last executing test programs:

1.18762122s ago: executing program 1 (id=3049):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa0100fd, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="f60c32504c18d1db514f7833ade7", 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)

1.187077234s ago: executing program 1 (id=3050):
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x4, 0xa, 0x104, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x307f4dea}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x7d56969635a1e377}, 0x4000810)
r0 = socket(0x5, 0x5, 0x4b7a)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', <r2=>0x0, 0x0, 0x8000, 0x1, 0xfffffffd, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x6c, 0x0, 0x0, [0x1, 0x5, 0x2, 0x2, 0xb]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x2, 0xde, 0xe3c5, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x40, 0x1, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', <r4=>0x0, 0x700, 0x10, 0xe, 0x9, {{0x1c, 0x4, 0x0, 0x3d, 0x70, 0x66, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x14, 0xbb, 0x1, 0xc, [{@empty, 0x2}, {@empty, 0x8}]}, @generic={0x86, 0x3, "06"}, @end, @rr={0x7, 0x2b, 0x83, [@broadcast, @rand_addr=0x64010100, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast1, @multicast1, @local, @remote]}, @rr={0x7, 0x7, 0xa2, [@broadcast]}, @generic={0x94, 0xf, "3a38d8211812f3fafa6f7478cd"}]}}}}})
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@private, @multicast2, <r5=>0x0}, &(0x7f00000004c0)=0xc)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x168, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000190)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000700)={{0x2, 0x4e24, @broadcast}, {0x306}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'})
r6 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000780)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000007c0)="c06819471407981e0186d3aaec5676b6198070061d06819941", 0x19}, {&(0x7f0000000800)="e1a420bc50d7c73bbbe920a5e8daabb32b1906ed2c41cf3cc04b94182f6b2b5a981f0497c92317148900c7c9d477a09591379fb206a989489b70191b5a545bff3ff4df4667bb7d9165dca5b00c0d58f0c5f8afdca698b101950521765e8bd6787a368a6464681a81482623661518348970c064a807829f84df4a4a53c8692642dde049fbc43a143bdaf4ba4fe3b77f3a44e25b3fae184e495f4e741ff82ad888e6b91ddc1bcfeb3fc3f26b8875a93eee8136e7db42c8c32fe84afafe65591eaef50d187239471f549d0a8f5af890", 0xce}, {&(0x7f0000000900)="8c1f27a9e2ba05afa75d7c31ebf67ccd6060292d8e03df0139fcf1fae0fac1582f22d1833320fd2cfd4ba23f5d12c82bc2a27c7180", 0x35}, {&(0x7f0000000940)="5524179824e40596f084a8511cb29b1034e9937bd7b3df5b44b34711dbcd0c116c2df86636ac44aaafd179b8d57f1f606443b534f649dc1a68fe21e088aa5c91118d49bea55b7ca08459f54390f9e56f3f4a7c8bba635535d7b121724bcc139c836829ecfbacdd5e7c789b6bcc8507e14c643172ffac", 0x76}, {&(0x7f00000009c0)="2fddb842bcd85c01635d46c26395b655ae4e6d8a5ef527c8d3bdf950fa6d77e356735210d20cf92ead6a3d09d09ddd285120658535600335efd3dfcf4e59d7c2137319e86f24980460d4e4713034edd97a042f4dc446484cbdcff8e866e4938be3b0758364c991eb3449c163", 0x6c}], 0x5, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x5, "46f799"}]}}}], 0x68}, 0x8000)
r7 = socket(0x29, 0x2, 0xfffffff9)
r8 = accept(r7, &(0x7f0000000b80), &(0x7f0000000c00)=0x80)
epoll_create1(0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7fffffff, 0x57}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20000004)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000d80)={'wg1\x00', <r11=>0x0})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000dc0)={0x0, 0x14e, 0x3}, 0x8)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x0, r9}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1f, 0x2, 0x4, 0x44, 0x11081, r12, 0x0, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000f00)="ce", 0x1, 0x840, &(0x7f0000000f40)={0xa, 0x4e22, 0xf, @private1, 0xe82e}, 0x1c)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000001040)={&(0x7f0000000f80), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c4}, 0x4000)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001100)={'lo\x00'})
sendmsg$nl_route(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@mpls_getroute={0x30, 0x1a, 0x20, 0x70bd25, 0x1d, {0x1c, 0x80, 0x80, 0x8, 0xfc, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x4e, 0x4, 0x9, r11}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240))
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r14, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008041}, 0x24000010)

1.110603117s ago: executing program 2 (id=3051):
socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5)
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4)
ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000440)={0x7f, 0x6})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x44061)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x300}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7c}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000054}, 0x800)

1.098084763s ago: executing program 1 (id=3052):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac14000000000d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfa1d7071b8b08a24211d2530205e1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x2400c804)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)="8639c74d1b79334265bb32c86463f0040000000000000056585aa950b1a214341400000000000000290000003e000000e0955702", 0x34)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = socket$inet6(0xa, 0x5, 0x2)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x769e40, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="6eb03e6570e489c5", 0x8}], 0x1}}], 0x1, 0x2000c000)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x41)
r9 = socket$caif_stream(0x25, 0x1, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x48, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000004}, 0x8800)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000640))
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x3ffff, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0x1f0}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000180)=0x7, 0x4)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r12, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1.039209226s ago: executing program 2 (id=3053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="814bb10cf9526c82affffa1459df247066fd5c1d4b685768e90600000000000000ed7299ef2a0b05653c135b357a6999919960ffd78016ec51dfe0aa61"], 0x28}}, 0x0)

960.691501ms ago: executing program 2 (id=3054):
r0 = socket$unix(0x1, 0x1, 0x0) (async)
unshare(0x20000400) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async)
recvmmsg(r3, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/218, 0xda}], 0x1, &(0x7f00000019c0)=""/149, 0x95}, 0x8}], 0x2, 0x140, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="350a8000f0ffffffb7080000000000007b8af8ff00000000b7034b508f96a89d7c07010000f8ffffffbfa400000000000007040000f0ffffff2278e0efe7d13907b702000008000000182300df91eef13bedd273107900", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018560000070000000000000000000000185000000d000000000000000000000095000000000000001832000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000280)='syzkaller\x00', 0xfffff801, 0x8, &(0x7f00000002c0)=""/8, 0x41100, 0x4e, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x5, 0xec6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0xffffffff, 0x4}, {0x5, 0x2, 0x1}, {0x5, 0x1, 0x10, 0x1f}, {0x2, 0x5, 0x3, 0x4}, {0x1, 0x1, 0xc}, {0x1, 0x2, 0x6}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x1}, 0x94) (async)
shutdown(r1, 0xfffffffffffffffd)
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) (async)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000001, 0x10010, r4, 0x51780000) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'veth0_virt_wifi\x00', {}, 0x3})

891.092402ms ago: executing program 2 (id=3055):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'macvlan0\x00'})

890.464566ms ago: executing program 1 (id=3056):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
unshare(0x2a020400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8954, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
close(r0)

830.530932ms ago: executing program 2 (id=3057):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = getpid()
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r6, r7, 0x0, 0x0, 0x0}, 0x30)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r8)
ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x10000000, 0x0, 0x2, 0x9, 0x3}, 0x20)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x10}, 0x10000000, 0x0, 0x1, 0xa, 0x3}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getlink={0x158, 0x12, 0x20, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x2a00}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}, @IFLA_VF_PORTS={0x8c, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8a50}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "deeda3df6f82eaca9dfdd51a4e544413"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ce08c9fd6f91305c4a9ac11848f38983"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fac72040f5bd7b8dae842ed6ce18dc19"}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "010db52298d7f9ffb8fdf5f501fd3c6e"}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_CARRIER={0x5, 0x21, 0x56}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'pimreg\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'vlan0\x00'}]}]}, 0x158}}, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)

767.451585ms ago: executing program 1 (id=3059):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000011f98859d0c922296f000008000a000000000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) (async)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

720.410005ms ago: executing program 2 (id=3061):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$isdn(0x22, 0x3, 0x21)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x200})
connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)

716.996139ms ago: executing program 1 (id=3062):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r6, @ANYBLOB="140001"], 0x34}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r8=>0x0, 0x4, 0xf, 0x9, 0x5, 0x20, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x8, 0x3, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', <r9=>0x0, 0x54, 0xf7, 0x7, 0x8, 0x14, @remote, @remote, 0xff07, 0x8, 0x6, 0xfffffffe}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x3, 0x7, 0x5, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, 0x40, 0x8, 0x40, 0x57}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r11=>0x0, 0x29, 0x7, 0x1, 0xffffff01, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000003bc0)={0x1554, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "c71f29f904a48bc7f387861801afe56437a62bfdce8a7cbd629633cb929db228b787b84ffbeea22b69b633229e16"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "f4ef6a3690aaa4295045b00e9401938447dab40ceb098b582e69821ec55b08bc6341839e832b9fc48b7fd8ed183e5da04d31a23d76c035d8b30379444db3538a3e26d415967105ee1e761e575f4b7af50ceb32bd44dfab630d3dbfdbbb2ef07f023f74d3a4230bfabec38557000a3fed8f615c7f552a74f9dfdf867a4299476de8c90ad3ac87fb28ba94121cbfc6b094679dc725803c2778584f55682536f0b4ed8831308c5d52c2c32f642883731ab78744e183bfc5"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x56, 0x5, "194fa7fd214ff3b9fcf659ff040e116af2d7b12376f96ab34257684a142aed049380068681096ab94286431230f2086749a50e48cc6122a65f615e83890306ad31ed25f23009d3e98dcc79de5554292f8eec"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#!$@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xb8,-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\xc0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$\\,-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@(k\x00'}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "e5e7621915eb31d02135061a10d2c8549e9b67fa44f216e940a7161a3408e2da8c686f4d4bd1881e9a92add0d9bae3218037a0346d9fed141bb3d0c7c3d5b41abb409774c040aab50413f7d47683652057433a02c0fb0369d67e4a94d00e9f5d4f342eed7d39f7b0c7d117819d2a723c753772d225963bad90ae4758d1b3a864cab8e3defd561fdd22b0c74343843edb228a004247d96a0b89cdd033341f557d7117469f627fb57c029706f67ef958cc8b4d5d4b8ad81b221e83929ae4699de8f3ef990aa69572f867506b64c8d6308926171eb5851f392c191709cafa937586a07508efd6"}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x12ea}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xa0000}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1554}, 0x1, 0x0, 0x0, 0x1}, 0x600c010)
sendmsg$nl_crypto(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x40030)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x4, 0x8, 0x101}, 0x14}}, 0x4008884)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r13 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r13, &(0x7f00000005c0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000010000000000000000000000000000000ceb4e8436d2cd711c0a0d9b662e2e72879ed9b1192297ad87e5d0783e5397b8cbe278e345ccf307747621a5e6165c996ce3ecd70cdb281c98d69", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020200000140003006e696376663000"/56], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0)
sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmmsg(r13, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0xb4d}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/4080, 0xff0}, {0x0}], 0x2}, 0x81}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002100)=""/56, 0x38}, {0x0}], 0x2}, 0xfffffffe}], 0x3, 0x10002, 0x0)
sendmsg$can_bcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

368.267399ms ago: executing program 0 (id=3066):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x5, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc}})
r2 = socket(0x10, 0x1, 0x7)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

229.464726ms ago: executing program 0 (id=3067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff86}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x55)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r6=>0x0)
sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x1e, 0x19, "64e4d2f50a5ee6781662cc574552c705011ab4d64867280df00a"}, @NFC_ATTR_SE_APDU={0xfb, 0x19, "a5d231971dd09a1e85acfde7e6434ae07cc2918bf4a32686f7e25fe5d8c2ecc37d26b6e0a6e49f3fa132edb63f833e2d301c30c6be12d182fc92c20343ff06c13e0d762371ba6d69b2ba01c12c222522d8047e0a537855d59756be9755dcba7758046d54165bec1391044d4bde0c00b696dd69f833704abf20ee1ac14b3d812b39416d294e5ecd4d77562fb54821c924dfe3342ad4035b0fd95597727fb5cb54f700eb3866915ee6122785b64652d79dff4288a55cdd59a54de9a94ba0058e73deb8fff6e2170deb279280f20ad077a118792b95f294170964428511f3e0b534f8c8b62f451798ee315c85397d734f7cccbb14bf4f83ef"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'TIPCv2\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4004890)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000680)={'mangle\x00', 0x1000, "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"}, &(0x7f00000016c0)=0x1024)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), r4)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x18c, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x16}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x32}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x881)
r10 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b00)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, <r12=>0x0}, &(0x7f0000001c80)=0xc)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001cc0)={r10, r11, r12}, 0xc)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000001ec0)={&(0x7f0000001d00), 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={0x118, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, ' \x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x118}, 0x1, 0x0, 0x0, 0x480c0}, 0x4010)
r13 = socket(0x18, 0x6, 0x1)
getsockopt$inet_sctp_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000001f00)={<r14=>0x0, 0x5, 0x1, 0x8}, &(0x7f0000001f40)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000001f80)={r14, 0x9, 0x4, 0xfffffffe, 0xfffffff7, 0x7fff}, 0x14)
setsockopt$ARPT_SO_SET_REPLACE(r13, 0x0, 0x60, &(0x7f0000002000)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000001fc0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @broadcast, 0x8, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0xe5, 0x0}, @private=0xa010100, 0x0, 0xffffffff, 0x0, 0x7, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x7ff, 0x4ee2, 0x200, 0x7000, 0x9, 0x4, 'veth1_macvtap\x00', 'pim6reg1\x00', {0x80}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x64010100, @loopback, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010101, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000024c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000002640)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xe8, r15, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x789ed9a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a29dcbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x139483b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2508eaa0}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd26e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x573b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d6a8967}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13ff20f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe028}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7091}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38f187c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74973974}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x314f9127}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea39}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x451af8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43d4dc1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8892}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7763a6c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x663172eb}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r13, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x20, 0x1402, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x8001)

222.193689ms ago: executing program 0 (id=3068):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0xe80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7, [{0xff, 0x1, 0x7741a215, 0x3}]}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x2, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x8000003, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x2, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x0, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

155.210426ms ago: executing program 0 (id=3069):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000000), 0x27)
getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f0000000700), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xb7, 0x8, &(0x7f0000000080)=""/8, 0x40f00, 0x8, '\x00', r3, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x84e, 0xd5a}, 0x10, r5, r2, 0x1, &(0x7f0000000340)=[r6, r1], &(0x7f0000000380)=[{0x0, 0x2, 0x3}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r7}, 0x18)
r9 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

154.407644ms ago: executing program 0 (id=3070):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x89, 0x1, 0x1, 0x62}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff5ffd}, 0x94)
sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa", 0x4}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0)
recvmsg$can_j1939(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = accept(r1, &(0x7f00000002c0)=@llc, &(0x7f0000000080)=0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002abd7000fddbdf25370000010c009900ffffffff7d00000008002201ff0100000800a10000000060080026007b0900000500190105000000"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4002851)
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r4, 0x118, 0x4, 0x0, &(0x7f0000000040))
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

