last executing test programs:

1.531853958s ago: executing program 1 (id=18692):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x541b, 0x1000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x28}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x48d1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

1.47144511s ago: executing program 1 (id=18693):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x28040095}, 0x20000840)
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@deltaction={0x170, 0x31, 0x1, 0x70bd2a, 0x25dfdafc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001840)=""/4109, 0x100d}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r7=>r1, 0x2, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="b8bef960e08c6a02aab51b6c822b590f6d87b70ecb1dbe18a410d17afc09dc270e64e98fab856e5fdb7352594e9b63998b59cc2cba63d4757c0c6da4f5115ae75294771a5f77d1cf0267303c36b2a4e7b916f3a92060ad55668d31d8e7d266371504a07fa94ac75701d7f1d5ec41323322731058dbb1137edb27f1b539406880804ffe1d82604db92301190d8cc5cf227d6ccc43bb8fe34817e2bc342699300b5eb7c148e0d4e6610139178d9eadaeea41ec8a4b427c3a2f49b92796b9756c097936890a28282214d6768607d017d44a43e7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="01000000050000000100"/28], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.111224522s ago: executing program 2 (id=18697):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
listen(r2, 0xc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x4, @remote, 0xffffbfff}}}, 0x108)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
close(0x3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1.051657074s ago: executing program 2 (id=18698):
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r10, &(0x7f0000000280)='syz0\x00', 0x1ff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a000000080007006d341cca9c07f8f43e435af7462a1ec8d1909715d4115ede0eca54502a1f5019dfbc2f0fe2784d9030fc119e27f6be1c73545196a28404f3da462c138f20fa071ad47a6832a9e7ef085ff67af5dfeed44db0c783110bd005756189b2e22480c446f53680af5eed64c9f30cc8dedd85df7977", @ANYRES32=r8, @ANYBLOB="04005b00"], 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

941.030468ms ago: executing program 2 (id=18699):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x541b, 0x1000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x28}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x48d1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x1800, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

903.334287ms ago: executing program 2 (id=18700):
recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/208, 0xd0}, {0x0}], 0x2}, 0x4}], 0x1, 0x2, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x43ea}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)

601.035805ms ago: executing program 1 (id=18701):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x4e73, 0x1})

600.216434ms ago: executing program 1 (id=18702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\t\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

552.065857ms ago: executing program 1 (id=18703):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x89a0, &(0x7f0000000280)={'vlan0\x00', 0x800})

551.221403ms ago: executing program 1 (id=18704):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)=[0x9, 0x3, 0x2, 0x5, 0x5, 0x1, 0x9, 0x7, 0x100000000, 0x82], &(0x7f0000000800)=[0x5, 0x4, 0x4], 0x5, 0xa}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="04d96f885e8a7be83ea8af7be273f3226bb2fc1924c7148d2be3cbea30c541c81b8379f4e146d24e2a4486e302a919fcc294ada767a07799f8f14fa7ae3746383157fe5e0c1a01f24c649ea5c15edb44a1932e0bb8a1b2c3"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', <r6=>0x0, 0x40, 0x7800, 0x4, 0x80000000, {{0x8, 0x4, 0x0, 0x15, 0x20, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1, {[@noop, @rr={0x7, 0x7, 0x11, [@rand_addr=0x64010102]}, @ra={0x94, 0xffffffffffffff66}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002a40)=ANY=[@ANYBLOB="ac060000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2508000000400001801400020067726574617030000000000000000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f8000280f3000500120d2b05c9cd0f17d010954b185c654e0089388a135d285c8e51ab5359ad884bdfea9b1e8de483ab99311125f245432a3f6cc328e8ef8db57df3b605a7106653cb6e8435b978430ca077b7fc58b3e49d0677dec4a66517ba7d455dcba7676e403079659ade4c00d3a2df4a845c91ffd79c8fc842864ee8294e53b0443bd4753e4ce0adb0783007cd38ef18872399d1d21e7beb1c2f562a75699426fc037fc098fd87cd42de74b5aa565edc898b3f28ab1ff530287dd6371cc8d47a241fda5b60efb13556110ff808d9a0f1eaad84398cb8f129a4be98de7931eb3faa28e00cf0ced44f5de5c57078c411e7dc3e9521001800018014000200697036677265746170300000000000009c0002808a0004002fc7fabc5c666cfdc3466c9e1ae27f2d826c7b0baa30498d20fbabb3c1d5c0a99ecb2ae23698621c008c3f2d678c127751d64c4d221e25023f00e1feb4644e0def59f450cf2eda358e39cd6507298c46e47de11089b2b04df124e45a8b926befd534fbb64ae5e3ecf1670c3acc6bfffd3e6f016e99454fc8d9c0456cef28fa15a18d680d5527161fcc52a08a141800000400050008000200060000004801028004000100d5000500e1da054e001e988c9d92ec8227dcaf6edd1442e0a0be4995dc8c3ae5c5d9f22e1807f4d2e8969205af221ebc79339a871b691d03d6312293d29b815535aa1898345ed28e2a3b0a74f97932617b49705802e02a3f888a94fd0417ccfcf42b38cc96971aef3ec0492dc61fb4a1fb5ddba4cfce8bf7ec817d513595b497a4fdb57fcb2308db9fc4a3b27b23b5ca3a4f58827ffe2e1c23b8d61c17b14b92331667b7071553c459c26b1cd037e97a55181dd6c31bae7c15f601a202ec7724827c26999dc9d92741c3bb87f404d79a2f2f5fc553c7e1c97b000000080002008100000060000380140001800800010051000000060002005c00000014000180040003000a0002002b29252b2b000000140001800a000200766c616e3000000004000300200001800c00020069705f7674693000040003000400030008000100090000007000018014000200766c616e300000000000000000000000080001004592abe5980d2af0f822184402", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000080003000200000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x6ac}, 0x1, 0x0, 0x0, 0x24008041}, 0x800)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034000202f5010202080008002600da8e0000"], 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100904e0c0211000000000000000000000000006400090000cb2b02020201f682"], 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000002100121"], 0x21)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000001d08021100000108021100000008021100000020000100000001000100"], 0x20)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x60c01, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x1}, 0x8)
setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000000)=0xffff5e66, 0x4)
sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="7f1b254dd66a055050f718a2db71f82261d8283f98f6f62543a811d1ab09df308ed614161f5cd8503f25e6304d098de764b11a2bc6e140d7c1ca6a73af1cd2bb2aa3c2729f01592fa433087b954d10e5974125681f6e217c0daffb1dc4394652553c07c2342b22925e5a50a301a5927284f6481d30c069a8dc11a1e1", 0x7c}, {&(0x7f0000000080)="4be05efc39b02544a8514a6675", 0xd}, {&(0x7f00000006c0)="045d0089a8d730328a7dcbe5a900f32dbcf44b91f101ddb9339105b2a526b8c1bd8236f53a4040a46293076cde3a017c4a8754f79679f70073ec9f21911668695b1328cce09caf341b5dff8664f3171ba9687988b524fb911eab16e317b5c00b9af766a99d5429e63525e9270c5fc9db444900ef6ab302a578f7c03211cac85d21976faa7f105d319cde", 0x8a}, {&(0x7f0000000400)="c94b123737a766b7ae70459424cf5347bd316d9ab1877d952184029807bb26310d54a1090ce27a0cb184100fe0b6d568e7c5c97ef855441de94069ea1af1782b955628efaa", 0x45}, {&(0x7f0000000480)="0fc696d7b842c43ae55ed10313a5a7794e843a636d29d3929a2c2101aec632636be1f3dd139048b5ccfd8999bb568b6619d7a0fd74a72a1aade41032dfd2d1a84618c8b0a7ea51801bd126f7753022f6f2710476478f57a3298a0625", 0x5c}, {&(0x7f0000000500)="f7ee53f36ebeb94faa313d0faedfa893b1238b541340ecdf41aed6076037d2725c044c53292b3fbb2227bd63b9da2be50add501c9b7ff54caf17618c742116a2168681057a782324af15f6f493297c", 0x4f}], 0x6}, 0x40001)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25830000000c00990005000000560000000a000600ffffffffffff000008001001020000000800100101000000300911802c0905801802008008020380600001802000018004000c00050003000a000000050005000800000005000600100000003c00018004000a000500050000000000040001000800020004000000040009000400090004000c00050003000900000004000a000500030000000000800001803000018004000c0005000600060000000500070001000000050007000000000008000200040000000500050007000000400001800500070074000000040009000400090004000a00050003000700000005000500020000000400090004000800050007000900000005000700800000000c0001800800020004000000040002008000018010000180050006001000000004000b003000018005000600080000000500070046000000040008000600040006000000080002000100000005000500070000003c00018004000b0004000a000400090008000200020000000500070002000000050003000d00000004000100050005000d000000050006001c000000a00001802c0001800400010008000200020000000400080004000100040009000400080004000b0008000200030000001c00018004000b00050006000e000000050003000400000004000b002800018004000100050007001f00000004000b00050005000c00000004000b000400090004000b00140001800400090004000b00050003000600000018000180050005000b00000004000800050005000d0000000c0002800800a000000000002c0200800a000100080211000000000088000380180001801400018005000700050000000800020000000000040002000400020004000200100001800c00018004000c0004000c00040002004c0001800c00018004000a000400010030000180050003000b00000004000b0005000300070000000500030003000000060004000400000004000100040009000c00018004000800040008005c000380040002005400018014000180050006000100000005000600150000001000018004000b0004000900040001002c0001800500050009000000060004000000000004000a0006000400b007000004000c000500030005000000380103808800018020000180040001000500070000000000040008000400090005000500090000000800018004000b0024000180050005000c000000080002000100000004000c0004000a00050003000c00000010000180050003000700000004000b002800018005000700090000000400080004000a00040008000800020000000000050006000700000004000200a40001804000018004000800080002000400000008000200020000000400090005000600140000000400080004000100060004000400000004000c0005000500000000003400018004000a0004000c00060004000700000004000800050006001e00000004000100050006001b000000060004000500000008000180040008000c00018004000a0004000b0018000180050003000a00000004000c000400080004000c0004000200e40400800a000100080211000001000084010380600001801800018004000b000500070009000000050007000500000034000180040009000400090005000300070000000600040008000000050006001800000004000c000500070048000000040001001000018004000b00050003000a0000000400020050000180140001800500050003000000080002000100000038000180050006000e00000004000900050005000d000000040001000500050006000000060004004002000004000b00050003000e000000040002006000018018000180050006001d00000005000700f5000000040001001c0001800800020000000000050007000000000006000400fe00000014000180050005000a000000050006000a0000001400018004000c0004000b000400080004000c0004000200640001803000018004000900050007000500000004000100050006000000000008000200020000000400090008000200010000003000018004000c00050006001500000004000100050005000400000004000b0004000a000400080005000600180000000c00028008009f00050000004403038004000200040002000400020094000180180001800500030008000000040008000500070040000000140001800400090004000a000400090004000900340001800500050002000000050007000200000004000900050006000c0000000800020000000000050007000700000004000b00300001800400080004000c0005000700f000000004000a0006000400030000000600040000000000040008000400010090000180140001800400080004000a000400090004000c00280001800500030009000000050003000700000006000400090000000600040009000000040001004000018004000c0004000a0006000400ff0f00000500050003000000060004000600000004000b00050005000800000004000c00080002000400000004000900100001800400010004000c0004000a009400018018000180040001000600040000100000050006000a0000002c0001800400090004000a000500030001000000050006000d000000050006001400000006000400100000001000018004000900050006000400000024000180060004000000000005000600010000000500060001000000050003000b000000180001800400080004000100080002000300000004000a00cc0001801400018006000400000000000400090004000c0020000180050007000c00000004000c0004000900050005000b00000004000a002400018004000c0005000700b300000004000a0004000800080002000000000004000b002c00018004000a0005000500060000000600040003000000080002000100000004000900050006001a00000010000180060004000300000004000c00340001800400080004000a000800020003000000060004000600000005000700060000000600040001040000050005000c000000b000018034000180040008000400090006000400fcff000006000400010000000800020004000000080002000400000004000a0004000c0034000180050005000600000004000b0005000600170000000500030008000000050003000000000004000b0005000700e100000018000180040008000400080004000b00050007000000000020000180050006001f00000004000800050006001700000004000a00040009000c0001800500030002000000fc041180f8040580f40400803c000280050018010c00000008002700020000000800a000010100000500180135000000080026006c09000005001801350000000800a1003d00000028010380480001802c00018004000b0005000300040000000400080004000b000400090004000c000400090004000c00040008000c000180050006000b0000000c000180050007000600000004000200d800018014000180050006001a000000050006000d000000280001800400080004000800080002000200000004000900050005000a00000004000c0004000a0024000180050007000600000006000400f401000005000500030000000500060009000000340001800500050007000000050006000300000004000a0005000300010000000500060007000000050006001c0000000400010010000180050003000300000004000c00300001800400090006000400080000000400090004000b00060004000600000006000400ff7f0000050005000a000000340002800800a0007f0000000800a000f5ffffff0500180132000000050018011c00000008009f000400000008009f000700000040030380780001801000018004000c0006000400810000002400018004000900080002000300000006000400ff07000004000c00050007000600000014000180060004006000000008000200010000002c000180050003000000000005000600170000000500070001000000050003000b000000050003000c00000004000200c80001802400018004000b00080002000600000004000c00050005000300000008000200040000001c00018004000a00050005000900000005000700010000000400090008000180040009001c000180050007000200000005000700040000000400090004000a002800018004000900050007000700000004000b000500030003000000040008000400010004000a002000018005000700400000000800020001000000050006000600000004000c00180001800500060005000000050005000c00000004000a0008010180140001800400010004000c0006000400010000000800018004000b0024000180080002000000000004000a000400090004000a000400090006000400070000002400018005000700080000000400090004000900040001000500030008000000040009002800018006000400080000000500070053000000080002000200000005000600090000000400090018000180050006001800000004000800040009000400090040000180050003000c000000040008000800020003000000040001000400080005000300080000000800020000000000050006000c0000000600040001000000200001800600040004000000050007007f000000050005000d0000000400080004000200ec0001803000018004000c000500050001000000050005000c0000000600040001000000050006001900000004000a0004000b00080001800400010014000180080002000000000005000500050000002c00018004000900040008000400080004000800080002000100000004000a00050006001a00000004000c001c00018004000900080002000400000004000c00050005000400000010000180050005000700000004000c0018000180050005000a0000000400010004000800040008002c00018005000700300000000500060010000000050003000400000004000b0004000c00050007000f0000000a000100ffffffffffff00000c0002800800a10009000000"], 0xe68}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000e0000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

301.83951ms ago: executing program 0 (id=18708):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000030000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x4020800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@nested={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000030000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x4020800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@nested={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) (async)

301.597672ms ago: executing program 0 (id=18709):
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route(r11, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000ec0)=@getlink={0x54, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8040, 0x2928}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0xffffffffffffff8a, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00a600000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900090000001800000004005b00"], 0x2c}}, 0x8040010)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

300.990736ms ago: executing program 2 (id=18710):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
unshare(0x8040480)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20002000}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r5, 0x0, 0x8c, 0xbc, &(0x7f00000003c0)="a786e988c874fe1321b32c75e6de1b2e53764de3b57a3b115046d82e11f6185e912acd91345ccb8ed91a6013ab4256acd156bf6184d1689aa3ad01d5de1bf05030d3c5c896ecd3d01c8bf6b50294aeed5309749389581a749c5dc9e076f28bfd15e9282398b6de03b3d9808e059ae4182a576c0c65f4125eeafc69d4c68c15e7a6190c8da217b2e215865012", &(0x7f00000008c0)=""/188, 0x80000000, 0x0, 0x24, 0xc0, &(0x7f0000000980)="4724427ae9afa7ac12c982d5eb3a4ac0c77fa79a5dede72d39794b0317a065c50713881a", &(0x7f00000009c0)="7bf9f81945b04dab36598fec863b0684c6b990bedeb8bb114729ea474b4a0b8a7760b741626bd3fcc0736f42a1ed20c21c3beeeac9a47f9cb8db9ae4e6e917e827a337f96f0411e53ac0f426c085e180488133f265601751a2296a6f7010d8897d0d7ed9924415aab0f9cb25d32f305348a601f2d899b99b6090aa7b652feb6fb58e74e9c333c64a32646989e8082a3633643f1e8aa7caec06296b617127c083211c446d3d009666d7d7fb82938b1e295d5b933e24436197cc1a39cc067e4543", 0x4, 0x0, 0x1ff800}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x0)
read$ptp(r0, &(0x7f0000000040)=""/152, 0x98)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r8, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x9}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x44)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x24c, r8, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x92}, @NL80211_ATTR_CSA_IES={0x228, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0x3, 0xe0, 0x3, 0x2, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x10, 0xbc, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x0, 0x4]}, @beacon_params=[@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x104, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "b07d305e3d3ab021560c59134a12349f3f05f60604b16816dfc1b952d020cc25e20161933b99f8c01cdd72cf87acbff2977fc87bcfc26da32ec4627ba2303c183918850dc6127a60a1258f8d567ce3ef89d1dab14d4156cf9b71b958f323d13346660be66a546ba5df92148b79031af8e038e4635d527aa412e4e3261a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x43, 0x3, "33221fbc749658bdd043d006b4792a967ab34346c956c29df9e7604945167c9d57ddb7d8555c06d459cc4704293e521a2134320a1989d4b5d6270ced48d5e0"}, @NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "9db44960faa0abd78ba4f96e0f6bb1ee134047bd247dd2e535c3007f48464b318c466b6f920d573fd260f309a345"}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@erp={0x2a, 0x1, {0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0x400, @val=0x200, @void, @void}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc3, 0x7f, [@random_vendor={0xdd, 0xb5, "2e9ed004c0da74d65b5ae04d5af84149bc81eebf157106ee663b98bde8e5724d134cf4ed76e054f3ccf15f22b5727c73af9405f04abf9f6ac79172dbd1988f75d42c11a7e63b05e5386813965b4789b7e453bb395f15c4bfaa3a0b54a1cd773c375b745b2d3fe6872677531fe506199cd64650ec3b11fe58abacb2608bd7092294741d7a9b7e74ce5a3d9d9b5f1c0701f79a408474c510b8e6d6f86b2864f9d4c0a71457b3b8fffa163d7d1df7ff89cef863b0a7d5"}, @gcr_ga={0xbd, 0x6, @device_b}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x0, 0x80]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8001]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xfff, 0x101, 0xd, 0x5]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4)

