last executing test programs:

490.0014ms ago: executing program 2 (id=2455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x41448000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r3], 0x64}}, 0x0)
connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000640)=""/11, 0xb}], 0x9}, 0x100)

430.007977ms ago: executing program 2 (id=2457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000c30000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c000280050011000100"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

349.163382ms ago: executing program 2 (id=2458):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009382992392e99ba5572246173b68fd9fabc228373a39f6bb71ff719c1e7217dbeea87ce27c65830508863bcad0b47463122028f11d9259d891665557ea8b3ab5ed15134f0ccea036cdabe81111268541d31ddd41ef1caca148e5248b890aab6435b7ddc94119e78c6ef175305fea348fc59cb81c2392d37fbe4743ad7423748f8a6f77b2cd1e7c9ecf59b947b4d03db13c2784d53555e10000000000000003581b27c344d54d0e9b1211df24960dcdcb6c04d28d24", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000180000000000000000000000070000004406823d1ae40004"], 0x38}, 0x20002880) (async)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000180000000000000000000000070000004406823d1ae40004"], 0x38}, 0x20002880)
socket$nl_generic(0x10, 0x3, 0x10)

348.826653ms ago: executing program 0 (id=2459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

277.438534ms ago: executing program 0 (id=2460):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a4000000040000000000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000380)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, {0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x0, {[0x410, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x6]}}, 0x5c)

277.161442ms ago: executing program 0 (id=2461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
close(r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0x3}, {0x6, 0x9}, {0x6, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0xfff1}, {0xb, 0x9}}}, 0x24}}, 0x20040054)

209.72263ms ago: executing program 1 (id=2463):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x14, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x20008040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791020000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

209.225358ms ago: executing program 0 (id=2464):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x0, @local}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'}) (async)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x0, @local}, 0x0, {0x2, 0x4e23, @broadcast}, 'hsr0\x00'})
syz_emit_ethernet(0x113f, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "efdf22", 0x1109, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2f, 0xa, 0x4, 0x5, 0x11, 0x8, 0x6, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @local, @mcast1]}, @srh={0xc, 0x8, 0x4, 0x4, 0x2, 0x40, 0x1, [@mcast1, @mcast2, @private2, @mcast2]}, @hopopts={0x67, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x32, 0x1e8, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0xfb, 0xf3b, "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"}]}], {0x4e20, 0x4e20, 0xf9, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "ec214c88c5b5fab209fd8c6777d6f72fc0c4d1f01926328d871e69436cd7afeb66b5507aa0ef5bef87f06eabc61540fd2f022b27e689aef9bfd3cecab0acaf4ed328b7af1beba1619f0ddccfdc43c0024cfeae03efe2170bb8135331ac32516e8e37f9198cccb0577d2f54b25dbfb9a31f35b8594cf01cc189353acc433e7b4396e54bfeb4761f565e6c963903debf0644b31e8a2582cdb8b9c627f8f23b616e3cea4c9ea9f0fc3b0f7f625091564739d7a3338b8667e2307bcfd4d04a4beac2173964f59edd44b52856c1ef6563e96ef5ef1413f9049351aa6b9b2dce32111c296489583307bfbdf5"}}}}}}}, 0x0)

209.133515ms ago: executing program 1 (id=2465):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x16, [0x4, 0x8001, 0x40, 0x2, 0x9, 0x2], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/22}, &(0x7f0000000140)=0x78)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x16, [0x4, 0x8001, 0x40, 0x2, 0x9, 0x2], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/22}, &(0x7f0000000140)=0x78) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) (async)
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)

150.54976ms ago: executing program 2 (id=2466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000f50000000000000000000a6c000000040a09040000000000000000020000000900020073797a32000000000900010072797a3000000000400004803c0001800b00010065787468647200002c0002800500020000000000080003400000005b540001400000001308000440000000000800054000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)

150.100369ms ago: executing program 1 (id=2467):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @rose, @netrom, @default, @rose, @default, @rose]}, &(0x7f00000000c0)=0x48)
accept4$ax25(r2, 0x0, &(0x7f0000000340), 0x80000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x13, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20050000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xff, 0xff, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

149.633068ms ago: executing program 0 (id=2468):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket(0x23, 0x5, 0x0)
ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)=0x1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011"], 0x20}], 0x1}, 0x300)

149.357167ms ago: executing program 2 (id=2469):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000030101020000000000000000000000057aac8c0fad822f22d3f679346390f8b910b7d58b6551b00946daf95e34f16a136dd2a5c923cd052d75a847aa2f2d78f72c67f60558e4304c55fe718dd6633387c77fcec01a86d79937fad765fe72c7e43bf8d7384f6cf1c19794554e50c59b387542ed24553c972e3695a4323b5221792cb10256d2"], 0x14}}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000030101020000000000000000000000057aac8c0fad822f22d3f679346390f8b910b7d58b6551b00946daf95e34f16a136dd2a5c923cd052d75a847aa2f2d78f72c67f60558e4304c55fe718dd6633387c77fcec01a86d79937fad765fe72c7e43bf8d7384f6cf1c19794554e50c59b387542ed24553c972e3695a4323b5221792cb10256d2"], 0x14}}, 0x40040)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
epoll_create(0x400) (async)
r4 = epoll_create(0x400)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x40000000})
socket$unix(0x1, 0x5, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
ppoll(&(0x7f00000000c0)=[{r7, 0x8004}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"})
socket$inet6(0xa, 0x802, 0x0) (async)
r9 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
recvmmsg(r9, &(0x7f0000002180)=[{{&(0x7f0000000300)=@ax25={{0x3, @default}, [@remote, @rose, @default, @bcast, @bcast, @null, @remote, @netrom]}, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/200, 0xc8}, 0xf51}], 0x1, 0x40002105, 0x0)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000001840), 0x3b, 0x0)
write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d) (async)
write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d)
close(0x4) (async)
close(0x4)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x306, @random="de4b75acdd74"}, 0x48, {0x2, 0x4e23, @multicast1}, 'dvmrp1\x00'})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r10, 0x9, 0x2}, &(0x7f0000000140)=0x8)
r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f00000002c0)=0x7fffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r12)

70.464368ms ago: executing program 1 (id=2470):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000090000000000000000000007a099ff3a430905000000070000000000000e0100000000000000000000000000000d02000000000000001000000d00000000000000000000000203000000000000000000005f00"], 0x0, 0x61}, 0x20)

70.09924ms ago: executing program 1 (id=2471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r1=>r0, 0x6, 0x4b92, 0x80})
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x40000001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000340)='cgrp\xadz\xaaL\x88'}, 0x30) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet(0x2, 0x3, 0x33) (async, rerun: 32)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) (rerun: 32)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async)
r5 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) (async, rerun: 32)
r6 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (rerun: 32)
write$cgroup_pressure(r6, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) (async)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64)
r9 = epoll_create1(0x0) (rerun: 64)
epoll_create1(0x0) (async, rerun: 64)
close(r9) (rerun: 64)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r10, 0x0)
shutdown(r10, 0x0) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r9, &(0x7f00000003c0)={0x60002013}) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a00fffe000008000a0000"], 0x174}}, 0x0)

557.508µs ago: executing program 1 (id=2472):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

178.027µs ago: executing program 2 (id=2473):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000500)=0x1c)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000540)={0xa, {{0xa, 0x4e20, 0x5, @private0, 0x5}}, {{0xa, 0x4e21, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={<r4=>0x0, 0x3, 0xfffffc00, 0x8, 0x6, 0x10, 0x7fff, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x7dd0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x2a, 0x401, 0x5, 0x9, 0x680}}, &(0x7f0000000040)=0xb0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080)={r4, 0x28, "4bdebafcb04a799c6fb769081b6f08e0de7af7705e733ac9962d646872c248df134fc1777da611b7"}, &(0x7f0000000140)=0x30) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 32)

0s ago: executing program 0 (id=2474):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000100)="70eab9579872890369cd9c"}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

