last executing test programs:

2.126168855s ago: executing program 0 (id=6386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x14}}, 0x8c}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
getsockname(r1, &(0x7f0000000080)=@phonet, &(0x7f0000000000)=0x80)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0)

2.021376356s ago: executing program 2 (id=6389):
r0 = socket(0x40000000015, 0x5, 0x0)
accept$unix(r0, 0x0, 0x0)

1.970735841s ago: executing program 2 (id=6390):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)

1.969471082s ago: executing program 0 (id=6392):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x7ffffffe, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

1.880635025s ago: executing program 1 (id=6393):
listen(0xffffffffffffffff, 0x9)
syz_emit_ethernet(0xc2, &(0x7f00000009c0)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x8000003a, 0x7ff, 0x3a, 0x800, 0x2, 0x6}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x8000003a, 0x7ff, 0x3a, 0x800, 0x2, 0x6}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x2a0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'netdevsim0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}, [@common=@inet=@recent1={{}, {0x60, 0x3, 0x1, 0x1, 'syz0\x00', 0x9, [0xffffff00, 0xff, 0x0, 0xff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{}, {0x3, 0xe8}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd8)
r2 = socket$inet6(0xa, 0x80001, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0xc4, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7fff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x2, 0xffff7a73, 0x3}}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x4, 0x2, 0x7ffffffd, 0x5ba4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x744e, 0x9, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x2, 0x10000, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0x9c20, 0x7, 0x200}}]}]}}}]}, 0xc4}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0xc4, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7fff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x2, 0xffff7a73, 0x3}}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x4, 0x2, 0x7ffffffd, 0x5ba4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x744e, 0x9, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x2, 0x10000, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0x9c20, 0x7, 0x200}}]}]}}}]}, 0xc4}}, 0x0)
shutdown(r3, 0x2)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000780)=0x587, 0x4)
pipe(&(0x7f00000004c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x25, 0x800, 0x4) (async)
socket(0x25, 0x800, 0x4)

1.761180082s ago: executing program 1 (id=6394):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000840)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @from_mac, @from_mac=@broadcast, {0x5}, "", @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040d4) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0xffffffffffffff3a}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
setsockopt$ax25_int(r6, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4) (async, rerun: 32)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x160, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7621}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @remote, 0x71}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b20}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8044}, 0x80) (async, rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100001a"], 0x64}}, 0x2000000)

1.757431753s ago: executing program 0 (id=6395):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) (rerun: 64)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x8050)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x503, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xd2b18d1cf87215df}, [@IFLA_TXQLEN={0x8, 0xd, 0x8000}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x8}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x3}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x9b, 0x2}}}}]}, 0x44}}, 0x800) (rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64)
r5 = socket(0x11, 0x800000003, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f00000003c0)) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r9, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1.691353494s ago: executing program 1 (id=6396):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x119, &(0x7f0000000180)={@remote, @random="cd1ed45df767", @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x8d5}, {0xaf}, {0x7f, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xf, 0x0, 0x1}], @llc={@snap={0x1, 0xaa, "ecd7", "7c0ddf", 0xd, "4e41107cbf2ce1005b8cc0fe6bdcb68d5c49041545406d3383b1a18338c309114f895bcc80ba8953b4168037728d2d6ee2a7d0f1be7094a2ced3dea2957295cb1b3fe0aaae960699687f40872b398d0060409259c2d266794cd1d4d972f22dd2f39d6f21d02edbe172706a2161b4a4687e8e2260c3616c00dec90a9fdc656ae0f3308d478b601e30d693f007b501766fca81e9e2351b8538910d9a518f94d4fce96f20ae06814ba0d7f517849af389f860e551b689266a4e13ae0183a1a395f0e1de41e64dbad286ebf2a909a029515200c21a448082a29319fa50acd81ad18a59f5"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xc7f, 0x62d, 0x8f, 0xf22]})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1.600864946s ago: executing program 1 (id=6397):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r1=>0x0, 0x6}, &(0x7f0000000080)=0x8)
r2 = socket(0x1d, 0x2, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
unshare(0x22020600)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0xff}}, 0x18)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e60080", 0x5}], 0x1}}], 0x1, 0x40000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0xc6e9f000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
socket$kcm(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x6}, &(0x7f0000000100)=0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x709d27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f55, 0x403a2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x20040040)

1.472659997s ago: executing program 0 (id=6398):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ee8d225b23b7b98364184144a1102c00"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "070fff3b54ad0dcc43165c17e8def2ab"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c4)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x4, 0x2)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'wg0\x00', {0x2, 0x0, @multicast1}})
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x39d1}, 0x1c)
bind$isdn_base(r0, &(0x7f0000000400)={0x22, 0xf, 0xff, 0xfe}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000440)=0x80, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000500)={'gre0\x00', <r4=>0x0, 0x1, 0x7800, 0x10, 0x101, {{0x44, 0x4, 0x3, 0x0, 0x110, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0xc, 0x68, 0x3, 0x6, [{@private=0xa010102, 0x7}]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x2, [{@broadcast, 0xed}, {@empty, 0x7fffffff}, {@empty, 0x7fff}, {@private=0xa010102, 0x1}]}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x2, 0x4, "e4b5"}, {0x0, 0x8, "d25e91a62f95"}, {0x5, 0x8, "3b5abf0cd323"}, {0x1, 0x6, "540c8eba"}, {0x5, 0x12, "bf7baf9417b19de840eeab0e62573d2f"}, {0x7, 0x6, "44ea74db"}, {0x0, 0xb, "00218bcdee58bb9741"}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x22, 0x3, 0x0, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@rand_addr=0x64010100, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x2}, {@private=0xa010100, 0x4}, {@multicast1, 0x10001}]}, @lsrr={0x83, 0x1b, 0x71, [@remote, @remote, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @timestamp={0x44, 0x20, 0x47, 0x0, 0x1, [0xd, 0x1ff, 0x1000, 0x2, 0x401, 0x9, 0xd]}, @ssrr={0x89, 0xf, 0x8c, [@private=0xa010100, @empty, @multicast2]}]}}}}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r2, 0x900, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000000}, 0x4008010)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', <r6=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={<r7=>0x0, @remote}, &(0x7f00000008c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000980)={0x5a0, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x280d}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x17, 0x7, 0xd8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0xc010}, 0x20004)
epoll_create1(0x0)
socket$inet6(0xa, 0x1, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000fc0)={0x1d, @empty, 0x4e23, 0x3, 'sed\x00', 0x2, 0x51f55c56, 0x4e}, 0x2c)
pipe(&(0x7f0000001000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r12, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4042000)
socketpair(0x1, 0x6, 0x5, &(0x7f00000011c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1fc, 0x2, 0x1, 0xc00, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}]}}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x7a8, 0xcb, 0xfe2, 0xf, 0x2]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x27d110f2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x2, 0x4, 0x1, 0x3]}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @local}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
recvfrom$l2tp6(r13, &(0x7f00000014c0)=""/28, 0x1c, 0x0, &(0x7f0000001500)={0xa, 0x0, 0x0, @initdev}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001580)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r13, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x239}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x1, 0x1}, {0x12, 0x1}, {0x18}, {0x1f, 0x1}, {0x44}, {0x24}, {0x48, 0x1}, {0x30, 0x1}, {0x5}, {0x18, 0x1}, {0x4b, 0x1}, {0x2, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x19, 0x1}, {0x48}, {0x48, 0x1}, {0x24}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004014)

1.374910717s ago: executing program 1 (id=6399):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r2, 0x0)
accept4(r2, &(0x7f00000006c0)=@isdn, &(0x7f0000000140)=0x80, 0x80000)
connect$rose(r2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000001240)={0x47, "5549fe4c073ee9a1271289fb526abb0d44e7a9cbb341d2cc2f410678268bdace2119c692719a40af626871ee3f9ef0af48757a4a39453ef342e4558e655515f50c8ea7e78808a795c961b638d4756904a0d2c50e514858790cb048ed853bf58c1e067da0905f414d2b6dcd8ef8220147048cdd07a7787a8dbefdc191d41436af"})
ioctl$PPPOEIOCSFWD(r3, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080))
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000011c0)=""/2, &(0x7f0000001200)=0x2)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
sendto(r3, &(0x7f0000001100)="2747c10e03846db277943d7dbd136593e443e88f8645f87d9ca4ff3983e0966a0fa2f2bfde41e2c1eab4ebfb222e8c5a70ac391b2957c2d09138902e58cdd805c1b60181287339e863bd665359a2a47ecef24f14d5c779103f0f420540000000efa1bf035fe52503798c8cbc2f68b2b324b819bf9c0538941f8961baeba26b52cc1a759beac1ad3113acd2e06a2f946241e0c7350eb4c0cbaffd58b5c97aace64563f5675b75c58a68704b66d716c53334274cbf4420", 0xa7, 0x891, 0x0, 0xfffffffffffffffe)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x9e, &(0x7f0000000f40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60ff00f5000788"], 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

1.311380172s ago: executing program 0 (id=6400):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="28bc4793f6de298c6748ca08a26dd7efa6fc0f508bcf28ca3945ad41697e2f039913374613b80fb9524c97cef121ac14139621bc068b9045a9480c75f7de2153e403bd745f3455bfafd8f8c2260b66581d885023b14fa59d9b1c5b12a18a253d35bb95963e76ca0ab1b7ac3240fe66c074e5d564de86ab6c166bbd51a88e", 0x7e}, 0x1, 0x0, 0x0, 0x400c004}, 0x20040840) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000f2ee272c8f790000000000000000125600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
unshare(0x20000400) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4)
ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="000000000000000200000003000000000000950000000000dfffffff000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x1c}, 0x94) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

1.307409085s ago: executing program 0 (id=6401):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0x8, 0xfff1}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0x8, 0xfff1}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async)
sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

1.04079298s ago: executing program 2 (id=6402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000))
socket(0x400000000010, 0x3, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0xffff, 0x5}, &(0x7f0000000140)=0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
pipe(&(0x7f0000000340))
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
listen(r1, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x70}}, 0x0)

490.913368ms ago: executing program 1 (id=6403):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4840)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)='B', 0x1}], 0x1}, 0x404c014)
ioctl$SIOCSIFHWADDR(r6, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x1, [@broadcast]}, 0x14)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030008ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20000000)

170.623582ms ago: executing program 2 (id=6404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd, 0xfff5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000680)=[{&(0x7f0000000000)="e2a6d709a109e41e2e824b00e98dd2a8efe40c757c6725f29a510b535e9c87b2fbb04dc177a9111dcdadc21390724ed9c1afeb20428596642a39028d0cb7dc551874f8a6e3409eab404e44", 0x4b}, {&(0x7f0000000080)="21d7431a0fcb90560003ad309aeed546cb87b7d2e17774bda441d2269754a97e83b2213eaa33ff9fcc2a706975033cfbf90f0d8db9f37c325c75a8ac4cb821444d2db316137d1c6eab0ae3620bb82387c8350e758f15e41e2c85788f98cd68770b958b15344a521fd11cda1438da016440c83c09c64e5de294b9533c3da2b69a83aa8ee99c95447226bf6d0cd9a7f39127ed729c1d9c", 0x96}, {&(0x7f0000000140)="180641dec82cce9d2a64acb765fdd0be11ab3a97265851fde5f21807570b1ea2e866c2ca6ac583b07850fcddf8e00cb1db6f22f18962de", 0x37}, {&(0x7f0000000180)="d7c76a967ba1021314aeaa25b55005305c886dfb3094aff41d12036d90c9520479d78b26d517ad34", 0x28}, {&(0x7f0000000300)="197ab35af5d8a103959956e5b24bb66d68ea8072c3670b07fc5439fc205b1dc9de89f42db9d9d51916bfb22c7851a53f570531ef5e0c855f50f8e98e0ef3f6c46dd1cb078c879a59ca7421a9792cdd6dc11f475b4e57bff89aea13ef8f0c4f72789c414235bc37859295ad1eca0343381b251742725284dc67fcc495aa8e99d6f6f700c4a74e1869c90d3f3b740201d2b268c35bb163df1074ed92ff11ff79a6be9c2bcefeedb99ea3e4c9d67549199c2bf43b57c4b76383af44bafbde66b64d5b1d", 0xc2}, {&(0x7f00000004c0)="b83766dfc7e12814e467d4b96a4d9db48b52d590d76b2f488bde6f0b88d3ea0df17863102f20baa67212c3f73079a262399126156cf4a01b65db63568658d34458c559f92592913accac0a00f1c69501cce1430d79b78467fe4ca0fb3b937056d0dc876e2146d44d2baf7b65653cefdd069b4dc227dd7fd93a6536b2a6dff29f492cc7e4e65c13c71181037c4927e37b842e7d9a692062f7bd608e03e2f68b755d22504e9beec1202afa24b94323f8141734ab4236d77f446158edb69ed838801c85847c332734fe1f91d6d2f0070e516041949b2583e8e8c0bb2316ff967671c5e0fc7f20f876621cb7", 0xea}, {&(0x7f00000005c0)="d23a438e039ebccf6941650e168213368ac66cf902b5a2806194101640b7b29ce6c500b00695497380346451871d6e3d15db8651209648b696d93b2233d201337645872b8df033474826fc853b3e92955bdd4f1a9f8ef7d37ea0dbb38b34b5546b4aec4cafd0779b0df8540436728db1691692dec5c24fbe5527a75888af7e7d8bbb471e3b73", 0x86}, {&(0x7f0000000200)="5ae8fbd6d431b66b6c4b6574967d57d7d19cec3ed2c77bf8e36b77d4529dfb9491728fd3", 0x24}, {&(0x7f0000000240)="a41cbb1d87c316f04ed3adae2bc9798454baf281641fa488970f1c3ef4d9adad70dcd2ea304a6bf4624fd1eaa1aff3", 0x2f}], 0x9)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0)

539.227µs ago: executing program 2 (id=6405):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xf9d}]]}}}]}, 0x38}}, 0x10)