0s ago: executing program 0 (id=3071):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000040), 0x4)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x0, 0x2}}}}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

syz.0.653': attribute type 21 has an invalid length.
[  104.810987][ T8082] sctp: [Deprecated]: syz.1.654 (pid 8082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.810987][ T8082] Use struct sctp_sack_info instead
[  104.875892][ T8086] ip6tnl1: entered promiscuous mode
[  104.877947][ T8086] ip6tnl1: entered allmulticast mode
[  104.889876][ T8086] dvmrp0: entered allmulticast mode
[  105.080994][ T8102] syzkaller0: entered allmulticast mode
[  105.377314][ T8128] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  105.416042][ T8136] netlink: 'syz.1.673': attribute type 2 has an invalid length.
[  105.422307][ T8136] netlink: 'syz.1.673': attribute type 1 has an invalid length.
[  105.425317][ T8136] netlink: 'syz.1.673': attribute type 1 has an invalid length.
[  105.551819][ T8149] dummy0: entered allmulticast mode
[  105.796611][ T8167] batadv1: entered promiscuous mode
[  105.798443][ T8167] batadv1: entered allmulticast mode
[  105.870045][ T8171] veth2: entered allmulticast mode
[  106.320161][ T8145] dummy0: left allmulticast mode
[  106.686617][ T8185] __nla_validate_parse: 20 callbacks suppressed
[  106.686667][ T8185] netlink: 252 bytes leftover after parsing attributes in process `syz.1.687'.
[  106.894061][ T8190] netlink: 'syz.2.688': attribute type 2 has an invalid length.
[  107.110971][ T8191] netlink: 'syz.2.688': attribute type 4 has an invalid length.
[  107.947566][ T8190] k*]: entered promiscuous mode
[  108.055787][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[  108.061595][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[  108.064499][ T8201] netlink: 'syz.2.690': attribute type 20 has an invalid length.
[  108.223178][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.694'.
[  108.296358][ T8220] netlink: 'syz.2.695': attribute type 4 has an invalid length.
[  108.345005][ T8220] Cannot find set identified by id 1 to match
[  108.350766][ T8221] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.354759][ T8221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.434578][ T8221] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.438514][ T8221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.466998][ T8232] netlink: 'syz.1.698': attribute type 5 has an invalid length.
[  108.499271][ T8221] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.507368][ T8221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.582618][ T8221] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.597616][ T8221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.681269][ T8221] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.689743][ T8221] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.710189][ T8221] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.714966][ T8221] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.752181][ T8221] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.755000][ T8221] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.789771][ T8221] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.795541][ T8221] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.007167][ T8266] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  109.428437][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'.
[  110.446890][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.450563][ T8313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  110.655864][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'.
[  110.659518][ T8321] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  110.666557][ T8321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.741336][ T8327] Illegal XDP return value 16128 on prog  (id 271) dev syz_tun, expect packet loss!
[  110.749587][ T8327] openvswitch: netlink: Key 6 has unexpected len 24 expected 2
[  110.808025][ T8333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.726'.
[  110.857600][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[  110.923737][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[  110.986628][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'.
[  111.013553][ T8345] openvswitch: netlink: Key type 251 is out of range max 32
[  111.713639][ T8393] veth0: entered promiscuous mode
[  111.716376][ T8393] __nla_validate_parse: 4 callbacks suppressed
[  111.716393][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'.
[  111.745751][ T8393] veth0 (unregistering): left promiscuous mode
[  111.929640][ T8400] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[  112.531742][ T8423] netlink: 596 bytes leftover after parsing attributes in process `syz.1.754'.
[  112.936411][ T8446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.760'.
[  113.181411][ T8457] nbd0: detected capacity change from 0 to 127
[  113.189843][   T55] block nbd0: Receive control failed (result -104)
[  113.270133][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv3
[  113.280663][ T8464] team0: Failed to send options change via netlink (err -105)
[  113.284388][ T8464] team0: Port device batadv3 added
[  113.383252][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  113.386172][ T8468] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  113.388631][ T8468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.518170][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'.
[  113.550524][ T8475] netlink: 104 bytes leftover after parsing attributes in process `syz.2.771'.
[  113.557809][ T8475] !: entered allmulticast mode
[  113.559700][ T8474] !: left allmulticast mode
[  113.936991][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'.
[  113.945097][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'.
[  114.485825][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'.
[  114.591089][ T8545] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  114.596508][ T8544] netlink: 'syz.0.792': attribute type 22 has an invalid length.
[  114.606285][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'.
[  114.873218][ T8571] netlink: 'syz.1.797': attribute type 10 has an invalid length.
[  114.879942][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.887368][ T8571] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  115.079825][ T8585] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  115.562455][ T8613] netlink: 'syz.0.812': attribute type 4 has an invalid length.
[  115.596104][ T8613] lo speed is unknown, defaulting to 1000
[  115.599851][ T8613] wg1 speed is unknown, defaulting to 1000
[  115.810625][ T8626] can: request_module (can-proto-4) failed.
[  115.822671][ T8626] can: request_module (can-proto-4) failed.
[  116.057787][ T8634] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.097568][ T8637] veth2: entered allmulticast mode
[  116.108531][ T8637] veth3: entered promiscuous mode
[  116.173502][ T8643] : renamed from vlan0 (while UP)
[  116.301101][ T8648] lo speed is unknown, defaulting to 1000
[  116.313826][ T8648] wg1 speed is unknown, defaulting to 1000
[  116.480255][ T8657] IPVS: set_ctl: invalid protocol: 98 172.20.20.46:20000
[  116.527554][ T8659] netlink: 'syz.2.828': attribute type 1 has an invalid length.
[  116.588767][ T8648] geneve0: entered promiscuous mode
[  116.590909][ T8648] geneve0: entered allmulticast mode
[  116.790093][ T8677] __nla_validate_parse: 50 callbacks suppressed
[  116.790113][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  116.807768][ T8677] vlan2: entered promiscuous mode
[  117.425807][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  117.678034][ T8720] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  117.680787][ T8720] netlink: 600 bytes leftover after parsing attributes in process `syz.1.848'.
[  117.829051][ T8728] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[  118.155438][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[  118.159128][ T8750] openvswitch: netlink: nsh attr 1024 is out of range max 3
[  118.164743][ T8750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.211783][ T8757] netlink: 'syz.1.864': attribute type 11 has an invalid length.
[  118.244143][ T8759] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.863'.
[  118.269252][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'.
[  118.282056][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'.
[  118.285121][ T8761] netlink: 'syz.1.865': attribute type 12 has an invalid length.
[  118.287701][ T8761] netlink: 'syz.1.865': attribute type 11 has an invalid length.
[  118.387022][ T8769] netlink: 'syz.0.868': attribute type 10 has an invalid length.
[  118.462979][ T8771] netlink: 108 bytes leftover after parsing attributes in process `syz.1.869'.
[  118.627961][ T8792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'.
[  118.636806][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'.
[  118.812385][ T8802] geneve2: entered promiscuous mode
[  119.429636][ T8825] syzkaller1: entered promiscuous mode
[  119.432818][ T8825] syzkaller1: entered allmulticast mode
[  119.553484][ T6754] wlan0: failed to finalize CSA on link 0, disconnecting
[  120.138709][ T8880] Cannot find del_set index 1 as target
[  120.198827][ T8886] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  120.208902][ T8886] openvswitch: netlink: Duplicate or invalid key (type 0).
[  120.216042][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.229345][ T8888] netlink: 'syz.0.905': attribute type 3 has an invalid length.
[  120.308451][ T8893] netlink: 'syz.0.907': attribute type 2 has an invalid length.
[  120.375546][ T8899] syzkaller1: entered promiscuous mode
[  120.377717][ T8899] syzkaller1: entered allmulticast mode
[  120.382385][ T8899] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  120.496911][ T8909] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003
[  120.556083][ T8912] x_tables: unsorted entry at hook 1
[  120.814577][ T8932] netlink: 'syz.2.918': attribute type 83 has an invalid length.
[  121.902488][ T8967] xt_hashlimit: size too large, truncated to 1048576
[  121.905675][ T8966] xt_hashlimit: size too large, truncated to 1048576
[  122.007753][ T8975] lo speed is unknown, defaulting to 1000
[  122.032929][ T8975] wg1 speed is unknown, defaulting to 1000
[  122.441570][ T6754] wlan1: Trigger new scan to find an IBSS to join
[  122.522795][ T8998] veth1_macvtap: left promiscuous mode
[  122.690214][ T9011] __nla_validate_parse: 15 callbacks suppressed
[  122.690236][ T9011] netlink: 56 bytes leftover after parsing attributes in process `syz.2.940'.
[  122.698614][ T9009] netlink: 128 bytes leftover after parsing attributes in process `syz.0.939'.
[  122.818172][ T9018] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  122.828450][ T9018] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  123.344019][ T9060] netlink: 'syz.2.953': attribute type 4 has an invalid length.
[  123.360086][ T9060] lo speed is unknown, defaulting to 1000
[  123.363141][ T9060] wg1 speed is unknown, defaulting to 1000
[  123.814331][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.879325][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'.
[  124.015813][ T9081] netlink: 364 bytes leftover after parsing attributes in process `syz.2.959'.
[  124.019419][ T9081] openvswitch: netlink: Flow key attr not present in new flow.
[  124.087751][ T9081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.360746][ T9106] netlink: 332 bytes leftover after parsing attributes in process `syz.1.966'.
[  124.372198][ T9106] netlink: 104 bytes leftover after parsing attributes in process `syz.1.966'.
[  124.375133][ T9106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.966'.
[  124.436843][   T33] audit: type=1800 audit(1752847175.231:2): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.962" name="memory.events" dev="tmpfs" ino=1718 res=0 errno=0
[  124.470313][ T9106] netlink: 68 bytes leftover after parsing attributes in process `syz.1.966'.
[  124.480103][ T9106] xt_policy: output policy not valid in PREROUTING and INPUT
[  124.716807][   T24] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[  124.720360][   T24] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  124.742747][ T9141] syzkaller1: entered promiscuous mode
[  124.744901][ T9141] syzkaller1: entered allmulticast mode
[  124.764740][ T9141] tipc: Started in network mode
[  124.774747][ T9141] tipc: Node identity ca10735c33eb, cluster identity 4711
[  124.777340][ T9141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.797637][ T9137] tipc: Resetting bearer <eth:syzkaller0>
[  124.815147][ T9137] tipc: Disabling bearer <eth:syzkaller0>
[  124.920613][ T9153] lo speed is unknown, defaulting to 1000
[  124.927966][ T9153] wg1 speed is unknown, defaulting to 1000
[  125.026301][ T9163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.979'.
[  125.029773][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'.
[  125.105530][ T9169] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.487551][  T180] wlan1: Trigger new scan to find an IBSS to join
[  125.818519][ T9178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  125.988455][ T9189] openvswitch: netlink: Flow actions attr not present in new flow.
[  126.017059][ T9187] netlink: 'syz.0.989': attribute type 15 has an invalid length.
[  126.021548][ T9187] netlink: 'syz.0.989': attribute type 1 has an invalid length.
[  126.049004][ T9193] netlink: 'syz.1.990': attribute type 7 has an invalid length.
[  126.079557][ T9187] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.119742][ T9194] bond5: (slave gretap3): making interface the new active one
[  126.129985][ T9194] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  126.214181][ T9194] syz.0.989 (9194) used greatest stack depth: 20136 bytes left
[  126.255398][ T9199] net veth1_virt_wifi : renamed from virt_wifi0
[  126.265917][ T9199] rdma_op ffff88811b7701f0 conn xmit_rdma 0000000000000000
[  126.309320][ T9202] Cannot find set identified by id 0 to match
[  126.405835][   T32] wlan1: Creating new IBSS network, BSSID 52:78:46:dc:ce:14
[  126.427303][ T9206] _Z`Ԁ@: entered promiscuous mode
[  126.508829][ T9216] sctp: [Deprecated]: syz.2.998 (pid 9216) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.508829][ T9216] Use struct sctp_sack_info instead
[  126.544568][ T9221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.547341][ T9221] IPv6: NLM_F_CREATE should be set when creating new route
[  126.550042][ T9221] IPv6: NLM_F_CREATE should be set when creating new route
[  126.629915][ T9227] netlink: 'syz.2.1002': attribute type 1 has an invalid length.
[  126.678585][ T9227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  126.689713][ T9227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  126.693488][ T9227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  126.698207][ T9227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  126.704860][ T9227] bond5: (slave geneve2): making interface the new active one
[  126.708934][ T9227] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  126.824565][ T9235] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  127.064169][ T9258] netlink: 'syz.1.1011': attribute type 10 has an invalid length.
[  127.109454][ T9260] delete_channel: no stack
[  127.405664][ T9274] netlink: 'syz.2.1018': attribute type 1 has an invalid length.
[  127.412621][ T9274] netlink: 'syz.2.1018': attribute type 2 has an invalid length.
[  127.700746][ T9293] netlink: 'syz.1.1024': attribute type 9 has an invalid length.
[  127.722887][ T9299] __nla_validate_parse: 14 callbacks suppressed
[  127.722903][ T9299] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1025'.
[  128.127932][ T9315] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1029'.
[  128.408484][ T9329] IPVS: sh: FWM 3 0x00000003 - no destination available
[  128.792800][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'.
[  129.339058][ T9369] xt_hashlimit: size too large, truncated to 1048576
[  129.444912][ T9369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1039'.
[  129.669088][ T9369] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  129.702388][ T9369] bond0 (unregistering): Released all slaves
[  129.827149][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  129.830358][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  129.835645][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  129.840915][ T9391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'.
[  129.918155][ T9394] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1044'.
[  130.058027][ T9405] lo speed is unknown, defaulting to 1000
[  130.062921][ T9405] wg1 speed is unknown, defaulting to 1000
[  130.152953][ T9405] validate_nla: 2 callbacks suppressed
[  130.152967][ T9405] netlink: 'syz.2.1050': attribute type 2 has an invalid length.
[  130.447684][ T9417] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1054'.
[  130.457484][ T9417] gretap0: entered promiscuous mode
[  130.475211][ T9417] 0{X: renamed from gretap0
[  130.481428][ T9417] 0{X: left promiscuous mode
[  130.483848][ T9417] 0{X: entered allmulticast mode
[  130.487536][ T9417] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  131.210441][ T9459] netlink: 'syz.2.1065': attribute type 5 has an invalid length.
[  131.239848][ T9460] netlink: 'syz.2.1065': attribute type 5 has an invalid length.
[  131.486256][ T9472] netlink: 'syz.2.1070': attribute type 1 has an invalid length.
[  131.489642][ T9472] netlink: 'syz.2.1070': attribute type 1 has an invalid length.
[  131.510050][ T9473] sctp: [Deprecated]: syz.0.1068 (pid 9473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.510050][ T9473] Use struct sctp_sack_info instead
[  131.554399][ T9474] netlink: 'syz.2.1070': attribute type 23 has an invalid length.
[  131.716727][ T9479] netlink: 'syz.1.1072': attribute type 4 has an invalid length.
[  131.764909][ T9479] lo speed is unknown, defaulting to 1000
[  131.768644][ T9479] wg1 speed is unknown, defaulting to 1000
