chain).rwsem){++++}-{4:4}:
[  928.142211][ T5631]        down_read+0x47/0x2e0
[  928.143747][ T5631]        blocking_notifier_call_chain+0x54/0x90
[  928.145819][ T5631]        __crypto_register_alg+0x32b/0x3c0
[  928.147700][ T5631]        crypto_register_alg+0x447/0x810
[  928.149449][ T5631]        do_one_initcall+0x250/0x870
[  928.151130][ T5631]        do_initcall_level+0x104/0x190
[  928.152805][ T5631]        do_initcalls+0x59/0xa0
[  928.154617][ T5631]        kernel_init_freeable+0x2a6/0x3e0
[  928.156596][ T5631]        kernel_init+0x1d/0x1d0
[  928.158408][ T5631]        ret_from_fork+0x514/0xb70
[  928.160243][ T5631]        ret_from_fork_asm+0x1a/0x30
[  928.161913][ T5631] 
[  928.161913][ T5631] -> #7 (crypto_alg_sem){++++}-{4:4}:
[  928.164321][ T5631]        down_read+0x47/0x2e0
[  928.166105][ T5631]        crypto_alg_lookup+0x37/0x450
[  928.167861][ T5631]        crypto_alg_mod_lookup+0x56/0x5f0
[  928.169620][ T5631]        crypto_alloc_tfm_node+0x13e/0x3f0
[  928.171437][ T5631]        tls_set_sw_offload+0xa33/0x1780
[  928.173490][ T5631]        tls_setsockopt+0xf3e/0x15c0
[  928.175539][ T5631]        do_sock_setsockopt+0x17c/0x1b0
[  928.177655][ T5631]        __x64_sys_setsockopt+0x13d/0x1b0
[  928.179799][ T5631]        do_syscall_64+0x15f/0xf80
[  928.181382][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.183351][ T5631] 
[  928.183351][ T5631] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  928.185862][ T5631]        lock_sock_nested+0x41/0x100
[  928.187529][ T5631]        inet_shutdown+0x6a/0x390
[  928.189072][ T5631]        nbd_mark_nsock_dead+0x2e9/0x560
[  928.190793][ T5631]        sock_shutdown+0x15e/0x260
[  928.192372][ T5631]        nbd_clear_sock+0x24/0x170
[  928.193934][ T5631]        nbd_config_put+0x2dd/0x580
[  928.195465][ T5631]        nbd_genl_connect+0x19d5/0x1cf0
[  928.197153][ T5631]        genl_family_rcv_msg_doit+0x22a/0x330
[  928.199011][ T5631]        genl_rcv_msg+0x61c/0x7a0
[  928.200541][ T5631]        netlink_rcv_skb+0x232/0x4b0
[  928.202201][ T5631]        genl_rcv+0x28/0x40
[  928.203586][ T5631]        netlink_unicast+0x75c/0x8e0
[  928.205224][ T5631]        netlink_sendmsg+0x813/0xb40
[  928.206869][ T5631]        ____sys_sendmsg+0x972/0x9f0
[  928.208504][ T5631]        ___sys_sendmsg+0x2a5/0x360
[  928.210166][ T5631]        __x64_sys_sendmsg+0x1bd/0x2a0
[  928.211844][ T5631]        do_syscall_64+0x15f/0xf80
[  928.213533][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.215887][ T5631] 
[  928.215887][ T5631] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  928.218707][ T5631]        __mutex_lock+0x1a3/0x1550
[  928.220464][ T5631]        nbd_queue_rq+0x37b/0x1100
[  928.222374][ T5631]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  928.224697][ T5631]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  928.227239][ T5631]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  928.229714][ T5631]        blk_mq_run_hw_queue+0x348/0x4f0
[  928.231903][ T5631]        blk_mq_dispatch_list+0xd16/0xe10
[  928.234001][ T5631]        blk_mq_flush_plug_list+0x48d/0x570
[  928.236221][ T5631]        __blk_flush_plug+0x3ed/0x4d0
[  928.238231][ T5631]        __submit_bio+0x28d/0x580