0s ago: executing program 2 (id=6406):
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e0010000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="44000280fd085c9ab871026ce8f96d6f38240001006d6f64650000000000006087d12e99a962400000000000000000000000000000000000000000000005000300050000001000043efbcb73934572c9c8c249f3", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000f00000008000600", @ANYRES32, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002900000008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000a00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000015c000011000000002adcbf3654bc7dd9874a82765b796b74161671751af0f6ba34e9c6b52667335c4d22faafa733f9761dcc93e1bbf62569ddafbcda1a0b93b2d040529489b04bf7bce05e8b366f8743ff6a56915e5afba3a27782e0c6d36d71280613314fd713beefae60196880aa683ff2610c46f2fd871568c4ab865b3f06071b6109039717493fe314e237f25ebebc79738c3ef8aa1d006e9fe032aacc0aa684011de687fc0c6ab601f64aeaee7e5b355a6a1a9b5bcc17fa8237ffa025942553ac593a3fca8a02fa9bdb2a962098431364fd4a7163e4fae947bad3bb22e17e66f1330831f36a728704c545678d6281", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r12 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0xa4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpid()

kernel console output (not intermixed with test programs):

.
[  349.486638][T18427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3720'.
[  349.551673][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3722'.
[  349.677475][T18443] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3723'.
[  349.788605][T18450] DL<Y: renamed from lo (while UP)
[  349.907267][T18463] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  349.909227][T18464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3730'.
[  349.913019][T18462] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  349.923657][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'.
[  350.038005][T18467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.064015][T18470] validate_nla: 3 callbacks suppressed
[  350.064027][T18470] netlink: 'syz.0.3732': attribute type 4 has an invalid length.
[  350.103529][T18474] xt_hashlimit: max too large, truncated to 1048576
[  350.105807][T18474] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  350.141624][T18478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.144462][T18478] syzkaller0: entered promiscuous mode
[  350.146578][T18478] syzkaller0: entered allmulticast mode
[  350.155917][T18478] tipc: Resetting bearer <eth:syzkaller0>
[  350.160312][T18477] tipc: Resetting bearer <eth:syzkaller0>
[  350.172772][T18477] tipc: Disabling bearer <eth:syzkaller0>
[  350.237632][T18480] netlink: 'syz.0.3735': attribute type 1 has an invalid length.
[  350.258643][T18480] 8021q: adding VLAN 0 to HW filter on device bond18
[  350.342786][T18487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.345085][T18487] IPv6: NLM_F_CREATE should be set when creating new route
[  350.347194][T18487] IPv6: NLM_F_CREATE should be set when creating new route
[  350.349502][T18487] IPv6: NLM_F_CREATE should be set when creating new route
[  350.352646][T18487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.523245][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'.
[  351.010251][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'.
[  351.044909][T18531] netlink: 'syz.1.3751': attribute type 21 has an invalid length.
[  351.108084][T18534] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3752'.
[  351.386553][T18552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.991898][T18561] xt_policy: neither incoming nor outgoing policy selected
[  352.555548][T18583] lo speed is unknown, defaulting to 1000
[  353.243915][T18606] sctp: [Deprecated]: syz.0.3773 (pid 18606) Use of int in max_burst socket option deprecated.
[  353.243915][T18606] Use struct sctp_assoc_value instead
[  353.507109][T18617] lo speed is unknown, defaulting to 1000
[  353.515923][T18621] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  353.547984][T18623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.655747][T18627] x_tables: duplicate underflow at hook 1
[  353.746764][T18628] lo speed is unknown, defaulting to 1000
[  354.320661][T18655] __nla_validate_parse: 7 callbacks suppressed
[  354.320677][T18655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3785'.
[  354.680903][T18664] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  355.566672][ T5836] Bluetooth: hci0: command tx timeout
[  355.960082][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'.
[  357.312975][T18719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.360197][T18730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3809'.
[  357.635418][T18746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3813'.
[  357.698005][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'.
[  357.872447][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'.
[  357.875972][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3815'.
[  357.884419][T18763] netlink: 'syz.1.3815': attribute type 18 has an invalid length.
[  357.995847][T18769] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.000200][T18769] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 47461 - 0
[  358.004207][T18769] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  358.129226][T18769] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.133324][T18769] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 47461 - 0
[  358.137796][T18769] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  358.195702][T18769] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.200532][T18769] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 47461 - 0
[  358.205112][T18769] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  358.241209][T18769] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.245442][T18769] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 47461 - 0
[  358.250075][T18769] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  358.321291][T18769] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.323774][T18769] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 47461 - 0
[  358.326352][T18769] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  358.340687][T18769] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.344278][T18769] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 47461 - 0
[  358.347332][T18769] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  358.358096][T18769] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.361246][T18769] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 47461 - 0
[  358.363865][T18769] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  358.375788][T18769] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.379219][T18769] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 47461 - 0
[  358.381972][T18769] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  358.922047][ T6263] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  359.267393][T18814] xt_bpf: check failed: parse error
[  359.328414][T18814] netlink: 'syz.1.3832': attribute type 10 has an invalid length.
[  359.437048][T18824] netlink: 'syz.1.3834': attribute type 1 has an invalid length.
[  359.485084][T18829] wg2: entered promiscuous mode
[  359.487426][T18829] wg2: entered allmulticast mode
[  359.579462][T18833] sctp: [Deprecated]: syz.1.3836 (pid 18833) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.579462][T18833] Use struct sctp_sack_info instead
[  359.772674][T18847] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3840'.
[  359.823889][T18851] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3840'.
[  359.837876][T18852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3841'.
[  359.927327][T18856] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3842'.
[  360.106959][T18867] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  360.197161][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3848'.
[  360.211870][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'.
[  360.237691][T18878] netlink: 'syz.2.3850': attribute type 1 has an invalid length.
[  360.305046][T18881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3850'.
[  360.581931][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'.
[  360.598219][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3858'.
[  360.678490][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3861'.
[  360.802205][T18920] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  360.807713][T18920] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  360.917600][T18931] netlink: 'syz.1.3867': attribute type 39 has an invalid length.
[  360.934536][T18931] tipc: Disabling bearer <eth:macvtap0>
[  361.324706][T18970] netlink: 'syz.2.3878': attribute type 2 has an invalid length.
[  361.554717][T18993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.677711][T19000] netlink: 'syz.1.3886': attribute type 1 has an invalid length.
[  361.835313][T19011] lo speed is unknown, defaulting to 1000
[  362.272371][T19038] delete_channel: no stack
[  362.296335][T19041] delete_channel: no stack
[  362.489442][T19052] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  362.557653][T19056] netlink: 'syz.1.3904': attribute type 1 has an invalid length.
[  362.697259][T19065] lo speed is unknown, defaulting to 1000
[  363.071764][T19089] netlink: 'syz.2.3912': attribute type 12 has an invalid length.
[  363.156049][T19094] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.262602][T19103] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  363.296948][T19108] nf_ct_set_timeout: 23 callbacks suppressed
[  363.296963][T19108] No such timeout policy "syz0"
[  363.698419][T19124] lo speed is unknown, defaulting to 1000
[  363.750256][T19128] bond0: option lp_interval: invalid value (18446744073709551604)
[  363.754000][T19128] bond0: option lp_interval: allowed values 1 - 2147483647
[  363.884250][T19133] netlink: 'syz.0.3928': attribute type 11 has an invalid length.
[  363.943466][T19135] netlink: 'syz.0.3928': attribute type 11 has an invalid length.
[  363.949130][T19133] tun0: tun_chr_ioctl cmd 2148553947
[  363.966493][T19133] tun0: tun_chr_ioctl cmd 2148553947
[  364.072974][T19129] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 20000 - 0
[  364.076247][T19129] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 20000 - 0
[  364.082622][T19129] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 20000 - 0
[  364.085970][T19129] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 20000 - 0
[  364.091295][T19129] geneve5: entered promiscuous mode
[  364.094113][T19129] geneve5: entered allmulticast mode
[  364.097043][T19144] openvswitch: netlink: IP tunnel dst address not specified
[  364.239771][T19148] netlink: 'syz.2.3933': attribute type 11 has an invalid length.
[  364.273461][T19150] xt_limit: Overflow, try lower: 262144/524288
[  364.718118][T19174] xt_time: invalid argument - start or stop time greater than 23:59:59
[  365.791337][T19210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.225338][T19244] __nla_validate_parse: 20 callbacks suppressed
[  366.225352][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'.
[  366.412869][T19251] netlink: 'syz.0.3964': attribute type 11 has an invalid length.
[  366.535743][T19266] bond9: (slave erspan0): Releasing active interface
[  366.552490][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'.
[  366.584641][ T9216] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  366.725782][T19277] syz2: rxe_newlink: already configured on bond_slave_1
[  366.782023][T19279] xt_l2tp: missing protocol rule (udp|l2tpip)
[  366.859298][ T9216] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  366.986464][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'.
[  366.992472][T19285] netlink: 'syz.1.3972': attribute type 1 has an invalid length.
[  366.995470][T19285] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3972'.
[  367.104179][T19293] caif0: left promiscuous mode
[  367.107554][T19295] tap0: tun_chr_ioctl cmd 1074025676
[  367.109749][T19295] tap0: owner set to 0
[  367.221630][T19299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.225399][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'.
[  367.308240][T19306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3978'.
[  367.588442][T19328] netlink: 'syz.2.3987': attribute type 4 has an invalid length.
[  367.595145][T19328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3987'.
[  367.601072][T19328] : renamed from bond0
[  367.613595][T19328] x_tables: duplicate underflow at hook 1
[  367.748508][T19334] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003
[  367.847433][T19344] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3994'.
[  367.912106][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'.
[  368.693832][T19291] Set syz1 is full, maxelem 65536 reached
[  368.925470][T19370] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  368.972249][T19374] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4007'.
[  369.118020][T19393] sctp: [Deprecated]: syz.2.4013 (pid 19393) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.118020][T19393] Use struct sctp_sack_info instead
[  369.392541][T19415] lo: left promiscuous mode
[  369.394659][T19415] tunl0: left promiscuous mode
[  369.396775][T19415] gre0: left promiscuous mode
[  369.398727][T19415] gretap0: left promiscuous mode
[  369.401620][T19415] ip_vti0: left promiscuous mode
[  369.403716][T19415] ip6_vti0: left promiscuous mode
[  369.405669][T19415] sit0: left promiscuous mode
[  369.407609][T19415] ip6tnl0: left promiscuous mode
[  369.411691][T19415] ip6gre0: left promiscuous mode
[  369.413766][T19415] ip6gretap0: left promiscuous mode
[  369.416290][T19415] vcan0: left promiscuous mode
[  369.418724][T19415] dummy0: left promiscuous mode
[  369.421122][T19415] nlmon0: left promiscuous mode
[  369.423724][T19415] veth0: left promiscuous mode
[  369.425842][T19415] veth1: left promiscuous mode
[  369.428035][T19415] wg0: left promiscuous mode
[  369.431518][T19415] wg1: left promiscuous mode
[  369.433084][T19415] wg2: left promiscuous mode
[  369.436286][T19415] bridge_slave_0: left promiscuous mode
[  369.438507][T19415] veth1_to_bridge: left promiscuous mode
[  369.440645][T19415] bridge_slave_1: left promiscuous mode
[  369.442851][T19415] veth0_to_bond: left promiscuous mode
[  369.444745][T19415] bond_slave_0: left promiscuous mode
[  369.446920][T19415] veth1_to_bond: left promiscuous mode
[  369.451743][T19415] bond_slave_1: left promiscuous mode
[  369.457089][T19415] veth0_to_team: left promiscuous mode
[  369.464907][T19415] C: left promiscuous mode
[  369.466574][T19415] veth1_to_team: left promiscuous mode
[  369.468602][T19415] team_slave_1: left promiscuous mode
[  369.476343][T19415] veth1_to_batadv: left promiscuous mode
[  369.485419][T19415] xfrm0: left promiscuous mode
[  369.487494][T19415] veth0_to_hsr: left promiscuous mode
[  369.491005][T19412] netlink: 'syz.1.4019': attribute type 39 has an invalid length.
[  369.493795][T19415] hsr0: left promiscuous mode
[  369.496121][T19415] veth1_virt_wifi: left promiscuous mode
[  369.498629][T19415] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  369.503861][T19415] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  369.506703][T19415] vlan0: left promiscuous mode
[  369.508503][T19415] vlan1: left promiscuous mode
[  369.512344][T19415] macvlan0: left promiscuous mode
[  369.514317][T19415] macvlan1: left promiscuous mode
[  369.516087][T19415] ipvlan0: left promiscuous mode
[  369.517931][T19415] ipvlan1: left promiscuous mode
[  369.520340][T19415] geneve0: left promiscuous mode
[  369.522989][T19415] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  369.525436][T19415] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  369.528120][T19415] bridge1: left promiscuous mode
[  369.531357][T19415] vxlan0: left promiscuous mode
[  369.533415][T19415] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  369.535995][T19415] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  369.539253][T19415] vxcan2: left promiscuous mode
[  369.541612][T19415] vxcan3: left promiscuous mode
[  369.544008][T19415] ipvlan2: left promiscuous mode
[  369.546289][T19415] vxlan1: left promiscuous mode
[  369.548442][T19415] vxlan2: left promiscuous mode
[  369.550789][T19415] bond1: left promiscuous mode
[  369.552481][T19415] bond2: left promiscuous mode
[  369.554114][T19415] bridge2: left promiscuous mode
[  369.555968][T19415] gtp0: left promiscuous mode
[  369.558066][T19415] ip6tnl1: left promiscuous mode
[  369.560977][T19415] veth1_vlan.2: left promiscuous mode
[  369.563630][T19415] sit1: left promiscuous mode
[  369.565659][T19415] ip6gre1: left promiscuous mode
[  369.567990][T19415] sit2: left promiscuous mode
[  369.570102][T19415] batadv1: left promiscuous mode
[  369.572154][T19415] vlan2: left promiscuous mode
[  369.574398][T19415] bond3: left promiscuous mode
[  369.578430][T19415] geneve2: left promiscuous mode
[  369.580978][T19415] ip6erspan0: left promiscuous mode
[  369.583307][T19415] bridge3: left promiscuous mode
[  369.585490][T19415] pim6reg: left promiscuous mode
[  369.588427][T19415] hsr1: left promiscuous mode
[  369.593746][T19415] vlan3: left promiscuous mode
[  369.595832][T19415] geneve1: left promiscuous mode
[  369.598182][T19415] tun0: left promiscuous mode
[  369.600279][T19415] erspan1: left promiscuous mode
[  369.602385][T19415] bridge4: left promiscuous mode
[  369.604577][T19415] bridge5: left promiscuous mode
[  369.606533][T19415] gretap1: left promiscuous mode
[  369.608675][T19415] bridge6: left promiscuous mode
[  369.613110][T19415] macvlan2: left promiscuous mode
[  369.615391][T19415] bond4: left promiscuous mode
[  369.617418][T19415] bridge7: left promiscuous mode
[  369.619815][T19415] bond5: left promiscuous mode
[  369.621595][T19415] veth2: left promiscuous mode
[  369.623403][T19415] veth3: left promiscuous mode
[  369.625415][T19415] bond6: left promiscuous mode
[  369.627352][T19415] bond7: left promiscuous mode
[  369.631470][T19415] bond8: left promiscuous mode
[  369.633821][T19415] geneve3: left promiscuous mode
[  369.635878][T19415] bond9: left promiscuous mode
[  369.638335][T19415] bridge8: left promiscuous mode
[  369.641954][T19415] ip6tnl2: left promiscuous mode
[  369.644316][T19415] bridge9: left promiscuous mode
[  369.646576][T19415] ip6gre2: left promiscuous mode
[  369.648758][T19415] ip6gre3: left promiscuous mode
[  369.651610][T19415] bond10: left promiscuous mode
[  369.653846][T19415] vlan0005: left promiscuous mode
[  369.655921][T19415] batadv0: left promiscuous mode
[  369.658329][T19415] sit3: left promiscuous mode
[  369.660756][T19415] mac80211_hwsim hwsim2 nicvf0: left promiscuous mode
[  369.663666][T19415] bond11: left promiscuous mode
[  369.665898][T19415] bridge10: left promiscuous mode
[  369.668271][T19415] ipvlan3: left promiscuous mode
[  369.670637][T19415] ip6gretap1: left promiscuous mode
[  369.673018][T19415] vxlan3: left promiscuous mode
[  369.675139][T19415] vxlan4: left promiscuous mode
[  369.677240][T19415] bridge11: left promiscuous mode
[  369.680329][T19415] netdevsim0: left promiscuous mode
[  369.682660][T19415] batadv2: left promiscuous mode
[  369.684376][T19415] geneve4: left promiscuous mode
[  369.686039][T19415] bond12: left promiscuous mode
[  369.688047][T19415] veth4: left promiscuous mode
[  369.691334][T19415] veth5: left promiscuous mode
[  369.693471][T19415] bond13: left promiscuous mode
[  369.695649][T19415] mac80211_hwsim hwsim22 wlan3: left promiscuous mode
[  369.698579][T19415] sit4: left promiscuous mode
[  369.700968][T19415] vti0: left promiscuous mode
[  369.705278][T19415] geneve5: left promiscuous mode
[  369.707420][T19415] geneve5: left allmulticast mode
[  369.710258][T19415] bond21: left promiscuous mode
[  369.712396][T19415] vcan1: left promiscuous mode