231.836091ms ago: executing program 2 (id=18711):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={<r2=>0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x4}, 0x8)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d904000003", 0x6}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)=0x2000041)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRESOCT=r2, @ANYBLOB="00000000000000003c0052800b000100698e36746e6c00002c00028014000390ac00000114000200fc0200000000000004000000000000004248a4b6f2e9dc4846d3f91cce0fd99a325323196541eda45e20458a2f2d79f74569edb36360d4c24cfac680dee5b600"/115], 0x5c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
unshare(0x24020400)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xe}, 0xffffffffffffffff, {[0x1, 0x8, 0x2, 0x9, 0x7, 0x9, 0x6, 0x7fffffff]}}, 0x5c)
r8 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000480)=0x6e, 0x800)
ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, &(0x7f0000000600))
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r9, 0x0)
close(0x4)
recvmmsg$unix(r8, &(0x7f0000006b00)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000003d00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003e00)=""/24, 0x18}, {&(0x7f0000003e40)=""/118, 0x76}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)=""/107, 0x6b}, {&(0x7f0000004000)=""/236, 0xec}], 0x5, &(0x7f0000004180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000004200), 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004280)=""/26, 0x1a}, {&(0x7f00000042c0)=""/8, 0x8}, {&(0x7f0000004300)=""/146, 0x92}, {&(0x7f00000043c0)=""/246, 0xf6}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/202, 0xca}], 0x6, &(0x7f0000005640)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000005c00)=@abs, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005c80)=""/158, 0x9e}, {&(0x7f0000005d40)=""/122, 0x7a}, {&(0x7f0000005dc0)=""/61, 0x3d}, {&(0x7f0000005e00)=""/207, 0xcf}, {&(0x7f0000005f00)=""/29, 0x1d}, {&(0x7f0000005f40)=""/185, 0xb9}, {&(0x7f0000006000)=""/130, 0x82}], 0x7, &(0x7f0000006140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f00000067c0), 0x0, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000068c0), 0x6e, &(0x7f0000006a40)=[{&(0x7f0000006940)=""/234, 0xea}], 0x1, &(0x7f0000006a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x6, 0x103, &(0x7f0000006cc0)={0x0, 0x3938700})
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000500)=0xffff0080)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000000)=0x8)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r5], 0x38}}, 0x10)

230.93295ms ago: executing program 0 (id=18712):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100fff60000000000000500000a48000000060a010400000000000000000a0000040900010073797a31000000001c0004801800018008000100647570000c00028008000140000000150900020073797a3200000000140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800) (async)
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=@deltaction={0x184, 0x31, 0x1, 0x70bd2a, 0x25dfdafc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff1baf}}]}, @TCA_ACT_TAB={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001840)=""/4109, 0x100d}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r7=>r1, 0x2, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="b8bef960e08c6a02aab51b6c822b590f6d87b70ecb1dbe18a410d17afc09dc270e64e98fab856e5fdb7352594e9b63998b59cc2cba63d4757c0c6da4f5115ae75294771a5f77d1cf0267303c36b2a4e7b916f3a92060ad55668d31d8e7d266371504a07fa94ac75701d7f1d5ec41323322731058dbb1137edb27f1b539406880804ffe1d82604db92301190d8cc5cf227d6ccc43bb8fe34817e2bc342699300b5eb7c148e0d4e6610139178d9eadaeea41ec8a4b427c3a2f49b92796b9756c097936890a28282214d6768607d017d44a43e7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r8 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r9}, 0x10) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r8, @ANYRES16=r10, @ANYBLOB="ff07e0ffffffff000000000000000016052df7231bf4ae82d54c87921c0000000000", @ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="01000000050000000100"/28], 0x50) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000764e0c46e1a0c568cbdd00"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018010000786c6c2500000000002020207b1af8ff00000000a2919b020bb708bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

140.995247ms ago: executing program 0 (id=18713):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000440)={{[0x0, 0x4, 0x6000, 0x4]}, 0x0, 0x3, 0x8, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'})
r5 = socket$inet(0x2, 0x3, 0x30)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="009a0426bd70a0c3889cfaf0ac0f71dc5aaf831d64042505000000080003433655ed", @ANYRES32=r2, @ANYBLOB="0c0099000700000049000000"], 0x28}}, 0x80)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r7, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x34}}, 0x48040)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

495.402µs ago: executing program 0 (id=18714):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

0s ago: executing program 0 (id=18715):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

kernel console output (not intermixed with test programs):