t [1, 0] type 2 family 0 port 6081 - 0
[   55.526051][ T5840] veth1_vlan: entered promiscuous mode
[   55.532581][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.536383][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.546840][ T5850] veth0_vlan: entered promiscuous mode
[   55.560121][ T5850] veth1_vlan: entered promiscuous mode
[   55.578355][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.581010][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.593272][   T55] Bluetooth: hci1: command tx timeout
[   55.593333][ T5847] Bluetooth: hci0: command tx timeout
[   55.606234][ T5840] veth0_macvtap: entered promiscuous mode
[   55.609199][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.612263][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.614850][ T5840] veth1_macvtap: entered promiscuous mode
[   55.621394][ T5850] veth0_macvtap: entered promiscuous mode
[   55.632839][ T5850] veth1_macvtap: entered promiscuous mode
[   55.640534][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.654448][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.660740][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.661636][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.669386][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.674309][ T5847] Bluetooth: hci2: command tx timeout
[   55.685898][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.689409][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.711079][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.723345][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.727324][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.727929][ T5906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   55.740841][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.747567][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.750826][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.835942][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.843750][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.863505][  T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.866859][  T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.892240][  T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.903194][  T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.934350][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.937764][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.035533][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.047144][ T5917] batman_adv: batadv0: Adding interface: dummy0
[   56.049256][ T5917] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.057616][ T5917] batman_adv: batadv0: Interface activated: dummy0
[   56.065943][ T5917] batadv0: mtu less than device minimum
[   56.068516][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.072778][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.076734][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.080668][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.084835][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.088695][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.092704][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.096666][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.100599][ T5917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.110441][ T5918] Illegal XDP return value 4294967262 on prog  (id 2) dev N/A, expect packet loss!
[   56.119348][ T5917] batman_adv: batadv0: Adding interface: ip6gretap1
[   56.121753][ T5917] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.133909][ T5917] batman_adv: batadv0: Interface activated: ip6gretap1
[   56.211003][ T5921] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET)
[   56.248934][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.279896][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.284110][ T5923] veth1_macvtap: left promiscuous mode
[   56.306770][ T5924] batadv_slave_1: entered promiscuous mode
[   56.310112][ T5924] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6'.
[   56.911583][ T5927] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8'.
[   56.997850][ T5931] tipc: Invalid UDP bearer configuration
[   56.997936][ T5931] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   57.010926][ T5931] vlan2: entered allmulticast mode
[   57.034239][ T5920] batadv_slave_1: left promiscuous mode
[   57.154118][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.207555][ T5933] netlink: 'syz.1.11': attribute type 21 has an invalid length.
[   57.210237][ T5933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.213933][ T5933] netlink: 'syz.1.11': attribute type 5 has an invalid length.
[   57.217485][ T5933] netlink: 'syz.1.11': attribute type 6 has an invalid length.
[   57.220831][ T5933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.257936][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.271931][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.351557][ T5943] netlink: 108 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.433400][ T5950] Zero length message leads to an empty skb
[   57.584343][ T5958] netlink: 'syz.0.19': attribute type 10 has an invalid length.
[   57.673060][ T5847] Bluetooth: hci1: command tx timeout
[   57.683839][ T5847] Bluetooth: hci0: command tx timeout
[   57.753359][ T5847] Bluetooth: hci2: command tx timeout
[   58.941901][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[   59.055522][ T6027] ip6tnl1: entered promiscuous mode
[   59.057306][ T6027] ip6tnl1: entered allmulticast mode
[   59.384362][ T6050] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   59.454827][ T6056] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   59.468726][ T6053] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   59.494565][ T6058] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   59.527811][ T6058] ieee802154 phy0 wpan0: encryption failed: -22
[   59.589552][ T6067] netlink: 'syz.0.54': attribute type 83 has an invalid length.
[   59.598591][ T6067] netlink: 'syz.0.54': attribute type 83 has an invalid length.
[   59.605544][ T6067] netlink: 'syz.0.54': attribute type 83 has an invalid length.
[   59.614710][ T6067] netlink: 'syz.0.54': attribute type 83 has an invalid length.
[   59.618433][ T6067] netlink: 'syz.0.54': attribute type 83 has an invalid length.
[   59.754600][   T55] Bluetooth: hci1: command tx timeout
[   59.756529][ T5847] Bluetooth: hci0: command tx timeout
[   59.833547][ T5847] Bluetooth: hci2: command tx timeout
[   60.188677][ T6132] tipc: Started in network mode
[   60.193973][ T6132] tipc: Node identity d6eb534eb404, cluster identity 4711
[   60.204382][ T6132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.212194][ T6132] syzkaller0: entered promiscuous mode
[   60.214082][ T6132] syzkaller0: entered allmulticast mode
[   60.244286][ T6133] tipc: Resetting bearer <eth:syzkaller0>
[   60.247826][ T6131] tipc: Resetting bearer <eth:syzkaller0>
[   60.256699][ T6131] tipc: Disabling bearer <eth:syzkaller0>
[   60.787498][ T6176] __nla_validate_parse: 55 callbacks suppressed
[   60.787508][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.86'.
[   60.834242][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'.
[   61.194730][ T6190] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   61.248481][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[   61.332297][ T6206] ip6tnl2: entered promiscuous mode
[   61.337876][ T6206] ip6tnl2: entered allmulticast mode
[   61.341346][ T6206] team0: Device ip6tnl2 is of different type
[   61.376433][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.2.94'.
[   61.458876][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.97'.
[   61.647518][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'.
[   61.743231][ T6242] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   61.819073][ T6253] atomic_op ffff88802da93198 conn xmit_atomic 0000000000000000
[   61.833848][   T55] Bluetooth: hci1: command tx timeout
[   61.835941][ T5847] Bluetooth: hci0: command tx timeout
[   61.850623][ T6254] ip6tnl2: entered promiscuous mode
[   61.853284][ T6254] ip6tnl2: entered allmulticast mode
[   61.856585][ T6254] team0: Device ip6tnl2 is of different type
[   61.883098][ T6253] bridge1: entered allmulticast mode
[   61.899214][ T6258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.110'.
[   61.913210][ T5847] Bluetooth: hci2: command tx timeout
[   61.919294][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.990356][ T6260] bridge0: entered promiscuous mode
[   62.005073][ T6260] vlan2: entered promiscuous mode
[   62.022023][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.115'.
[   62.094896][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.106353][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   62.127591][ T5690] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.131616][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   62.132503][ T5690] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.141620][ T5690] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.147398][ T5690] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.285200][ T6292] tipc: Enabling of bearer <et:g> rejected, media not registered
[   62.449844][ T5690] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.453962][ T5690] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.456762][ T5690] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.461143][ T5690] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.538307][ T6307] IPv6: Can't replace route, no match found
[   62.578167][ T6309] ip6tnl2: entered promiscuous mode
[   62.580039][ T6309] ip6tnl2: entered allmulticast mode
[   62.583123][ T6309] team0: Device ip6tnl2 is of different type
[   63.161465][ T6338] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004
[   63.263784][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   63.267033][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   63.270848][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   63.366891][ T6360] validate_nla: 38 callbacks suppressed
[   63.366901][ T6360] netlink: 'syz.1.150': attribute type 21 has an invalid length.
[   63.377090][ T6360] netlink: 'syz.1.150': attribute type 21 has an invalid length.
[   63.489085][ T6346] infiniband syz2: set active
[   63.491646][ T5309] vxcan1 speed is unknown, defaulting to 1000
[   63.494496][ T6346] infiniband syz2: added vxcan1
[   63.527975][ T6346] RDS/IB: syz2: added
[   63.529848][ T6346] smc: adding ib device syz2 with port count 1
[   63.532280][ T6346] smc:    ib device syz2 port 1 has pnetid 
[   63.536636][ T5309] vxcan1 speed is unknown, defaulting to 1000
[   63.544070][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   63.857064][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   63.960504][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.978798][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.133275][ T6346] vxcan1 speed is unknown, defaulting to 1000
[   64.253482][ T6417] ip6tnl2: entered promiscuous mode
[   64.255221][ T6417] ip6tnl2: entered allmulticast mode
[   64.258651][ T6417] team0: Device ip6tnl2 is of different type
[   64.567604][ T6440] tipc: Started in network mode
[   64.569248][ T6440] tipc: Node identity , cluster identity 4711
[   64.571215][ T6440] tipc: Failed to obtain node identity
[   64.574890][ T6440] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.580837][ T6440] syzkaller0: entered promiscuous mode
[   64.583318][ T6440] syzkaller0: entered allmulticast mode
[   64.666082][ T6448] tipc: Started in network mode
[   64.668154][ T6448] tipc: Node identity 080211, cluster identity 4711
[   64.671792][ T6448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.689640][ T6448] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   64.698854][ T6448] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   64.724031][ T6448] tipc: Resetting bearer <eth:syzkaller0>
[   64.736058][ T6454] ip6tnl1: entered promiscuous mode
[   64.737918][ T6454] ip6tnl1: entered allmulticast mode
[   64.740525][ T6454] team0: Device ip6tnl1 is of different type
[   65.016942][ T6473] sctp: [Deprecated]: syz.1.191 (pid 6473) Use of int in maxseg socket option.
[   65.016942][ T6473] Use struct sctp_assoc_value instead
[   65.067081][ T6478] warning: `syz.2.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.080354][ T6478] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   65.091528][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.704575][   T10] tipc: Node number set to 134353152
[   66.067133][ T6493] __nla_validate_parse: 20 callbacks suppressed
[   66.067146][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.199'.
[   66.079024][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   66.161810][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'.
[   66.301450][ T5690] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   66.431384][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[   66.568378][ T6538] netlink: 44 bytes leftover after parsing attributes in process `syz.1.215'.
[   66.606002][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[   66.635651][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   66.801095][ T6559] IPVS: set_ctl: invalid protocol: 59 172.30.1.2:20001
[   66.889870][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   67.035384][ T6576] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[   67.045211][ T6576] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[   67.720157][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   67.745250][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   67.887810][ T6601] netlink: 'syz.1.237': attribute type 3 has an invalid length.
[   67.890892][ T6601] netlink: 'syz.1.237': attribute type 3 has an invalid length.
[   67.894233][ T6601] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   67.896999][ T6601] netlink: 'syz.1.237': attribute type 3 has an invalid length.
[   67.899669][ T6601] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   67.903538][ T6601] netlink: 'syz.1.237': attribute type 3 has an invalid length.
[   68.006637][ T6613] xt_limit: Overflow, try lower: 271964/0
[   68.225764][ T6636] syzkaller1: entered promiscuous mode
[   68.227749][ T6636] syzkaller1: entered allmulticast mode
[   68.625080][ T6673] unsupported nlmsg_type 40
[   68.707787][ T6678] net_ratelimit: 34 callbacks suppressed
[   68.707808][ T6678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.003408][ T6698] bridge_slave_0: left allmulticast mode
[   69.005628][ T6698] bridge_slave_0: left promiscuous mode
[   69.008859][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.015389][ T6698] bridge_slave_1: left allmulticast mode
[   69.017424][ T6698] bridge_slave_1: left promiscuous mode
[   69.020020][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.030239][ T6698] bond0: (slave bond_slave_0): Releasing backup interface
[   69.036352][ T6698] bond0: (slave bond_slave_1): Releasing backup interface
[   69.046150][ T6698] team0: Port device team_slave_0 removed
[   69.051837][ T6698] team0: Port device team_slave_1 removed
[   69.055733][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.058688][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.077972][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.085751][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.106172][ T5309] vxcan1 speed is unknown, defaulting to 1000
[   69.111735][ T6698] ieee802154 phy0 wpan0: encryption failed: -22
[   69.219651][ T6706] vxcan1 speed is unknown, defaulting to 1000
[   69.525940][ T6723] : entered promiscuous mode
[   69.530856][ T6723] trusted_key: syz.0.276 sent an empty control message without MSG_MORE.
[   69.805778][ T6731] rdma_op ffff888011f349f0 conn xmit_rdma 0000000000000000
[   69.849516][ T6737] netlink: 'syz.1.280': attribute type 5 has an invalid length.
[   69.858283][ T6738] netlink: 'syz.1.280': attribute type 5 has an invalid length.
[   70.047796][ T6749] netlink: 'syz.1.284': attribute type 32 has an invalid length.
[   70.887458][ T6796] tipc: Started in network mode
[   70.889197][ T6796] tipc: Node identity 3242be2cfb26, cluster identity 4711
[   70.891551][ T6796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.895036][ T6796] syzkaller0: entered promiscuous mode
[   70.896809][ T6796] syzkaller0: entered allmulticast mode
[   70.928859][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   70.937476][ T6795] tipc: Disabling bearer <eth:syzkaller0>
[   71.036365][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.038781][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.166639][ T6809] netlink: 'syz.0.304': attribute type 11 has an invalid length.
[   71.480363][ T6820] __nla_validate_parse: 21 callbacks suppressed
[   71.480375][ T6820] netlink: 27 bytes leftover after parsing attributes in process `syz.1.308'.