[  132.337607][ T9490] bridge3: port 1(ip6gretap1) entered blocking state
[  132.340262][ T9490] bridge3: port 1(ip6gretap1) entered disabled state
[  132.342795][ T9490] ip6gretap1: entered allmulticast mode
[  132.346008][ T9490] ip6gretap1: entered promiscuous mode
[  132.443986][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  134.896155][ T9490] veth7: entered promiscuous mode
[  134.900710][ T9490] bridge3: port 2(veth7) entered blocking state
[  134.914343][ T9490] bridge3: port 2(veth7) entered disabled state
[  134.916775][ T9490] veth7: entered allmulticast mode
[  134.959446][ T9495] __nla_validate_parse: 5 callbacks suppressed
[  134.959462][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  135.306267][ T9523] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  135.309697][ T9523] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  135.340608][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'.
[  135.344099][ T9526] openvswitch: netlink: Unknown nsh attribute 0
[  135.346269][ T9526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.394279][ T9530] sctp: [Deprecated]: syz.0.1084 (pid 9530) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.394279][ T9530] Use struct sctp_sack_info instead
[  135.490623][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'.
[  135.550353][   T33] audit: type=1107 audit(1752847186.341:3): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  135.556862][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1090'.
[  135.653994][ T9539] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  135.866103][ T9550] @: renamed from bond_slave_0
[  135.976905][ T9555] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1095'.
[  136.269203][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'.
[  136.312452][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  136.397063][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'.
[  136.432607][ T9591] netlink: 'syz.2.1107': attribute type 22 has an invalid length.
[  136.435695][ T9591] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1107'.
[  136.736087][ T9616] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1114'.
[  136.783634][ T9618] netlink: 'syz.2.1115': attribute type 1 has an invalid length.
[  136.875403][ T9618] bond6: (slave gretap1): making interface the new active one
[  136.883827][ T9618] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  137.161026][ T9637] netlink: 'syz.0.1122': attribute type 21 has an invalid length.
[  137.178449][ T9634] x_tables: unsorted underflow at hook 2
[  137.446445][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  137.461244][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  137.471790][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  137.662081][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  137.699219][ T9679] batadv_slave_0: entered promiscuous mode
[  137.842202][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  138.019865][ T9697] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  138.028840][ T9697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.483239][ T9722] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  138.500401][ T9723] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  138.504748][ T9722] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  138.507894][ T9722] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  138.846982][ T9741] batman_adv: batadv0: Adding interface: dummy0
[  138.851845][ T9741] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.862327][ T9741] batman_adv: batadv0: Interface activated: dummy0
[  139.183703][ T9770] xt_hashlimit: max too large, truncated to 1048576
[  139.186458][ T9770] Cannot find add_set index 3 as target
[  140.214342][ T9802] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  140.217113][ T9802] __nla_validate_parse: 15 callbacks suppressed
[  140.217124][ T9802] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1172'.
[  140.287791][ T9805] netlink: 'syz.1.1173': attribute type 2 has an invalid length.
[  140.290296][ T9805] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1173'.
[  140.323075][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  141.040730][    C1] vcan0: j1939_tp_rxtimer: 0xffff888115221c00: rx timeout, send abort
[  141.047260][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026b84000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  141.401617][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  141.545915][    C1] vcan0: j1939_tp_rxtimer: 0xffff888115221c00: abort rx timeout. Force session deactivation
[  142.508081][ T9840] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[  142.614042][ T9847] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  142.632792][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'.
[  142.767820][ T9861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.792992][ T9861] tipc: Resetting bearer <eth:syzkaller0>
[  142.852607][ T9873] ip6gre0: entered promiscuous mode
[  143.069402][ T9889] syzkaller1: entered promiscuous mode
[  143.071309][ T9889] syzkaller1: entered allmulticast mode
[  143.330253][   T60] block nbd0: Possible stuck request ffff888020d18000: control (read@0,1024B). Runtime 30 seconds
[  143.335062][   T60] block nbd0: Possible stuck request ffff888020d18200: control (read@1024,1024B). Runtime 30 seconds
[  143.339272][   T60] block nbd0: Possible stuck request ffff888020d18400: control (read@2048,1024B). Runtime 30 seconds
[  143.343748][   T60] block nbd0: Possible stuck request ffff888020d18600: control (read@3072,1024B). Runtime 30 seconds
[  143.478223][ T9926] lo speed is unknown, defaulting to 1000
[  143.481155][ T9926] wg1 speed is unknown, defaulting to 1000
[  143.524233][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'.
[  143.721431][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  143.835646][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  143.838987][ T9954] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  143.846244][ T9954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.943547][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'.
[  144.208309][ T9986] lo speed is unknown, defaulting to 1000
[  144.213395][ T9986] wg1 speed is unknown, defaulting to 1000
[  144.250222][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1214'.
[  144.255761][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'.
[  144.318668][   T24] IPVS: starting estimator thread 0...
[  144.320791][ T9986] netlink: 'syz.0.1214': attribute type 3 has an invalid length.
[  144.329063][ T9986] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1214'.
[  144.413463][ T9995] IPVS: using max 61 ests per chain, 146400 per kthread
[  144.418282][T10000] netlink: 'syz.1.1217': attribute type 1 has an invalid length.
[  144.466042][T10000] bond5: (slave gretap0): making interface the new active one
[  144.470529][T10000] bond5: (slave gretap0): Enslaving as an active interface with an up link
[  144.479973][T10000] syz.1.1217 (10000) used greatest stack depth: 17592 bytes left
[  144.555932][ T9190] IPVS: stop unused estimator thread 0...
[  145.776130][T10040] __nla_validate_parse: 1 callbacks suppressed
[  145.776149][T10040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1227'.
[  145.804471][T10040] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.809492][T10040] syzkaller0: entered promiscuous mode
[  145.812316][T10040] syzkaller0: entered allmulticast mode
[  145.818124][T10040] sch_fq: defrate 257 ignored.
[  146.105275][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  146.196171][T10065] lo speed is unknown, defaulting to 1000
[  146.203715][T10065] wg1 speed is unknown, defaulting to 1000
[  146.878740][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  146.921632][T10087] wireguard0: entered promiscuous mode
[  146.924593][T10087] wireguard0: entered allmulticast mode
[  147.036394][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'.
[  147.045544][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'.
[  147.359404][T10108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1247'.
[  147.418768][T10110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1248'.
[  147.479459][T10112] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  147.705045][T10124] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1252'.
[  147.716170][T10124] gretap0: entered promiscuous mode
[  147.723128][T10124] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1252'.
[  147.730488][T10124] 0{X: renamed from gretap0
[  147.738498][T10124] 0{X: left promiscuous mode
[  147.740599][T10124] 0{X: entered allmulticast mode
[  147.744074][T10124] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  147.842417][T10130] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  147.861838][T10130] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  147.867881][T10130] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1254'.
[  147.878701][T10130] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  148.092424][T10144] netlink: 'syz.2.1259': attribute type 29 has an invalid length.
[  148.707396][T10201] vlan3: entered promiscuous mode
[  148.709092][T10201] bond0: entered promiscuous mode
[  149.067996][T10215] ip6gretap1: entered promiscuous mode
[  149.070747][T10215] ip6gretap1: entered allmulticast mode
[  149.360221][T10233] netlink: 'syz.1.1285': attribute type 5 has an invalid length.
[  149.394627][T10237] lo speed is unknown, defaulting to 1000
[  149.397336][T10237] wg1 speed is unknown, defaulting to 1000
[  149.560745][T10250] xt_ipcomp: unknown flags F7
[  149.721559][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  150.240437][T10261] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  150.247969][T10261] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  150.346746][T10266] ipt_REJECT: ECHOREPLY no longer supported.
[  150.377402][T10271] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  150.559783][T10282] netlink: 'syz.2.1297': attribute type 17 has an invalid length.
[  150.563893][T10282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.542056][T10330] bridge0: entered promiscuous mode
[  151.589108][T10332] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.656978][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.661330][T10339] netlink: 'syz.2.1304': attribute type 11 has an invalid length.
[  151.799938][T10351] syzkaller1: entered promiscuous mode
[  151.808981][T10351] syzkaller1: entered allmulticast mode
[  151.867299][T10357] __nla_validate_parse: 11 callbacks suppressed
[  151.867317][T10357] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1308'.
[  151.896683][T10350] tipc: Started in network mode
[  151.898713][T10350] tipc: Node identity , cluster identity 4711
[  151.907752][T10350] tipc: Failed to set node id, please configure manually
[  151.911014][T10350] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  152.105545][T10374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1315'.
[  152.182806][T10385] netlink: 'syz.0.1317': attribute type 10 has an invalid length.
[  152.185943][T10385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1317'.
[  152.192912][T10385] team0: entered promiscuous mode
[  152.195668][T10385] team_slave_0: entered promiscuous mode
[  152.198141][T10385] team_slave_1: entered promiscuous mode
[  152.200765][T10385] batadv3: entered promiscuous mode
[  152.214550][T10385] team0: entered allmulticast mode
[  152.216620][T10385] team_slave_0: entered allmulticast mode
[  152.219000][T10385] team_slave_1: entered allmulticast mode
[  152.222032][T10385] batadv3: entered allmulticast mode
[  152.225908][T10385] 8021q: adding VLAN 0 to HW filter on device team0
[  152.229199][T10385] bridge0: port 4(team0) entered blocking state
[  152.235105][T10385] bridge0: port 4(team0) entered disabled state
[  152.240168][T10385] bridge0: port 4(team0) entered blocking state
[  152.242739][T10385] bridge0: port 4(team0) entered listening state
[  152.248441][T10389] xt_hashlimit: invalid interval
[  152.290840][T10390] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.595613][T10418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1326'.
[  152.695160][ T9190] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  152.698012][ T9190] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  152.868710][T10436] netlink: 'syz.0.1333': attribute type 9 has an invalid length.
[  152.910753][T10438] netlink: 'syz.0.1334': attribute type 1 has an invalid length.
[  152.931814][T10438] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.951038][T10438] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.954583][T10438] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  152.959250][T10438] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  153.004883][T10440] macvlan0: entered promiscuous mode
[  153.006725][T10440] macvlan0: entered allmulticast mode
[  153.008983][T10440] bond6: entered promiscuous mode
[  153.012996][T10440] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  153.018341][T10440] bond6: left promiscuous mode
[  153.180704][T10444] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  153.195724][T10446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1337'.
[  153.260587][T10453] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1336'.
[  153.376147][T10462] netlink: 'syz.2.1343': attribute type 1 has an invalid length.
[  153.382188][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  153.386869][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  153.405788][T10462] bond7: (slave ip6gretap1): making interface the new active one
[  153.408691][T10462] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  153.416784][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1343'.
[  153.422590][T10462] 8021q: adding VLAN 0 to HW filter on device bond7
[  153.650339][T10481] lo speed is unknown, defaulting to 1000
[  153.654602][T10481] wg1 speed is unknown, defaulting to 1000
[  153.684792][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'.
[  153.707443][T10485] SET target dimension over the limit!
[  153.819847][T10492] openvswitch: netlink: IP tunnel dst address not specified
[  153.820601][T10493] openvswitch: netlink: IP tunnel dst address not specified
[  153.854158][T10492] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48747 - 0
[  153.857008][T10492] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48747 - 0
[  153.860211][T10492] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48747 - 0
[  153.866560][T10492] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48747 - 0
[  153.870032][T10492] geneve3: entered promiscuous mode
[  153.874142][T10492] geneve3: entered allmulticast mode
[  154.000125][T10505] netlink: 'syz.0.1354': attribute type 11 has an invalid length.
[  154.226004][T10522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.323659][T10522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.393843][T10522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.460578][T10522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.546326][T10522] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.559696][T10522] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.577278][T10522] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.594320][T10522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.691510][T10538] 0{X: entered promiscuous mode
[  154.693377][T10538] 0{X: left allmulticast mode
[  154.701053][T10538] 1{X: renamed from 30{X
[  154.704146][T10540] netlink: 'syz.0.1364': attribute type 12 has an invalid length.
[  154.708404][T10538] 1{X: left promiscuous mode
[  154.710240][T10538] 1{X: entered allmulticast mode
[  154.713600][T10538] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  154.982947][T10556] netlink: 'syz.0.1370': attribute type 2 has an invalid length.
[  154.989293][T10556] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  155.197769][T10575] team0: Device DL<Y is loopback device. Loopback devices can't be added as a team port
[  155.206589][T10575] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  155.469006][T10593] lo speed is unknown, defaulting to 1000
[  155.472304][T10593] wg1 speed is unknown, defaulting to 1000
[  155.552957][T10593] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  156.157830][T10633] syzkaller1: entered promiscuous mode
[  156.159661][T10633] syzkaller1: entered allmulticast mode
[  156.496884][T10647] lo speed is unknown, defaulting to 1000
[  156.509378][T10647] wg1 speed is unknown, defaulting to 1000
[  156.984842][T10675] ipt_rpfilter: unknown options
[  157.108727][T10680] xt_hashlimit: size too large, truncated to 1048576
[  157.147576][T10685] netlink: 'syz.0.1408': attribute type 83 has an invalid length.
[  157.653174][T10691] x_tables: duplicate underflow at hook 2
[  158.069094][T10696] netlink: 'syz.0.1411': attribute type 3 has an invalid length.
[  158.071767][T10696] netlink: 'syz.0.1411': attribute type 1 has an invalid length.
[  158.074929][T10696] __nla_validate_parse: 17 callbacks suppressed
[  158.074942][T10696] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1411'.
[  158.344941][T10694] set match dimension is over the limit!
[  158.497242][T10706] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  158.499794][T10706] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1416'.
[  158.502911][T10706] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  158.505333][T10706] netlink: 'syz.1.1416': attribute type 2 has an invalid length.
[  158.562962][T10712] Cannot find del_set index 65533 as target
[  158.681702][  T180] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  158.948758][T10726] syz.1.1422: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  158.959420][T10726] CPU: 0 UID: 0 PID: 10726 Comm: syz.1.1422 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  158.959436][T10726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.959442][T10726] Call Trace:
[  158.959447][T10726]  <TASK>