invalid length.
[  599.665375][ T5962] : renamed from team_slave_1
[  599.725848][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14033'.
[  599.731927][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14033'.
[  599.974653][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14044'.
[  599.978407][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14044'.
[  599.984295][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14046'.
[  599.990724][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14046'.
[  599.994536][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14046'.
[  600.987933][ T6043] netlink: 'syz.2.14064': attribute type 13 has an invalid length.
[  602.060272][ T6059] lo: Caught tx_queue_len zero misconfig
[  602.074222][ T6059] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14070'.
[  602.078273][ T6059] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14070'.
[  602.585771][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14087'.
[  602.745637][ T6120] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  604.430120][ T6263] siw: device registration error -23
[  604.623553][ T6281] xfrm0 speed is unknown, defaulting to 1000
[  604.704163][ T6281] lo speed is unknown, defaulting to 1000
[  604.706779][ T6281] lo speed is unknown, defaulting to 1000
[  604.961224][ T6288] __nla_validate_parse: 4 callbacks suppressed
[  604.961233][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14166'.
[  604.967774][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14166'.
[  605.018336][ T6290] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14167'.
[  605.183309][ T6300] netlink: 'syz.1.14172': attribute type 10 has an invalid length.
[  605.197672][ T6299] sctp: [Deprecated]: syz.2.14171 (pid 6299) Use of int in max_burst socket option.
[  605.197672][ T6299] Use struct sctp_assoc_value instead
[  605.294075][ T6305] xfrm0 speed is unknown, defaulting to 1000
[  605.418203][ T6305] lo speed is unknown, defaulting to 1000
[  605.425352][ T6305] lo speed is unknown, defaulting to 1000
[  605.452424][ T6318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.772884][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14194'.
[  605.928645][ T6350] 8021q: adding VLAN 0 to HW filter on device bond30
[  606.642516][ T6403] netlink: 'syz.1.14217': attribute type 2 has an invalid length.
[  606.785950][ T6417] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535)
[  606.890162][ T6425] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14228'.
[  607.252433][ T6453] netlink: 'syz.0.14242': attribute type 1 has an invalid length.
[  608.150416][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14253'.
[  608.268679][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14258'.
[  608.273544][ T7808] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  608.273584][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14258'.
[  608.276913][ T7808] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  608.284392][ T7808] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  608.288505][ T7808] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  608.965545][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14282'.
[  608.978672][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14282'.
[  609.076723][ T6544] netlink: 'syz.2.14287': attribute type 3 has an invalid length.
[  609.223895][ T6560] bond30: option arp_all_targets: invalid value (3)
[  609.227312][ T6560] bond30 (unregistering): Released all slaves
[  609.967661][ T6619] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003
[  610.014606][ T6616] erspan0: left promiscuous mode
[  610.025938][ T6616] 8021q: adding VLAN 0 to HW filter on device team0
[  610.055581][ T6616] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  610.066725][ T5674] lo speed is unknown, defaulting to 1000
[  610.069322][ T5674] syz2: Port: 1 Link ACTIVE
[  610.078133][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.081805][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.086573][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.089604][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.297483][ T6654] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  610.341274][ T6660] __nla_validate_parse: 2 callbacks suppressed
[  610.341284][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14341'.
[  610.347933][ T6662] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14342'.
[  610.400627][ T6671] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  610.435832][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14350'.
[  610.445434][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14349'.
[  611.837329][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14383'.
[  611.913767][ T6754] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14383'.
[  611.928545][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14383'.
[  611.967757][ T6777] sock: sock_timestamping_bind_phc: sock not bind to device
[  612.875819][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.893299][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.905019][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  612.908470][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.311921][ T6831] bridge0: entered allmulticast mode
[  613.479327][   T52] block nbd1: Possible stuck request ffff888012ab0000: control (read@0,1024B). Runtime 90 seconds
[  613.482849][   T52] block nbd1: Possible stuck request ffff888012ab0200: control (read@1024,1024B). Runtime 90 seconds
[  613.487004][   T52] block nbd1: Possible stuck request ffff888012ab0400: control (read@2048,1024B). Runtime 90 seconds
[  613.491874][   T52] block nbd1: Possible stuck request ffff888012ab0600: control (read@3072,1024B). Runtime 90 seconds
[  613.754799][ T6854] xfrm0 speed is unknown, defaulting to 1000
[  613.952140][ T6854] lo speed is unknown, defaulting to 1000
[  613.955834][ T6854] lo speed is unknown, defaulting to 1000
[  614.291620][ T6876] xfrm0 speed is unknown, defaulting to 1000
[  614.458753][ T6876] lo speed is unknown, defaulting to 1000
[  614.462852][ T6876] lo speed is unknown, defaulting to 1000
[  614.648665][ T6892] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.14441'.
[  614.652677][ T6892] netlink: 'syz.1.14441': attribute type 2 has an invalid length.
[  614.937486][ T6906] netlink: 'syz.2.14446': attribute type 1 has an invalid length.
[  614.993631][ T6906] bond30: entered promiscuous mode
[  614.995845][ T6906] 8021q: adding VLAN 0 to HW filter on device bond30
[  615.022937][ T6910] bond30: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  615.028393][ T6910] bond30: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  615.032360][ T6910] bond30: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  615.077333][ T6906] bond30: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  615.086774][ T6906] bond30: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  615.400986][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14462'.
[  615.677188][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14475'.
[  615.681155][ T6975] netlink: 'syz.0.14475': attribute type 5 has an invalid length.
[  615.684457][ T6975] netlink: 'syz.0.14475': attribute type 8 has an invalid length.
[  615.687657][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14475'.
[  615.697865][ T6975] geneve4: entered promiscuous mode
[  615.700762][ T6975] geneve4: entered allmulticast mode
[  615.704355][ T5480] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 41363 - 0
[  615.708702][ T5480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 41363 - 0
[  615.712310][ T5480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 41363 - 0
[  615.715424][ T5480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 41363 - 0
[  618.455274][ T6967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  618.626348][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14489'.
[  618.802334][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14499'.
[  618.886924][ T7036] "syz.1.14503" (7036) uses obsolete ecb(arc4) skcipher
[  619.055378][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14510'.
[  619.065797][ T7052] ip6gre3: entered promiscuous mode
[  619.068126][ T7052] ip6gre3: entered allmulticast mode
[  620.787421][ T7220] sctp: [Deprecated]: syz.2.14586 (pid 7220) Use of int in maxseg socket option.
[  620.787421][ T7220] Use struct sctp_assoc_value instead
[  620.936650][ T7240] sctp: [Deprecated]: syz.2.14596 (pid 7240) Use of struct sctp_assoc_value in delayed_ack socket option.
[  620.936650][ T7240] Use struct sctp_sack_info instead
[  621.152066][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14604'.
[  621.189881][ T7259] 8021q: adding VLAN 0 to HW filter on device bond31
[  621.360931][ T7287] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  621.377911][ T7287] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  621.438479][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14619'.
[  621.444580][ T7294] netlink: 'syz.0.14619': attribute type 25 has an invalid length.
[  621.448448][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14619'.
[  622.982565][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14658'.
[  622.985487][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14658'.
[  622.988886][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14658'.
[  622.993138][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14658'.
[  625.559530][ T7347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.638964][ T7410] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  625.644220][ T7410] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  626.278131][ T7455] xfrm0 speed is unknown, defaulting to 1000
[  626.318065][ T7457] netlink: 192 bytes leftover after parsing attributes in process `syz.2.14687'.
[  626.327719][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14687'.
[  626.427110][ T7455] lo speed is unknown, defaulting to 1000
[  626.430045][ T7455] lo speed is unknown, defaulting to 1000
[  626.502748][ T7465] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  626.505827][ T7465] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  626.652094][ T7476] netlink: 'syz.1.14695': attribute type 6 has an invalid length.
[  626.698417][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14697'.
[  627.427456][ T7537] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  627.430551][ T7537] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  627.433571][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  628.464208][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14728'.
[  628.652629][ T7573] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  629.072983][ T7604] syzkaller0: entered promiscuous mode
[  629.075454][ T7604] syzkaller0: entered allmulticast mode
[  629.328948][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14751'.
[  629.347116][ T7614] sch_tbf: burst 88 is lower than device veth19 mtu (1514) !
[  629.480084][ T1379] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  629.526645][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14757'.
[  630.057391][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14772'.
[  630.070816][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14772'.
[  630.372678][ T7689] batadv_slave_1: entered promiscuous mode
[  630.375895][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14786'.
[  630.376323][ T7691] netlink: 'syz.1.14786': attribute type 2 has an invalid length.
[  630.383287][ T7689] macvlan0: entered allmulticast mode
[  630.385688][ T7689] batadv_slave_1: entered allmulticast mode
[  630.389455][ T7689] batman_adv: batadv0: Adding interface: macvlan0
[  630.392214][ T7689] batman_adv: batadv0: Interface activated: macvlan0
[  630.526597][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14794'.
[  630.530389][ T7708] tc_dump_action: action bad kind
[  630.612990][ T7716] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  630.615155][ T7718] netlink: 'syz.2.14799': attribute type 4 has an invalid length.
[  630.616361][ T7716] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  630.741418][ T7732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.766668][ T7732] syzkaller0: entered promiscuous mode
[  630.768505][ T7732] syzkaller0: entered allmulticast mode
[  630.771527][ T7732] tipc: Resetting bearer <eth:syzkaller0>
[  630.778581][ T7731] tipc: Resetting bearer <eth:syzkaller0>
[  630.830319][ T7736] netlink: 'syz.0.14808': attribute type 9 has an invalid length.
[  632.795220][ T7731] tipc: Disabling bearer <eth:syzkaller0>
[  632.932543][ T7758] netlink: 'syz.1.14819': attribute type 10 has an invalid length.
[  633.194517][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14832'.
[  635.221595][ T7871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  635.224737][ T7871] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  635.227160][ T7871] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  635.942381][ T7903] syzkaller0: entered promiscuous mode
[  635.944325][ T7903] syzkaller0: entered allmulticast mode
[  635.962229][ T7903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.966016][ T7903] tipc: Resetting bearer <eth:syzkaller0>
[  635.970293][ T7902] tipc: Resetting bearer <eth:syzkaller0>
[  635.986224][ T7902] tipc: Disabling bearer <eth:syzkaller0>
[  637.316057][ T7949] can: request_module (can-proto-0) failed.
[  637.879957][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14923'.
[  637.883587][ T8007] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  637.906788][ T8011] netlink: 'syz.1.14925': attribute type 2 has an invalid length.
[  637.909809][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14925'.
[  637.912695][ T8011] nbd: must specify at least one socket
[  637.945045][ T8015] netlink: 'syz.1.14927': attribute type 5 has an invalid length.
[  638.090508][ T8025] syzkaller0: entered promiscuous mode
[  638.093191][ T8025] syzkaller0: entered allmulticast mode
[  638.191501][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14935'.
[  638.200634][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14935'.
[  638.204235][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  638.207862][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  638.212474][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  638.218817][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  638.350771][ T8042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  638.387909][ T8042] syzkaller0: entered promiscuous mode
[  638.390440][ T8042] syzkaller0: entered allmulticast mode
[  638.393273][ T8042] tipc: Resetting bearer <eth:syzkaller0>
[  638.435868][ T8040] smbdirect: ib_dev[syz2] removed
[  638.486531][ T8039] tipc: Resetting bearer <eth:syzkaller0>
[  640.280646][ T8039] tipc: Disabling bearer <eth:syzkaller0>
[  640.582569][ T8074] netlink: 336 bytes leftover after parsing attributes in process `syz.1.14955'.
[  640.582775][ T8075] netlink: 'syz.2.14954': attribute type 1 has an invalid length.
[  640.586219][ T8074] netlink: 336 bytes leftover after parsing attributes in process `syz.1.14955'.
[  640.599596][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14953'.
[  640.622220][ T8075] 8021q: adding VLAN 0 to HW filter on device bond32
[  640.641473][ T8078] vlan1: entered promiscuous mode
[  640.643606][ T8078] syz_tun: entered promiscuous mode
[  640.681591][ T8075] bond32: (slave veth21): Enslaving as an active interface with a down link
[  640.743357][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14960'.
[  640.912486][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14969'.
[  641.484734][ T8149] tipc: Resetting bearer <eth:gre0>
[  641.527103][ T8149] tipc: Resetting bearer <eth:syzkaller0>
[  641.982096][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14988'.
[  641.984977][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14988'.
[  643.560382][   T52] block nbd1: Possible stuck request ffff888012ab0000: control (read@0,1024B). Runtime 120 seconds
[  643.564790][   T52] block nbd1: Possible stuck request ffff888012ab0200: control (read@1024,1024B). Runtime 120 seconds
[  643.569277][   T52] block nbd1: Possible stuck request ffff888012ab0400: control (read@2048,1024B). Runtime 120 seconds
[  643.573699][   T52] block nbd1: Possible stuck request ffff888012ab0600: control (read@3072,1024B). Runtime 120 seconds
[  644.175828][ T8131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  644.422071][ T8187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  644.426202][ T8187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  644.437394][ T8186] syzkaller0: entered promiscuous mode
[  644.439616][ T8186] syzkaller0: entered allmulticast mode
[  644.527559][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15002'.
[  644.636910][ T8200] xt_hashlimit: size too large, truncated to 1048576
[  644.911930][ T8223] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15014'.
[  644.917605][ T8223] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15014'.
[  644.993660][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15018'.
[  645.026225][ T8233] netlink: 'syz.0.15019': attribute type 11 has an invalid length.
[  646.295826][ T8280] netlink: 'syz.1.15039': attribute type 1 has an invalid length.
[  646.344523][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15043'.
[  646.386976][ T8290] netlink: 'syz.2.15045': attribute type 10 has an invalid length.
[  646.391199][   T33] audit: type=1800 audit(1783470774.379:13): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15042" name="memory.events" dev="tmpfs" ino=26884 res=0 errno=0
[  646.562748][ T8307] syzkaller0: entered promiscuous mode
[  646.564647][ T8307] syzkaller0: entered allmulticast mode
[  646.611047][ T8309] syzkaller0: entered promiscuous mode
[  646.613489][ T8309] syzkaller0: entered allmulticast mode
[  647.000936][   T33] audit: type=1800 audit(1783470774.989:14): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15066" name="memory.events" dev="tmpfs" ino=26935 res=0 errno=0
[  647.157164][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15069'.
[  648.823338][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15081'.
[  648.902950][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15084'.
[  649.288875][ T8417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15093'.
[  649.606014][ T8435] netlink: 36764 bytes leftover after parsing attributes in process `syz.0.15103'.
[  649.938221][ T8459] ipt_REJECT: TCP_RESET invalid for non-tcp
[  650.035738][ T8464] netlink: set zone limit has 8 unknown bytes
[  650.174030][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15123'.
[  650.230386][ T8477] syzkaller0: entered promiscuous mode
[  650.232754][ T8477] syzkaller0: entered allmulticast mode
[  651.771256][ T8495] netlink: 67 bytes leftover after parsing attributes in process `syz.1.15131'.
[  651.939444][ T8502] block nbd7: server does not support multiple connections per device.
[  651.942958][ T8502] block nbd7: shutting down sockets
[  652.481943][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15146'.
[  652.484886][ T8530] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  652.558579][ T8536] xfrm0 speed is unknown, defaulting to 1000
[  652.597259][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15151'.
[  652.650754][ T8536] lo speed is unknown, defaulting to 1000
[  652.715457][ T8541] ip6tnl12: entered allmulticast mode
[  652.806084][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15158'.
[  652.811020][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15158'.
[  652.841880][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15160'.
[  653.047355][ T8577] netlink: 'syz.0.15168': attribute type 16 has an invalid length.
[  653.058700][ T8577] netlink: 'syz.0.15168': attribute type 3 has an invalid length.
[  653.066761][ T8577] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.15168'.
[  653.195426][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15173'.
[  653.195706][ T8587] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  653.857016][ T8663] bond17: Unable to set up delay as MII monitoring is disabled
[  653.861053][ T8663] bond17 (unregistering): Released all slaves
[  654.123481][ T8691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  654.127704][ T8691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  654.485069][ T8722] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  654.608177][ T8732] x_tables: unsorted entry at hook 3
[  656.088809][ T8770] __nla_validate_parse: 2 callbacks suppressed
[  656.088824][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15256'.
[  656.126698][ T8774] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15255'.
[  656.162541][ T8778] bond0: (slave veth1_to_bond): Device is not bonding slave
[  656.165124][ T8778] bond0: option active_slave: invalid value (veth1_to_bond)
[  656.288468][ T8790] netlink: 'syz.1.15265': attribute type 13 has an invalid length.
[  656.291049][ T8790] netlink: 'syz.1.15265': attribute type 17 has an invalid length.
[  656.343040][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.392253][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15268'.
[  656.398499][ T8790] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  656.408665][T23706] lo speed is unknown, defaulting to 1000
[  656.411151][T23706] syz1: Port: 1 Link ACTIVE
[  656.430709][ T5674] lo speed is unknown, defaulting to 1000
[  657.248046][ T8864] xfrm0 speed is unknown, defaulting to 1000
[  657.347391][ T8864] lo speed is unknown, defaulting to 1000
[  657.932507][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15303'.
[  658.103340][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15310'.
[  658.469015][ T8923] xfrm0 speed is unknown, defaulting to 1000