[  369.716554][T19415] wireguard0: left promiscuous mode
[  369.718719][T19415] wireguard0: left allmulticast mode
[  369.960834][T19441] No such timeout policy "syz0"
[  370.100435][T19456] netlink: zone id is out of range
[  370.102293][T19456] netlink: zone id is out of range
[  370.104040][T19456] netlink: zone id is out of range
[  370.105696][T19456] netlink: get zone limit has 8 unknown bytes
[  370.972159][T19499] netlink: 'syz.2.4050': attribute type 21 has an invalid length.
[  370.975473][T19499] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  371.686987][T19516] __nla_validate_parse: 179 callbacks suppressed
[  371.687006][T19516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4055'.
[  371.699114][T19516] netlink: 'syz.1.4055': attribute type 7 has an invalid length.
[  371.703270][T19516] netlink: 'syz.1.4055': attribute type 8 has an invalid length.
[  371.707279][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4055'.
[  371.903915][T19527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4058'.
[  371.995408][T19533] lo speed is unknown, defaulting to 1000
[  372.025782][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'.
[  372.035547][T19535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4060'.
[  372.042820][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'.
[  372.045986][T19535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4060'.
[  372.135829][T19543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.141012][T19543] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  372.145316][T19543] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  372.231242][T19550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4065'.
[  372.321737][T19555] pim6reg0: tun_chr_ioctl cmd 1074025694
[  372.352299][T19560] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4069'.
[  372.426791][T19567] netlink: 212180 bytes leftover after parsing attributes in process `syz.0.4070'.
[  372.927764][T19601] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  372.986427][T19605] mac80211_hwsim hwsim2 ": renamed from wlan0
[  373.136790][T19608] netlink: 'syz.0.4082': attribute type 10 has an invalid length.
[  373.143608][T19608] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  373.536971][T19642] sctp: [Deprecated]: syz.0.4092 (pid 19642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.536971][T19642] Use struct sctp_sack_info instead
[  373.601123][T19645] Cannot find del_set index 4 as target
[  374.039147][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  374.173310][T19672] dummy0: entered allmulticast mode
[  374.176564][T19672] batman_adv: batadv0: Interface activated: dummy0
[  374.424310][T19681] netlink: 'syz.2.4107': attribute type 21 has an invalid length.
[  375.090399][T19712] netlink: 'syz.2.4117': attribute type 1 has an invalid length.
[  375.709608][T19739] xt_hashlimit: size too large, truncated to 1048576
[  375.973488][T19750] netlink: 'syz.0.4128': attribute type 12 has an invalid length.
[  376.532770][T19760] netlink: 'syz.1.4130': attribute type 4 has an invalid length.
[  376.729714][T19776] __nla_validate_parse: 15 callbacks suppressed
[  376.729728][T19776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4135'.
[  376.734997][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'.
[  376.737919][T19776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4135'.
[  376.898400][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4137'.
[  376.983404][T19808] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4142'.
[  376.996455][T19808] netlink: zone id is out of range
[  377.002808][T19808] netlink: zone id is out of range
[  377.004589][T19808] netlink: zone id is out of range
[  377.006126][T19808] netlink: get zone limit has 8 unknown bytes
[  377.361573][T19814] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4144'.
[  378.132298][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  378.402818][T19865] batadv0: mtu less than device minimum
[  378.405350][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.409235][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.413884][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.417720][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.422534][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.427491][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.432629][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.437506][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.442250][T19865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  378.497067][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'.
[  378.501278][T19869] veth0_to_bridge: left allmulticast mode
[  378.503201][T19869] veth0_to_bridge: left promiscuous mode
[  378.505328][T19869] bridge0: port 1(veth0_to_bridge) entered disabled state
[  379.029641][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'.
[  379.146677][T19916] batman_adv: batadv0: Interface deactivated: dummy0
[  379.155460][T19916] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  379.183211][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4175'.
[  379.217449][T19920] netlink: 'syz.2.4176': attribute type 29 has an invalid length.
[  379.227996][T19923] netlink: 'syz.0.4177': attribute type 3 has an invalid length.
[  379.321704][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'.
[  379.672290][T19948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  379.675921][T19948] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  380.352944][T20020] xt_HMARK: proto mask must be zero with L3 mode
[  380.361204][T20021] xt_HMARK: proto mask must be zero with L3 mode
[  381.070442][T20058] netlink: 'syz.2.4214': attribute type 1 has an invalid length.
[  381.073759][T20058] netlink: 'syz.2.4214': attribute type 1 has an invalid length.
[  381.992086][T20120] tipc: Resetting bearer <eth:gre0>
[  382.010072][T20121] __nla_validate_parse: 8 callbacks suppressed
[  382.010091][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'.
[  382.016961][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4233'.
[  382.124115][T20120] !: left promiscuous mode
[  382.166152][T20120] bridge_slave_0: left promiscuous mode
[  382.183119][T20120] veth0_to_bond: left promiscuous mode
[  382.191539][T20120] veth1_to_team: left allmulticast mode
[  382.222273][T20120] batadv_slave_1: left promiscuous mode
[  382.268177][T20120] 0: left allmulticast mode
[  382.270615][T20120] hsr_slave_0: left allmulticast mode
[  382.272707][T20120] 0: left allmulticast mode
[  382.327333][T20120] vlan0: left promiscuous mode
[  382.385672][T20120] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  382.390789][T20120] bond3: left promiscuous mode
[  382.453682][T20120] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.456557][T20120] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.460382][T20120] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.463640][T20120] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.477441][T20120] veth3: left promiscuous mode
[  382.519914][T20120] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 47461 - 0
[  382.522718][T20120] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 47461 - 0
[  382.525610][T20120] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 47461 - 0
[  382.528372][T20120] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 47461 - 0
[  382.550476][T20120] geneve2: left promiscuous mode
[  382.552487][T20120] geneve2: left allmulticast mode
[  382.573085][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'.
[  382.576730][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4235'.
[  382.584739][T20120] ip6erspan0: left promiscuous mode
[  382.613166][T20120] gretap4: left promiscuous mode
[  382.622324][T20120] vlan3: left allmulticast mode
[  382.624216][T20120] gretap0: left allmulticast mode
[  382.626385][T20120] bridge11: left allmulticast mode
[  382.637365][T20120] vlan4: left allmulticast mode
[  382.640588][T20120] ip6gretap0: left allmulticast mode
[  382.645566][T20120] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  382.649368][T20120] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  382.652581][T20120] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  382.655830][T20120] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  382.688065][T20121] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.691819][T20121] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.695076][T20121] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.698317][T20121] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.707300][T20133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4237'.
[  382.719916][T20135] vlan0: entered allmulticast mode
[  382.740292][T20134] lo speed is unknown, defaulting to 1000
[  383.020787][T20154] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4243'.
[  383.085642][T20165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4247'.
[  383.104603][T20164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4247'.
[  383.139884][T20170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4248'.
[  383.531987][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'.
[  383.560988][T20199] tap0: tun_chr_ioctl cmd 1074025676
[  383.565845][T20199] tap0: owner set to 0
[  383.713536][T20211] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  384.041090][T20224]  (unregistering): Released all slaves
[  384.545949][T20250] netlink: 'syz.1.4275': attribute type 5 has an invalid length.
[  384.693907][T20258] dummy0: left allmulticast mode
[  384.703602][T20258] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  384.707521][T20258] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  384.846673][T20268] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  384.852641][T20268] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  385.135115][T20287] netlink: 'syz.2.4288': attribute type 1 has an invalid length.
[  385.141817][T20287] netlink: 'syz.2.4288': attribute type 4 has an invalid length.
[  385.146259][T20287] net_ratelimit: 12 callbacks suppressed
[  385.146270][T20287] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  385.154139][T20287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.423211][T20300] netlink: 'syz.2.4294': attribute type 4 has an invalid length.
[  385.869784][T20337] ipt_ECN: cannot use operation on non-tcp rule
[  386.105486][T20362] lo speed is unknown, defaulting to 1000
[  386.130060][T20364] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  386.208426][T20370] netlink: 'syz.0.4314': attribute type 1 has an invalid length.
[  386.211868][T20371] netlink: 'syz.0.4314': attribute type 30 has an invalid length.
[  386.215268][T20371] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  386.223164][T20371] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  386.824564][T20405] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.842079][T20405] netlink: 'syz.2.4323': attribute type 5 has an invalid length.
[  386.920603][T20413] netpci0: tun_chr_ioctl cmd 1074025681
[  387.126075][T20428] __nla_validate_parse: 20 callbacks suppressed
[  387.152369][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'.
[  387.301488][T20440] netlink: 'syz.0.4335': attribute type 1 has an invalid length.
[  387.436101][T20451] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  387.444954][T20451] netlink: 'syz.1.4338': attribute type 9 has an invalid length.
[  387.652065][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4337'.
[  387.682097][T20462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4342'.
[  387.709275][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'.
[  387.825288][T20468] Cannot find add_set index 4 as target
[  387.827712][T20467] Cannot find add_set index 4 as target
[  387.910144][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4346'.
[  387.964519][T20479] netlink: 'syz.1.4348': attribute type 21 has an invalid length.
[  387.970270][T20479] netlink: 'syz.1.4348': attribute type 6 has an invalid length.
[  387.978174][T20479] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4348'.
[  388.024033][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'.
[  388.032690][T20482] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4349'.
[  388.163965][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4354'.
[  388.294662][T20505] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  388.313836][T20505] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  388.436055][T20518] pimreg: entered allmulticast mode
[  388.462238][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'.
[  388.707223][T20542] tun0: tun_chr_ioctl cmd 1074812117
[  389.415563][T20546] netlink: 'syz.2.4367': attribute type 11 has an invalid length.
[  389.422982][T20546] netlink: 'syz.2.4367': attribute type 4 has an invalid length.
[  389.571591][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  389.826591][T20578] netlink: 'syz.2.4376': attribute type 1 has an invalid length.
[  389.852404][T20578] 8021q: adding VLAN 0 to HW filter on device bond24
[  389.866489][T20578] 8021q: adding VLAN 0 to HW filter on device batadv5
[  389.871648][T20578] bond24: (slave batadv5): making interface the new active one
[  389.875927][T20578] bond24: (slave batadv5): Enslaving as an active interface with an up link
[  389.934923][T20580] ip6t_srh: unknown srh match flags  5294
[  390.279331][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  390.358415][T20583] netlink: 'syz.1.4377': attribute type 1 has an invalid length.
[  390.463754][T20586] geneve1: left promiscuous mode
[  390.759446][T20613] xt_nfacct: accounting object `syz1' does not exists
[  390.906852][T20624] bond19: entered promiscuous mode
[  390.910336][T20624] 8021q: adding VLAN 0 to HW filter on device bond19
[  390.933378][T20624] 8021q: adding VLAN 0 to HW filter on device bond19
[  390.936550][T20624] bond19: (slave vcan0): The slave device specified does not support setting the MAC address
[  390.944595][T20624] bond19: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  390.954493][T20624] bond19: (slave vcan0): making interface the new active one
[  390.956998][T20624] vcan0: entered promiscuous mode
[  390.960348][T20624] bond19: (slave vcan0): Enslaving as an active interface with an up link
[  391.816626][T20682] validate_nla: 3 callbacks suppressed
[  391.816662][T20682] netlink: 'syz.1.4394': attribute type 13 has an invalid length.
[  391.863014][T20675] lo speed is unknown, defaulting to 1000
[  391.921597][T20682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.962951][T20692] openvswitch: netlink: Flow key attr not present in new flow.
[  391.994754][T20692] openvswitch: netlink: Flow key attr not present in new flow.
[  392.122400][T20704] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  393.042424][T20731] netlink: 'syz.1.4411': attribute type 1 has an invalid length.
[  393.076332][T20733] __nla_validate_parse: 15 callbacks suppressed
[  393.076342][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'.
[  393.330064][T20742] veth17: entered allmulticast mode
[  393.349126][T20746] xt_CT: No such helper "syz0"
[  393.652185][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4426'.
[  393.655839][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4426'.
[  393.967198][T20794] lo speed is unknown, defaulting to 1000
[  394.267609][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'.
[  394.714741][T20820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4439'.
[  394.751425][T20822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4441'.
[  394.896221][T20835] Bluetooth: MGMT ver 1.23
[  394.912562][T20835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4444'.
[  395.112954][T20851] netlink: 'syz.0.4451': attribute type 1 has an invalid length.
[  395.116079][T20851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4451'.
[  395.134702][T20851] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4451'.
[  395.547843][T20888] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4461'.
[  395.745183][T20914] netlink: 'syz.0.4471': attribute type 9 has an invalid length.
[  395.752798][T20914] macvlan2: entered promiscuous mode
[  395.755047][T20913] netlink: 'syz.2.4470': attribute type 29 has an invalid length.
[  395.758431][T20913] netlink: 'syz.2.4470': attribute type 29 has an invalid length.
[  395.796655][T20914] netlink: 'syz.0.4471': attribute type 10 has an invalid length.
[  396.076185][T20948] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  396.083338][T20948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.434288][T20976] tipc: Resetting bearer <eth:syzkaller0>
[  396.484739][T20976] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 49955 - 0
[  396.488098][T20976] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 49955 - 0
[  396.492063][T20976] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 49955 - 0
[  396.501021][T20976] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 49955 - 0
[  396.574870][T20976] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  396.577402][T20976] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  396.581843][T20976] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  396.584626][T20976] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  396.600665][T20976] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 256 - 0
[  396.603140][T20976] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 256 - 0
[  396.606185][T20976] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 256 - 0
[  396.608604][T20976] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 256 - 0
[  396.627393][T20976] netdevsim netdevsim1 eth0: unset [1, 3] type 2 family 0 port 20000 - 0
[  396.637998][T20976] netdevsim netdevsim1 eth1: unset [1, 3] type 2 family 0 port 20000 - 0
[  396.642581][T20976] netdevsim netdevsim1 eth2: unset [1, 3] type 2 family 0 port 20000 - 0
[  396.645590][T20976] netdevsim netdevsim1 eth3: unset [1, 3] type 2 family 0 port 20000 - 0
[  396.652352][   T96] lo speed is unknown, defaulting to 1000
[  396.657565][   T96] syz1: Port: 1 Link DOWN
[  397.105492][T20990] wg1 speed is unknown, defaulting to 1000
[  397.111401][T20990] wg1 speed is unknown, defaulting to 1000
[  397.118639][T20990] wg1 speed is unknown, defaulting to 1000
[  397.132876][T20990] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  397.166797][T20990] wg1 speed is unknown, defaulting to 1000
[  397.170966][T20990] wg1 speed is unknown, defaulting to 1000
[  397.173765][T20990] wg1 speed is unknown, defaulting to 1000
[  397.303932][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.966596][T21020] netlink: 'syz.0.4500': attribute type 10 has an invalid length.
[  397.987568][T21018] delete_channel: no stack
[  398.035270][T21022] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  398.037850][T21022] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  398.040905][T21022] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  398.043639][T21022] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  398.055881][T21022] bond19: left promiscuous mode
[  398.057535][T21022] vcan0: left promiscuous mode
[  398.063664][T21022] macvlan2: left promiscuous mode
[  398.227277][T21033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.555611][T21059] __nla_validate_parse: 6 callbacks suppressed
[  398.555631][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'.
[  398.624794][T21059] 8021q: adding VLAN 0 to HW filter on device bond25
[  398.645148][T21063] netlink: 'syz.1.4511': attribute type 15 has an invalid length.
[  398.863247][T21084] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  399.197158][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4524'.
[  399.412941][T21106] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  400.033332][T21130] netlink: 'syz.1.4535': attribute type 2 has an invalid length.