[   71.526625][ T6828] netlink: 'syz.1.311': attribute type 11 has an invalid length.
[   71.531699][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.311'.
[   71.635588][ T6825] vxcan1 speed is unknown, defaulting to 1000
[   71.688404][ T6834] mac80211_hwsim hwsim5 ;: renamed from wlan0 (while UP)
[   71.871501][ T6844] batadv_slave_0: entered promiscuous mode
[   71.886106][ T6844] sctp: [Deprecated]: syz.2.316 (pid 6844) Use of int in max_burst socket option.
[   71.886106][ T6844] Use struct sctp_assoc_value instead
[   71.899734][ T6848] delete_channel: no stack
[   71.901780][ T6843] batadv_slave_0: left promiscuous mode
[   71.918863][ T6848] netlink: 'syz.1.317': attribute type 58 has an invalid length.
[   71.922041][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'.
[   72.007788][ T6854] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[   72.010546][ T6854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.125164][  T792] IPVS: starting estimator thread 0...
[   72.139588][ T6857] netlink: 'syz.1.321': attribute type 29 has an invalid length.
[   72.212548][ T6864] IPVS: using max 81 ests per chain, 194400 per kthread
[   72.294506][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.297715][ T6867] netlink: 216 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.874400][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'.
[   72.878354][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'.
[   72.936095][ T6876] vxcan1 speed is unknown, defaulting to 1000
[   72.994459][ T6879] netlink: 'syz.0.327': attribute type 4 has an invalid length.
[   73.004187][ T6879] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.327'.
[   73.122109][ T6877] vxcan1 speed is unknown, defaulting to 1000
[   73.420432][ T6895] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[   73.510551][ T6906] netlink: 'syz.0.336': attribute type 3 has an invalid length.
[   73.516842][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'.
[   73.517119][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'.
[   73.586539][ T6911] netlink: 'syz.0.337': attribute type 4 has an invalid length.
[   73.800808][ T6924] bridge_slave_0: left promiscuous mode
[   73.810291][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.831537][ T6924] bridge_slave_1: left allmulticast mode
[   73.833711][ T6924] bridge_slave_1: left promiscuous mode
[   73.835798][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.851291][ T6924] bond0: (slave bond_slave_0): Releasing backup interface
[   73.866994][ T6924] bond0: (slave bond_slave_1): Releasing backup interface
[   73.879773][ T6924] team0: Port device team_slave_0 removed
[   73.893827][ T6924] team0: Port device team_slave_1 removed
[   73.896275][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.898867][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.902085][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.905213][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.974007][ T6924] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.095026][ T6953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.118637][ T6953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.197720][ T6958] 0: renamed from hsr0 (while UP)
[   74.205852][ T6958] 0: entered allmulticast mode
[   74.207699][ T6958] hsr_slave_0: entered allmulticast mode
[   74.209696][ T6958] hsr_slave_1: entered allmulticast mode
[   74.211976][ T6958] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   74.363627][ T6964] 0: left allmulticast mode
[   74.365311][ T6964] hsr_slave_0: left allmulticast mode
[   74.367393][ T6964] hsr_slave_1: left allmulticast mode
[   74.423763][ T6964] bridge1: left allmulticast mode
[   74.431620][  T975] vxcan1 speed is unknown, defaulting to 1000
[   74.434032][ T5870] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.434862][  T975] syz1: Port: 1 Link DOWN
[   74.437808][ T5870] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.445319][ T5870] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.454630][  T975] vxcan1 speed is unknown, defaulting to 1000
[   74.456796][ T5870] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.521159][ T6973] syzkaller0: entered promiscuous mode
[   74.524362][ T6973] syzkaller0: entered allmulticast mode
[   74.527825][ T6972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.538971][ T6973] tipc: Resetting bearer <eth:syzkaller0>
[   75.449661][ T6973] tipc: Disabling bearer <eth:syzkaller0>
[   75.728435][ T7013] validate_nla: 9 callbacks suppressed
[   75.728448][ T7013] netlink: 'syz.0.372': attribute type 5 has an invalid length.
[   75.957256][ T7033] ip6tnl2: entered promiscuous mode
[   75.959609][ T7033] ip6tnl2: entered allmulticast mode
[   75.963356][ T7033] team0: Device ip6tnl2 is of different type
[   76.113830][ T7043] netlink: 'syz.0.384': attribute type 6 has an invalid length.
[   76.178897][ T7050] syzkaller1: entered promiscuous mode
[   76.181352][ T7050] syzkaller1: entered allmulticast mode
[   76.303146][ T7060] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   76.499366][ T7081] __nla_validate_parse: 21 callbacks suppressed
[   76.499376][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   76.506775][ T7083] netlink: 'syz.2.392': attribute type 1 has an invalid length.
[   76.540402][ T7083] netlink: 163 bytes leftover after parsing attributes in process `syz.2.392'.
[   76.648962][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[   76.662023][ T7089] tap0: tun_chr_ioctl cmd 1074025680
[   76.674979][ T7089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.768294][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'.
[   76.840681][ T7089] D: renamed from syzkaller0
[   76.843668][ T7089] tipc: Disabling bearer <eth:syzkaller0>
[   76.936204][ T7099] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   77.011789][ T7104] ip6tnl2: entered promiscuous mode
[   77.013123][ T7106] netlink: 'syz.1.400': attribute type 3 has an invalid length.
[   77.015450][ T7104] ip6tnl2: entered allmulticast mode
[   77.017089][ T7106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.400'.
[   77.020425][ T7104] team0: Device ip6tnl2 is of different type
[   77.063678][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'.
[   77.069880][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'.
[   77.118057][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'.
[   77.121984][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'.
[   77.161054][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'.
[   77.280322][ T7120] netlink: 'syz.2.405': attribute type 15 has an invalid length.
[   77.319014][ T7122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.326002][ T7122] syzkaller0: entered promiscuous mode
[   77.327904][ T7122] syzkaller0: entered allmulticast mode
[   77.335521][ T7122] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.906526][ T7167] tipc: Resetting bearer <eth:syzkaller0>
[   78.143392][ T7121] tipc: Resetting bearer <eth:syzkaller0>
[   78.158094][ T7121] tipc: Disabling bearer <eth:syzkaller0>
[   78.241444][ T7197] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   78.255910][ T7197] netlink: 'syz.2.434': attribute type 2 has an invalid length.
[   78.358850][ T7212] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.361799][ T7211] syzkaller1: entered promiscuous mode
[   78.364353][ T7211] syzkaller1: entered allmulticast mode
[   78.378032][ T7212] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.737380][ T7248] ip6gre1: entered allmulticast mode
[   78.923643][ T7264] netlink: 'syz.0.452': attribute type 30 has an invalid length.
[   78.927370][ T7264] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   78.931634][ T7264] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   79.375133][   T47] cfg80211: failed to load regulatory.db
[   80.486170][ T7340] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[   80.637409][ T7344] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   80.657286][ T7344] openvswitch: netlink: Missing key (keys=40, expected=100)
[   80.758185][ T7373] netlink: 'syz.2.486': attribute type 18 has an invalid length.
[   80.799643][ T7375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.807947][ T7375] syzkaller0: entered promiscuous mode
[   80.811070][ T7375] syzkaller0: entered allmulticast mode
[   80.839331][ T7381] tipc: Resetting bearer <eth:syzkaller0>
[   80.846755][ T7374] tipc: Resetting bearer <eth:syzkaller0>
[   80.865422][ T7374] tipc: Disabling bearer <eth:syzkaller0>
[   80.878614][ T7383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.882914][ T7383] syzkaller0: entered promiscuous mode
[   80.885422][ T7383] syzkaller0: entered allmulticast mode
[   80.982896][ T7383] vxcan1 speed is unknown, defaulting to 1000
[   81.259315][ T7404] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.263186][ T7404] bond2: (slave bond3): Enslaving as an active interface with an up link
[   81.266511][ T7382] tipc: Resetting bearer <eth:syzkaller0>
[   81.278049][ T7382] tipc: Disabling bearer <eth:syzkaller0>
[   81.291344][ T7404] bond2 (unregistering): (slave bond3): Releasing backup interface
[   81.324421][ T7404] bond2 (unregistering): Released all slaves
[   81.695132][ T7426] __nla_validate_parse: 21 callbacks suppressed
[   81.695147][ T7426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.500'.
[   81.763508][ T7422] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   82.708810][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   82.726797][ T7452] netlink: 'syz.0.507': attribute type 5 has an invalid length.
[   82.873789][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   83.211901][ T7483] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   83.215716][ T7483] netlink: 228 bytes leftover after parsing attributes in process `syz.1.520'.
[   83.294963][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[   83.395351][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'.
[   83.479359][ T7499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'.
[   83.535559][  T792] IPVS: starting estimator thread 0...
[   83.547110][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.622506][ T7504] IPVS: using max 81 ests per chain, 194400 per kthread
[   83.776874][ T7510] syzkaller1: entered promiscuous mode
[   83.779420][ T7510] syzkaller1: entered allmulticast mode
[   83.793633][ T7510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.531'.
[   83.797479][ T7510] netlink: 260 bytes leftover after parsing attributes in process `syz.2.531'.
[   83.802782][ T7514] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.533'.
[   83.830753][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.075322][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.537'.
[   84.173804][ T7531] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   84.177507][ T7531] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   84.970194][ T7543] openvswitch: netlink: Tunnel attr 3 has unexpected len 10 expected 1
[   85.891758][ T7567] Bluetooth: MGMT ver 1.23
[   85.895951][ T7569] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.079731][ T7582] delete_channel: no stack
[   86.125213][ T7589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.185797][ T7592] veth3: entered promiscuous mode
[   86.238969][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.244194][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.444918][ T7617] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   86.447931][ T7617] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   86.479955][ T7617] vxcan1 speed is unknown, defaulting to 1000
[   86.795512][ T7629] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.799083][ T7639] __nla_validate_parse: 9 callbacks suppressed
[   86.799092][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   86.899252][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'.
[   87.067894][  T792] IPVS: starting estimator thread 0...
[   87.072630][ T7667] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20004
[   87.076555][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'.
[   87.094912][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'.
[   87.124729][ T7673] smc: net device bond0 applied user defined pnetid SYZ2
[   87.127764][ T7673] netlink: 14 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.153562][ T7668] IPVS: using max 81 ests per chain, 194400 per kthread
[   87.211120][ T7673] smc: removing net device bond0 with user defined pnetid SYZ2
[   87.215920][ T7673] bond0 (unregistering): Released all slaves
[   87.305182][ T7683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.590'.
[   87.389758][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[   87.429745][ T7693] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.593'.
[   87.560428][ T7704] netlink: 'syz.0.597': attribute type 1 has an invalid length.
[   87.578341][ T7704] smc: adding net device bond0 with user defined pnetid SYZ2
[   87.591270][ T7704] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.597'.
[   87.596737][ T7704] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   87.685263][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'.
[   87.918205][ T7724] netlink: 'syz.1.603': attribute type 2 has an invalid length.
[   87.922677][ T5962] tipc: Node number set to 1659851598
[   88.016815][ T7729] netlink: 'syz.0.605': attribute type 3 has an invalid length.
[   88.398539][ T7739] pimreg3: entered allmulticast mode
[   88.412034][ T7741] ip6gretap0: entered promiscuous mode
[   88.414335][ T7741] macsec1: entered allmulticast mode
[   88.415996][ T7741] ip6gretap0: entered allmulticast mode
[   88.419946][ T7741] ip6gretap0: left allmulticast mode
[   88.422196][ T7741] ip6gretap0: left promiscuous mode
[   88.493891][ T7750] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[   88.498264][ T7750] netlink: 'syz.2.613': attribute type 2 has an invalid length.
[   88.503861][ T7750] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[   88.508099][ T7750] netlink: 'syz.2.613': attribute type 2 has an invalid length.
[   88.510575][ T7750] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[   88.589688][ T7750] bond4: (slave geneve3): making interface the new active one
[   88.593230][ T7750] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   88.596762][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   88.601152][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   88.605824][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   88.608851][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   88.775317][ T7771] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.235660][ T7801] IPVS: length: 205 != 8
[   89.956177][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.959186][ T7842] IPv6: NLM_F_CREATE should be set when creating new route
[   89.962179][ T7842] IPv6: NLM_F_CREATE should be set when creating new route
[   90.362177][ T7863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.367130][ T7863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.371125][ T7863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   90.432260][ T7863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.436036][ T7863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.439949][ T7863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   90.485462][ T7863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.489206][ T7863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.493649][ T7863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   90.547818][ T7863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.552165][ T7863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.557959][ T7863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   90.645006][ T5904] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.648200][ T5904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   90.651098][ T5904] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   90.661022][ T5904] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.664105][ T5904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   90.667159][ T5904] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   90.676360][ T5904] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.679535][ T5904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   90.682923][ T5904] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   90.693969][ T5904] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.697145][ T5904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   90.700453][ T5904] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   90.775657][ T7882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.796724][ T7882] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.823406][ T7882] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.386178][   T28] smc: removing ib device syz1
