last executing test programs:

1.200481119s ago: executing program 2 (id=3711):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e000100697036677265746170000006"], 0x58}}, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8006}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2, 0x7ff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f7ac88ed0bc799998c8dfb93526bae7551237dc26bd1ea00b021d859c2315db9bf6f0ff556e3f4ddaff7decc87e2921cf60432e83270b5a845e6a4641c44c00364e3527af423", 0x46}], 0x1, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0x200}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)="4243566a6dc82cb75d00ee63d11b22474d16d4ea20c4a03aede9941de776b054138c3246af5e921f3e79c4a49b7fbd0b3962774b63724c93c119c9f72051aa0e0579720eca109231e7935437d1de1ad9f9c4d49784148ea9c44c40b1432b3ae875351b57cab1a92cc7d5499838e0593ce246a407196a78aa85378cd0262034f5feec4850af996a7a5850ed1d050109b439032f23d2d8902f79b8556d6b06d216017f0ce0f5436baac43ed56edc1a94379587c41b617fb7500df058af87e3522be1984dd087c1053c07", 0xc9}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="4ed0c0ec8f51daa4cb2ffbf1107e154c448e7008b46cc928b2ee58475ce08474a8153c7e3f5978e231c27ff7ee3da58b0928285a0e71562a806583c38d6ab6", 0x3f}, {&(0x7f0000001480)="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", 0xfe}, {&(0x7f0000001580)="f0318a44828e0a2bedad5f735fde539671244c76ebfdffcc5cf58beaf110610cabab151ef3f3fb911493a602fba0f2b9c9d19060b24e583c9f478c93e9e065c0ef7a4bad4c78e6444cbe5247b0c75bfa77e1d9ec4d54de5dac48cca1ed913652fbb7383c431ecb6d13245e47726ba21e964ce190d48e", 0x76}], 0x5, &(0x7f0000001680)=[@hopopts={{0x1f0, 0x29, 0x36, {0x2c, 0x3a, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x64a551d36b1abdfb, 0x2, 0x0, 0x8, [0x40f4]}}, @generic={0x4d, 0xde, "28929668c017a4dd7e74f1d9f1e0ddf99513c90b42d5141fae8556e7de8e366966a3fa5d8c6d0d4bb1933c632cce21481c906b847c76b1d50820ba25a55f6078f5c442337f6f666b08eb0eea97b4df5600f5e852609071123f832f6fb5607fc2e2565af863ae9b991322fb6150c582fa829962563a971258ac9ec22f9e4026c2fef1421bf9f1ddda0ad82e80816ac018743dd1e14c42edf4181aaa11dd70f92349729174cd502adced189d1208bfcf60d0762eb2fca9d2b7744080af2e8e7207f1a4197e5afbd801f3cfda3b0c9ad778d13a497f009bfad7c90c1db31702"}, @generic={0x9, 0xd2, "0220fe9eb883f56955fd757f303b3b67a891c776433619612b96af203ab5441d0b7cfaa6fcf8cbfc7e37d7d5807c733647cfa74cb617f59392e7726ca8d20980ef8d4ff638c67c0b55b410bef533848f88896f6b4a85b4f5127c8894b9b62b8058c9c85782c1542690c7ed1e6eb1f94e6c5ccc25ada2eb96ca65eec5683b6002d696f0224bbdfa88483bea392b052daa934f83a14ad525b058e5abec7b4e3f8bfcb45d59f8ddceb6451b856abd066aada944ffe731e48675a2abef04cd547fb0614e09c860ba160a2a491d37146903438103"}, @pad1]}}}], 0x1f0}}], 0x3, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1.100457434s ago: executing program 2 (id=3712):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000001c0), &(0x7f00000003c0)='%pi6   \x00'}, 0x20)
syz_emit_ethernet(0xc6, &(0x7f0000000300)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x90, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x5e, 0xa, 0x4, 0x5, 0xd, 0x50, 0x5fb8, [@dev={0xfe, 0x80, '\x00', 0x3c}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @private2]}, @dstopts={0x6c}]}}}}}}}, 0x0)

1.099807111s ago: executing program 2 (id=3713):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000100000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x7, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x7, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) (async)
sendmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890)
socket(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
close(r1)

929.104623ms ago: executing program 2 (id=3717):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r1=>0x0, 0x10, 0x8, 0xfffffff9, 0x1da, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x67, 0x0, 0x40, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0xc2, 0x0, 0x2, [0x4, 0x1, 0x1, 0xe]}, @end, @noop, @cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "9e0e3aa2f15c25"}]}, @ssrr={0x89, 0xb, 0x52, [@loopback, @rand_addr=0x64010102]}, @noop]}}}}})
connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x10, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffe, 0x0, 0x57}}}}}}, 0x0)

928.739803ms ago: executing program 2 (id=3718):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0)
unshare(0x22020600)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x7)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

739.759396ms ago: executing program 1 (id=3721):
syz_emit_ethernet(0xc6, &(0x7f0000000300)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x90, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x5e, 0xa, 0x4, 0x5, 0xd, 0x50, 0x5fb8, [@dev={0xfe, 0x80, '\x00', 0x3c}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @private2]}, @dstopts={0x6c}]}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x7, 0x8000, 0x2, 0x10, {{0x2a, 0x4, 0x3, 0x0, 0xa8, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0xf7, [@local, @private=0xa010101, @broadcast, @broadcast, @empty]}, @cipso={0x86, 0x66, 0x1, [{0x0, 0x3, '{'}, {0x5, 0xe, "730cfc8d7a77a604e2c20814"}, {0x2, 0x2}, {0x0, 0x6, "bf83b272"}, {0x0, 0x12, "c8c4a9dc67f69739f2d3ac57e7b271c4"}, {0x0, 0xc, "0320fcc93877d9008529"}, {0x2, 0x11, "f27a93d222737d591bf6de4d767043"}, {0x7, 0x6, "b7ccc97f"}, {0x6, 0x9, "37100580be0165"}, {0x6, 0x9, "73953b30f6a695"}]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x2, [0x4, 0x40, 0x3, 0xfffffffe]}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x20008804)

738.803949ms ago: executing program 1 (id=3722):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000e7000000000000000000000000d8a61217d77d208ce2a1eeaa5c8df68daed31cdc282e29d38839a3bb926415a6751d95b83ba189a01391d50b9b7d6a8d463f09cdf66d082103da83f528c1a81d233a5a0fa1b1988e5090e2a77f7029806f9947ddd9503b360adfa749b293a167b7233809db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r2, 0x0, 0xfffffffffffffd4a, 0x4000, &(0x7f0000000480)={0x23, 0x81, 0x8, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000400000000000000000c005900020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xed}, 0x80)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
close(r7)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20004880)

649.948607ms ago: executing program 1 (id=3723):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

649.698769ms ago: executing program 1 (id=3724):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006040000060002004e200000080007000800000005000d00010000000800060009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xe, 0x0, 0x0, 0x4de, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=[{0x5, 0x4, 0xe}]}, 0x94) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

577.868538ms ago: executing program 1 (id=3725):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2061, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000028000000ac753c60020000000e00000001000005020000000c0000000400000007000000040040000000000e02000000000000000000"], &(0x7f00000001c0)=""/257, 0x42, 0x101, 0x6}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
accept4(r3, 0x0, 0x0, 0x800) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
write(r4, &(0x7f0000000040)="cb", 0xfffffdef)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00'})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180), &(0x7f0000000380)=0x8)
syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="012028bd853372dd1d7000ffa10fdf000200", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
socket$packet(0x11, 0x2, 0x300) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r11=>0x0})
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000080)={r11, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000001c0)={r11, 0x1, 0x6}, 0x10) (async)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000001c0)={r11, 0x1, 0x6}, 0x10)
close(0x3) (async)
close(0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

427.372084ms ago: executing program 0 (id=3727):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4008090)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, r3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)={0x44, r2, 0x200, 0x1070bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "59019848a6c000577da68167f34ea38f9306811e68e8ad112f7c9262e84f7a30"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000)

239.319873ms ago: executing program 1 (id=3728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf252500000008002f87f824ec9ae4904336782f77285da1b86c21afa5c05d825d4079ba659836dd750005002a00050000000a0001007770616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x4000)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x38, 0x1410, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c10400000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
close(r9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50)
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r10, 0xb701, 0x0)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r11, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0, 0x1, 0x12, 0x4005}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x6}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x10, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffe, 0x0, 0x57}}}}}}, 0x0)
ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f0000000180)='veth1_virt_wifi\x00')

237.252369ms ago: executing program 0 (id=3729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}]]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x4804)

204.598521ms ago: executing program 0 (id=3730):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff9, @rand_addr=' \x01\x00', 0x8000}, 0x1c)
close(r1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x3, 0x10}, {0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "41b57012b47bc8e8d8e3484d9c5998b3"}}}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f00000001c0)=@xdp={0x2c, 0x4, r7, 0x22}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)="5cb1d0ccac6b229bd3a23fea8b1ce92f119e0a53a6a0478704d799a98194978635881e05691256ba2f26dec8b18bef501af6cccfc7b06c7281b9b84ab174dee9", 0x40}, {&(0x7f0000000240)="1ac0220d6268224a424126e54d3bf31e271d0c694b71aae5dd075eee4502b606e0b5baead04920a04e22d171ada19cbd80bcecad4fd593d65c3aa58f4cdd9729e0ac22ae20f659c6ee55bd1868501de167ff66048d77348f99e0593a68585ff9e2f2af7ce73e4ce07f", 0x69}, {&(0x7f00000003c0)="ff1364bd0dc7c64a2f1bbad92f6fb68436baaeaef731e895e567aa95bd7e2af4", 0x20}, {&(0x7f0000000400)="1898d925cff4b49ed930dc05ddc6e0cc21e570c0cf035b2283e9e504321ab25870ab8ee1a77520ceef6d573f3d854af4c282c3e05c71cc8711a3137fead3aa64b54ab0b5321e5a2c4e34574779c0f2e9939b47a86c2c046fc99347d9c39945e39607ef84e2c5e72731172bad5630a367934d62d08bb7aec912a66e7b77d672b7fd902fb1da4de1c1dcd5ab37c20492f6b0a29892615efc8be30a2b079a001b1fe46487", 0xa3}, {&(0x7f00000004c0)="680f7bf2716f2ddfd7d5b331dda8e7a759c7a175ac6ba818765f8aacf6c3a8c752e3eb50196d65e54f18b61a6c1c1949b283e84b6dd74082676e532840ae49a5d71ed4d20eb6367bd14dc821265a4c97aeb43fae91da1c58763ce25b840ff8bbb4ac90a6295547b7f3a3e68dbf7ebe25374622631b3ccaca1c1da4eb51cdccc792a654621bf48a84b011334322f6a6ad", 0x90}, {&(0x7f0000000580)="e08199e9624c229bc784f31a61f7ce5e0fbb36f4ab30", 0x16}, {&(0x7f00000005c0)="ca254f57a3950520f861759f0feb004fdbd3e79d665f0901c3075f2fd6bfed5b0bc29d3e93fa7fa0bea60ad78a69409b54eaaf68fa23818dce08bbd3874284a9fc514caeef20ab67f19566", 0x4b}], 0x7, &(0x7f0000000700)=[{0xd8, 0x11, 0x200, "8dd0893a244e76dd378bb746d72d7d60bf47d6a3a57be14a1b6960121153ea8b544d44df7a4ace042511e99c262c76febba1d96d3fd326d6688bf39860efaa5c1d43386d4f08e22a7f92c6786cf7a38063d7188fce840dd4a9212b85117a532026faefa01d8f7d3230ee157b9be66341be98d5d50ae6f3c30c365ac7e002bd55a4222a15ff969bcdb40a147326ab8e3bf49ee86d1ffb096d25c2670433869605cfa310fb19ccaf1ad8820b8c8bdc3aafb4aa4e4803a271991a03f67cc6e126d528556b"}, {0x18, 0x3a, 0xff, "f521118846"}, {0xe8, 0x113, 0x7, "dffc2b54cb4dec037cb05c7cf00cc7940cb9db66383d8d355e2f6fa6da3e5503af6a5559bd373891feb00d1ed4ff297c3e625dd2b4204113d258a31fb2e85e03dbd49162af6af1074c6c01c93273b880ce6161c6044170a9fca95206d2c671d16338034d98890fd86687346516d7a28cf7445c38621dd2d6853fbbe7a1416ade66d05f3aadccc0ac2df57b03e9cdfbbee5fb399c59794d145226fa82d200cbb453c9270db08bef77020c0cbeb942134dd9fed80c917d3d4045e4738c28e8453462c5b7c6ecb18f45555604d377a6b3c560b35d46e0f356"}, {0x60, 0x88, 0x42353ad6, "35d6c22030bf524918e0e21ef0a044720f1c223edc7269ea144b64e39079d222bb8a8d71e46063c12462e971c85f7876671471f69612534a4f1b82cb00640bd10188575aad87133ce05f4d6525"}], 0x238}, 0x4000000)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="180100001900010000000000000000001d010900010111", @ANYRES64=r8], 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x48040)

