last executing test programs:

2m20.821039117s ago: executing program 0 (id=806):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1000b, 0x0, 0x0, 0x41000, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket(0x2, 0x80805, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10)
socket$inet_sctp(0x2, 0x0, 0x84)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
unshare(0x2040400)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="280000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="bc5cacde14d2350eb100bb5681e636603a1cd9e416aa49d15adb3363ec975087585aa42ae4e68d3149fd17cf170260c1918c321b04754d29d33209541ed9c508474a5bedfba44527fb4a2041602a922f8a68bd3c3e785b87d97e7d3fe41297417e5040c373464da4cd4b969fd838e95224317b81e463ef20f7c4112f2b4e7bf6f4190b9203f24d3976fadd374626b1"], 0x28}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)

2m20.512218612s ago: executing program 0 (id=812):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000380)="c3110182bc807d2d7eb10d00f9adf19d63a52a58778b9ec401e383b495c4740e5ef611a6ab03820ade81e32ae2bbe4d4f872aeaecd4fe74247a6d4c3325ee22ce958d6"}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m20.432656524s ago: executing program 0 (id=813):
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000006b40)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006b00)={&(0x7f0000006a80)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8054}, 0x24004850)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000041}, 0x4000040)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000580)="240000001e005f031400ff01006000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x4c015)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))

2m20.363252855s ago: executing program 0 (id=815):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000007ffffffe0000040900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80)

2m20.262499965s ago: executing program 0 (id=819):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x1000, 0x0, 0x1c, {[@mptcp=@syn={0x1e, 0x6, 0x4, 0x1, 0x24, 0x1, 0x4}]}}}}}}, 0x42)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x29b}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x2}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40010162, 0x0)

2m20.146615258s ago: executing program 0 (id=823):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0xa0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
write(r6, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x0, 0x3ec0) (async, rerun: 64)
close(r10) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0xd0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xc7, 0x3}, {0xffffffffffffffff, 0x4, 0x1}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x4, 0x1}, {0x7, 0xe}, {0x7, 0x8}, 0xfff}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'batadv0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

2m5.065153186s ago: executing program 32 (id=823):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0xa0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
write(r6, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x0, 0x3ec0) (async, rerun: 64)
close(r10) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0xd0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xc7, 0x3}, {0xffffffffffffffff, 0x4, 0x1}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x4, 0x1}, {0x7, 0xe}, {0x7, 0x8}, 0xfff}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'batadv0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

1.739581627s ago: executing program 2 (id=3487):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=<r2=>r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="df33de34e8309190b6e96e437bf823"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="6fa56f98913b480b682f3b7f4621ac577049e86138a8c81a", @ANYRESHEX=r2, @ANYBLOB="cd28d528e9141d081c933deebbfb989ea1683eae9bbf3b9c5c4cbef6ce12b581df548d5ecfd6ac5d8ccda2cb38936a778fd8919809"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)

1.626151576s ago: executing program 2 (id=3489):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0xf, [{0x4, 0x41a, 0x2}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f0000000040)=""/138, 0x37, 0x8a, 0x1, 0xcd, 0x10000, @value=r0}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x29, 0x7, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)={0x10000000})
r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000240)=@dstopts={0x0, 0xd, '\x00', [@generic={0x4, 0x67, "70999c48237d793e46d2b4a14d8571fd3956da91251da5af182b19c3635a5e3c036b27a6b3e9c8b2084d01ef26094f82d0305ca3787e6f56ad0a3f2d85e0e3be57f3891a37d76d05abe37160ccef6b39b82a38252995e7565d5230f9da82738adbf8e8520ecdcd"}]}, 0x78)
r5 = socket(0xf, 0x80000, 0x3)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={r1, 0x20, &(0x7f0000001500)={&(0x7f0000000480)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000001480)=""/99, 0x63}}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x8, 0xba00, 0xff, 0xfffffffa, 0x620, 0x1, 0xc02, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r1, 0x3, 0x3, 0x5}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@bloom_filter={0x1e, 0x9, 0x9, 0xffe0, 0x4100, r5, 0x8, '\x00', 0x0, r1, 0x2, 0x5, 0xd, 0xc}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x18, 0x0, 0x1, 0xa177, '\x00', 0x0, r1, 0x1, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x10, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1ff}, @alu={0x7, 0x0, 0xd, 0x4, 0x3, 0x8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10f}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @generic={0xa1, 0x2, 0x1, 0x787, 0x10}, @ldst={0x1, 0x0, 0x6, 0x1, 0x8, 0x10, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xc, 0xa, 0x5, 0x18, 0x95426bef268846d8}]}, &(0x7f0000000340)='syzkaller\x00', 0x400, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0x34, '\x00', 0x0, @sk_msg=0x7, r6, 0x8, &(0x7f0000000400)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3ff, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000001a00)=[r8, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000001a40)=[{0x2, 0x1, 0x2, 0x5}, {0x5, 0x1, 0x2, 0x6}, {0x1, 0x5, 0x5, 0x2}, {0x1, 0x3, 0x3, 0x7}, {0x2, 0x2, 0x7, 0xa}, {0x3, 0x3, 0x1, 0x1}], 0x10, 0x43f}, 0x94)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r16)
r17 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001bc0)={0x0, 0x0, {0xbf, @usage=0xfffffffffffffff7, 0x0, 0x1, 0x185a, 0x8, 0x5, 0x800, 0x0, @struct={0xa, 0x96}, 0x2c483b1c, 0x80000000, [0x4, 0xffffffffffffff6a, 0x7, 0x7d0efdfa, 0x6, 0x825b]}, {0x4, @usage=0x6, 0x0, 0x5, 0x4, 0x101, 0x80, 0xb, 0x92, @usage=0x64d0, 0x3, 0x2c1, [0x1, 0x100, 0x2, 0x7a, 0x8, 0x18d7]}, {0x6, @usage=0x80, <r18=>0x0, 0x0, 0x80000001, 0x0, 0x8, 0xccb5, 0x4e6, @struct={0x80000001, 0x3}, 0x9, 0xffffff80, [0x3, 0x7, 0x9, 0x1, 0x3ff, 0x23]}, {0x8000, 0x10, 0x1000}})
ioctl$BTRFS_IOC_SCRUB(r17, 0xc400941b, &(0x7f0000001fc0)={r18, 0x10, 0x3, 0x1})
write$cgroup_type(r12, &(0x7f00000023c0), 0x9)
ioctl$FIGETBSZ(r11, 0x2, &(0x7f0000002400))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002440)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000024c0)={[{0x2d, 'rdma'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}, {0x2d, 'memory'}, {0x2b, 'perf_event'}]}, 0x2f)

1.527134248s ago: executing program 2 (id=3491):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r3)
sendmsg$SMC_PNETID_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002a8d4bb89adbdf2501000000"], 0x14}}, 0x40010)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000002800018014000400ff1f0000000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket(0xa, 0x801, 0x0)
getsockopt(r11, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r13, {0x13, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}]}, 0x2c}}, 0x4000010)

688.345873ms ago: executing program 3 (id=3505):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x5411, &(0x7f00000007c0))
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x24, 0x22, 0x9, 0x0, 0x0, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x1, [0x8, 0x4, 0xc000, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0)

609.597109ms ago: executing program 2 (id=3507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x20008004)

608.310663ms ago: executing program 3 (id=3508):
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x1000, 0x0, 0x1c, {[@mptcp=@syn={0x1e, 0x6, 0x4, 0x1, 0x24, 0x1, 0x4}]}}}}}}, 0x42)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x29b}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x2}, 0x80000000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x2}], 0x4, 0x40010162, 0x0)

486.31089ms ago: executing program 1 (id=3509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="280000002b000b00000000faffffffff0700000008000300040003000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000)
r1 = socket(0x23, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x3, 0x8, 0xbe2}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x9, 0xa5, "aed53345f74484785fa0169527d76519c8de550555a224ace3a92206a8cb4a3f277d3e5b9424fb45fa4502955222892adc17afec71ba236e5ccee9566d65fbaaaf1dacbae89bddcf6c0de88ec5b27e3ba58ccc2096886fb9f1dfe434900256f0d0bbc517677b76965a2cf628e7036aeef28060739f57b4dacdb6f706bf02196da389294436fe38acd3b24aba022b84321b631d29fa32ca26e3ca45b74eb111976765714683"}, 0xad)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e)
getsockopt$nfc_llcp(r1, 0x113, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

486.147701ms ago: executing program 2 (id=3510):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2900}, 0x94)

439.990597ms ago: executing program 3 (id=3511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a30000c700038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)

438.515805ms ago: executing program 2 (id=3512):
unshare(0x6020400)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
unshare(0x2c060000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0xc884)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x52, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r5, r6, 0x18, 0x203c, 0x4}, 0x20)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0xd4d0}, 0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000300)={r9, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x8, 0x6, 0x1, 0x5, 0x8d}, &(0x7f0000000140)=0x98)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r10, 0x5, 0x20}, &(0x7f00000001c0)=0x18)

435.66295ms ago: executing program 1 (id=3513):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000007d0e4fc97a33751d5b35fcb7269586a32bf752c11159e7e9dbf28c2966a4ed9f7274d349"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x8a, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05ffffff6f7ddf252e0000000800030000de4e0b9b29954700", @ANYRES32=r3, @ANYBLOB="0c009900040000001b0000000a004f0050505050505000000400e200"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x488c0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1ffffffffffffeab, &(0x7f0000001880)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80000, 0x6)
setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r0}, 0x14)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040))

369.624296ms ago: executing program 3 (id=3514):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='qdisc_reset\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000000108000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000bb14000400fe8000000000000000000000000000352c00018014000300fe88000000000000000000000000010114000400fc010000000000000000000000000000180001801400018008000100ac1414bb08000200e0000001"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r8, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xfffffffffffffe3e}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0xd026}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0xfff1}, {0x5, 0x5}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0xc}]}, 0x3c}}, 0x80)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x6f, 0x4, [0x9, 0x4, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xd]}})
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)

300.086849ms ago: executing program 1 (id=3515):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000010a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

266.570696ms ago: executing program 3 (id=3516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0xdc, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0xc8, 0x1, [@m_connmark={0x0, 0xb, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0xec5, 0x6, 0x8, 0x6}, 0x401}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x5, 0x3, 0x3, 0x1, 0x6}, 0x9}}]}, {0x0, 0x6, "910a93fe3fae1590c4908edca8a7d6fbc68e02c91251699152fdfba0d4d767035f1213ad9d8906789dab8c91078b98b21e14ff62a6f9c0af"}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000)

265.05669ms ago: executing program 1 (id=3517):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000001"], 0x0, 0x42}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x5, 0x0, 0xb}}]}}}]}, 0x60}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1d, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b64637"}})
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r9 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0)
recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x54, r12, 0x409, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x550}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000005200000008000300", @ANYRES32=r1, @ANYBLOB="06005200100700000500040001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000044)

189.810982ms ago: executing program 3 (id=3518):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x800, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x1}, 0xff}, 0x18)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b000000faff7f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r8, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x8000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x5)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r11, 0x0, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_MAP={0x24, 0xe, {0x8, 0x1ff, 0x9, 0x0, 0x9, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)

60.061019ms ago: executing program 1 (id=3519):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)