[  158.959475][T10726]  dump_stack_lvl+0x189/0x250
[  158.959494][T10726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.959504][T10726]  ? __pfx__printk+0x10/0x10
[  158.959516][T10726]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  158.959529][T10726]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  158.959540][T10726]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  158.959552][T10726]  warn_alloc+0x214/0x310
[  158.959564][T10726]  ? __pfx_warn_alloc+0x10/0x10
[  158.959576][T10726]  ? __get_vm_area_node+0x28f/0x300
[  158.959589][T10726]  ? xskq_create+0xbf/0x170
[  158.959600][T10726]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  158.959625][T10726]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  158.959638][T10726]  ? xskq_create+0x56/0x170
[  158.959646][T10726]  ? __kasan_kmalloc+0x93/0xb0
[  158.959661][T10726]  vmalloc_user_noprof+0xad/0xf0
[  158.959673][T10726]  ? xskq_create+0xbf/0x170
[  158.959681][T10726]  xskq_create+0xbf/0x170
[  158.959715][T10726]  xsk_init_queue+0xb0/0x110
[  158.959726][T10726]  xsk_setsockopt+0x4de/0x710
[  158.959740][T10726]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.959754][T10726]  ? __fget_files+0x2a/0x420
[  158.959762][T10726]  ? aa_sock_opt_perm+0x74/0x110
[  158.959774][T10726]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  158.959785][T10726]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.959797][T10726]  do_sock_setsockopt+0x17c/0x1b0
[  158.959814][T10726]  __x64_sys_setsockopt+0x13f/0x1b0
[  158.959828][T10726]  do_syscall_64+0xfa/0x3b0
[  158.959839][T10726]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.959847][T10726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.959857][T10726]  ? exc_page_fault+0x9f/0xf0
[  158.959866][T10726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.959874][T10726] RIP: 0033:0x7fa04858e9a9
[  158.959884][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.959902][T10726] RSP: 002b:00007fa0493cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  158.959911][T10726] RAX: ffffffffffffffda RBX: 00007fa0487b5fa0 RCX: 00007fa04858e9a9
[  158.959917][T10726] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000038
[  158.959922][T10726] RBP: 00007fa048610d69 R08: 0000000000000004 R09: 0000000000000000
[  158.959927][T10726] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  158.959932][T10726] R13: 0000000000000000 R14: 00007fa0487b5fa0 R15: 00007ffebdde8b98
[  158.959945][T10726]  </TASK>
[  158.959948][T10726] Mem-Info:
[  159.069137][T10726] active_anon:5780 inactive_anon:0 isolated_anon:0
[  159.069137][T10726]  active_file:1147 inactive_file:38251 isolated_file:0
[  159.069137][T10726]  unevictable:1768 dirty:87 writeback:0
[  159.069137][T10726]  slab_reclaimable:9892 slab_unreclaimable:61275
[  159.069137][T10726]  mapped:18356 shmem:2427 pagetables:1045
[  159.069137][T10726]  sec_pagetables:0 bounce:0
[  159.069137][T10726]  kernel_misc_reclaimable:0
[  159.069137][T10726]  free:293957 free_pcp:14811 free_cma:0
[  159.087914][T10726] Node 0 active_anon:13696kB inactive_anon:0kB active_file:3860kB inactive_file:136700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36784kB dirty:296kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5724kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.099353][T10726] Node 1 active_anon:9424kB inactive_anon:0kB active_file:728kB inactive_file:16304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36640kB dirty:52kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6664kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.110266][T10726] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  159.127043][T10726] lowmem_reserve[]: 0 812 812 812 812
[  159.129160][T10726] Node 0 DMA32 free:279040kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13764kB inactive_anon:0kB active_file:3860kB inactive_file:136700kB unevictable:3536kB writepending:296kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:30072kB local_pcp:16052kB free_cma:0kB
[  159.143439][T10726] lowmem_reserve[]: 0 0 0 0 0
[  159.145216][T10726] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  159.156288][T10726] lowmem_reserve[]: 0 0 854 854 854
[  159.158158][T10726] Node 1 Normal free:422460kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9424kB inactive_anon:0kB active_file:728kB inactive_file:16304kB unevictable:3536kB writepending:52kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:29232kB local_pcp:17336kB free_cma:0kB
[  159.179640][T10726] lowmem_reserve[]: 0 0 0 0 0
[  159.183389][T10726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  159.188485][T10726] Node 0 DMA32: 11*4kB (ME) 6*8kB (M) 211*16kB (UM) 597*32kB (UME) 339*64kB (UM) 146*128kB (UM) 82*256kB (UME) 61*512kB (UME) 54*1024kB (UM) 7*2048kB (UM) 23*4096kB (UM) = 279020kB
[  159.195077][T10726] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  159.200200][T10726] Node 1 Normal: 477*4kB (UME) 241*8kB (UME) 150*16kB (UM) 94*32kB (UME) 224*64kB (UME) 94*128kB (UM) 40*256kB (UM) 9*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 89*4096kB (UM) = 422172kB
[  159.206882][T10726] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  159.210409][T10726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  159.214613][T10726] 41825 total pagecache pages
[  159.216299][T10726] 0 pages in swap cache
[  159.218089][T10726] Free swap  = 124996kB
[  159.219657][T10726] Total swap = 124996kB
[  159.220998][T10726] 786301 pages RAM
[  159.223385][T10726] 0 pages HighMem/MovableOnly
[  159.225134][T10726] 241056 pages reserved
[  159.226489][T10726] 0 pages cma reserved
[  159.442390][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  159.646473][T10757] lo speed is unknown, defaulting to 1000
[  159.649301][T10757] wg1 speed is unknown, defaulting to 1000
[  159.697715][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'.
[  159.702852][T10758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.758464][T10758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.815428][T10758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.944730][T10668] Set syz1 is full, maxelem 65536 reached
[  160.636388][T10822] dummy0: entered allmulticast mode
[  160.639776][T10821] dummy0: left allmulticast mode
[  160.651032][T10824] lo speed is unknown, defaulting to 1000
[  160.660272][T10824] wg1 speed is unknown, defaulting to 1000
[  161.037492][T10854] netlink: 'syz.1.1449': attribute type 1 has an invalid length.
[  161.054175][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'.
[  161.086796][T10854] bond6: entered promiscuous mode
[  161.088485][T10854] bond6: entered allmulticast mode
[  161.102149][T10854] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.350003][T10861] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  161.884711][T10885] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1461'.
[  161.894329][T10883] lo speed is unknown, defaulting to 1000
[  161.897079][T10883] wg1 speed is unknown, defaulting to 1000
[  161.936126][T10888] pim6reg1: entered promiscuous mode
[  161.937929][T10888] pim6reg1: entered allmulticast mode
[  161.982074][T10883] xt_hashlimit: size too large, truncated to 1048576
[  162.897986][T10940] syzkaller1: entered promiscuous mode
[  162.900411][T10940] syzkaller1: entered allmulticast mode
[  163.015806][T10952] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1471'.
[  163.207199][T10972] netlink: 'syz.2.1476': attribute type 6 has an invalid length.
[  163.590307][ T5835] Bluetooth: hci2: link tx timeout
[  163.593457][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.744100][T10993] 8021q: VLANs not supported on vcan0
[  163.855810][T10997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.864139][  T789] lo speed is unknown, defaulting to 1000
[  163.871124][  T789] syz1: Port: 1 Link DOWN
[  163.924672][T11003] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  163.955343][T11003] bond9: entered promiscuous mode
[  163.957606][T11003] bond9: entered allmulticast mode
[  163.981436][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'.
[  163.992319][T11003] bridge46: the hash_elasticity option has been deprecated and is always 16
[  164.055713][T11015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1491'.
[  164.060992][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  164.924646][T11036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.081746][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  165.641566][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  165.882968][T11049] syzkaller1: entered promiscuous mode
[  165.886162][T11049] syzkaller1: entered allmulticast mode
[  165.902876][T11053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.913190][T11053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.733053][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1519'.
[  166.753645][T11105] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  166.935447][T11123] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1526'.
[  166.940378][T11126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1527'.
[  167.096149][T11141] ip6t_rpfilter: unknown options
[  167.156682][T11143] netlink: 'syz.0.1533': attribute type 1 has an invalid length.
[  167.188544][T11143] 8021q: adding VLAN 0 to HW filter on device bond7
[  167.201078][T11143] 8021q: adding VLAN 0 to HW filter on device batadv4
[  167.207994][T11143] bond7: (slave batadv4): making interface the new active one
[  167.222270][T11143] bond7: (slave batadv4): Enslaving as an active interface with an up link
[  167.274794][T11151] netlink: 'syz.1.1535': attribute type 16 has an invalid length.
[  167.278004][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1535'.
[  167.342216][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'.
[  167.345775][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'.
[  167.349583][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'.
[  167.455306][T11157] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  167.535364][T11160] lo speed is unknown, defaulting to 1000
[  167.542227][T11160] wg1 speed is unknown, defaulting to 1000
[  167.584401][T11163] netlink: 'syz.2.1539': attribute type 21 has an invalid length.
[  167.589242][T11163] netlink: 'syz.2.1539': attribute type 6 has an invalid length.
[  167.643364][    C1] bridge0: port 4(team0) entered learning state
[  167.995263][T11186] xt_l2tp: unknown flags: 10
[  168.580292][T11222] netlink: 'syz.0.1554': attribute type 1 has an invalid length.
[  168.696538][T11236] tipc: Started in network mode
[  168.698336][T11236] tipc: Node identity 6ae7ccac71e7, cluster identity 4711
[  168.701048][T11236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.707344][T11226] syzkaller0: entered promiscuous mode
[  168.710809][T11226] syzkaller0: entered allmulticast mode
[  168.737001][T11226] tipc: Resetting bearer <eth:syzkaller0>
[  168.744569][T11225] tipc: Resetting bearer <eth:syzkaller0>
[  168.759516][T11225] tipc: Disabling bearer <eth:syzkaller0>
[  168.882388][T11248] lo speed is unknown, defaulting to 1000
[  168.885160][T11248] wg1 speed is unknown, defaulting to 1000
[  169.005588][T11263] vlan0: entered allmulticast mode
[  169.136375][T11272] IPv6: NLM_F_CREATE should be specified when creating new route
[  169.377389][T11286] lo speed is unknown, defaulting to 1000
[  169.380958][T11286] wg1 speed is unknown, defaulting to 1000
[  169.478851][T11292] _Z`Ԁ@: entered promiscuous mode
[  169.607859][T11292] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.612211][T11292] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.615762][T11292] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.619297][T11292] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.730765][T11292] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.734539][T11292] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.738114][T11292] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.752517][T11292] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.768751][T11292] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 48747 - 0
[  169.772455][T11292] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 48747 - 0
[  169.775998][T11292] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 48747 - 0
[  169.779521][T11292] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 48747 - 0
[  169.934794][T11304] __nla_validate_parse: 13 callbacks suppressed
[  169.934819][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1577'.
[  170.069957][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1583'.
[  170.077389][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1583'.
[  170.098012][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1584'.
[  170.104051][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1584'.
[  170.123795][T11320] 8021q: adding VLAN 0 to HW filter on device batadv1
[  170.127682][T11320] batadv1: entered allmulticast mode
[  170.132358][T11320] team0: Failed to send options change via netlink (err -105)
[  170.135629][T11320] team0: Port device batadv1 added
[  170.241726][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'.
[  170.245871][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'.
[  170.344503][T11340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.347808][T11340] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  170.350822][T11340] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  170.357875][T11340] tipc: Resetting bearer <eth:syzkaller0>
[  170.396547][T11336] syzkaller1: entered promiscuous mode
[  170.398408][T11336] syzkaller1: entered allmulticast mode
[  170.578402][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1594'.
[  170.608836][T11353] lo speed is unknown, defaulting to 1000
[  170.612928][T11355] netlink: 'syz.0.1595': attribute type 10 has an invalid length.
[  170.613219][T11353] wg1 speed is unknown, defaulting to 1000
[  170.643883][T11356] set match dimension is over the limit!
[  170.727565][T11363] netlink: 'syz.1.1597': attribute type 4 has an invalid length.
[  171.080887][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'.
[  171.471489][  T789] tipc: Node number set to 4194005852
[  171.768830][T11406] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  171.790553][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'.
[  171.796199][T11406] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  171.820472][T11410] pim6reg1: entered promiscuous mode
[  171.822706][T11410] pim6reg1: entered allmulticast mode
[  171.824823][T11406] netlink: 'syz.2.1607': attribute type 1 has an invalid length.
[  171.872746][T11406] bond10: entered promiscuous mode
[  171.874421][T11406] bond10: entered allmulticast mode
[  171.973884][T11418] bond0: Unable to set up delay as MII monitoring is disabled
[  171.991977][T11420] netlink: 'syz.1.1614': attribute type 1 has an invalid length.
[  173.404085][T11476] bond0 (unregistering): Released all slaves
[  173.424654][   T60] block nbd0: Possible stuck request ffff888020d18000: control (read@0,1024B). Runtime 60 seconds
[  173.428862][   T60] block nbd0: Possible stuck request ffff888020d18200: control (read@1024,1024B). Runtime 60 seconds
[  173.434965][   T60] block nbd0: Possible stuck request ffff888020d18400: control (read@2048,1024B). Runtime 60 seconds
[  173.439145][   T60] block nbd0: Possible stuck request ffff888020d18600: control (read@3072,1024B). Runtime 60 seconds
[  174.139249][T11496] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.149077][T11498] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.286978][T11505] syz_tun: entered promiscuous mode
[  174.288689][T11505] syz_tun: entered allmulticast mode
[  174.338439][T11508] netlink: 'syz.0.1640': attribute type 9 has an invalid length.
[  174.363654][T11508] bond0: (slave macvlan0): Error -98 calling set_mac_address
[  174.395746][T11511] netlink: 'syz.0.1640': attribute type 2 has an invalid length.
[  174.517607][   T33] audit: type=1800 audit(1752847225.311:4): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1644" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2664 res=0 errno=0
[  174.533912][   T33] audit: type=1800 audit(1752847225.311:5): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1644" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2664 res=0 errno=0
[  174.705027][ T5278] udevd[5278]: worker [5842] /devices/virtual/block/nbd0 is taking a long time
[  174.961468][T11548] __nla_validate_parse: 13 callbacks suppressed
[  174.961539][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  174.966702][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  174.969379][T11548] netlink: 'syz.2.1656': attribute type 18 has an invalid length.
[  174.997135][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.001039][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  175.004797][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  175.006934][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  175.012873][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  175.013276][T11549] netlink: 'syz.2.1656': attribute type 18 has an invalid length.
[  175.017497][T11550] netlink: 'syz.2.1656': attribute type 18 has an invalid length.
[  175.102836][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  175.105441][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'.
[  175.304736][T11560] sctp: [Deprecated]: syz.1.1660 (pid 11560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.304736][T11560] Use struct sctp_sack_info instead
[  175.407859][T11571] openvswitch: netlink: Missing valid actions attribute.
[  175.410721][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.420687][T11571] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1663'.
[  175.582626][T11581] netlink: 'syz.0.1666': attribute type 1 has an invalid length.