[  658.647345][ T8923] lo speed is unknown, defaulting to 1000
[  658.710191][ T8925] netlink: 'syz.2.15321': attribute type 4 has an invalid length.
[  659.420502][ T8976] xt_hashlimit: size too large, truncated to 1048576
[  659.488677][ T8982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15337'.
[  660.653637][ T9012] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  660.657314][ T9012] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  660.782185][ T9022] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15362'.
[  660.886068][ T9030] netlink: 'syz.1.15365': attribute type 361 has an invalid length.
[  661.764244][ T9053] netlink: 'syz.0.15376': attribute type 1 has an invalid length.
[  661.767969][ T9053] netlink: 220 bytes leftover after parsing attributes in process `syz.0.15376'.
[  665.143512][ T9105] syzkaller0: entered promiscuous mode
[  665.145285][ T9105] syzkaller0: entered allmulticast mode
[  665.367229][ T9131] netlink: 292 bytes leftover after parsing attributes in process `syz.1.15412'.
[  665.483322][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15420'.
[  665.572843][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15428'.
[  665.620883][ T9171] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  665.624928][ T9164] veth23: entered allmulticast mode
[  665.634507][ T9164] bond33: (slave veth23): Enslaving as an active interface with an up link
[  665.652990][ T9164] bond33 (unregistering): (slave veth23): Releasing backup interface
[  665.663798][ T9164] bond33 (unregistering): Released all slaves
[  666.201502][ T9240] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15459'.
[  666.793180][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15463'.
[  666.796093][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15463'.
[  667.122100][ T9293] bond22: entered allmulticast mode
[  667.131012][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15478'.
[  667.136064][ T9292] bond22: left allmulticast mode
[  667.353812][ T9327] netlink: 'syz.0.15491': attribute type 1 has an invalid length.
[  667.396247][ T9327] 8021q: adding VLAN 0 to HW filter on device bond17
[  667.424326][ T9327] bond17: (slave veth25): Enslaving as a backup interface with a down link
[  668.373733][ T9422] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  668.376489][ T9422] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  668.574603][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15546'.
[  669.014129][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15567'.
[  669.192591][ T9500] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  669.397543][ T9517] netlink: 'syz.2.15580': attribute type 41 has an invalid length.
[  669.447066][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15581'.
[  669.453907][ T9519] openvswitch: netlink: Message has 8 unknown bytes.
[  669.456793][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.126443][ T9580] veth29: entered promiscuous mode
[  670.195176][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15611'.
[  670.247805][ T9590] 8021q: adding VLAN 0 to HW filter on device bond34
[  670.272829][ T9590] bond34 (unregistering): Released all slaves
[  670.813663][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15631'.
[  670.896659][ T9648] bridge_slave_0: left promiscuous mode
[  670.901770][ T9648] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  670.908028][ T9648] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  670.913797][ T9648] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  670.916503][ T9648] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  670.925096][ T9648] macvlan0: left promiscuous mode
[  670.953248][ T9648] gretap1: left allmulticast mode
[  670.963118][ T9648] bond13: left promiscuous mode
[  670.983167][ T9648] ip6tnl10: left allmulticast mode
[  670.989616][ T9648] bond14: left promiscuous mode
[  670.994036][ T9648] ip6gre3: left promiscuous mode
[  670.996473][ T9648] ip6gre3: left allmulticast mode
[  671.017573][ T9648] veth21: left promiscuous mode
[  671.020974][ T9648] veth21: left allmulticast mode
[  671.045021][ T9648] geneve4: left promiscuous mode
[  671.046706][ T9648] geneve4: left allmulticast mode
[  671.062901][ T9648] ip6tnl12: left allmulticast mode
[  671.091120][ T7808] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.094619][ T7808] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 41363 - 0
[  671.098034][ T7808] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.101633][ T7808] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 41363 - 0
[  671.105321][ T7808] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.108588][ T7808] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 41363 - 0
[  671.112441][ T7808] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.115824][ T7808] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 41363 - 0
[  671.284371][ T9669] netlink: 'syz.1.15644': attribute type 354 has an invalid length.
[  671.610618][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15653'.
[  671.627994][ T9690] bond31: entered promiscuous mode
[  671.630834][ T9690] 8021q: adding VLAN 0 to HW filter on device bond31
[  671.640143][ T9690] vlan9: entered allmulticast mode
[  671.641925][ T9690] bond31: entered allmulticast mode
[  672.240043][ T9754] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  672.242309][ T9754] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  672.244592][ T9754] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  672.321174][   T33] audit: type=1800 audit(1783470800.309:15): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15684" name="blkio.bfq.time_recursive" dev="tmpfs" ino=28080 res=0 errno=0
[  672.444355][ T9776] netlink: 'syz.1.15691': attribute type 8 has an invalid length.
[  672.491660][ T9782] netlink: 'syz.1.15695': attribute type 61 has an invalid length.
[  672.641199][ T9799] netlink: 220 bytes leftover after parsing attributes in process `syz.1.15702'.
[  672.703981][ T9805] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  672.881666][ T9816] tipc: Resetting bearer <eth:gre0>
[  672.886512][ T9816] wlan0: mtu greater than device maximum
[  673.642781][   T52] block nbd1: Possible stuck request ffff888012ab0000: control (read@0,1024B). Runtime 150 seconds
[  673.647162][   T52] block nbd1: Possible stuck request ffff888012ab0200: control (read@1024,1024B). Runtime 150 seconds
[  673.651693][   T52] block nbd1: Possible stuck request ffff888012ab0400: control (read@2048,1024B). Runtime 150 seconds
[  673.656248][   T52] block nbd1: Possible stuck request ffff888012ab0600: control (read@3072,1024B). Runtime 150 seconds
[  673.707318][ T9832] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  673.710673][ T9835] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15716'.
[  673.710689][ T9832] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  673.720970][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15716'.
[  673.779413][ T9837] syzkaller0: entered promiscuous mode
[  673.782209][ T9837] syzkaller0: entered allmulticast mode
[  674.273134][ T9878] bridge20: entered promiscuous mode
[  674.275222][ T9878] bridge20: entered allmulticast mode
[  674.369717][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  674.424987][ T9878] bridge20: entered promiscuous mode
[  674.427229][ T9878] bridge20: entered allmulticast mode
[  674.463424][ T9896] syzkaller0: entered promiscuous mode
[  674.465421][ T9896] syzkaller0: entered allmulticast mode
[  674.874777][ T9941] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  674.943031][ T9947] netlink: 'syz.1.15763': attribute type 9 has an invalid length.
[  674.945822][ T9948] 8021q: VLANs not supported on sit0
[  675.584172][ T9998] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  675.604141][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15787'.
[  675.744677][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15796'.
[  675.748545][T10022] netlink: 'syz.2.15796': attribute type 8 has an invalid length.
[  675.756184][T10022] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15796'.
[  675.909890][T10040] bridge0: failed insert local address into bridge forwarding table
[  675.975788][T10052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15810'.
[  676.071088][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15817'.
[  676.249338][T10088] "syz.1.15828" (10088) uses obsolete ecb(arc4) skcipher
[  676.296546][T10094] netlink: 'syz.2.15830': attribute type 153 has an invalid length.
[  676.328737][T10098] gretap0: entered promiscuous mode
[  676.337982][T10098] vlan3: entered promiscuous mode
[  676.340473][T10100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15833'.
[  676.958929][T10123] tipc: Resetting bearer <eth:gre0>
[  677.214192][T10155] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  677.244750][T10123] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  677.282105][T10123] ip6gre3: left allmulticast mode
[  677.304314][T10123] vlan9: left allmulticast mode
[  677.307451][T10123] bond31: left allmulticast mode
[  677.311194][T23706] lo speed is unknown, defaulting to 1000
[  677.313306][T23706] syz1: Port: 1 Link DOWN
[  677.315335][ T7808] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.321092][ T7808] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.329009][T23706] lo speed is unknown, defaulting to 1000
[  677.329228][ T7808] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.335420][ T7808] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.331122][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15891'.
[  678.440717][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15900'.
[  678.529910][T10288] xfrm0 speed is unknown, defaulting to 1000
[  678.625515][T10288] lo speed is unknown, defaulting to 1000
[  678.681914][T10304] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  678.824882][T10313] xt_hashlimit: size too large, truncated to 1048576
[  679.148803][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15916'.
[  679.332484][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15931'.
[  680.793637][T10424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  680.892676][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15969'.
[  680.896039][T10437] netlink: 252 bytes leftover after parsing attributes in process `syz.0.15969'.
[  681.224318][T10473] xt_hashlimit: size too large, truncated to 1048576
[  681.345118][T10481] gretap4: entered allmulticast mode
[  681.544272][T10501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  681.573769][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16000'.
[  681.576635][T10505] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  681.578781][T10505] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  681.956370][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16022'.
[  682.473940][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16044'.
[  682.915088][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16063'.
[  683.042604][T10659] netlink: 'syz.0.16071': attribute type 8 has an invalid length.
[  683.970202][T10686] syzkaller0: entered promiscuous mode
[  683.971975][T10686] syzkaller0: entered allmulticast mode
[  684.118446][T10696] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[  684.124866][T10696] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[  684.165740][T10701] openvswitch: netlink: Missing valid actions attribute.
[  684.168713][T10701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.517893][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16106'.
[  684.726807][T10751] syzkaller0: entered promiscuous mode
[  684.728725][T10751] syzkaller0: entered allmulticast mode
[  685.172419][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16134'.
[  685.242825][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16137'.
[  685.436071][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16146'.
[  685.455441][T10817] 8021q: adding VLAN 0 to HW filter on device bond18
[  685.474220][T10817] bond18: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  685.554672][T10829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16150'.
[  687.180735][T10906] netlink: 'syz.0.16182': attribute type 29 has an invalid length.
[  687.533995][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16193'.
[  687.537855][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16193'.
[  688.050570][T10965] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[  688.053183][T10965] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[  688.101511][T10969] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16211'.
[  689.096519][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16226'.
[  689.227357][T11022] xt_TCPMSS: Only works on TCP SYN packets
[  689.327864][T11026] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  689.330541][T11028] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  689.334942][T11028] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  689.393293][T11031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  689.672658][T11052] gre0: MTU too low for tipc bearer
[  689.674866][T11052] tipc: Disabling bearer <eth:gre0>
[  689.962998][T11073] SET target dimension over the limit!
[  690.271053][T11100] ip6erspan1: entered allmulticast mode
[  690.344059][T11108] syzkaller0: entered promiscuous mode
[  690.347529][T11108] syzkaller0: entered allmulticast mode
[  690.372765][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16274'.
[  690.375760][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16274'.
[  690.378660][T11111] netlink: 'syz.1.16274': attribute type 11 has an invalid length.
[  690.381557][T11111] netlink: 'syz.1.16274': attribute type 13 has an invalid length.
[  690.930703][ T1379] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  691.356339][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16290'.
[  691.359998][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16290'.
[  691.437772][T11159] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[  691.441292][T11159] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[  691.576762][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16296'.
[  691.642903][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16298'.
[  691.667250][T11171] veth31: entered allmulticast mode
[  691.671856][T11171] bond33: (slave veth31): Enslaving as an active interface with an up link
[  691.679146][T11171] bond33 (unregistering): (slave veth31): Releasing backup interface
[  691.685507][T11171] bond33 (unregistering): Released all slaves
[  692.382588][T11209] geneve1: entered promiscuous mode
[  693.001397][T11077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.073334][T11218] syzkaller0: entered promiscuous mode
[  693.075636][T11218] syzkaller0: entered allmulticast mode
[  693.092799][T11218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.096277][T11217] tipc: Resetting bearer <eth:syzkaller0>
[  693.124397][T11217] tipc: Disabling bearer <eth:syzkaller0>
[  693.557418][T11280] Cannot find set identified by id 65534 to match
[  693.566188][T11278] syzkaller0: entered promiscuous mode
[  693.568107][T11278] syzkaller0: entered allmulticast mode
[  693.884924][T11305] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  693.888262][T11305] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  693.916141][T11308] netlink: 'syz.0.16360': attribute type 2 has an invalid length.
[  693.946421][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16366'.
[  694.244575][   T56] block nbd8: Receive control failed (result -32)
[  694.248286][ T7966] block nbd8: Receive control failed (result -32)
[  694.380099][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16380'.
[  694.547056][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16385'.
[  694.561435][T11368] 8021q: adding VLAN 0 to HW filter on device bond33
[  694.571961][T11368] bond33: (slave syz_tun): Enslaving as an active interface with an up link
[  694.897849][T11385] netlink: 'syz.0.16394': attribute type 1 has an invalid length.
[  694.918509][T11385] 8021q: adding VLAN 0 to HW filter on device bond19
[  695.099628][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16398'.
[  695.567101][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16410'.
[  695.589130][T11423] netlink: 'syz.2.16410': attribute type 10 has an invalid length.
[  695.591676][T11423] netlink: 'syz.2.16410': attribute type 8 has an invalid length.
[  695.594245][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16410'.
[  695.682775][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16413'.
[  696.245471][T11454] bridge28: entered allmulticast mode
[  696.341505][T11460] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16425'.
[  696.595623][T11490] openvswitch: netlink: IPv6 tunnel dst address is zero
[  696.674255][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16446'.
[  696.684908][T11502] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[  696.687998][T11502] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[  696.735578][T11509] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  699.723813][T11507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.731030][T11534] netlink: 'syz.2.16459': attribute type 23 has an invalid length.
[  700.098805][T11569] ksmbd: Unknown IPC event: 1, ignore.
[  700.166345][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16475'.
[  700.177599][T11577] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.16477'.
[  700.183454][T11577] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.16477'.
[  700.465442][T11599] vlan3: entered allmulticast mode
[  700.467716][T11599] bond0: entered allmulticast mode
[  702.401580][T11658] netlink: 'syz.1.16510': attribute type 1 has an invalid length.
[  702.836905][T11686] netlink: 'syz.2.16523': attribute type 1 has an invalid length.
[  703.362736][T11673] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  703.731092][   T52] block nbd1: Possible stuck request ffff888012ab0000: control (read@0,1024B). Runtime 180 seconds
[  703.734857][   T52] block nbd1: Possible stuck request ffff888012ab0200: control (read@1024,1024B). Runtime 180 seconds
[  703.738462][   T52] block nbd1: Possible stuck request ffff888012ab0400: control (read@2048,1024B). Runtime 180 seconds
[  703.742179][   T52] block nbd1: Possible stuck request ffff888012ab0600: control (read@3072,1024B). Runtime 180 seconds
[  704.093915][T11634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.387962][T11721] syzkaller0: entered promiscuous mode
[  704.390948][T11721] syzkaller0: entered allmulticast mode
[  704.545773][T11731] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  704.772204][T11745] syzkaller1: entered promiscuous mode
[  704.774506][T11745] syzkaller1: entered allmulticast mode
[  704.881494][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16551'.
[  705.195481][T11776] netlink: 'syz.2.16563': attribute type 49 has an invalid length.
[  705.221127][T11778] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  705.251837][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16565'.
[  705.260126][T11780] batman_adv: batadv0: Interface deactivated: macvlan0
[  705.262578][T11780] batadv_slave_1: left allmulticast mode
[  705.264426][T11780] batadv_slave_1: left promiscuous mode
[  705.266773][T11780] macvlan0: left allmulticast mode
[  705.273275][T11780] netlink: 'syz.2.16565': attribute type 1 has an invalid length.
[  705.278944][T11780] netlink: 'syz.2.16565': attribute type 2 has an invalid length.
[  705.656435][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16572'.
[  705.660469][T11801] bond0: option lp_interval: invalid value (0)
[  705.663000][T11801] bond0: option lp_interval: allowed values 1 - 2147483647
[  706.518142][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16597'.
[  706.522730][T11854] netlink: 'syz.2.16597': attribute type 1 has an invalid length.
[  707.277421][ T5055] udevd[5055]: worker [564] /devices/virtual/block/nbd1 timeout; kill it
[  707.285017][ T5055] udevd[5055]: seq 26287 '/devices/virtual/block/nbd1' killed
[  707.884862][T11898] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16614'.
[  708.076424][T11899] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.134032][T11899] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  708.143283][ T5675] lo speed is unknown, defaulting to 1000
[  708.145928][ T5675] syz1: Port: 1 Link ACTIVE
[  708.169574][ T5675] lo speed is unknown, defaulting to 1000
[  710.571839][T12029] netlink: 'syz.1.16671': attribute type 13 has an invalid length.
[  710.785601][T12041] sctp: [Deprecated]: syz.2.16677 (pid 12041) Use of int in maxseg socket option.
[  710.785601][T12041] Use struct sctp_assoc_value instead
[  711.019207][ T9206] lo speed is unknown, defaulting to 1000
[  711.025602][ T9206] syz1: Port: 1 Link DOWN
[  711.037217][ T9206] lo speed is unknown, defaulting to 1000
[  711.742978][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16714'.
[  711.746090][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16714'.
[  711.800078][T25435] IPVS: ip_vs_send_async error -101
[  712.136980][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16726'.
[  712.435022][T12184] syzkaller0: create flow: hash 340219936 index 1
[  712.481417][T12183] syzkaller0: delete flow: hash 340219936 index 1
[  714.152464][T12206] netlink: 'syz.2.16744': attribute type 10 has an invalid length.
[  714.156764][T12206] geneve1: entered promiscuous mode
[  714.193953][T12204] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  714.605571][T12251] syzkaller0: entered promiscuous mode
[  714.608972][T12251] syzkaller0: entered allmulticast mode
[  715.298085][T12301] syzkaller0: entered promiscuous mode
[  715.300027][T12301] syzkaller0: entered allmulticast mode