0s ago: executing program 1 (id=3520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000012000000000000000000000189"], 0xfce)

kernel console output (not intermixed with test programs):

reconfigured BSSID 50:50:50:50:50:50
[   68.372317][  T739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.387799][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.509151][ T5910] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[   68.717987][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.721387][ T5916] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.754056][ T5916] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   68.954341][ T5934] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   69.009834][ T5942] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10'.
[   69.082997][ T5934] Zero length message leads to an empty skb
[   69.097341][ T5934] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   69.162549][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   69.205698][ T5936] bridge1: the hash_elasticity option has been deprecated and is always 16
[   69.456084][ T5953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.543037][ T5849] Bluetooth: hci1: command tx timeout
[   69.545270][ T5849] Bluetooth: hci2: command tx timeout
[   69.617372][ T5964] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   69.624455][ T5964] netlink: 'syz.0.16': attribute type 5 has an invalid length.
[   69.660651][ T5966] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.694484][ T5968] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.18'.
[   69.710125][ T5966] netlink: 'syz.2.17': attribute type 2 has an invalid length.
[   69.748111][ T5966] `: entered promiscuous mode
[   69.831488][ T5974] netlink: 'syz.1.21': attribute type 6 has an invalid length.
[   69.886407][ T5978] tipc: Enabling <ib:lo> not permitted
[   69.888407][ T5978] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   69.901968][ T5978] netlink: 104 bytes leftover after parsing attributes in process `syz.2.23'.
[   69.967282][ T5981] Cannot find add_set index 0 as target
[   70.525636][  T974] cfg80211: failed to load regulatory.db
[   70.898504][ T6008] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   70.901310][ T6008] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   71.236139][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.238275][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.417321][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.432539][ T6045] No such timeout policy "syz0"
[   71.452118][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.461776][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.537458][ T6055] netlink: 92 bytes leftover after parsing attributes in process `syz.2.53'.
[   71.559004][ T6055] syzkaller1: entered promiscuous mode
[   71.560716][ T6055] syzkaller1: entered allmulticast mode
[   71.567769][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'.
[   71.621731][ T5845] Bluetooth: hci2: command tx timeout
[   71.621758][ T5849] Bluetooth: hci1: command tx timeout
[   72.033190][ T6093] hsr_slave_0: left promiscuous mode
[   72.053436][ T6093] hsr_slave_1: left promiscuous mode
[   72.322663][ T6121] xt_l2tp: missing protocol rule (udp|l2tpip)
[   72.432069][ T6130] 0: renamed from hsr0 (while UP)
[   72.437314][ T6130] 0: entered allmulticast mode
[   72.439008][ T6130] hsr_slave_0: entered allmulticast mode
[   72.440831][ T6130] hsr_slave_1: entered allmulticast mode
[   72.443423][ T6130] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   72.559709][ T6137] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   72.591201][ T6137] bond1: entered promiscuous mode
[   72.593597][ T6137] bond1: entered allmulticast mode
[   72.604898][ T6137] bridge1: the hash_elasticity option has been deprecated and is always 16
[   72.775046][ T6145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.778734][ T6145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.782644][ T6145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.786062][ T6145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.266611][ T6150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.290816][ T6150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.363189][ T6159] netlink: 'syz.2.89': attribute type 3 has an invalid length.
[   73.379992][    C1] Unknown status report in ack skb
[   73.703810][ T5849] Bluetooth: hci2: command tx timeout
[   73.713007][ T5849] Bluetooth: hci1: command tx timeout
[   73.744916][ T6180] __nla_validate_parse: 13 callbacks suppressed
[   73.744933][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   73.751191][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.061191][ T6199] netlink: 224 bytes leftover after parsing attributes in process `syz.1.102'.
[   74.454058][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   74.459336][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'.
[   74.554586][ T6220] bond0: (slave bond_slave_0): Releasing backup interface
[   74.718922][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   74.725429][ T6235] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   74.729301][ T6237] netlink: 'syz.0.111': attribute type 3 has an invalid length.
[   74.737332][ T6237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.111'.
[   74.847616][ T6247] xt_limit: Overflow, try lower: 262144/524288
[   75.105202][ T6268] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   75.261850][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'.
[   75.385789][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'.
[   75.411084][ T6266] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.121'.
[   76.027347][ T6320] ipt_ECN: cannot use operation on non-tcp rule
[   76.223201][ T6336] syzkaller0: entered allmulticast mode
[   76.417384][ T6319] syzkaller0: left allmulticast mode
[   76.522963][ T6347] batadv_slave_1: entered promiscuous mode
[   76.527079][ T6346] batadv_slave_1: left promiscuous mode
[   76.600215][ T6354] netlink: 'syz.0.151': attribute type 3 has an invalid length.
[   76.603069][ T6354] netlink: 224 bytes leftover after parsing attributes in process `syz.0.151'.
[   76.701930][ T6358] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   77.172484][ T6382] dvmrp8: entered allmulticast mode
[   77.956637][ T6424] netlink: 'syz.0.169': attribute type 9 has an invalid length.
[   78.027095][ T6434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.163380][ T6445] netlink: 'syz.1.175': attribute type 3 has an invalid length.
[   78.333820][ T6455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   78.404188][ T6454] delete_channel: no stack
[   78.638819][ T6474] netlink: 'syz.1.189': attribute type 12 has an invalid length.
[   78.712971][ T6481] netlink: 'syz.2.190': attribute type 3 has an invalid length.
[   79.142754][ T6498] netlink: 'syz.2.197': attribute type 10 has an invalid length.
[   79.170332][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.187413][ T6498] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   79.409354][ T6507] netlink: 'syz.1.200': attribute type 3 has an invalid length.
[   79.416187][ T6507] __nla_validate_parse: 50 callbacks suppressed
[   79.416208][ T6507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.750899][   T33] audit: type=1804 audit(1752844261.902:2): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.207" name="/newroot/69/cgroup.controllers" dev="tmpfs" ino=364 res=1 errno=0
[   79.771011][ T6527] net veth1_virt_wifi : renamed from virt_wifi0
[   79.780180][   T33] audit: type=1800 audit(1752844261.902:3): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.207" name="cgroup.controllers" dev="tmpfs" ino=364 res=0 errno=0
[   79.802269][ T6527] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[   79.844755][ T6535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'.
[   79.954857][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[   79.957944][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[   79.968371][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   80.097941][ T5666] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.103343][ T5666] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.121827][ T5479] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.167287][ T6558] netlink: 'syz.2.219': attribute type 1 has an invalid length.
[   80.170306][ T6558] netlink: 228 bytes leftover after parsing attributes in process `syz.2.219'.
[   80.177064][ T6559] netlink: 'syz.2.219': attribute type 1 has an invalid length.
[   80.180098][ T6559] netlink: 228 bytes leftover after parsing attributes in process `syz.2.219'.
[   80.218795][ T6561] ip6gre1: entered allmulticast mode
[   80.224728][ T6563] netlink: 'syz.0.221': attribute type 3 has an invalid length.
[   80.227757][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.221'.
[   80.328526][ T6572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.223'.
[   80.404514][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'.
[   80.455010][ T6576] netlink: 'syz.1.226': attribute type 5 has an invalid length.
[   80.732030][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.789852][ T6593] netlink: 'syz.1.231': attribute type 1 has an invalid length.
[   80.811478][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.858093][ T6592] veth3: entered promiscuous mode
[   80.867188][ T6592] bond1: (slave veth3): Enslaving as an active interface with a down link
[   80.940673][ T6592] erspan0: entered allmulticast mode
[   80.952443][ T6592] bond1: (slave erspan0): making interface the new active one
[   80.956774][ T6592] erspan0: entered promiscuous mode
[   80.959413][ T6592] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   80.970060][ T6592] syz.1.231 (6592) used greatest stack depth: 19832 bytes left
[   81.041470][ T6600] netlink: 'syz.2.233': attribute type 3 has an invalid length.
[   81.062474][ T5479] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.068040][ T6602] Cannot find set identified by id 2 to match
[   81.486584][ T6626] netlink: 'syz.0.243': attribute type 3 has an invalid length.
[   81.840163][ T6650] : entered promiscuous mode
[   81.895108][ T6653] xt_bpf: check failed: parse error
[   81.896461][ T6655] xt_bpf: check failed: parse error
[   82.162143][ T6675] netlink: 'syz.1.261': attribute type 3 has an invalid length.
[   82.893770][ T6726] netlink: 'syz.2.278': attribute type 3 has an invalid length.
[   83.770125][ T6765] Set syz0 is full, maxelem 0 reached
[   83.941795][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.322120][ T6799] netlink: del zone limit has 4 unknown bytes
[   84.475131][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.635327][ T6822] syzkaller0: entered promiscuous mode
[   84.641425][ T6822] syzkaller0: entered allmulticast mode
[   84.839089][ T6829] x_tables: ip_tables: osf match: only valid for protocol 6
[   84.995949][ T6835] validate_nla: 2 callbacks suppressed
[   84.995991][ T6835] netlink: 'syz.2.317': attribute type 3 has an invalid length.
[   85.000402][ T6835] __nla_validate_parse: 10 callbacks suppressed
[   85.000410][ T6835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.317'.
[   85.095248][ T6841] netlink: 248 bytes leftover after parsing attributes in process `syz.0.320'.
[   85.309771][ T6853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.325'.
[   85.331147][ T6853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'.
[   85.456160][ T6864] netlink: 'syz.1.327': attribute type 3 has an invalid length.
[   85.465579][ T6864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.327'.
[   85.669621][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'.
[   85.814246][ T6893] netlink: 'syz.1.333': attribute type 21 has an invalid length.
[   85.821761][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.333'.
[   86.136004][ T6907] netlink: 'syz.1.339': attribute type 11 has an invalid length.
[   86.139338][ T6907] netlink: 'syz.1.339': attribute type 11 has an invalid length.
[   86.148032][ T6907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.339'.
[   86.408604][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   86.610312][ T6940] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   86.624106][ T6940] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.733850][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   86.941519][ T6967] netlink: 'syz.1.356': attribute type 1 has an invalid length.
[   87.030354][ T6973] bond2: entered promiscuous mode
[   87.045541][ T6973] bond2: entered allmulticast mode
[   87.049437][ T6972] netlink: 'syz.0.360': attribute type 6 has an invalid length.
[   87.058001][ T6973] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.209674][ T6978] netlink: 'syz.1.356': attribute type 4 has an invalid length.
[   87.724038][ T6999] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   87.842549][ T7006] Unsupported ieee802154 address type: 0
[   87.849900][ T7011] netlink: 'syz.1.372': attribute type 3 has an invalid length.
[   88.584872][ T7035] veth5: entered promiscuous mode
[   88.624546][ T7036] bond1: (slave erspan0): Releasing active interface
[   88.627502][ T7036] erspan0: left promiscuous mode
[   88.835463][ T7046] netlink: 'syz.1.386': attribute type 3 has an invalid length.
[   89.635642][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.638272][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.640924][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.643725][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.646474][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.648977][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.651689][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.654607][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.657112][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.660076][ T7099] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   89.810333][ T7110] unsupported nlmsg_type 40
[   90.138291][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.146173][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.377865][ T7143] __nla_validate_parse: 15 callbacks suppressed
[   90.377881][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.423'.
[   90.388854][ T7143] x_tables: duplicate underflow at hook 3
[   90.476502][ T7149] tipc: Started in network mode
[   90.478667][ T7149] tipc: Node identity e2148b6c99de, cluster identity 4711
[   90.483223][ T7149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.486818][ T7149] syzkaller0: entered promiscuous mode
[   90.489192][ T7149] syzkaller0: entered allmulticast mode
[   90.508196][ T7149] tipc: Resetting bearer <eth:syzkaller0>
[   90.529836][ T7152] syzkaller1: entered promiscuous mode
[   90.532287][ T7152] syzkaller1: entered allmulticast mode
[   90.570008][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[   90.580637][ T7148] tipc: Disabling bearer <eth:syzkaller0>
[   90.710502][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'.
[   90.713940][ T7161] Bluetooth: MGMT ver 1.23
[   90.717892][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'.
[   90.831609][ T7167] netlink: 'syz.0.431': attribute type 9 has an invalid length.
[   91.218261][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'.
[   91.495371][ T7202] netlink: 'syz.0.445': attribute type 10 has an invalid length.
[   91.510110][ T7202] 8021q: adding VLAN 0 to HW filter on device team0
[   91.517662][ T7202] bond0: (slave team0): Enslaving as an active interface with an up link
[   91.518776][ T7204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.446'.
[   91.582515][ T7206] netlink: 56 bytes leftover after parsing attributes in process `syz.0.447'.
[   91.586962][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'.
[   91.605820][ T7163] delete_channel: no stack
[   91.686620][ T7213] netlink: 'syz.2.451': attribute type 11 has an invalid length.
[   91.689836][ T7213] netlink: 'syz.2.451': attribute type 4 has an invalid length.
[   91.694239][ T7213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.451'.
[   91.700016][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   91.701753][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   91.712142][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.450'.
[   91.739401][ T7217] netlink: 'syz.0.452': attribute type 8 has an invalid length.
[   93.353143][ T7291] netlink: 'syz.2.477': attribute type 12 has an invalid length.
[   93.783433][ T7320] ip6t_srh: unknown srh invflags 4000
[   94.176044][ T7338] ieee802154 phy0 wpan0: encryption failed: -22
[   95.006587][ T7385] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[   95.480121][ T7406] __nla_validate_parse: 7 callbacks suppressed
[   95.480133][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[   95.522214][ T7406] bridge_slave_1: left allmulticast mode
[   95.524214][ T7406] bridge_slave_1: left promiscuous mode
[   95.526155][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.533502][ T7406] bridge_slave_0: left allmulticast mode
[   95.535797][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.664945][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.548'.
[   96.676819][ T7481] xt_ecn: cannot match TCP bits for non-tcp packets
[   97.014441][ T7500] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.556'.
[   97.076033][ T7509] sctp: [Deprecated]: syz.1.556 (pid 7509) Use of int in max_burst socket option.
[   97.076033][ T7509] Use struct sctp_assoc_value instead
[   97.083658][ T7509] net_ratelimit: 50 callbacks suppressed
[   97.083672][ T7509] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   97.497845][ T7542] netlink: 'syz.2.570': attribute type 11 has an invalid length.
[   97.516463][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'.
[   97.519615][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[   97.917162][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'.
[   98.120977][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'.
[   98.124241][ T7589] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   98.136837][ T7591] netlink: 364 bytes leftover after parsing attributes in process `syz.2.586'.
[   98.139792][ T7591] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   98.217724][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[   98.286982][ T7602] ip6gre1: entered promiscuous mode
[   98.345416][ T7607] netlink: 'syz.1.593': attribute type 1 has an invalid length.