[   91.890416][ T7914] __nla_validate_parse: 10 callbacks suppressed
[   91.890425][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'.
[   91.984496][ T7917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'.
[   92.266166][ T7935] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   92.848362][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[   92.854874][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'.
[   93.197041][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[   94.036438][ T7967] validate_nla: 6 callbacks suppressed
[   94.036452][ T7967] netlink: 'syz.0.683': attribute type 1 has an invalid length.
[   94.041347][ T7967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.683'.
[   94.074414][ T7973] netlink: 'syz.1.685': attribute type 12 has an invalid length.
[   94.077392][ T7973] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.685'.
[   94.675033][ T7988] netlink: 'syz.2.692': attribute type 4 has an invalid length.
[   94.687163][ T7988] netlink: 'syz.2.692': attribute type 4 has an invalid length.
[   95.055552][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'.
[   95.117623][ T7999] pimreg: entered allmulticast mode
[   95.313880][ T8018] syzkaller1: entered promiscuous mode
[   95.315649][ T8018] syzkaller1: entered allmulticast mode
[   95.321726][ T8018] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   95.402045][ T8020] syzkaller1: entered promiscuous mode
[   95.404603][ T8020] syzkaller1: entered allmulticast mode
[   95.409331][ T8020] C: renamed from team_slave_0
[   95.414127][ T8020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.702'.
[   95.534307][ T8022] netlink: 64 bytes leftover after parsing attributes in process `syz.0.703'.
[   95.587209][ T8028] netlink: 'syz.2.706': attribute type 2 has an invalid length.
[   95.598878][ T8028] : entered promiscuous mode
[   95.706718][ T8039] netlink: 'syz.0.711': attribute type 9 has an invalid length.
[   95.709482][ T8039] netlink: 'syz.0.711': attribute type 9 has an invalid length.
[   96.211985][ T8091] netlink: 'syz.1.732': attribute type 12 has an invalid length.
[   96.468533][ T8103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.474049][ T5904] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   96.772557][ T8117] netlink: 'syz.0.740': attribute type 30 has an invalid length.
[   97.084376][ T8127] __nla_validate_parse: 13 callbacks suppressed
[   97.084389][ T8127] netlink: 27 bytes leftover after parsing attributes in process `syz.2.744'.
[   97.307787][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[   97.310842][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[   98.001917][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'.
[   98.276855][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'.
[   98.312950][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   98.333804][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802576f400: rx timeout, send abort
[   98.338283][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802576f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   98.476491][ T8176] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[   98.486422][ T8176] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.759'.
[   98.544516][ T8183] sctp: [Deprecated]: syz.1.761 (pid 8183) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.544516][ T8183] Use struct sctp_sack_info instead
[   98.566720][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'.
[   98.865747][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'.
[   99.075882][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'.
[   99.208897][ T8249] IPVS: length: 49 != 24
[   99.249717][ T8253] validate_nla: 1 callbacks suppressed
[   99.249730][ T8253] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[   99.280114][ T8253] bond7: entered promiscuous mode
[   99.282789][ T8253] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.297579][ T8253] bond7: (slave bridge2): making interface the new active one
[   99.300711][ T8253] bridge2: entered promiscuous mode
[   99.303988][ T8253] bond7: (slave bridge2): Enslaving as an active interface with an up link
[   99.581777][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.609111][ T8266] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.792'.
[   99.658590][ T8270] bridge6: entered promiscuous mode
[   99.660967][ T8270] bridge6: entered allmulticast mode
[  100.466204][ T8292] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  100.580091][ T8299] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[  100.620402][ T8303] netlink: 'syz.2.808': attribute type 10 has an invalid length.
[  100.623895][ T8303] team0: entered promiscuous mode
[  100.625965][ T8303] team_slave_0: entered promiscuous mode
[  100.628485][ T8303] team_slave_1: entered promiscuous mode
[  100.631123][ T8303] bridge0: port 3(team0) entered blocking state
[  100.635510][ T8303] bridge0: port 3(team0) entered disabled state
[  100.638630][ T8303] team0: entered allmulticast mode
[  100.641080][ T8303] team_slave_0: entered allmulticast mode
[  100.649432][ T8303] team_slave_1: entered allmulticast mode
[  101.144250][ T8339] batman_adv: batadv0: Interface deactivated: dummy0
[  101.230787][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.240086][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.333991][ T8339] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  101.372306][ T8350] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.379989][ T5690] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.386553][ T5690] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  101.390265][ T5690] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.399597][ T5690] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.404550][ T5690] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  101.408075][ T5690] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.411630][ T5690] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.418635][ T5690] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  101.422221][ T5690] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.426006][ T5690] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.429595][ T5690] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  101.433619][ T5690] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.585423][ T8377] netlink: 'syz.1.829': attribute type 2 has an invalid length.
[  101.871209][ T8405] netlink: ct family unspecified
[  101.874086][ T8405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.884007][ T8407] netlink: 'syz.2.840': attribute type 4 has an invalid length.
[  102.275696][ T8430] __nla_validate_parse: 10 callbacks suppressed
[  102.275705][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'.
[  102.296403][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'.
[  102.303903][ T8430] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  102.307011][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'.
[  102.344064][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.849'.
[  102.820826][ T8450] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.856'.
[  102.923316][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.859'.
[  103.530770][ T8517] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  103.885366][ T8552] vti1: entered promiscuous mode
[  104.073815][ T8575] pim6reg1: entered promiscuous mode
[  104.077546][ T8575] pim6reg1: entered allmulticast mode
[  104.097333][ T8577] netlink: 'syz.1.894': attribute type 1 has an invalid length.
[  104.102301][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.894'.
[  104.151212][ T8575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.893'.
[  104.172580][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'.
[  104.340001][ T8607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.436131][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[  104.806075][ T8650] netlink: 'syz.1.914': attribute type 12 has an invalid length.
[  104.858497][ T5904] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.862546][ T5904] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.871191][ T5904] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.883828][ T5904] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.995180][ T8676] netlink: 'syz.0.920': attribute type 2 has an invalid length.
[  105.007157][ T8676] k*]: entered promiscuous mode
[  105.039048][ T8678] 8021q: adding VLAN 0 to HW filter on device team0
[  105.046114][ T8678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.053312][ T8682] veth1_macvtap: left promiscuous mode
[  105.060603][ T8682] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  105.320571][ T8699] team0: entered promiscuous mode
[  105.325034][ T8699] team0: left promiscuous mode
[  105.438729][ T8718] batadv_slave_1: entered promiscuous mode
[  105.441496][ T8718] batadv_slave_1: left promiscuous mode
[  106.069297][ T8772] vcan0: tx drop: invalid da for name 0x0100000000000002
[  106.390228][ T8790] sctp: [Deprecated]: syz.0.955 (pid 8790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.390228][ T8790] Use struct sctp_sack_info instead
[  106.522674][ T8802] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[  106.738480][ T8820] netlink: 'syz.2.965': attribute type 2 has an invalid length.
[  106.763520][ T8814] netlink: 'syz.0.964': attribute type 11 has an invalid length.
[  107.611782][ T8824] syzkaller1: entered promiscuous mode
[  107.614140][ T8824] syzkaller1: entered allmulticast mode
[  107.619162][ T8826] syzkaller1: left promiscuous mode
[  107.621425][ T8826] syzkaller1: left allmulticast mode
[  107.738234][ T8835] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  107.741703][ T8835] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  107.754653][ T8837] sctp: [Deprecated]: syz.0.969 (pid 8837) Use of int in maxseg socket option.
[  107.754653][ T8837] Use struct sctp_assoc_value instead
[  107.765539][ T8835] veth0_vlan: left promiscuous mode
[  107.768604][ T8835] veth0_vlan: entered promiscuous mode
[  107.792614][ T8835] syz.2.968 (8835) used greatest stack depth: 19976 bytes left
[  108.180218][ T8861] bridge3: the hash_elasticity option has been deprecated and is always 16
[  108.187207][ T8861] netlink: 'syz.2.977': attribute type 9 has an invalid length.
[  108.240817][ T8865] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  108.306624][ T8866] netlink: 'syz.2.978': attribute type 13 has an invalid length.
[  108.309995][ T8866] netlink: 'syz.2.978': attribute type 17 has an invalid length.
[  108.360073][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.367148][ T8866] 8021q: adding VLAN 0 to HW filter on device team0
[  108.370743][ T8866] batman_adv: batadv0: Interface activated: dummy0
[  108.377639][ T8866] batadv0: mtu less than device minimum
[  108.381153][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.386324][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.391424][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.396724][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.401750][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.406833][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.411871][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.416996][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.421927][ T8866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  108.552188][ T8874] __nla_validate_parse: 14 callbacks suppressed
[  108.552197][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.980'.
[  108.565413][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  108.892280][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'.
[  108.922814][ T8890] bridge4: port 1(veth5) entered blocking state
[  108.925502][ T8890] bridge4: port 1(veth5) entered disabled state
[  108.928626][ T8890] veth5: entered allmulticast mode
[  108.933826][ T8890] veth5: entered promiscuous mode
[  108.940441][ T8890] bridge4: port 2(veth0_to_bond) entered blocking state
[  108.943579][ T8890] bridge4: port 2(veth0_to_bond) entered disabled state
[  108.946503][ T8890] veth0_to_bond: entered allmulticast mode
[  108.950286][ T8890] veth0_to_bond: entered promiscuous mode
[  108.964329][ T8890] vlan2: entered allmulticast mode
[  108.966510][ T8890] veth1: entered allmulticast mode
[  108.968875][ T8890] bridge4: port 3(vlan2) entered blocking state
[  108.971527][ T8890] bridge4: port 3(vlan2) entered disabled state
[  108.976856][ T8890] vlan2: entered promiscuous mode
[  108.978940][ T8890] veth1: entered promiscuous mode
[  108.985916][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'.
[  109.018917][ T8902] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  109.024993][ T8903] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  109.201756][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'.
[  109.209323][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'.
[  109.255071][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'.
[  109.654576][ T8951] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1004'.
[  109.726373][ T8958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.733720][ T8958] syzkaller0: entered promiscuous mode
[  109.735992][ T8958] syzkaller0: entered allmulticast mode
[  109.742317][ T8958] tipc: Resetting bearer <eth:syzkaller0>
[  109.743697][ T8963] netlink: 'syz.2.1008': attribute type 16 has an invalid length.
[  109.747991][ T8963] netlink: 'syz.2.1008': attribute type 17 has an invalid length.
[  109.780490][ T8963] batman_adv: batadv0: Interface deactivated: dummy0
[  109.794282][ T8963] IPv6: NLM_F_REPLACE set, but no existing node found!
[  109.902148][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'.
[  110.551971][ T8956] tipc: Resetting bearer <eth:syzkaller0>
[  110.563495][ T8956] tipc: Disabling bearer <eth:syzkaller0>
[  110.710726][ T8983] dvmrp0: entered allmulticast mode
[  110.783602][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  111.021721][ T9003] netlink: 'syz.2.1019': attribute type 4 has an invalid length.
[  112.994032][ T9056] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  113.033149][ T9056] veth9: entered promiscuous mode
[  113.038102][ T9056] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.081304][ T9059] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  113.380543][ T9093] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  113.491919][ T9106] netlink: 'syz.0.1048': attribute type 1 has an invalid length.
[  113.559249][ T9093] 8021q: adding VLAN 0 to HW filter on device bond7
[  113.565182][ T9093] bond6: (slave bond7): making interface the new active one
[  113.568293][ T9106] __nla_validate_parse: 8 callbacks suppressed
[  113.568300][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[  113.573883][ T9093] bond6: (slave bond7): Enslaving as an active interface with an up link
[  113.636852][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'.
[  113.654566][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.944953][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  114.986734][ T9168] net_ratelimit: 12 callbacks suppressed
[  114.986750][ T9168] openvswitch: netlink: Message has 48 unknown bytes.
[  114.991801][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.336746][ T9180] ip6tnl1: left promiscuous mode
[  115.338976][ T9180] ip6tnl1: left allmulticast mode
[  115.341576][ T9180] ip6gre1: left allmulticast mode
[  115.347084][ T9180] bond7: left promiscuous mode
[  115.349134][ T9180] bridge2: left promiscuous mode
[  115.491593][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1077'.
[  115.511979][ T9193] Unsupported ieee802154 address type: 0
[  116.079470][ T5847] Bluetooth: hci2: link tx timeout
[  116.081835][ T5847] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.086244][   T55] Bluetooth: hci2: link tx timeout
[  116.088005][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.090715][   T55] Bluetooth: hci2: link tx timeout
[  116.092723][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.095259][   T55] Bluetooth: hci2: link tx timeout
[  116.096980][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.099697][   T55] Bluetooth: hci2: link tx timeout
[  116.102629][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.105179][   T55] Bluetooth: hci2: link tx timeout
[  116.107291][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.110365][   T55] Bluetooth: hci2: link tx timeout
[  116.112905][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.697031][ T9253] 8021q: adding VLAN 0 to HW filter on device bond8
[  116.702179][ T9253] bond0: (slave bond8): Enslaving as an active interface with a down link
[  117.161635][ T9304] netlink: 'syz.1.1109': attribute type 3 has an invalid length.