98.884273ms ago: executing program 0 (id=3731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000800005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200120002000200000000000000000006002b00000000000000000000000000fc010000000000000000000000000000fc01000000000000000000000000000004000400"/192], 0xc0}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0x4, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x10}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xc7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x95df}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0xf8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0xffffffffffffffad, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c)
sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
r11 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r11, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x38000000}}, 0x24)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}]]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x38, r1, 0x101, 0x0, 0x80000, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x38}}, 0x4804)

49.997085ms ago: executing program 2 (id=3732):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a0000000000000000020000000900020073797a310000000008000440020000000900011ed6797a300000000008000328a82c351518554000000080140001001100010001000000000000000000000a0000000000000000"], 0x64}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x54)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002dbd7000fffbdf25060000000a000500080000000a001800030303030303001000001800030303030303ef00"], 0x34}, 0x1, 0x0, 0x0, 0xc00c014}, 0x40881)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x6e, 0x45, "1845284bf6d08d217eab453cf76a7764d1f83a6ad518dca34ab3d12d7c30e758114cc31c490da69f531b5aa3c09db99b2e8a2484b22acf417743dee053593e64da39f69f73a0f8c7bfcab73180b712632def5b8cc22343a1aaddaacbaf0c3b2b5c298b796f544e49bf24"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x24}}, 0x8840)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x80, 0x10, 0x1dea, 0x7f, {{0x3a, 0x4, 0x0, 0x3c, 0xe8, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x1b, 0x35, [@loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0xf, 0xf7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x8, [{@loopback, 0x9}, {@local, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd6}, {@local, 0x2}, {@broadcast, 0x3}, {@multicast2, 0x1000}, {@loopback, 0x7}, {@private=0xa010101, 0x80000000}]}, @cipso={0x86, 0x3e, 0x3, [{0x7, 0x10, "da00a31eebe62bece40f66e3a124"}, {0x2, 0x5, "15f9e4"}, {0x5, 0x2}, {0x0, 0xf, "35deb08d366df8b16059e2b610"}, {0x9, 0x5, "660cde"}, {0x5, 0xd, "194f67743db7223d03e40d"}]}, @ssrr={0x89, 0x1b, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @remote, @loopback, @multicast2]}, @cipso={0x86, 0xd, 0x0, [{0x2, 0x3, '~'}, {0x6, 0x4, "dfc1"}]}]}}}}})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r11 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r12 = socket$kcm(0x29, 0x2, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r14 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r14, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000040)={r14, r13})
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000040)={r11, r10})

49.027577ms ago: executing program 0 (id=3733):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000048f8d1dd72980b11e63816"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

0s ago: executing program 0 (id=3734):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x4004)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x38, 0x0, &(0x7f0000002e40))
sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x3, 0x4000000)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket(0x10, 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0ba55c2a35f18c59d4091abfaf2e1c0564a649f1ee61f0e40d891e2c68aa29208003e5d327ca53f4b9147e5c58707287aa319454694f792d4a47afe0cc0d50a081e0588070683ac139f7", @ANYRES16=r9, @ANYBLOB="0100253d7000fbdbdf25040000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback={0x29}, 0x40, 0x7800, 0xe}})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000080)="29000300010003", 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(r6, 0x0, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

kernel console output (not intermixed with test programs):