[  716.876731][T12309] vlan0: Caught tx_queue_len zero misconfig
[  716.946066][T12319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16793'.
[  716.950655][T12319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16793'.
[  716.960101][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16795'.
[  716.977672][T12321] ipvlan2: entered allmulticast mode
[  716.980425][T12321] gretap0: entered allmulticast mode
[  717.142298][T12334] bond0: entered promiscuous mode
[  717.148320][T12334] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  717.157586][T12334] bond0: left promiscuous mode
[  717.160523][T12334] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  717.196540][T12339] bond0: entered promiscuous mode
[  717.202214][T12339] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  717.208015][T12339] bond0: left promiscuous mode
[  717.215664][T12339] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  717.382555][T12354] netlink: 'syz.2.16808': attribute type 1 has an invalid length.
[  717.425311][T12350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  717.430390][T12350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  717.441119][T12354] bond34: (slave gretap3): making interface the new active one
[  717.445037][T12354] bond34: (slave gretap3): Enslaving as an active interface with an up link
[  717.462921][T12354] vlan5: entered allmulticast mode
[  717.465123][T12354] bond34: entered allmulticast mode
[  717.467255][T12354] gretap3: entered allmulticast mode
[  717.471133][T12354] bond34: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  717.852055][T12382] netlink: 'syz.1.16818': attribute type 9 has an invalid length.
[  718.125595][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16823'.
[  718.708724][T12416] tipc: MTU too low for tipc bearer
[  719.013975][T12431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  719.161920][T12439] syzkaller0: entered promiscuous mode
[  719.164327][T12439] syzkaller0: entered allmulticast mode
[  719.233535][T12441] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  719.236066][T12441] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  719.372974][T12453] xt_hashlimit: size too large, truncated to 1048576
[  719.465260][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16852'.
[  720.249934][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16869'.
[  720.491335][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16866'.
[  720.494168][T12506] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  720.722420][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16882'.
[  720.736801][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16882'.
[  720.892481][T12541] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16888'.
[  722.181984][T12663] netlink: 'syz.1.16943': attribute type 9 has an invalid length.
[  722.282525][T12674] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  722.289854][T12674] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  722.327009][T12682] netlink: 'syz.1.16950': attribute type 4 has an invalid length.
[  722.519387][T12701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.575200][T12708] __nla_validate_parse: 3 callbacks suppressed
[  722.575217][T12708] netlink: 240 bytes leftover after parsing attributes in process `syz.1.16961'.
[  722.804972][T12731] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  722.837582][T12731] bond20 (unregistering): Released all slaves
[  722.987103][T12746] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  722.992936][T12746] veth31: left allmulticast mode
[  722.996053][T12746] bridge28: left allmulticast mode
[  726.033716][T12768] nbd: nbd1 already in use
[  726.035621][T12768] block nbd1: NBD_DISCONNECT
[  726.038782][T12768] block nbd1: Send disconnect failed -32
[  726.050744][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16985'.
[  726.057308][T12768] block nbd1: shutting down sockets
[  726.064042][    C0] blk_print_req_error: 132 callbacks suppressed
[  726.064052][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  726.069014][    C0] buffer_io_error: 138 callbacks suppressed
[  726.069022][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  726.075258][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  726.078550][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  726.081547][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  726.084658][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  726.087318][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  726.091172][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  726.094562][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.100046][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  726.102672][   T52] Buffer I/O error on dev nbd1, logical block 1, async page read
[  726.105161][   T52] Buffer I/O error on dev nbd1, logical block 2, async page read
[  726.107743][   T52] Buffer I/O error on dev nbd1, logical block 3, async page read
[  726.110494][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.128732][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  726.131492][   T52] Buffer I/O error on dev nbd1, logical block 1, async page read
[  726.134066][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.137650][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.141061][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.144081][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  726.147324][  T564] ldm_validate_partition_table(): Disk read failed.
[  726.150525][  T564] Dev nbd1: unable to read RDB block 0
[  726.153059][  T564]  nbd1: unable to read partition table
[  726.168776][T12780] netlink: 'syz.2.16989': attribute type 1 has an invalid length.
[  726.179576][T12780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16989'.
[  726.183874][ T5055] udevd[5055]: worker [564] terminated by signal 9 (Killed)
[  726.192188][ T5055] udevd[5055]: worker [564] failed while handling '/devices/virtual/block/nbd1'
[  726.480150][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16999'.
[  726.752091][T12835] syzkaller1: tun_chr_ioctl cmd 1074025681
[  726.763854][T12839] netlink: 204 bytes leftover after parsing attributes in process `syz.1.17013'.
[  726.768763][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17013'.
[  727.565677][T12894] netlink: zone id is out of range
[  727.567973][T12894] netlink: zone id is out of range
[  727.571209][T12894] netlink: zone id is out of range
[  727.573390][T12894] netlink: get zone limit has 8 unknown bytes
[  727.878544][T12902] geneve1: left promiscuous mode
[  727.892204][T12902] bond30: left promiscuous mode
[  727.926012][T12902] veth23: left allmulticast mode
[  727.929263][T12902] ip6erspan1: left allmulticast mode
[  727.931557][T12902] vlan3: left allmulticast mode
[  727.933610][T12902] bond0: left allmulticast mode
[  728.011891][ T7808] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  728.017038][ T7808] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  728.021166][ T7808] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  728.024337][ T7808] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.215368][T12954] veth34: entered allmulticast mode
[  729.594523][T12974] syzkaller0: entered promiscuous mode
[  729.596232][T12974] syzkaller0: entered allmulticast mode
[  729.992433][T12981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17071'.
[  731.328470][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17084'.
[  731.421825][T13022] syzkaller0: entered promiscuous mode
[  731.424014][T13022] syzkaller0: entered allmulticast mode
[  731.542121][T13028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17091'.
[  731.824232][T13052] netlink: 'syz.1.17099': attribute type 1 has an invalid length.
[  731.826698][T13052] netlink: 'syz.1.17099': attribute type 2 has an invalid length.
[  731.906017][T13058] netlink: 'syz.1.17102': attribute type 21 has an invalid length.
[  731.908530][T13058] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17102'.
[  731.913786][T13058] netlink: 'syz.1.17102': attribute type 5 has an invalid length.
[  731.916277][T13058] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17102'.
[  732.012554][T13063] syzkaller0: entered promiscuous mode
[  732.014447][T13063] syzkaller0: entered allmulticast mode
[  732.453405][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17110'.
[  733.144459][T13112] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  733.395922][T13118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17127'.
[  733.726278][T13147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  733.728907][T13147] syzkaller0: entered promiscuous mode
[  733.731278][T13147] syzkaller0: entered allmulticast mode
[  733.751843][T13147] tipc: Resetting bearer <eth:syzkaller0>
[  733.755726][T13146] tipc: Resetting bearer <eth:syzkaller0>
[  733.772680][T13146] tipc: Disabling bearer <eth:syzkaller0>
[  734.746504][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17155'.
[  734.857284][T13193] xt_hashlimit: size too large, truncated to 1048576
[  735.051212][T13217] netlink: 'syz.0.17170': attribute type 3 has an invalid length.
[  735.142364][T13230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17177'.
[  735.272588][T13247] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[  735.275041][T13247] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[  735.300733][T13249] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[  735.302927][T13249] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[  735.306162][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17187'.
[  735.314455][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17187'.
[  735.335731][T13251] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17187'.
[  735.385092][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17192'.
[  735.564484][T13277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17198'.
[  735.724109][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17202'.
[  735.855049][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17205'.
[  735.878634][T13299] IPVS: Error connecting to the multicast addr
[  735.889448][T13296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17205'.
[  735.894987][T13299] xfrm0 speed is unknown, defaulting to 1000
[  735.899776][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17205'.
[  735.993487][T13299] lo speed is unknown, defaulting to 1000
[  736.898048][T13356] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  737.032663][T13366] openvswitch: netlink: Message has 4 unknown bytes.
[  737.034926][T13366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.279196][T13382] 8021q: adding VLAN 0 to HW filter on device bond35
[  737.303155][T13382] 8021q: adding VLAN 0 to HW filter on device bond36
[  737.310087][T13382] bond35: (slave bond36): Enslaving as an active interface with an up link
[  737.334863][T13382] bond35 (unregistering): (slave bond36): Releasing backup interface
[  737.342558][T13382] bond35 (unregistering): Released all slaves
[  737.442113][T13387] netlink: 'syz.2.17243': attribute type 3 has an invalid length.
[  737.444795][T13387] netlink: 'syz.2.17243': attribute type 3 has an invalid length.
[  738.197523][T13407] bond20: option lacp_active: invalid value (5)
[  738.202659][T13407] bond20 (unregistering): Released all slaves
[  738.324130][T13421] netlink: 'syz.0.17257': attribute type 4 has an invalid length.
[  738.619573][T13462] netlink: 'syz.1.17279': attribute type 3 has an invalid length.
[  738.622544][T13462] netlink: 'syz.1.17279': attribute type 3 has an invalid length.
[  738.822722][T13495] x_tables: duplicate underflow at hook 2
[  738.967012][T13518] netlink: 'syz.1.17296': attribute type 10 has an invalid length.
[  738.970327][T13518] openvswitch: netlink: Flow key attr not present in new flow.
[  739.048438][T13528] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[  739.053701][T13528] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[  740.606769][T13584] xt_TPROXY: Can be used only with -p tcp or -p udp
[  742.141659][T13615] netlink: 'syz.0.17338': attribute type 1 has an invalid length.
[  742.190501][T13615] 8021q: adding VLAN 0 to HW filter on device bond20
[  742.214855][T13615] bond20: option tlb_dynamic_lb: unable to set because the bond device is up
[  742.275581][T13625] sctp: [Deprecated]: syz.0.17341 (pid 13625) Use of int in max_burst socket option.
[  742.275581][T13625] Use struct sctp_assoc_value instead
[  742.588602][T13650] batadv_slave_0: entered promiscuous mode
[  742.592907][T13649] batadv_slave_0: left promiscuous mode
[  742.723556][T13664] sctp: [Deprecated]: syz.2.17359 (pid 13664) Use of int in max_burst socket option.
[  742.723556][T13664] Use struct sctp_assoc_value instead
[  742.761563][T13671] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  743.248703][T13718] __nla_validate_parse: 9 callbacks suppressed
[  743.248718][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17382'.
[  743.258610][T13718] openvswitch: netlink: Missing key (keys=40, expected=100)
[  743.513297][T13735] netlink: 80 bytes leftover after parsing attributes in process `syz.1.17390'.
[  743.516369][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17390'.
[  744.078709][T13765] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  744.081831][T13765] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  745.136127][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17415'.
[  745.167947][T13807] 8021q: adding VLAN 0 to HW filter on device bond35
[  745.191655][T13807] bond35: (slave veth35): Enslaving as an active interface with an up link
[  745.220949][T13807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  745.224720][T13807] bond35: (slave batadv0): Enslaving as an active interface with an up link
[  745.248737][T13813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17421'.
[  745.573997][T13846] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  745.577154][T13846] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  745.580497][T13846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  745.618074][T13848] netlink: 'syz.1.17437': attribute type 10 has an invalid length.
[  745.737200][T13854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17440'.
[  746.120493][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17451'.
[  746.173122][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17452'.
[  746.176846][T13878] netlink: 'syz.2.17452': attribute type 21 has an invalid length.
[  746.272242][T13882] syzkaller1: entered promiscuous mode
[  746.274099][T13882] syzkaller1: entered allmulticast mode
[  746.526418][T13909] syzkaller0: entered promiscuous mode
[  746.528317][T13909] syzkaller0: entered allmulticast mode
[  746.538060][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17468'.
[  746.573747][T13911] 8021q: adding VLAN 0 to HW filter on device bond36
[  746.672254][T13918] syzkaller1: entered promiscuous mode
[  746.675061][T13918] syzkaller1: entered allmulticast mode
[  746.708792][T13922] syzkaller0: entered promiscuous mode
[  746.710990][T13922] syzkaller0: entered allmulticast mode
[  746.929549][T13940] batadv_slave_1: entered promiscuous mode
[  746.933192][T13939] batadv_slave_1: left promiscuous mode
[  746.986739][T13937] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  746.990198][T13937] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  747.022881][T13945] netlink: 'syz.2.17482': attribute type 6 has an invalid length.
[  747.073554][T13947] netlink: 'syz.2.17484': attribute type 5 has an invalid length.
[  747.110997][T13953] netlink: 'syz.2.17486': attribute type 16 has an invalid length.
[  747.113899][T13953] netlink: 'syz.2.17486': attribute type 17 has an invalid length.
[  747.452481][T13985] netlink: 'syz.2.17500': attribute type 2 has an invalid length.
[  747.490693][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17501'.
[  747.530290][T13987] 8021q: adding VLAN 0 to HW filter on device bond21
[  748.178991][T14022] syzkaller0: entered promiscuous mode
[  748.181494][T14022] syzkaller0: entered allmulticast mode
[  748.293169][T14032] netlink: 'syz.0.17519': attribute type 1 has an invalid length.
[  748.774797][T14090] team_slave_1: Caught tx_queue_len zero misconfig
[  748.927468][T14109] syzkaller0: entered promiscuous mode
[  748.929320][T14109] syzkaller0: entered allmulticast mode
[  749.234534][T14139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17569'.
[  749.237488][T14139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17569'.
[  749.241725][T14141] netlink: 'syz.1.17570': attribute type 1 has an invalid length.
[  749.244547][T14141] netlink: 244 bytes leftover after parsing attributes in process `syz.1.17570'.
[  749.247526][T14141] NCSI netlink: No device for ifindex 0
[  749.344012][T14157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17578'.
[  749.415606][T14167] netlink: 'syz.1.17583': attribute type 1 has an invalid length.
[  749.434959][T14167] 8021q: adding VLAN 0 to HW filter on device bond37
[  749.457224][T14167] bond37: (slave veth37): Enslaving as an active interface with a down link
[  749.462058][T14167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17583'.
[  749.551642][T14180] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  749.552079][   T13] tipc: Subscription rejected, illegal request
[  749.554881][T14180] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  749.561281][T14180] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  749.902595][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17602'.
[  750.003282][T14211] 8021q: adding VLAN 0 to HW filter on device team0
[  750.040292][T14211] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  750.059815][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.063171][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.069223][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.072070][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.100416][ T9203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  750.195579][T14218] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17606'.
[  750.199984][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17606'.
[  750.238602][T14220] xt_bpf: check failed: parse error
[  750.419548][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  750.429484][ T9203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  750.749558][T14264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17627'.
[  750.809897][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17631'.
[  750.994813][T14288] syzkaller1: entered promiscuous mode
[  750.997132][T14288] syzkaller1: entered allmulticast mode
[  751.482232][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  751.492491][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  751.703353][T14337] syzkaller0: entered promiscuous mode
[  751.705795][T14337] syzkaller0: entered allmulticast mode
[  751.719524][T23706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  752.361617][ T1379] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  753.833393][T14470] bond38: entered promiscuous mode
[  754.374108][T14529] __nla_validate_parse: 8 callbacks suppressed
[  754.374118][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17744'.
[  754.521436][T14542] sock: sock_timestamping_bind_phc: sock not bind to device
[  754.552089][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17747'.
[  754.621918][T14537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.17747'.
[  754.624973][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17747'.
[  754.985640][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17768'.
[  755.085959][T14591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  755.388725][T14628] validate_nla: 1 callbacks suppressed
[  755.388735][T14628] netlink: 'syz.2.17790': attribute type 3 has an invalid length.
[  755.569434][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  755.886390][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17815'.
[  755.889720][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17815'.
[  755.908199][T14688] xfrm0 speed is unknown, defaulting to 1000
[  755.948764][T14692] syzkaller0: entered promiscuous mode
[  755.950727][T14692] syzkaller0: entered allmulticast mode
[  755.953767][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17816'.
[  756.008228][T14688] lo speed is unknown, defaulting to 1000
[  756.264576][T14695] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17819'.
[  756.647079][T14734] dvmrp1: tun_chr_ioctl cmd 1074025677
[  756.649390][T14734] dvmrp1: linktype set to 776
[  756.773512][T14746] syzkaller0: entered promiscuous mode
[  756.775217][T14746] syzkaller0: entered allmulticast mode
[  756.781623][T14746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  756.786289][T14746] tipc: Resetting bearer <eth:syzkaller0>
[  756.793176][T14745] tipc: Resetting bearer <eth:syzkaller0>
[  756.809728][T14745] tipc: Disabling bearer <eth:syzkaller0>
[  756.987489][T14753] netlink: 'syz.1.17843': attribute type 4 has an invalid length.
[  756.996639][T14753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17843'.
[  757.717991][T14789] netlink: 'syz.2.17860': attribute type 1 has an invalid length.
[  757.739647][T14789] 8021q: adding VLAN 0 to HW filter on device bond37
[  757.761472][T14789] bond37: (slave veth25): Enslaving as an active interface with a down link
[  757.771745][T14789] 8021q: adding VLAN 0 to HW filter on device batadv2
[  757.775284][T14789] bond37: (slave batadv2): making interface the new active one
[  757.778606][T14789] batadv2: entered promiscuous mode
[  757.781792][T14789] bond37: (slave batadv2): Enslaving as an active interface with an up link
[  757.802271][T14789] bond37 (unregistering): (slave veth25): Releasing active interface