[  400.495357][T21154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4544'.
[  400.609373][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'.
[  400.613325][T21161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.692951][T21164] netlink: 'syz.2.4547': attribute type 1 has an invalid length.
[  400.696428][T21164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4547'.
[  400.703898][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'.
[  400.766164][T21166] netlink: 'syz.0.4548': attribute type 64 has an invalid length.
[  400.776902][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4548'.
[  400.778085][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4550'.
[  400.916607][T21173] xfrm2: entered promiscuous mode
[  400.918415][T21173] xfrm2: entered allmulticast mode
[  400.927710][T21175] wireguard1: entered promiscuous mode
[  400.931026][T21175] wireguard1: entered allmulticast mode
[  400.964006][T21171] dvmrp0: left allmulticast mode
[  400.965858][T21171] pimreg: left allmulticast mode
[  401.319920][T21206] ip6gre1: entered promiscuous mode
[  401.358336][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'.
[  401.367382][T21211] netlink: 'syz.0.4560': attribute type 1 has an invalid length.
[  401.373011][T21211] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4560'.
[  401.400612][T21208] syzkaller1: entered promiscuous mode
[  401.402324][T21208] syzkaller1: entered allmulticast mode
[  401.679636][T21238] mac80211_hwsim hwsim3 D: renamed from syzkaller0
[  401.682392][T21238] tipc: Disabling bearer <eth:syzkaller0>
[  402.455937][T21248] netlink: zone id is out of range
[  402.458119][T21248] netlink: zone id is out of range
[  402.463213][T21248] netlink: zone id is out of range
[  402.465246][T21248] netlink: zone id is out of range
[  402.467977][T21248] netlink: zone id is out of range
[  402.475039][T21248] netlink: zone id is out of range
[  402.476950][T21248] netlink: zone id is out of range
[  402.479677][T21248] netlink: zone id is out of range
[  402.501904][T21255] bridge_slave_0: default FDB implementation only supports local addresses
[  402.663383][T21268] ..@: renamed from bond_slave_0
[  402.777252][T21278] xt_hashlimit: overflow, try lower: 6/0
[  402.796069][T21278] netlink: 'syz.0.4578': attribute type 1 has an invalid length.
[  402.805666][T21281] netlink: 'syz.2.4579': attribute type 1 has an invalid length.
[  402.809796][T21283] netlink: 'syz.1.4580': attribute type 1 has an invalid length.
[  402.968152][T21298] netlink: 'syz.1.4585': attribute type 1 has an invalid length.
[  402.983294][T21298] netlink: 'syz.1.4585': attribute type 1 has an invalid length.
[  404.336444][T21349] net_ratelimit: 76 callbacks suppressed
[  404.336463][T21349] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  404.537821][T21367] __nla_validate_parse: 10 callbacks suppressed
[  404.537835][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'.
[  404.616773][T21372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.697714][T21377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4608'.
[  404.705538][T21377] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4608'.
[  404.719973][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4608'.
[  404.724077][T21377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4608'.
[  404.786496][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'.
[  405.247069][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4625'.
[  405.252089][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4625'.
[  406.068447][T21464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4635'.
[  406.757725][T21488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4641'.
[  406.917344][T21511] netlink: 'syz.2.4647': attribute type 4 has an invalid length.
[  406.942545][T21516] xfrm2: entered promiscuous mode
[  406.944558][T21516] xfrm2: entered allmulticast mode
[  406.965064][T21516] xt_hashlimit: size too large, truncated to 1048576
[  407.244618][T21533] 8021q: adding VLAN 0 to HW filter on device bond10
[  407.260761][T21533] macvlan0: entered promiscuous mode
[  407.262971][T21533] macvlan0: entered allmulticast mode
[  407.267782][T21533] bond0: entered allmulticast mode
[  407.271425][T21533] bond0: entered promiscuous mode
[  407.273710][T21533] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  407.278373][T21533] bond10: (slave macvlan0): Enslaving as an active interface with an up link
[  407.603965][T21565] xt_hashlimit: size too large, truncated to 1048576
[  408.134995][T21602] netlink: 'syz.2.4673': attribute type 4 has an invalid length.
[  408.139966][T21602] netlink: 'syz.2.4673': attribute type 17 has an invalid length.
[  408.366095][T21616] netlink: 'syz.2.4679': attribute type 21 has an invalid length.
[  408.439339][ T6284] wlan0: Trigger new scan to find an IBSS to join
[  408.465411][T21621] bridge16: entered allmulticast mode
[  408.967821][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.147133][T21647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.154364][T21647] syzkaller0: entered promiscuous mode
[  409.157203][T21647] syzkaller0: entered allmulticast mode
[  409.179896][T21647] tipc: Resetting bearer <eth:syzkaller0>
[  409.200436][T21647] tipc: Disabling bearer <eth:syzkaller0>
[  409.930026][T21682] __nla_validate_parse: 22 callbacks suppressed
[  409.930038][T21682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4700'.
[  409.936092][T21682] bond0: invalid ARP target 0.0.0.0 specified for addition
[  409.942814][T21682] bond0: option arp_ip_target: invalid value (0)
[  410.188503][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4703'.
[  410.241495][T21698] pim6reg: left allmulticast mode
[  410.582905][T21714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4710'.
[  410.586450][T21714] vlan0: entered promiscuous mode
[  410.894396][T21721] syzkaller1: tun_chr_ioctl cmd 1074025672
[  410.896895][T21721] syzkaller1: ignored: set checksum disabled
[  410.910012][T21721] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4712'.
[  410.915267][T21721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4712'.
[  411.112641][T21728] netlink: 'syz.0.4714': attribute type 1 has an invalid length.
[  411.134049][T21728] 8021q: adding VLAN 0 to HW filter on device bond20
[  411.151546][T21728] 8021q: adding VLAN 0 to HW filter on device bond20
[  411.154597][T21728] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  411.158975][T21728] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  411.212672][T21739] veth15: entered promiscuous mode
[  411.217629][T21739] bond20: (slave veth15): Enslaving as an active interface with a down link
[  411.399136][ T6284] wlan0: Trigger new scan to find an IBSS to join
[  411.444657][T21750] xt_hashlimit: size too large, truncated to 1048576
[  411.747329][T21774] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4727'.
[  411.795971][T21779] netlink: 'syz.0.4728': attribute type 29 has an invalid length.
[  411.807451][T21780] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4729'.
[  411.961359][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  412.082200][T21799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'.
[  412.085441][T21800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'.
[  412.096915][T21799] xt_l2tp: v2 doesn't support IP mode
[  412.307680][ T6287] wlan0: Creating new IBSS network, BSSID be:ff:9c:fa:cb:4a
[  412.520729][T21830] netlink: 'syz.0.4742': attribute type 20 has an invalid length.
[  412.745338][T21852] x_tables: duplicate underflow at hook 3
[  413.030025][T21874] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  413.106817][T21879] netlink: 'syz.1.4755': attribute type 21 has an invalid length.
[  413.120900][T21879] netlink: 'syz.1.4755': attribute type 1 has an invalid length.
[  414.418318][T21928] bond26: entered promiscuous mode
[  414.422325][T21928] 8021q: adding VLAN 0 to HW filter on device bond26
[  414.521217][T21928] bond26 (unregistering): Released all slaves
[  414.793998][T21957] netlink: 'syz.0.4775': attribute type 1 has an invalid length.
[  414.815658][T21957] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.829422][T21957] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.831937][T21957] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.834451][T21957] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.836958][T21957] geneve4: entered promiscuous mode
[  414.964626][T21969] __nla_validate_parse: 6 callbacks suppressed
[  414.964639][T21969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4778'.
[  415.358412][T22000] syzkaller1: entered promiscuous mode
[  415.365176][T22000] syzkaller1: entered allmulticast mode
[  415.397013][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4792'.
[  415.404068][T22006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4792'.
[  415.516932][T22006] netlink: 'syz.1.4792': attribute type 2 has an invalid length.
[  415.521261][T22006] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4792'.
[  415.656455][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'.
[  415.660754][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4794'.
[  415.927535][T22016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4795'.
[  416.231947][T22024] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4799'.
[  416.494572][T22029] syzkaller0: entered promiscuous mode
[  416.496869][T22029] syzkaller0: entered allmulticast mode
[  418.445846][T22051] ip6_vti0: Master is either lo or non-ether device
[  418.505950][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'.
[  418.552847][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'.
[  418.640515][T22069] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  418.857408][T22080] smc: net device bond0 applied user defined pnetid SYZ2
[  419.046146][T22084] sctp: [Deprecated]: syz.0.4817 (pid 22084) Use of struct sctp_assoc_value in delayed_ack socket option.
[  419.046146][T22084] Use struct sctp_sack_info instead
[  419.484196][T22115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.486844][T22118] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.487995][T22115] syzkaller0: entered promiscuous mode
[  419.491999][T22115] syzkaller0: entered allmulticast mode
[  419.500002][T22113] tipc: Resetting bearer <eth:syzkaller0>
[  419.527235][T22113] tipc: Disabling bearer <eth:syzkaller0>
[  420.093734][T22178] __nla_validate_parse: 20 callbacks suppressed
[  420.093752][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'.
[  420.104665][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'.
[  420.108165][T22179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4847'.
[  420.111795][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4847'.
[  420.156539][T22182] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4849'.
[  420.716987][T22215] netlink: 'syz.1.4859': attribute type 1 has an invalid length.
[  420.720156][T22215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4859'.
[  421.049102][T22228] block nbd1: server does not support multiple connections per device.
[  421.053844][T22228] block nbd1: shutting down sockets
[  421.092817][T22231] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4865'.
[  421.193945][T22234] x_tables: duplicate underflow at hook 2
[  421.266242][T22239] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4868'.
[  421.273394][T22239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4868'.
[  421.277917][T22239] dvmrp0: left allmulticast mode
[  421.341381][T22244] rdma_rxe: rxe_newlink: failed to add lo
[  421.373369][T22239] erspan0: left allmulticast mode
[  421.388697][T22239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.393879][ T9216] lo speed is unknown, defaulting to 1000
[  421.395868][ T9216] syz1: Port: 1 Link ACTIVE
[  421.572874][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4873'.
[  421.916151][T22288] x_tables: ip6_tables: mh match: only valid for protocol 135
[  421.930196][T22288] netem: unknown loss type 13
[  421.997601][T22292] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  422.161475][T22302] netlink: 'syz.2.4891': attribute type 2 has an invalid length.
[  422.355248][T22322] netlink: 'syz.2.4898': attribute type 1 has an invalid length.
[  422.377964][T22322] 8021q: adding VLAN 0 to HW filter on device bond26
[  422.395554][T22322] bond26: (slave veth13): Enslaving as an active interface with a down link
[  422.414563][T22322] vlan2: entered allmulticast mode
[  422.416515][T22322] bond26: entered allmulticast mode
[  422.420861][T22322] bond26: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  422.785788][T22354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.127040][T22379] netlink: 'syz.1.4917': attribute type 5 has an invalid length.
[  423.445786][T22404] batman_adv: batadv0: Interface activated: dummy0
[  423.448391][T22404] batadv0: mtu less than device minimum
[  423.456501][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.461658][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.466726][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.472065][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.477211][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.482362][T22404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  423.539325][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.652290][T22420] netlink: 'syz.0.4931': attribute type 2 has an invalid length.
[  423.666062][T22420] tipc: Resetting bearer <eth:gre0>
[  423.774373][T22426] bond27: entered promiscuous mode
[  423.849582][T22428] bond19: (slave vcan0): Releasing backup interface
[  423.855509][T22428] bond20: (slave veth15): Releasing active interface
[  423.952490][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.990155][T22437] bond28: (slave bridge23): Enslaving as an active interface with an up link
[  423.999136][T22437] macvlan3: entered promiscuous mode
[  424.001346][T22437] macvlan3: entered allmulticast mode
[  424.003616][T22437] bond28: (slave macvlan3): Error -98 calling set_mac_address
[  424.069469][T10153] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.691830][T22459] lo: entered promiscuous mode
[  424.882227][T22458] lo: left promiscuous mode
[  425.083285][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.085779][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.185810][T22489] rdma_rxe: rxe_newlink: failed to add vxcan1
[  425.193676][T22491] rdma_rxe: rxe_newlink: failed to add vxcan1
[  425.379864][T22502] __nla_validate_parse: 16 callbacks suppressed
[  425.379876][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4959'.
[  425.437669][T22502] 8021q: adding VLAN 0 to HW filter on device bond12
[  425.494092][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'.
[  425.558531][T22516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4962'.
[  425.562854][T22516] net_ratelimit: 14 callbacks suppressed
[  425.562865][T22516] openvswitch: netlink: Flow key attr not present in new flow.
[  425.675669][T22523] openvswitch: netlink: EtherType 10 is less than min 600
[  425.792032][T22542] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  425.803399][T22543] No such timeout policy "syz1"
[  425.852277][T22549] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.4975'.
[  425.907501][T22559] sch_tbf: burst 0 is lower than device lo mtu (39799) !
[  425.959913][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.068218][T22575] netlink: 'syz.2.4985': attribute type 7 has an invalid length.
[  426.073103][T22575] netlink: 'syz.2.4985': attribute type 8 has an invalid length.
[  426.131720][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4987'.
[  426.154453][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4987'.
[  426.157658][T22580] IPVS: Error joining to the multicast group
[  426.227820][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'.
[  426.270653][T22584] lo speed is unknown, defaulting to 1000
[  426.392602][T22584] wg1 speed is unknown, defaulting to 1000
[  426.487074][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'.
[  426.495308][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'.
[  426.498671][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'.
[  426.650295][T22594] xt_TCPMSS: Only works on TCP SYN packets
[  427.177144][T22617] bridge_slave_0: default FDB implementation only supports local addresses
[  427.765192][T22674] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  428.759194][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.215769][T22720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.407096][T22729] delete_channel: no stack
[  430.501813][T22772] __nla_validate_parse: 14 callbacks suppressed
[  430.501829][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'.
[  430.507615][T22774] netlink: 'syz.2.5054': attribute type 23 has an invalid length.
[  430.516799][T22772] vlan1: entered promiscuous mode
[  430.522245][T22772] ip6gretap1: entered promiscuous mode
[  430.645117][T22787] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5059'.
[  430.861250][T22805] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.5064'.
[  430.935144][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'.
[  430.944084][T22812] !: entered promiscuous mode
[  430.947692][T22812] !: left promiscuous mode
[  430.965461][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5066'.
[  430.976443][T22809] syzkaller1: entered promiscuous mode
[  430.978307][T22809] syzkaller1: entered allmulticast mode
[  431.700399][T22846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5077'.
[  431.846716][T22861] netlink: 'syz.1.5081': attribute type 1 has an invalid length.
[  432.110382][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'.
[  432.126637][T22874] netlink: 'syz.1.5086': attribute type 32 has an invalid length.
[  432.132401][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5086'.
[  432.140202][T22874] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  432.363166][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'.
[  432.372219][T22894] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5093'.
[  432.401866][T22900] Cannot find set identified by id 0 to match
[  432.421843][T22900] nbd: illegal input index 65508
[  432.573877][T22915] netlink: 'syz.1.5101': attribute type 11 has an invalid length.
[  432.576976][T22915] netlink: 'syz.1.5101': attribute type 11 has an invalid length.
[  432.675704][T22930] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  432.912773][T22943] xt_TCPMSS: Only works on TCP SYN packets
[  433.551291][T22991] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  433.790884][T23004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  434.180720][T23025] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  435.055731][T23042] netlink: 'syz.0.5133': attribute type 1 has an invalid length.
[  435.338753][T23059] netlink: 'syz.2.5141': attribute type 3 has an invalid length.
[  435.893774][T23107] __nla_validate_parse: 110 callbacks suppressed
[  435.893787][T23107] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5154'.
[  436.095418][T23116] netlink: 'syz.0.5157': attribute type 13 has an invalid length.
[  436.098454][T23116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5157'.
[  436.102425][T23116] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  436.359134][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  436.574833][T23095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.584013][T23102] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5152'.
[  436.690931][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'.
[  436.700361][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5159'.
[  436.718337][T23122] netlink: 'syz.1.5160': attribute type 21 has an invalid length.
[  436.727625][T23122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5160'.
[  436.802218][T23131] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5162'.