t 8472 - 0
[   95.179423][ T8741] bridge3: entered allmulticast mode
[   95.659471][ T8766] smc: net device bond0 applied user defined pnetid SYZ2
[   95.737491][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   95.741219][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   95.837835][ T8779] validate_nla: 1 callbacks suppressed
[   95.837851][ T8779] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[   96.108287][ T8797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.111141][ T8797] syzkaller0: entered promiscuous mode
[   96.113149][ T8797] syzkaller0: entered allmulticast mode
[   96.177347][ T8801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.205823][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   96.526959][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   96.739871][ T8817] 8021q: VLANs not supported on syzkaller1
[   96.798542][ T8818] syzkaller1: entered promiscuous mode
[   96.800733][ T8818] syzkaller1: entered allmulticast mode
[   96.934216][ T8802] tipc: Resetting bearer <eth:syzkaller0>
[   96.948284][ T8802] tipc: Disabling bearer <eth:syzkaller0>
[   97.178475][ T8837] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   97.298366][ T8850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.428671][ T8863] netlink: 'syz.0.909': attribute type 18 has an invalid length.
[   97.541143][ T8877] bond5: entered promiscuous mode
[   97.544298][ T8877] netlink: 'syz.0.914': attribute type 4 has an invalid length.
[   97.614197][ T8893] netlink: 'syz.0.918': attribute type 10 has an invalid length.
[   97.621142][ T8893] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   97.626662][ T8895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.985750][ T8937] __nla_validate_parse: 28 callbacks suppressed
[   97.985762][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'.
[   98.023248][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[   98.082834][ T8941] netlink: 208 bytes leftover after parsing attributes in process `syz.2.936'.
[   98.101175][ T8952] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.939'.
[   98.269856][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.939'.
[   98.278061][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'.
[   98.824198][ T8994] tipc: Enabled bearer <udp:syz2>, priority 10
[   98.871875][ T8996] netlink: 96 bytes leftover after parsing attributes in process `syz.1.954'.
[   98.875413][ T8996] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.909567][ T8998] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   98.968680][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'.
[   98.972633][ T9002] netlink: 'syz.0.957': attribute type 7 has an invalid length.
[   98.978142][ T9002] netlink: 'syz.0.957': attribute type 8 has an invalid length.
[   98.981444][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[   99.000324][ T9002] gretap0: entered promiscuous mode
[   99.003666][ T9002] batadv_slave_1: entered promiscuous mode
[   99.008578][ T9002] erspan0: entered promiscuous mode
[   99.012804][ T9002] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[   99.018017][ T9002] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.022224][ T9002] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[   99.391103][ T9055] netlink: 'syz.0.971': attribute type 1 has an invalid length.
[   99.469959][ T9051] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   99.533258][ T9056] 8021q: adding VLAN 0 to HW filter on device bond6
[   99.917355][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'.
[   99.935330][ T6366] tipc: Node number set to 4142620520
[   99.950422][ T9108] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[   99.965029][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.178081][   T33] audit: type=1804 audit(1754943448.651:8): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.995" name="/newroot/286/cgroup.controllers" dev="tmpfs" ino=1478 res=1 errno=0
[  100.196419][   T33] audit: type=1800 audit(1754943448.651:9): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.995" name="cgroup.controllers" dev="tmpfs" ino=1478 res=0 errno=0
[  100.208761][   T33] audit: type=1800 audit(1754943448.651:10): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.995" name="cgroup.controllers" dev="tmpfs" ino=1478 res=0 errno=0
[  100.249647][ T9132] xt_limit: Overflow, try lower: 271964/0
[  100.269330][ T9132] syzkaller1: entered promiscuous mode
[  100.271884][ T9132] syzkaller1: entered allmulticast mode
[  100.461151][ T9146] netlink: 'syz.0.1001': attribute type 4 has an invalid length.
[  100.649921][ T9152] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  101.310526][ T9162] openvswitch: netlink: Key type 16144 is out of range max 32
[  101.506641][ T9186] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  101.582507][ T9195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.593608][ T9195] syzkaller0: entered promiscuous mode
[  101.599039][ T9195] syzkaller0: entered allmulticast mode
[  101.622754][ T9195] tipc: Resetting bearer <eth:syzkaller0>
[  101.631712][ T9194] tipc: Resetting bearer <eth:syzkaller0>
[  101.645295][ T9194] tipc: Disabling bearer <eth:syzkaller0>
[  101.665830][ T9199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.708046][ T9203] 8021q: adding VLAN 0 to HW filter on device batadv1
[  101.711148][ T9203] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  101.714258][ T9203] team0: Failed to send options change via netlink (err -105)
[  101.717573][ T9203] team0: Port device batadv1 added
[  101.748696][ T9199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.823861][ T9199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.889223][ T9218] netlink: 'syz.0.1026': attribute type 58 has an invalid length.
[  101.894825][ T9199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.947707][ T9222] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.989114][ T5922] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.002472][ T5922] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.017254][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.035923][ T5922] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.324270][ T9253] veth13: entered promiscuous mode
[  102.783835][ T9295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.788418][ T9295] syzkaller0: entered promiscuous mode
[  102.790775][ T9295] syzkaller0: entered allmulticast mode
[  102.799699][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  102.804073][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  102.813237][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  102.899042][ T9304] tipc: Resetting bearer <eth:syzkaller0>
[  102.991894][ T9295] infiniband syz2: set down
[  102.995120][ T9295] infiniband syz2: added vxcan1
[  102.999025][   T24] vxcan1 speed is unknown, defaulting to 1000
[  103.056543][ T9295] RDS/IB: syz2: added
[  103.068475][ T9295] smc: adding ib device syz2 with port count 1
[  103.072998][ T9295] smc:    ib device syz2 port 1 has pnetid 
[  103.077998][   T10] vxcan1 speed is unknown, defaulting to 1000
[  103.084602][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  103.098376][ T9317] __nla_validate_parse: 16 callbacks suppressed
[  103.098396][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'.
[  103.133507][ T9316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.260270][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  103.263886][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'.
[  103.281602][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.281701][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'.
[  103.284415][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.292263][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.302052][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.325610][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  103.383296][ T9340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.469390][ T9295] vxcan1 speed is unknown, defaulting to 1000
[  103.623552][ T9294] tipc: Resetting bearer <eth:syzkaller0>
[  103.665310][ T9294] tipc: Disabling bearer <eth:syzkaller0>
[  103.670317][ T9355] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1069'.
[  103.711085][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  103.939257][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  103.973779][ T9377] netlink: 'syz.2.1078': attribute type 10 has an invalid length.
[  104.108619][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[  104.503312][ T9403] veth1_vlan: left allmulticast mode
[  104.616259][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.622120][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.625288][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.628095][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.631130][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.641878][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.646460][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.649164][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.670543][ T9408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.673273][ T9408] syzkaller0: entered promiscuous mode
[  104.675593][ T9408] syzkaller0: entered allmulticast mode
[  104.680272][ T9408] netlink: 'syz.0.1088': attribute type 32 has an invalid length.
[  104.686575][ T9406] tipc: Resetting bearer <eth:syzkaller0>
[  104.700399][ T9406] tipc: Disabling bearer <eth:syzkaller0>
[  104.781431][ T5843] Bluetooth: hci2: link tx timeout
[  104.783907][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.899666][ T9426] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  104.910636][ T9425] IPVS: stopping backup sync thread 9426 ...
[  104.915469][ T9425] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1092'.
[  104.921093][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'.
[  105.110020][ T9432] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[  105.173806][ T9438] vxcan1 speed is unknown, defaulting to 1000
[  105.499010][ T9468] Bluetooth: MGMT ver 1.23
[  105.552973][ T9470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.572415][ T9470] syzkaller0: entered promiscuous mode
[  105.574445][ T9470] syzkaller0: entered allmulticast mode
[  105.616553][ T9470] tipc: Resetting bearer <eth:syzkaller0>
[  105.627350][ T9469] tipc: Resetting bearer <eth:syzkaller0>
[  105.638983][ T9469] tipc: Disabling bearer <eth:syzkaller0>
[  105.676690][ T9475] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  105.748399][ T9480] bridge_slave_1: default FDB implementation only supports local addresses
[  105.768525][ T9480] netem: change failed
[  105.852211][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.172143][ T9503] batadv_slave_0: entered promiscuous mode
[  106.358882][ T9535] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  106.456696][ T9542] openvswitch: netlink: IP tunnel dst address not specified
[  106.499819][ T9544] netlink: 'syz.0.1132': attribute type 4 has an invalid length.
[  106.663071][ T8242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.666200][ T8242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.708003][ T9566] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.712199][ T9566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.845280][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  107.539657][ T9617] netlink: 'syz.2.1152': attribute type 7 has an invalid length.
[  107.543227][ T9617] netlink: 'syz.2.1152': attribute type 8 has an invalid length.
[  108.489346][ T9673] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  109.768275][ T9693] macsec1: entered promiscuous mode
[  109.770034][ T9693] macsec1: entered allmulticast mode
[  109.774170][ T9691] __nla_validate_parse: 26 callbacks suppressed
[  109.774184][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'.
[  109.941264][ T9706] sctp: [Deprecated]: syz.0.1182 (pid 9706) Use of int in max_burst socket option.
[  109.941264][ T9706] Use struct sctp_assoc_value instead
[  110.042359][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'.
[  110.376772][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  110.459139][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  110.493839][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'.
[  110.666788][ T9758] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  110.812449][ T9781] bridge0: port 1(syz_tun) entered blocking state
[  110.817772][ T9781] bridge0: port 1(syz_tun) entered disabled state
[  110.820040][ T9781] syz_tun: entered allmulticast mode
[  110.823169][ T9781] syz_tun: entered promiscuous mode
[  110.827168][ T9781] bridge0: port 1(syz_tun) entered blocking state
[  110.829396][ T9781] bridge0: port 1(syz_tun) entered forwarding state
[  110.874096][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'.
[  110.940426][ T9799] sctp: [Deprecated]: syz.1.1211 (pid 9799) Use of int in max_burst socket option deprecated.
[  110.940426][ T9799] Use struct sctp_assoc_value instead
[  111.740625][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'.
[  111.743830][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'.
[  111.750734][ T9855] netlink: 'syz.1.1216': attribute type 13 has an invalid length.
[  111.784615][ T9855] IPv6: sit2: Disabled Multicast RS
[  111.789132][ T9855] sit2: entered allmulticast mode
[  111.909008][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'.
[  112.555337][ T9870] bridge0: port 1(syz_tun) entered blocking state
[  112.558282][ T9870] bridge0: port 1(syz_tun) entered disabled state
[  112.561083][ T9870] syz_tun: entered allmulticast mode
[  112.564613][ T9870] syz_tun: entered promiscuous mode
[  112.612251][ T9873] openvswitch: netlink: Missing valid actions attribute.
[  112.615404][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.718265][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'.
[  112.931034][ T9895] netlink: 'syz.1.1228': attribute type 4 has an invalid length.
[  113.376976][ T9940] netlink: 'syz.2.1244': attribute type 6 has an invalid length.
[  113.403489][ T9944] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  113.711833][ T9974] veth5: entered promiscuous mode
[  114.049135][T10003] netlink: 'syz.1.1267': attribute type 1 has an invalid length.
[  114.929126][T10088] __nla_validate_parse: 16 callbacks suppressed
[  114.929138][T10088] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1296'.
[  115.023156][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  115.046684][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  115.071720][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'.
[  115.116115][T10097] IPVS: Unknown mcast interface: vlan0
[  115.120054][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'.
[  115.949452][T10107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  115.954016][T10107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  115.993008][T10111] netlink: 'syz.0.1304': attribute type 21 has an invalid length.
[  115.996452][T10111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1304'.
[  116.001250][T10110] delete_channel: no stack
[  116.043823][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  116.181301][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'.
[  116.186180][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'.
[  116.243311][T10135] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  116.248459][T10135] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  116.251666][T10135] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  116.261429][T10135] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1315'.
[  116.270742][T10135] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  116.277295][T10135] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  116.281065][T10140] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  116.287690][T10135] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  116.292243][T10135] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  116.328538][T10145] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  117.179010][T10185] bond4: (slave gretap1): making interface the new active one
[  117.182197][T10185] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  117.313113][T10195] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.348681][T10202] openvswitch: netlink: Unknown key attributes 2
[  117.587208][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  118.360025][T10231] validate_nla: 2 callbacks suppressed
[  118.360042][T10231] netlink: 'syz.1.1344': attribute type 6 has an invalid length.
[  118.387844][T10231] netlink: 'syz.1.1344': attribute type 6 has an invalid length.
[  118.656779][T10254] netlink: zone id is out of range
[  118.658876][T10254] netlink: get zone limit has 8 unknown bytes
[  118.968894][T10279] bridge_slave_1: default FDB implementation only supports local addresses
[  119.080065][T10286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.083558][T10286] syzkaller0: entered promiscuous mode
[  119.087724][T10286] syzkaller0: entered allmulticast mode
[  119.106013][T10286] tipc: Resetting bearer <eth:syzkaller0>
[  119.111973][T10285] tipc: Resetting bearer <eth:syzkaller0>
[  119.126583][T10285] tipc: Disabling bearer <eth:syzkaller0>
[  119.287908][T10299] netlink: 'syz.0.1366': attribute type 23 has an invalid length.