[   98.350630][ T7607] netlink: 244 bytes leftover after parsing attributes in process `syz.1.593'.
[   98.582399][ T7585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.964246][ T7640] erspan0: left allmulticast mode
[   99.107743][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.115972][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.165273][ T7640] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.168108][ T7640] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.171042][ T7640] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.174075][ T7640] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.210254][ T7640] ip6gre1: left allmulticast mode
[   99.215360][ T7640] veth3: left promiscuous mode
[   99.217737][ T7640] bond2: left promiscuous mode
[   99.219209][ T7640] bond2: left allmulticast mode
[   99.228298][ T7654] bond0: (slave batadv0): Releasing backup interface
[   99.244705][ T7654] bond0: (slave bond_slave_0): Releasing backup interface
[   99.259828][ T7654] bond0: (slave bond_slave_1): Releasing backup interface
[   99.276467][ T7654] team0: Failed to send options change via netlink (err -105)
[   99.279579][ T7654] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   99.284435][ T7654] team0: Port device team_slave_0 removed
[   99.291372][ T7654] team0: Failed to send options change via netlink (err -105)
[   99.294940][ T7654] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   99.298158][ T7654] team0: Port device team_slave_1 removed
[   99.300983][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.306630][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.310558][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.313358][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.351521][ T7657] team0: Failed to send options change via netlink (err -105)
[   99.359711][ T7657] team0: Mode changed to "loadbalance"
[   99.366947][  T974] srz1: Port: 1 Link DOWN
[   99.448897][ T7667] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.452627][ T7667] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.456492][ T7667] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.459937][ T7667] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.852289][ T7701] delete_channel: no stack
[   99.985538][ T7707] vlan2: entered promiscuous mode
[   99.987547][ T7707] vlan2: entered allmulticast mode
[   99.989461][ T7707] hsr_slave_1: entered allmulticast mode
[  100.299336][ T7711] netlink: 'syz.0.625': attribute type 11 has an invalid length.
[  100.920459][ T7732] syzkaller0: entered promiscuous mode
[  100.922991][ T7732] syzkaller0: entered allmulticast mode
[  101.057404][ T7741] __nla_validate_parse: 7 callbacks suppressed
[  101.057419][ T7741] netlink: 108 bytes leftover after parsing attributes in process `syz.1.638'.
[  101.224191][ T7751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.226065][ T7753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'.
[  101.256714][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'.
[  101.259934][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'.
[  101.572957][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  101.615494][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  102.686938][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  102.818973][ T7841] ip6tnl1: entered promiscuous mode
[  102.823857][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'.
[  103.014426][ T7853] bond0: Unable to set up delay as MII monitoring is disabled
[  103.704890][ T7871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'.
[  104.345755][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'.
[  104.439671][ T7931] netlink: 'syz.2.688': attribute type 3 has an invalid length.
[  104.449463][ T7932] xt_CT: No such helper "snmp"
[  104.620199][ T7950] netlink: 'syz.0.695': attribute type 22 has an invalid length.
[  105.748688][ T7996] tap0: tun_chr_ioctl cmd 1074025677
[  105.751117][ T7996] tap0: linktype set to 0
[  105.798758][ T7996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.253951][ T8014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.259105][ T8014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.336758][ T8014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.340342][ T8014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.396849][ T8014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.400611][ T8014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.455700][ T8014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.459168][ T8014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.526786][ T8014] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.529585][ T8014] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.540245][ T8014] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.543161][ T8014] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.554412][ T8014] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.557209][ T8014] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.568291][ T8014] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.570870][ T8014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.629414][ T8029] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  106.678822][ T8033] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.684145][ T8034] __nla_validate_parse: 4 callbacks suppressed
[  106.684159][ T8034] netlink: 176 bytes leftover after parsing attributes in process `syz.2.725'.
[  106.705678][ T8037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.726'.
[  106.767223][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'.
[  106.848380][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'.
[  107.010918][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'.
[  107.174478][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[  107.178261][ T8068] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  107.181403][ T8068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.219176][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[  107.223377][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'.
[  107.438821][ T8077] netlink: 'syz.1.742': attribute type 21 has an invalid length.
[  107.441488][ T8077] netlink: 132 bytes leftover after parsing attributes in process `syz.1.742'.
[  107.572333][ T8083] netlink: 148 bytes leftover after parsing attributes in process `syz.1.745'.
[  107.663368][ T8091] geneve2: entered promiscuous mode
[  107.717083][ T8097] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  107.915025][ T8107] veth3: entered allmulticast mode
[  107.958388][ T8110] netlink: 'syz.2.754': attribute type 2 has an invalid length.
[  107.970971][ T8110] : entered promiscuous mode
[  108.084430][ T8120] netlink: 'syz.0.757': attribute type 15 has an invalid length.
[  108.600465][ T8154] netlink: 'syz.1.768': attribute type 178 has an invalid length.
[  108.604673][ T8154] netlink: 'syz.1.768': attribute type 2 has an invalid length.
[  108.611305][ T8154] : entered promiscuous mode
[  108.869977][ T8168] netlink: 'syz.1.774': attribute type 2 has an invalid length.
[  108.876823][ T8168] : entered promiscuous mode
[  108.906780][ T8178] xt_hashlimit: size too large, truncated to 1048576
[  108.912088][ T8178] xt_hashlimit: overflow, try lower: 3/0
[  109.702523][ T5666] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  109.705355][ T5666] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  109.731923][ T5479] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  110.282096][ T5479] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  110.302027][ T5479] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  110.565552][ T8226] macvlan0: entered promiscuous mode
[  110.572403][ T8226] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  110.575002][ T8226] netlink: 'syz.0.791': attribute type 2 has an invalid length.
[  111.514800][ T8270] dvmrp0: entered allmulticast mode
[  111.843134][ T8298] IPv6: Can't replace route, no match found
[  111.847998][ T8298] __nla_validate_parse: 25 callbacks suppressed
[  111.848013][ T8298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.814'.
[  111.980084][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'.
[  112.096043][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'.
[  112.132381][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'.
[  112.159090][ T8325] netlink: 184 bytes leftover after parsing attributes in process `syz.2.822'.
[  112.174406][ T8319] netlink: 184 bytes leftover after parsing attributes in process `syz.2.822'.
[  112.189150][ T8330] ieee802154 phy0 wpan0: encryption failed: -22
[  112.240046][ T8336] ip6tnl1: entered promiscuous mode
[  112.257257][ T8336] ip6tnl1: entered allmulticast mode
[  112.260902][ T8336] team0: Device ip6tnl1 is of different type
[  112.401393][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'.
[  113.284289][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'.
[  113.474670][ T8372] xt_TPROXY: Can be used only with -p tcp or -p udp
[  113.951736][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  114.524829][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  114.528174][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'.
[  114.542250][ T8390] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  114.713648][ T8395] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.716790][ T8395] netlink: 'syz.2.846': attribute type 26 has an invalid length.
[  114.978190][ T8408] netlink: 'syz.2.851': attribute type 8 has an invalid length.
[  114.984075][ T8410] netlink: 'syz.1.852': attribute type 142 has an invalid length.
[  115.206317][ T8426] openvswitch: netlink: Key type 4880 is out of range max 32
[  115.349998][ T8434] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  115.360116][ T8433] IPVS: Error joining to the multicast group
[  115.398521][ T8436] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[  115.404271][ T8436] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  115.468287][ T8441] netlink: 'syz.2.862': attribute type 2 has an invalid length.
[  115.577311][ T8443] netlink: 'syz.1.863': attribute type 2 has an invalid length.
[  116.090614][ T8479] netlink: 'syz.2.874': attribute type 9 has an invalid length.
[  117.300868][ T8559] __nla_validate_parse: 7 callbacks suppressed
[  117.300883][ T8559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.897'.
[  117.346879][ T8562] team0: Port device ip6gretap1 added
[  118.249272][ T8590] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  118.272145][ T8587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.564566][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'.
[  118.568175][ T8607] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  118.578088][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.144700][ T8625] xt_NFQUEUE: number of total queues is 0
[  119.271705][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'.
[  119.376751][ T8641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.546903][ T8649] team0: No ports can be present during mode change
[  120.677696][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'.
[  120.692868][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'.
[  121.273250][ T8707] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  121.276366][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'.
[  121.534097][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'.
[  121.537541][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'.
[  121.555827][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.948'.
[  121.596778][ T8723] x_tables: unsorted underflow at hook 4
[  122.386712][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'.
[  122.422939][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  122.449464][ T8751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.957'.
[  122.694969][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.959'.
[  122.905221][ T8759] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.907787][ T8759] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.910315][ T8759] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.921643][ T8759] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.933705][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'.
[  122.991673][ T8759] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.994415][ T8759] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.996829][ T8759] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.999371][ T8759] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.026222][ T8772] bridge_slave_1: left allmulticast mode
[  123.031001][ T8772] bridge_slave_1: left promiscuous mode
[  123.039257][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.045278][ T8772] bridge_slave_0: left allmulticast mode
[  123.047720][ T8772] bridge_slave_0: left promiscuous mode
[  123.050430][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.266766][ T8774] ip6erspan0: entered allmulticast mode
[  123.467647][ T8778] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  123.471062][ T8778] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  123.581343][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.969'.
[  123.583171][ T8788] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  123.647848][ T8783] can: request_module (can-proto-0) failed.
[  124.021801][ T8803] can: request_module (can-proto-0) failed.
[  124.026176][ T8805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.974'.
[  124.029873][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'.
[  124.042033][ T8805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.974'.
[  124.149141][ T8809] netlink: 'syz.2.976': attribute type 12 has an invalid length.
[  124.217959][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'.
[  124.768253][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.977'.
[  125.815480][ T8848] netlink: 'syz.1.992': attribute type 3 has an invalid length.
[  125.867225][ T8850] syzkaller0: left promiscuous mode
[  127.415908][ T8947] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  127.449462][ T8949] tipc: Can't bind to reserved service type 0
[  127.516605][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.521536][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.527176][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.533489][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.550262][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.654870][ T8959] __nla_validate_parse: 5 callbacks suppressed
[  127.654881][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'.
[  127.806310][ T8950] chnl_net:caif_netlink_parms(): no params data found
[  127.986439][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.989419][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.992821][ T8950] bridge_slave_0: entered allmulticast mode
[  127.997005][ T8950] bridge_slave_0: entered promiscuous mode
[  128.006515][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.016591][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.021240][ T8950] bridge_slave_1: entered allmulticast mode
[  128.028821][ T8950] bridge_slave_1: entered promiscuous mode
[  128.105654][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.126621][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.171940][ T8950] team0: Port device team_slave_0 added
[  128.178629][ T8950] team0: Port device team_slave_1 added
[  128.197435][ T8997] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  128.219609][ T8997] team0: Port device ip6gretap1 removed
[  128.222979][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.225226][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.232454][ T8997] netlink: 'syz.2.1024': attribute type 10 has an invalid length.
[  128.236632][ T8950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.243687][ T8997] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  128.248263][ T8997] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.253363][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.255688][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.265963][ T8950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.383402][ T8950] hsr_slave_0: entered promiscuous mode
[  128.389680][ T8950] hsr_slave_1: entered promiscuous mode
[  128.467170][ T9014] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1030'.
[  128.696231][ T8950] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.706663][ T9026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.709196][ T8950] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  128.715958][ T9026] syzkaller0: entered promiscuous mode
[  128.718161][ T9026] syzkaller0: entered allmulticast mode
[  128.725151][ T8950] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  128.739740][ T8950] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  128.754006][ T9026] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1034'.
[  128.841350][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.865796][ T8950] 8021q: adding VLAN 0 to HW filter on device team0
[  128.877832][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.880698][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.902534][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.905406][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.976008][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'.
[  129.114266][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.146264][ T8950] veth0_vlan: entered promiscuous mode
[  129.157457][ T8950] veth1_vlan: entered promiscuous mode
[  129.201387][ T8950] veth0_macvtap: entered promiscuous mode
[  129.210936][ T8950] veth1_macvtap: entered promiscuous mode
[  129.224931][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.233030][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.243420][ T8950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.246313][ T8950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.249415][ T8950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.256656][ T8950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.333528][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.335921][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.374816][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.378150][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.428224][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'.
[  129.457328][ T9060] trusted_key: syz.3.1004 sent an empty control message without MSG_MORE.