[  175.613240][T11581] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.640945][T11581] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.649061][T11581] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  175.655408][T11581] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  175.752165][T11589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.829220][T11592] x_tables: duplicate underflow at hook 2
[  176.262490][T11600] batman_adv: batadv0: Adding interface: dummy0
[  176.265182][T11600] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.277352][T11600] batman_adv: batadv0: Interface activated: dummy0
[  176.470090][T11614] netlink: 'syz.0.1675': attribute type 21 has an invalid length.
[  176.536954][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'.
[  176.540106][T11621] bridge0: port 4(team0) entered disabled state
[  176.557641][T11621] batadv1: left allmulticast mode
[  176.559482][T11621] batadv1: left promiscuous mode
[  176.564091][T11621] bridge0: port 3(batadv1) entered disabled state
[  176.571016][T11621] bridge_slave_1: left allmulticast mode
[  176.575785][T11621] bridge_slave_1: left promiscuous mode
[  176.578240][T11621] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.585016][T11621] bridge_slave_0: left promiscuous mode
[  176.588633][T11621] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.594188][T11614] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  176.913726][T11637] gtp0: entered promiscuous mode
[  177.476493][T11687] batman_adv: batadv0: Adding interface: ip6gretap2
[  177.478686][T11687] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.487522][T11687] batman_adv: batadv0: Interface activated: ip6gretap2
[  177.787026][T11696] netlink: 'syz.2.1701': attribute type 21 has an invalid length.
[  177.789786][T11696] netlink: 'syz.2.1701': attribute type 1 has an invalid length.
[  178.348135][T11721] batman_adv: batadv0: Interface deactivated: dummy0
[  178.350951][T11721] batman_adv: batadv0: Removing interface: dummy0
[  178.606075][ T5835] Bluetooth: hci0: command tx timeout
[  178.702228][T11734] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.718659][T11740] netlink: 'syz.0.1717': attribute type 39 has an invalid length.
[  178.729500][T11734] macvlan4: entered promiscuous mode
[  178.733709][T11734] macvlan4: entered allmulticast mode
[  178.885771][T11749] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  179.112329][T11763] dvmrp8: entered allmulticast mode
[  179.169996][T11766] netlink: 'syz.2.1726': attribute type 11 has an invalid length.
[  179.427534][T11776] validate_nla: 1 callbacks suppressed
[  179.427551][T11776] netlink: 'syz.2.1731': attribute type 282 has an invalid length.
[  179.906833][T11797] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  179.995568][T11803] netlink: 'syz.0.1740': attribute type 3 has an invalid length.
[  180.079993][T11810] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  180.097649][T11812] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  180.100735][T11812] netlink: 'syz.1.1743': attribute type 2 has an invalid length.
[  180.104489][T11812] __nla_validate_parse: 23 callbacks suppressed
[  180.104505][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1743'.
[  180.215730][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'.
[  180.219147][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'.
[  180.233969][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'.
[  180.373172][T11839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1751'.
[  180.397135][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'.
[  180.401453][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'.
[  180.599555][T11854] IPVS: stopping backup sync thread 10271 ...
[  180.855587][T11871] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1763'.
[  180.859007][T11871] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1763'.
[  180.957450][T11877] syzkaller1: entered promiscuous mode
[  180.960741][T11877] syzkaller1: entered allmulticast mode
[  181.044131][  T789] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  181.054424][  T789] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  181.081810][T11886] Cannot find add_set index 0 as target
[  181.097912][T11889] DL<Y: renamed from lo
[  181.129299][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  181.199711][T11893] syz_tun: entered allmulticast mode
[  181.227753][T11892] syz_tun: left allmulticast mode
[  181.409216][T11896] Bluetooth: hci0: Opcode 0x080f failed: -22
[  182.082130][T11936] ieee802154 phy0 wpan0: encryption failed: -22
[  182.379141][T11957] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  182.382636][T11957] netlink: 'syz.2.1793': attribute type 2 has an invalid length.
[  182.599855][T11981] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.637812][T11988] netlink: del zone limit has 4 unknown bytes
[  183.159347][T12014] No such timeout policy "syz1"
[  183.521351][ T5841] Bluetooth: hci0: command tx timeout
[  183.886948][T12022] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  183.989433][T12028] netlink: 'syz.1.1816': attribute type 1 has an invalid length.
[  184.594740][T12078] IPv6: syztnl1: Disabled Multicast RS
[  184.713809][T12086] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.722153][T12086] netlink: 'syz.0.1829': attribute type 10 has an invalid length.
[  185.144072][T12100] Cannot find add_set index 0 as target
[  185.211785][T12101] netlink: 'syz.0.1834': attribute type 3 has an invalid length.
[  185.215036][T12101] netlink: 'syz.0.1834': attribute type 6 has an invalid length.
[  185.545468][T12110] netlink: 'syz.1.1836': attribute type 1 has an invalid length.
[  185.580331][T12110] 8021q: adding VLAN 0 to HW filter on device bond7
[  185.605004][T12110] gretap1: entered promiscuous mode
[  185.660205][T12113] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  185.666680][T12113] __nla_validate_parse: 9 callbacks suppressed
[  185.666698][T12113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1837'.
[  185.788408][T12120] syzkaller1: tun_chr_ioctl cmd 1074025672
[  185.790919][T12120] syzkaller1: ignored: set checksum disabled
[  185.846532][T12122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1840'.
[  185.906132][T12127] netlink: 'syz.2.1841': attribute type 3 has an invalid length.
[  185.909474][T12127] netlink: 'syz.2.1841': attribute type 3 has an invalid length.
[  185.917539][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'.
[  185.927223][T12127] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001
[  186.004846][T12134] gtp0: entered promiscuous mode
[  186.013537][T12134] gtp0: entered allmulticast mode
[  186.075596][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1845'.
[  186.083812][T12142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1847'.
[  186.205443][T12151] netlink: 'syz.1.1851': attribute type 4 has an invalid length.
[  186.276828][T12153] netlink: 'syz.0.1849': attribute type 2 has an invalid length.
[  186.301879][T12153] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1849'.
[  186.389943][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'.
[  186.457577][T12166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.921951][T12189] netlink: 'syz.1.1866': attribute type 39 has an invalid length.
[  186.960677][T12196] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  186.992334][T12201] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1868'.
[  187.179562][T12211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'.
[  187.407914][T12230] lo speed is unknown, defaulting to 1000
[  187.410741][T12230] wg1 speed is unknown, defaulting to 1000
[  187.550381][T12236] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1876'.
[  188.518209][T12270] lo speed is unknown, defaulting to 1000
[  188.523421][T12270] wg1 speed is unknown, defaulting to 1000
[  188.992776][T12292] block nbd1: shutting down sockets
[  189.438976][T12324] Cannot find add_set index 0 as target
[  189.467997][T12322] sctp: [Deprecated]: syz.2.1905 (pid 12322) Use of int in max_burst socket option.
[  189.467997][T12322] Use struct sctp_assoc_value instead
[  189.658145][T12341] lo speed is unknown, defaulting to 1000
[  189.663919][T12341] wg1 speed is unknown, defaulting to 1000
[  190.285505][T12363] validate_nla: 7 callbacks suppressed
[  190.285520][T12363] netlink: 'syz.2.1913': attribute type 7 has an invalid length.
[  190.344590][T12332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.558821][T12380] unknown channel width for channel at 909000KHz?
[  190.682224][T12060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  190.841579][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  191.053215][T12427] openvswitch: netlink: Message has 264 unknown bytes.
[  191.086238][T12430] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  191.289816][T12443] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  191.381046][T12454] __nla_validate_parse: 9 callbacks suppressed
[  191.381058][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'.
[  191.388228][T12454] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  191.828559][T12466] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1943'.
[  191.837494][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'.
[  191.840840][T12466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1943'.
[  191.956404][T12471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.959963][T12471] bond_slave_1: left promiscuous mode
[  191.968414][T12471] bond0 (unregistering): Released all slaves
[  192.167122][  T790] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  192.180637][  T790] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  192.187863][  T790] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  192.274983][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1946'.
[  192.378821][T12497] pim6reg1: entered promiscuous mode
[  192.380609][T12497] pim6reg1: entered allmulticast mode
[  192.396358][T12500] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  192.456916][T12503] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20001
[  192.505271][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'.
[  192.508193][T12507] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  192.790589][T12524] netlink: 'syz.0.1958': attribute type 13 has an invalid length.
[  192.844997][T12530] netlink: 'syz.1.1959': attribute type 3 has an invalid length.
[  192.898157][T12532] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1958'.
[  193.093176][T12530] 8021q: adding VLAN 0 to HW filter on device bond8
[  193.096518][T12532] 0: renamed from hsr0 (while UP)
[  193.121117][T12532] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  193.163132][T12538] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1961'.
[  193.220617][T12545] netlink: 'syz.2.1962': attribute type 39 has an invalid length.
[  193.302080][T12548] Can't find ip_set type bitmap:ip
[  193.638098][T12572] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1967'.
[  193.750309][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1968'.
[  193.887289][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.908251][T12578] 8021q: adding VLAN 0 to HW filter on device bond13
[  193.927141][T12578] macvlan2: entered promiscuous mode
[  193.929487][T12578] macvlan2: entered allmulticast mode
[  193.933681][T12578] bond0: entered allmulticast mode
[  193.936703][T12578] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  193.943882][T12578] bond13: (slave macvlan2): Enslaving as an active interface with an up link
[  194.477933][T12606] netlink: del zone limit has 4 unknown bytes
[  194.521514][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  194.690815][T12615] netlink: 'syz.1.1981': attribute type 2 has an invalid length.
[  195.084825][T12623] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  195.087789][T12623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.326798][T12636] netlink: 'syz.2.1989': attribute type 8 has an invalid length.
[  195.415626][T12653] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  195.482020][T12661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.923870][T12674] pim6reg: entered allmulticast mode
[  196.284694][T12682] No such timeout policy "syz0"
[  196.537476][T12706] set match dimension is over the limit!
[  196.708338][T12719] netlink: 'syz.2.2016': attribute type 3 has an invalid length.
[  196.974873][T12729] __nla_validate_parse: 25 callbacks suppressed
[  196.974888][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'.
[  196.997317][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  197.000798][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'.
[  197.005241][T12729] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2021'.
[  197.238906][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'.
[  197.332768][T12742] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2025'.
[  197.336053][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'.
[  197.483942][T12746] netlink: 'syz.1.2027': attribute type 29 has an invalid length.
[  197.487587][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  197.491730][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2026'.
[  197.495444][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2026'.
[  197.502231][T12744] netlink: 'syz.0.2026': attribute type 30 has an invalid length.
[  197.542219][T12748] netlink: 'syz.1.2028': attribute type 1 has an invalid length.
[  197.642540][T12755] !: renamed from dummy0 (while UP)
[  197.871694][T12766] lo speed is unknown, defaulting to 1000
[  197.875643][T12766] wg1 speed is unknown, defaulting to 1000
[  198.095901][T12778] xt_CT: You must specify a L4 protocol and not use inversions on it
[  198.721999][T12806] 8021q: VLANs not supported on ip_vti0
[  198.750765][T12808] syzkaller1: entered promiscuous mode
[  198.753321][T12808] syzkaller1: entered allmulticast mode
[  198.862632][T12813] netlink: 'syz.0.2040': attribute type 1 has an invalid length.
[  198.912859][T12813] pim6reg: left allmulticast mode
[  199.179263][T12840] tc_dump_action: action bad kind
[  199.205861][T12843] netlink: 'syz.2.2049': attribute type 4 has an invalid length.
[  200.209924][T12906] dvmrp0: entered allmulticast mode
[  202.088860][T12986] __nla_validate_parse: 25 callbacks suppressed
[  202.088879][T12986] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2094'.
[  202.098062][T12986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.460960][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'.
[  202.468496][T13012] netlink: 'syz.2.2100': attribute type 53 has an invalid length.
[  202.743871][T13025] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2103'.
[  203.116395][T13028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2104'.
[  203.120088][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'.
[  203.481793][   T60] block nbd0: Possible stuck request ffff888020d18000: control (read@0,1024B). Runtime 90 seconds
[  203.486316][   T60] block nbd0: Possible stuck request ffff888020d18200: control (read@1024,1024B). Runtime 90 seconds
[  203.490662][   T60] block nbd0: Possible stuck request ffff888020d18400: control (read@2048,1024B). Runtime 90 seconds
[  203.495100][   T60] block nbd0: Possible stuck request ffff888020d18600: control (read@3072,1024B). Runtime 90 seconds
[  203.678080][T13055] openvswitch: netlink: Flow actions attr not present in new flow.
[  203.923993][T13075] netlink: 'syz.0.2112': attribute type 1 has an invalid length.
[  203.988638][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2112'.
[  204.605016][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'.
[  204.739831][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'.
[  204.925376][T13108] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  204.947482][T13108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2127'.
[  204.951996][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2127'.
[  205.594018][T13153] syzkaller0: entered allmulticast mode
[  205.997092][T13177] IPVS: Error connecting to the multicast addr
[  206.001125][T13179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.006894][T13180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.024904][T13179] netlink: 'syz.2.2149': attribute type 1 has an invalid length.
[  206.359839][T13205] netlink: 'syz.2.2157': attribute type 6 has an invalid length.
[  206.614154][T13220] nbd: couldn't find a device at index 65546
[  207.126834][T13252] netlink: 'syz.0.2169': attribute type 10 has an invalid length.
[  207.130040][T13252] __nla_validate_parse: 4 callbacks suppressed
[  207.130055][T13252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2169'.
[  207.137448][T13252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  207.422163][T13271] siw: device registration error -23
[  207.426317][T13271] netlink: 'syz.0.2176': attribute type 1 has an invalid length.
[  207.465098][T13275] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2174'.
[  207.635640][T13290] netlink: 'syz.0.2179': attribute type 1 has an invalid length.
[  207.638144][T13290] netlink: 'syz.0.2179': attribute type 3 has an invalid length.
[  207.640440][T13290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2179'.
[  207.658762][T13292] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  207.765430][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'.
[  207.796511][T13299] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  207.883537][T13314] netlink: 'syz.0.2189': attribute type 7 has an invalid length.
[  207.916133][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2190'.
[  208.012998][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2193'.
[  208.366917][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2198'.
[  208.569173][T13349] xt_cgroup: invalid path, errno=-2
[  208.717801][T13357] openvswitch: netlink: IPv4 tun info is not correct
[  208.870909][T13365] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2205'.
[  208.887274][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'.
[  208.891023][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'.
[  208.921018][T13367] netlink: 'syz.0.2207': attribute type 1 has an invalid length.