[  119.399883][T10313] netlink: 'syz.0.1370': attribute type 10 has an invalid length.
[  119.402921][T10313] syz_tun: left allmulticast mode
[  119.410508][T10313] bridge0: port 1(syz_tun) entered disabled state
[  119.416731][T10313] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  119.420593][T10313] netlink: 'syz.0.1370': attribute type 10 has an invalid length.
[  119.463286][T10319] netlink: 'syz.2.1373': attribute type 1 has an invalid length.
[  119.510503][T10326] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  120.127092][T10340] __nla_validate_parse: 31 callbacks suppressed
[  120.127109][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'.
[  120.163990][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1381'.
[  120.358920][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'.
[  120.431441][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[  120.437942][T10366] syz_tun: left promiscuous mode
[  120.459194][T10366] bond3: left promiscuous mode
[  120.463578][T10366] bridge3: left allmulticast mode
[  120.468621][T10366] bond5: left promiscuous mode
[  120.481135][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.488314][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.491976][T10366] @: renamed from veth0_vlan
[  120.497261][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.500055][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.626903][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'.
[  120.752489][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'.
[  120.790255][T10386] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.793333][T10396] netlink: 'syz.2.1395': attribute type 1 has an invalid length.
[  120.794673][T10386] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.807384][T10396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1395'.
[  120.811501][T10394] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  121.620071][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'.
[  121.950810][T10478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1414'.
[  122.238048][T10483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1415'.
[  122.333771][T10486] delete_channel: no stack
[  122.582186][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039ae8400: rx timeout, send abort
[  122.587947][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039ae8400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  122.878404][   T24] IPVS: starting estimator thread 0...
[  122.985098][T10521] IPVS: using max 78 ests per chain, 187200 per kthread
[  123.239384][T10552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.244575][T10552] syzkaller0: entered promiscuous mode
[  123.248150][T10552] syzkaller0: entered allmulticast mode
[  123.253353][T10552] veth1_to_batadv: entered allmulticast mode
[  123.278533][T10552] tipc: Resetting bearer <eth:syzkaller0>
[  123.284033][T10551] tipc: Resetting bearer <eth:syzkaller0>
[  123.298103][T10551] tipc: Disabling bearer <eth:syzkaller0>
[  123.363412][T10559] netlink: 'syz.1.1439': attribute type 4 has an invalid length.
[  123.502935][T10562] syzkaller0: entered promiscuous mode
[  123.506477][T10562] syzkaller0: entered allmulticast mode
[  124.403461][T10575] syzkaller1: entered promiscuous mode
[  124.405619][T10575] syzkaller1: entered allmulticast mode
[  124.408765][T10575] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  124.591625][T10598] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.630716][T10603] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  124.636999][T10603] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  124.657543][T10598] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.699245][T10598] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.737478][T10598] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.843147][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.860322][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.875107][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.890374][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.968610][T10626] netlink: 'syz.1.1462': attribute type 10 has an invalid length.
[  125.004899][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  125.062349][T10636] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.113765][T10636] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.123675][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.160411][T10636] batadv_slave_0: left promiscuous mode
[  125.170037][T10636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.174129][T10636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.186062][T10636] veth1_vlan: left promiscuous mode
[  125.188540][T10636] veth0_vlan: left promiscuous mode
[  125.190799][T10636] veth0_vlan: entered promiscuous mode
[  125.194463][T10636] veth1_vlan: entered promiscuous mode
[  125.198904][T10636] veth1_macvtap: left promiscuous mode
[  125.201409][T10636] veth0_macvtap: left promiscuous mode
[  125.203906][T10636] veth0_macvtap: entered promiscuous mode
[  125.207084][T10636] veth1_macvtap: entered promiscuous mode
[  125.212576][T10636] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  125.227009][T10636] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.230572][T10636] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.233608][T10636] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.244381][T10636] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  125.249835][T10636] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  125.253037][T10636] macsec1: left promiscuous mode
[  125.256410][T10636] macsec1: left allmulticast mode
[  125.258424][T10636] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  125.297900][T10647] __nla_validate_parse: 11 callbacks suppressed
[  125.297911][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  125.301732][ T5922] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.310645][ T5922] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.320858][ T5922] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.324667][ T5922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.334016][ T5922] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.338802][ T5922] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.371628][ T5922] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.374470][ T5922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.379198][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  125.420531][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  125.472635][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1472'.
[  125.508644][T10668] netlink: 'syz.1.1473': attribute type 3 has an invalid length.
[  125.616670][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'.
[  125.635008][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  125.863600][T10699] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  126.227077][T10655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.474194][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.479932][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.609447][T10740] netlink: 'syz.1.1494': attribute type 13 has an invalid length.
[  127.612881][T10740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1494'.
[  127.621857][T10740] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  127.668592][T10744] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  127.711897][T10746] rdma_op ffff888039b821f0 conn xmit_rdma 0000000000000000
[  127.719620][T10746] tipc: Resetting bearer <ib:ip6gre0>
[  127.817112][T10754] netlink: 'syz.1.1501': attribute type 10 has an invalid length.
[  127.820439][T10754] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  127.835754][T10754] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.845492][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.926250][T10765] syzkaller1: entered promiscuous mode
[  127.928796][T10765] syzkaller1: entered allmulticast mode
[  127.961048][T10763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.965152][T10756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.120851][T10776] xt_limit: Overflow, try lower: 604147548/4200216962
[  128.197023][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.300246][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'.
[  128.320667][T10788] netlink: 'syz.2.1510': attribute type 10 has an invalid length.
[  128.336418][T10788] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.441765][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'.
[  128.451581][T10802] netlink: 'syz.2.1514': attribute type 7 has an invalid length.
[  128.454572][T10802] netlink: 'syz.2.1514': attribute type 8 has an invalid length.
[  128.459647][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'.
[  128.466536][T10802] erspan0: entered promiscuous mode
[  128.468916][T10802] batadv_slave_1: entered promiscuous mode
[  128.471820][T10802] debugfs: 'hsr1' already exists in 'hsr'
[  128.473724][T10802] Cannot create hsr debugfs directory
[  128.481847][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'.
[  128.753132][T10818] syzkaller1: entered promiscuous mode
[  128.755911][T10818] syzkaller1: entered allmulticast mode
[  128.947506][T10837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.952122][T10837] syzkaller0: entered promiscuous mode
[  128.960618][T10837] syzkaller0: entered allmulticast mode
[  128.974099][T10837] tipc: Resetting bearer <eth:syzkaller0>
[  128.979493][T10835] tipc: Resetting bearer <eth:syzkaller0>
[  128.990802][T10835] tipc: Disabling bearer <eth:syzkaller0>
[  129.097238][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.484992][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  139.804920][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.787137][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'.
[  154.796149][T10862] bond0: entered promiscuous mode
[  154.798316][T10862] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  154.801226][T10862] syz_tun: entered promiscuous mode
[  154.877493][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'.
[  154.882051][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'.
[  154.914554][T10874] nftables ruleset with unbound set
[  155.164867][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.729746][T10877] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1537'.
[  156.067749][T10904] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1547'.
[  156.070697][T10904] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  156.209277][T10909] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1549'.
[  156.212777][T10909] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  156.216466][T10909] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  156.478343][T10917] netlink: 'syz.2.1552': attribute type 1 has an invalid length.
[  156.481311][T10917] netlink: 'syz.2.1552': attribute type 1 has an invalid length.
[  156.526962][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1553'.
[  156.955039][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1559'.
[  156.961986][T10948] tipc: New replicast peer: 255.255.255.255
[  156.965743][T10948] tipc: Enabled bearer <udp:syz2>, priority 10
[  156.982893][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'.
[  156.987980][T10948] tipc: Disabling bearer <udp:syz2>
[  157.244041][T10955] netlink: zone id is out of range
[  157.248409][T10955] netlink: zone id is out of range
[  157.250155][T10955] netlink: zone id is out of range
[  157.252282][T10955] netlink: zone id is out of range
[  157.255739][T10955] netlink: zone id is out of range
[  157.257737][T10955] netlink: zone id is out of range
[  157.259724][T10955] netlink: zone id is out of range
[  157.261787][T10955] netlink: zone id is out of range
[  157.263588][T10955] netlink: zone id is out of range
[  157.267591][T10955] netlink: zone id is out of range
[  157.733791][T10977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1571'.
[  157.815559][T10977] nbd0: detected capacity change from 0 to 875674160
[  157.821724][T10980] block nbd0: Receive control failed (result -104)
[  158.255459][T11008] vxcan1 speed is unknown, defaulting to 1000
[  158.340969][T11019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.346513][T11019] syzkaller0: entered promiscuous mode
[  158.348508][T11019] syzkaller0: entered allmulticast mode
[  158.360240][T11011] tipc: Resetting bearer <eth:syzkaller0>
[  158.376039][T11009] tipc: Resetting bearer <eth:syzkaller0>
[  158.389174][T11009] tipc: Disabling bearer <eth:syzkaller0>
[  158.589567][T11029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.596356][T11029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.330908][T11066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.333723][T11066] syzkaller0: entered promiscuous mode
[  159.336106][T11066] syzkaller0: entered allmulticast mode
[  159.359045][T11066] tipc: Resetting bearer <eth:syzkaller0>
[  159.368967][T11065] tipc: Resetting bearer <eth:syzkaller0>
[  159.378272][T11065] tipc: Disabling bearer <eth:syzkaller0>
[  159.840955][T11078] __nla_validate_parse: 5 callbacks suppressed
[  159.840964][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1600'.
[  159.881256][T11080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.912711][T11080] syzkaller0: entered promiscuous mode
[  159.915936][T11080] syzkaller0: entered allmulticast mode
[  159.926267][T11080] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  159.931276][T11080] tipc: Resetting bearer <eth:syzkaller0>
[  159.936307][T11079] tipc: Resetting bearer <eth:syzkaller0>
[  159.948252][T11079] tipc: Disabling bearer <eth:syzkaller0>
[  160.137182][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1607'.
[  160.213602][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'.
[  160.431071][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1615'.
[  160.438750][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'.
[  160.594676][T11146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1624'.
[  160.653700][T11151] netlink: 'syz.0.1626': attribute type 1 has an invalid length.
[  160.685707][T11151] bond7: (slave geneve2): making interface the new active one
[  160.689658][T11151] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  160.692887][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  160.693634][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1626'.
[  160.696586][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  160.710970][T11151] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.713969][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  160.718532][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  160.867750][T11176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1633'.
[  160.908462][T11181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1634'.
[  160.966421][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  161.558900][T11218] netpci0: tun_chr_ioctl cmd 1074025681
[  161.804607][T11228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.810817][T11228] syzkaller0: entered promiscuous mode
[  161.813661][T11228] syzkaller0: entered allmulticast mode
[  161.827759][T11228] tipc: Resetting bearer <eth:syzkaller0>
[  161.831841][T11227] tipc: Resetting bearer <eth:syzkaller0>
[  161.843715][T11227] tipc: Disabling bearer <eth:syzkaller0>
[  161.962509][T11233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.981643][T11233] syzkaller1: entered promiscuous mode
[  161.983946][T11233] syzkaller1: entered allmulticast mode
[  162.048619][T11232] tipc: Disabling bearer <eth:syzkaller0>
[  162.199322][T11248] netlink: 'syz.2.1655': attribute type 16 has an invalid length.
[  162.202447][T11248] netlink: 'syz.2.1655': attribute type 17 has an invalid length.
[  162.250576][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.351062][T11261] netlink: 'syz.2.1660': attribute type 1 has an invalid length.
[  162.368963][T11261] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.386009][T11261] bond3: (slave veth15): Enslaving as an active interface with a down link
[  162.389891][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.665123][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.830926][T11275] bond0: (slave syz_tun): Releasing backup interface
[  162.834357][T11275] syz_tun: left promiscuous mode
[  162.839450][T11275] bond0: (slave wlan1): Releasing backup interface
[  162.842486][T11275] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  162.849817][T11275] bond7: (slave geneve2): Releasing active interface
[  162.863245][T11275] netlink: 'syz.0.1665': attribute type 1 has an invalid length.
[  162.867033][ T5922] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  162.870232][ T5922] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  162.873422][ T5922] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  162.877904][ T5922] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  162.948071][T11280] netlink: 'syz.2.1667': attribute type 58 has an invalid length.
[  163.146706][T11300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.151870][T11300] syzkaller0: entered promiscuous mode
[  163.154391][T11300] syzkaller0: entered allmulticast mode
[  163.177407][T11300] tipc: Resetting bearer <eth:syzkaller0>
[  163.186567][T11298] tipc: Resetting bearer <eth:syzkaller0>