[  129.622109][ T5849] Bluetooth: hci3: command tx timeout
[  129.687279][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1044'.
[  129.690250][ T9071] netlink: 'syz.3.1044': attribute type 5 has an invalid length.
[  129.753061][ T9071] block nbd1: Unsupported socket: shutdown callout must be supported.
[  129.756261][ T9071] block nbd1: shutting down sockets
[  129.822883][   T24] tipc: Node number set to 2076871532
[  130.168668][ T9096] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  130.225140][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'.
[  130.307593][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1056'.
[  130.351987][ T9109] batadv_slave_0: entered promiscuous mode
[  130.363442][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'.
[  130.370746][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'.
[  130.395883][ T9109] batadv_slave_0 (unregistering): left promiscuous mode
[  130.679971][ T9144] openvswitch: netlink: Multiple metadata blocks provided
[  130.775155][ T9151] netlink: 'syz.1.1069': attribute type 2 has an invalid length.
[  131.107890][ T9190] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  131.110725][ T9189] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  131.376554][ T9210] sock: sock_timestamping_bind_phc: sock not bind to device
[  131.711914][ T5849] Bluetooth: hci3: command tx timeout
[  132.076630][ T9255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.094422][ T9255] tipc: Resetting bearer <eth:syzkaller0>
[  132.256642][ T9264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.628464][ T9280] netlink: 'syz.1.1108': attribute type 1 has an invalid length.
[  132.825665][ T9295] netlink: 'syz.3.1112': attribute type 25 has an invalid length.
[  132.829017][ T9295] netlink: 'syz.3.1112': attribute type 7 has an invalid length.
[  133.133810][   T33] audit: type=1800 audit(1752844315.292:4): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2200 res=0 errno=0
[  133.145732][   T33] audit: type=1800 audit(1752844315.292:5): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2200 res=0 errno=0
[  133.157491][   T33] audit: type=1800 audit(1752844315.312:6): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2200 res=0 errno=0
[  133.781892][ T5849] Bluetooth: hci3: command tx timeout
[  133.810620][ T9332] __nla_validate_parse: 11 callbacks suppressed
[  133.810638][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'.
[  133.858184][ T9332] netlink: 'syz.3.1126': attribute type 10 has an invalid length.
[  133.874714][ T9332] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  133.986981][ T5871] IPVS: starting estimator thread 0...
[  134.087134][ T9337] IPVS: using max 49 ests per chain, 117600 per kthread
[  134.342721][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'.
[  134.636211][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'.
[  134.874758][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1149'.
[  134.877447][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'.
[  135.076363][ T9402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1155'.
[  135.079922][ T9402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  135.150381][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'.
[  135.158977][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1157'.
[  135.426544][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1164'.
[  135.555114][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'.
[  135.862087][ T5849] Bluetooth: hci3: command tx timeout
[  136.068067][ T9456] (unnamed net_device) (uninitialized): peer notification delay (13879) is not a multiple of miimon (100), value rounded to 13800 ms
[  136.128724][ T9459] block nbd2: not configured, cannot reconfigure
[  136.208990][ T9463] netlink: 'syz.1.1181': attribute type 20 has an invalid length.
[  136.215212][ T9463] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.217967][ T9463] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.220633][ T9463] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.223552][ T9463] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.238317][ T9463] netlink: 'syz.1.1181': attribute type 20 has an invalid length.
[  136.306108][ T9473] netlink: 'syz.1.1181': attribute type 10 has an invalid length.
[  136.321789][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.326842][ T9473] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  136.917830][ T9491] netlink: 'syz.1.1191': attribute type 10 has an invalid length.
[  137.084726][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.320696][ T9519] tipc: MTU too low for tipc bearer
[  137.899872][ T9546] tipc: Started in network mode
[  137.911771][ T9546] tipc: Node identity 421ce4b81174, cluster identity 229
[  137.921790][ T9546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.925430][ T9546] syzkaller0: entered promiscuous mode
[  137.927154][ T9546] syzkaller0: entered allmulticast mode
[  137.967126][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  137.977998][ T9545] tipc: Resetting bearer <eth:syzkaller0>
[  137.996278][ T9545] tipc: Disabling bearer <eth:syzkaller0>
[  138.143003][ T9558] bond0: (slave wlan1): Releasing backup interface
[  138.146954][ T9558] bond0: Destroying bond
[  138.176412][ T9558] bond0 (unregistering): Released all slaves
[  138.219220][ T9566] netlink: 'syz.2.1218': attribute type 1 has an invalid length.
[  138.247575][ T9566] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.250773][ T5479] infiniband srz1: ib_query_port failed (-19)
[  138.250851][ T9562] netlink: 'syz.3.1220': attribute type 12 has an invalid length.
[  138.431862][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.497613][ T9580] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  138.962382][ T9598] __nla_validate_parse: 12 callbacks suppressed
[  138.962399][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  139.611340][ T9633] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1240'.
[  139.711054][ T9646] unknown channel width for channel at 909000KHz?
[  139.713293][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1243'.
[  139.716028][ T9646] unknown channel width for channel at 909000KHz?
[  139.766385][ T9650] netlink: 'syz.2.1246': attribute type 3 has an invalid length.
[  139.818605][ T9653] netlink: 'syz.1.1248': attribute type 3 has an invalid length.
[  139.855070][ T9659] syzkaller0: Caught tx_queue_len zero misconfig
[  140.668674][ T9666] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1252'.
[  140.804283][ T9678] netlink: 'syz.3.1256': attribute type 303 has an invalid length.
[  140.885087][ T9682] tap0: tun_chr_ioctl cmd 1074025677
[  140.887257][ T9682] tap0: linktype set to 0
[  140.935589][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'.
[  140.941330][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'.
[  141.058103][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'.
[  141.062590][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'.
[  141.079585][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'.
[  141.082813][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'.
[  141.641175][ T9745] netlink: 'syz.3.1281': attribute type 83 has an invalid length.
[  142.002640][ T9769] netlink: 'syz.1.1288': attribute type 10 has an invalid length.
[  142.006199][ T9769] team0: entered promiscuous mode
[  142.008224][ T9769] team_slave_0: entered promiscuous mode
[  142.010408][ T9769] team_slave_1: entered promiscuous mode
[  142.015755][ T9769] team0: entered allmulticast mode
[  142.022033][ T9769] team_slave_0: entered allmulticast mode
[  142.024531][ T9769] team_slave_1: entered allmulticast mode
[  142.028127][ T9769] 8021q: adding VLAN 0 to HW filter on device team0
[  142.034829][ T9769] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.221195][ T9788] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  142.409234][ T9797] bond0: Unable to set up delay as MII monitoring is disabled
[  143.405857][ T9815] netlink: 'syz.2.1304': attribute type 9 has an invalid length.
[  143.586984][ T9840] 8021q: adding VLAN 0 to HW filter on device bond3
[  143.655367][ T9849] : renamed from bond_slave_0
[  143.865434][ T9869] netlink: 'syz.3.1319': attribute type 1 has an invalid length.
[  143.960588][ T9878] netlink: 'syz.2.1322': attribute type 4 has an invalid length.
[  143.972551][ T9883] __nla_validate_parse: 7 callbacks suppressed
[  143.972568][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'.
[  144.051417][ T9886] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1325'.
[  144.197790][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  144.807383][ T9919] sctp: [Deprecated]: syz.2.1332 (pid 9919) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.807383][ T9919] Use struct sctp_sack_info instead
[  144.829990][ T9919] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1332'.
[  144.859957][ T5871] IPVS: starting estimator thread 0...
[  144.947472][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'.
[  144.952337][ T9923] IPVS: using max 45 ests per chain, 108000 per kthread
[  144.980613][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[  144.982110][ T9931] netlink: 'syz.1.1333': attribute type 6 has an invalid length.
[  144.991528][ T9930] sctp: [Deprecated]: syz.3.1336 (pid 9930) Use of int in max_burst socket option.
[  144.991528][ T9930] Use struct sctp_assoc_value instead
[  145.170385][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'.
[  145.184435][ T9944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19456 - 0
[  145.188735][ T9944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19456 - 0
[  145.196655][ T9944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19456 - 0
[  145.201910][ T9944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19456 - 0
[  145.205794][ T9944] geneve2: entered promiscuous mode
[  145.208903][ T9944] geneve2: entered allmulticast mode
[  145.460987][ T9967] netlink: 'syz.1.1346': attribute type 1 has an invalid length.
[  145.626979][ T9984] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1353'.
[  145.641353][ T9984] netlink: 'syz.1.1353': attribute type 1 has an invalid length.
[  145.647806][ T9984] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1353'.
[  145.668682][ T9988] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.1354'.
[  145.957831][T10009] netlink: 'syz.1.1362': attribute type 5 has an invalid length.
[  146.071114][T10023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  146.075655][T10023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  146.122941][T10026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.379746][T10038] netlink: 'syz.3.1373': attribute type 39 has an invalid length.
[  146.609523][T10043] No such timeout policy "syz1"
[  147.073387][T10074] netlink: 'syz.2.1385': attribute type 10 has an invalid length.
[  147.307428][T10097] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  147.706780][T10138] netlink: 'syz.3.1404': attribute type 83 has an invalid length.
[  148.497449][T10220] syzkaller1: entered promiscuous mode
[  148.499691][T10220] syzkaller1: entered allmulticast mode
[  148.733352][T10237] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  148.738352][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.111898][T10252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.119413][T10252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.127973][T10252] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  149.131459][T10252] bond0 (unregistering): Released all slaves
[  149.248923][T10261] bond2: entered promiscuous mode
[  149.251715][T10261] bond2: entered allmulticast mode
[  149.266265][T10264] No such timeout policy "syz0"
[  149.443023][T10274] __nla_validate_parse: 21 callbacks suppressed
[  149.443047][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'.
[  149.473774][T10276] xt_hashlimit: max too large, truncated to 1048576
[  149.477341][T10276] xt_hashlimit: Unknown mode mask CA, kernel too old?
[  149.493539][T10277] xt_hashlimit: max too large, truncated to 1048576
[  149.496327][T10277] xt_hashlimit: Unknown mode mask CA, kernel too old?
[  149.542798][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'.
[  149.547163][T10282] netlink: 'syz.2.1449': attribute type 25 has an invalid length.
[  149.632350][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  149.789358][T10300] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1454'.
[  149.917264][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.920379][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.003222][T10319] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1456'.
[  151.530584][T10388] openvswitch: netlink: IP tunnel dst address not specified
[  151.547410][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.554714][T10393] bridge_slave_0: left promiscuous mode
[  151.559811][T10393] ip6gre1: left promiscuous mode
[  151.561845][T10393] ip6tnl1: left promiscuous mode
[  151.564219][T10393] tipc: Resetting bearer <eth:syzkaller0>
[  151.566781][T10393] syzkaller0: left promiscuous mode
[  151.572072][T10393] syzkaller0: left allmulticast mode
[  151.582732][T10393] bond2: left promiscuous mode
[  151.584703][T10393] bond2: left allmulticast mode
[  151.792454][T10411] netlink: 'syz.2.1486': attribute type 8 has an invalid length.
[  152.035590][T10437] ip6gre1: entered allmulticast mode
[  152.218857][T10451] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.221186][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.297021][T10459] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1503'.
[  152.338239][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1504'.
[  152.343749][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'.
[  152.388753][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'.
[  152.455591][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'.
[  152.579674][T10491] netlink: 'syz.3.1512': attribute type 21 has an invalid length.
[  152.584019][T10491] netlink: 'syz.3.1512': attribute type 1 has an invalid length.
[  152.616823][ T5871] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  153.112058][T10530] netlink: 'syz.1.1522': attribute type 12 has an invalid length.
[  153.507632][T10560] xt_time: invalid argument - start or stop time greater than 23:59:59
[  153.597607][T10575] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.831287][T10593] x_tables: duplicate underflow at hook 1
[  153.840044][T10593] x_tables: duplicate underflow at hook 2
[  154.493656][T10653] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  154.610990][T10666] IPv6: syztnl1: Disabled Multicast RS
[  154.634248][T10667] __nla_validate_parse: 14 callbacks suppressed
[  154.634265][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'.
[  154.660397][T10666] openvswitch: netlink: IP tunnel TTL not specified.
[  154.758044][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'.
[  155.020849][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1575'.
[  155.154567][T10690] netlink: 'syz.1.1579': attribute type 1 has an invalid length.
[  155.176131][T10690] bond4: entered promiscuous mode
[  155.177878][T10690] bond4: entered allmulticast mode
[  155.179808][T10690] 8021q: adding VLAN 0 to HW filter on device bond4
[  155.230035][T10690] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.232936][T10690] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.235739][T10690] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.238372][T10690] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.248796][T10690] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19456 - 0
[  155.251910][T10690] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19456 - 0
[  155.254934][T10690] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19456 - 0
[  155.257877][T10690] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19456 - 0
[  155.506553][T10710] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  155.599453][T10719] netlink: 'syz.1.1585': attribute type 11 has an invalid length.
[  155.848799][T10732] netlink: 'syz.1.1589': attribute type 1 has an invalid length.
[  155.867868][T10732] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.562906][T10772] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1599'.
[  156.764376][T10788] bond0: option lp_interval: invalid value (18446744073709551604)
[  156.766983][T10788] bond0: option lp_interval: allowed values 1 - 2147483647
[  156.916076][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'.
[  156.926337][T10800] bond0: Unable to set down delay as MII monitoring is disabled
[  157.213185][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'.
[  157.225649][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'.
[  157.253196][T10827] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.257100][T10827] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.287388][T10829] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  157.418730][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'.
[  158.359135][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'.
[  158.430265][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'.
[  158.440302][T10867] syzkaller0: entered promiscuous mode
[  158.800400][T10889] netlink: 'syz.3.1642': attribute type 25 has an invalid length.
[  159.578433][T10913] netlink: 'syz.1.1648': attribute type 3 has an invalid length.
[  159.792461][T10934] netlink: 'syz.2.1656': attribute type 6 has an invalid length.
[  159.935532][T10956] __nla_validate_parse: 71 callbacks suppressed
[  159.935548][T10956] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1659'.
[  159.949468][T10958] netlink: 'syz.1.1664': attribute type 11 has an invalid length.
[  160.169329][T10976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.174936][T10976] syzkaller0: entered allmulticast mode
[  160.180111][T10976] tipc: Resetting bearer <eth:syzkaller0>
[  160.294554][T10982] sctp: [Deprecated]: syz.2.1674 (pid 10982) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.294554][T10982] Use struct sctp_sack_info instead
[  160.409415][T10986] SET target dimension over the limit!
[  160.798169][T10997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'.
[  160.838923][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1681'.
[  160.956271][T10976] tipc: Disabling bearer <eth:syzkaller0>
[  161.020679][T11011] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1686'.
[  161.024375][T11011] xt_policy: too many policy elements