[  928.240167][ T5631]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  928.242477][ T5631]        block_read_full_folio+0x599/0x830
[  928.244645][ T5631]        filemap_read_folio+0x137/0x3b0
[  928.246701][ T5631]        do_read_cache_folio+0x358/0x590
[  928.248756][ T5631]        read_part_sector+0xb6/0x2b0
[  928.250634][ T5631]        adfspart_check_ICS+0xb1/0x960
[  928.252601][ T5631]        bdev_disk_changed+0x817/0x1770
[  928.254624][ T5631]        blkdev_get_whole+0x380/0x510
[  928.256638][ T5631]        bdev_open+0x31e/0xd30
[  928.258443][ T5631]        blkdev_open+0x470/0x610
[  928.260341][ T5631]        do_dentry_open+0x785/0x14e0
[  928.262362][ T5631]        vfs_open+0x3b/0x340
[  928.264151][ T5631]        path_openat+0x2e08/0x3860
[  928.266058][ T5631]        do_file_open+0x23e/0x4a0
[  928.267927][ T5631]        do_sys_openat2+0x113/0x200
[  928.269832][ T5631]        __x64_sys_openat+0x138/0x170
[  928.271808][ T5631]        do_syscall_64+0x15f/0xf80
[  928.273697][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.275887][ T5631] 
[  928.275887][ T5631] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  928.278256][ T5631]        __mutex_lock+0x1a3/0x1550
[  928.280103][ T5631]        nbd_queue_rq+0xc6/0x1100
[  928.281676][ T5631]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  928.283590][ T5631]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  928.285704][ T5631]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  928.287803][ T5631]        blk_mq_run_hw_queue+0x348/0x4f0
[  928.289563][ T5631]        blk_mq_dispatch_list+0xd16/0xe10
[  928.291351][ T5631]        blk_mq_flush_plug_list+0x48d/0x570
[  928.293220][ T5631]        __blk_flush_plug+0x3ed/0x4d0
[  928.294899][ T5631]        __submit_bio+0x28d/0x580
[  928.296550][ T5631]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  928.298907][ T5631]        block_read_full_folio+0x599/0x830
[  928.300886][ T5631]        filemap_read_folio+0x137/0x3b0
[  928.303115][ T5631]        do_read_cache_folio+0x358/0x590
[  928.305326][ T5631]        read_part_sector+0xb6/0x2b0
[  928.307060][ T5631]        adfspart_check_ICS+0xb1/0x960
[  928.308778][ T5631]        bdev_disk_changed+0x817/0x1770
[  928.310554][ T5631]        blkdev_get_whole+0x380/0x510
[  928.312268][ T5631]        bdev_open+0x31e/0xd30
[  928.313831][ T5631]        blkdev_open+0x470/0x610
[  928.315517][ T5631]        do_dentry_open+0x785/0x14e0
[  928.317200][ T5631]        vfs_open+0x3b/0x340
[  928.318709][ T5631]        path_openat+0x2e08/0x3860
[  928.320318][ T5631]        do_file_open+0x23e/0x4a0
[  928.321999][ T5631]        do_sys_openat2+0x113/0x200
[  928.323758][ T5631]        __x64_sys_openat+0x138/0x170
[  928.325481][ T5631]        do_syscall_64+0x15f/0xf80
[  928.327474][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.329561][ T5631] 
[  928.329561][ T5631] -> #3 (set->srcu){.+.+}-{0:0}:
[  928.331904][ T5631]        __synchronize_srcu+0xca/0x300
[  928.333642][ T5631]        elevator_switch+0x1e8/0x7a0
[  928.335293][ T5631]        elevator_change+0x2cc/0x450
[  928.336964][ T5631]        elevator_set_default+0x36c/0x430
[  928.338777][ T5631]        blk_register_queue+0x3e9/0x4e0