[  163.196519][T11298] tipc: Disabling bearer <eth:syzkaller0>
[  163.276986][T11307] chnl_net:caif_netlink_parms(): no params data found
[  163.393287][T11320] netlink: 'syz.2.1681': attribute type 1 has an invalid length.
[  163.417450][T11320] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  163.422673][T11320] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  163.738073][T11352] netlink: 'syz.0.1691': attribute type 7 has an invalid length.
[  163.741472][T11352] netlink: 'syz.0.1691': attribute type 8 has an invalid length.
[  163.777207][T11354] net_ratelimit: 113 callbacks suppressed
[  163.777223][T11354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.797433][T11354] syzkaller1: entered promiscuous mode
[  163.799799][T11354] syzkaller1: entered allmulticast mode
[  164.079425][T11369] vxcan1 speed is unknown, defaulting to 1000
[  164.124451][T11373] netlink: 'syz.1.1700': attribute type 4 has an invalid length.
[  164.211028][T11378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.229228][T11378] syzkaller0: entered promiscuous mode
[  164.231645][T11378] syzkaller0: entered allmulticast mode
[  164.275724][T11378] tipc: Resetting bearer <eth:syzkaller0>
[  164.280353][T11377] tipc: Resetting bearer <eth:syzkaller0>
[  164.290226][T11377] tipc: Disabling bearer <eth:syzkaller0>
[  164.543862][T11393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.548343][T11393] syzkaller0: entered promiscuous mode
[  164.550564][T11393] syzkaller0: entered allmulticast mode
[  164.578397][T11393] tipc: Resetting bearer <eth:syzkaller0>
[  164.604251][T11392] tipc: Resetting bearer <eth:syzkaller0>
[  164.614332][T11392] tipc: Disabling bearer <eth:syzkaller0>
[  164.742493][T11408] 8021q: VLANs not supported on vcan0
[  164.854320][T11417] delete_channel: no stack
[  164.871976][T11425] siw: device registration error -23
[  164.958589][T11436] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  164.966874][T11433] __nla_validate_parse: 26 callbacks suppressed
[  164.966883][T11433] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1723'.
[  164.979862][T11436] 8021q: adding VLAN 0 to HW filter on device bond8
[  165.001886][T11436] 8021q: adding VLAN 0 to HW filter on device bond8
[  165.004214][T11436] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  165.009992][T11436] bond8: (slave vcan1): Error -95 calling set_mac_address
[  165.053076][T11441] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1727'.
[  165.056635][T11441] 0: renamed from hsr0
[  165.060632][T11441] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.064499][T11441] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.068234][T11441] 0: entered allmulticast mode
[  165.069893][T11441] hsr_slave_0: entered allmulticast mode
[  165.071730][T11441] hsr_slave_1: entered allmulticast mode
[  165.074515][T11441] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  165.116668][T11436] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  165.121818][T11436] bond8: (slave vcan1): Error -95 calling set_mac_address
[  165.146801][T11454] sctp: [Deprecated]: syz.1.1729 (pid 11454) Use of int in max_burst socket option.
[  165.146801][T11454] Use struct sctp_assoc_value instead
[  165.183603][T11458] syzkaller0: entered promiscuous mode
[  165.186023][T11458] syzkaller0: entered allmulticast mode
[  165.189494][T11457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.201475][T11459] tipc: Resetting bearer <eth:syzkaller0>
[  165.210502][T11459] tipc: Disabling bearer <eth:syzkaller0>
[  165.257786][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1731'.
[  166.289106][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  166.530674][T11502] vxcan1 speed is unknown, defaulting to 1000
[  166.588861][T11511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1744'.
[  166.694048][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'.
[  166.707413][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'.
[  166.832384][T11524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1749'.
[  166.840853][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  167.067775][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1753'.
[  167.143948][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  167.490350][T11552] validate_nla: 4 callbacks suppressed
[  167.490364][T11552] netlink: 'syz.2.1758': attribute type 178 has an invalid length.
[  167.506942][T11552] netlink: 'syz.2.1758': attribute type 74 has an invalid length.
[  167.591907][T11556] netlink: 'syz.2.1760': attribute type 6 has an invalid length.
[  167.668317][T11561] IPv6: NLM_F_CREATE should be specified when creating new route
[  168.023256][T11602] pim6reg9: entered allmulticast mode
[  168.054450][T11608] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  168.058135][T11608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.063606][T11608] netlink: 'syz.1.1776': attribute type 2 has an invalid length.
[  168.161939][T11616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.549335][T11638] vxcan1 speed is unknown, defaulting to 1000
[  169.046580][T11621] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  169.118714][T11668] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  169.239081][T11676] netlink: 'syz.1.1802': attribute type 1 has an invalid length.
[  169.260032][T11676] bond6: entered promiscuous mode
[  169.262918][T11676] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.338025][T11676] batadv2: entered promiscuous mode
[  169.340042][T11676] batadv2: entered allmulticast mode
[  169.343353][T11676] 8021q: adding VLAN 0 to HW filter on device batadv2
[  169.356219][T11676] bond6: (slave batadv2): making interface the new active one
[  169.359760][T11676] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  169.438086][T11689] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[  169.691654][   T24] IPVS: starting estimator thread 0...
[  169.758568][T11726] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  169.768290][T11725] vxcan1 speed is unknown, defaulting to 1000
[  169.785029][T11717] IPVS: using max 39 ests per chain, 93600 per kthread
[  170.609815][T11755] Bluetooth: MGMT ver 1.23
[  170.658794][T11760] __nla_validate_parse: 33 callbacks suppressed
[  170.658812][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'.
[  171.013523][T11787] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  171.043616][T11787] bond7: (slave bridge6): making interface the new active one
[  171.047532][T11787] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  171.074066][T11792] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1839'.
[  171.081501][T11792] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  171.103825][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  171.232442][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'.
[  171.324215][T11819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1847'.
[  171.441144][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1853'.
[  171.482880][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'.
[  171.607699][T11851] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[  171.611562][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  171.619044][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  171.622829][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  172.133843][T11907] netlink: 'syz.0.1874': attribute type 10 has an invalid length.
[  172.149966][T11907] dummy0: entered promiscuous mode
[  172.152716][T11907] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  172.234875][T11918] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.240592][T11915] syzkaller1: entered promiscuous mode
[  172.243515][T11915] syzkaller1: entered allmulticast mode
[  172.429812][T11937] gretap0: entered promiscuous mode
[  172.435394][T11937] gretap0: entered allmulticast mode
[  172.903812][T12001] C: renamed from lo (while UP)
[  172.912173][T12001] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  173.004532][T12013] validate_nla: 2 callbacks suppressed
[  173.004546][T12013] netlink: 'syz.1.1913': attribute type 1 has an invalid length.
[  173.012662][T12013] netlink: 'syz.1.1913': attribute type 2 has an invalid length.
[  173.754520][T12043] netlink: 'syz.2.1922': attribute type 1 has an invalid length.
[  173.849451][T12050] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  173.900964][T12054] tun0: tun_chr_ioctl cmd 2147767520
[  174.015768][T12057] netlink: 'syz.2.1929': attribute type 1 has an invalid length.
[  174.169257][T12070] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  174.309178][T12078] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  175.290809][T12116] pim6reg: entered allmulticast mode
[  175.293627][T12116] pim6reg: left allmulticast mode
[  175.583220][T12144] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  175.740075][T12161] __nla_validate_parse: 67 callbacks suppressed
[  175.740119][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'.
[  175.766225][T12161] netlink: 'syz.1.1965': attribute type 1 has an invalid length.
[  175.769508][T12161] netlink: 'syz.1.1965': attribute type 2 has an invalid length.
[  175.777367][T12161] netlink: 'syz.1.1965': attribute type 8 has an invalid length.
[  175.780677][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'.
[  175.784277][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'.
[  175.788078][T12161] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1965'.
[  175.805125][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  175.885819][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'.
[  175.956638][T12177] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  176.308624][T12205] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  176.428990][T12205] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1981'.
[  176.479222][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  176.561317][T12218] netlink: 'syz.1.1985': attribute type 2 has an invalid length.
[  176.620828][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  176.651309][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'.
[  176.667472][T12222] netlink: 'syz.2.1987': attribute type 1 has an invalid length.
[  176.671404][T12222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.674105][T12222] syzkaller0: entered promiscuous mode
[  176.676137][T12222] syzkaller0: entered allmulticast mode
[  176.680130][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'.
[  176.681832][T12222] tipc: Resetting bearer <eth:syzkaller0>
[  177.253329][T12256] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  177.665001][ T5904] tipc: Node number set to 1911290523
[  178.392733][T12294] syzkaller0: entered promiscuous mode
[  178.395301][T12294] syzkaller0: entered allmulticast mode
[  179.659994][T12313] geneve3: entered promiscuous mode
[  179.665879][ T5922] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.672708][ T5922] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.678606][ T5922] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.706296][ T5922] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.737306][T12317] validate_nla: 1 callbacks suppressed
[  179.737315][T12317] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[  180.095680][T12352] syzkaller1: entered promiscuous mode
[  180.098666][T12352] syzkaller1: entered allmulticast mode
[  180.374390][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.639007][T12393] netlink: 'syz.0.2049': attribute type 33 has an invalid length.
[  180.650784][T12394] netlink: 'syz.0.2049': attribute type 33 has an invalid length.
[  180.653945][T12390] vxcan1 speed is unknown, defaulting to 1000
[  180.700948][T12397] sit0: entered promiscuous mode
[  180.703126][T12397] sit0: entered allmulticast mode
[  180.709158][T12398] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  180.758966][T12400] bond0: (slave dummy0): Releasing backup interface
[  180.762383][T12400] dummy0: left promiscuous mode
[  180.906880][T12408] __nla_validate_parse: 22 callbacks suppressed
[  180.906891][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'.
[  181.086924][T12423] netlink: 'syz.2.2057': attribute type 1 has an invalid length.
[  181.090928][T12423] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2057'.
[  181.161782][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'.
[  181.175197][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'.
[  181.187978][T12428] erspan0: entered promiscuous mode
[  181.230999][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'.
[  181.559277][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'.
[  181.713823][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'.
[  181.779272][T12471] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  181.784608][T12471] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  181.831255][T12483] macvlan2: entered promiscuous mode
[  181.837493][T12483] macvlan2: entered allmulticast mode
[  181.841443][T12483] bond9: (slave macvlan2): Error -98 calling set_mac_address
[  181.958346][T12491] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  181.961357][T12494] netlink: 'syz.0.2088': attribute type 3 has an invalid length.
[  181.961639][T12491] netlink: 'syz.1.2086': attribute type 2 has an invalid length.
[  181.972264][T12494] netlink: 'syz.0.2088': attribute type 4 has an invalid length.
[  181.972844][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'.
[  181.978601][T12494] netlink: 'syz.0.2088': attribute type 4 has an invalid length.
[  181.995854][T12494] netlink: zone id is out of range
[  181.998409][T12494] netlink: zone id is out of range
[  182.001267][T12494] netlink: zone id is out of range
[  182.003701][T12494] netlink: zone id is out of range
[  182.007291][T12494] netlink: zone id is out of range
[  182.010206][T12494] netlink: zone id is out of range
[  182.012967][T12494] netlink: zone id is out of range
[  182.017925][T12494] netlink: zone id is out of range
[  182.028529][T12494] netlink: zone id is out of range
[  182.030980][T12494] netlink: zone id is out of range
[  182.112344][T12504] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.147952][T12504] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.167174][T12509] tipc: Bearer <eth:veth0_to_bond>: already 2 bearers with priority 10
[  182.170572][T12509] tipc: Bearer <eth:veth0_to_bond>: trying with adjusted priority
[  182.174116][T12509] tipc: Enabled bearer <eth:veth0_to_bond>, priority 9
[  182.195862][T12504] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.238537][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2092'.
[  182.251571][T12504] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.317290][ T8677] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.326848][ T5718] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.338779][ T5718] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.352114][ T5718] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.382470][T12517] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2093'.
[  182.675211][T12520] nbd1: detected capacity change from 0 to 549764202496
[  182.679234][   T56] block nbd1: Receive control failed (result -104)
[  183.041133][T12548] syzkaller1: entered promiscuous mode
[  183.046833][T12548] syzkaller1: entered allmulticast mode
[  183.876053][T12566] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  183.880178][T12566] syzkaller0: entered promiscuous mode
[  183.882337][T12566] syzkaller0: entered allmulticast mode
[  184.858476][T12598] netlink: 'syz.0.2117': attribute type 1 has an invalid length.
[  184.877574][T12598] 8021q: adding VLAN 0 to HW filter on device bond10
[  184.891033][T12598] bond10: (slave gretap2): making interface the new active one
[  184.894537][T12598] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  185.303756][T12610] netlink: 'syz.2.2120': attribute type 10 has an invalid length.
[  185.457749][T12640] sctp: [Deprecated]: syz.1.2129 (pid 12640) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.457749][T12640] Use struct sctp_sack_info instead
[  185.576336][T12640] block nbd2: server does not support multiple connections per device.
[  185.581049][T12640] block nbd2: shutting down sockets
[  185.592446][T12642] IPVS: set_ctl: invalid protocol: 137 172.20.20.62:20004
[  185.752432][T12652] netlink: 'syz.2.2132': attribute type 3 has an invalid length.
[  185.755860][T12652] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  185.885144][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  185.940591][T12662] __nla_validate_parse: 45 callbacks suppressed
[  185.940607][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'.
[  185.952261][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'.
[  185.959125][T12662] netlink: 'syz.0.2136': attribute type 30 has an invalid length.
[  185.977673][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.981433][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.987972][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.991867][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.017932][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2138'.
[  186.139746][T12669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.143308][T12669] syzkaller0: entered promiscuous mode
[  186.147513][T12669] syzkaller0: entered allmulticast mode