[  757.813677][T14789] bond37 (unregistering): (slave batadv2): Releasing active interface
[  757.819559][T14789] bond37 (unregistering): Released all slaves
[  757.844094][T14796] syzkaller0: entered promiscuous mode
[  757.846360][T14796] syzkaller0: entered allmulticast mode
[  758.134682][T14814] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  759.306532][T14890] warn_alloc: 1 callbacks suppressed
[  759.306549][T14890] syz.1.17907: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  759.324540][T14890] CPU: 0 UID: 0 PID: 14890 Comm: syz.1.17907 Not tainted syzkaller #0 PREEMPT(full) 
[  759.324560][T14890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  759.324568][T14890] Call Trace:
[  759.324574][T14890]  <TASK>
[  759.324581][T14890]  dump_stack_lvl+0xe8/0x150
[  759.324601][T14890]  warn_alloc+0x24c/0x270
[  759.324615][T14890]  ? stack_depot_save_flags+0x33/0x800
[  759.324631][T14890]  ? __pfx_warn_alloc+0x10/0x10
[  759.324644][T14890]  ? kasan_save_track+0x3e/0x80
[  759.324657][T14890]  ? __kasan_kmalloc+0x93/0xb0
[  759.324672][T14890]  ? xsk_setsockopt+0x52a/0x960
[  759.324684][T14890]  ? do_sock_setsockopt+0x17c/0x1b0
[  759.324701][T14890]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  759.324716][T14890]  ? do_syscall_64+0x174/0x580
[  759.324731][T14890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.324751][T14890]  __vmalloc_node_range_noprof+0x12c/0x1730
[  759.324791][T14890]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  759.324814][T14890]  ? __kasan_kmalloc+0x93/0xb0
[  759.324828][T14890]  ? __kmalloc_cache_noprof+0x32d/0x660
[  759.324841][T14890]  ? __kmalloc_cache_noprof+0x150/0x660
[  759.324855][T14890]  vmalloc_user_noprof+0xad/0xe0
[  759.324895][T14890]  ? xskq_create+0xbf/0x170
[  759.324909][T14890]  xskq_create+0xbf/0x170
[  759.324924][T14890]  xsk_init_queue+0x8a/0xe0
[  759.324940][T14890]  xsk_setsockopt+0x52a/0x960
[  759.324952][T14890]  ? __fget_files+0x2a/0x420
[  759.324966][T14890]  ? __pfx_xsk_setsockopt+0x10/0x10
[  759.324978][T14890]  ? __pfx_aa_sk_perm+0x10/0x10
[  759.324999][T14890]  ? aa_sock_opt_perm+0xff/0x1a0
[  759.325020][T14890]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  759.325037][T14890]  ? __pfx_xsk_setsockopt+0x10/0x10
[  759.325051][T14890]  do_sock_setsockopt+0x17c/0x1b0
[  759.325071][T14890]  __x64_sys_setsockopt+0x13d/0x1b0
[  759.325089][T14890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.325102][T14890]  do_syscall_64+0x174/0x580
[  759.325117][T14890]  ? trace_irq_disable+0x3b/0x140
[  759.325133][T14890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.325146][T14890] RIP: 0033:0x7fa82e59ce59
[  759.325158][T14890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.325169][T14890] RSP: 002b:00007fa82f464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  759.325183][T14890] RAX: ffffffffffffffda RBX: 00007fa82e815fa0 RCX: 00007fa82e59ce59
[  759.325193][T14890] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  759.325201][T14890] RBP: 00007fa82e632e6f R08: 0000000000000004 R09: 0000000000000000
[  759.325209][T14890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.325217][T14890] R13: 00007fa82e816038 R14: 00007fa82e815fa0 R15: 00007ffc01487b08
[  759.325238][T14890]  </TASK>
[  759.325391][T14890] Mem-Info:
[  759.425785][T14890] active_anon:15005 inactive_anon:4 isolated_anon:0
[  759.425785][T14890]  active_file:2202 inactive_file:48684 isolated_file:0
[  759.425785][T14890]  unevictable:1768 dirty:128 writeback:0
[  759.425785][T14890]  slab_reclaimable:12456 slab_unreclaimable:162731
[  759.425785][T14890]  mapped:18199 shmem:2346 pagetables:1215
[  759.425785][T14890]  sec_pagetables:0 bounce:0
[  759.425785][T14890]  kernel_misc_reclaimable:0
[  759.425785][T14890]  free:1032345 free_pcp:19290 free_cma:0
[  759.442904][T14890] Node 0 active_anon:42444kB inactive_anon:16kB active_file:8748kB inactive_file:22812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39900kB dirty:168kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8792kB pagetables:2636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  759.455481][T14890] Node 1 active_anon:17576kB inactive_anon:0kB active_file:60kB inactive_file:171924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32896kB dirty:344kB writeback:0kB shmem:4684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5912kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  759.469420][T14890] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  759.484255][T14890] lowmem_reserve[]: 0 1585 2116 2116 2116
[  759.487466][T14890] Node 0 DMA32 free:1382424kB boost:0kB min:25008kB low:31260kB high:37512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22460kB inactive_anon:0kB active_file:8420kB inactive_file:216kB unevictable:0kB writepending:104kB zspages:0kB present:2080636kB managed:1624000kB mlocked:0kB bounce:0kB free_pcp:8432kB local_pcp:8284kB free_cma:0kB
[  759.500829][T14890] lowmem_reserve[]: 0 0 530 530 530
[  759.503267][T14890] Node 0 Normal free:14436kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19948kB inactive_anon:16kB active_file:328kB inactive_file:22596kB unevictable:3536kB writepending:64kB zspages:0kB present:1572868kB managed:543100kB mlocked:0kB bounce:0kB free_pcp:1084kB local_pcp:724kB free_cma:0kB
[  759.515762][T14890] lowmem_reserve[]: 0 0 0 0 0
[  759.517821][T14890] Node 1 Normal free:2716792kB boost:0kB min:56348kB low:70432kB high:84516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17576kB inactive_anon:0kB active_file:60kB inactive_file:171924kB unevictable:3536kB writepending:344kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:67564kB local_pcp:34412kB free_cma:0kB
[  759.531589][T14890] lowmem_reserve[]: 0 0 0 0 0
[  759.533600][T14890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  759.538453][T14890] Node 0 DMA32: 160*4kB (UM) 241*8kB (UM) 237*16kB (UM) 200*32kB (UM) 103*64kB (UME) 129*128kB (UM) 132*256kB (UME) 54*512kB (UME) 17*1024kB (UM) 3*2048kB (UM) 308*4096kB (UM) = 1382424kB
[  759.545974][T14890] Node 0 Normal: 174*4kB (UME) 274*8kB (UME) 302*16kB (UM) 188*32kB (UM) 10*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 14504kB
[  759.552239][T14890] Node 1 Normal: 486*4kB (UME) 922*8kB (UME) 1351*16kB (UME) 587*32kB (UME) 402*64kB (UME) 331*128kB (UME) 137*256kB (UM) 33*512kB (UME) 7*1024kB (UM) 0*2048kB 620*4096kB (UM) = 2716472kB
[  759.560571][T14890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  759.564190][T14890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  759.567661][T14890] 53232 total pagecache pages
[  759.569633][T14890] 0 pages in swap cache
[  759.571253][T14890] Free swap  = 124996kB
[  759.573587][T14890] Total swap = 124996kB
[  759.575183][T14890] 1834877 pages RAM
[  759.576676][T14890] 0 pages HighMem/MovableOnly
[  759.578525][T14890] 390591 pages reserved
[  759.580442][T14890] 0 pages cma reserved
[  760.140046][T14950] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  760.142455][T14950] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  760.145661][T14950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  761.128502][T14965] __nla_validate_parse: 4 callbacks suppressed
[  761.128513][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17933'.
[  762.126745][T14980] netlink: 'syz.0.17938': attribute type 4 has an invalid length.
[  762.131490][T14980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17938'.
[  762.134522][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17938'.
[  762.138204][T14980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17938'.
[  762.150072][T14982] macvtap0: entered promiscuous mode
[  762.152247][T14982] vlan0: entered promiscuous mode
[  762.256644][T14982] vlan0: left promiscuous mode
[  762.288444][T14983] macvtap0: entered promiscuous mode
[  762.290290][T14983] vlan0: entered promiscuous mode
[  762.292966][T14983] vlan0: left promiscuous mode
[  762.440864][T14993] macvtap1: entered promiscuous mode
[  762.444668][T14993] vlan0: entered promiscuous mode
[  762.451641][T14993] bond0: entered promiscuous mode
[  762.465356][T14993] vlan0: left promiscuous mode
[  762.467381][T14993] bond0: left promiscuous mode
[  762.528718][T15007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17946'.
[  763.889627][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  764.342967][T15037] 8021q: VLANs not supported on gre0
[  764.482218][T15063] sctp: [Deprecated]: syz.1.17958 (pid 15063) Use of int in max_burst socket option deprecated.
[  764.482218][T15063] Use struct sctp_assoc_value instead
[  764.508915][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17959'.
[  764.529644][T15061] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  764.551807][ T9203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  764.614358][T15067] netlink: 188 bytes leftover after parsing attributes in process `syz.2.17960'.
[  764.736745][T15082] macvtap0: entered promiscuous mode
[  764.738514][T15082] vlan0: entered promiscuous mode
[  764.740751][T15082] bond23: entered promiscuous mode
[  764.743272][T15082] vlan0: left promiscuous mode
[  764.744863][T15082] bond23: left promiscuous mode
[  765.184179][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17964'.
[  765.240479][ T9203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  765.267830][T15096] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  765.270409][T15096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  765.390430][T15112] netlink: 'syz.2.17969': attribute type 30 has an invalid length.
[  765.531596][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17975'.
[  765.567937][T15128] netlink: 'syz.2.17974': attribute type 12 has an invalid length.
[  765.723398][T15154] macvtap1: entered promiscuous mode
[  765.725620][T15154] vlan0: entered promiscuous mode
[  765.727260][T15154] bond0: entered promiscuous mode
[  765.732446][T15154] vlan0: left promiscuous mode
[  765.734508][T15154] bond0: left promiscuous mode
[  766.205719][T15165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17983'.
[  766.286273][T15168] syzkaller1: tun_chr_ioctl cmd 2147767521
[  766.467374][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17986'.
[  766.471400][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17986'.
[  766.474777][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17988'.
[  766.481626][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17988'.
[  766.548986][T15184] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17991'.
[  766.588040][T15188] macvtap0: entered promiscuous mode
[  766.590461][T15188] vlan0: entered promiscuous mode
[  766.593828][T15188] vlan0: left promiscuous mode
[  766.613207][T15189] macvtap0: entered promiscuous mode
[  766.615369][T15189] vlan0: entered promiscuous mode
[  766.618353][T15189] vlan0: left promiscuous mode
[  766.774161][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17994'.
[  766.784004][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17994'.
[  767.482489][T15214] macvtap0: entered promiscuous mode
[  767.484683][T15214] vlan0: entered promiscuous mode
[  767.487544][T15214] vlan0: left promiscuous mode
[  767.698697][T15221] macvtap1: entered promiscuous mode
[  767.702272][T15221] vlan0: entered promiscuous mode
[  767.704068][T15221] bond0: entered promiscuous mode
[  767.707896][T15221] vlan0: left promiscuous mode
[  767.709647][T15221] bond0: left promiscuous mode
[  768.132838][T15226] macvtap0: entered promiscuous mode
[  768.134719][T15226] vlan0: entered promiscuous mode
[  768.139203][T15226] vlan0: left promiscuous mode
[  768.463980][T15235] macvtap0: entered promiscuous mode
[  768.465689][T15235] vlan0: entered promiscuous mode
[  768.467546][T15235] bond23: entered promiscuous mode
[  768.473833][T15235] vlan0: left promiscuous mode
[  768.475803][T15235] bond23: left promiscuous mode
[  768.504822][T15237] macvtap1: entered promiscuous mode
[  768.506730][T15237] vlan0: entered promiscuous mode
[  768.508440][T15237] bond0: entered promiscuous mode
[  768.515091][T15237] vlan0: left promiscuous mode
[  768.516629][T15237] bond0: left promiscuous mode
[  769.167282][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18011'.
[  769.170243][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18011'.
[  769.277465][T15263] netlink: 'syz.1.18015': attribute type 1 has an invalid length.
[  769.303545][T15268] openvswitch: netlink: Message has 4 unknown bytes.
[  769.384690][T15272] macvtap1: entered promiscuous mode
[  769.386504][T15272] vlan0: entered promiscuous mode
[  769.388329][T15272] bond0: entered promiscuous mode
[  769.394899][T15272] vlan0: left promiscuous mode
[  769.396458][T15272] bond0: left promiscuous mode
[  769.489839][T15265] "syz.2.18016" (15265) uses obsolete ecb(arc4) skcipher
[  769.606684][T15295] netlink: 'syz.2.18024': attribute type 11 has an invalid length.
[  769.687393][T15307] netlink: 'syz.0.18025': attribute type 11 has an invalid length.
[  769.781270][T15301] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  769.800684][ T5674] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.875703][T23706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  769.997507][T15329] macvtap0: entered promiscuous mode
[  770.005907][T15329] vlan0: entered promiscuous mode
[  770.012034][T15329] bond23: entered promiscuous mode
[  770.021283][T15329] vlan0: left promiscuous mode
[  770.028390][T15329] bond23: left promiscuous mode
[  770.324639][T15354] macvtap1: entered promiscuous mode
[  770.326405][T15354] vlan0: entered promiscuous mode
[  770.327982][T15354] bond0: entered promiscuous mode
[  770.335894][T15354] vlan0: left promiscuous mode
[  770.337640][T15354] bond0: left promiscuous mode
[  770.364680][T15356] syzkaller0: entered promiscuous mode
[  770.366682][T15356] syzkaller0: entered allmulticast mode
[  770.582293][T15366] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  770.584747][T15366] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode
[  770.636112][T15368] macvtap0: entered promiscuous mode
[  770.637976][T15368] vlan0: entered promiscuous mode
[  770.640239][T15368] bond23: entered promiscuous mode
[  770.643492][T15368] vlan0: left promiscuous mode
[  770.645454][T15368] bond23: left promiscuous mode
[  771.035922][T15393] macvtap1: entered promiscuous mode
[  771.038055][T15393] vlan0: entered promiscuous mode
[  771.040365][T15393] bond0: entered promiscuous mode
[  771.044053][T15393] vlan0: left promiscuous mode
[  771.046082][T15393] bond0: left promiscuous mode
[  771.234874][T15407] netlink: 'syz.0.18046': attribute type 3 has an invalid length.
[  771.237332][T15407] __nla_validate_parse: 11 callbacks suppressed
[  771.237341][T15407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18046'.
[  771.273502][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18047'.
[  771.981733][T15432] macvtap0: entered promiscuous mode
[  771.983567][T15432] vlan0: entered promiscuous mode
[  771.986521][T15432] vlan0: left promiscuous mode
[  772.751775][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.760915][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.768825][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.777038][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  772.929567][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18059'.
[  772.935152][T15462] netlink: 'syz.1.18059': attribute type 10 has an invalid length.
[  772.946952][T15466] macvtap1: entered promiscuous mode
[  772.955514][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18058'.
[  772.958586][T15466] vlan0: entered promiscuous mode
[  772.966168][T15466] bond0: entered promiscuous mode
[  772.977259][T15466] vlan0: left promiscuous mode
[  772.979015][T15466] bond0: left promiscuous mode
[  773.138200][T15482] bond39: invalid ARP target 0.0.0.0 specified for addition
[  773.140566][T15482] bond39: option arp_ip_target: invalid value (0)
[  773.145061][T15482] bond39 (unregistering): Released all slaves
[  773.159180][T15477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  773.258799][T15487] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  773.278415][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18065'.
[  773.286200][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18065'.
[  773.358504][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18067'.
[  773.514959][T15503] netlink: 'syz.1.18069': attribute type 23 has an invalid length.
[  773.854907][T15512] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  773.857157][T15512] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  773.861857][T15512] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  774.107292][T15529] openvswitch: netlink: Key type 31 is not supported
[  774.201584][T15533] netlink: 'syz.0.18076': attribute type 1 has an invalid length.
[  774.468206][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18080'.
[  774.557538][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18080'.
[  774.765345][T15577] xfrm0 speed is unknown, defaulting to 1000
[  774.797566][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18085'.
[  774.857886][T15582] netlink: 'syz.0.18085': attribute type 3 has an invalid length.
[  774.925366][T15577] lo speed is unknown, defaulting to 1000
[  774.966531][T15584] netlink: 'syz.0.18086': attribute type 1 has an invalid length.
[  775.395981][T15613] syzkaller1: entered promiscuous mode
[  775.409814][T15613] syzkaller1: entered allmulticast mode
[  775.585783][T15624] syzkaller0: entered promiscuous mode
[  775.597858][T15624] syzkaller0: entered allmulticast mode
[  775.683121][T15626] xt_limit: Overflow, try lower: 324382443/0
[  775.974495][T15653] netlink: 'syz.2.18105': attribute type 12 has an invalid length.
[  776.061544][T15657] netlink: 'syz.1.18106': attribute type 23 has an invalid length.
[  776.098888][T15659] macvtap0: entered promiscuous mode
[  776.101487][T15659] vlan0: entered promiscuous mode
[  776.103572][T15659] bond23: entered promiscuous mode
[  776.107284][T15659] vlan0: left promiscuous mode
[  776.110448][T15659] bond23: left promiscuous mode
[  776.175843][T15664] bond39: option arp_interval: invalid value (18446744073709551615)
[  776.179278][T15664] bond39: option arp_interval: allowed values 0 - 2147483647
[  776.183772][T15664] bond39 (unregistering): Released all slaves
[  776.283604][T15675] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  776.290074][T15675] __nla_validate_parse: 2 callbacks suppressed
[  776.290083][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18112'.
[  776.354385][T15680] 8021q: VLANs not supported on gre0
[  776.542403][T15680] bond0: (slave netdevsim1): Releasing backup interface
[  777.217582][T15695] netlink: 'syz.1.18119': attribute type 1 has an invalid length.
[  777.220750][T15695] netlink: 'syz.1.18119': attribute type 1 has an invalid length.
[  777.248821][T15695] bond39: entered promiscuous mode
[  777.252409][T15695] 8021q: adding VLAN 0 to HW filter on device bond39
[  777.264158][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18119'.
[  777.358657][T15712] macvtap0: entered promiscuous mode
[  777.360688][T15712] vlan0: entered promiscuous mode
[  777.364860][T15712] vlan0: left promiscuous mode
[  777.431373][T15716] macvtap1: entered promiscuous mode
[  777.433645][T15716] vlan0: entered promiscuous mode
[  777.435693][T15716] bond0: entered promiscuous mode
[  777.443527][T15716] vlan0: left promiscuous mode
[  777.445618][T15716] bond0: left promiscuous mode
[  777.553655][T15721] netlink: 'syz.0.18126': attribute type 11 has an invalid length.
[  777.672201][T15730] macvtap1: entered promiscuous mode
[  777.674396][T15730] vlan0: entered promiscuous mode
[  777.676167][T15730] bond0: entered promiscuous mode
[  777.681462][T15730] vlan0: left promiscuous mode
[  777.683016][T15730] bond0: left promiscuous mode
[  777.796159][T15733] macvtap0: entered promiscuous mode
[  777.798504][T15733] vlan0: entered promiscuous mode
[  777.803787][T15733] bond23: entered promiscuous mode
[  777.810105][T15733] vlan0: left promiscuous mode
[  777.812195][T15733] bond23: left promiscuous mode
[  778.276114][T15752] macvtap0: entered promiscuous mode
[  778.278421][T15752] vlan0: entered promiscuous mode
[  778.283173][T15752] vlan0: left promiscuous mode
[  778.414000][T15761] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.570419][T15783] macvtap0: entered promiscuous mode
[  778.572790][T15783] vlan0: entered promiscuous mode
[  778.576440][T15783] vlan0: left promiscuous mode
[  779.104146][T15787] netlink: 88 bytes leftover after parsing attributes in process `syz.0.18145'.
[  779.108696][T15787] syzkaller1: entered promiscuous mode
[  779.111799][T15787] syzkaller1: entered allmulticast mode
[  779.226679][T15790] macvtap1: entered promiscuous mode
[  779.228916][T15790] vlan0: entered promiscuous mode
[  779.234137][T15790] bond0: entered promiscuous mode
[  779.238250][T15790] vlan0: left promiscuous mode
[  779.240694][T15790] bond0: left promiscuous mode
[  779.282512][T15794] netlink: 'syz.1.18148': attribute type 11 has an invalid length.
[  779.288230][T15794] netlink: 356 bytes leftover after parsing attributes in process `syz.1.18148'.
[  779.296397][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18148'.
[  779.937471][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18154'.
[  779.942594][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18154'.
[  780.218014][T15825] bond40 (unregistering): Released all slaves
[  780.362344][T15833] netlink: 'syz.1.18159': attribute type 1 has an invalid length.
[  780.364830][T15834] netlink: 'syz.1.18159': attribute type 1 has an invalid length.
[  780.378731][T15833] bond40: option mode: invalid value (8)
[  780.382130][T15833] bond40 (unregistering): Released all slaves
[  780.403168][T15834] bond40: option mode: invalid value (8)