[  437.008378][T23149] batman_adv: batadv0: Adding interface: macvlan0
[  437.011329][T23149] batman_adv: batadv0: The MTU of interface macvlan0 is too small (39785) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 39845.
[  437.018064][T23149] batman_adv: batadv0: Interface activated: macvlan0
[  437.155484][T23159] xt_TPROXY: Can be used only with -p tcp or -p udp
[  437.165969][T23159] syzkaller0: entered promiscuous mode
[  437.167706][T23159] syzkaller0: entered allmulticast mode
[  437.212063][T23163] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.5173'.
[  437.216371][T23163] netlink: zone id is out of range
[  437.218101][T23163] netlink: zone id is out of range
[  437.221927][T23163] netlink: zone id is out of range
[  437.223607][T23163] netlink: zone id is out of range
[  437.225275][T23163] netlink: zone id is out of range
[  437.226893][T23163] netlink: zone id is out of range
[  437.228594][T23163] netlink: zone id is out of range
[  437.249150][T23163] netlink: zone id is out of range
[  437.251284][T23163] netlink: zone id is out of range
[  437.384624][T23177] netlink: 'syz.2.5178': attribute type 2 has an invalid length.
[  437.387100][T23177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5178'.
[  437.467471][T23190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'.
[  437.908601][T23205] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  438.043458][T23207] netlink: 'syz.2.5185': attribute type 16 has an invalid length.
[  438.049665][T23207] netlink: 'syz.2.5185': attribute type 17 has an invalid length.
[  438.079215][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  438.344244][T23211] xt_CT: No such helper "snmp"
[  438.459707][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  438.967951][T23262] Unsupported ieee802154 address type: 0
[  440.307904][T23324] xt_TPROXY: Can be used only with -p tcp or -p udp
[  440.317448][T23324] delete_channel: no stack
[  440.481840][T23333] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  440.546876][T23335] net_ratelimit: 4055 callbacks suppressed
[  440.546926][T23335] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  441.035503][T23359] IPVS: set_ctl: invalid protocol: 43 172.20.20.28:20000
[  441.065228][T23356] netlink: 'syz.1.5234': attribute type 4 has an invalid length.
[  441.067632][T23356] __nla_validate_parse: 10 callbacks suppressed
[  441.067646][T23356] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5234'.
[  441.479202][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  441.518124][T23378] netlink: 'syz.0.5243': attribute type 2 has an invalid length.
[  441.616244][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5244'.
[  441.693597][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5244'.
[  441.924823][T23399] xfrm3: entered promiscuous mode
[  441.927008][T23399] xfrm3: entered allmulticast mode
[  441.947312][T23399] xt_hashlimit: size too large, truncated to 1048576
[  442.255237][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5250'.
[  442.519400][T23412] xt_hashlimit: size too large, truncated to 1048576
[  442.573418][T23416] : renamed from bridge_slave_0
[  442.664652][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5253'.
[  442.811159][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5257'.
[  442.814498][T23429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5257'.
[  442.972488][T23442] netlink: 'syz.0.5262': attribute type 16 has an invalid length.
[  442.983122][T23442] netlink: 'syz.0.5262': attribute type 17 has an invalid length.
[  443.005963][T23442] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.009602][T23442] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.012477][T23442] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.015109][T23442] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.029979][T23442] batman_adv: batadv0: Interface deactivated: macvlan0
[  443.229908][T23450] syzkaller1: entered promiscuous mode
[  443.232095][T23450] syzkaller1: entered allmulticast mode
[  443.261483][T23450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5264'.
[  443.278314][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'.
[  443.471825][T23459] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5268'.
[  443.479228][T23459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  443.482166][T23459] IPv6: NLM_F_CREATE should be set when creating new route
[  443.510280][T23461] lo speed is unknown, defaulting to 1000
[  443.532530][T23463] netlink: 'syz.0.5269': attribute type 1 has an invalid length.
[  443.552255][T23463] 8021q: adding VLAN 0 to HW filter on device bond21
[  443.704498][T23461] wg1 speed is unknown, defaulting to 1000
[  443.784849][T23474] netlink: 'syz.0.5272': attribute type 5 has an invalid length.
[  444.688339][T23540] ip6gre4: entered allmulticast mode
[  444.928778][T23558] netlink: 'syz.2.5300': attribute type 1 has an invalid length.
[  444.987092][T23559] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  445.202102][T23566] netlink: 'syz.2.5301': attribute type 1 has an invalid length.
[  445.230316][T23566] bond29: (slave geneve6): Opening slave failed
[  445.720228][T23593] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.723641][T23593] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.726897][T23593] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.730860][T23593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.738326][T23593] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.746197][T23593] syzkaller0: mtu less than device minimum
[  445.891363][T23595] batman_adv: batadv0: Removing interface: macvlan0
[  446.117497][T23620] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  446.136618][T23612] __nla_validate_parse: 11 callbacks suppressed
[  446.136633][T23612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'.
[  446.147906][T23612] pim6reg: left allmulticast mode
[  446.174243][T23624] syzkaller0: entered promiscuous mode
[  446.176199][T23624] syzkaller0: entered allmulticast mode
[  446.185585][T23627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5318'.
[  446.191807][T23627] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5318'.
[  446.195401][T23627] netlink: 'syz.2.5318': attribute type 6 has an invalid length.
[  446.198546][T23627] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5318'.
[  446.874819][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'.
[  446.975461][T23644] x_tables: duplicate underflow at hook 1
[  447.112984][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5327'.
[  447.361677][T23674] macsec2: entered promiscuous mode
[  447.363758][T23674] macsec2: entered allmulticast mode
[  447.988690][T23722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5347'.
[  448.221799][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5350'.
[  448.227042][T23732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5350'.
[  448.297997][   T33] audit: type=1107 audit(1752779587.903:9): pid=23735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  448.310603][T23737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5351'.
[  448.604170][T23759] netlink: 'syz.1.5359': attribute type 1 has an invalid length.
[  448.639815][T23759] netlink: 'syz.1.5359': attribute type 15 has an invalid length.
[  448.642870][T23759] netlink: 'syz.1.5359': attribute type 18 has an invalid length.
[  448.927303][T23765] tipc: Resetting bearer <ib:ip6gre0>
[  449.038202][T23768] netlink: 'syz.0.5357': attribute type 1 has an invalid length.
[  449.042001][T23765] bond0: left allmulticast mode
[  449.044370][T23765] bond0: left promiscuous mode
[  449.102667][T23765] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.120348][T23765] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.123808][T23765] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.127341][T23765] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.135254][ T5885] lo speed is unknown, defaulting to 1000
[  449.137597][ T5885] syz1: Port: 1 Link DOWN
[  449.155449][T23773] netlink: 'syz.2.5360': attribute type 1 has an invalid length.
[  449.245543][T23777] sctp: [Deprecated]: syz.2.5362 (pid 23777) Use of int in max_burst socket option.
[  449.245543][T23777] Use struct sctp_assoc_value instead
[  449.288248][T23779] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  449.371853][T23782] netlink: 'syz.2.5363': attribute type 29 has an invalid length.
[  449.378737][T23782] netlink: 'syz.2.5363': attribute type 29 has an invalid length.
[  449.387527][T23782] netlink: 'syz.2.5363': attribute type 29 has an invalid length.
[  449.398809][T23782] netlink: 'syz.2.5363': attribute type 29 has an invalid length.
[  449.402273][T23782] netlink: 'syz.2.5363': attribute type 29 has an invalid length.
[  449.628591][T23792] xt_CT: You must specify a L4 protocol and not use inversions on it
[  449.996921][T23817] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003
[  450.149426][T23832] netpci0: tun_chr_ioctl cmd 1074025681
[  450.498344][T23854] 8021q: adding VLAN 0 to HW filter on device bond30
[  450.540325][T23857] bridge14: entered allmulticast mode
[  451.079191][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  451.383708][T23888] __nla_validate_parse: 19 callbacks suppressed
[  451.383725][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5394'.
[  451.428410][T23888] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5394'.
[  451.964150][T23912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5400'.
[  452.028651][T23911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5401'.
[  452.325565][T23942] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  452.463118][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.469305][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.472414][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.479673][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.482540][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.484783][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.487137][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.489962][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.492888][T23950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.586249][T23960] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5417'.
[  452.983925][T23983] x_tables: duplicate underflow at hook 3
[  453.065888][T23988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5425'.
[  453.116791][T23987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.524390][T24006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5430'.
[  453.527191][T24006] netem: unknown loss type 13
[  453.707566][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5433'.
[  453.829094][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5434'.
[  454.054954][T24026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5436'.
[  454.243546][T24029] syzkaller1: entered promiscuous mode
[  454.245350][T24029] syzkaller1: entered allmulticast mode
[  454.845572][T24074] syzkaller1: tun_chr_ioctl cmd 1074025672
[  454.847339][T24074] syzkaller1: ignored: set checksum disabled
[  455.746592][   T33] audit: type=1804 audit(1752779595.353:10): pid=24157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5470" name="/newroot/1837/cgroup.controllers" dev="tmpfs" ino=9389 res=1 errno=0
[  455.759555][   T33] audit: type=1800 audit(1752779595.353:11): pid=24157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5470" name="cgroup.controllers" dev="tmpfs" ino=9389 res=0 errno=0
[  456.029552][T24175] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  456.146902][T24182] validate_nla: 6 callbacks suppressed
[  456.146916][T24182] netlink: 'syz.0.5478': attribute type 1 has an invalid length.
[  456.510790][T24208] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  456.513367][T24209] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  457.227255][T24224] __nla_validate_parse: 7 callbacks suppressed
[  457.227307][T24224] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5489'.
[  457.300513][T24227] veth1_to_team: entered allmulticast mode
[  457.327070][   T33] audit: type=1800 audit(1752779596.933:12): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5488" name="x000000000000000801777777777777777777777" dev="tmpfs" ino=9427 res=0 errno=0
[  457.343143][   T33] audit: type=1804 audit(1752779596.953:13): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5488" name="x000000000000000801777777777777777777777" dev="tmpfs" ino=9427 res=1 errno=0
[  457.414713][T24231] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5491'.
[  457.564176][T24243] netlink: 'syz.2.5496': attribute type 9 has an invalid length.
[  457.571352][T24243] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.5496'.
[  457.576141][T24243] netlink: 'syz.2.5496': attribute type 1 has an invalid length.
[  457.640531][T24243] 8021q: adding VLAN 0 to HW filter on device bond31
[  457.658306][T24243] ipvlan2: entered allmulticast mode
[  457.662135][T24243] bond31: entered allmulticast mode
[  457.667489][T24251] xt_ecn: cannot match TCP bits for non-tcp packets
[  457.687615][T24252] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  457.733710][T24243] bond31: (slave gretap3): making interface the new active one
[  457.747996][T24243] gretap3: entered allmulticast mode
[  457.753661][T24243] bond31: (slave gretap3): Enslaving as an active interface with an up link
[  457.764589][T24243] syz.2.5496 (24243) used greatest stack depth: 18576 bytes left
[  457.896588][T24275] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5505'.
[  458.064414][T24298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5511'.
[  458.095395][T24300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5512'.
[  458.125840][T24300] can: request_module (can-proto-3) failed.
[  458.229955][T24307] net_ratelimit: 58 callbacks suppressed
[  458.229977][T24307] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  458.384115][T24317] tap0: tun_chr_ioctl cmd 1074025680
[  458.388129][T24317] tap0: tun_chr_ioctl cmd 2147767517
[  458.573579][T24328] netlink: 'syz.1.5523': attribute type 1 has an invalid length.
[  458.580001][T24328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5523'.
[  458.587006][T24328] netlink: 'syz.1.5523': attribute type 1 has an invalid length.
[  458.593296][T24328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5523'.
[  458.884490][T24348] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5528'.
[  459.118281][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5530'.
[  459.183401][T24358] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  459.271508][T24361] ip6t_srh: unknown srh invflags 4000
[  459.807844][T24381] netlink: 'syz.1.5535': attribute type 10 has an invalid length.
[  459.974652][T24389] lo speed is unknown, defaulting to 1000
[  460.250788][T24389] wg1 speed is unknown, defaulting to 1000
[  460.402347][T24411] netlink: 'syz.1.5545': attribute type 1 has an invalid length.
[  461.817262][T24425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  461.820162][T24425] IPv6: NLM_F_CREATE should be set when creating new route
[  461.822966][T24425] IPv6: NLM_F_CREATE should be set when creating new route
[  461.825334][T24425] IPv6: NLM_F_CREATE should be set when creating new route
[  461.852935][T24425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  461.858074][T24428] sctp: [Deprecated]: syz.1.5549 (pid 24428) Use of int in max_burst socket option deprecated.
[  461.858074][T24428] Use struct sctp_assoc_value instead
[  462.360687][T24459] batadv2: entered promiscuous mode
[  462.367167][T24460] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  462.419351][T24465] __nla_validate_parse: 7 callbacks suppressed
[  462.419370][T24465] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5561'.
[  462.605615][T24474] x_tables: duplicate underflow at hook 1
[  462.945648][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'.
[  462.949639][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5575'.
[  462.953121][T24508] netlink: 'syz.2.5575': attribute type 13 has an invalid length.
[  462.956161][T24508] netlink: 'syz.2.5575': attribute type 11 has an invalid length.
[  462.967349][T24508] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5575'.
[  463.077576][T24519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5579'.
[  463.087343][T24519] tc_dump_action: action bad kind
[  463.098543][T24519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5579'.
[  463.157041][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5581'.
[  463.406858][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5589'.
[  463.431848][T24556] netlink: 'syz.1.5589': attribute type 21 has an invalid length.
[  463.816227][T24596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.961808][T24605] netlink: 'syz.1.5599': attribute type 1 has an invalid length.
[  463.973696][T24605] netlink: 'syz.1.5599': attribute type 10 has an invalid length.
[  463.977439][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5599'.
[  464.053741][T24613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5603'.
[  464.093282][T24611] lo speed is unknown, defaulting to 1000
[  464.290990][T24621] 8021q: adding VLAN 0 to HW filter on device bond22
[  464.322031][T24611] wg1 speed is unknown, defaulting to 1000
[  464.400112][T24626] macvlan0: entered promiscuous mode
[  464.402309][T24626] macvlan0: entered allmulticast mode
[  464.405679][T24626] bond22: (slave macvlan0): Opening slave failed
[  464.501691][T24629] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  464.701113][T24640] lo speed is unknown, defaulting to 1000
[  464.915416][T24640] wg1 speed is unknown, defaulting to 1000
[  465.199162][T24657] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  465.538656][T24671] netlink: 'syz.2.5619': attribute type 1 has an invalid length.
[  465.542400][T24671] netlink: 'syz.2.5619': attribute type 2 has an invalid length.
[  465.545838][T24671] netlink: 'syz.2.5619': attribute type 1 has an invalid length.
[  465.600881][T24679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.603880][T24679] syzkaller0: entered promiscuous mode
[  465.605641][T24679] syzkaller0: entered allmulticast mode
[  465.640998][T24679] tipc: Resetting bearer <eth:syzkaller0>
[  465.647673][T24678] tipc: Resetting bearer <eth:syzkaller0>
[  465.667748][T24678] tipc: Disabling bearer <eth:syzkaller0>
[  465.848627][T24696] netlink: 'syz.1.5626': attribute type 4 has an invalid length.
[  465.890934][T24699] syzkaller1: entered promiscuous mode
[  465.892772][T24699] syzkaller1: entered allmulticast mode
[  466.618215][T24760] netlink: 'syz.2.5643': attribute type 1 has an invalid length.
[  467.073985][T24790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.083457][T24790] syzkaller0: entered promiscuous mode
[  467.085587][T24790] syzkaller0: entered allmulticast mode
[  467.122126][T24790] tipc: Resetting bearer <eth:syzkaller0>
[  467.132592][T24788] tipc: Resetting bearer <eth:syzkaller0>
[  467.148789][T24788] tipc: Disabling bearer <eth:syzkaller0>
[  467.240165][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  467.333155][T24803] SET target dimension over the limit!
[  467.723811][T24827] __nla_validate_parse: 12 callbacks suppressed
[  467.723831][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5665'.
[  467.734741][T24829] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5667'.
[  467.734976][T24831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5666'.
[  467.985460][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5670'.
[  467.995471][T24848] hsr_slave_0: left promiscuous mode
[  468.101151][T24843] lo speed is unknown, defaulting to 1000
[  468.259183][T24843] wg1 speed is unknown, defaulting to 1000
[  468.965045][T24879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5680'.
[  469.100192][T24887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5682'.