[  117.186799][ T9310] netlink: 'syz.2.1107': attribute type 1 has an invalid length.
[  117.226846][ T9310] 8021q: adding VLAN 0 to HW filter on device bond8
[  117.238274][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'.
[  118.156032][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  118.184220][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.255007][ T9345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1122'.
[  118.448985][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'.
[  118.676444][ T9376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.764403][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'.
[  118.789738][ T9385] netlink: 'syz.1.1137': attribute type 8 has an invalid length.
[  118.856963][ T9387] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  118.905242][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'.
[  118.977174][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  118.980503][ T9398] netlink: 'syz.1.1142': attribute type 5 has an invalid length.
[  118.984164][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'.
[  118.996858][ T9398] geneve3: entered promiscuous mode
[  118.999095][ T9398] geneve3: entered allmulticast mode
[  119.003213][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  119.007061][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  119.010856][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  119.015097][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  119.035848][ T9400] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  119.038963][ T9400] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  119.555723][ T9459] syzkaller1: entered promiscuous mode
[  119.557593][ T9459] syzkaller1: entered allmulticast mode
[  119.625316][ T9462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1161'.
[  119.686648][ T9462] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  119.926252][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'.
[  120.078113][ T9481] netlink: 'syz.1.1167': attribute type 3 has an invalid length.
[  120.080871][ T9481] netlink: 'syz.1.1167': attribute type 3 has an invalid length.
[  120.083735][ T9481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1167'.
[  120.088131][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'.
[  120.116366][ T9481] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  120.120697][ T9481] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  120.219042][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  120.669753][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.010145][ T9500] netlink: 'syz.0.1172': attribute type 2 has an invalid length.
[  121.015435][ T9500] netlink: 'syz.0.1172': attribute type 1 has an invalid length.
[  121.302266][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'.
[  122.196044][ T9567] veth7: entered promiscuous mode
[  122.458506][ T9582] syzkaller0: entered promiscuous mode
[  122.460843][ T9582] syzkaller0: entered allmulticast mode
[  124.018996][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.025548][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.030824][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.036071][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.041030][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.047837][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.052795][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.058714][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.064702][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.104200][ T9620] TCP: TCP_TX_DELAY enabled
[  125.108894][ T9620] __nla_validate_parse: 8 callbacks suppressed
[  125.108907][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'.
[  125.461467][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  125.477661][ T9651] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1219'.
[  125.499693][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[  125.558596][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'.
[  125.658238][ T9669] validate_nla: 1 callbacks suppressed
[  125.658252][ T9669] netlink: 'syz.0.1224': attribute type 1 has an invalid length.
[  125.773023][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'.
[  125.785651][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  125.807407][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  125.837126][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'.
[  125.896022][ T9686] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  125.940115][ T9691] netlink: 'syz.1.1229': attribute type 1 has an invalid length.
[  125.948499][ T9691] netlink: 'syz.1.1229': attribute type 2 has an invalid length.
[  126.615027][ T9696] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  126.904049][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'.
[  127.610799][ T9740] netlink: 'syz.1.1248': attribute type 2 has an invalid length.
[  128.054900][ T9784] netlink: 'syz.0.1261': attribute type 1 has an invalid length.
[  128.329884][ T9808] netlink: 'syz.0.1268': attribute type 1 has an invalid length.
[  128.365685][ T9808] bond9: entered promiscuous mode
[  128.368468][ T9808] 8021q: adding VLAN 0 to HW filter on device bond9
[  128.391280][ T9808] bond9: (slave bridge7): making interface the new active one
[  128.394664][ T9808] bridge7: entered promiscuous mode
[  128.397292][ T9808] bond9: (slave bridge7): Enslaving as an active interface with an up link
[  128.451614][ T9827] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  128.472088][ T9827] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  128.480038][ T9827] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  128.668037][ T9834] netlink: 'syz.2.1276': attribute type 1 has an invalid length.
[  129.084996][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.181107][ T9880] team0: Device sit2 is of different type
[  129.250447][ T9889] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  129.329312][ T9893] bond0: entered promiscuous mode
[  129.331447][ T9893] bond_slave_0: entered promiscuous mode
[  129.335584][ T9893] bond_slave_1: entered promiscuous mode
[  129.338088][ T9893] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  129.341985][ T9893] bond0: left promiscuous mode
[  129.345224][ T9893] bond_slave_0: left promiscuous mode
[  129.347560][ T9893] bond_slave_1: left promiscuous mode
[  129.349947][ T9893] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  130.322301][ T9965] __nla_validate_parse: 15 callbacks suppressed
[  130.322346][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'.
[  130.355431][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'.
[  130.362781][ T9967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1315'.
[  130.628684][ T9984] net_ratelimit: 1 callbacks suppressed
[  130.628693][ T9984] openvswitch: netlink: IPv4 tun info is not correct
[  131.278192][ T9996] sctp: [Deprecated]: syz.0.1323 (pid 9996) Use of int in max_burst socket option.
[  131.278192][ T9996] Use struct sctp_assoc_value instead
[  131.283213][   T55] Bluetooth: hci0: command tx timeout
[  131.398403][T10002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1326'.
[  131.528780][T10012] 8021q: adding VLAN 0 to HW filter on device bond9
[  131.537412][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'.
[  131.544640][T10012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1329'.
[  131.577365][T10019] netlink: 'syz.0.1331': attribute type 1 has an invalid length.
[  131.580937][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'.
[  131.594086][T10022] vxcan1: entered allmulticast mode
[  131.596575][T10022] vxcan1: left allmulticast mode
[  131.702354][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'.
[  131.851884][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  131.857325][T10049] netlink: 'syz.2.1340': attribute type 10 has an invalid length.
[  131.878202][T10051] 8021q: adding VLAN 0 to HW filter on device bond10
[  131.883116][T10049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.890669][T10049] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.474824][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.789973][T10071] sctp: [Deprecated]: syz.1.1345 (pid 10071) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.789973][T10071] Use struct sctp_sack_info instead
[  132.848740][T10075] netlink: 'syz.2.1346': attribute type 12 has an invalid length.
[  132.851991][T10075] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1346'.
[  132.915850][T10083] netlink: 'syz.0.1350': attribute type 6 has an invalid length.
[  132.926681][T10083] netlink: 'syz.0.1350': attribute type 2 has an invalid length.
[  132.928878][T10077] netlink: ct family unspecified
[  132.931328][T10077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.029123][T10091] netlink: 'syz.0.1353': attribute type 6 has an invalid length.
[  133.138329][T10087] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  134.122233][T10120] syzkaller0: entered promiscuous mode
[  134.124438][T10120] syzkaller0: entered allmulticast mode
[  134.358495][T10164] openvswitch: netlink: EtherType 0 is less than min 600
[  134.440513][T10169] openvswitch: netlink: Flow actions attr not present in new flow.
[  134.454541][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.569024][T10188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.584469][T10187] tipc: Disabling bearer <eth:syzkaller0>
[  134.665121][T10195] syzkaller1: entered promiscuous mode
[  134.667661][T10195] syzkaller1: entered allmulticast mode
[  134.744519][T10198] syzkaller1: entered promiscuous mode
[  134.746404][T10198] syzkaller1: entered allmulticast mode
[  135.072107][T10229] tipc: Enabled bearer <eth:team0>, priority 0
[  135.170383][T10236] netlink: 'syz.1.1398': attribute type 3 has an invalid length.
[  135.204412][T10244] tap0: tun_chr_ioctl cmd 1074025677
[  135.207225][T10244] tap0: linktype set to 825
[  135.386534][T10261] __nla_validate_parse: 21 callbacks suppressed
[  135.386545][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'.
[  135.447078][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'.
[  135.652005][T10286] wireguard0: entered promiscuous mode
[  135.654342][T10286] wireguard0: entered allmulticast mode
[  135.657860][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'.
[  136.336190][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  136.339857][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'.
[  136.344125][T10292] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  136.347338][T10292] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1418'.
[  136.382209][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  136.547672][T10313] lo speed is unknown, defaulting to 1000
[  136.557520][T10313] lo speed is unknown, defaulting to 1000
[  136.565647][T10313] lo speed is unknown, defaulting to 1000
[  136.573538][T10313] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.586183][T10313] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  136.600061][T10320] netlink: 'syz.2.1426': attribute type 8 has an invalid length.
[  136.604006][T10313] lo speed is unknown, defaulting to 1000
[  136.610106][T10313] lo speed is unknown, defaulting to 1000
[  136.623159][T10313] lo speed is unknown, defaulting to 1000
[  136.635238][T10320] netlink: 'syz.2.1426': attribute type 4 has an invalid length.
[  136.731412][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'.
[  136.740328][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'.
[  136.942677][T10368] bond0: (slave wlan1): Releasing backup interface
[  136.969058][T10370] netlink: 'syz.0.1444': attribute type 3 has an invalid length.
[  136.972144][T10370] netlink: 'syz.0.1444': attribute type 3 has an invalid length.
[  136.994384][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'.
[  136.997829][T10370] chnl_net:caif_netlink_parms(): no params data found
[  137.067896][T10380] netlink: 'syz.1.1448': attribute type 4 has an invalid length.
[  137.079145][T10380] netlink: 'syz.1.1448': attribute type 4 has an invalid length.
[  137.252169][T10395] bridge0: port 1(veth0_to_team) entered blocking state
[  137.256312][T10395] bridge0: port 1(veth0_to_team) entered disabled state
[  137.259824][T10395] veth0_to_team: entered allmulticast mode
[  137.264140][T10395] veth0_to_team: entered promiscuous mode
[  137.464595][T10412] netlink: 'syz.2.1460': attribute type 10 has an invalid length.
[  137.470704][T10412] bridge0: port 4(macsec0) entered blocking state
[  137.477278][T10412] bridge0: port 4(macsec0) entered disabled state
[  137.479993][T10412] macsec0: entered allmulticast mode
[  137.482051][T10412] veth1_macvtap: entered allmulticast mode
[  137.485139][T10412] macsec0: entered promiscuous mode
[  137.516031][T10420] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  137.527861][T10416] lo speed is unknown, defaulting to 1000
[  137.855536][T10436] lo speed is unknown, defaulting to 1000
[  138.278588][T10467] netlink: 'syz.2.1476': attribute type 2 has an invalid length.
[  138.408321][T10484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.465289][T10496] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.469142][T10496] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  138.824095][T10519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.956522][T10542] lo speed is unknown, defaulting to 1000
[  139.009266][T10546] netlink: 'syz.1.1501': attribute type 3 has an invalid length.
[  139.249146][T10563] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  139.256003][T10563] team0: left allmulticast mode
[  139.257800][T10563] team_slave_0: left allmulticast mode
[  139.259711][T10563] team_slave_1: left allmulticast mode
[  139.261978][T10563] team0: left promiscuous mode
[  139.267933][T10563] team_slave_0: left promiscuous mode
[  139.270041][T10563] team_slave_1: left promiscuous mode
[  139.272098][T10563] bridge0: port 3(team0) entered disabled state
[  139.280740][T10563] batman_adv: batadv0: Removing interface: dummy0
[  139.287099][T10563] bond0: (slave batadv0): Releasing backup interface
[  139.296427][T10563] bridge_slave_0: left allmulticast mode
[  139.300412][T10563] bridge_slave_0: left promiscuous mode
[  139.302518][T10563] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.315881][T10563] bridge_slave_1: left allmulticast mode
[  139.317914][T10563] bridge_slave_1: left promiscuous mode
[  139.320527][T10563] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.325160][T10563] veth0_to_bond: left allmulticast mode
[  139.327045][T10563] veth0_to_bond: left promiscuous mode
[  139.328989][T10563] bridge4: port 2(veth0_to_bond) entered disabled state
[  139.334411][T10563] bond0: (slave bond_slave_0): Releasing backup interface
[  139.340114][T10563] bond0: (slave bond_slave_1): Releasing backup interface
[  139.344590][T10563] team0: Port device team_slave_0 removed
[  139.349747][T10563] team0: Port device team_slave_1 removed
[  139.351827][T10563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.356966][T10563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.360223][T10563] macsec0: left allmulticast mode
[  139.361072][T10574] netlink: 'syz.2.1509': attribute type 10 has an invalid length.
[  139.362043][T10563] veth1_macvtap: left allmulticast mode
[  139.367716][T10563] macsec0: left promiscuous mode
[  139.369753][T10563] bridge0: port 4(macsec0) entered disabled state
[  139.376652][T10563] bond0: (slave wlan1): Releasing backup interface
[  139.381318][T10563] batman_adv: batadv0: Removing interface: ip6gretap1
[  139.386765][T10563] bond4: (slave geneve3): Releasing active interface
[  139.390534][T10563] bond7: (slave bridge2): Releasing backup interface
[  139.393970][T10563] veth5: left allmulticast mode
[  139.395553][T10563] veth5: left promiscuous mode
[  139.397240][T10563] bridge4: port 1(veth5) entered disabled state
[  139.400901][T10563] vlan2: left allmulticast mode
[  139.402849][T10563] veth1: left allmulticast mode
[  139.404497][T10563] vlan2: left promiscuous mode
[  139.406101][T10563] veth1: left promiscuous mode
[  139.407909][T10563] bridge4: port 3(vlan2) entered disabled state
[  139.414377][T10574] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  139.416781][T10574] bond0: (slave wlan1): refused to change device type
[  139.462331][T10573] 8021q: adding VLAN 0 to HW filter on device bond11
[  139.467326][T10563] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.475155][T10563] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.477576][T10573] bond11: (slave ip6gretap1): making interface the new active one
[  139.484299][T10573] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  139.499468][T10573] veth11: entered promiscuous mode
[  139.503750][T10573] bond11: (slave veth11): Enslaving as an active interface with a down link