[  780.405939][T15834] bond40 (unregistering): Released all slaves
[  780.417478][T15831] netlink: 'syz.2.18158': attribute type 3 has an invalid length.
[  780.732416][T15851] macvtap0: entered promiscuous mode
[  780.734189][T15851] vlan0: entered promiscuous mode
[  780.735917][T15851] bond23: entered promiscuous mode
[  780.738520][T15851] vlan0: left promiscuous mode
[  780.740718][T15851] bond23: left promiscuous mode
[  780.901483][T15856] IPVS: Error connecting to the multicast addr
[  780.967543][T15868] syzkaller0: entered promiscuous mode
[  780.970088][T15868] syzkaller0: entered allmulticast mode
[  780.973101][   T33] audit: type=1107 audit(1783470908.959:16): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  780.978427][T15861] netlink: 'syz.0.18165': attribute type 23 has an invalid length.
[  782.939662][T15872] macvtap0: entered promiscuous mode
[  782.941451][T15872] vlan0: entered promiscuous mode
[  782.944878][T15872] vlan0: left promiscuous mode
[  783.036323][T15884] macvtap1: entered promiscuous mode
[  783.038429][T15884] vlan0: entered promiscuous mode
[  783.042522][T15884] bond0: entered promiscuous mode
[  783.048379][T15884] vlan0: left promiscuous mode
[  783.050147][T15884] bond0: left promiscuous mode
[  783.627414][T15889] syzkaller0: entered promiscuous mode
[  783.629372][T15889] syzkaller0: entered allmulticast mode
[  783.683475][T15891] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  783.838984][T15898] macvtap0: entered promiscuous mode
[  783.841176][T15898] vlan0: entered promiscuous mode
[  783.844274][T15898] vlan0: left promiscuous mode
[  783.871692][T15900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18175'.
[  783.877643][T15900] netlink: 'syz.2.18175': attribute type 1 has an invalid length.
[  783.988914][T15907] syzkaller0: entered promiscuous mode
[  783.993034][T15907] syzkaller0: entered allmulticast mode
[  784.129770][T15912] macvtap0: entered promiscuous mode
[  784.131570][T15912] vlan0: entered promiscuous mode
[  784.133253][T15912] bond23: entered promiscuous mode
[  784.135976][T15912] vlan0: left promiscuous mode
[  784.137545][T15912] bond23: left promiscuous mode
[  784.213558][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18179'.
[  784.216579][T15917] openvswitch: netlink: Flow key attr not present in new flow.
[  784.225872][T15917] macvtap0: entered promiscuous mode
[  784.227657][T15917] vlan0: entered promiscuous mode
[  784.229602][T15917] bond23: entered promiscuous mode
[  784.232351][T15917] vlan0: left promiscuous mode
[  784.233965][T15917] bond23: left promiscuous mode
[  784.775973][T15941] macvtap0: entered promiscuous mode
[  784.777852][T15941] vlan0: entered promiscuous mode
[  784.781575][T15941] vlan0: left promiscuous mode
[  784.786496][T15943] netlink: 'syz.0.18188': attribute type 11 has an invalid length.
[  784.881323][T15947] macvtap0: entered promiscuous mode
[  784.883059][T15947] vlan0: entered promiscuous mode
[  784.884733][T15947] bond23: entered promiscuous mode
[  784.887485][T15947] vlan0: left promiscuous mode
[  784.889469][T15947] bond23: left promiscuous mode
[  785.438105][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18196'.
[  785.465461][T15971] netlink: 'syz.1.18197': attribute type 11 has an invalid length.
[  785.529463][T15973] macvtap0: entered promiscuous mode
[  785.531653][T15973] vlan0: entered promiscuous mode
[  785.533626][T15973] bond23: entered promiscuous mode
[  785.536728][T15973] vlan0: left promiscuous mode
[  785.538430][T15973] bond23: left promiscuous mode
[  786.358724][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18202'.
[  786.665328][T16021] macvtap0: entered promiscuous mode
[  786.667217][T16021] vlan0: entered promiscuous mode
[  786.672515][T16021] vlan0: left promiscuous mode
[  787.228887][T16063] lo speed is unknown, defaulting to 1000
[  787.233980][T16063] lo speed is unknown, defaulting to 1000
[  787.236126][T16063] lo speed is unknown, defaulting to 1000
[  787.239987][T16063] smbdirect: ib_dev[sy{2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  787.245236][T16063] smbdirect: ib_dev[sy{2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  787.252231][T16063] smbdirect: ib_dev[sy{2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  787.266196][T16063] infiniband sy{2: RDMA CMA: cma_listen_on_dev, error -98
[  787.286525][T16063] lo speed is unknown, defaulting to 1000
[  787.293945][T16063] lo speed is unknown, defaulting to 1000
[  787.304711][T16063] lo speed is unknown, defaulting to 1000
[  787.348600][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18210'.
[  787.477715][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18212'.
[  788.074148][T16076] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  788.282991][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18219'.
[  788.287453][T16090] netlink: 'syz.2.18219': attribute type 5 has an invalid length.
[  788.411230][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18222'.
[  788.419464][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18222'.
[  788.538252][T16103] syzkaller1: entered promiscuous mode
[  788.540704][T16103] syzkaller1: entered allmulticast mode
[  788.635224][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18229'.
[  788.668963][T16130] xt_l2tp: invalid flags combination: 8
[  788.681283][T16130] netlink: 'syz.0.18230': attribute type 1 has an invalid length.
[  788.685079][T16130] gre0: entered promiscuous mode
[  788.686843][T16130] gre0: entered allmulticast mode
[  788.689656][T16130] tipc: Resetting bearer <eth:gre0>
[  788.692516][T16130] tipc: Resetting bearer <eth:gre0>
[  788.698943][T16132] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  788.777776][T16135] netlink: 'syz.0.18233': attribute type 11 has an invalid length.
[  788.876680][T16150] netlink: 'syz.1.18238': attribute type 1 has an invalid length.
[  788.952440][T16161] netlink: 'syz.2.18236': attribute type 23 has an invalid length.
[  789.043251][T16169] __nla_validate_parse: 1 callbacks suppressed
[  789.043261][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18244'.
[  789.063841][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18242'.
[  789.064239][T16163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18242'.
[  789.144561][T16177] netlink: 'syz.0.18246': attribute type 12 has an invalid length.
[  789.237889][T16182] macvtap1: entered promiscuous mode
[  789.239781][T16182] vlan0: entered promiscuous mode
[  789.241642][T16182] bond0: entered promiscuous mode
[  789.245971][T16182] vlan0: left promiscuous mode
[  789.247708][T16182] bond0: left promiscuous mode
[  789.807168][T16191] vlan5: entered promiscuous mode
[  789.975812][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18256'.
[  790.128625][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18263'.
[  790.231478][T16225] netlink: 112 bytes leftover after parsing attributes in process `syz.1.18264'.
[  790.261769][T16223] netlink: 'syz.1.18264': attribute type 1 has an invalid length.
[  790.379651][T16245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18268'.
[  791.096665][T16326] syzkaller0: entered promiscuous mode
[  791.109460][T16326] syzkaller0: entered allmulticast mode
[  791.116505][T16326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.121999][T16326] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  791.127559][T16326] tipc: Resetting bearer <eth:syzkaller0>
[  791.133713][T16325] tipc: Resetting bearer <eth:syzkaller0>
[  791.152178][T16325] tipc: Disabling bearer <eth:syzkaller0>
[  791.550499][T16361] nbd1: detected capacity change from 0 to 63
[  791.552793][T16362] block nbd2: NBD_DISCONNECT
[  791.555119][T16362] block nbd2: shutting down sockets
[  791.630910][   T56] block nbd1: Receive control failed (result -104)
[  792.103972][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18323'.
[  792.997110][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18335'.
[  793.001862][T16421] netlink: 'syz.2.18335': attribute type 1 has an invalid length.
[  793.004544][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18335'.
[  793.287752][T16438] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[  793.290312][T16438] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[  793.452281][T16451] 8021q: VLANs not supported on gre0
[  793.454212][T16451] 8021q: VLANs not supported on gre0
[  793.456565][T16451] 8021q: VLANs not supported on gre0
[  793.458560][T16451] 8021q: VLANs not supported on gre0
[  793.462977][T16451] 8021q: VLANs not supported on gre0
[  793.464885][T16451] 8021q: VLANs not supported on gre0
[  793.603905][T16470] macvtap0: entered promiscuous mode
[  793.607001][T16470] vlan0: entered promiscuous mode
[  793.611169][T16470] vlan0: left promiscuous mode
[  794.006869][T16506] netlink: 'syz.0.18365': attribute type 1 has an invalid length.
[  794.023821][T16506] 8021q: adding VLAN 0 to HW filter on device bond24
[  794.030467][T16506] netlink: 'syz.0.18365': attribute type 10 has an invalid length.
[  794.085010][T16511] xfrm0 speed is unknown, defaulting to 1000
[  794.177814][T16511] lo speed is unknown, defaulting to 1000
[  794.291575][T16511] lo speed is unknown, defaulting to 1000
[  794.360401][T16524] __nla_validate_parse: 4 callbacks suppressed
[  794.360411][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18372'.
[  794.390620][T16524] xt_l2tp: invalid flags combination: 8
[  794.671726][T16540] netlink: 204 bytes leftover after parsing attributes in process `syz.0.18377'.
[  794.705095][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18378'.
[  794.744458][T16544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18379'.
[  794.902441][T16562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18386'.
[  794.905809][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18386'.
[  794.955134][T16566] netlink: 'syz.2.18388': attribute type 1 has an invalid length.
[  794.970386][T16566] 8021q: adding VLAN 0 to HW filter on device bond38
[  794.979533][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18388'.
[  794.983551][T16566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18388'.
[  795.046711][T16566] syzkaller0: entered promiscuous mode
[  795.048475][T16566] syzkaller0: entered allmulticast mode
[  796.644661][T16576] macvtap0: entered promiscuous mode
[  796.647008][T16576] vlan0: entered promiscuous mode
[  796.651844][T16576] vlan0: left promiscuous mode
[  796.811112][T16592] netlink: 'syz.1.18396': attribute type 21 has an invalid length.
[  796.813728][T16592] IPv6: NLM_F_CREATE should be specified when creating new route
[  796.816882][T16592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  796.819174][T16592] IPv6: NLM_F_CREATE should be set when creating new route
[  796.821890][T16592] IPv6: NLM_F_CREATE should be set when creating new route
[  796.824251][T16592] IPv6: NLM_F_CREATE should be set when creating new route
[  796.927813][T16601] macvtap0: entered promiscuous mode
[  796.930343][T16601] vlan0: entered promiscuous mode
[  796.934355][T16601] vlan0: left promiscuous mode
[  797.634341][T16617] macvtap0: entered promiscuous mode
[  797.636219][T16617] vlan0: entered promiscuous mode
[  797.637939][T16617] bond23: entered promiscuous mode
[  797.646119][T16617] vlan0: left promiscuous mode
[  797.648176][T16617] bond23: left promiscuous mode
[  797.648492][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18403'.
[  798.049400][T16650] macvtap0: entered promiscuous mode
[  798.051147][T16650] vlan0: entered promiscuous mode
[  798.054130][T16650] vlan0: left promiscuous mode
[  798.336074][T16663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18418'.
[  798.499783][T16674] tipc: Resetting bearer <eth:gre0>
[  798.617521][T16678] netlink: 'syz.0.18424': attribute type 11 has an invalid length.
[  798.645634][T16682] macvtap0: entered promiscuous mode
[  798.647745][T16682] vlan0: entered promiscuous mode
[  798.649720][T16682] bond23: entered promiscuous mode
[  798.652723][T16682] vlan0: left promiscuous mode
[  798.654423][T16682] bond23: left promiscuous mode
[  799.844367][T16726] __nla_validate_parse: 1 callbacks suppressed
[  799.844378][T16726] netlink: 276 bytes leftover after parsing attributes in process `syz.0.18440'.
[  801.496431][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18450'.
[  801.533712][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18452'.
[  801.918455][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18455'.
[  801.974608][T16784] netlink: 'syz.1.18457': attribute type 12 has an invalid length.
[  802.439969][T16804] macvtap0: entered promiscuous mode
[  802.441828][T16804] vlan0: entered promiscuous mode
[  802.443555][T16804] bond23: entered promiscuous mode
[  803.106953][T16804] vlan0: left promiscuous mode
[  803.110340][T16804] bond23: left promiscuous mode
[  803.137654][T16811] sctp: [Deprecated]: syz.1.18466 (pid 16811) Use of int in max_burst socket option.
[  803.137654][T16811] Use struct sctp_assoc_value instead
[  803.215013][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18467'.
[  803.217993][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18467'.
[  803.331649][T16826] netlink: 'syz.0.18471': attribute type 63 has an invalid length.
[  803.377157][T16830] macvtap1: entered promiscuous mode
[  803.378911][T16830] vlan0: entered promiscuous mode
[  803.382874][T16830] bond0: entered promiscuous mode
[  803.386215][T16830] vlan0: left promiscuous mode
[  803.387963][T16830] bond0: left promiscuous mode
[  803.439307][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18472'.
[  803.545813][T16839] macvtap0: entered promiscuous mode
[  803.547673][T16839] vlan0: entered promiscuous mode
[  803.551580][T16839] vlan0: left promiscuous mode
[  803.732109][T16844] netlink: 'syz.2.18477': attribute type 11 has an invalid length.
[  803.779589][T16847] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  804.226574][T16868] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  804.245522][T16869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18485'.
[  804.262210][T16873] netlink: 'syz.1.18486': attribute type 29 has an invalid length.
[  804.266190][T16873] netlink: 'syz.1.18486': attribute type 29 has an invalid length.
[  804.405594][T16891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18491'.
[  804.448345][T16898] netlink: 1452 bytes leftover after parsing attributes in process `syz.2.18493'.
[  804.583140][T16909] openvswitch: netlink: Actions may not be safe on all matching packets
[  804.586180][T16908] syzkaller1: entered promiscuous mode
[  804.588616][T16908] syzkaller1: entered allmulticast mode
[  804.636380][T16908] netlink: 'syz.2.18495': attribute type 12 has an invalid length.
[  804.736180][T16918] macvtap0: entered promiscuous mode
[  804.737996][T16918] vlan0: entered promiscuous mode
[  804.740201][T16918] bond23: entered promiscuous mode
[  804.743722][T16918] vlan0: left promiscuous mode
[  804.745704][T16918] bond23: left promiscuous mode
[  804.791918][T16920] netlink: 'syz.0.18500': attribute type 3 has an invalid length.
[  804.794736][T16920] netlink: 'syz.0.18500': attribute type 2 has an invalid length.
[  804.801933][T16920] netlink: 'syz.0.18500': attribute type 2 has an invalid length.
[  804.888751][T16926] netlink: 'syz.0.18502': attribute type 30 has an invalid length.
[  804.894400][T16926] __nla_validate_parse: 6 callbacks suppressed
[  804.894417][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18502'.
[  804.917331][T16926] bond25: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  804.923007][T16926] bond25 (unregistering): Released all slaves
[  804.982230][T16932] xfrm0 speed is unknown, defaulting to 1000
[  805.110481][T16932] lo speed is unknown, defaulting to 1000
[  805.185356][T16943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18506'.
[  805.192516][T16943] ip6gre4: entered promiscuous mode
[  805.194296][T16943] ip6gre4: entered allmulticast mode
[  805.201560][T16932] lo speed is unknown, defaulting to 1000
[  805.255963][T16950] netlink: 'syz.0.18508': attribute type 15 has an invalid length.
[  805.402563][T16953] nftables ruleset with unbound set
[  805.596645][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18513'.
[  805.600682][T16961] xt_TCPMSS: Only works on TCP SYN packets
[  805.984792][T16976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18517'.
[  805.989216][T16976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18517'.
[  806.010533][T16976] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  806.031138][T16970] tun0: tun_chr_ioctl cmd 1074025680
[  806.043670][T16971] tun0: tun_chr_ioctl cmd 1074025680
[  806.463452][T17008] netlink: 404 bytes leftover after parsing attributes in process `syz.2.18524'.
[  806.474879][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18524'.
[  806.481608][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18524'.
[  806.485254][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18524'.
[  807.257724][T17032] macvtap1: entered promiscuous mode
[  807.261453][T17032] vlan0: entered promiscuous mode
[  807.263183][T17032] bond0: entered promiscuous mode
[  807.266995][T17032] vlan0: left promiscuous mode
[  807.268902][T17032] bond0: left promiscuous mode
[  807.462143][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18536'.
[  807.467002][T17046] netlink: 'syz.1.18536': attribute type 10 has an invalid length.
[  807.645769][T17057] pim6reg0: tun_chr_ioctl cmd 1074812118
[  807.651235][T17057] 8021q: VLANs not supported on gre0
[  807.713811][T17065] macvtap0: entered promiscuous mode
[  807.717190][T17065] vlan0: entered promiscuous mode
[  807.718961][T17065] bond23: entered promiscuous mode
[  807.726065][T17065] vlan0: left promiscuous mode
[  807.727636][T17065] bond23: left promiscuous mode
[  807.772638][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.774785][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.776812][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.778706][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.781637][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.785079][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.787058][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.789005][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.791051][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.793002][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.794861][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.796829][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.798743][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.801113][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.803071][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.804932][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.806791][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.808680][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.810610][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.814160][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.819621][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.824781][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.828741][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.830990][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.832946][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.834905][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.836923][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.838986][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.841111][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.843088][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.845080][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.850953][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.856330][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.861901][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.864254][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.873950][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.880187][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.882759][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.884811][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.886863][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.888909][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.892482][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.894656][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.897039][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.899605][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.901851][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.904046][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.907302][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.910628][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.912975][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.915189][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.917526][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.921196][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.923351][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.925558][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.927703][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.930347][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.932694][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.934788][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.938005][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.940673][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.942705][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.944818][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.947005][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  807.949788][T17064] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  808.061826][T17091] netlink: 'syz.0.18547': attribute type 4 has an invalid length.