[  928.340578][ T5631]        __add_disk+0x677/0xd50
[  928.342232][ T5631]        add_disk_fwnode+0xfb/0x480
[  928.343941][ T5631]        nbd_dev_add+0x72c/0xb50
[  928.345522][ T5631]        nbd_init+0x168/0x1f0
[  928.347075][ T5631]        do_one_initcall+0x250/0x870
[  928.348754][ T5631]        do_initcall_level+0x104/0x190
[  928.350428][ T5631]        do_initcalls+0x59/0xa0
[  928.352003][ T5631]        kernel_init_freeable+0x2a6/0x3e0
[  928.353914][ T5631]        kernel_init+0x1d/0x1d0
[  928.355485][ T5631]        ret_from_fork+0x514/0xb70
[  928.357134][ T5631]        ret_from_fork_asm+0x1a/0x30
[  928.358828][ T5631] 
[  928.358828][ T5631] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  928.361421][ T5631]        __mutex_lock+0x1a3/0x1550
[  928.363233][ T5631]        elevator_change+0x1b3/0x450
[  928.364929][ T5631]        elevator_set_none+0xb5/0x140
[  928.366613][ T5631]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  928.368896][ T5631]        nbd_start_device+0x17f/0xb10
[  928.370998][ T5631]        nbd_genl_connect+0x165b/0x1cf0
[  928.373220][ T5631]        genl_family_rcv_msg_doit+0x22a/0x330
[  928.375646][ T5631]        genl_rcv_msg+0x61c/0x7a0
[  928.377890][ T5631]        netlink_rcv_skb+0x232/0x4b0
[  928.380110][ T5631]        genl_rcv+0x28/0x40
[  928.382209][ T5631]        netlink_unicast+0x75c/0x8e0
[  928.384358][ T5631]        netlink_sendmsg+0x813/0xb40
[  928.386516][ T5631]        ____sys_sendmsg+0x972/0x9f0
[  928.388203][ T5631]        ___sys_sendmsg+0x2a5/0x360
[  928.389822][ T5631]        __x64_sys_sendmsg+0x1bd/0x2a0
[  928.391537][ T5631]        do_syscall_64+0x15f/0xf80
[  928.393052][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.395025][ T5631] 
[  928.395025][ T5631] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  928.398182][ T5631]        blk_alloc_queue+0x546/0x680
[  928.399876][ T5631]        __blk_mq_alloc_disk+0x197/0x390
[  928.401671][ T5631]        nbd_dev_add+0x499/0xb50
[  928.403321][ T5631]        nbd_init+0x168/0x1f0
[  928.404908][ T5631]        do_one_initcall+0x250/0x870
[  928.406689][ T5631]        do_initcall_level+0x104/0x190
[  928.408539][ T5631]        do_initcalls+0x59/0xa0
[  928.410091][ T5631]        kernel_init_freeable+0x2a6/0x3e0
[  928.411925][ T5631]        kernel_init+0x1d/0x1d0
[  928.413510][ T5631]        ret_from_fork+0x514/0xb70
[  928.415178][ T5631]        ret_from_fork_asm+0x1a/0x30
[  928.416871][ T5631] 
[  928.416871][ T5631] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  928.419273][ T5631]        __lock_acquire+0x15a5/0x2cf0
[  928.421050][ T5631]        lock_acquire+0x106/0x350
[  928.422676][ T5631]        fs_reclaim_acquire+0x71/0x100
[  928.424433][ T5631]        __kmalloc_cache_noprof+0x40/0x660
[  928.426503][ T5631]        cryptomgr_notify+0x85/0x930
[  928.428210][ T5631]        notifier_call_chain+0x1ad/0x3d0
[  928.430018][ T5631]        blocking_notifier_call_chain+0x6a/0x90
[  928.432046][ T5631]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  928.433849][ T5631]        crypto_has_alg+0x26/0x190
[  928.435555][ T5631]        tipc_aead_key_validate+0x2b/0x210
[  928.437446][ T5631]        tipc_nl_node_set_key+0x5c0/0x9d0