[  139.510021][T10581] syzkaller1: entered allmulticast mode
[  139.513892][T10573] erspan0: entered allmulticast mode
[  139.520059][T10573] bond11: (slave erspan0): Enslaving as an active interface with an up link
[  139.711918][T10598] Bluetooth: MGMT ver 1.23
[  139.965837][T10609] lo speed is unknown, defaulting to 1000
[  140.035739][T10612] lo speed is unknown, defaulting to 1000
[  140.229211][T10624] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  140.340478][T10634] netpci0: tun_chr_ioctl cmd 2147767507
[  140.439178][T10639] __nla_validate_parse: 15 callbacks suppressed
[  140.439188][T10639] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1534'.
[  140.474810][T10645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.479030][T10641] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  140.510944][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'.
[  140.620562][T10653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.674634][T10653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.700186][T10675] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  140.714297][T10653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.724609][T10675] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[  140.729586][T10675] bond3 (unregistering): Released all slaves
[  140.768986][T10653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.859940][ T5690] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.876012][ T5690] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.885898][ T5690] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.896589][ T5690] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.954037][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'.
[  140.968619][T10692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1547'.
[  140.973743][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'.
[  140.979233][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'.
[  140.983040][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'.
[  141.039066][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'.
[  141.847851][T10718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1556'.
[  142.102829][ T5904] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  142.861866][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  143.031212][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.072867][T10771] lo speed is unknown, defaulting to 1000
[  143.076324][T10771] lo speed is unknown, defaulting to 1000
[  143.079419][T10771] lo speed is unknown, defaulting to 1000
[  143.095179][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.153450][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.161864][T10772] 8021q: adding VLAN 0 to HW filter on device team0
[  143.168961][T10772] tipc: Resetting bearer <eth:team0>
[  143.172193][T10772] tipc: Resetting bearer <eth:team0>
[  143.179312][T10772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.188105][  T975] lo speed is unknown, defaulting to 1000
[  143.194337][  T975] syz2: Port: 1 Link ACTIVE
[  143.223579][T10771] infiniband syz0: set active
[  143.225487][    T9] lo speed is unknown, defaulting to 1000
[  143.227463][    T9] syz0: Port: 1 Link ACTIVE
[  143.229354][T10771] infiniband syz0: added lo
[  143.254771][T10771] RDS/IB: syz0: added
[  143.258543][T10771] smc: adding ib device syz0 with port count 1
[  143.260828][T10771] smc:    ib device syz0 port 1 has pnetid SYZ1 (user defined)
[  143.264760][    T9] lo speed is unknown, defaulting to 1000
[  143.267546][T10771] lo speed is unknown, defaulting to 1000
[  143.369263][T10771] lo speed is unknown, defaulting to 1000
[  143.466671][T10771] lo speed is unknown, defaulting to 1000
[  143.567763][T10772] syz.2.1574 (10772) used greatest stack depth: 19232 bytes left
[  143.660054][T10778] 8021q: VLANs not supported on ip6tnl0
[  143.736593][T10783] lo speed is unknown, defaulting to 1000
[  143.745012][T10783] lo speed is unknown, defaulting to 1000
[  144.625820][T10852] nbd: device at index 1 is going down
[  144.629803][T10852] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.755997][T10862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.810895][T10862] validate_nla: 3 callbacks suppressed
[  144.810910][T10862] netlink: 'syz.0.1604': attribute type 4 has an invalid length.
[  145.116543][   T33] audit: type=1804 audit(1756817681.569:2): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1612" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2580 res=1 errno=0
[  145.127916][   T33] audit: type=1800 audit(1756817681.569:3): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1612" name="cgroup.controllers" dev="tmpfs" ino=2580 res=0 errno=0
[  145.230391][   T33] audit: type=1800 audit(1756817681.679:4): pid=10893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1615" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2586 res=0 errno=0
[  145.289624][T10894] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  145.300506][   T33] audit: type=1800 audit(1756817681.749:5): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1616" name=CB dev="tmpfs" ino=2593 res=0 errno=0
[  145.468770][T10906] netlink: 'syz.1.1621': attribute type 1 has an invalid length.
[  145.486584][T10908] bridge7: entered allmulticast mode
[  145.577189][T10911] __nla_validate_parse: 15 callbacks suppressed
[  145.577205][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'.
[  145.775607][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'.
[  145.781198][T10919] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  145.817476][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'.
[  145.910634][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'.
[  145.914580][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1632'.
[  146.030405][T10952] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1637'.
[  146.062619][T10956] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  146.094433][   T33] audit: type=1107 audit(1756817682.549:6): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  146.095099][T10956] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1639'.
[  146.177318][T10967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.180423][T10967] syzkaller0: entered promiscuous mode
[  146.185314][T10967] syzkaller0: entered allmulticast mode
[  146.187754][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'.
[  146.194875][T10967] tipc: Resetting bearer <eth:syzkaller0>
[  146.201131][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  146.205903][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  146.209890][T10966] tipc: Resetting bearer <eth:syzkaller0>
[  146.225166][T10966] tipc: Disabling bearer <eth:syzkaller0>
[  146.285761][T10978] vxcan1: entered allmulticast mode
[  146.287966][T10979] vxcan1: left allmulticast mode
[  146.510165][T11012] netlink: 'syz.2.1657': attribute type 1 has an invalid length.
[  146.531503][T11012] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.560251][T11019] : entered promiscuous mode
[  146.572876][T11019] syzkaller1: entered promiscuous mode
[  146.575239][T11019] syzkaller1: entered allmulticast mode
[  146.663910][T11022] netlink: 'syz.1.1660': attribute type 6 has an invalid length.
[  146.671666][T11023] delete_channel: no stack
[  146.754155][T11030] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  146.963761][T11045] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  147.452126][T11069] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.546654][T11072] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  147.929142][T11098] netlink: 'syz.0.1688': attribute type 4 has an invalid length.
[  148.151924][T11102] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  148.568780][T11143] netlink: 'syz.1.1705': attribute type 32 has an invalid length.
[  148.815164][T11161] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003
[  148.928548][T11168] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  149.300722][T11195] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  149.306082][T11195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.355824][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.576336][T11216] netlink: 'syz.0.1730': attribute type 2 has an invalid length.
[  149.586441][T11217] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  149.594520][T11216] netlink: 'syz.0.1730': attribute type 2 has an invalid length.
[  149.765099][T11231] netlink: 'syz.2.1736': attribute type 2 has an invalid length.
[  149.912131][T11231] k*]: entered promiscuous mode
[  149.917894][T11234] netlink: 'syz.1.1734': attribute type 3 has an invalid length.
[  149.929050][T11235] tipc: Resetting bearer <eth:team0>
[  149.934766][T11235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.942111][T11236] pim6reg1: entered promiscuous mode
[  149.946782][T11236] pim6reg1: entered allmulticast mode
[  149.949535][ T5890] lo speed is unknown, defaulting to 1000
[  149.985918][T11231] veth0_to_team: entered promiscuous mode
[  149.987963][T11231] veth0_to_team: entered allmulticast mode
[  150.343112][T11282] netlink: 'syz.0.1753': attribute type 7 has an invalid length.
[  150.367168][T11286] IPv6: addrconf: prefix option has invalid lifetime
[  150.396851][T11293] netlink: 'syz.1.1749': attribute type 21 has an invalid length.
[  150.399385][T11293] netlink: 'syz.1.1749': attribute type 22 has an invalid length.
[  150.402042][T11293] netlink: 'syz.1.1749': attribute type 23 has an invalid length.
[  150.588378][T11304] netlink: 'syz.0.1760': attribute type 1 has an invalid length.
[  150.590289][T11310] __nla_validate_parse: 46 callbacks suppressed
[  150.590299][T11310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'.
[  150.598326][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'.
[  150.602237][T11310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'.
[  150.606104][T11310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'.
[  150.824233][T11334] netlink: 'syz.0.1767': attribute type 29 has an invalid length.
[  150.828020][T11334] netlink: 'syz.0.1767': attribute type 29 has an invalid length.
[  150.831555][T11334] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1767'.
[  150.838013][T11335] netlink: 'syz.0.1767': attribute type 29 has an invalid length.
[  150.901966][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  150.952514][   T55] Bluetooth: hci0: command tx timeout
[  151.149861][T11362] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.159192][T11362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  151.175587][ T5890] hid-generic 0005:0C45:0009.0001: unknown main item tag 0x0
[  151.185212][ T5890] hid-generic 0005:0C45:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  151.240487][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  151.377767][   T33] audit: type=1107 audit(1756817687.819:7): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y~T_sQv_qŎPC-6	H+:CƄmL]M"GPn o]|dϝь1KpGmF2IBhHdFo?R*XzB`PyHK^jβ
[  151.377767][   T33] P[FIE*:_.5brlvԧj	D]'
[  151.501802][T11397] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1783'.
[  151.512074][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'.
[  151.634706][T11401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1785'.
[  151.650808][T11404] netlink: 'syz.0.1786': attribute type 4 has an invalid length.
[  151.795526][T11423] xt_HMARK: proto mask must be zero with L3 mode
[  151.894012][T11440] vlan0: entered promiscuous mode
[  151.929899][T11440] syzkaller0: create flow: hash 2827808785 index 1
[  151.955184][T11440] syzkaller0: delete flow: hash 2827808785 index 1
[  151.997768][T11434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.534773][T11458] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  154.056369][T11497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  154.878130][T11539] syzkaller1: entered promiscuous mode
[  154.895904][T11539] syzkaller1: entered allmulticast mode
[  154.906803][T11539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.007076][T11539] tipc: Disabling bearer <eth:syzkaller0>
[  155.513587][T11564] validate_nla: 3 callbacks suppressed
[  155.513597][T11564] netlink: 'syz.2.1833': attribute type 6 has an invalid length.
[  155.578323][T11566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.586231][T11566] netlink: 'syz.2.1834': attribute type 1 has an invalid length.
[  155.638647][T11567] __nla_validate_parse: 17 callbacks suppressed
[  155.638658][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'.
[  155.655516][T11567] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  155.662244][T11565] tipc: Disabling bearer <eth:syzkaller0>
[  155.752134][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'.
[  155.912850][T11596] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1841'.
[  155.956796][T11599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.960525][T11599] syzkaller0: entered promiscuous mode
[  155.967323][T11599] syzkaller0: entered allmulticast mode
[  156.021578][T11599] tipc: Resetting bearer <eth:syzkaller0>
[  156.028598][T11598] tipc: Resetting bearer <eth:syzkaller0>
[  156.039730][T11598] tipc: Disabling bearer <eth:syzkaller0>
[  156.167490][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  156.177105][T11611] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  156.183870][T11616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1849'.
[  156.681623][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.743221][T11640] netlink: 'syz.1.1856': attribute type 1 has an invalid length.
[  156.775611][T11640] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.824839][T11639] bond4: (slave gretap3): making interface the new active one
[  156.835882][T11639] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  156.878138][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'.
[  156.959176][T11647] ieee802154 phy0 wpan0: encryption failed: -22
[  156.996044][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'.
[  157.043762][T11654] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1860'.
[  157.048984][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'.
[  157.049301][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  157.152271][T11664] syzkaller1: entered promiscuous mode
[  157.157381][T11664] syzkaller1: entered allmulticast mode
[  157.161265][T11664] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  157.304232][T11675] netlink: 'syz.0.1867': attribute type 7 has an invalid length.
[  157.329183][T11675] 8021q: adding VLAN 0 to HW filter on device bond14
[  157.402196][T11675] bond14 (unregistering): Released all slaves
[  158.447487][T11723] netlink: 'syz.0.1880': attribute type 3 has an invalid length.
[  158.450854][T11723] netlink: 'syz.0.1880': attribute type 3 has an invalid length.
[  158.457304][T11723] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  158.461325][T11723] netlink: 'syz.0.1880': attribute type 3 has an invalid length.
[  158.464697][T11723] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  158.467912][T11723] netlink: 'syz.0.1880': attribute type 3 has an invalid length.
[  158.992330][T11763] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  158.996991][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.369054][T11776] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  159.764628][T11799] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  159.882260][T11811] IPv6: NLM_F_CREATE should be specified when creating new route
[  159.886076][T11811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.888622][T11811] IPv6: NLM_F_CREATE should be set when creating new route
[  159.891327][T11811] IPv6: NLM_F_CREATE should be set when creating new route
[  159.893996][T11811] IPv6: NLM_F_CREATE should be set when creating new route
[  160.632759][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  160.893430][T11835] __nla_validate_parse: 23 callbacks suppressed
[  160.893446][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'.
[  160.915092][T11835] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  160.920217][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'.
[  161.010261][T11848] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  161.084461][T11843] delete_channel: no stack
[  161.111520][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'.
[  161.141550][T11857] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1920'.
[  161.249711][T11869] validate_nla: 1 callbacks suppressed
[  161.249727][T11869] netlink: 'syz.0.1924': attribute type 12 has an invalid length.
[  161.571159][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'.
[  161.594448][T11888] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1932'.
[  161.600244][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'.
[  161.682440][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  161.827198][T11901] openvswitch: netlink: IPv4 tunnel dst address is zero