[  161.049831][T11013] xt_hashlimit: size too large, truncated to 1048576
[  161.125179][T11017] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1687'.
[  161.160395][T11020] : entered promiscuous mode
[  161.289560][T11023] netlink: 'syz.1.1690': attribute type 21 has an invalid length.
[  161.344856][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'.
[  161.348749][T11029] openvswitch: netlink: Flow key attr not present in new flow.
[  161.436302][T11035] openvswitch: netlink: Missing key (keys=40, expected=80)
[  161.439244][T11036] openvswitch: netlink: Missing key (keys=40, expected=80)
[  161.440936][T11037] netlink: 'syz.1.1696': attribute type 3 has an invalid length.
[  161.445217][T11037] netlink: 'syz.1.1696': attribute type 3 has an invalid length.
[  161.660989][T11047] netlink: 'syz.1.1699': attribute type 7 has an invalid length.
[  161.668385][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  161.761479][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  161.774336][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  161.779186][T11059] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1702'.
[  163.859595][T11111] netlink: 'syz.2.1718': attribute type 2 has an invalid length.
[  164.756020][T11192] netlink: 'syz.2.1748': attribute type 32 has an invalid length.
[  164.856720][T11201] vcan0: tx drop: invalid sa for name 0xfbfffffffffffffd
[  164.975412][T11220] __nla_validate_parse: 9 callbacks suppressed
[  164.975424][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'.
[  165.129023][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'.
[  165.140946][T11227] syzkaller0: left promiscuous mode
[  165.144063][T11227] syzkaller0: left allmulticast mode
[  165.163863][T11235] netlink: 'syz.2.1764': attribute type 3 has an invalid length.
[  165.261124][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'.
[  165.523441][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.764974][T11257] netlink: 'syz.3.1773': attribute type 10 has an invalid length.
[  165.767644][T11257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1773'.
[  165.770605][T11257] dummy0: entered promiscuous mode
[  165.772936][T11257] dummy0: entered allmulticast mode
[  165.775419][T11257] bridge0: port 3(dummy0) entered blocking state
[  165.777603][T11257] bridge0: port 3(dummy0) entered disabled state
[  165.790886][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'.
[  165.929501][T11268] IPv6: sit1: Disabled Multicast RS
[  165.986930][T11270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  166.073747][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'.
[  166.185908][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'.
[  166.241442][T11290] netlink: 'syz.3.1785': attribute type 32 has an invalid length.
[  166.258249][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'.
[  166.363559][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'.
[  166.732480][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'.
[  167.093185][T11345] xt_hashlimit: size too large, truncated to 1048576
[  167.147193][T11347] netlink: 'syz.1.1803': attribute type 49 has an invalid length.
[  167.315173][T11353] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  167.394492][T11356] batadv_slave_1: entered promiscuous mode
[  167.425785][T11357] batadv_slave_1: left promiscuous mode
[  167.465569][T11363] bridge0: port 3(dummy0) entered disabled state
[  167.474559][T11363] batman_adv: batadv0: Adding interface: dummy0
[  167.477126][T11363] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.487757][T11363] batman_adv: batadv0: Interface activated: dummy0
[  167.531289][T11367] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  168.697929][T11447] netlink: 'syz.1.1837': attribute type 2 has an invalid length.
[  168.707415][T11447] : entered promiscuous mode
[  169.482997][T11490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.487358][T11490] syzkaller0: entered promiscuous mode
[  169.489427][T11490] syzkaller0: entered allmulticast mode
[  169.504659][T11490] netlink: 'syz.3.1854': attribute type 1 has an invalid length.
[  169.648453][T11489] tipc: Resetting bearer <eth:syzkaller0>
[  169.686074][T11489] tipc: Disabling bearer <eth:syzkaller0>
[  169.787014][T11506] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  169.803618][T11506] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  170.312875][T11556] __nla_validate_parse: 9 callbacks suppressed
[  170.312894][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'.
[  170.878750][T11586] netlink: 'syz.3.1892': attribute type 1 has an invalid length.
[  170.881160][T11586] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1892'.
[  170.887997][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'.
[  170.924280][T11588] xt_l2tp: unknown flags: 10
[  171.018290][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'.
[  171.019156][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'.
[  171.028898][T11599] macvlan0: entered promiscuous mode
[  171.031135][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'.
[  171.253071][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  171.426232][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'.
[  171.429033][T11631] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  171.479986][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.545274][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[  171.549166][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[  171.554720][T11647] netlink: 'syz.2.1915': attribute type 1 has an invalid length.
[  171.558117][T11647] netlink: 'syz.2.1915': attribute type 1 has an invalid length.
[  171.561265][T11647] netlink: 'syz.2.1915': attribute type 2 has an invalid length.
[  173.061477][T11739] sctp: [Deprecated]: syz.3.1951 (pid 11739) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.061477][T11739] Use struct sctp_sack_info instead
[  173.069591][T11739] netlink: 'syz.3.1951': attribute type 26 has an invalid length.
[  173.111022][T11739] xt_CT: No such helper "snmp"
[  173.119400][T11742] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  173.127793][T11742] netlink: 'syz.1.1952': attribute type 26 has an invalid length.
[  173.135313][T11742] netlink: 'syz.1.1952': attribute type 2 has an invalid length.
[  173.466290][T11775] syz_tun: entered allmulticast mode
[  173.482343][T11774] syz_tun: left allmulticast mode
[  174.279155][T11817] xt_SECMARK: invalid mode: 0
[  174.487224][   T33] audit: type=1107 audit(1752844356.642:7): pid=11816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  174.665188][T11825] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  174.745537][T11832] No such timeout policy "syz1"
[  175.106390][T11854] netlink: 'syz.1.1992': attribute type 3 has an invalid length.
[  175.109010][T11854] netlink: 'syz.1.1992': attribute type 3 has an invalid length.
[  175.687295][T11905] __nla_validate_parse: 19 callbacks suppressed
[  175.687316][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'.
[  175.931311][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'.
[  175.986009][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'.
[  176.166759][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'.
[  176.360388][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  176.455718][T11966] smc: net device bond0 applied user defined pnetid SYZ2
[  176.487008][T11969] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  176.551498][T11972] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2018'.
[  176.560893][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'.
[  176.578835][T11972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.845520][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'.
[  176.885873][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  176.925312][T11999] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2026'.
[  177.262882][T12020] netlink: 'syz.1.2034': attribute type 1 has an invalid length.
[  177.761032][T12060] netlink: 'syz.2.2046': attribute type 11 has an invalid length.
[  178.296447][T12090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  178.365542][T12095] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  178.439642][T12099] raw_sendmsg: syz.1.2064 forgot to set AF_INET. Fix it!
[  178.966752][T12150] netlink: 'syz.1.2081': attribute type 11 has an invalid length.
[  179.335015][T12178] netlink: 'syz.1.2091': attribute type 3 has an invalid length.
[  179.410325][T12184] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  179.437932][T12184] 8021q: adding VLAN 0 to HW filter on device bond6
[  179.450481][T12184] vlan2: entered allmulticast mode
[  179.452779][T12184] geneve1: entered allmulticast mode
[  179.456292][T12184] bond6: (slave vlan2): Opening slave failed
[  179.495785][T12193] netlink: 'syz.1.2093': attribute type 7 has an invalid length.
[  179.498204][T12193] netlink: 'syz.1.2093': attribute type 8 has an invalid length.
[  179.991205][T12225] openvswitch: netlink: Message has 206 unknown bytes.
[  180.004682][T12227] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  180.481002][T12277] netlink: 'syz.3.2123': attribute type 4 has an invalid length.
[  180.669080][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.672932][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.676727][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.680467][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.687086][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.691097][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  180.695654][T12294] sock: sock_set_timeout: `syz.2.2128' (pid 12294) tries to set negative timeout
[  183.020136][T12309] __nla_validate_parse: 28 callbacks suppressed
[  183.020156][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'.
[  183.028590][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'.
[  183.038388][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'.
[  183.095609][T12312] netlink: 'syz.1.2131': attribute type 1 has an invalid length.
[  183.100255][T12317] netlink: 608 bytes leftover after parsing attributes in process `syz.3.2135'.
[  183.101025][T12319] netlink: 'syz.1.2131': attribute type 1 has an invalid length.
[  183.125313][T12318] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.128115][T12318] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.131296][T12318] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.134566][T12318] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.137818][T12318] geneve2: entered promiscuous mode
[  183.396422][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'.
[  183.420506][T12340] netlink: 'syz.2.2143': attribute type 1 has an invalid length.
[  183.425820][T12340] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2143'.
[  183.430953][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'.
[  183.449129][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'.
[  183.609684][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'.
[  183.613134][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'.
[  184.025221][T12367] bridge: RTM_NEWNEIGH with invalid ether address
[  184.282939][T12384] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  184.517535][T12406] xt_l2tp: v2 sid > 0xffff: 4294901760
[  184.924183][T12446] netlink: 'syz.3.2186': attribute type 83 has an invalid length.
[  184.927609][T12446] xt_cgroup: path and classid specified
[  184.936788][T12446] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001
[  185.997948][T12496] tipc: Failed to remove unknown binding: 66,1,1/0:3142011966/3142011968
[  186.004086][T12496] tipc: Failed to remove unknown binding: 66,1,1/0:3142011966/3142011968
[  186.007108][T12496] tipc: Failed to remove unknown binding: 66,1,1/0:3142011966/3142011968
[  186.091446][T12502] netlink: 'syz.1.2203': attribute type 11 has an invalid length.
[  186.178340][T12511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.198728][T12511] syzkaller0: entered promiscuous mode
[  186.200498][T12511] syzkaller0: entered allmulticast mode
[  186.326207][T12516] netlink: 'syz.1.2208': attribute type 4 has an invalid length.
[  186.647684][   T33] audit: type=1800 audit(1752844368.802:8): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2211" name="memory.events" dev="tmpfs" ino=4161 res=0 errno=0
[  187.084590][T12581] netlink: 'syz.2.2229': attribute type 8 has an invalid length.
[  187.245603][T12596] net_ratelimit: 26 callbacks suppressed
[  187.245624][T12596] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  187.258297][T12596] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  187.750660][T12623] xt_l2tp: v2 sid > 0xffff: 4294901760
[  187.784211][T12623] netlink: 'syz.1.2244': attribute type 4 has an invalid length.
[  188.120616][T12645] __nla_validate_parse: 24 callbacks suppressed
[  188.120630][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'.
[  188.800420][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'.
[  188.940752][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'.
[  189.199105][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  189.267184][T12700] netlink: 'syz.2.2271': attribute type 2 has an invalid length.
[  189.284276][T12700] : entered promiscuous mode
[  189.327543][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'.
[  189.367822][T12705] netlink: 'syz.2.2273': attribute type 15 has an invalid length.
[  189.666788][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'.
[  189.748050][T12714] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  189.775940][T12714] bond5: entered promiscuous mode
[  189.778520][T12714] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.803482][T12714] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.806817][T12714] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  189.811029][T12714] bond5: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  189.819098][T12714] bond5: (slave vcan0): making interface the new active one
[  189.822422][T12714] vcan0: entered promiscuous mode
[  189.827240][T12714] bond5: (slave vcan0): Enslaving as an active interface with an up link
[  189.886295][T12725] macvlan0: left promiscuous mode
[  189.888294][T12725] tipc: Resetting bearer <eth:syzkaller0>
[  189.891235][T12725] syzkaller0: left promiscuous mode
[  189.903965][T12725] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.908741][T12725] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.914877][T12725] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.918288][T12725] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.921709][T12725] geneve2: left promiscuous mode
[  189.926492][T12725] bond5: left promiscuous mode
[  189.928578][T12725] vcan0: left promiscuous mode
[  189.930132][T12723] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2281'.
[  190.170462][T12747] netlink: 'syz.1.2288': attribute type 8 has an invalid length.
[  190.175114][T12749] netlink: 'syz.1.2288': attribute type 8 has an invalid length.
[  190.458044][T12765] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2293'.
[  190.609733][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'.
[  190.714128][T12783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2299'.
[  190.982268][T12801] netlink: 'syz.2.2306': attribute type 1 has an invalid length.
[  191.007710][T12801] nbd: socks must be embedded in a SOCK_ITEM attr
[  191.010594][T12801] block nbd1: shutting down sockets
[  191.055405][T12801] Cannot find add_set index 3 as target
[  191.065608][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  191.525886][T12852] sctp: [Deprecated]: syz.3.2320 (pid 12852) Use of int in max_burst socket option.
[  191.525886][T12852] Use struct sctp_assoc_value instead
[  191.789946][T12882] validate_nla: 1 callbacks suppressed
[  191.789962][T12882] netlink: 'syz.3.2331': attribute type 1 has an invalid length.
[  191.840242][T12882] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.876544][T12883] veth5: entered promiscuous mode
[  191.879606][T12884] erspan0: entered allmulticast mode
[  191.894585][T12884] bond0: (slave erspan0): making interface the new active one
[  191.899061][T12884] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  192.347394][T12913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.696532][T12931] xt_socket: unknown flags 0x8
[  192.860645][T12940] veth0_vlan: entered allmulticast mode
[  192.915558][T12940] : renamed from vlan0
[  193.019744][T12946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.022364][T12946] syzkaller0: entered promiscuous mode
[  193.024163][T12946] syzkaller0: entered allmulticast mode
[  193.043307][T12947] tipc: Resetting bearer <eth:syzkaller0>
[  193.070879][T12947] tipc: Disabling bearer <eth:syzkaller0>
[  193.279389][T12973] __nla_validate_parse: 16 callbacks suppressed
[  193.279411][T12973] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2363'.
[  193.355072][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'.
[  193.443813][T12983] !: renamed from dummy0
[  193.579624][T12997] netlink: 'syz.1.2370': attribute type 12 has an invalid length.
[  193.587890][T12997] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2370'.
[  193.614501][T13002] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  193.678853][T13008] netlink: 'syz.2.2373': attribute type 1 has an invalid length.
[  193.727889][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'.
[  193.819241][T13016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2376'.
[  193.935163][T13022] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2379'.
[  193.957605][T13023] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2379'.
[  194.120116][T13041] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.447927][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'.
[  194.574168][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2394'.
[  194.687957][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2396'.
[  195.829590][T13129] bond0: entered promiscuous mode
[  195.831320][T13129] bond_slave_0: entered promiscuous mode
[  195.833716][T13129] bond_slave_1: entered promiscuous mode
[  195.835737][T13129] batadv0: entered promiscuous mode
[  195.872064][T13133] : renamed from bond_slave_0
[  196.131479][ T5840] IPVS: starting estimator thread 0...
[  196.224499][T13152] IPVS: using max 61 ests per chain, 146400 per kthread
[  196.271207][T13166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.284173][T13166] syzkaller0: entered promiscuous mode