[  186.152307][T12668] tipc: Resetting bearer <eth:syzkaller0>
[  186.165431][T12668] tipc: Disabling bearer <eth:syzkaller0>
[  186.230189][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'.
[  186.235289][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'.
[  186.238703][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'.
[  186.314378][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'.
[  186.470032][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2147'.
[  186.550512][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  186.554897][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  186.656850][T12703] bond0: (slave rose0): Enslaving as an active interface with an up link
[  187.012569][T12736] netlink: 'syz.1.2158': attribute type 1 has an invalid length.
[  187.133172][T12746] net_ratelimit: 12 callbacks suppressed
[  187.133183][T12746] openvswitch: netlink: ufid size 580 bytes exceeds the range (1, 16)
[  187.139320][T12746] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  187.179305][T12751] netlink: 'syz.2.2164': attribute type 14 has an invalid length.
[  187.182598][T12751] netlink: 'syz.2.2164': attribute type 14 has an invalid length.
[  187.263046][T12761] netlink: 'syz.2.2165': attribute type 1 has an invalid length.
[  187.269048][T12759] delete_channel: no stack
[  187.271099][T12761] netlink: 'syz.2.2165': attribute type 1 has an invalid length.
[  188.038715][T12835] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.465771][   T61] block nbd0: Possible stuck request ffff888022bf0000: control (read@0,4096B). Runtime 30 seconds
[  188.664102][T12883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.952518][T12907] team0: Device gtp1 is of different type
[  188.969857][T12908] team0: Device gtp1 is of different type
[  189.078524][T12918] openvswitch: netlink: Duplicate or invalid key (type 0).
[  189.081216][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.103790][T12920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.169580][T12924] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  189.999405][T12960] validate_nla: 8 callbacks suppressed
[  189.999415][T12960] netlink: 'syz.0.2232': attribute type 6 has an invalid length.
[  190.004110][T12960] netlink: 'syz.0.2232': attribute type 5 has an invalid length.
[  190.032242][T12962] netlink: 'syz.0.2233': attribute type 6 has an invalid length.
[  190.035792][T12962] netlink: 'syz.0.2233': attribute type 6 has an invalid length.
[  190.171519][T12973] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20005
[  190.248539][T12980] xfrm1: entered allmulticast mode
[  190.412385][T13002] vxcan1 speed is unknown, defaulting to 1000
[  190.461273][T13006] xfrm1: entered promiscuous mode
[  190.462999][T13006] xfrm1: entered allmulticast mode
[  190.817107][T13043] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  190.899506][T13052] netlink: 'syz.0.2263': attribute type 7 has an invalid length.
[  190.920326][T13052] : entered promiscuous mode
[  190.962804][T13057] __nla_validate_parse: 34 callbacks suppressed
[  190.962814][T13057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2265'.
[  190.984443][T13063] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  191.022718][T13070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2268'.
[  191.059993][T13076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2270'.
[  191.060282][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2270'.
[  191.130091][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'.
[  191.133077][T13088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'.
[  191.156003][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'.
[  191.168856][T13090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2276'.
[  191.207037][T13099] netlink: 'syz.1.2279': attribute type 10 has an invalid length.
[  191.227958][T13099] batman_adv: batadv0: Adding interface: team0
[  191.230197][T13099] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.239630][T13099] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  191.378635][T13111] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.420009][T13111] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.477808][T13111] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.516889][T13121] netlink: 'syz.0.2284': attribute type 178 has an invalid length.
[  191.523550][T13111] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.627639][ T5718] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.650602][ T5718] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.653615][ T5718] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.673501][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.752338][T13139] netlink: 'syz.2.2288': attribute type 1 has an invalid length.
[  191.827436][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'.
[  191.830603][T13147] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  191.833485][T13147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.881272][T13147] netlink: 'syz.1.2292': attribute type 1 has an invalid length.
[  191.993738][ T5718] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  192.442525][T13192] veth0: entered promiscuous mode
[  192.775094][T13191] veth0: left promiscuous mode
[  192.861017][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'.
[  192.921458][T13209] netlink: 'syz.0.2308': attribute type 62 has an invalid length.
[  192.950590][T13214] tipc: Can't bind to reserved service type 2
[  194.979324][T13274] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  194.982154][T13274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.029809][T13271] geneve0: entered promiscuous mode
[  195.033968][T13271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.087676][T13282] validate_nla: 7 callbacks suppressed
[  195.087691][T13282] netlink: 'syz.2.2329': attribute type 1 has an invalid length.
[  195.116650][T13288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.119170][T13287] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.231306][T13287] tipc: Disabling bearer <eth:syzkaller0>
[  195.301760][T13302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.307484][T13301] netlink: 'syz.1.2337': attribute type 5 has an invalid length.
[  195.342597][T13309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.347038][T13309] syzkaller0: entered promiscuous mode
[  195.349018][T13309] syzkaller0: entered allmulticast mode
[  195.362017][T13309] tipc: Resetting bearer <eth:syzkaller0>
[  195.369289][T13307] tipc: Resetting bearer <eth:syzkaller0>
[  195.379773][T13307] tipc: Disabling bearer <eth:syzkaller0>
[  195.453147][T13322] veth7: entered promiscuous mode
[  195.658674][T13340] netlink: 'syz.1.2346': attribute type 12 has an invalid length.
[  196.001534][T13369] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.006381][T13369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.038611][T13369] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.042055][T13369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.098070][T13369] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.101545][T13369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.153818][T13373] netlink: 'syz.2.2355': attribute type 10 has an invalid length.
[  196.161394][T13369] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.164544][T13369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.171231][T13373] __nla_validate_parse: 18 callbacks suppressed
[  196.171240][T13373] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2355'.
[  196.213156][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.216752][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.230692][ T5718] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.233577][ T5718] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.239052][ T5718] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.241991][ T5718] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.251080][ T5718] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.253849][ T5718] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.343787][T13382] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  196.490136][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'.
[  196.622216][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'.
[  196.653567][T13408] tipc: Resetting bearer <ib:ip6gre0>
[  196.673385][T13408] tipc: Resetting bearer <eth:veth0_to_bond>
[  196.695788][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'.
[  196.791654][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2372'.
[  196.927781][T13434] netlink: 'syz.0.2378': attribute type 11 has an invalid length.
[  196.930378][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  196.933572][T13434] netlink: 'syz.0.2378': attribute type 11 has an invalid length.
[  196.937166][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  197.499118][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'.
[  197.580296][T13465] netlink: 'syz.0.2388': attribute type 4 has an invalid length.
[  197.616521][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  197.620478][T13469] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  197.623896][T13469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.630197][T13469] netlink: 'syz.0.2389': attribute type 1 has an invalid length.
[  197.790482][T13487] geneve4: entered promiscuous mode
[  197.822122][T13483] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2394'.
[  198.195983][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.312113][T13535] tipc: Resetting bearer <eth:syzkaller0>
[  198.315041][T13535] tipc: Resetting bearer <eth:syzkaller0>
[  198.555067][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.866474][T13553] vxcan1 speed is unknown, defaulting to 1000
[  198.920189][T13562] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  198.953032][T13565] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  198.956858][T13565] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  199.046207][T13569] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  199.048844][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.059471][T13569] netlink: 'syz.0.2414': attribute type 1 has an invalid length.
[  199.449325][T13596] vxcan1 speed is unknown, defaulting to 1000
[  199.886071][T13635] sctp: [Deprecated]: syz.2.2438 (pid 13635) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.886071][T13635] Use struct sctp_sack_info instead
[  199.946702][T13632] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  200.038147][T13649] sctp: [Deprecated]: syz.1.2443 (pid 13649) Use of int in max_burst socket option deprecated.
[  200.038147][T13649] Use struct sctp_assoc_value instead
[  200.049015][T13649] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  200.904217][T13717] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  200.965568][T13726] syzkaller1: entered promiscuous mode
[  200.970030][T13726] syzkaller1: entered allmulticast mode
[  201.071319][T13742] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  201.145396][T13754] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  201.150200][T13753] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  201.168405][T13760] validate_nla: 4 callbacks suppressed
[  201.168414][T13760] netlink: 'syz.0.2478': attribute type 8 has an invalid length.
[  201.210643][T13760] __nla_validate_parse: 19 callbacks suppressed
[  201.210653][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2478'.
[  201.262987][T13769] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  201.422387][T13781] netlink: 'syz.1.2484': attribute type 13 has an invalid length.
[  201.425516][T13781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2484'.
[  201.428649][T13781] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  201.512029][T13783] vxcan1 speed is unknown, defaulting to 1000
[  201.549751][T13786] IPv6: Can't replace route, no match found
[  201.609691][T13784] vxcan1 speed is unknown, defaulting to 1000
[  202.088739][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'.
[  202.108317][T13793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2487'.
[  202.112372][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'.
[  202.125759][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2487'.
[  202.242402][T13801] netlink: 'syz.0.2489': attribute type 21 has an invalid length.
[  202.925362][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  202.986468][T13821] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2497'.
[  203.027720][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'.
[  203.147342][T13832] netlink: 724 bytes leftover after parsing attributes in process `syz.0.2501'.
[  203.151747][T13832] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2501'.
[  203.188691][T13833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  203.573030][T13866] netlink: 'syz.1.2511': attribute type 83 has an invalid length.
[  203.631731][T13870] netlink: 'syz.1.2513': attribute type 2 has an invalid length.
[  204.252290][T13884] netlink: 'syz.2.2518': attribute type 6 has an invalid length.
[  204.536592][T13904] openvswitch: netlink: Missing key (keys=40, expected=100)
[  205.021602][T13921] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  205.070207][T13918] bond0 (unregistering): Released all slaves
[  205.127744][T13928] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  205.132300][T13928] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  205.347757][T13945] netlink: 'syz.2.2538': attribute type 26 has an invalid length.
[  205.490174][T13519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.494377][T13519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.762033][T13994] gretap1: entered promiscuous mode
[  205.764170][T13994] gretap1: entered allmulticast mode
[  205.908113][T14006] netlink: 'syz.2.2558': attribute type 1 has an invalid length.
[  206.091200][T14014] netlink: 'syz.2.2562': attribute type 1 has an invalid length.
[  206.237146][T14027] netlink: 'syz.2.2565': attribute type 1 has an invalid length.
[  206.239781][T14027] __nla_validate_parse: 17 callbacks suppressed
[  206.239790][T14027] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2565'.
[  206.541742][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  206.662238][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'.
[  206.748143][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  206.842050][T14086] bond0: option miimon: invalid value (18446744073709551607)
[  206.848579][T14086] bond0: option miimon: allowed values 0 - 2147483647
[  206.896389][T14088] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  206.909199][T14088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.964106][T14088] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  206.968419][T14088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.010208][T14088] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.013545][T14088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.062391][T14088] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.066158][T14088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.166502][ T5718] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.178982][ T5718] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.192291][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'.
[  207.208341][ T5718] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.215804][ T5718] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.222664][ T5718] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.228665][ T5718] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.242679][ T5922] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.245934][ T5922] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.288060][T14117] netlink: 'syz.2.2586': attribute type 3 has an invalid length.
[  207.527447][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2597'.
[  207.562349][T14160] bond0: entered promiscuous mode
[  207.565355][T14160] bond0: entered allmulticast mode
[  207.568618][T14160] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.576399][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'.
[  207.633231][T14168] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2600'.
[  208.011022][T14214] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2608'.
[  208.015082][T14214] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  208.055753][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'.
[  208.376344][T14249] lo speed is unknown, defaulting to 1000
[  208.378377][T14249] lo speed is unknown, defaulting to 1000
[  208.381574][T14249] lo speed is unknown, defaulting to 1000
[  208.390135][T14249] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  208.398777][T14249] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  208.425811][T14249] lo speed is unknown, defaulting to 1000
[  208.430215][T14249] lo speed is unknown, defaulting to 1000
[  208.436084][T14249] lo speed is unknown, defaulting to 1000
[  208.451986][T14249] gretap0: Device is already in use.
[  208.823177][T14270] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  208.908255][T14285] tap0: tun_chr_ioctl cmd 1074025677
[  208.910915][T14285] tap0: linktype set to 825
[  209.010402][T14292] sit0: left promiscuous mode
[  209.012563][T14292] sit0: left allmulticast mode
[  209.022225][T14292] tipc: Resetting bearer <ib:ip6gre0>