[  469.596421][T24928] netlink: 'syz.2.5690': attribute type 10 has an invalid length.
[  470.097167][T24960] bridge: RTM_NEWNEIGH with invalid state 0x1
[  470.247921][T24971] bond10: (slave macvlan0): Releasing backup interface
[  470.386142][T24981] netlink: 'syz.1.5705': attribute type 83 has an invalid length.
[  470.404062][T24984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5707'.
[  470.406969][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5707'.
[  470.458441][T24988] netlink: 'syz.0.5708': attribute type 16 has an invalid length.
[  470.465143][T24988] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5708'.
[  470.632378][T25006] netlink: 'syz.1.5713': attribute type 1 has an invalid length.
[  470.757850][T25014] netlink: 'syz.0.5716': attribute type 2 has an invalid length.
[  470.967593][T25034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5722'.
[  470.994989][T25034] 8021q: adding VLAN 0 to HW filter on device bond15
[  471.025829][T25034] 8021q: adding VLAN 0 to HW filter on device bond15
[  471.032160][T25034] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  471.036274][T25034] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  471.060827][ T5885] lo speed is unknown, defaulting to 1000
[  471.256716][T25057] netlink: 'syz.1.5729': attribute type 5 has an invalid length.
[  471.264527][T25057] ip6erspan0: entered promiscuous mode
[  471.314030][T25061] ip6gre3: entered allmulticast mode
[  472.801398][T25130] __nla_validate_parse: 4 callbacks suppressed
[  472.801413][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5748'.
[  472.813877][T25131] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0
[  472.814800][T25130] ipt_rpfilter: unknown options
[  472.828543][T25130] nft_compat: unsupported protocol 0
[  472.914982][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  472.955342][T25144] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5751'.
[  473.227097][T25151] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5753'.
[  473.439285][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  473.546099][T25163] syzkaller1: entered promiscuous mode
[  473.548457][T25163] syzkaller1: entered allmulticast mode
[  473.556588][T25163] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5757'.
[  473.887095][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5758'.
[  473.932462][T25171] batadv_slave_0: entered promiscuous mode
[  473.935773][T25171] batadv_slave_0: entered allmulticast mode
[  473.940149][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'.
[  473.943023][T25171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5760'.
[  473.949147][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  474.183226][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5764'.
[  474.465350][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  474.988333][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  475.079970][T25238] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  475.115308][T25240] netlink: 'syz.2.5775': attribute type 13 has an invalid length.
[  475.117849][T25240] netlink: 'syz.2.5775': attribute type 17 has an invalid length.
[  475.188405][T25240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  475.210379][ T9216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  475.252926][T25230] lo speed is unknown, defaulting to 1000
[  475.274714][T25240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.314066][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5779'.
[  475.342007][T25240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.403844][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  475.423873][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  475.510218][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  475.517598][T25230] wg1 speed is unknown, defaulting to 1000
[  475.704249][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5784'.
[  475.728689][ T9216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  476.005863][T25283] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  476.029541][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  476.130991][ T9216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  476.759688][T25290] netlink: 'syz.1.5793': attribute type 1 has an invalid length.
[  476.950508][T25300] wg2: left promiscuous mode
[  476.952898][T25300] batadv_slave_0: left promiscuous mode
[  476.955767][T25300] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  476.958751][T25300] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  476.968062][T25300] gretap2: left promiscuous mode
[  476.970787][T25300] vti1: left promiscuous mode
[  476.973097][T25300] geneve2: left promiscuous mode
[  476.976165][T25300] bond3: left promiscuous mode
[  476.978455][T25300] gre1: left promiscuous mode
[  476.986213][T25300] veth7: left promiscuous mode
[  476.988620][T25300] geneve4: left promiscuous mode
[  476.991408][T25300] geneve5: left promiscuous mode
[  476.993810][T25300] macvlan0: left promiscuous mode
[  477.013260][T25300] ip6erspan0: left promiscuous mode
[  477.168180][T25318] xt_CT: No such helper "pptp"
[  478.075836][ T5864] net_ratelimit: 4 callbacks suppressed
[  478.075850][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  478.136986][T25367] __nla_validate_parse: 1 callbacks suppressed
[  478.137006][T25367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5817'.
[  478.197109][T25364] IPVS: persistence engine module ip_vs_pe_ not found
[  478.205552][T25364] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  478.209710][T25364] netlink: 'syz.1.5816': attribute type 3 has an invalid length.
[  478.212547][T25364] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5816'.
[  478.365748][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'.
[  478.426124][T25394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5824'.
[  478.543693][T25402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'.
[  478.550313][T25402] netlink: 'syz.1.5826': attribute type 1 has an invalid length.
[  478.554918][T25402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5826'.
[  478.558417][T25402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5826'.
[  478.562776][T25402] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  478.593588][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  478.604262][T25404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5827'.
[  478.758557][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5827'.
[  478.816487][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5827'.
[  479.049395][T25429] tap0: tun_chr_ioctl cmd 1074025677
[  479.051499][T25429] tap0: linktype set to 1
[  479.099183][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  479.301607][T25445] netlink: 'syz.1.5842': attribute type 1 has an invalid length.
[  479.315901][T25447] netlink: 'syz.0.5843': attribute type 1 has an invalid length.
[  479.609201][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  479.792014][T25475] netlink: 'syz.1.5852': attribute type 4 has an invalid length.
[  479.797874][T25476] netlink: 'syz.1.5852': attribute type 4 has an invalid length.
[  480.120712][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  480.404508][T25494] xt_CT: No such helper "snmp"
[  480.629146][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  480.708478][T25503] netlink: 'syz.0.5861': attribute type 18 has an invalid length.
[  480.835147][T25507] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  480.861271][T25509] netlink: 'syz.1.5864': attribute type 4 has an invalid length.
[  481.015495][T25518] netlink: 'syz.0.5867': attribute type 28 has an invalid length.
[  481.164328][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  481.468141][T25556] netlink: 'syz.1.5878': attribute type 1 has an invalid length.
[  481.545847][T25556] 8021q: adding VLAN 0 to HW filter on device bond17
[  481.550509][T25556] bond16: (slave bond17): making interface the new active one
[  481.554026][T25556] bond16: (slave bond17): Enslaving as an active interface with an up link
[  481.577099][T25562] vlan5: entered allmulticast mode
[  481.581356][T25562] bridge_slave_0: entered allmulticast mode
[  481.616543][T25556] bond16: (slave gretap5): Enslaving as a backup interface with an up link
[  481.625356][T25567] 8021q: adding VLAN 0 to HW filter on device bond16
[  481.693990][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  481.787155][T25576] netlink: 'syz.2.5884': attribute type 7 has an invalid length.
[  481.792415][T25576] netlink: 'syz.2.5884': attribute type 8 has an invalid length.
[  481.862551][T25581] gre0: entered allmulticast mode
[  481.977306][T25590] netlink: 'syz.0.5889': attribute type 10 has an invalid length.
[  481.982240][T25592] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  481.984962][T25592] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  481.987183][T25594] netlink: 'syz.1.5891': attribute type 1 has an invalid length.
[  482.002537][T25594] bond18: entered promiscuous mode
[  482.004405][T25594] 8021q: adding VLAN 0 to HW filter on device bond18
[  482.042166][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  482.097188][T25605] lo speed is unknown, defaulting to 1000
[  482.210258][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  482.241723][T25616] batadv_slave_0: entered promiscuous mode
[  482.244179][T25616] batadv_slave_0: entered allmulticast mode
[  482.476247][T25605] wg1 speed is unknown, defaulting to 1000
[  482.547467][T25631] lo speed is unknown, defaulting to 1000
[  482.557686][T25635] netlink: 'syz.0.5901': attribute type 13 has an invalid length.
[  482.569044][T25635] netlink: 'syz.0.5901': attribute type 17 has an invalid length.
[  482.609971][T25635] gre0: left allmulticast mode
[  482.771054][T25631] wg1 speed is unknown, defaulting to 1000
[  483.219587][T25650] __nla_validate_parse: 26 callbacks suppressed
[  483.219608][T25650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5908'.
[  483.261132][ T5864] net_ratelimit: 2 callbacks suppressed
[  483.261152][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  483.464786][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5912'.
[  483.602775][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5914'.
[  483.611594][T25677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5914'.
[  483.633946][T25691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5916'.
[  483.636730][T25691] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  483.770443][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  483.923884][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'.
[  483.931822][T25710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'.
[  483.940071][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'.
[  484.083019][T25721] openvswitch: netlink: Flow key attribute not present in set flow.
[  484.117041][T25692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.309520][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  484.831309][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  485.034368][T25755] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5934'.
[  485.056345][T25760] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5935'.
[  485.352121][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  485.860985][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  486.047706][T25814] xt_TPROXY: Can be used only with -p tcp or -p udp
[  486.125132][T25818] No such timeout policy "syz1"
[  486.135616][T25818] validate_nla: 3 callbacks suppressed
[  486.135634][T25818] netlink: 'syz.1.5951': attribute type 2 has an invalid length.
[  486.392619][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  486.556462][T25846] netlink: 'syz.0.5958': attribute type 1 has an invalid length.
[  486.827494][T25859] netlink: 'syz.1.5963': attribute type 1 has an invalid length.
[  486.919850][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  487.521751][T25883] 8021q: adding VLAN 0 to HW filter on device bond33
[  487.707083][T25893] tipc: Failed to remove unknown binding: 66,1,1/2375712140:4041106355/4041106357
[  487.713151][T25893] tipc: Failed to remove unknown binding: 66,1,1/2375712140:4041106355/4041106357
[  488.199024][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  488.263379][T25936] __nla_validate_parse: 15 callbacks suppressed
[  488.263394][T25936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5984'.
[  488.368548][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5986'.
[  488.459081][ T5692] net_ratelimit: 3 callbacks suppressed
[  488.459097][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  488.533946][T25954] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20003
[  488.550745][T25957] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  488.729305][T25973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5995'.
[  488.989487][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  488.998097][T25993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6000'.
[  489.006174][T25993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6000'.
[  489.067755][T26008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6002'.
[  489.071075][T26008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6002'.
[  489.136530][T26016] netlink: 'syz.0.6004': attribute type 4 has an invalid length.
[  489.448492][T26048] xt_cgroup: xt_cgroup: no path or classid specified
[  489.491765][T26051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6012'.
[  489.514505][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  490.034617][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  490.102688][T26061] nbd: must specify at least one socket
[  490.365707][T26072] netlink: 516 bytes leftover after parsing attributes in process `syz.0.6019'.
[  490.479921][T26079] syzkaller0: entered promiscuous mode
[  490.482083][T26079] syzkaller0: entered allmulticast mode
[  490.491031][T26078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.504532][T26084] tipc: Resetting bearer <eth:syzkaller0>
[  490.536261][T26084] tipc: Resetting bearer <eth:syzkaller0>
[  490.573110][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  490.588549][T26084] tipc: Disabling bearer <eth:syzkaller0>
[  490.626298][T26080] lo speed is unknown, defaulting to 1000
[  490.649304][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6023'.
[  490.776820][T26103] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  490.934532][T26080] wg1 speed is unknown, defaulting to 1000
[  491.093680][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  491.184674][T26132] pim6reg1: entered promiscuous mode
[  491.186511][T26132] pim6reg1: entered allmulticast mode
[  491.373113][T26144] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  491.455002][T26155] netlink: 'syz.1.6040': attribute type 11 has an invalid length.
[  491.583840][T26168] pim6reg1: entered promiscuous mode
[  491.585551][T26168] pim6reg1: entered allmulticast mode
[  491.611467][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  491.725558][T26185] tipc: Resetting bearer <eth:syzkaller0>
[  491.995034][T26204] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  492.000238][T26205] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  492.071941][T26207] netlink: 'syz.0.6056': attribute type 1 has an invalid length.
[  492.083965][T26208] netlink: 'syz.0.6056': attribute type 1 has an invalid length.
[  492.119868][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  492.535670][T26231] netlink: 'syz.2.6061': attribute type 1 has an invalid length.
[  492.629078][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  492.801451][T26249] xt_hashlimit: overflow, try lower: 6/0
[  493.066996][T26263] syzkaller1: entered promiscuous mode
[  493.068697][T26263] syzkaller1: entered allmulticast mode
[  493.313597][T26279] __nla_validate_parse: 15 callbacks suppressed
[  493.313612][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6074'.
[  493.350930][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6074'.
[  493.669413][ T5692] net_ratelimit: 1 callbacks suppressed
[  493.669435][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  493.848537][T26301] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  494.015940][T26317] netlink: 'syz.1.6085': attribute type 1 has an invalid length.
[  494.021880][T26317] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6085'.
[  494.191913][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  494.210431][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6090'.
[  494.214156][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'.
[  494.217663][T26331] netlink: 'syz.0.6090': attribute type 15 has an invalid length.
[  494.221013][T26331] netlink: 'syz.0.6090': attribute type 18 has an invalid length.
[  494.414180][T26346] ip6gre4: entered allmulticast mode
[  494.709329][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  494.748802][T26364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6102'.
[  494.754994][T26365] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6103'.
[  494.785108][T26364] bond24: entered promiscuous mode
[  494.787548][T26364] 8021q: adding VLAN 0 to HW filter on device bond24
[  494.832538][T26371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6104'.
[  495.070811][T26364] bond24 (unregistering): Released all slaves
[  495.120755][T26376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6106'.
[  495.125231][T26374] netlink: 'syz.2.6105': attribute type 1 has an invalid length.
[  495.128487][T26374] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6105'.
[  495.134303][T26374] netlink: 'syz.2.6105': attribute type 1 has an invalid length.
[  495.233693][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  495.488521][T26404] xt_bpf: check failed: parse error
[  495.570824][T26402] syzkaller0: entered promiscuous mode
[  495.573929][T26402] syzkaller0: entered allmulticast mode
[  495.749622][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  495.850929][T26416] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  495.856826][T26416] Cannot find add_set index 3 as target
[  495.872038][T26416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.269565][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  496.287058][T26419] netlink: 'syz.0.6120': attribute type 21 has an invalid length.
[  496.783559][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  497.289835][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  497.811061][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  498.291632][T26419] netlink: 'syz.0.6120': attribute type 5 has an invalid length.
[  498.297178][T26427] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  498.304828][T26428] macvlan4: entered promiscuous mode
[  498.315997][T26428] macvlan4: entered allmulticast mode
[  498.349408][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  498.393979][T26437] lo speed is unknown, defaulting to 1000
[  498.467421][T26443] can: request_module (can-proto-0) failed.
[  498.509231][T26448] __nla_validate_parse: 5 callbacks suppressed
[  498.509246][T26448] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6125'.
[  498.562147][T26447] netlink: 49 bytes leftover after parsing attributes in process `syz.0.6124'.
[  498.846704][T26437] wg1 speed is unknown, defaulting to 1000
[  498.863491][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  499.386564][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6129'.
[  499.390569][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  499.445238][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6131'.
[  499.867085][T26497] netlink: 'syz.0.6139': attribute type 1 has an invalid length.
[  499.871061][T26497] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6139'.
[  499.888533][T26497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.903236][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  499.944755][T26501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6141'.