[  197.387427][T13237] syzkaller1: entered allmulticast mode
[  197.476707][T13244] netlink: 'syz.3.2454': attribute type 1 has an invalid length.
[  197.495565][T13244] 8021q: adding VLAN 0 to HW filter on device bond2
[  197.737030][T13265] xt_CT: No such helper "netbios-ns"
[  197.885335][T13272] netlink: 'syz.1.2462': attribute type 1 has an invalid length.
[  198.356167][T13305] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  198.376833][T13305] 8021q: adding VLAN 0 to HW filter on device bond3
[  198.390683][T13305] bond3: (slave bridge4): making interface the new active one
[  198.400505][T13305] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  198.416200][T13305] gretap1: entered promiscuous mode
[  198.420859][T13305] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  198.549861][T13319] DL<Y: renamed from lo
[  199.380066][T13357] __nla_validate_parse: 21 callbacks suppressed
[  199.380084][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2488'.
[  199.434883][T13364] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2489'.
[  199.470555][T13369] Cannot find add_set index 0 as target
[  199.569355][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'.
[  199.874814][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'.
[  199.877927][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'.
[  199.881503][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'.
[  199.884498][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'.
[  200.058908][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2505'.
[  200.305691][T13416] tipc: Started in network mode
[  200.308156][T13416] tipc: Node identity 4aa3598a5fe4, cluster identity 4711
[  200.311293][T13416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.335276][T13416] syzkaller0: entered promiscuous mode
[  200.337580][T13416] syzkaller0: entered allmulticast mode
[  200.345913][T13416] tipc: Resetting bearer <eth:syzkaller0>
[  200.519483][T13414] syzkaller1: entered promiscuous mode
[  200.522126][T13414] syzkaller1: entered allmulticast mode
[  200.580312][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[  201.211919][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'.
[  201.325393][ T5840] tipc: Node number set to 356997514
[  203.423581][T13445] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.426804][T13445] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.430020][T13445] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.433904][T13445] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.437454][T13445] geneve3: entered promiscuous mode
[  203.880293][T13481] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  204.248382][T13508] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  204.248417][T13512] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  204.256923][T13512] !: entered promiscuous mode
[  204.258934][T13512] !: entered allmulticast mode
[  204.270361][T13512] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  204.283801][T13508] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  204.341775][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  204.497877][T13525] team0: No ports can be present during mode change
[  204.502339][T13525] netlink: 'syz.3.2541': attribute type 9 has an invalid length.
[  205.161499][T13552] __nla_validate_parse: 8 callbacks suppressed
[  205.161517][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'.
[  205.249399][T13555] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2550'.
[  205.470568][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2554'.
[  205.613192][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'.
[  205.948989][T13601] netlink: 'syz.3.2566': attribute type 11 has an invalid length.
[  205.969140][T13601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2566'.
[  205.977207][T13601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.991253][T13607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2566'.
[  205.996757][T13608] netlink: 'syz.3.2566': attribute type 11 has an invalid length.
[  205.999982][T13607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.324363][T13635] netlink: 'syz.1.2576': attribute type 10 has an invalid length.
[  206.327559][T13635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2576'.
[  206.333591][T13635] !: left allmulticast mode
[  206.349029][T13635] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  206.378989][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'.
[  206.639621][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2585'.
[  207.041518][T13688] team0: Device gtp0 is of different type
[  207.076622][ T5842] Bluetooth: hci3: link tx timeout
[  207.078786][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  207.083718][ T5849] Bluetooth: hci3: link tx timeout
[  207.086410][ T5849] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  207.137956][T13697] netlink: 'syz.2.2594': attribute type 9 has an invalid length.
[  207.140366][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'.
[  207.358783][T13711] sit1: entered promiscuous mode
[  207.360728][T13711] sit1: entered allmulticast mode
[  207.435151][T13716] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  207.652289][T13733] netlink: 'syz.1.2604': attribute type 1 has an invalid length.
[  207.655436][T13733] netlink: 'syz.1.2604': attribute type 2 has an invalid length.
[  207.888762][T13739] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  208.461137][T13759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.495918][T13759] Bluetooth: MGMT ver 1.23
[  208.611888][T13771] syzkaller0: left promiscuous mode
[  208.614277][T13771] syzkaller0: left allmulticast mode
[  209.141849][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  209.539511][T13803] xt_l2tp: invalid flags combination: 4
[  209.635102][T13807] openvswitch: netlink: Missing key (keys=40, expected=100)
[  209.885891][T13829] batadv_slave_0: entered promiscuous mode
[  209.889201][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.932641][T13829] batadv_slave_0 (unregistering): left promiscuous mode
[  209.935670][T13829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.163175][T13848] __nla_validate_parse: 80 callbacks suppressed
[  210.163193][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'.
[  210.185693][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'.
[  210.189170][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2649'.
[  210.229865][T13851] validate_nla: 1 callbacks suppressed
[  210.229883][T13851] netlink: 'syz.3.2651': attribute type 1 has an invalid length.
[  210.251707][T13844] netlink: 'syz.2.2649': attribute type 21 has an invalid length.
[  210.268785][T13638] IPVS: starting estimator thread 0...
[  210.279551][T13851] bond5: entered promiscuous mode
[  210.284437][T13851] bond5: entered allmulticast mode
[  210.351789][T13856] IPVS: using max 53 ests per chain, 127200 per kthread
[  210.537637][T13869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.576614][ T5869] IPVS: stop unused estimator thread 0...
[  210.678033][T13869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.780903][T13869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.884902][T13869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.940896][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'.
[  211.003276][T13869] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.025953][T13869] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.043091][T13869] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.048532][T13885] netlink: 'syz.2.2662': attribute type 16 has an invalid length.
[  211.053194][T13885] netlink: 'syz.2.2662': attribute type 3 has an invalid length.
[  211.057212][T13869] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.057894][T13885] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2662'.
[  211.229520][T13895] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2666'.
[  211.233569][T13895] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2666'.
[  211.384764][T13905] netlink: 'syz.1.2671': attribute type 1 has an invalid length.
[  211.389423][T13905] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2671'.
[  211.449575][T13911] netlink: 'syz.1.2674': attribute type 21 has an invalid length.
[  211.454655][T13911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2674'.
[  211.458253][T13911] netlink: 'syz.1.2674': attribute type 5 has an invalid length.
[  211.461253][T13911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2674'.
[  211.798881][T13947] IPVS: length: 150 != 8
[  212.553644][ T5870] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  212.556966][ T5870] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  212.584050][  T974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  212.645425][T13981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.742196][  T974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  212.819591][T13995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  212.970013][T14002] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  213.068602][T14016] tipc: Resetting bearer <eth:syzkaller0>
[  213.301949][  T974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  213.576464][T14071] veth5: entered promiscuous mode
[  213.586061][T14077] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  213.898243][T14095] netlink: 'syz.2.2734': attribute type 2 has an invalid length.
[  214.773812][T14112] team_slave_0: left promiscuous mode
[  214.776050][T14112] team_slave_0: left allmulticast mode
[  214.797882][T14112] team0 (unregistering): Port device team_slave_0 removed
[  214.801069][T14112] team_slave_1: left promiscuous mode
[  214.805806][T14112] team_slave_1: left allmulticast mode
[  214.815263][T14112] team0 (unregistering): Port device team_slave_1 removed
[  215.149248][T14145] netlink: 'syz.2.2745': attribute type 39 has an invalid length.
[  215.296176][T14158] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.297161][T14158] netlink: 'syz.1.2749': attribute type 5 has an invalid length.
[  215.320839][T14158] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  215.485822][T14161] __nla_validate_parse: 13 callbacks suppressed
[  215.485834][T14161] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2751'.
[  215.622134][T14171] netlink: 'syz.1.2755': attribute type 3 has an invalid length.
[  215.798709][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2763'.
[  215.813270][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2763'.
[  215.851758][T14199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2765'.
[  216.206547][T14238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2777'.
[  216.266912][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  216.272028][T14230] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2777'.
[  216.326642][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'.
[  216.511803][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  216.529573][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'.
[  216.606355][T14269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.611229][T14268] netlink: 'syz.3.2789': attribute type 1 has an invalid length.
[  216.615768][T14268] netlink: 'syz.3.2789': attribute type 11 has an invalid length.
[  216.619898][T14268] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2789'.
[  217.333910][T14302] netlink: 'syz.3.2798': attribute type 15 has an invalid length.
[  217.391056][T14310] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  217.411182][T14312] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  217.450773][T14316] pim6reg: entered allmulticast mode
[  217.490936][T14320] netlink: 'syz.1.2804': attribute type 1 has an invalid length.
[  217.515535][T14320] 8021q: adding VLAN 0 to HW filter on device bond7
[  217.521048][T14320] netlink: 'syz.1.2804': attribute type 12 has an invalid length.
[  217.524315][T14320] netlink: 'syz.1.2804': attribute type 14 has an invalid length.
[  217.706289][T14338] netlink: 'syz.2.2810': attribute type 1 has an invalid length.
[  217.808750][T14347] veth1_macvtap: left promiscuous mode
[  217.811013][T14347] macsec0: entered allmulticast mode
[  217.823095][T14347] veth1_macvtap: entered promiscuous mode
[  217.826649][T14347] veth1_macvtap: entered allmulticast mode
[  217.830029][T14347] macsec0: left allmulticast mode
[  217.832046][T14347] veth1_macvtap: left allmulticast mode
[  218.135056][T14370] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  218.182311][T14370] nbd: socks must be embedded in a SOCK_ITEM attr
[  218.184949][T14370] block nbd1: shutting down sockets
[  218.368232][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.370676][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.423419][ T5842] Bluetooth: hci3: command 0x0405 tx timeout
[  218.706561][T14418] unsupported nla_type 133
[  218.771319][T14422] syzkaller0: Caught tx_queue_len zero misconfig
[  218.821029][T14429] openvswitch: netlink: Key 6 has unexpected len 241 expected 2
[  219.125333][T14454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  219.481858][   T33] audit: type=1800 audit(1752844401.632:9): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2851" name=33FFFF dev="tmpfs" ino=5368 res=0 errno=0
[  219.885534][T14497] xt_hashlimit: size too large, truncated to 1048576
[  220.097321][T14523] 8021q: VLANs not supported on sit0
[  220.214967][T14532] dvmrp0: entered allmulticast mode
[  220.287026][T14536] Cannot find add_set index 0 as target
[  220.373312][T14540] validate_nla: 3 callbacks suppressed
[  220.373330][T14540] netlink: 'syz.1.2875': attribute type 1 has an invalid length.
[  220.449765][T14550] netlink: 'syz.3.2878': attribute type 1 has an invalid length.
[  220.454703][T14550] netlink: 'syz.3.2878': attribute type 3 has an invalid length.
[  220.457311][T14550] netlink: 'syz.3.2878': attribute type 1 has an invalid length.
[  220.459641][T14550] NCSI netlink: No device for ifindex 0
[  220.788410][T14579] __nla_validate_parse: 23 callbacks suppressed
[  220.788421][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'.
[  220.908619][T14585] openvswitch: netlink: IP tunnel TTL not specified.
[  221.085401][T14587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2889'.
[  221.312250][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2892'.
[  221.315907][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2892'.
[  221.537532][T14603] macsec1: entered promiscuous mode
[  221.539756][T14603] macsec1: entered allmulticast mode
[  222.446307][T14651] xt_hashlimit: size too large, truncated to 1048576
[  222.829265][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'.
[  222.834110][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'.
[  222.948163][T14670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2913'.
[  223.554140][T14711] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2925'.
[  224.191806][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  224.209838][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'.
[  224.567702][T14736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2935'.
[  224.584126][T14736] pim6reg1: entered promiscuous mode
[  224.586576][T14736] pim6reg1: entered allmulticast mode
[  225.087307][T14759] batadv_slave_1: entered promiscuous mode
[  225.105232][T14757] batadv_slave_1: left promiscuous mode
[  225.142777][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  225.179475][T14766] netlink: 'syz.3.2946': attribute type 2 has an invalid length.
[  225.592469][T14806] x_tables: duplicate underflow at hook 1
[  225.898671][T14837] 8021q: adding VLAN 0 to HW filter on device bond6
[  226.008780][T14849] __nla_validate_parse: 8 callbacks suppressed
[  226.008796][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'.
[  226.570235][T14881] netlink: 'syz.1.2991': attribute type 1 has an invalid length.
[  226.603426][T14881] bond8: entered promiscuous mode
[  226.606942][T14881] bond8: entered allmulticast mode
[  226.610284][T14881] 8021q: adding VLAN 0 to HW filter on device bond8
[  226.721951][T14883] netlink: 'syz.1.2991': attribute type 4 has an invalid length.
[  226.755856][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'.
[  226.759266][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'.
[  226.906530][T14895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2998'.
[  226.910248][T14895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2998'.
[  226.978580][T14898] syzkaller1: entered promiscuous mode
[  226.980645][T14898] syzkaller1: entered allmulticast mode
[  227.203268][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3005'.
[  227.415646][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'.
[  227.660404][T14938] set match dimension is over the limit!
[  227.699790][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3019'.
[  227.991248][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3025'.
[  229.593879][T14989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3031'.
[  229.819248][T15006] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  230.114645][T15025] netlink: 'syz.1.3043': attribute type 8 has an invalid length.
[  230.191473][T15043] veth0: entered promiscuous mode
[  230.300137][T15052] netlink: 'syz.2.3052': attribute type 10 has an invalid length.
[  230.393648][T15063] netlink: 'syz.3.3056': attribute type 10 has an invalid length.
[  230.892801][T15108] netlink: 'syz.3.3072': attribute type 2 has an invalid length.
[  230.895975][T15108] nbd: must specify a device to reconfigure
[  231.088942][T15128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.103137][T15128] syzkaller1: entered promiscuous mode
[  231.105292][T15128] syzkaller1: entered allmulticast mode
[  231.180858][T15138] netlink: 'syz.1.3081': attribute type 4 has an invalid length.
[  231.188643][T15138] netlink: 'syz.1.3081': attribute type 4 has an invalid length.
[  231.216845][T15140] netlink: 'syz.2.3082': attribute type 1 has an invalid length.
[  231.216878][T15141] netlink: 'syz.2.3082': attribute type 1 has an invalid length.
[  231.219261][T15140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.224954][T15141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.376598][T15157] __nla_validate_parse: 14 callbacks suppressed
[  231.376614][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'.
[  231.410512][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3087'.