[  161.830903][T11901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.873019][T11901] syzkaller0: entered promiscuous mode
[  161.875471][T11901] syzkaller0: entered allmulticast mode
[  161.878536][T11901] tipc: Resetting bearer <eth:syzkaller0>
[  161.896164][T11900] tipc: Resetting bearer <eth:syzkaller0>
[  162.722500][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.892849][ T5962] tipc: Node number set to 3378822700
[  162.913136][T11900] tipc: Disabling bearer <eth:syzkaller0>
[  162.929682][T11916] ip6erspan0: entered allmulticast mode
[  162.943336][T11915] lo speed is unknown, defaulting to 1000
[  162.948397][T11915] lo speed is unknown, defaulting to 1000
[  163.148744][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'.
[  163.361923][T11947] tipc: Can't bind to reserved service type 1
[  163.694999][T11967] lo speed is unknown, defaulting to 1000
[  163.762456][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.050895][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'.
[  164.060208][T11975] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  164.242278][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'.
[  164.270390][T11988] netlink: 'syz.1.1962': attribute type 10 has an invalid length.
[  164.450090][T12005] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  164.456072][T12005] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  164.496640][T12012] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.669192][T12029] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  164.792636][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.830391][T12042] netlink: 'syz.2.1981': attribute type 3 has an invalid length.
[  164.940096][T12058] vlan3: entered promiscuous mode
[  164.942122][T12058] bond0: entered promiscuous mode
[  164.945333][T12058] vlan3: entered allmulticast mode
[  164.948356][T12058] bond0: entered allmulticast mode
[  165.360806][T12108] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  165.374946][T12108] veth1_to_bond: entered allmulticast mode
[  165.417723][T12108] veth1_to_bond (unregistering): left allmulticast mode
[  165.501652][T12120] netlink: 'syz.1.2003': attribute type 13 has an invalid length.
[  165.693673][ T5904] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.699432][ T5904] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.704263][ T5904] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  165.707314][ T5904] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.710422][ T5904] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.714071][ T5904] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  165.717642][ T5904] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.723827][ T5904] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.736601][ T5904] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  165.740022][T12125] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  165.740681][ T5904] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.755393][ T5904] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.759689][ T5904] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  165.832555][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  165.980960][T12142] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  166.007073][T12146] __nla_validate_parse: 19 callbacks suppressed
[  166.007083][T12146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2013'.
[  166.107557][T12159] syzkaller1: entered promiscuous mode
[  166.109861][T12159] syzkaller1: entered allmulticast mode
[  166.147150][T12167] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.151178][T12167] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.157861][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.165667][T12167] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.169028][T12167] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.174608][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2019'.
[  166.236041][T12171] delete_channel: no stack
[  166.450457][T12186] lo speed is unknown, defaulting to 1000
[  166.463098][T12189] netlink: 'syz.1.2027': attribute type 5 has an invalid length.
[  166.569001][T12192] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  166.698533][ T5904] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.701964][ T5904] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.714005][ T5904] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.717454][ T5904] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.882502][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.670475][T12243] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2042'.
[  167.680754][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'.
[  167.879513][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  167.912511][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  168.429233][T12297] bond0: entered promiscuous mode
[  168.433312][T12297] bond0: left promiscuous mode
[  168.952498][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  169.006824][T12308] mac80211_hwsim hwsim2 ;: renamed from wlan0
[  169.218628][T12318] netlink: 'syz.2.2070': attribute type 16 has an invalid length.
[  169.322476][T12320] tipc: Resetting bearer <eth:team0>
[  169.408361][T12320] tipc: Resetting bearer <eth:team0>
[  169.410778][T12320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.471111][T12323] netlink: 'syz.2.2072': attribute type 1 has an invalid length.
[  169.475001][T12323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.992774][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  170.404024][T12349] netlink: 'syz.0.2081': attribute type 8 has an invalid length.
[  170.452096][T12351] netlink: 'syz.0.2082': attribute type 29 has an invalid length.
[  170.456946][T12351] netlink: 'syz.0.2082': attribute type 29 has an invalid length.
[  171.032727][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.047074][T12399] v: renamed from ip6_vti0 (while UP)
[  171.451421][T12409] netlink: 'syz.1.2102': attribute type 1 has an invalid length.
[  171.471929][T12409] 8021q: adding VLAN 0 to HW filter on device bond5
[  171.531829][T12413] __nla_validate_parse: 15 callbacks suppressed
[  171.531842][T12413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2102'.
[  171.547393][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'.
[  171.814352][T12420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2104'.
[  171.818496][T12420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2104'.
[  171.955402][T12429] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2106'.
[  171.973105][T12422] macsec2: entered promiscuous mode
[  171.990951][T12427] bond0: Device is already in use.
[  172.073483][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  172.088966][T12437] syzkaller1: entered promiscuous mode
[  172.091384][T12437] syzkaller1: entered allmulticast mode
[  172.194450][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'.
[  172.197907][T12450] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  172.201868][T12450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.357288][T12464] lo speed is unknown, defaulting to 1000
[  172.591517][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2125'.
[  172.591565][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2125'.
[  172.613936][T12487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.661825][T12487] syzkaller0: entered promiscuous mode
[  172.664065][T12487] syzkaller0: entered allmulticast mode
[  172.672612][T12491] netlink: 'syz.2.2126': attribute type 7 has an invalid length.
[  173.122565][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.712858][T12494] tipc: Resetting bearer <eth:syzkaller0>
[  173.724175][T12494] tipc: Resetting bearer <eth:syzkaller0>
[  173.734349][T12494] tipc: Disabling bearer <eth:syzkaller0>
[  173.737270][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'.
[  173.775515][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'.
[  173.967184][T12514] atomic_op ffff88802e7b6998 conn xmit_atomic 0000000000000000
[  174.025991][T12517] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  174.067578][T12526] netlink: 'syz.0.2139': attribute type 9 has an invalid length.
[  174.152454][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  174.288010][T12539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.289341][T12540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.299136][T12540] syzkaller0: entered promiscuous mode
[  174.301269][T12540] syzkaller0: entered allmulticast mode
[  174.347925][T12540] tipc: Resetting bearer <eth:syzkaller0>
[  174.353730][T12538] tipc: Resetting bearer <eth:syzkaller0>
[  174.362833][T12538] tipc: Disabling bearer <eth:syzkaller0>
[  174.554740][T12553] netlink: 'syz.0.2152': attribute type 1 has an invalid length.
[  174.813386][T12578] netlink: 'syz.0.2160': attribute type 32 has an invalid length.
[  174.816747][T12578] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16)
[  174.867036][T12582] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  174.904011][T12592] netlink: 'syz.0.2164': attribute type 21 has an invalid length.
[  175.192552][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  175.226906][T12615] netlink: 'syz.1.2172': attribute type 21 has an invalid length.
[  175.346404][T12629] 0: renamed from hsr0
[  175.351232][T12629] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.356562][T12629] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.360907][T12629] 0: entered allmulticast mode
[  175.365190][T12629] hsr_slave_0: entered allmulticast mode
[  175.368825][T12629] hsr_slave_1: entered allmulticast mode
[  175.372092][T12629] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  175.507863][T12644] tun0: tun_chr_ioctl cmd 1074025672
[  175.509680][T12644] tun0: ignored: set checksum disabled
[  175.700430][T12668] netlink: 'syz.0.2192': attribute type 1 has an invalid length.
[  175.705154][T12668] netlink: 'syz.0.2192': attribute type 1 has an invalid length.
[  175.709875][T12666] bpq0: entered promiscuous mode
[  175.742005][T12673] sctp: [Deprecated]: syz.0.2194 (pid 12673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.742005][T12673] Use struct sctp_sack_info instead
[  175.876583][T12687] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  175.972323][T12695] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  176.023487][T12695] bond16: (slave gretap3): making interface the new active one
[  176.026490][T12695] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  176.232575][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.293249][T12720] netlink: 'syz.0.2213': attribute type 10 has an invalid length.
[  176.358042][T12728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.360785][T12728] syzkaller0: entered promiscuous mode
[  176.364954][T12728] syzkaller0: entered allmulticast mode
[  176.378675][T12728] tipc: Resetting bearer <eth:syzkaller0>
[  176.382016][T12727] tipc: Resetting bearer <eth:syzkaller0>
[  176.403083][T12727] tipc: Disabling bearer <eth:syzkaller0>
[  176.504863][T12734] team0: Mode changed to "loadbalance"
[  176.624329][T12762] __nla_validate_parse: 18 callbacks suppressed
[  176.624346][T12762] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2227'.
[  176.690740][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  176.715774][T12775] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2231'.
[  176.776056][T12788] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2236'.
[  176.935843][T12811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2245'.
[  176.938829][T12811] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2245'.
[  176.967958][T12812] : renamed from vlan1
[  176.999610][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'.
[  177.056949][T12822] pimreg: left allmulticast mode
[  177.081525][T12823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.168239][T12834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'.
[  177.199004][T12838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2257'.
[  177.256962][T12845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2259'.
[  177.272625][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.405484][T12861] erspan0: left allmulticast mode
[  177.453122][T12861] 8021q: adding VLAN 0 to HW filter on device team0
[  177.468826][T12861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.506156][T12857] lo speed is unknown, defaulting to 1000
[  177.629966][T12887] Unsupported ieee802154 address type: 0
[  177.735422][T12892] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.750732][T12896] validate_nla: 5 callbacks suppressed
[  177.750748][T12896] netlink: 'syz.0.2273': attribute type 1 has an invalid length.
[  177.872082][T12908] syz.2.2276: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  177.879505][T12909] pim6reg: entered allmulticast mode
[  177.881354][T12913] pim6reg: left allmulticast mode
[  177.888820][T12908] CPU: 1 UID: 0 PID: 12908 Comm: syz.2.2276 Not tainted syzkaller #0 PREEMPT(full) 
[  177.888832][T12908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.888836][T12908] Call Trace:
[  177.888839][T12908]  <TASK>
[  177.888843][T12908]  dump_stack_lvl+0x189/0x250
[  177.888857][T12908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.888866][T12908]  ? __pfx__printk+0x10/0x10
[  177.888875][T12908]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  177.888884][T12908]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  177.888892][T12908]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  177.888901][T12908]  warn_alloc+0x214/0x310
[  177.888930][T12908]  ? __pfx_warn_alloc+0x10/0x10
[  177.888945][T12908]  ? __get_vm_area_node+0x28f/0x300
[  177.888954][T12908]  ? xskq_create+0xbf/0x170
[  177.888963][T12908]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  177.888984][T12908]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  177.888996][T12908]  ? __kasan_kmalloc+0x93/0xb0
[  177.889006][T12908]  vmalloc_user_noprof+0xad/0xf0
[  177.889016][T12908]  ? xskq_create+0xbf/0x170
[  177.889022][T12908]  xskq_create+0xbf/0x170
[  177.889029][T12908]  xsk_init_queue+0xb0/0x110
[  177.889040][T12908]  xsk_setsockopt+0x57b/0x8d0
[  177.889051][T12908]  ? __pfx_xsk_setsockopt+0x10/0x10
[  177.889060][T12908]  ? __pfx_aa_sk_perm+0x10/0x10
[  177.889071][T12908]  ? __fget_files+0x2a/0x420
[  177.889077][T12908]  ? aa_sock_opt_perm+0xff/0x1b0
[  177.889084][T12908]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  177.889092][T12908]  ? __pfx_xsk_setsockopt+0x10/0x10
[  177.889102][T12908]  do_sock_setsockopt+0x17c/0x1b0
[  177.889112][T12908]  __x64_sys_setsockopt+0x13f/0x1b0
[  177.889121][T12908]  do_syscall_64+0xfa/0x3b0
[  177.889127][T12908]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.889134][T12908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.889141][T12908]  ? exc_page_fault+0x9f/0xf0
[  177.889148][T12908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.889154][T12908] RIP: 0033:0x7fe62698ebe9
[  177.889161][T12908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.889167][T12908] RSP: 002b:00007fe627772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  177.889176][T12908] RAX: ffffffffffffffda RBX: 00007fe626bc5fa0 RCX: 00007fe62698ebe9
[  177.889187][T12908] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  177.889191][T12908] RBP: 00007fe626a11e19 R08: 0000000000000004 R09: 0000000000000000
[  177.889195][T12908] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  177.889199][T12908] R13: 00007fe626bc6038 R14: 00007fe626bc5fa0 R15: 00007ffeb45872b8
[  177.889210][T12908]  </TASK>
[  177.889250][T12908] Mem-Info:
[  177.983072][T12908] active_anon:7115 inactive_anon:0 isolated_anon:0
[  177.983072][T12908]  active_file:1577 inactive_file:38274 isolated_file:0
[  177.983072][T12908]  unevictable:1768 dirty:250 writeback:0
[  177.983072][T12908]  slab_reclaimable:10520 slab_unreclaimable:100981
[  177.983072][T12908]  mapped:18393 shmem:2445 pagetables:1022
[  177.983072][T12908]  sec_pagetables:0 bounce:0
[  177.983072][T12908]  kernel_misc_reclaimable:0
[  177.983072][T12908]  free:243318 free_pcp:19171 free_cma:0
[  177.999149][T12908] Node 0 active_anon:12108kB inactive_anon:0kB active_file:1888kB inactive_file:11744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27564kB dirty:420kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5276kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  178.010637][T12908] Node 1 active_anon:16352kB inactive_anon:0kB active_file:4420kB inactive_file:141352kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46008kB dirty:580kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7316kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  178.020955][T12908] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  178.030714][T12908] lowmem_reserve[]: 0 811 811 811 811