[  808.066738][T17091] netlink: 'syz.0.18547': attribute type 21 has an invalid length.
[  808.069518][T17091] netlink: 'syz.0.18547': attribute type 5 has an invalid length.
[  808.071978][T17091] netlink: 'syz.0.18547': attribute type 6 has an invalid length.
[  808.310255][T17120] macvtap1: entered promiscuous mode
[  808.312066][T17120] vlan0: entered promiscuous mode
[  808.313861][T17120] bond0: entered promiscuous mode
[  808.317223][T17120] vlan0: left promiscuous mode
[  808.318810][T17120] bond0: left promiscuous mode
[  808.385676][T17127] macvtap0: entered promiscuous mode
[  808.387561][T17127] vlan0: entered promiscuous mode
[  808.389515][T17127] bond23: entered promiscuous mode
[  808.393048][T17127] vlan0: left promiscuous mode
[  808.395407][T17127] bond23: left promiscuous mode
[  809.157165][T17151] openvswitch: netlink: Key type 309 is out of range max 32
[  809.492493][T17163] xt_hashlimit: size too large, truncated to 1048576
[  809.515408][T17165] syzkaller0: entered promiscuous mode
[  809.517167][T17165] syzkaller0: entered allmulticast mode
[  809.524870][T17165] netlink: 'syz.2.18566': attribute type 29 has an invalid length.
[  809.527756][T17165] netlink: 'syz.2.18566': attribute type 29 has an invalid length.
[  809.532132][T17165] netlink: 'syz.2.18566': attribute type 1 has an invalid length.
[  809.548409][T17167] netlink: 'syz.0.18564': attribute type 8 has an invalid length.
[  810.213132][T17191] netlink: 'syz.1.18574': attribute type 83 has an invalid length.
[  810.241860][T17191] __nla_validate_parse: 8 callbacks suppressed
[  810.241872][T17191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18574'.
[  810.490871][T17212] macvtap0: entered promiscuous mode
[  810.492665][T17212] vlan0: entered promiscuous mode
[  810.496765][T17212] vlan0: left promiscuous mode
[  810.645924][T17223] xfrm0 speed is unknown, defaulting to 1000
[  810.763692][T17223] lo speed is unknown, defaulting to 1000
[  810.917476][T17223] lo speed is unknown, defaulting to 1000
[  811.169402][T17235] netlink: 'syz.1.18590': attribute type 11 has an invalid length.
[  811.273581][T17239] macvtap0: entered promiscuous mode
[  811.275612][T17239] vlan0: entered promiscuous mode
[  811.286503][T17239] vlan0: left promiscuous mode
[  811.483147][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18594'.
[  811.583228][   T33] audit: type=1804 audit(1783470939.569:17): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18597" name="/newroot/5623/cgroup.controllers" dev="tmpfs" ino=28426 res=1 errno=0
[  811.591150][   T33] audit: type=1800 audit(1783470939.569:18): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18597" name="cgroup.controllers" dev="tmpfs" ino=28426 res=0 errno=0
[  811.825429][T17276] netlink: 180 bytes leftover after parsing attributes in process `syz.0.18605'.
[  811.888976][T17283] IPv6: sit5: Disabled Multicast RS
[  811.936190][T17289] netlink: 'syz.1.18608': attribute type 11 has an invalid length.
[  811.953125][T17292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18609'.
[  812.207299][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18621'.
[  812.229024][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18622'.
[  812.392724][T17355] macvtap0: entered promiscuous mode
[  812.394641][T17355] vlan0: entered promiscuous mode
[  812.407732][T17355] vlan0: left promiscuous mode
[  812.451427][T17362] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  812.453996][T17361] netlink: 'syz.2.18634': attribute type 11 has an invalid length.
[  812.597745][T17383] macvtap0: entered promiscuous mode
[  812.599991][T17383] vlan0: entered promiscuous mode
[  812.601776][T17383] bond23: entered promiscuous mode
[  812.604764][T17383] vlan0: left promiscuous mode
[  812.606783][T17383] bond23: left promiscuous mode
[  812.812046][T17396] macvtap1: entered promiscuous mode
[  812.814101][T17396] vlan0: entered promiscuous mode
[  812.815973][T17396] bond0: entered promiscuous mode
[  812.821694][T17396] vlan0: left promiscuous mode
[  812.823795][T17396] bond0: left promiscuous mode
[  813.315687][T17414] xfrm0 speed is unknown, defaulting to 1000
[  813.363370][T17415] dvmrp0: entered allmulticast mode
[  813.402540][T17414] lo speed is unknown, defaulting to 1000
[  813.488872][T17414] lo speed is unknown, defaulting to 1000
[  813.800543][ T1379] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  814.001187][T17424] syzkaller0: entered promiscuous mode
[  814.002869][T17424] syzkaller0: entered allmulticast mode
[  814.006607][T17424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  814.011612][T17424] tipc: Resetting bearer <eth:syzkaller0>
[  814.015219][T17423] tipc: Resetting bearer <eth:syzkaller0>
[  814.033333][T17423] tipc: Disabling bearer <eth:syzkaller0>
[  814.418893][T17435] xfrm0 speed is unknown, defaulting to 1000
[  814.637921][T17446] validate_nla: 1 callbacks suppressed
[  814.637936][T17446] netlink: 'syz.1.18660': attribute type 23 has an invalid length.
[  814.753345][T17435] lo speed is unknown, defaulting to 1000
[  814.828944][T17435] lo speed is unknown, defaulting to 1000
[  815.672646][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18670'.
[  815.870388][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18675'.
[  815.931903][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18677'.
[  815.931971][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18677'.
[  815.936229][T17498] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18677'.
[  815.937423][T17503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18678'.
[  815.940819][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18677'.
[  815.952771][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18678'.
[  816.456233][T17526] can: request_module (can-proto-0) failed.
[  816.627600][T17542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18691'.
[  816.882126][T17560] netlink: 'syz.2.18696': attribute type 1 has an invalid length.
[  816.956460][T17560] workqueue: Failed to create a rescuer kthread for wq "bond39": -EINTR
[  817.321006][T17580] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode
[  817.326383][T17580] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode
[  817.328862][T17580] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  817.648076][T17588] macvtap0: entered promiscuous mode
[  817.650012][T17588] vlan0: entered promiscuous mode
[  817.654196][T17588] vlan0: left promiscuous mode
[  817.975674][T17611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18711'.
[  818.207138][T17626] 
[  818.207948][T17626] ======================================================
[  818.210085][T17626] WARNING: possible circular locking dependency detected
[  818.212245][T17626] syzkaller #0 Not tainted
[  818.213798][T17626] ------------------------------------------------------
[  818.216063][T17626] syz.0.18715/17626 is trying to acquire lock:
[  818.217982][T17626] ffff88816e95de18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[  818.220775][T17626] 
[  818.220775][T17626] but task is already holding lock:
[  818.223058][T17626] ffff8881bb6f62a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  818.226197][T17626] 
[  818.226197][T17626] which lock already depends on the new lock.
[  818.226197][T17626] 
[  818.229464][T17626] 
[  818.229464][T17626] the existing dependency chain (in reverse order) is:
[  818.232313][T17626] 
[  818.232313][T17626] -> #7 (&q->elevator_lock){+.+.}-{4:4}:
[  818.234782][T17626]        __mutex_lock+0x19d/0x1550
[  818.236500][T17626]        elevator_change+0x1af/0x480
[  818.238152][T17626]        elevator_set_none+0xb5/0x140
[  818.239936][T17626]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  818.241860][T17626]        nbd_start_device+0x189/0xb30
[  818.243548][T17626]        nbd_genl_connect+0x1597/0x1c10
[  818.245374][T17626]        genl_family_rcv_msg_doit+0x233/0x340
[  818.247312][T17626]        genl_rcv_msg+0x614/0x7a0
[  818.248923][T17626]        netlink_rcv_skb+0x226/0x4a0
[  818.249793][T17628] netlink: 'syz.0.18715': attribute type 3 has an invalid length.
[  818.250602][T17626]        genl_rcv+0x28/0x40
[  818.250612][T17626]        netlink_unicast+0x7bb/0x940
[  818.250622][T17626]        netlink_sendmsg+0x813/0xb40
[  818.250632][T17626]        sock_sendmsg_nosec+0x13a/0x180
[  818.250639][T17626]        ____sys_sendmsg+0x54e/0x850
[  818.250649][T17626]        ___sys_sendmsg+0x2a5/0x360
[  818.263092][T17626]        __x64_sys_sendmsg+0x1b1/0x290
[  818.264860][T17626]        do_syscall_64+0x174/0x580
[  818.266517][T17626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.268491][T17626] 
[  818.268491][T17626] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}:
[  818.271013][T17626]        blk_alloc_queue+0x544/0x690
[  818.272699][T17626]        __blk_mq_alloc_disk+0x194/0x390
[  818.274484][T17626]        nbd_dev_add+0x494/0xb60
[  818.275948][T17626]        nbd_init+0x15f/0x1e0
[  818.277421][T17626]        do_one_initcall+0x250/0x870
[  818.279219][T17626]        do_initcall_level+0x10a/0x1a0
[  818.281077][T17626]        do_initcalls+0x59/0xa0
[  818.282610][T17626]        kernel_init_freeable+0x29d/0x3e0
[  818.284524][T17626]        kernel_init+0x1d/0x1d0
[  818.286246][T17626]        ret_from_fork+0x514/0xb70
[  818.287847][T17626]        ret_from_fork_asm+0x1a/0x30
[  818.289481][T17626] 
[  818.289481][T17626] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  818.291771][T17626]        fs_reclaim_acquire+0x71/0x100
[  818.293449][T17626]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  818.295375][T17626]        __alloc_skb+0x1d7/0x7a0
[  818.296950][T17626]        __ip6_append_data+0x2ec4/0x40c0
[  818.298724][T17626]        ip6_append_data+0x108/0x270
[  818.300393][T17626]        rawv6_sendmsg+0x1298/0x18c0
[  818.302041][T17626]        sock_sendmsg_nosec+0x10e/0x180
[  818.303751][T17626]        ____sys_sendmsg+0x54e/0x850
[  818.305371][T17626]        ___sys_sendmsg+0x2a5/0x360
[  818.307168][T17626]        __x64_sys_sendmsg+0x1b1/0x290
[  818.309288][T17626]        do_syscall_64+0x174/0x580
[  818.310966][T17626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.313456][T17626] 
[  818.313456][T17626] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  818.315850][T17626]        lock_sock_nested+0x41/0x100
[  818.317478][T17626]        tls_sw_sendmsg+0x161/0x2860
[  818.319102][T17626]        sock_sendmsg_nosec+0x90/0x180
[  818.320785][T17626]        __sys_sendto+0x408/0x5a0
[  818.322372][T17626]        __x64_sys_sendto+0xde/0x100
[  818.323992][T17626]        do_syscall_64+0x174/0x580
[  818.325598][T17626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.327609][T17626] 
[  818.327609][T17626] -> #3 (&ctx->tx_lock){+.+.}-{4:4}:
[  818.330204][T17626]        __mutex_lock+0x19d/0x1550
[  818.331897][T17626]        tls_sw_sendmsg+0x13c/0x2860
[  818.333481][T17626]        sock_sendmsg_nosec+0x90/0x180
[  818.335059][T17626]        sock_sendmsg+0x1ca/0x2d0
[  818.336558][T17626]        __sock_xmit+0x245/0x4f0
[  818.338070][T17626]        nbd_disconnect+0x3ad/0x560
[  818.339775][T17626]        nbd_disconnect_and_put+0x32/0x280
[  818.341549][T17626]        nbd_genl_disconnect+0x4af/0x590
[  818.343198][T17626]        genl_family_rcv_msg_doit+0x233/0x340
[  818.345066][T17626]        genl_rcv_msg+0x614/0x7a0
[  818.346666][T17626]        netlink_rcv_skb+0x226/0x4a0
[  818.348483][T17626]        genl_rcv+0x28/0x40
[  818.349938][T17626]        netlink_unicast+0x7bb/0x940
[  818.351678][T17626]        netlink_sendmsg+0x813/0xb40
[  818.353360][T17626]        sock_sendmsg_nosec+0x13a/0x180
[  818.355098][T17626]        ____sys_sendmsg+0x54e/0x850
[  818.356887][T17626]        ___sys_sendmsg+0x2a5/0x360
[  818.358756][T17626]        __x64_sys_sendmsg+0x1b1/0x290
[  818.360662][T17626]        do_syscall_64+0x174/0x580
[  818.362429][T17626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.364477][T17626] 
[  818.364477][T17626] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  818.366914][T17626]        __mutex_lock+0x19d/0x1550
[  818.368549][T17626]        nbd_queue_rq+0x373/0x1150
[  818.370212][T17626]        blk_mq_dispatch_rq_list+0x499/0x1990
[  818.372173][T17626]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  818.374337][T17626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  818.376405][T17626]        blk_mq_run_work_fn+0x16c/0x300
[  818.378087][T17626]        process_scheduled_works+0xa8e/0x14e0
[  818.380001][T17626]        worker_thread+0xa47/0xfb0
[  818.381680][T17626]        kthread+0x388/0x470
[  818.383149][T17626]        ret_from_fork+0x514/0xb70
[  818.384783][T17626]        ret_from_fork_asm+0x1a/0x30
[  818.386508][T17626] 
[  818.386508][T17626] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  818.388793][T17626]        __mutex_lock+0x19d/0x1550
[  818.390358][T17626]        nbd_queue_rq+0xc1/0x1150
[  818.391969][T17626]        blk_mq_dispatch_rq_list+0x499/0x1990
[  818.393843][T17626]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  818.395968][T17626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  818.398067][T17626]        blk_mq_run_work_fn+0x16c/0x300
[  818.400035][T17626]        process_scheduled_works+0xa8e/0x14e0
[  818.402157][T17626]        worker_thread+0xa47/0xfb0
[  818.403965][T17626]        kthread+0x388/0x470
[  818.405421][T17626]        ret_from_fork+0x514/0xb70
[  818.407006][T17626]        ret_from_fork_asm+0x1a/0x30
[  818.408619][T17626] 
[  818.408619][T17626] -> #0 (set->srcu){.+.+}-{0:0}:
[  818.410833][T17626]        __lock_acquire+0x1520/0x2cf0
[  818.412541][T17626]        lock_sync+0x9d/0x120
[  818.414368][T17626]        __synchronize_srcu+0xc9/0x2f0
[  818.416433][T17626]        elevator_switch+0x1e8/0x7b0
[  818.418489][T17626]        elevator_change+0x2fa/0x480
[  818.420522][T17626]        elevator_set_default+0x375/0x440
[  818.422622][T17626]        blk_register_queue+0x3f3/0x4e0
[  818.424360][T17626]        __add_disk+0x6cb/0xe30
[  818.425872][T17626]        add_disk_fwnode+0xfb/0x4b0
[  818.427471][T17626]        nbd_dev_add+0x733/0xb60
[  818.428979][T17626]        nbd_genl_connect+0x992/0x1c10
[  818.430629][T17626]        genl_family_rcv_msg_doit+0x233/0x340
[  818.432498][T17626]        genl_rcv_msg+0x614/0x7a0
[  818.434033][T17626]        netlink_rcv_skb+0x226/0x4a0
[  818.435654][T17626]        genl_rcv+0x28/0x40
[  818.437057][T17626]        netlink_unicast+0x7bb/0x940
[  818.438787][T17626]        netlink_sendmsg+0x813/0xb40
[  818.440530][T17626]        sock_sendmsg_nosec+0x13a/0x180
[  818.442226][T17626]        ____sys_sendmsg+0x54e/0x850
[  818.443859][T17626]        ___sys_sendmsg+0x2a5/0x360
[  818.445465][T17626]        __x64_sys_sendmsg+0x1b1/0x290
[  818.447133][T17626]        do_syscall_64+0x174/0x580
[  818.448689][T17626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.450654][T17626] 
[  818.450654][T17626] other info that might help us debug this:
[  818.450654][T17626] 
[  818.453725][T17626] Chain exists of:
[  818.453725][T17626]   set->srcu --> &q->q_usage_counter(io)#55 --> &q->elevator_lock
[  818.453725][T17626] 
[  818.458139][T17626]  Possible unsafe locking scenario:
[  818.458139][T17626] 
[  818.461000][T17626]        CPU0                    CPU1
[  818.463061][T17626]        ----                    ----
[  818.465064][T17626]   lock(&q->elevator_lock);
[  818.466875][T17626]                                lock(&q->q_usage_counter(io)#55);
[  818.470034][T17626]                                lock(&q->elevator_lock);
[  818.472684][T17626]   sync(set->srcu);
[  818.473918][T17626] 
[  818.473918][T17626]  *** DEADLOCK ***
[  818.473918][T17626] 
[  818.476376][T17626] 6 locks held by syz.0.18715/17626:
[  818.477985][T17626]  #0: ffffffff8fe5da28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  818.480490][T17626]  #1: ffffffff8fe5d860 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  818.483453][T17626]  #2: ffff888197daa1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0
[  818.486789][T17626]  #3: ffff8881bb6f6330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[  818.490094][T17626]  #4: ffff8881bb6f5db8 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  818.493801][T17626]  #5: ffff8881bb6f62a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  818.496813][T17626] 
[  818.496813][T17626] stack backtrace:
[  818.498772][T17626] CPU: 1 UID: 0 PID: 17626 Comm: syz.0.18715 Not tainted syzkaller #0 PREEMPT(full) 
[  818.498783][T17626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  818.498788][T17626] Call Trace:
[  818.498794][T17626]  <TASK>
[  818.498798][T17626]  dump_stack_lvl+0xe8/0x150
[  818.498810][T17626]  print_circular_bug+0x2e1/0x300
[  818.498821][T17626]  check_noncircular+0x12e/0x150
[  818.498832][T17626]  __lock_acquire+0x1520/0x2cf0
[  818.498840][T17626]  ? check_noncircular+0xda/0x150
[  818.498851][T17626]  ? lockdep_unlock+0x5d/0xd0
[  818.498857][T17626]  ? __lock_acquire+0x13e8/0x2cf0
[  818.498866][T17626]  ? __lock_acquire+0x13e8/0x2cf0
[  818.498874][T17626]  ? __synchronize_srcu+0xb5/0x2f0
[  818.498881][T17626]  lock_sync+0x9d/0x120
[  818.498889][T17626]  ? __synchronize_srcu+0xb5/0x2f0
[  818.498898][T17626]  __synchronize_srcu+0xc9/0x2f0
[  818.498906][T17626]  ? __pfx___synchronize_srcu+0x10/0x10
[  818.498913][T17626]  ? do_raw_spin_lock+0x12b/0x2f0
[  818.498923][T17626]  ? kvm_clock_get_cycles+0x47/0x60
[  818.498930][T17626]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  818.498942][T17626]  ? synchronize_srcu+0x20a/0x260
[  818.498949][T17626]  elevator_switch+0x1e8/0x7b0
[  818.498957][T17626]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  818.498966][T17626]  elevator_change+0x2fa/0x480
[  818.498974][T17626]  ? do_raw_spin_unlock+0x4d/0x210
[  818.498984][T17626]  elevator_set_default+0x375/0x440
[  818.498992][T17626]  ? __pfx_elevator_set_default+0x10/0x10
[  818.499001][T17626]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  818.499009][T17626]  ? blk_crypto_sysfs_register+0x11c/0x170
[  818.499018][T17626]  blk_register_queue+0x3f3/0x4e0
[  818.499028][T17626]  __add_disk+0x6cb/0xe30
[  818.499039][T17626]  add_disk_fwnode+0xfb/0x4b0
[  818.499049][T17626]  nbd_dev_add+0x733/0xb60
[  818.499060][T17626]  ? __pfx_nbd_dev_add+0x10/0x10
[  818.499072][T17626]  ? bpf_lsm_capable+0x9/0x20
[  818.499079][T17626]  ? security_capable+0x7e/0x2c0
[  818.499089][T17626]  ? radix_tree_lookup+0x25c/0x290
[  818.499098][T17626]  nbd_genl_connect+0x992/0x1c10
[  818.499108][T17626]  ? __pfx_nbd_genl_connect+0x10/0x10
[  818.499118][T17626]  ? rcu_is_watching+0x15/0xb0
[  818.499126][T17626]  ? trace_kmalloc+0x2a/0xf0
[  818.499137][T17626]  ? __kmalloc_noprof+0x396/0x720
[  818.499148][T17626]  ? __nla_parse+0x40/0x60
[  818.499156][T17626]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  818.499165][T17626]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  818.499173][T17626]  genl_family_rcv_msg_doit+0x233/0x340
[  818.499182][T17626]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  818.499191][T17626]  ? __lock_acquire+0x683/0x2cf0
[  818.499200][T17626]  genl_rcv_msg+0x614/0x7a0
[  818.499208][T17626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  818.499214][T17626]  ? __pfx_nbd_genl_connect+0x10/0x10
[  818.499225][T17626]  netlink_rcv_skb+0x226/0x4a0
[  818.499236][T17626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  818.499246][T17626]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  818.499258][T17626]  ? down_read+0x2be/0x330
[  818.499297][T17626]  genl_rcv+0x28/0x40
[  818.499309][T17626]  netlink_unicast+0x7bb/0x940
[  818.499327][T17626]  netlink_sendmsg+0x813/0xb40
[  818.499342][T17626]  ? __pfx_netlink_sendmsg+0x10/0x10
[  818.499352][T17626]  ? aa_sock_msg_perm+0xf1/0x1b0
[  818.499364][T17626]  ? __pfx_netlink_sendmsg+0x10/0x10
[  818.499374][T17626]  sock_sendmsg_nosec+0x13a/0x180
[  818.499382][T17626]  ____sys_sendmsg+0x54e/0x850
[  818.499394][T17626]  ? __pfx_____sys_sendmsg+0x10/0x10
[  818.499405][T17626]  ? import_iovec+0x73/0xa0
[  818.499415][T17626]  ___sys_sendmsg+0x2a5/0x360
[  818.499424][T17626]  ? __lock_acquire+0x683/0x2cf0
[  818.499431][T17626]  ? __pfx____sys_sendmsg+0x10/0x10
[  818.499441][T17626]  ? futex_wait+0x2a2/0x390
[  818.499455][T17626]  ? __fget_files+0x2a/0x420
[  818.499462][T17626]  ? __fget_files+0x3a2/0x420
[  818.499470][T17626]  __x64_sys_sendmsg+0x1b1/0x290
[  818.499480][T17626]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  818.499492][T17626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.499499][T17626]  do_syscall_64+0x174/0x580
[  818.499509][T17626]  ? trace_irq_disable+0x3b/0x140
[  818.499516][T17626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.499523][T17626] RIP: 0033:0x7f1c5dd9ce59
[  818.499530][T17626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.499537][T17626] RSP: 002b:00007f1c5ec45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  818.499545][T17626] RAX: ffffffffffffffda RBX: 00007f1c5e015fa0 RCX: 00007f1c5dd9ce59
[  818.499551][T17626] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009
[  818.499556][T17626] RBP: 00007f1c5de32e6f R08: 0000000000000000 R09: 0000000000000000
[  818.499560][T17626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.499565][T17626] R13: 00007f1c5e016038 R14: 00007f1c5e015fa0 R15: 00007ffe5ebeaaa8
[  818.499573][T17626]  </TASK>
[  822.129462][   T52] block nbd1: Possible stuck request ffff888012ab2600: control (read@0,1024B). Runtime 30 seconds
[  822.133988][   T52] block nbd1: Possible stuck request ffff888012ab2800: control (read@1024,1024B). Runtime 30 seconds
[  822.138480][   T52] block nbd1: Possible stuck request ffff888012ab2a00: control (read@2048,2048B). Runtime 30 seconds