[  928.439390][ T5631]        genl_family_rcv_msg_doit+0x22a/0x330
[  928.441481][ T5631]        genl_rcv_msg+0x61c/0x7a0
[  928.443203][ T5631]        netlink_rcv_skb+0x232/0x4b0
[  928.445237][ T5631]        genl_rcv+0x28/0x40
[  928.447043][ T5631]        netlink_unicast+0x75c/0x8e0
[  928.448857][ T5631]        netlink_sendmsg+0x813/0xb40
[  928.450972][ T5631]        ____sys_sendmsg+0x972/0x9f0
[  928.453143][ T5631]        ___sys_sendmsg+0x2a5/0x360
[  928.454809][ T5631]        __x64_sys_sendmsg+0x1bd/0x2a0
[  928.456536][ T5631]        do_syscall_64+0x15f/0xf80
[  928.458482][ T5631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.460475][ T5631] 
[  928.460475][ T5631] other info that might help us debug this:
[  928.460475][ T5631] 
[  928.463634][ T5631] Chain exists of:
[  928.463634][ T5631]   fs_reclaim --> crypto_alg_sem --> (crypto_chain).rwsem
[  928.463634][ T5631] 
[  928.467585][ T5631]  Possible unsafe locking scenario:
[  928.467585][ T5631] 
[  928.469816][ T5631]        CPU0                    CPU1
[  928.471471][ T5631]        ----                    ----
[  928.473147][ T5631]   rlock((crypto_chain).rwsem);
[  928.474698][ T5631]                                lock(crypto_alg_sem);
[  928.476831][ T5631]                                lock((crypto_chain).rwsem);
[  928.479182][ T5631]   lock(fs_reclaim);
[  928.480446][ T5631] 
[  928.480446][ T5631]  *** DEADLOCK ***
[  928.480446][ T5631] 
[  928.482986][ T5631] 4 locks held by syz.1.9032/5631:
[  928.484572][ T5631]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  928.487081][ T5631]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  928.489867][ T5631]  #2: ffffffff8fde2fc0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_node_set_key+0x8e/0x9d0
[  928.492965][ T5631]  #3: ffffffff8f0ab808 ((crypto_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  928.496575][ T5631] 
[  928.496575][ T5631] stack backtrace:
[  928.498419][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz.1.9032 Not tainted syzkaller #0 PREEMPT(full) 
[  928.498431][ T5631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  928.498436][ T5631] Call Trace:
[  928.498441][ T5631]  <TASK>
[  928.498447][ T5631]  dump_stack_lvl+0xe8/0x150
[  928.498464][ T5631]  print_circular_bug+0x2e1/0x300
[  928.498476][ T5631]  check_noncircular+0x12e/0x150
[  928.498484][ T5631]  __lock_acquire+0x15a5/0x2cf0
[  928.498497][ T5631]  ? __pfx_stack_trace_save+0x10/0x10
[  928.498508][ T5631]  ? check_path+0x21/0x40
[  928.498515][ T5631]  ? check_noncircular+0xda/0x150
[  928.498523][ T5631]  ? __kmalloc_cache_noprof+0x40/0x660
[  928.498532][ T5631]  lock_acquire+0x106/0x350
[  928.498542][ T5631]  ? __kmalloc_cache_noprof+0x40/0x660
[  928.498550][ T5631]  ? irqentry_exit+0x218/0x730
[  928.498560][ T5631]  fs_reclaim_acquire+0x71/0x100
[  928.498569][ T5631]  ? __kmalloc_cache_noprof+0x40/0x660
[  928.498577][ T5631]  __kmalloc_cache_noprof+0x40/0x660
[  928.498585][ T5631]  ? cryptomgr_notify+0x85/0x930
[  928.498598][ T5631]  cryptomgr_notify+0x85/0x930
[  928.498610][ T5631]  notifier_call_chain+0x1ad/0x3d0
[  928.498631][ T5631]  blocking_notifier_call_chain+0x6a/0x90
[  928.498639][ T5631]  crypto_alg_mod_lookup+0x3b1/0x5f0