[  209.586764][T13410] xt_hashlimit: size too large, truncated to 1048576
[  209.596358][T13411] : renamed from bridge_slave_0
[  209.748415][T13416] lo speed is unknown, defaulting to 1000
[  209.758026][T13416] wg1 speed is unknown, defaulting to 1000
[  210.092623][T13425] bond0: entered promiscuous mode
[  210.095994][T13425] bond0: left promiscuous mode
[  210.198578][T13434] bridge67: entered promiscuous mode
[  210.208717][T13434] bridge67: entered allmulticast mode
[  210.221364][T13434] team0: Port device bridge67 added
[  211.191895][T13445] delete_channel: no stack
[  211.384568][T13462] netlink: 'syz.2.2238': attribute type 2 has an invalid length.
[  211.423889][T13464] IPv6: sit2: Disabled Multicast RS
[  211.427117][T13464] sit2: entered allmulticast mode
[  211.542998][T13471] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  211.546034][T13471] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  211.894946][T13495] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  212.245620][T13515] __nla_validate_parse: 17 callbacks suppressed
[  212.245636][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'.
[  212.360286][T13528] netlink: 'syz.2.2259': attribute type 6 has an invalid length.
[  212.546746][T13544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2264'.
[  212.688139][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'.
[  212.780775][T13559] netlink: 'syz.1.2267': attribute type 1 has an invalid length.
[  212.864966][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'.
[  212.910112][T13578] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2275'.
[  212.914446][T13578] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2275'.
[  212.917969][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2275'.
[  212.932798][T13577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.936803][T13577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2274'.
[  213.479481][T13604] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2281'.
[  213.933762][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'.
[  213.967283][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  214.687142][T13659] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  214.877950][T13667] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  215.750784][T13705] Cannot find set identified by id 2 to match
[  216.247307][T13741] No such timeout policy "syz1"
[  216.366285][T13748] xt_hashlimit: size too large, truncated to 1048576
[  216.719982][T13760] bridge0: port 1(syz_tun) entered blocking state
[  216.724449][T13760] bridge0: port 1(syz_tun) entered disabled state
[  216.727405][T13760] syz_tun: entered allmulticast mode
[  216.735825][T13760] syz_tun: entered promiscuous mode
[  217.291821][T13800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  217.328796][T13802] __nla_validate_parse: 16 callbacks suppressed
[  217.328811][T13802] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2340'.
[  217.339977][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'.
[  217.861068][T13814] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.864842][T13814] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.868148][T13814] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.872180][T13814] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.913748][T13814] tipc: Resetting bearer <eth:syzkaller0>
[  218.005291][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'.
[  218.011339][ T5839] wg1 speed is unknown, defaulting to 1000
[  218.018452][ T5839] syz0: Port: 1 Link DOWN
[  218.244768][T13839] veth0: entered promiscuous mode
[  218.277370][T13839] veth0: left promiscuous mode
[  218.321014][T13848] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  218.360541][T13850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.365974][T13850] syzkaller0: entered promiscuous mode
[  218.368186][T13850] syzkaller0: entered allmulticast mode
[  218.385393][T13850] tipc: Resetting bearer <eth:syzkaller0>
[  218.396947][T13849] tipc: Resetting bearer <eth:syzkaller0>
[  218.428274][T13849] tipc: Disabling bearer <eth:syzkaller0>
[  218.435285][T13854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2358'.
[  218.443739][T13854] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.449653][T13856] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2359'.
[  218.456185][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'.
[  218.468226][T13854] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2358'.
[  218.612605][T13871] bond0: Device is already in use.
[  218.631969][T13872] 8021q: VLANs not supported on syzkaller1
[  218.634863][T13872] 8021q: VLANs not supported on syzkaller1
[  218.929649][T13897] netlink: 'syz.2.2369': attribute type 1 has an invalid length.
[  218.933645][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'.
[  219.040685][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2369'.
[  221.152577][T13888] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.155908][T13888] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.159104][T13888] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.163199][T13888] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.222367][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'.
[  221.378636][T13911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.382673][T13911] team0: Port device batadv0 added
[  221.530743][T13927] syzkaller1: entered promiscuous mode
[  221.536923][T13927] syzkaller1: entered allmulticast mode
[  221.789246][T13945] x_tables: duplicate underflow at hook 1
[  221.792239][T13945] netlink: 'syz.2.2383': attribute type 32 has an invalid length.
[  221.795621][T13945] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  221.806174][T12059] wlan1: Creating new IBSS network, BSSID 1e:fe:3b:3d:4b:18
[  221.814056][T13947] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.070402][T13961] vlan0: entered promiscuous mode
[  222.187694][T13970] bond15: entered promiscuous mode
[  222.189922][T13970] bond15: entered allmulticast mode
[  222.194479][T13970] 8021q: adding VLAN 0 to HW filter on device bond15
[  222.267936][T13974] netlink: 'syz.1.2393': attribute type 12 has an invalid length.
[  222.345484][T13979] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.361044][T13979] __nla_validate_parse: 6 callbacks suppressed
[  222.361060][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2395'.
[  222.380309][T13981] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  222.534090][T13992] lo speed is unknown, defaulting to 1000
[  222.539443][T13992] wg1 speed is unknown, defaulting to 1000
[  222.577168][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  222.703604][T14006] syzkaller1: entered promiscuous mode
[  222.707332][T14006] syzkaller1: entered allmulticast mode
[  222.756294][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2402'.
[  222.887521][T14011] lo speed is unknown, defaulting to 1000
[  222.894690][T14011] wg1 speed is unknown, defaulting to 1000
[  222.930043][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2406'.
[  222.973194][T14021] veth9: entered promiscuous mode
[  223.003694][T14028] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2407'.
[  223.006825][T14028] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  223.231302][T14036] lo speed is unknown, defaulting to 1000
[  223.234385][T14036] wg1 speed is unknown, defaulting to 1000
[  223.310274][T14043] netlink: 'syz.1.2409': attribute type 4 has an invalid length.
[  223.346413][   T24] lo speed is unknown, defaulting to 1000
[  223.349098][   T24] syz1: Port: 1 Link ACTIVE
[  223.799527][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'.
[  224.104422][T14081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.106906][T14081] IPv6: NLM_F_CREATE should be set when creating new route
[  224.109261][T14081] IPv6: NLM_F_CREATE should be set when creating new route
[  224.126272][T14077] tipc: Can't bind to reserved service type 1
[  224.129075][T14077] openvswitch: netlink: Flow actions attr not present in new flow.
[  224.384211][T14094] syz_tun: left allmulticast mode
[  224.386214][T14094] syz_tun: left promiscuous mode
[  224.388542][T14094] bridge0: port 1(syz_tun) entered disabled state
[  224.423570][T14094] batman_adv: batadv0: Interface deactivated: 0!
[  224.425838][T14094] batman_adv: batadv0: Removing interface: 0!
[  224.436957][T14094] team_slave_0: left promiscuous mode
[  224.439287][T14094] team_slave_0: left allmulticast mode
[  224.475100][T14094] team0: Port device team_slave_0 removed
[  224.477911][T14094] team_slave_1: left promiscuous mode
[  224.479788][T14094] team_slave_1: left allmulticast mode
[  224.491067][T14094] team0: Port device team_slave_1 removed
[  224.493997][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.496768][T14094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.501075][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.508371][T14094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.516074][T14094] bond1: (slave gretap1): Releasing active interface
[  224.530086][T14094] batadv3: left promiscuous mode
[  224.532017][T14094] batadv3: left allmulticast mode
[  224.539405][T14094] team0: Port device batadv3 removed
[  224.548306][T14094] bond5: (slave gretap3): Releasing active interface
[  224.555437][T14094] ip6gretap1: left allmulticast mode
[  224.557597][T14094] ip6gretap1: left promiscuous mode
[  224.560561][T14094] bridge3: port 1(ip6gretap1) entered disabled state
[  224.575228][T14101] netlink: 'syz.2.2425': attribute type 1 has an invalid length.
[  224.576236][T14094] veth7: left allmulticast mode
[  224.580181][T14094] bridge3: port 2(veth7) entered disabled state
[  224.593898][T14094] bond7: (slave batadv4): Releasing active interface
[  224.658905][T14099] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  225.147544][T14116] syzkaller1: entered promiscuous mode
[  225.150854][T14116] syzkaller1: entered allmulticast mode
[  225.285386][T14123] xt_hashlimit: size too large, truncated to 1048576
[  225.387857][T14131] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2436'.
[  225.845964][T14158] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  226.893253][T14176] netlink: 'syz.2.2451': attribute type 11 has an invalid length.
[  226.896450][T14176] netlink: 'syz.2.2451': attribute type 4 has an invalid length.
[  226.899656][T14176] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2451'.
[  227.001167][T14179] xt_socket: unknown flags 0x8
[  227.024213][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'.
[  227.133149][T14192] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2458'.
[  227.508668][T14219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2467'.
[  227.561022][T14223] netlink: 'syz.2.2469': attribute type 10 has an invalid length.
[  227.564128][T14223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2469'.
[  227.568528][T14223] batman_adv: batadv0: Adding interface: 
[  227.570570][T14223] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.584035][T14223] batman_adv: batadv0: Interface activated: 
[  227.593451][T14223] netem: change failed
[  227.780668][T14237] netlink: 'syz.0.2474': attribute type 9 has an invalid length.
[  227.803636][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'.
[  227.810481][T14237] batadv0: entered promiscuous mode
[  227.820016][T14237] batadv0: left promiscuous mode
[  228.214628][T14256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2480'.
[  228.253841][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'.
[  228.463238][T14275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2486'.
[  228.645887][T14288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2490'.
[  228.648794][T14288] netlink: 'syz.1.2490': attribute type 7 has an invalid length.
[  228.652435][T14288] netlink: 'syz.1.2490': attribute type 8 has an invalid length.
[  228.654797][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'.
[  228.786820][T14295] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2493'.
[  229.579700][T14312] netlink: 'syz.0.2499': attribute type 16 has an invalid length.
[  229.583145][T14312] netlink: 'syz.0.2499': attribute type 3 has an invalid length.
[  229.586437][T14312] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2499'.
[  229.765646][T14329] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  229.789504][T14331] No such timeout policy "syz0"
[  229.915636][T14341] x_tables: duplicate underflow at hook 2
[  230.079174][T14352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.104179][T14352] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  230.249585][T14359] tun0: tun_chr_ioctl cmd 1074025675
[  230.257724][T14359] tun0: persist enabled
[  230.259711][T14360] tun0: tun_chr_ioctl cmd 1074025675
[  230.262243][T14360] tun0: persist enabled
[  230.265054][T14359] tun0: tun_chr_ioctl cmd 1074025675
[  230.267204][T14359] tun0: persist enabled
[  230.367349][T14365] IPv6: NLM_F_CREATE should be specified when creating new route
[  230.377335][T14365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.380063][T14365] IPv6: NLM_F_CREATE should be set when creating new route
[  230.480440][T14376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.673124][T14388] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  230.968941][T14405] syzkaller0: entered promiscuous mode
[  230.971155][T14405] syzkaller0: entered allmulticast mode
[  230.979043][T14407] delete_channel: no stack
[  232.575840][T14419] __nla_validate_parse: 9 callbacks suppressed
[  232.575854][T14419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2531'.
[  232.596459][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  232.612813][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  232.616712][T14421] netlink: 'syz.1.2532': attribute type 11 has an invalid length.
[  232.619312][T14421] netlink: 'syz.1.2532': attribute type 11 has an invalid length.
[  232.631487][T14421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2532'.
[  232.668043][T14424] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  232.727093][T14437] IPv6: NLM_F_CREATE should be specified when creating new route
[  232.749781][T14439] netlink: 'syz.1.2537': attribute type 4 has an invalid length.
[  232.755618][T14439] netlink: 'syz.1.2537': attribute type 4 has an invalid length.
[  232.909732][T14453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2540'.
[  232.956537][T14443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2538'.
[  232.996027][T14458] 1{X: left allmulticast mode
[  233.001056][T14458] batadv_slave_0: left promiscuous mode
[  233.016163][T14458] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  233.019241][T14458] ip6erspan0: left promiscuous mode
[  233.022409][T14458] veth2: left allmulticast mode
[  233.024405][T14458] veth3: left promiscuous mode
[  233.026666][T14458] tipc: Resetting bearer <eth:syzkaller0>
[  233.030296][T14458] syzkaller0: left promiscuous mode
[  233.041298][T14458] syzkaller0: left allmulticast mode
[  233.052517][T14458] ip6gretap1: left promiscuous mode
[  233.054617][T14458] ip6gretap1: left allmulticast mode
[  233.057130][T14458] bond6: left promiscuous mode
[  233.058963][T14458] bond6: left allmulticast mode
[  233.076303][T14458] macvlan4: left promiscuous mode
[  233.078292][T14458] macvlan4: left allmulticast mode
[  233.080752][T14458] gretap1: left promiscuous mode
[  233.092240][T14458] gtp0: left promiscuous mode
[  233.094403][T14458] gtp0: left allmulticast mode
[  233.111064][T14458] bridge67: left promiscuous mode
[  233.113828][T14458] bridge67: left allmulticast mode
[  233.117050][T14458] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.120205][T14458] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.123997][T14458] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.127413][T14458] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.146135][ T5900] lo speed is unknown, defaulting to 1000
[  233.147600][T14464] netlink: 'syz.0.2543': attribute type 29 has an invalid length.
[  233.148218][ T5900] syz1: Port: 1 Link DOWN
[  233.211801][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'.
[  233.296916][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2544'.
[  233.399339][T14485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2549'.
[  233.419087][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'.
[  233.562328][   T60] block nbd0: Possible stuck request ffff888020d18000: control (read@0,1024B). Runtime 120 seconds
[  233.565544][   T60] block nbd0: Possible stuck request ffff888020d18200: control (read@1024,1024B). Runtime 120 seconds
[  233.569964][   T60] block nbd0: Possible stuck request ffff888020d18400: control (read@2048,1024B). Runtime 120 seconds
[  233.575555][   T60] block nbd0: Possible stuck request ffff888020d18600: control (read@3072,1024B). Runtime 120 seconds
[  233.882208][T14537] netlink: 'syz.2.2566': attribute type 83 has an invalid length.
[  233.964448][T14547] netlink: 'syz.0.2570': attribute type 17 has an invalid length.
[  233.970698][T14547] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  234.038713][T14551] netlink: 'syz.0.2571': attribute type 15 has an invalid length.
[  234.076126][T14550] syzkaller1: entered promiscuous mode
[  234.078417][T14550] syzkaller1: entered allmulticast mode
[  234.780350][T14594] netlink: 'syz.2.2581': attribute type 3 has an invalid length.
[  234.785370][T14594] netlink: 'syz.2.2581': attribute type 30 has an invalid length.
[  235.027021][T14615] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  235.031943][T14615] gretap0: entered promiscuous mode
[  235.033693][T14615] gretap0: entered allmulticast mode
[  235.273547][T14619] netlink: 'syz.0.2587': attribute type 83 has an invalid length.
[  235.314257][T14619] xt_hashlimit: size too large, truncated to 1048576
[  235.317052][T14619] xt_hashlimit: max too large, truncated to 1048576
[  235.341873][T14619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  235.983624][T14639] vti0: entered promiscuous mode