[  231.468420][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3090'.
[  231.709931][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'.
[  231.740960][T15194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3093'.
[  231.839406][T15204] xt_l2tp: unknown flags: 10
[  231.845938][T15205] xt_l2tp: unknown flags: 10
[  231.847342][T15203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3099'.
[  231.851322][T15203] nbd: must specify at least one socket
[  231.960820][T15213] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3099'.
[  232.023299][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  232.194196][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'.
[  232.619246][T15241] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  232.619265][T15240] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  232.656098][T15244] netlink: 'syz.3.3113': attribute type 11 has an invalid length.
[  232.665888][T15241] 8021q: adding VLAN 0 to HW filter on device bond9
[  232.706608][T15240] bond9: (slave veth7): Enslaving as an active interface with a down link
[  232.719809][T15240] vlan2: entered allmulticast mode
[  232.725061][T15240] bond9: entered allmulticast mode
[  232.728610][T15240] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  232.848616][T15251] xt_CT: No such helper "snmp"
[  232.866810][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'.
[  233.178528][T15291] netlink: 'syz.3.3126': attribute type 4 has an invalid length.
[  233.183771][T15291] netlink: 'syz.3.3126': attribute type 4 has an invalid length.
[  233.248014][T15295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3129'.
[  233.373538][T15306] netlink: 'syz.2.3131': attribute type 5 has an invalid length.
[  233.480945][T15314] netlink: 'syz.1.3135': attribute type 1 has an invalid length.
[  233.726414][T15326] netlink: 'syz.1.3138': attribute type 11 has an invalid length.
[  234.166844][T15359] netem: incorrect ge model size
[  234.168730][T15359] netem: change failed
[  234.309388][T15374] netlink: 'syz.2.3154': attribute type 7 has an invalid length.
[  234.376450][T15380] netlink: 'syz.3.3157': attribute type 14 has an invalid length.
[  234.639457][T15407] openvswitch: netlink: Message has 4784 unknown bytes.
[  234.649529][T15407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.234769][T15456] xt_l2tp: v2 doesn't support IP mode
[  235.950653][T15480] openvswitch: netlink: Unknown nsh attribute 0
[  235.954397][T15480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.986558][T15479] bond10: entered promiscuous mode
[  235.989116][T15479] 8021q: adding VLAN 0 to HW filter on device bond10
[  236.091826][T15479] bond10 (unregistering): Released all slaves
[  236.500065][T15523] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  236.524373][T15523] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  236.528637][T15523] __nla_validate_parse: 22 callbacks suppressed
[  236.528651][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'.
[  236.593017][T15534] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3208'.
[  236.609752][T15534] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  236.862265][T15543] gretap2: entered promiscuous mode
[  236.864449][T15543] gretap2: entered allmulticast mode
[  236.868416][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'.
[  237.034008][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3214'.
[  237.061873][T15549] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  237.206590][T15569] geneve4: entered promiscuous mode
[  237.227776][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'.
[  237.230860][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3214'.
[  237.233997][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'.
[  237.289873][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3219'.
[  237.353605][T15583] team0: Unable to change to the same mode the team is in
[  237.356742][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'.
[  237.396866][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  237.638836][T15611] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  237.852694][T15628] validate_nla: 1 callbacks suppressed
[  237.852709][T15628] netlink: 'syz.3.3239': attribute type 10 has an invalid length.
[  237.864178][T15634] tipc: Resetting bearer <eth:syzkaller0>
[  237.866775][T15634] tipc: Resetting bearer <eth:syzkaller0>
[  237.896611][T15630] tipc: Resetting bearer <eth:syzkaller0>
[  237.951365][T15630] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.960409][T15630] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.970571][T15630] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.985514][T15630] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.518958][T15663] sctp: [Deprecated]: syz.1.3249 (pid 15663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.518958][T15663] Use struct sctp_sack_info instead
[  238.649464][T15673] netlink: 'syz.2.3254': attribute type 10 has an invalid length.
[  238.687452][T15676] netlink: 'syz.3.3253': attribute type 5 has an invalid length.
[  238.692743][T15676] syzkaller0: entered promiscuous mode
[  238.694942][T15676] syzkaller0: entered allmulticast mode
[  238.841667][T15692] macsec1: entered promiscuous mode
[  238.845285][T15692] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  238.848852][T15692] macsec1: entered allmulticast mode
[  238.850489][T15692] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  238.871267][T15694] Cannot find add_set index 2 as target
[  239.222086][T15727] ipt_ECN: cannot use operation on non-tcp rule
[  239.674864][T15752] netlink: 'syz.2.3280': attribute type 2 has an invalid length.
[  240.560748][T15805] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  240.636274][ T5869] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  240.820382][T15821] 8021q: adding VLAN 0 to HW filter on device bond10
[  240.908537][T15826] netlink: 'syz.1.3303': attribute type 21 has an invalid length.
[  241.433715][T15831] Cannot find del_set index 65 as target
[  241.586159][T15845] __nla_validate_parse: 25 callbacks suppressed
[  241.586170][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'.
[  241.592150][T15845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3311'.
[  241.596078][T15845] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3311'.
[  241.716082][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'.
[  241.790456][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'.
[  241.880506][T15869] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  241.912000][T15869] bond7: entered promiscuous mode
[  241.915640][T15869] bond7: entered allmulticast mode
[  241.917767][T15869] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.926550][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3319'.
[  242.009750][T15880] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3322'.
[  242.016536][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'.
[  242.088065][T15883] sctp: [Deprecated]: syz.3.3324 (pid 15883) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.088065][T15883] Use struct sctp_sack_info instead
[  242.207431][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'.
[  242.427290][T15899] bond0: entered promiscuous mode
[  242.429493][T15899] erspan0: entered promiscuous mode
[  242.433911][T15899] bond0: left promiscuous mode
[  242.436184][T15899] erspan0: left promiscuous mode
[  242.771982][T15907] lo: tun_chr_ioctl cmd 1074025677
[  242.774079][T15907] lo: linktype set to 804
[  242.994732][T15915] netlink: 'syz.1.3335': attribute type 10 has an invalid length.
[  242.998175][T15915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3335'.
[  243.339635][T15924] x_tables: duplicate underflow at hook 3
[  243.525375][T15944] netlink: 'syz.1.3342': attribute type 1 has an invalid length.
[  243.528606][T15944] netlink: 'syz.1.3342': attribute type 1 has an invalid length.
[  243.675902][T15963] Cannot find add_set index 2 as target
[  243.680503][T15963] openvswitch: netlink: IP tunnel dst address not specified
[  244.573010][T15992] IPv6: NLM_F_REPLACE set, but no existing node found!
[  245.210609][T16042] kthread_run failed with err -4
[  245.259055][T16050] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  245.265074][T16050] netlink: 'syz.2.3376': attribute type 4 has an invalid length.
[  245.269044][T16050] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  245.275550][T16050] netlink: 'syz.2.3376': attribute type 4 has an invalid length.
[  245.280315][T16050] bond0: up delay (65536) is not a multiple of miimon (3), value rounded to 65535 ms
[  245.409647][T16065] netlink: 'syz.2.3379': attribute type 4 has an invalid length.
[  245.955345][T16087] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  246.080025][T16114] netlink: 'syz.3.3396': attribute type 2 has an invalid length.
[  246.614269][T16145] __nla_validate_parse: 15 callbacks suppressed
[  246.614293][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'.
[  246.734750][T16158] netlink: 'syz.1.3410': attribute type 1 has an invalid length.
[  246.738309][T16158] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3410'.
[  246.779922][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3409'.
[  246.824718][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3411'.
[  246.869958][T16162] bond0: (slave bond_slave_0): Releasing backup interface
[  246.875746][T16162] bond_slave_0 (unregistering): left promiscuous mode
[  246.954137][T16166] gtp0: entered promiscuous mode
[  246.956192][T16166] gtp0: entered allmulticast mode
[  247.236686][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'.
[  247.239514][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'.
[  247.253937][T16188] smc: net device bond0 applied user defined pnetid SYZ2
[  247.266034][T16186] smc: net device bond0 erased user defined pnetid SYZ2
[  247.311678][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'.
[  247.314648][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'.
[  247.388635][T16197] IPVS: Error connecting to the multicast addr
[  247.438832][T16204] ip6t_srh: unknown srh match flags  4000
[  247.464963][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3427'.
[  247.511897][T16207] syzkaller0: left promiscuous mode
[  247.514002][T16207] syzkaller0: left allmulticast mode
[  247.516673][T16207] tipc: Resetting bearer <eth:syzkaller0>
[  247.586063][T16217] tipc: Cannot configure node identity twice
[  247.590666][T16219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'.
[  247.599255][T16220] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  247.976800][T16247] gretap0: entered promiscuous mode
[  247.980827][T16247] gretap0: left promiscuous mode
[  248.414895][T16282] validate_nla: 1 callbacks suppressed
[  248.414911][T16282] netlink: 'syz.3.3449': attribute type 1 has an invalid length.
[  248.449449][T16282] bond8: entered promiscuous mode
[  248.454634][T16282] bond8: entered allmulticast mode
[  249.167198][T16317] Cannot find del_set index 65 as target
[  249.445292][T16347] netlink: 'syz.1.3467': attribute type 6 has an invalid length.
[  249.447960][T16347] netlink: 'syz.1.3467': attribute type 7 has an invalid length.
[  249.450706][T16347] netlink: 'syz.1.3467': attribute type 8 has an invalid length.
[  249.656904][T16366] netlink: 'syz.1.3474': attribute type 12 has an invalid length.
[  249.749632][T16370] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  249.866795][T16378] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  249.872028][T16378] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  249.977421][T16384] bridge0: port 1(gretap0) entered blocking state
[  249.980285][T16384] bridge0: port 1(gretap0) entered disabled state
[  249.985114][T16384] gretap0: entered allmulticast mode
[  249.989634][T16384] gretap0: entered promiscuous mode
[  250.275179][T16394] xt_bpf: check failed: parse error
[  250.544447][T16406] netlink: 'syz.3.3486': attribute type 2 has an invalid length.
[  250.956639][T16428] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  250.960088][T16428] CPU: 0 UID: 0 PID: 16428 Comm: syz.1.3493 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  250.960109][T16428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.960119][T16428] Call Trace:
[  250.960126][T16428]  <TASK>
[  250.960163][T16428]  dump_stack_lvl+0x189/0x250
[  250.960192][T16428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.960209][T16428]  ? __pfx__printk+0x10/0x10
[  250.960229][T16428]  ? kernfs_path_from_node+0x2c/0x260
[  250.960243][T16428]  ? kernfs_path_from_node+0x2c/0x260
[  250.960254][T16428]  ? kernfs_path_from_node+0x2c/0x260
[  250.960268][T16428]  ? kernfs_path_from_node+0x22c/0x260
[  250.960281][T16428]  ? kernfs_path_from_node+0x2c/0x260
[  250.960297][T16428]  sysfs_warn_dup+0x8e/0xa0
[  250.960320][T16428]  sysfs_do_create_link_sd+0xc0/0x110
[  250.960336][T16428]  device_add_class_symlinks+0x1cf/0x240
[  250.960362][T16428]  device_add+0x475/0xb50
[  250.960386][T16428]  wiphy_register+0x199a/0x26b0
[  250.960420][T16428]  ? __pfx_wiphy_register+0x10/0x10
[  250.960437][T16428]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  250.960475][T16428]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  250.960500][T16428]  ieee80211_register_hw+0x33e1/0x4120
[  250.960535][T16428]  ? ieee80211_register_hw+0x14d1/0x4120
[  250.960562][T16428]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  250.960585][T16428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  250.960613][T16428]  ? __hrtimer_setup+0x187/0x210
[  250.960631][T16428]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  250.960657][T16428]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  250.960701][T16428]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  250.960719][T16428]  ? trace_kmalloc+0x1f/0xd0
[  250.960739][T16428]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  250.960758][T16428]  ? kstrndup+0xbf/0x160
[  250.960780][T16428]  hwsim_new_radio_nl+0xea4/0x1b10
[  250.960800][T16428]  ? __pfx___nla_validate_parse+0x10/0x10
[  250.960829][T16428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.960858][T16428]  ? __nla_parse+0x40/0x60
[  250.960878][T16428]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  250.960904][T16428]  genl_family_rcv_msg_doit+0x215/0x300
[  250.960923][T16428]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  250.960948][T16428]  ? bpf_lsm_capable+0x9/0x20
[  250.960967][T16428]  ? security_capable+0x7e/0x2e0
[  250.960990][T16428]  genl_rcv_msg+0x60e/0x790
[  250.961011][T16428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.961025][T16428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.961105][T16428]  netlink_rcv_skb+0x208/0x470
[  250.961127][T16428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.961142][T16428]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  250.961176][T16428]  ? down_read+0x1ad/0x2e0
[  250.961195][T16428]  genl_rcv+0x28/0x40
[  250.961208][T16428]  netlink_unicast+0x75c/0x8e0
[  250.961237][T16428]  netlink_sendmsg+0x805/0xb30
[  250.961264][T16428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.961284][T16428]  ? aa_sock_msg_perm+0x94/0x160
[  250.961303][T16428]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.961318][T16428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.961337][T16428]  __sock_sendmsg+0x21c/0x270
[  250.961357][T16428]  ____sys_sendmsg+0x505/0x830
[  250.961381][T16428]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.961409][T16428]  ? import_iovec+0x74/0xa0
[  250.961432][T16428]  ___sys_sendmsg+0x21f/0x2a0
[  250.961454][T16428]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.961508][T16428]  ? __fget_files+0x2a/0x420
[  250.961522][T16428]  ? __fget_files+0x3a0/0x420
[  250.961544][T16428]  __x64_sys_sendmsg+0x19b/0x260
[  250.961566][T16428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.961598][T16428]  ? do_user_addr_fault+0xc8a/0x1390
[  250.961617][T16428]  ? do_syscall_64+0xbe/0x3b0
[  250.961637][T16428]  do_syscall_64+0xfa/0x3b0
[  250.961671][T16428]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.961687][T16428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.961702][T16428]  ? exc_page_fault+0x9f/0xf0
[  250.961718][T16428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.961732][T16428] RIP: 0033:0x7f59dff8e9a9
[  250.961747][T16428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.961779][T16428] RSP: 002b:00007f59e0e78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.961794][T16428] RAX: ffffffffffffffda RBX: 00007f59e01b6080 RCX: 00007f59dff8e9a9
[  250.961803][T16428] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  250.961812][T16428] RBP: 00007f59e0010d69 R08: 0000000000000000 R09: 0000000000000000
[  250.961820][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.961828][T16428] R13: 0000000000000001 R14: 00007f59e01b6080 R15: 00007ffd39ece9c8
[  250.961854][T16428]  </TASK>
[  251.375688][T16451] tc_dump_action: action bad kind
[  251.429107][T16453] netlink: 'syz.1.3502': attribute type 2 has an invalid length.
[  251.550187][T16462] netlink: 'syz.3.3505': attribute type 1 has an invalid length.
[  251.653580][T16470] __nla_validate_parse: 23 callbacks suppressed
[  251.653598][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'.
[  251.663940][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'.
[  251.667770][T16470] netlink: 'syz.2.3507': attribute type 15 has an invalid length.
[  251.716019][T16471] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3507'.
[  251.777056][T16476] netlink: 'syz.1.3509': attribute type 1 has an invalid length.
[  251.868838][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3514'.
[  251.990046][T16492] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3516'.
[  251.993141][T16492] tc_dump_action: action bad kind
[  252.116760][T16502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.172460][T16502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.245351][T16502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.309396][T16502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.321868][ T8324] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  252.416108][T16502] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.436606][T16502] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.451163][T16502] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.467023][T16502] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0