[  209.030592][T14292] bridge0: port 1(syz_tun) entered disabled state
[  209.051664][T14292] veth1_to_batadv: left allmulticast mode
[  209.057160][T14292] 0: left allmulticast mode
[  209.059371][T14292] hsr_slave_0: left allmulticast mode
[  209.061862][T14292] hsr_slave_1: left allmulticast mode
[  209.072215][T14292] ip6gre2: left allmulticast mode
[  209.090524][T14292] veth5: left promiscuous mode
[  209.095860][T14292] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  209.105198][T14292] bond6: left promiscuous mode
[  209.108124][T14292] batadv2: left promiscuous mode
[  209.109889][T14292] batadv2: left allmulticast mode
[  209.121564][T14292] xfrm1: left promiscuous mode
[  209.123152][T14292] xfrm1: left allmulticast mode
[  209.128189][T14295] @: renamed from veth0_vlan
[  209.140616][ T5718] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.144964][ T5718] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.147902][ T5718] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.150946][ T5718] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.341513][T14309] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.346314][T14309] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.403340][T14309] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.408617][T14309] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.466207][T14309] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.469495][T14309] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.518588][T14309] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.523250][T14309] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.639482][ T5718] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.643123][ T5718] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.653742][ T5718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.658001][ T5718] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.672786][ T5718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.678709][ T5718] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.692319][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.695481][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.798280][T14325] vxcan1 speed is unknown, defaulting to 1000
[  209.894158][T14330] ipvlan2: entered promiscuous mode
[  209.902212][T14330] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  209.940673][T14325] lo speed is unknown, defaulting to 1000
[  210.863515][T14388] netlink: 'syz.0.2668': attribute type 1 has an invalid length.
[  210.870117][T14388] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  211.088964][ T5718] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  211.216186][T14406] netlink: 'syz.1.2674': attribute type 8 has an invalid length.
[  211.272401][T14411] __nla_validate_parse: 20 callbacks suppressed
[  211.272412][T14411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2676'.
[  211.303435][T14413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.340931][T14415] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  211.344126][T14415] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  211.371065][T14420] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  211.444103][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'.
[  211.606679][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.610637][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.614134][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.617554][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.620864][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.624157][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.628430][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  211.631738][T14444] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2686'.
[  212.042793][T14475] netlink: 'syz.1.2695': attribute type 11 has an invalid length.
[  212.077924][ T9404] IPVS: starting estimator thread 0...
[  212.176722][T14495] IPVS: using max 49 ests per chain, 117600 per kthread
[  212.411299][T14520] sctp: [Deprecated]: syz.1.2704 (pid 14520) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.411299][T14520] Use struct sctp_sack_info instead
[  212.715417][T14540] geneve0: entered promiscuous mode
[  212.718031][ T5718] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.720748][ T5718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.723560][ T5718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.727299][ T5718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.774900][   T61] block nbd1: Possible stuck request ffff888022c60000: control (read@0,4096B). Runtime 30 seconds
[  212.856564][T14553] bridge0: port 2(erspan0) entered blocking state
[  212.858843][T14553] bridge0: port 2(erspan0) entered disabled state
[  212.861204][T14553] erspan0: entered allmulticast mode
[  212.867692][T14553] erspan0: left allmulticast mode
[  213.853414][T14570] netlink: 'syz.2.2719': attribute type 1 has an invalid length.
[  213.919167][T14574] netlink: 'syz.1.2720': attribute type 16 has an invalid length.
[  213.963264][T14579] tipc: MTU too low for tipc bearer
[  214.741384][T14634] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  214.819535][T14646] netlink: 'syz.0.2738': attribute type 15 has an invalid length.
[  214.822382][T14645] syzkaller0: left promiscuous mode
[  214.824301][T14645] syzkaller0: left allmulticast mode
[  214.827048][T14645] tipc: Resetting bearer <eth:syzkaller0>
[  215.069099][T14671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.100061][T14675] syzkaller0: entered promiscuous mode
[  215.102508][T14675] syzkaller0: entered allmulticast mode
[  215.187909][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.273010][T14683] netlink: 'syz.2.2751': attribute type 1 has an invalid length.
[  215.744576][T14701] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  215.758571][T14701] geneve3: left promiscuous mode
[  215.781645][T14701] xfrm1: left allmulticast mode
[  215.790272][T14701] geneve4: left promiscuous mode
[  215.803095][T14701] bond0: left promiscuous mode
[  215.805799][T14701] bond0: left allmulticast mode
[  215.809661][ T8677] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.815431][ T8677] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.820803][ T8677] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.823905][ T8677] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.843112][ T8677] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.847544][ T8677] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.999512][T14704] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  216.006877][T14710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.022673][T14704] bond0 (unregistering): Released all slaves
[  216.041360][ T8677] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.047835][ T8677] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.556237][T14735] __nla_validate_parse: 283 callbacks suppressed
[  216.556252][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2767'.
[  216.599589][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'.
[  216.602613][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'.
[  216.683460][T14744] wg1 speed is unknown, defaulting to 1000
[  216.686964][T14744] wg1 speed is unknown, defaulting to 1000
[  216.690917][T14744] wg1 speed is unknown, defaulting to 1000
[  216.700714][T14744] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  216.726802][T14744] wg1 speed is unknown, defaulting to 1000
[  216.730833][T14744] wg1 speed is unknown, defaulting to 1000
[  216.745474][T14744] wg1 speed is unknown, defaulting to 1000
[  216.827068][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'.
[  217.247726][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'.
[  217.369350][T14773] netlink: 'syz.1.2780': attribute type 2 has an invalid length.
[  217.374909][T14773] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2780'.
[  217.379518][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'.
[  217.382408][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'.
[  217.422292][T14782] openvswitch: netlink: Unknown key attributes 2
[  217.428288][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'.
[  217.470512][T14791] syzkaller0: entered promiscuous mode
[  217.472491][T14791] syzkaller0: entered allmulticast mode
[  217.474613][T14791] tipc: Resetting bearer <eth:syzkaller0>
[  217.591036][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2791'.
[  218.525516][   T61] block nbd0: Possible stuck request ffff888022bf0000: control (read@0,4096B). Runtime 60 seconds
[  218.877535][T14885] syzkaller0: entered promiscuous mode
[  218.880098][T14885] syzkaller0: entered allmulticast mode
[  219.018950][T14891] netlink: 'syz.2.2817': attribute type 4 has an invalid length.
[  219.038846][T14891] netlink: 'syz.2.2817': attribute type 4 has an invalid length.
[  219.319999][T14909] netlink: 'syz.2.2824': attribute type 7 has an invalid length.
[  219.323439][T14909] netlink: 'syz.2.2824': attribute type 8 has an invalid length.
[  219.332845][T14909] netlink: 'syz.2.2824': attribute type 4 has an invalid length.
[  219.412135][T14912] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  219.623193][T14937] syzkaller0: tun_chr_ioctl cmd 1074025673
[  219.699108][ T5718] syzkaller0: tun_net_xmit 76
[  219.701255][ T5718] syzkaller0: tun_net_xmit 48
[  219.734949][ T5904] syzkaller0: tun_net_xmit 76
[  220.642859][T14946] veth0: entered promiscuous mode
[  220.647977][T14947] veth0: left promiscuous mode
[  220.790553][T14962] vlan2: entered promiscuous mode
[  220.792355][T14962] vlan2: entered allmulticast mode
[  220.794036][T14962] hsr_slave_1: entered allmulticast mode
[  220.823026][T14972] netlink: 'syz.1.2844': attribute type 1 has an invalid length.
[  221.138208][T15010] ip_vti0: Master is either lo or non-ether device
[  221.402553][T15030] macvlan3: entered promiscuous mode
[  221.406269][T15030] macvlan3: entered allmulticast mode
[  221.409425][T15030] bond12: (slave macvlan3): Opening slave failed
[  221.911141][T15067] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  221.952443][T15073] __nla_validate_parse: 16 callbacks suppressed
[  221.952453][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'.
[  222.081814][T15085] netlink: 'syz.0.2879': attribute type 10 has an invalid length.
[  222.228954][T15103] netlink: 'syz.1.2886': attribute type 4 has an invalid length.
[  222.320986][T15114] vxcan1 speed is unknown, defaulting to 1000
[  222.399445][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'.
[  222.444800][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'.
[  222.448132][T15131] netlink: 'syz.2.2894': attribute type 4 has an invalid length.
[  222.451155][T15130] netlink: 'syz.2.2894': attribute type 4 has an invalid length.
[  222.597515][T15112] vxcan1 speed is unknown, defaulting to 1000
[  222.597586][T15114] lo speed is unknown, defaulting to 1000
[  222.603599][T15114] wg1 speed is unknown, defaulting to 1000
[  222.841119][T15112] lo speed is unknown, defaulting to 1000
[  222.847024][T15112] wg1 speed is unknown, defaulting to 1000
[  222.953551][T15111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.072766][T15162] vxcan1 speed is unknown, defaulting to 1000
[  223.211155][T15162] lo speed is unknown, defaulting to 1000
[  223.211506][T15167] vxcan1 speed is unknown, defaulting to 1000
[  223.213910][T15162] wg1 speed is unknown, defaulting to 1000
[  223.348492][T15167] lo speed is unknown, defaulting to 1000
[  223.352029][T15167] wg1 speed is unknown, defaulting to 1000
[  223.573174][T15192] openvswitch: netlink: Message has 220 unknown bytes.
[  224.298615][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2917'.
[  224.416926][T15222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2918'.
[  224.551280][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  224.586480][T15237] sock: sock_timestamping_bind_phc: sock not bind to device
[  224.605160][T15235] vxcan1 speed is unknown, defaulting to 1000
[  224.748360][T15250] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  224.770407][T15250] syzkaller0: entered promiscuous mode
[  224.772535][T15250] syzkaller0: entered allmulticast mode
[  224.875572][T15257] syzkaller1: entered promiscuous mode
[  224.877447][T15257] syzkaller1: entered allmulticast mode
[  224.905208][T15235] lo speed is unknown, defaulting to 1000
[  224.909157][T15235] wg1 speed is unknown, defaulting to 1000
[  224.939177][T15257] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  225.020534][T15240] validate_nla: 1 callbacks suppressed
[  225.020545][T15240] netlink: 'syz.0.2922': attribute type 13 has an invalid length.
[  225.068029][T15240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.076837][   T24] lo speed is unknown, defaulting to 1000
[  225.078986][   T24] syz1: Port: 1 Link ACTIVE
[  226.128296][T15267] tipc: Resetting bearer <eth:syzkaller0>
[  226.212781][T15274] syzkaller1: entered promiscuous mode
[  226.215738][T15274] syzkaller1: entered allmulticast mode
[  226.354791][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'.
[  226.399828][T15288] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2939'.
[  226.429959][T15288] macvlan3: entered promiscuous mode
[  226.432203][T15288] macvlan3: entered allmulticast mode
[  227.695084][T15301] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2942'.
[  227.742496][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'.
[  227.748294][T15310] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  227.751619][T15310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.973572][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'.
[  228.324246][T15341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.893745][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'.
[  229.517316][ T5296] udevd[5296]: worker [10938] /devices/virtual/block/nbd0 is taking a long time
[  229.630832][T15353] macsec2: entered promiscuous mode
[  229.632893][T15353] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  229.635577][T15353] macsec2: entered allmulticast mode
[  229.637887][T15353] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  229.664396][T15358] bridge0: port 1(erspan0) entered blocking state
[  229.666888][T15358] bridge0: port 1(erspan0) entered disabled state
[  229.669248][T15358] erspan0: entered allmulticast mode
[  229.673656][T15358] erspan0: left allmulticast mode
[  229.731830][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'.
[  229.751435][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'.
[  229.755185][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'.
[  229.807362][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'.
[  229.810544][T15373] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  229.837998][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'.
[  229.846149][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'.
[  229.925257][T15373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.319521][T15403] vlan0: entered promiscuous mode
[  230.413006][T15413] netlink: 'syz.2.2975': attribute type 26 has an invalid length.
[  231.108356][T15449] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  231.111032][T15449] netlink: 'syz.0.2988': attribute type 2 has an invalid length.
[  231.115359][T15449] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  231.116449][T15451] team0: entered promiscuous mode
[  231.118069][T15449] netlink: 'syz.0.2988': attribute type 2 has an invalid length.
[  231.123778][T15451] batadv1: entered promiscuous mode
[  231.142098][T15451] team0 (unregistering): left promiscuous mode
[  231.145046][T15451] batadv1: left promiscuous mode
[  231.147904][T15451] batman_adv: batadv0: Removing interface: team0
[  231.154496][T15451] team0 (unregistering): Port device batadv1 removed
[  231.629578][T15483] vxcan1 speed is unknown, defaulting to 1000
[  231.759782][T15483] lo speed is unknown, defaulting to 1000
[  231.762553][T15483] wg1 speed is unknown, defaulting to 1000
[  232.057231][T15516] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  232.060399][T15516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.266537][T15528] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.438038][T15538] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  232.440548][T15538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.835398][T15555] vxcan1 speed is unknown, defaulting to 1000
[  232.986272][T15555] lo speed is unknown, defaulting to 1000
[  232.986900][T15551] __nla_validate_parse: 13 callbacks suppressed
[  232.986915][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'.
[  232.996358][T15555] wg1 speed is unknown, defaulting to 1000
[  233.144264][T15565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3023'.
[  233.154268][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3024'.
[  233.168198][T15567] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3024'.
[  233.176605][T15567] netlink: zone id is out of range
[  233.179063][T15567] netlink: zone id is out of range
[  233.185739][T15567] netlink: zone id is out of range
[  233.188708][T15565] netlink: 'syz.1.3023': attribute type 21 has an invalid length.
[  233.191929][T15565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3023'.
[  233.283123][T15572] syzkaller0: entered promiscuous mode