[  236.097506][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.100680][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.105557][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.108766][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.112454][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.115921][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.119285][T14660] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  236.778652][T14695] tap0: tun_chr_ioctl cmd 1074025676
[  236.780806][T14695] tap0: owner set to 0
[  236.998227][T14710] macsec1: entered allmulticast mode
[  237.199850][T14718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.444761][T14739] IPv6: sit3: Disabled Multicast RS
[  237.446983][T14739] sit3: entered allmulticast mode
[  237.613491][T14754] __nla_validate_parse: 52 callbacks suppressed
[  237.613504][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'.
[  237.639080][T14754] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2631'.
[  237.918924][T14774] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2636'.
[  237.922132][T14774] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2636'.
[  237.958041][T14779] siw: device registration error -23
[  237.968407][T14779] siw: device registration error -23
[  237.970796][T14779] siw: device registration error -23
[  237.974136][T14779] siw: device registration error -23
[  237.976780][T14779] siw: device registration error -23
[  237.979387][T14779] siw: device registration error -23
[  237.984392][T14779] siw: device registration error -23
[  237.986943][T14779] siw: device registration error -23
[  237.989518][T14779] siw: device registration error -23
[  237.992421][T14779] siw: device registration error -23
[  237.995191][T14779] siw: device registration error -23
[  237.997748][T14779] siw: device registration error -23
[  238.000395][T14779] siw: device registration error -23
[  238.003367][T14779] siw: device registration error -23
[  238.005964][T14779] siw: device registration error -23
[  238.008527][T14779] siw: device registration error -23
[  238.011137][T14779] siw: device registration error -23
[  238.014575][T14779] siw: device registration error -23
[  238.017145][T14779] siw: device registration error -23
[  238.019669][T14779] siw: device registration error -23
[  238.022629][T14779] siw: device registration error -23
[  238.025193][T14779] siw: device registration error -23
[  238.027836][T14779] siw: device registration error -23
[  238.030388][T14779] siw: device registration error -23
[  238.034381][T14779] siw: device registration error -23
[  238.036977][T14779] siw: device registration error -23
[  238.039559][T14779] siw: device registration error -23
[  238.044013][T14779] siw: device registration error -23
[  238.046594][T14779] siw: device registration error -23
[  238.049132][T14779] siw: device registration error -23
[  238.052104][T14779] siw: device registration error -23
[  238.056578][T14779] siw: device registration error -23
[  238.059145][T14779] siw: device registration error -23
[  238.504469][T14802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2644'.
[  238.507482][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'.
[  239.722923][T14841] pim6reg1: entered promiscuous mode
[  239.724639][T14841] pim6reg1: entered allmulticast mode
[  239.786101][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  239.789870][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'.
[  240.087381][T14882] lo speed is unknown, defaulting to 1000
[  240.092406][T14882] wg1 speed is unknown, defaulting to 1000
[  240.433909][T14904] bond0 (unregistering): Released all slaves
[  240.942612][T14910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2675'.
[  241.008627][T14909] batadv1: left allmulticast mode
[  241.016094][T14909] team0 (unregistering): Port device batadv1 removed
[  241.049955][T14923] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  241.050178][T14921] IPVS: stopping backup sync thread 14923 ...
[  241.182385][T14933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'.
[  241.367633][T14954] validate_nla: 33 callbacks suppressed
[  241.367645][T14954] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  241.395671][T14954] bond17: (slave bridge51): making interface the new active one
[  241.398609][T14954] bond17: (slave bridge51): Enslaving as an active interface with an up link
[  241.418329][T14958] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  241.430932][T14961] openvswitch: netlink: Flow key attr not present in new flow.
[  241.477007][T14958] netlink: 'syz.0.2689': attribute type 10 has an invalid length.
[  241.507942][T14958] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  241.667699][T14975] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  241.805054][T14981] lo speed is unknown, defaulting to 1000
[  241.809082][T14981] wg1 speed is unknown, defaulting to 1000
[  241.844227][T14982] netlink: 'syz.0.2698': attribute type 21 has an invalid length.
[  241.855468][T14982] netlink: 'syz.0.2698': attribute type 6 has an invalid length.
[  242.466817][T15007] netlink: 'syz.1.2705': attribute type 3 has an invalid length.
[  242.710839][T15019] __nla_validate_parse: 19 callbacks suppressed
[  242.710853][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2709'.
[  242.808263][T15022] lo speed is unknown, defaulting to 1000
[  242.812189][T15022] wg1 speed is unknown, defaulting to 1000
[  242.827418][T15023] netlink: 'syz.1.2710': attribute type 4 has an invalid length.
[  242.837938][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'.
[  242.854480][   T24] lo speed is unknown, defaulting to 1000
[  242.861102][   T24] syz1: Port: 1 Link ACTIVE
[  243.031157][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'.
[  243.034176][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'.
[  243.073973][T15038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  243.080026][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'.
[  243.124965][T15031] netlink: 'syz.0.2713': attribute type 1 has an invalid length.
[  246.040365][T15048] netlink: 'syz.2.2715': attribute type 1 has an invalid length.
[  246.045600][T15048] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2715'.
[  246.074154][T15051] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2716'.
[  246.308810][T15060] lo speed is unknown, defaulting to 1000
[  246.312256][T15060] wg1 speed is unknown, defaulting to 1000
[  246.372874][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'.
[  246.375971][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'.
[  246.498464][T15089] "syz.1.2726" (15089) uses obsolete ecb(arc4) skcipher
[  246.505030][  T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.507533][  T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.536826][T15094] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  246.638336][T15100] dvmrp0: left allmulticast mode
[  247.076677][T15112] batadv_slave_0: entered promiscuous mode
[  247.234945][T15112] batadv_slave_0 (unregistering): left promiscuous mode
[  247.427810][T15129] netlink: 'syz.2.2738': attribute type 1 has an invalid length.
[  247.471135][T15142] syzkaller1: entered promiscuous mode
[  247.473193][T15142] syzkaller1: entered allmulticast mode
[  247.500447][T15144] openvswitch: netlink: EtherType 10 is less than min 600
[  248.481622][T15155] siw: device registration error -23
[  248.512411][T15155] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.521880][T15155] syzkaller0: entered promiscuous mode
[  248.523647][T15155] syzkaller0: entered allmulticast mode
[  248.634319][T15162] lo speed is unknown, defaulting to 1000
[  248.639474][T15157] lo speed is unknown, defaulting to 1000
[  248.642728][T15157] wg1 speed is unknown, defaulting to 1000
[  248.657657][T15162] wg1 speed is unknown, defaulting to 1000
[  249.442209][T15198] IPVS: length: 209 != 24
[  249.827468][T15216] __nla_validate_parse: 9 callbacks suppressed
[  249.827489][T15216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'.
[  249.833929][T15216] netlink: 'syz.2.2761': attribute type 7 has an invalid length.
[  249.837118][T15216] netlink: 'syz.2.2761': attribute type 8 has an invalid length.
[  249.840146][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'.
[  249.849678][T15216] 0{X: entered promiscuous mode
[  249.854486][T15216] batadv_slave_1: entered promiscuous mode
[  249.858570][T15216] hsr2: Slave A (30{X) is not up; please bring it up to get a fully working HSR network
[  249.866021][T15216] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.924598][T15218] sctp: [Deprecated]: syz.2.2763 (pid 15218) Use of int in maxseg socket option.
[  249.924598][T15218] Use struct sctp_assoc_value instead
[  249.939200][T15220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2762'.
[  249.977381][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'.
[  250.085546][T15226] netlink: 'syz.2.2766': attribute type 10 has an invalid length.
[  250.196538][T15237] xt_socket: unknown flags 0xfc
[  250.376560][T15252] netlink: 'syz.1.2774': attribute type 10 has an invalid length.
[  250.379016][T15252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2774'.
[  250.385171][T15252] team0: entered promiscuous mode
[  250.387884][T15252] bridge67: entered promiscuous mode
[  250.390361][T15252] batadv0: entered promiscuous mode
[  250.392584][T15252] team0: entered allmulticast mode
[  250.394195][T15252] bridge67: entered allmulticast mode
[  250.395847][T15252] batadv0: entered allmulticast mode
[  250.398397][T15252] 8021q: adding VLAN 0 to HW filter on device team0
[  250.400949][T15252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  250.501138][T15259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2776'.
[  250.505166][T15263] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2777'.
[  250.519018][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'.
[  250.656000][T15272] ip6t_srh: unknown srh match flags  4000
[  250.715692][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'.
[  250.901715][T15291] netlink: 'syz.1.2789': attribute type 21 has an invalid length.
[  250.904834][T15291] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2789'.
[  251.052478][T15295] lo speed is unknown, defaulting to 1000
[  251.056240][T15295] wg1 speed is unknown, defaulting to 1000
[  251.790256][T15325] netlink: 'syz.1.2797': attribute type 3 has an invalid length.
[  251.803561][T15325] netlink: 'syz.1.2797': attribute type 3 has an invalid length.
[  251.921116][T15328] lo speed is unknown, defaulting to 1000
[  251.931095][T15328] wg1 speed is unknown, defaulting to 1000
[  252.628474][T15363] lo speed is unknown, defaulting to 1000
[  252.652269][T15363] wg1 speed is unknown, defaulting to 1000
[  253.254972][T15398] tipc: Failed to remove unknown binding: 66,1,1/0:93319079/93319081
[  253.272719][T15398] tipc: Failed to remove unknown binding: 66,1,1/0:93319079/93319081
[  253.278151][T15398] tipc: Failed to remove unknown binding: 66,1,1/0:93319079/93319081
[  253.455341][T15410] openvswitch: netlink: Message has 5 unknown bytes.
[  254.113034][T15443] sctp: [Deprecated]: syz.2.2832 (pid 15443) Use of int in max_burst socket option.
[  254.113034][T15443] Use struct sctp_assoc_value instead
[  254.598062][T15491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.884997][T15508] sctp: [Deprecated]: syz.1.2847 (pid 15508) Use of int in maxseg socket option.
[  254.884997][T15508] Use struct sctp_assoc_value instead
[  254.954079][T15512] netlink: 'syz.1.2847': attribute type 5 has an invalid length.
[  255.029838][T15516] sctp: [Deprecated]: syz.1.2849 (pid 15516) Use of int in maxseg socket option.
[  255.029838][T15516] Use struct sctp_assoc_value instead
[  255.240367][T15526] __nla_validate_parse: 13 callbacks suppressed
[  255.240390][T15526] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2853'.
[  255.348072][T15531] netlink: 'syz.0.2854': attribute type 7 has an invalid length.
[  255.415956][T15535] bpq0: entered allmulticast mode
[  255.560486][T15542] netlink: 'syz.0.2856': attribute type 10 has an invalid length.
[  255.564159][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2856'.
[  255.579929][T15542] batman_adv: batadv0: Adding interface: virt_wifi0
[  255.582279][T15542] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.590759][T15542] batman_adv: batadv0: Interface activated: virt_wifi0
[  255.598902][T15542] tc_dump_action: action bad kind
[  255.694889][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'.
[  255.771357][T10025] nci: nci_rx_work: unknown MT 0x1
[  255.836504][T15554] netlink: 'syz.0.2859': attribute type 16 has an invalid length.
[  255.843255][T15554] netlink: 'syz.0.2859': attribute type 3 has an invalid length.
[  255.852424][T15554] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2859'.
[  255.913550][T15559] netlink: 'syz.2.2860': attribute type 25 has an invalid length.
[  256.400649][T15569] netlink: 'syz.2.2864': attribute type 1 has an invalid length.
[  256.512006][T15582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2866'.
[  256.583370][T15594] netlink: 'syz.0.2870': attribute type 5 has an invalid length.
[  256.649437][T15600] syzkaller1: entered promiscuous mode
[  256.653847][T15600] syzkaller1: entered allmulticast mode
[  256.694582][T15600] team0: left promiscuous mode
[  256.696139][T15600] team0: left allmulticast mode
[  256.811747][T15611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.813968][T15612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2876'.
[  256.862587][T15614] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2877'.
[  256.918523][T15617] macsec2: entered promiscuous mode
[  256.920276][T15617] macsec2: entered allmulticast mode
[  257.046044][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2882'.
[  257.111794][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  257.115205][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  257.637746][T15661] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  257.941167][T15687] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  258.035209][T15683] tipc: Resetting bearer <eth:syzkaller0>
[  258.050820][ T5900] lo speed is unknown, defaulting to 1000
[  258.053514][ T5900] syz1: Port: 1 Link DOWN
[  258.482072][T15731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.532542][T15733] Cannot find del_set index 4 as target
[  258.729859][T15738] netlink: 'syz.0.2914': attribute type 22 has an invalid length.
[  258.733836][T15738] netlink: 'syz.0.2914': attribute type 13 has an invalid length.
[  259.045822][T15738] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  259.267137][T15738] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  259.274412][T15738] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.277271][T15738] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.279749][T15738] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.282502][T15738] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.296351][T15738] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.298939][T15738] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.302028][T15738] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.304514][T15738] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.404937][T15742] syzkaller1: entered promiscuous mode
[  259.407132][T15742] syzkaller1: entered allmulticast mode
[  259.422434][T15745] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  259.629388][T15758] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[  259.636498][T15758] Cannot find add_set index 3 as target
[  259.649386][  T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.652851][  T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.665349][T15758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.389754][T15804] __nla_validate_parse: 45 callbacks suppressed
[  260.389767][T15804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2934'.
[  260.400459][T15804] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2934'.
[  260.546222][   T24] hid-generic 0005:0458:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  260.606291][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'.
[  261.339809][T15851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2948'.
[  261.479951][T15855] batman_adv: batadv0: Interface deactivated: 
[  261.485680][T15855] batman_adv: batadv0: Removing interface: 
[  261.497046][T15855] bond5: (slave geneve2): Releasing active interface
[  261.507229][T15855] bond6: (slave gretap1): Releasing active interface
[  261.514904][T15855] bond7: (slave ip6gretap1): Releasing active interface
[  261.519531][T15855] batman_adv: batadv0: Removing interface: ip6gretap2
[  261.528839][T15855] bond13: (slave macvlan2): Releasing backup interface
[  261.540679][T15855] bond0: left allmulticast mode
[  261.556552][T15855] bond17: (slave bridge51): Releasing active interface
[  261.948127][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'.
[  261.997730][T15870] openvswitch: netlink: Missing valid actions attribute.
[  262.000568][T15870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.025108][T15872] xt_CT: You must specify a L4 protocol and not use inversions on it
[  262.058597][T15872] veth10: entered allmulticast mode
[  262.075670][T15872] veth11: entered promiscuous mode
[  262.426373][T15901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.440941][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'.
[  262.451377][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'.
[  262.506677][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'.
[  262.563877][T15908] 8021q: adding VLAN 0 to HW filter on device batadv1
[  262.579338][T15908] batadv1: entered promiscuous mode
[  262.585675][T15908] batadv1: entered allmulticast mode
[  262.588447][T15908] team0: Failed to send options change via netlink (err -105)
[  262.597200][T15908] team0: Port device batadv1 added