[  500.411919][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  500.765788][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6145'.
[  500.782540][T26523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6146'.
[  500.935083][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  500.964606][T26531] syzkaller1: entered promiscuous mode
[  500.966533][T26531] syzkaller1: entered allmulticast mode
[  500.975539][T26534] netlink: 'syz.0.6150': attribute type 1 has an invalid length.
[  501.007089][T26534] 8021q: adding VLAN 0 to HW filter on device bond24
[  501.008597][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.173267][T26546] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6155'.
[  501.182286][T26546] tap0: tun_chr_ioctl cmd 1074025677
[  501.184048][T26546] tap0: linktype set to 823
[  501.185568][T26545] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6155'.
[  501.270101][T26551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  501.292428][T26543] block nbd1: server does not support multiple connections per device.
[  501.296939][T26543] block nbd1: shutting down sockets
[  501.457708][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  501.782635][T26589] syzkaller1: entered promiscuous mode
[  501.784640][T26589] syzkaller1: entered allmulticast mode
[  501.969719][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  502.065074][T26601] lo speed is unknown, defaulting to 1000
[  502.242466][T26601] wg1 speed is unknown, defaulting to 1000
[  502.434529][T26609] vti1: entered promiscuous mode
[  502.454118][T26613] macsec0: entered promiscuous mode
[  502.455969][T26613] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  502.458353][T26613] macsec0: entered allmulticast mode
[  502.464980][T26613] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  502.673793][T26625] netlink: 'syz.2.6179': attribute type 6 has an invalid length.
[  502.884115][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  502.887232][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  502.899677][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  502.905548][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  502.912623][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  502.918504][T26639] netlink: 'syz.2.6181': attribute type 4 has an invalid length.
[  503.119131][T26656] pim6reg1: entered promiscuous mode
[  503.121326][T26656] pim6reg1: entered allmulticast mode
[  503.203071][T26662] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  503.650436][T26696] __nla_validate_parse: 9 callbacks suppressed
[  503.650450][T26696] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6197'.
[  503.667554][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6198'.
[  503.677495][T26701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.021611][   T13] net_ratelimit: 3 callbacks suppressed
[  504.021624][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  504.247538][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6203'.
[  504.352231][T26722] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6205'.
[  504.356165][T26722] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6205'.
[  504.529410][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  504.681061][T26738] netlink: 416 bytes leftover after parsing attributes in process `syz.1.6210'.
[  504.824469][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'.
[  504.839150][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  505.041140][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  505.052153][T26765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6217'.
[  505.055889][T26765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6217'.
[  505.069071][T26765] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  505.086675][T26765] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  505.090534][T26765] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  505.155310][T26772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6219'.
[  505.563405][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  505.583164][T26809] openvswitch: netlink: Key type 295 is out of range max 32
[  505.706002][T26824] validate_nla: 59 callbacks suppressed
[  505.706013][T26824] netlink: 'syz.2.6239': attribute type 10 has an invalid length.
[  505.851744][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  505.948811][T26841] can: request_module (can-proto-0) failed.
[  505.999149][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  506.079807][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  506.543187][T26889] netlink: 'syz.0.6262': attribute type 8 has an invalid length.
[  506.589783][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  506.679218][T26902] can: request_module (can-proto-0) failed.
[  506.747035][T26912] sctp: [Deprecated]: syz.0.6269 (pid 26912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.747035][T26912] Use struct sctp_sack_info instead
[  506.761562][T26914] sctp: [Deprecated]: syz.0.6269 (pid 26914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.761562][T26914] Use struct sctp_sack_info instead
[  506.839915][T26921] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  506.842543][T26921] tipc: Bearer <udp:s>: trying with adjusted priority
[  506.845096][T26921] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  507.004636][T26929] netlink: 'syz.2.6275': attribute type 4 has an invalid length.
[  507.109497][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  507.284784][T26951] netlink: 'syz.0.6283': attribute type 1 has an invalid length.
[  507.308245][T26951] 8021q: adding VLAN 0 to HW filter on device bond25
[  507.327318][T26951] veth21: entered promiscuous mode
[  507.334665][T26951] bond25: (slave veth21): Enslaving as an active interface with a down link
[  507.339463][T26951] erspan0: entered allmulticast mode
[  507.375801][T26956] netlink: 'syz.2.6284': attribute type 16 has an invalid length.
[  507.619752][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  507.646716][T26971] netlink: 'syz.1.6290': attribute type 1 has an invalid length.
[  507.873052][T26993] netlink: 'syz.1.6295': attribute type 1 has an invalid length.
[  507.932887][T26993] 8021q: adding VLAN 0 to HW filter on device bond19
[  507.972750][T26997] bond19: (slave veth23): Enslaving as an active interface with a down link
[  507.993777][T26993] vlan0: entered allmulticast mode
[  508.004205][T26993] bond19: entered allmulticast mode
[  508.007825][T26993] bond19: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  508.436955][T27023] SET target dimension over the limit!
[  508.464866][T27023] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  508.467870][T27023] tipc: Bearer <udp:s>: trying with adjusted priority
[  508.471216][T27023] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  508.518788][T27029] netlink: 'syz.1.6304': attribute type 2 has an invalid length.
[  508.583386][T27032] x_tables: duplicate underflow at hook 1
[  508.585866][T27033] x_tables: duplicate underflow at hook 1
[  509.189579][ T5863] net_ratelimit: 2 callbacks suppressed
[  509.189592][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  509.323711][T27070] lo speed is unknown, defaulting to 1000
[  509.447110][T27079] bridge0: entered allmulticast mode
[  509.449964][T27079] __nla_validate_parse: 17 callbacks suppressed
[  509.449973][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6322'.
[  509.652293][T27070] wg1 speed is unknown, defaulting to 1000
[  509.655074][T27087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6324'.
[  509.712891][ T5692] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  509.890414][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6330'.
[  509.928192][T27111] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6332'.
[  509.928239][T27112] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6332'.
[  509.957512][T27115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6330'.
[  509.964883][T27109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6330'.
[  509.970538][T27109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6330'.
[  510.032558][T27117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6335'.
[  510.036276][T27117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6335'.
[  510.040533][T27117] netlink: 'syz.2.6335': attribute type 1 has an invalid length.
[  510.222296][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  510.297305][T27130] netlink: 'syz.0.6339': attribute type 3 has an invalid length.
[  510.706312][T27179] syzkaller1: entered promiscuous mode
[  510.708213][T27179] syzkaller1: entered allmulticast mode
[  510.730599][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  511.242481][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  511.435304][T27217] xt_hashlimit: size too large, truncated to 1048576
[  511.437840][T27217] xt_hashlimit: max too large, truncated to 1048576
[  511.728746][T27236] lo speed is unknown, defaulting to 1000
[  511.747547][T27231] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:21
[  511.769520][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  511.857815][T27244] lo speed is unknown, defaulting to 1000
[  511.913157][T27236] wg1 speed is unknown, defaulting to 1000
[  512.138237][T27244] wg1 speed is unknown, defaulting to 1000
[  512.280276][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  512.810677][T27295] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  512.826647][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  513.256514][T27324] sctp: [Deprecated]: syz.1.6397 (pid 27324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  513.256514][T27324] Use struct sctp_sack_info instead
[  513.283248][T27324] bond20: entered promiscuous mode
[  513.285178][T27324] bond20: entered allmulticast mode
[  513.360901][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  513.511518][T27340] tipc: Resetting bearer <eth:gre0>
[  513.540159][T27340] erspan0: left allmulticast mode
[  513.578704][T27340] batadv_slave_0: left promiscuous mode
[  513.580917][T27340] batadv_slave_0: left allmulticast mode
[  513.584776][T27340] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  513.604544][T27340] ip6gre1: left promiscuous mode
[  513.606478][T27340] xfrm2: left promiscuous mode
[  513.608209][T27340] xfrm2: left allmulticast mode
[  513.610554][T27340] bridge16: left allmulticast mode
[  513.612514][T27340] veth15: left promiscuous mode
[  513.614332][T27340] geneve4: left promiscuous mode
[  513.622641][T27340] macsec2: left promiscuous mode
[  513.624263][T27340] macsec2: left allmulticast mode
[  513.648645][T27340] vlan5: left allmulticast mode
[  513.653296][T27340] bridge_slave_0: left allmulticast mode
[  513.670914][T27340] ip6gre4: left allmulticast mode
[  513.685230][T27340] veth21: left promiscuous mode
[  513.844889][T27347] wireguard1: entered promiscuous mode
[  513.846673][T27347] wireguard1: entered allmulticast mode
[  513.869583][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  514.379534][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  514.678146][T27355] __nla_validate_parse: 7 callbacks suppressed
[  514.678163][T27355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6404'.
[  514.688553][T27355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6404'.
[  514.829297][ T5863] 
[  514.830162][ T5863] ============================================
[  514.832017][ T5863] WARNING: possible recursive locking detected
[  514.834026][ T5863] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  514.836694][ T5863] --------------------------------------------
[  514.839428][ T5863] kworker/u8:3/5863 is trying to acquire lock:
[  514.841351][ T5863] ffff888027ead218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x2228/0x3a70
[  514.845108][ T5863] 
[  514.845108][ T5863] but task is already holding lock:
[  514.847644][ T5863] ffff88803b761258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  514.851492][ T5863] 
[  514.851492][ T5863] other info that might help us debug this:
[  514.853873][ T5863]  Possible unsafe locking scenario:
[  514.853873][ T5863] 
[  514.856097][ T5863]        CPU0
[  514.857203][ T5863]        ----
[  514.858256][ T5863]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2);
[  514.860448][ T5863]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2);
[  514.862800][ T5863] 
[  514.862800][ T5863]  *** DEADLOCK ***
[  514.862800][ T5863] 
[  514.865258][ T5863]  May be due to missing lock nesting notation
[  514.865258][ T5863] 
[  514.867847][ T5863] 8 locks held by kworker/u8:3/5863:
[  514.869502][ T5863]  #0: ffff8880230b9148 ((wq_completion)bond31){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  514.872995][ T5863]  #1: ffffc900034cfbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  514.877001][ T5863]  #2: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  514.879836][ T5863]  #3: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  514.882794][ T5863]  #4: ffff88803b761258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  514.886426][ T5863]  #5: ffff888115c5d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  514.889452][ T5863]  #6: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  514.892852][ T5863]  #7: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  514.895843][ T5863] 
[  514.895843][ T5863] stack backtrace:
[  514.897711][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u8:3 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  514.897723][ T5863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.897731][ T5863] Workqueue: bond31 bond_alb_monitor
[  514.897743][ T5863] Call Trace:
[  514.897748][ T5863]  <TASK>
[  514.897753][ T5863]  dump_stack_lvl+0x189/0x250
[  514.897766][ T5863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.897775][ T5863]  ? __pfx__printk+0x10/0x10
[  514.897791][ T5863]  ? print_lock_name+0xde/0x100
[  514.897802][ T5863]  print_deadlock_bug+0x28b/0x2a0
[  514.897815][ T5863]  validate_chain+0x1a3f/0x2140
[  514.897825][ T5863]  ? __lock_acquire+0xab9/0xd20
[  514.897834][ T5863]  ? look_up_lock_class+0x74/0x170
[  514.897842][ T5863]  ? register_lock_class+0x51/0x320
[  514.897851][ T5863]  __lock_acquire+0xab9/0xd20
[  514.897860][ T5863]  ? __dev_queue_xmit+0x2228/0x3a70
[  514.897867][ T5863]  lock_acquire+0x120/0x360
[  514.897875][ T5863]  ? __dev_queue_xmit+0x2228/0x3a70
[  514.897883][ T5863]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  514.897896][ T5863]  _raw_spin_lock+0x2e/0x40
[  514.897909][ T5863]  ? __dev_queue_xmit+0x2228/0x3a70
[  514.897917][ T5863]  __dev_queue_xmit+0x2228/0x3a70
[  514.897926][ T5863]  ? __dev_queue_xmit+0x27e/0x3a70
[  514.897936][ T5863]  ? neigh_connected_output+0x1ea/0x460
[  514.897947][ T5863]  ? __pfx___dev_queue_xmit+0x10/0x10
[  514.897955][ T5863]  ? read_seqbegin+0x122/0x250
[  514.897964][ T5863]  ? neigh_connected_output+0x1ea/0x460
[  514.897973][ T5863]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.897980][ T5863]  ? read_seqbegin+0x1ac/0x250
[  514.897989][ T5863]  ? __pfx_read_seqbegin+0x10/0x10
[  514.898004][ T5863]  ip_finish_output2+0xd40/0x1160
[  514.898013][ T5863]  ? ip_skb_dst_mtu+0x147/0xc50
[  514.898022][ T5863]  ? ip_finish_output2+0x452/0x1160
[  514.898031][ T5863]  ? __pfx_ip_finish_output2+0x10/0x10
[  514.898039][ T5863]  ? ip_skb_dst_mtu+0x147/0xc50
[  514.898046][ T5863]  ? ip_skb_dst_mtu+0x147/0xc50
[  514.898053][ T5863]  ? ip_skb_dst_mtu+0x970/0xc50
[  514.898061][ T5863]  ? ip_finish_output+0x33a/0x3f0
[  514.898069][ T5863]  iptunnel_xmit+0x571/0xa00
[  514.898083][ T5863]  ip_tunnel_xmit+0x1c3c/0x2380
[  514.898097][ T5863]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  514.898104][ T5863]  ? gre_build_header+0x3fd/0xa40
[  514.898114][ T5863]  ? __pfx_gre_build_header+0x10/0x10
[  514.898123][ T5863]  gre_tap_xmit+0x590/0x7a0
[  514.898137][ T5863]  ? __pfx_gre_tap_xmit+0x10/0x10
[  514.898148][ T5863]  ? __lock_acquire+0xab9/0xd20
[  514.898157][ T5863]  dev_hard_start_xmit+0x2d7/0x830
[  514.898168][ T5863]  sch_direct_xmit+0x241/0x4b0
[  514.898179][ T5863]  ? __pfx_sch_direct_xmit+0x10/0x10
[  514.898190][ T5863]  __dev_queue_xmit+0x17b6/0x3a70
[  514.898199][ T5863]  ? __dev_queue_xmit+0x27e/0x3a70
[  514.898209][ T5863]  ? __pfx___dev_queue_xmit+0x10/0x10
[  514.898217][ T5863]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  514.898230][ T5863]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  514.898242][ T5863]  ? __build_skb_around+0x257/0x3e0
[  514.898257][ T5863]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  514.898268][ T5863]  ? queue_delayed_work_on+0x1f7/0x280
[  514.898279][ T5863]  ? alb_send_lp_vid+0x139/0x510
[  514.898288][ T5863]  alb_send_lp_vid+0x324/0x510
[  514.898298][ T5863]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  514.898307][ T5863]  ? psi_task_switch+0x39a/0x6d0
[  514.898320][ T5863]  alb_send_learning_packets+0x10d/0x2c0
[  514.898329][ T5863]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  514.898340][ T5863]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  514.898352][ T5863]  bond_alb_monitor+0x3e4/0x1800
[  514.898361][ T5863]  ? bond_alb_monitor+0xf1/0x1800
[  514.898368][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  514.898377][ T5863]  ? __pfx_bond_alb_monitor+0x10/0x10
[  514.898385][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  514.898396][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  514.898405][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  514.898413][ T5863]  process_scheduled_works+0xae1/0x17b0
[  514.898428][ T5863]  ? __pfx_process_scheduled_works+0x10/0x10
[  514.898439][ T5863]  worker_thread+0x8a0/0xda0
[  514.898449][ T5863]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.898463][ T5863]  ? __kthread_parkme+0x7b/0x200
[  514.898475][ T5863]  kthread+0x711/0x8a0
[  514.898486][ T5863]  ? __pfx_worker_thread+0x10/0x10
[  514.898495][ T5863]  ? __pfx_kthread+0x10/0x10
[  514.898505][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  514.898517][ T5863]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.898524][ T5863]  ? __pfx_kthread+0x10/0x10
[  514.898535][ T5863]  ret_from_fork+0x3fc/0x770
[  514.898546][ T5863]  ? __pfx_ret_from_fork+0x10/0x10
[  514.898556][ T5863]  ? __switch_to_asm+0x39/0x70
[  514.898566][ T5863]  ? __switch_to_asm+0x33/0x70
[  514.898575][ T5863]  ? __pfx_kthread+0x10/0x10
[  514.898586][ T5863]  ret_from_fork_asm+0x1a/0x30
[  514.898600][ T5863]  </TASK>
[  514.899597][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  515.591247][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  516.100323][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  516.610390][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  517.126481][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  517.639869][ T5863] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  518.149323][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  518.661747][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  519.169359][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  519.679302][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  520.199529][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  520.711708][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  521.219505][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  521.729533][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  522.249487][T10153] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  522.762094][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  523.270888][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  523.779611][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  524.291157][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51
[  524.799652][ T5864] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51