[  178.033204][T12908] Node 0 DMA32 free:379944kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12108kB inactive_anon:0kB active_file:1888kB inactive_file:11744kB unevictable:3536kB writepending:420kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:32532kB local_pcp:15932kB free_cma:0kB
[  178.044333][T12908] lowmem_reserve[]: 0 0 0 0 0
[  178.045950][T12908] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  178.055863][T12908] lowmem_reserve[]: 0 0 854 854 854
[  178.057609][T12908] Node 1 Normal free:119352kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16352kB inactive_anon:0kB active_file:4420kB inactive_file:141352kB unevictable:3536kB writepending:580kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44168kB local_pcp:23700kB free_cma:0kB
[  178.068583][T12908] lowmem_reserve[]: 0 0 0 0 0
[  178.070155][T12908] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  178.074347][T12908] Node 0 DMA32: 524*4kB (UM) 145*8kB (M) 29*16kB (UM) 125*32kB (UME) 150*64kB (UME) 39*128kB (UME) 35*256kB (UM) 15*512kB (UME) 9*1024kB (UM) 10*2048kB (UM) 76*4096kB (UM) = 379944kB
[  178.080867][T12908] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  178.086273][T12908] Node 1 Normal: 1204*4kB (UME) 445*8kB (UME) 478*16kB (UME) 103*32kB (UME) 99*64kB (UM) 70*128kB (UME) 49*256kB (UME) 21*512kB (UME) 14*1024kB (UM) 13*2048kB (UME) 5*4096kB (UM) = 119352kB
[  178.092801][T12908] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  178.096340][T12908] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  178.099615][T12908] 42296 total pagecache pages
[  178.101432][T12908] 0 pages in swap cache
[  178.103013][T12908] Free swap  = 124996kB
[  178.104550][T12908] Total swap = 124996kB
[  178.106191][T12908] 786301 pages RAM
[  178.107665][T12908] 0 pages HighMem/MovableOnly
[  178.109523][T12908] 241344 pages reserved
[  178.111241][T12908] 0 pages cma reserved
[  178.129648][T12920] bridge0: port 1(batadv0) entered blocking state
[  178.132227][T12920] bridge0: port 1(batadv0) entered disabled state
[  178.142671][T12920] batadv0: entered allmulticast mode
[  178.145388][T12920] batadv0: entered promiscuous mode
[  178.230009][T12932] syzkaller1: entered promiscuous mode
[  178.231940][T12932] syzkaller1: entered allmulticast mode
[  178.241366][T12934] netlink: 'syz.2.2285': attribute type 4 has an invalid length.
[  178.312594][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  178.318446][T12944] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  178.386810][T12954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.514525][T12967] netlink: 'syz.0.2296': attribute type 4 has an invalid length.
[  178.520637][T12972] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  178.530954][T12967] netlink: 'syz.0.2296': attribute type 4 has an invalid length.
[  178.566623][T12972] netlink: 'syz.2.2298': attribute type 2 has an invalid length.
[  178.569296][T12972] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  178.575315][T12972] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  178.615626][T12982] bond0: Device is already in use.
[  178.632581][ T8366] batman_adv: batadv0: IGMP Querier appeared
[  178.635297][ T8366] batman_adv: batadv0: MLD Querier appeared
[  178.778614][T13001] lo speed is unknown, defaulting to 1000
[  178.837182][T13012] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  178.846606][T13012] sctp: [Deprecated]: syz.1.2309 (pid 13012) Use of int in max_burst socket option deprecated.
[  178.846606][T13012] Use struct sctp_assoc_value instead
[  179.156845][T13041] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  179.162496][T13041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.352577][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.094967][T13090] IPVS: set_ctl: invalid protocol: 94 172.30.1.1:20002
[  180.393880][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.402215][T13112] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.552555][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[  180.642679][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  180.723218][T13153] syzkaller1: entered promiscuous mode
[  180.725634][T13153] syzkaller1: entered allmulticast mode
[  180.731623][T13153] netlink: 'syz.0.2353': attribute type 3 has an invalid length.
[  180.849378][T13165] netlink: 'syz.1.2356': attribute type 4 has an invalid length.
[  181.751548][T13184] __nla_validate_parse: 26 callbacks suppressed
[  181.751558][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2364'.
[  181.786612][T13186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2365'.
[  181.797170][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'.
[  181.971394][T13201] gretap0: refused to change device tx_queue_len
[  182.031109][T13205] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2372'.
[  182.439375][T13225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2380'.
[  182.482471][    C1] net_ratelimit: 2 callbacks suppressed
[  182.482533][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  182.621324][T13233] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  182.711271][T13239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2387'.
[  182.797060][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'.
[  182.934662][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  182.990036][T13260] validate_nla: 7 callbacks suppressed
[  182.990049][T13260] netlink: 'syz.0.2395': attribute type 1 has an invalid length.
[  182.995870][T13260] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2395'.
[  183.131289][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'.
[  183.331609][T13284] netem: unknown loss type 12
[  183.335143][T13284] netem: change failed
[  183.374835][T13288] netlink: 'syz.2.2406': attribute type 1 has an invalid length.
[  183.522529][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.974617][T13322] sctp: [Deprecated]: syz.1.2418 (pid 13322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.974617][T13322] Use struct sctp_sack_info instead
[  184.015613][T13328] vlan0: entered promiscuous mode
[  184.017243][T13328] macvtap0: entered promiscuous mode
[  184.056496][T13328] netlink: 'syz.1.2421': attribute type 6 has an invalid length.
[  184.552439][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  184.694816][T13376] lo speed is unknown, defaulting to 1000
[  184.736016][T13381] dvmrp8: entered allmulticast mode
[  184.813018][T13380] dvmrp8: left allmulticast mode
[  185.029664][T13397] tipc: New replicast peer: 255.255.255.255
[  185.038322][T13397] tipc: Enabled bearer <udp:syz2>, priority 10
[  185.132297][T13413] lo speed is unknown, defaulting to 1000
[  185.268975][T13423] netlink: 'syz.2.2450': attribute type 2 has an invalid length.
[  185.272126][T13423] netlink: 'syz.2.2450': attribute type 2 has an invalid length.
[  185.569727][T13444] syzkaller0: entered promiscuous mode
[  185.573870][T13444] syzkaller0: entered allmulticast mode
[  185.590318][T13444] syzkaller0: tun_chr_ioctl cmd 1074025677
[  185.592696][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  185.600147][T13444] syzkaller0: Linktype set failed because interface is up
[  185.604906][ T5870] syzkaller0: tun_net_xmit 70
[  185.636726][T13453] netlink: 'syz.0.2461': attribute type 3 has an invalid length.
[  185.641681][T13438] openvswitch: netlink: Flow set message rejected, Key attribute missing.
Connection to localhost closed by remote host.
[  187.495837][ T5870] bond0 (unregistering): Released all slaves
[  187.503876][ T5870] bond1 (unregistering): Released all slaves
[  187.588884][ T5870] bond2 (unregistering): Released all slaves
[  187.651033][ T5870] bond3 (unregistering): Released all slaves
[  187.658116][ T5870] bond4 (unregistering): Released all slaves
[  187.724018][ T5870] bond5 (unregistering): Released all slaves
[  187.788704][ T5870] bond6 (unregistering): Released all slaves
[  187.855482][ T5870] bond7 (unregistering): Released all slaves
[  187.917529][ T5870] bond8 (unregistering): Released all slaves
[  187.981135][ T5870] bond9 (unregistering): Released all slaves
[  188.054943][ T5870] bond10 (unregistering): Released all slaves
[  188.061386][ T5870] bond11 (unregistering): Released all slaves
[  188.068373][ T5870] bond12 (unregistering): Released all slaves
[  188.075170][ T5870] bond13 (unregistering): Released all slaves
[  188.083586][ T5870] bond14 (unregistering): Released all slaves
[  188.201780][ T5870] : left promiscuous mode
[  188.274978][ T5870] k*]: left promiscuous mode
[  188.340394][ T5870] tipc: Disabling bearer <udp:syz2>
[  188.348534][ T5870] tipc: Disabling bearer <eth:team0>
[  188.353618][ T5870] tipc: Left network mode
[  188.798610][ T5870] hsr_slave_0: left promiscuous mode
[  188.801112][ T5870] hsr_slave_1: left promiscuous mode
[  189.317014][   T28] smc: removing ib device syz0
[  189.319073][ T5962] lo speed is unknown, defaulting to 1000
[  189.321732][ T5962] syz0: Port: 1 Link DOWN
[  189.688436][ T5870] IPVS: stop unused estimator thread 0...
[  189.960301][ T5870] ------------[ cut here ]------------
[  189.962168][ T5870] WARNING: CPU: 1 PID: 5870 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  189.965508][ T5870] Modules linked in:
[  189.967033][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  189.971295][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.974742][ T5870] Workqueue: netns cleanup_net
[  189.976335][ T5870] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  189.978184][ T5870] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 35 e1 f7 e8 34 07 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 07 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  189.985233][ T5870] RSP: 0018:ffffc9000392f898 EFLAGS: 00010293
[  189.987202][ T5870] RAX: ffffffff8a22a45c RBX: ffff88802864a440 RCX: ffff88801ff99cc0
[  189.989764][ T5870] RDX: 0000000000000000 RSI: ffffffff8dba8a8b RDI: ffff88801ff99cc0
[  189.992265][ T5870] RBP: ffffc9000392f9b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  189.995162][ T5870] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffffffff8f632040
[  189.997936][ T5870] R13: 1ffff92000725f40 R14: ffff88802864b8c0 R15: dffffc0000000000
[  190.000796][ T5870] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  190.004182][ T5870] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.006320][ T5870] CR2: 00007ffd16449c68 CR3: 00000001071d8000 CR4: 00000000000006f0
[  190.008973][ T5870] Call Trace:
[  190.010110][ T5870]  <TASK>
[  190.011144][ T5870]  xfrm_net_exit+0x2d/0x70
[  190.012910][ T5870]  ops_undo_list+0x49a/0x990
[  190.014481][ T5870]  ? __pfx_ops_undo_list+0x10/0x10
[  190.016175][ T5870]  ? do_raw_spin_unlock+0x4d/0x240
[  190.018086][ T5870]  cleanup_net+0x4c5/0x800
[  190.019723][ T5870]  ? __pfx_cleanup_net+0x10/0x10
[  190.021424][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.023334][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  190.025746][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  190.027736][ T5870]  process_scheduled_works+0xae1/0x17b0
[  190.029561][ T5870]  ? __pfx_process_scheduled_works+0x10/0x10
[  190.031662][ T5870]  worker_thread+0x8a0/0xda0
[  190.033411][ T5870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.035513][ T5870]  ? __kthread_parkme+0x7b/0x200
[  190.037133][ T5870]  kthread+0x711/0x8a0
[  190.038463][ T5870]  ? __pfx_worker_thread+0x10/0x10
[  190.040149][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.041742][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.043554][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.045289][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.046827][ T5870]  ret_from_fork+0x3fc/0x770
[  190.048343][ T5870]  ? __pfx_ret_from_fork+0x10/0x10
[  190.050008][ T5870]  ? __switch_to_asm+0x39/0x70
[  190.051691][ T5870]  ? __switch_to_asm+0x33/0x70
[  190.053939][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.055603][ T5870]  ret_from_fork_asm+0x1a/0x30
[  190.057264][ T5870]  </TASK>
[  190.058365][ T5870] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  190.060956][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  190.064138][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.067722][ T5870] Workqueue: netns cleanup_net
[  190.069426][ T5870] Call Trace:
[  190.070576][ T5870]  <TASK>
[  190.071799][ T5870]  dump_stack_lvl+0x99/0x250
[  190.073712][ T5870]  ? __asan_memcpy+0x40/0x70
[  190.075640][ T5870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.077889][ T5870]  ? __pfx__printk+0x10/0x10
[  190.079933][ T5870]  vpanic+0x281/0x750
[  190.081656][ T5870]  ? __pfx__printk+0x10/0x10
[  190.083569][ T5870]  ? __pfx_vpanic+0x10/0x10
[  190.085157][ T5870]  ? is_bpf_text_address+0x292/0x2b0
[  190.087265][ T5870]  panic+0xb9/0xc0
[  190.088747][ T5870]  ? __pfx_panic+0x10/0x10
[  190.090567][ T5870]  __warn+0x31b/0x4b0
[  190.091940][ T5870]  ? xfrm_state_fini+0x26d/0x2f0
[  190.093964][ T5870]  ? xfrm_state_fini+0x26d/0x2f0
[  190.096005][ T5870]  report_bug+0x2be/0x4f0
[  190.097713][ T5870]  ? xfrm_state_fini+0x26d/0x2f0
[  190.099645][ T5870]  ? xfrm_state_fini+0x26d/0x2f0
[  190.101573][ T5870]  ? xfrm_state_fini+0x26f/0x2f0
[  190.103464][ T5870]  handle_bug+0x84/0x160
[  190.105025][ T5870]  exc_invalid_op+0x1a/0x50
[  190.106614][ T5870]  asm_exc_invalid_op+0x1a/0x20
[  190.108238][ T5870] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  190.110130][ T5870] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 35 e1 f7 e8 34 07 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 07 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  190.116715][ T5870] RSP: 0018:ffffc9000392f898 EFLAGS: 00010293
[  190.118823][ T5870] RAX: ffffffff8a22a45c RBX: ffff88802864a440 RCX: ffff88801ff99cc0
[  190.121462][ T5870] RDX: 0000000000000000 RSI: ffffffff8dba8a8b RDI: ffff88801ff99cc0
[  190.124114][ T5870] RBP: ffffc9000392f9b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[  190.126810][ T5870] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffffffff8f632040
[  190.129426][ T5870] R13: 1ffff92000725f40 R14: ffff88802864b8c0 R15: dffffc0000000000
[  190.132094][ T5870]  ? xfrm_state_fini+0x26c/0x2f0
[  190.133704][ T5870]  ? xfrm_state_fini+0x26c/0x2f0
[  190.135342][ T5870]  xfrm_net_exit+0x2d/0x70
[  190.136851][ T5870]  ops_undo_list+0x49a/0x990
[  190.138591][ T5870]  ? __pfx_ops_undo_list+0x10/0x10
[  190.140753][ T5870]  ? do_raw_spin_unlock+0x4d/0x240
[  190.142520][ T5870]  cleanup_net+0x4c5/0x800
[  190.144101][ T5870]  ? __pfx_cleanup_net+0x10/0x10
[  190.145930][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.147927][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  190.150100][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  190.152045][ T5870]  process_scheduled_works+0xae1/0x17b0
[  190.153936][ T5870]  ? __pfx_process_scheduled_works+0x10/0x10
[  190.155956][ T5870]  worker_thread+0x8a0/0xda0
[  190.157536][ T5870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.159822][ T5870]  ? __kthread_parkme+0x7b/0x200
[  190.161785][ T5870]  kthread+0x711/0x8a0
[  190.163462][ T5870]  ? __pfx_worker_thread+0x10/0x10
[  190.165452][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.167184][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.169048][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.170784][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.172558][ T5870]  ret_from_fork+0x3fc/0x770
[  190.174118][ T5870]  ? __pfx_ret_from_fork+0x10/0x10
[  190.175833][ T5870]  ? __switch_to_asm+0x39/0x70
[  190.177518][ T5870]  ? __switch_to_asm+0x33/0x70
[  190.179208][ T5870]  ? __pfx_kthread+0x10/0x10
[  190.180860][ T5870]  ret_from_fork_asm+0x1a/0x30
[  190.182487][ T5870]  </TASK>
[  190.184205][ T5870] Kernel Offset: disabled
[  190.185668][ T5870] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:55:26  Registers:
info registers vcpu 0

CPU#0
RAX=d4c65703b94b7c00 RBX=ffffffff819683c8 RCX=d4c65703b94b7c00 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb447ff6d58 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000000 000000310068652f
XMM06=ffffffffffffff00 ffffff0000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffff00ff000000 XMM09=0000000000000021 000000317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000392f030
R8 =ffff888020998237 R9 =1ffff11004133046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018de R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd16449c68 CR3=00000001071d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000000 000000310068652f
XMM06=ffffffffffffff00 ffffff0000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffff00ff000000 XMM09=0000000000000021 000000317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