[  262.607217][T15909] 8021q: adding VLAN 0 to HW filter on device batadv2
[  262.612503][T15909] batadv2: entered promiscuous mode
[  262.614773][T15909] batadv2: entered allmulticast mode
[  262.620710][T15909] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  262.627966][T15909] team0: Failed to send options change via netlink (err -105)
[  262.631040][T15909] team0: Port device batadv2 added
[  262.655742][T15914] lo speed is unknown, defaulting to 1000
[  262.662752][T15914] wg1 speed is unknown, defaulting to 1000
[  262.770195][T15920] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2969'.
[  262.893923][T15922] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.018796][T15926] bond5: (slave gretap0): Releasing active interface
[  263.025351][T15926] bridge67: left promiscuous mode
[  263.028334][T15926] bridge67: left allmulticast mode
[  263.043893][T15926] team0: Port device bridge67 removed
[  263.046979][T15926] batadv0: left promiscuous mode
[  263.049592][T15926] batadv0: left allmulticast mode
[  263.069888][T15926] team0: Port device batadv0 removed
[  263.073194][T15926] batadv1: left promiscuous mode
[  263.075597][T15926] batadv1: left allmulticast mode
[  263.087528][T15926] team0: Port device batadv1 removed
[  263.090232][T15926] batadv2: left promiscuous mode
[  263.101615][T15926] batadv2: left allmulticast mode
[  263.109754][T15926] team0: Port device batadv2 removed
[  263.263585][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  263.542493][T15951] syzkaller0: entered promiscuous mode
[  263.544388][T15951] syzkaller0: entered allmulticast mode
[  263.655058][   T60] block nbd0: Possible stuck request ffff888020d18000: control (read@0,1024B). Runtime 150 seconds
[  263.659544][   T60] block nbd0: Possible stuck request ffff888020d18200: control (read@1024,1024B). Runtime 150 seconds
[  263.664405][   T60] block nbd0: Possible stuck request ffff888020d18400: control (read@2048,1024B). Runtime 150 seconds
[  263.671309][   T60] block nbd0: Possible stuck request ffff888020d18600: control (read@3072,1024B). Runtime 150 seconds
[  264.626948][T15972] No such timeout policy "syz1"
[  265.188392][T15984] dummy0: entered allmulticast mode
[  265.204390][T15984] dummy0: left allmulticast mode
[  265.250954][T15988] validate_nla: 1 callbacks suppressed
[  265.250967][T15988] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  265.274034][T15986] netlink: 'syz.2.2989': attribute type 2 has an invalid length.
[  265.365877][T15997] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  265.372153][T15997] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  265.481300][T16008] __nla_validate_parse: 10 callbacks suppressed
[  265.481315][T16008] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2996'.
[  265.494340][T16004] netlink: 'syz.1.2995': attribute type 10 has an invalid length.
[  265.508208][T16004] dummy0: entered promiscuous mode
[  265.511482][T16004] dummy0: entered allmulticast mode
[  265.514192][T16004] team0: Port device dummy0 added
[  265.724629][T16023] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  265.949161][T16041] veth0_to_bond: entered allmulticast mode
[  265.951702][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3004'.
[  266.587054][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3015'.
[  266.590446][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3015'.
[  266.608226][T16078] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3016'.
[  266.613301][T16077] netlink: 'syz.2.3016': attribute type 58 has an invalid length.
[  266.616365][T16077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'.
[  266.674101][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'.
[  266.890082][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3019'.
[  267.567264][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[  267.570866][T16125] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  267.592312][T16125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.735024][T16129] bpq0: left allmulticast mode
[  268.454053][T16151] bridge70: the hash_elasticity option has been deprecated and is always 16
[  268.457384][T16151] bridge70: entered allmulticast mode
[  268.639631][T16161] lo speed is unknown, defaulting to 1000
[  268.645471][T16161] wg1 speed is unknown, defaulting to 1000
[  268.709068][T16167] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3042'.
[  269.467479][T16208] netlink: 'syz.1.3052': attribute type 2 has an invalid length.
[  269.667630][T16226] netlink: 'syz.2.3057': attribute type 1 has an invalid length.
[  269.704039][T16226] 8021q: adding VLAN 0 to HW filter on device bond18
[  270.063378][T16249] delete_channel: no stack
[  270.393348][T16266] netlink: 'syz.0.3070': attribute type 3 has an invalid length.
[  270.595265][T16237] ==================================================================
[  270.597924][T16237] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  270.600428][T16237] Read of size 1 at addr ffff88810a2b9c32 by task syz.2.3061/16237
[  270.603947][T16237] 
[  270.605217][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.2.3061 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  270.605238][T16237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.605246][T16237] Call Trace:
[  270.605255][T16237]  <TASK>
[  270.605265][T16237]  dump_stack_lvl+0x189/0x250
[  270.605287][T16237]  ? __kasan_check_byte+0x12/0x40
[  270.605311][T16237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.605338][T16237]  ? lock_release+0x4b/0x3e0
[  270.605358][T16237]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.605383][T16237]  print_report+0xd2/0x2b0
[  270.605397][T16237]  ? rose_transmit_link+0x5c3/0x740
[  270.605412][T16237]  kasan_report+0x118/0x150
[  270.605433][T16237]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  270.605460][T16237]  ? rose_transmit_link+0x5c3/0x740
[  270.605477][T16237]  rose_transmit_link+0x5c3/0x740
[  270.605489][T16237]  ? skb_put+0x11b/0x210
[  270.605504][T16237]  rose_write_internal+0x11dc/0x1ac0
[  270.605518][T16237]  ? __pfx_rose_write_internal+0x10/0x10
[  270.605528][T16237]  ? __timer_delete+0x5d/0x390
[  270.605542][T16237]  rose_release+0x24e/0x520
[  270.605554][T16237]  sock_close+0xc3/0x240
[  270.605563][T16237]  ? __pfx_sock_close+0x10/0x10
[  270.605571][T16237]  __fput+0x44c/0xa70
[  270.605584][T16237]  task_work_run+0x1d4/0x260
[  270.605598][T16237]  ? __pfx_task_work_run+0x10/0x10
[  270.605610][T16237]  ? task_work_add+0x377/0x420
[  270.605622][T16237]  ? __pfx_task_work_add+0x10/0x10
[  270.605633][T16237]  get_signal+0x11ed/0x1340
[  270.605647][T16237]  arch_do_signal_or_restart+0x9a/0x750
[  270.605662][T16237]  ? __pfx___sys_connect+0x10/0x10
[  270.605672][T16237]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  270.605692][T16237]  ? exit_to_user_mode_loop+0x40/0x110
[  270.605706][T16237]  exit_to_user_mode_loop+0x75/0x110
[  270.605717][T16237]  do_syscall_64+0x2bd/0x3b0
[  270.605731][T16237]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.605745][T16237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.605754][T16237]  ? exc_page_fault+0x9f/0xf0
[  270.605762][T16237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.605772][T16237] RIP: 0033:0x7f4fdd98e9a9
[  270.605782][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.605790][T16237] RSP: 002b:00007f4fde7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  270.605801][T16237] RAX: fffffffffffffe00 RBX: 00007f4fddbb5fa0 RCX: 00007f4fdd98e9a9
[  270.605808][T16237] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000a
[  270.605814][T16237] RBP: 00007f4fdda10d69 R08: 0000000000000000 R09: 0000000000000000
[  270.605820][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.605825][T16237] R13: 0000000000000000 R14: 00007f4fddbb5fa0 R15: 00007ffcbbc83748
[  270.605836][T16237]  </TASK>
[  270.605839][T16237] 
[  270.696000][T16237] Allocated by task 16129:
[  270.697410][T16237]  kasan_save_track+0x3e/0x80
[  270.698954][T16237]  __kasan_kmalloc+0x93/0xb0
[  270.700439][T16237]  __kmalloc_cache_noprof+0x230/0x3d0
[  270.702101][T16237]  rose_add_node+0x23a/0xde0
[  270.703629][T16237]  rose_rt_ioctl+0xa48/0xfb0
[  270.705179][T16237]  rose_ioctl+0x3ce/0x8b0
[  270.706607][T16237]  sock_do_ioctl+0xdc/0x300
[  270.708035][T16237]  sock_ioctl+0x576/0x790
[  270.709476][T16237]  __se_sys_ioctl+0xfc/0x170
[  270.710960][T16237]  do_syscall_64+0xfa/0x3b0
[  270.712398][T16237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.714637][T16237] 
[  270.715591][T16237] Freed by task 16269:
[  270.717201][T16237]  kasan_save_track+0x3e/0x80
[  270.719011][T16237]  kasan_save_free_info+0x46/0x50
[  270.720973][T16237]  __kasan_slab_free+0x62/0x70
[  270.722892][T16237]  kfree+0x18e/0x440
[  270.724499][T16237]  rose_rt_device_down+0x473/0x4c0
[  270.726712][T16237]  rose_device_event+0x603/0x6a0
[  270.728465][T16237]  notifier_call_chain+0x1b6/0x3e0
[  270.730090][T16237]  __dev_notify_flags+0x18d/0x2e0
[  270.731709][T16237]  netif_change_flags+0xe8/0x1a0
[  270.733308][T16237]  dev_change_flags+0x130/0x260
[  270.735079][T16237]  dev_ioctl+0x7b4/0x1150
[  270.736804][T16237]  sock_do_ioctl+0x22c/0x300
[  270.738564][T16237]  sock_ioctl+0x576/0x790
[  270.740261][T16237]  __se_sys_ioctl+0xfc/0x170
[  270.741906][T16237]  do_syscall_64+0xfa/0x3b0
[  270.743278][T16237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.745083][T16237] 
[  270.745967][T16237] The buggy address belongs to the object at ffff88810a2b9c00
[  270.745967][T16237]  which belongs to the cache kmalloc-512 of size 512
[  270.751319][T16237] The buggy address is located 50 bytes inside of
[  270.751319][T16237]  freed 512-byte region [ffff88810a2b9c00, ffff88810a2b9e00)
[  270.756144][T16237] 
[  270.756926][T16237] The buggy address belongs to the physical page:
[  270.758839][T16237] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810a2b8000 pfn:0x10a2b8
[  270.761863][T16237] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  270.764392][T16237] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  270.767446][T16237] page_type: f5(slab)
[  270.769017][T16237] raw: 057ff00000000240 ffff88801a441c80 ffffea000414fc10 ffffea000441b810
[  270.772249][T16237] raw: ffff88810a2b8000 000000000010000d 00000000f5000000 0000000000000000
[  270.775592][T16237] head: 057ff00000000240 ffff88801a441c80 ffffea000414fc10 ffffea000441b810
[  270.778715][T16237] head: ffff88810a2b8000 000000000010000d 00000000f5000000 0000000000000000
[  270.781476][T16237] head: 057ff00000000002 ffffea000428ae01 00000000ffffffff 00000000ffffffff
[  270.784036][T16237] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  270.786959][T16237] page dumped because: kasan: bad access detected
[  270.789499][T16237] page_owner tracks the page as allocated
[  270.791738][T16237] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5833, tgid 5833 (syz-executor), ts 66736484312, free_ts 66714597084
[  270.798933][T16237]  post_alloc_hook+0x240/0x2a0
[  270.800463][T16237]  get_page_from_freelist+0x21e4/0x22c0
[  270.802227][T16237]  __alloc_frozen_pages_noprof+0x181/0x370
[  270.804042][T16237]  alloc_pages_mpol+0x232/0x4a0
[  270.805625][T16237]  allocate_slab+0x8a/0x3b0
[  270.807417][T16237]  ___slab_alloc+0xbfc/0x1480
[  270.809236][T16237]  __kmalloc_noprof+0x305/0x4f0
[  270.811131][T16237]  fib6_info_alloc+0x30/0xf0
[  270.812928][T16237]  ip6_route_info_create+0x142/0x860
[  270.814863][T16237]  addrconf_f6i_alloc+0x1d2/0x450
[  270.816440][T16237]  ipv6_add_addr+0x56e/0x1090
[  270.818141][T16237]  inet6_addr_add+0x387/0xc00
[  270.819947][T16237]  inet6_rtm_newaddr+0x93d/0xd20
[  270.821889][T16237]  rtnetlink_rcv_msg+0x7cf/0xb70
[  270.823873][T16237]  netlink_rcv_skb+0x208/0x470
[  270.825380][T16237]  netlink_unicast+0x75c/0x8e0
[  270.827296][T16237] page last free pid 5837 tgid 5837 stack trace:
[  270.829706][T16237]  __free_frozen_pages+0xc71/0xe70
[  270.831729][T16237]  __put_partials+0x161/0x1c0
[  270.833560][T16237]  put_cpu_partial+0x17c/0x250
[  270.835376][T16237]  __slab_free+0x2f7/0x400
[  270.837146][T16237]  qlist_free_all+0x97/0x140
[  270.838937][T16237]  kasan_quarantine_reduce+0x148/0x160
[  270.841068][T16237]  __kasan_slab_alloc+0x22/0x80
[  270.842930][T16237]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  270.845309][T16237]  __alloc_skb+0x112/0x2d0
[  270.847191][T16237]  netlink_ack+0x146/0xa50
[  270.849014][T16237]  netlink_rcv_skb+0x28c/0x470
[  270.850854][T16237]  netlink_unicast+0x75c/0x8e0
[  270.852700][T16237]  netlink_sendmsg+0x805/0xb30
[  270.854529][T16237]  __sock_sendmsg+0x21c/0x270
[  270.856354][T16237]  __sys_sendto+0x3bd/0x520
[  270.858092][T16237]  __x64_sys_sendto+0xde/0x100
[  270.859928][T16237] 
[  270.860860][T16237] Memory state around the buggy address:
[  270.863123][T16237]  ffff88810a2b9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.866364][T16237]  ffff88810a2b9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.869404][T16237] >ffff88810a2b9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.872414][T16237]                                      ^
[  270.874578][T16237]  ffff88810a2b9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.877609][T16237]  ffff88810a2b9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.880726][T16237] ==================================================================
[  270.962833][T16237] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.965037][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.2.3061 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  270.969662][T16237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.973478][T16237] Call Trace:
[  270.974750][T16237]  <TASK>
[  270.975950][T16237]  dump_stack_lvl+0x99/0x250
[  270.977716][T16237]  ? __asan_memcpy+0x40/0x70
[  270.979520][T16237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.981533][T16237]  ? __pfx__printk+0x10/0x10
[  270.983479][T16237]  panic+0x2db/0x790
[  270.985003][T16237]  ? __pfx_preempt_schedule+0x10/0x10
[  270.987052][T16237]  ? __pfx_panic+0x10/0x10
[  270.988791][T16237]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  270.991027][T16237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.993478][T16237]  ? rose_transmit_link+0x5c3/0x740
[  270.995522][T16237]  check_panic_on_warn+0x89/0xb0
[  270.997478][T16237]  ? rose_transmit_link+0x5c3/0x740
[  270.999503][T16237]  end_report+0x78/0x160
[  271.001186][T16237]  kasan_report+0x129/0x150
[  271.002960][T16237]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  271.005349][T16237]  ? rose_transmit_link+0x5c3/0x740
[  271.007386][T16237]  rose_transmit_link+0x5c3/0x740
[  271.009358][T16237]  ? skb_put+0x11b/0x210
[  271.011000][T16237]  rose_write_internal+0x11dc/0x1ac0
[  271.013034][T16237]  ? __pfx_rose_write_internal+0x10/0x10
[  271.015232][T16237]  ? __timer_delete+0x5d/0x390
[  271.017061][T16237]  rose_release+0x24e/0x520
[  271.018857][T16237]  sock_close+0xc3/0x240
[  271.020532][T16237]  ? __pfx_sock_close+0x10/0x10
[  271.022402][T16237]  __fput+0x44c/0xa70
[  271.023960][T16237]  task_work_run+0x1d4/0x260
[  271.025782][T16237]  ? __pfx_task_work_run+0x10/0x10
[  271.027750][T16237]  ? task_work_add+0x377/0x420
[  271.029638][T16237]  ? __pfx_task_work_add+0x10/0x10
[  271.031676][T16237]  get_signal+0x11ed/0x1340
[  271.033484][T16237]  arch_do_signal_or_restart+0x9a/0x750
[  271.035626][T16237]  ? __pfx___sys_connect+0x10/0x10
[  271.037623][T16237]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  271.040044][T16237]  ? exit_to_user_mode_loop+0x40/0x110
[  271.042178][T16237]  exit_to_user_mode_loop+0x75/0x110
[  271.044175][T16237]  do_syscall_64+0x2bd/0x3b0
[  271.045996][T16237]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.048121][T16237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.050402][T16237]  ? exc_page_fault+0x9f/0xf0
[  271.052212][T16237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.054485][T16237] RIP: 0033:0x7f4fdd98e9a9
[  271.056223][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.063521][T16237] RSP: 002b:00007f4fde7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  271.066871][T16237] RAX: fffffffffffffe00 RBX: 00007f4fddbb5fa0 RCX: 00007f4fdd98e9a9
[  271.069987][T16237] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000a
[  271.072986][T16237] RBP: 00007f4fdda10d69 R08: 0000000000000000 R09: 0000000000000000
[  271.075981][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.078993][T16237] R13: 0000000000000000 R14: 00007f4fddbb5fa0 R15: 00007ffcbbc83748
[  271.081963][T16237]  </TASK>
[  271.083853][T16237] Kernel Offset: disabled
[  271.085550][T16237] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:02:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001213 RDI=0000000000001214 RBP=00000000000003f8 RSP=ffffc900073df210
R8 =ffff888107f10237 R9 =1ffff11020fe2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8d3 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4fde7d06c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8f042e56c0 CR3=0000000026864000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000305f6576616c 735f766461746162
XMM02=00007f4fddb86478 00007f4fddb86450 XMM03=00007f4fddb86488 00007f4fddb86480
XMM04=00007f4fde6ed100 00007f4fddb86440 XMM05=00007f4fddb86458 00007f4fddb864a0
XMM06=00007f4fddb86498 00007f4fddb86490 XMM07=00007f4fddb86488 00007f4fddb86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4fdda11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff820ae90d RBX=0000000000000000 RCX=ffff88801ee70000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000305f630 RSP=ffffc9000305f3b8
R8 =ffffea00045634b3 R9 =1ffffd40008ac696 R10=dffffc0000000000 R11=fffff940008ac697
R12=dffffc0000000000 R13=ffff88810f870f20 R14=ffffea0004563488 R15=ffffea0004563480
RIP=ffffffff81c0319f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555593c3a500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005618811a77e8 CR3=000000010dc0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