VM DIAGNOSIS:
13:13:54  Registers:
info registers vcpu 0

CPU#0
RAX=db6f35d27aadc100 RBX=ffffffff81976c78 RCX=db6f35d27aadc100 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=000000012b7ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306e616c77
XMM02=00007f132fd86478 00007f132fd86450 XMM03=00007f132fd86488 00007f132fd86480
XMM04=00007f13308ed100 00007f132fd86440 XMM05=00007f132fd86458 00007f132fd864a0
XMM06=00007f132fd86498 00007f132fd86490 XMM07=00007f132fd86488 00007f132fd86480
XMM08=1ad34d43efb818a9 6ab4de4c2461681c XMM09=0000000000000000 00007f132fc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff888105c708c0 RCX=ffff88801c688000 RDX=0000000000000000
RSI=ffffffff8b3b2532 RDI=ffffffff8e13f160 RBP=fffffffffffffe38 RSP=ffffc900001079b8
R8 =0000000000000000 R9 =ffffffff8b3b2532 R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=dffffc0000000000 R13=ffffffff8b3b2532 R14=ffffffff8e13f160 R15=0000000000000296
RIP=ffffffff819e4f84 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005614c72ba7e8 CR3=0000000026cb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555566f6d249 0000555566f6cd70 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000555566f364a8 XMM05=013f9c10000f8004 0100000008060601
XMM06=7dc4890100000000 0000000000001200 XMM07=0002ffaa00000000 0000000000000000
XMM08=0080fb002c980f00 97ec600000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