VM DIAGNOSIS:
19:14:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034ce190
R8 =ffff888107c40237 R9 =1ffff11020f88046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee893 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001140 CR3=0000000038f52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=39e3beca00010011 000fac0800030008
XMM02=0200050000000000 070008000000f471 XMM03=240009f1ee4e0839 e3beca0001001100
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=c000d6d0ae4805f7 bef3fe64b5b100de XMM09=0000000000000000 00007fd9b1611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc9000471ef80 RCX=d66871a92d1c5400 RDX=dffffc0000000000
RSI=ffffffff82175b4b RDI=ffffc9000471ef80 RBP=1ffff920008e3df2 RSP=ffffc9000471ee78
R8 =ffffc9000471ef90 R9 =0000000000000002 R10=ffffc9000471ef18 R11=ffffffff81ad03a0
R12=ffff88803cbc5640 R13=1ffff920008e3df1 R14=ffffc9000471ef88 R15=ffffc9000471eec8
RIP=ffffffff81ad03e9 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4a2b9d56c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000009038 CR3=00000001304f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000001df8a
XMM02=ffffffffffff0408 0800000800010000 XMM03=000008000108000a 010bc602c810000f
XMM04=0000000000000000 0000000000000000 XMM05=00005555784d7070 00005555784d6610
XMM06=0000000000000000 0000000000000000 XMM07=ff04100800000800 0108000a010bc602
XMM08=c810000fffffffff ffff040808000008 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