[  928.498651][ T5631]  crypto_has_alg+0x26/0x190
[  928.498661][ T5631]  tipc_aead_key_validate+0x2b/0x210
[  928.498673][ T5631]  tipc_nl_node_set_key+0x5c0/0x9d0
[  928.498683][ T5631]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  928.498693][ T5631]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  928.498702][ T5631]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  928.498711][ T5631]  genl_family_rcv_msg_doit+0x22a/0x330
[  928.498720][ T5631]  ? __asan_memcpy+0x40/0x70
[  928.498728][ T5631]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  928.498737][ T5631]  ? __lock_acquire+0x6b5/0x2cf0
[  928.498748][ T5631]  genl_rcv_msg+0x61c/0x7a0
[  928.498756][ T5631]  ? __pfx_genl_rcv_msg+0x10/0x10
[  928.498763][ T5631]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  928.498773][ T5631]  netlink_rcv_skb+0x232/0x4b0
[  928.498787][ T5631]  ? __pfx_genl_rcv_msg+0x10/0x10
[  928.498795][ T5631]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  928.498806][ T5631]  ? down_read+0x270/0x2e0
[  928.498815][ T5631]  ? genl_rcv+0xd/0x40
[  928.498822][ T5631]  genl_rcv+0x28/0x40
[  928.498829][ T5631]  netlink_unicast+0x75c/0x8e0
[  928.498839][ T5631]  netlink_sendmsg+0x813/0xb40
[  928.498850][ T5631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  928.498860][ T5631]  ? aa_sock_msg_perm+0xf1/0x1b0
[  928.498868][ T5631]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  928.498877][ T5631]  ____sys_sendmsg+0x972/0x9f0
[  928.498889][ T5631]  ? __might_fault+0xaf/0x130
[  928.498898][ T5631]  ? __pfx_____sys_sendmsg+0x10/0x10
[  928.498909][ T5631]  ? import_iovec+0x73/0xa0
[  928.498918][ T5631]  ___sys_sendmsg+0x2a5/0x360
[  928.498924][ T5631]  ? __lock_acquire+0x6b5/0x2cf0
[  928.498934][ T5631]  ? __pfx____sys_sendmsg+0x10/0x10
[  928.498966][ T5631]  ? futex_wait+0x2a2/0x390
[  928.498983][ T5631]  ? __fget_files+0x2a/0x420
[  928.498991][ T5631]  ? __fget_files+0x3a0/0x420
[  928.498998][ T5631]  __x64_sys_sendmsg+0x1bd/0x2a0
[  928.499005][ T5631]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  928.499015][ T5631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.499022][ T5631]  do_syscall_64+0x15f/0xf80
[  928.499033][ T5631]  ? trace_irq_disable+0x3b/0x140
[  928.499045][ T5631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.499053][ T5631] RIP: 0033:0x7fc20979c819
[  928.499062][ T5631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  928.499070][ T5631] RSP: 002b:00007fc20a69e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  928.499079][ T5631] RAX: ffffffffffffffda RBX: 00007fc209a15fa0 RCX: 00007fc20979c819
[  928.499084][ T5631] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000005
[  928.499089][ T5631] RBP: 00007fc209832c91 R08: 0000000000000000 R09: 0000000000000000
[  928.499093][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  928.499098][ T5631] R13: 00007fc209a16038 R14: 00007fc209a15fa0 R15: 00007fff2cd40c98
[  928.499106][ T5631]  </TASK>
[  928.644207][ T5637] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  928.662368][ T5631] xt_hashlimit: size too large, truncated to 1048576
[  936.660048][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