[  233.283132][T15570] raw_sendmsg: syz.2.3025 forgot to set AF_INET. Fix it!
[  233.285888][T15572] syzkaller0: entered allmulticast mode
[  233.308434][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'.
[  233.452255][T15576] netlink: 'syz.2.3027': attribute type 3 has an invalid length.
[  233.458159][T15576] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3027'.
[  233.543983][T15582] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  233.549614][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'.
[  233.627302][T15582] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3029'.
[  233.959578][T15606] vlan0: entered promiscuous mode
[  234.009810][T15606] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3036'.
[  234.044352][T15614] netlink: 'syz.1.3039': attribute type 1 has an invalid length.
[  234.225727][T15627] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  234.454184][T15638] veth1: entered promiscuous mode
[  234.556155][T15643] syz_tun: entered allmulticast mode
[  234.559549][T15641] syz_tun: left allmulticast mode
[  234.706182][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.101564][T15681] __nla_validate_parse: 10 callbacks suppressed
[  238.101576][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'.
[  238.147800][T15686] netlink: 'syz.2.3064': attribute type 1 has an invalid length.
[  238.152169][T15686] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3064'.
[  238.224316][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'.
[  238.262641][T15689] vxcan1 speed is unknown, defaulting to 1000
[  238.378436][T15689] lo speed is unknown, defaulting to 1000
[  238.381832][T15689] wg1 speed is unknown, defaulting to 1000
[  238.685147][T15720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.775676][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'.
[  238.991525][T15736] dvmrp8: entered allmulticast mode
[  239.011552][T15735] dvmrp8: left allmulticast mode
[  239.282976][T15745] netlink: 'syz.2.3084': attribute type 23 has an invalid length.
[  239.371021][T15751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.375766][T15751] syzkaller0: entered promiscuous mode
[  239.378264][T15751] syzkaller0: entered allmulticast mode
[  239.395644][T15751] tipc: Resetting bearer <eth:syzkaller0>
[  239.399631][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'.
[  239.403363][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'.
[  239.422940][T15751] tipc: Resetting bearer <eth:syzkaller0>
[  239.432964][T15751] tipc: Disabling bearer <eth:syzkaller0>
[  239.582824][T15759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'.
[  239.652767][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3092'.
[  239.658378][T15770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3092'.
[  240.011440][T15812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3106'.
[  240.142993][ T5843] Bluetooth: hci2: link tx timeout
[  240.145668][ T5843] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  240.285815][T15839] netlink: 'syz.2.3117': attribute type 29 has an invalid length.
[  240.296199][T15839] netlink: 'syz.2.3117': attribute type 29 has an invalid length.
[  240.313836][T15839] unsupported nla_type 58
[  240.330801][T15848] netlink: 'syz.2.3117': attribute type 29 has an invalid length.
[  240.545875][T15872] ip6gre2: entered allmulticast mode
[  240.735420][T15886] netlink: 'syz.2.3130': attribute type 4 has an invalid length.
[  240.900418][T15898] net_ratelimit: 2 callbacks suppressed
[  240.900436][T15898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.909358][   T10] lo speed is unknown, defaulting to 1000
[  240.913201][   T10] syz1: Port: 1 Link DOWN
[  241.298698][T15921] netlink: 'syz.1.3141': attribute type 10 has an invalid length.
[  241.596495][T15954] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  241.599238][T15954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.655672][T15962] netlink: 'syz.1.3151': attribute type 13 has an invalid length.
[  241.658594][T15962] netlink: 'syz.1.3151': attribute type 17 has an invalid length.
[  241.669527][T15962] erspan0: left promiscuous mode
[  241.688085][T15962] bridge0: port 1(syz_tun) entered blocking state
[  241.690541][T15962] bridge0: port 1(syz_tun) entered forwarding state
[  241.697685][T15962] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.703278][T15962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.737758][T15962] vxcan1 speed is unknown, defaulting to 1000
[  241.774906][T15971] ip6_vti0: Master is either lo or non-ether device
[  241.782895][T15973] openvswitch: netlink: Unknown key attributes 2
[  241.880650][T15962] lo speed is unknown, defaulting to 1000
[  241.883498][T15962] wg1 speed is unknown, defaulting to 1000
[  242.067847][T15990] syzkaller0: entered promiscuous mode
[  242.069880][T15990] syzkaller0: entered allmulticast mode
[  242.083167][T15990] openvswitch: netlink: Flow actions attr not present in new flow.
[  242.176744][   T33] audit: type=1804 audit(1754943590.651:11): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3164" name="/newroot/1065/memory.events" dev="tmpfs" ino=5435 res=1 errno=0
[  242.186126][   T33] audit: type=1800 audit(1754943590.651:12): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3164" name="memory.events" dev="tmpfs" ino=5435 res=0 errno=0
[  242.196862][T15992] pim6reg1: entered promiscuous mode
[  242.199959][T15992] pim6reg1: entered allmulticast mode
[  242.214839][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  242.400863][T15997] 8021q: VLANs not supported on tunl0
[  242.707291][T16013] openvswitch: netlink: Flow key attr not present in new flow.
[  242.795011][T16015] nbd2: detected capacity change from 0 to 127
[  242.812355][T10980] block nbd2: Receive control failed (result -104)
[  242.845518][   T61] block nbd1: Possible stuck request ffff888022c60000: control (read@0,4096B). Runtime 60 seconds
[  242.932078][T16031] netlink: 'syz.2.3176': attribute type 8 has an invalid length.
[  242.987499][T16036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.994260][   T10] lo speed is unknown, defaulting to 1000
[  243.002275][   T10] syz1: Port: 1 Link ACTIVE
[  243.020830][T16029] vxcan1 speed is unknown, defaulting to 1000
[  243.156022][T16046] __nla_validate_parse: 56 callbacks suppressed
[  243.156034][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3180'.
[  243.156060][T16045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3180'.
[  243.163391][T16029] lo speed is unknown, defaulting to 1000
[  243.166032][T16045] validate_nla: 2 callbacks suppressed
[  243.166041][T16045] netlink: 'syz.2.3180': attribute type 7 has an invalid length.
[  243.169061][T16046] netlink: 'syz.2.3180': attribute type 7 has an invalid length.
[  243.170057][T16045] netlink: 'syz.2.3180': attribute type 8 has an invalid length.
[  243.172869][T16046] netlink: 'syz.2.3180': attribute type 8 has an invalid length.
[  243.172880][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'.
[  243.174295][T16029] wg1 speed is unknown, defaulting to 1000
[  243.175804][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'.
[  243.231599][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'.
[  243.235905][T16049] netlink: 'syz.2.3181': attribute type 2 has an invalid length.
[  243.239403][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3181'.
[  243.307179][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'.
[  243.374664][T16058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.397596][T16058] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  243.413920][T16058] tipc: Failed to remove unknown binding: 66,1,1/1911290523:1516655631/1516655633
[  243.418992][T16058] tipc: Failed to remove unknown binding: 66,1,1/1911290523:1516655631/1516655633
[  243.422682][T16058] tipc: Failed to remove unknown binding: 66,1,1/1911290523:1516655631/1516655633
[  243.474129][T16058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3185'.
[  243.507724][T16058] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3185'.
[  243.671701][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'.
[  243.904114][   T33] audit: type=1800 audit(1754943592.371:13): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3196" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5313 res=0 errno=0
[  243.959746][T16101] chnl_net:caif_netlink_parms(): no params data found
[  243.975096][T16100] chnl_net:caif_netlink_parms(): no params data found
[  244.018659][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.284853][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  244.617894][T16109] netlink: 'syz.2.3200': attribute type 32 has an invalid length.
[  244.621190][T16109] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  244.743373][T16121] netlink: 'syz.2.3204': attribute type 8 has an invalid length.
[  244.903721][T16119] unknown channel width for channel at 909000KHz?
[  244.906744][T16119] unknown channel width for channel at 909000KHz?
[  244.912014][T16127] vxcan1 speed is unknown, defaulting to 1000
[  244.921286][T16119] nbd: couldn't find device at index 536870912
[  245.042713][T16127] lo speed is unknown, defaulting to 1000
[  245.047870][T16127] wg1 speed is unknown, defaulting to 1000
[  245.253057][T16145] netlink: 'syz.0.3210': attribute type 9 has an invalid length.
[  245.721675][T16148] netlink: 'syz.2.3211': attribute type 1 has an invalid length.
[  246.113335][T16167] netlink: 'syz.1.3216': attribute type 1 has an invalid length.
[  246.143955][T16167] 8021q: adding VLAN 0 to HW filter on device bond14
[  246.159610][T16167] 8021q: adding VLAN 0 to HW filter on device bond14
[  246.162558][T16167] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  246.168162][T16167] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  246.209501][T16181] gretap2: entered promiscuous mode
[  246.213187][T16181] bond14: (slave gretap2): making interface the new active one
[  246.217002][T16181] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  246.228953][T16181] macvlan2: entered promiscuous mode
[  246.231936][T16181] macvlan2: entered allmulticast mode
[  246.234585][T16181] bond14: entered promiscuous mode
[  246.237923][T16181] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  246.242474][T16181] bond14: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  246.249497][T16181] bond14: left promiscuous mode
[  246.369612][T16196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.373003][T16196] syzkaller0: entered promiscuous mode
[  246.376390][T16196] syzkaller0: entered allmulticast mode
[  246.393911][T16196] tipc: Resetting bearer <eth:syzkaller0>
[  246.397916][T16195] tipc: Resetting bearer <eth:syzkaller0>
[  246.409695][T16195] tipc: Disabling bearer <eth:syzkaller0>
[  246.449842][T16199] bond0: (slave gretap0): Error: Device type is different from other slaves
[  246.946838][T16239] ip6_vti0: entered promiscuous mode
[  246.948759][T16239] ip6_vti0: entered allmulticast mode
[  247.089978][T16258] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  247.136183][T16259] vxcan1 speed is unknown, defaulting to 1000
[  247.217916][T16270] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  247.233595][T16270] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  247.238917][T16272] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  247.242967][T16272] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  247.311865][T16259] lo speed is unknown, defaulting to 1000
[  247.314497][T16259] wg1 speed is unknown, defaulting to 1000
[  248.080624][T16291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.420153][T16306] syzkaller0: entered promiscuous mode
[  248.422188][T16306] syzkaller0: entered allmulticast mode
[  248.445846][T16306] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  248.605325][   T61] block nbd0: Possible stuck request ffff888022bf0000: control (read@0,4096B). Runtime 90 seconds
[  249.080699][T16319] __nla_validate_parse: 24 callbacks suppressed
[  249.080712][T16319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3262'.
[  249.337708][T16324] validate_nla: 2 callbacks suppressed
[  249.337727][T16324] netlink: 'syz.0.3263': attribute type 4 has an invalid length.
[  249.381437][T16326] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3264'.
[  249.427887][T16330] RDS: rds_bind could not find a transport for ::ffff:10.1.1.129, load rds_tcp or rds_rdma?
[  249.437586][T16332] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  249.494474][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  249.501744][T16341] netlink: 'syz.1.3268': attribute type 14 has an invalid length.
[  249.504563][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'.
[  249.508822][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  249.511823][T16341] netlink: 'syz.1.3268': attribute type 14 has an invalid length.
[  249.514378][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'.
[  249.546849][T16344] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3269'.
[  249.622873][T16350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3270'.
[  249.629210][T16350] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3270'.
[  249.756219][T16354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.990677][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'.
[  250.199896][T16387] openvswitch: netlink: Unknown nsh attribute 0
[  250.202791][T16387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.309808][T16391] netlink: 'syz.2.3283': attribute type 7 has an invalid length.
[  250.314604][T16391] netlink: 'syz.2.3283': attribute type 8 has an invalid length.
[  250.525790][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  250.540313][T16413] netlink: 'syz.2.3291': attribute type 1 has an invalid length.
[  250.776767][T16428] netlink: 'syz.2.3298': attribute type 10 has an invalid length.
[  250.779665][T16428] syz_tun: entered promiscuous mode
[  250.819658][T16431] syzkaller0: entered promiscuous mode
[  250.822241][T16431] syzkaller0: entered allmulticast mode
[  251.368160][ T5296] udevd[5296]: worker [11010] /devices/virtual/block/nbd1 is taking a long time
[  252.001899][T16433] batadv_slave_1: Device is already in use.
[  252.347906][T16476] sock: sock_set_timeout: `syz.0.3312' (pid 16476) tries to set negative timeout
[  252.359679][T16476] pim6reg1: entered promiscuous mode
[  252.362162][T16476] pim6reg1: entered allmulticast mode
[  252.651898][T16498] netlink: 'syz.0.3320': attribute type 10 has an invalid length.
[  252.655351][T16498] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  252.810768][T16508] netlink: 'syz.0.3324': attribute type 8 has an invalid length.
[  252.936425][T16512] vxcan1 speed is unknown, defaulting to 1000
[  253.031584][T16512] lo speed is unknown, defaulting to 1000
[  253.035172][T16512] wg1 speed is unknown, defaulting to 1000
[  253.878857][T16569] netlink: 'syz.0.3337': attribute type 5 has an invalid length.
[  254.030997][T16594] IPv6: NLM_F_REPLACE set, but no existing node found!
[  254.053527][T16596] rdma_rxe: rxe_newlink: failed to add lo
[  254.071366][T16596] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  254.111963][T16602] gtp1: entered promiscuous mode
[  254.153072][T16607] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  254.195185][T16611] __nla_validate_parse: 24 callbacks suppressed
[  254.195198][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'.
[  254.207938][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'.
[  254.307328][T16625] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3358'.
[  254.322943][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'.
[  254.352145][T16629] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3360'.
[  254.397424][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.400334][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.403043][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.405692][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.408402][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.411390][T16631] Dead loop on virtual device ip6_vti0, fix it urgently!
[  254.441855][T16637] netlink: 'syz.1.3363': attribute type 29 has an invalid length.
[  254.445360][T16637] netlink: 'syz.1.3363': attribute type 29 has an invalid length.
[  254.449135][T16637] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3363'.
[  254.572816][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3366'.
[  254.579198][T16658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3366'.
[  254.639986][T16641] delete_channel: no stack
[  254.731756][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'.
[  254.851915][T16680] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3374'.
[  254.851915][T16678] netlink: 'syz.0.3374': attribute type 1 has an invalid length.
[  254.889126][T16678] bond12: entered promiscuous mode
[  254.891749][T16678] 8021q: adding VLAN 0 to HW filter on device bond12
[  254.912403][T16680] batadv0: entered promiscuous mode
[  254.917439][T16680] batadv0: entered allmulticast mode
[  254.921932][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.930717][T16680] bond12: (slave batadv0): making interface the new active one
[  254.934592][T16680] bond12: (slave batadv0): Enslaving as an active interface with an up link
[  254.943284][T16688] Set syz0 is full, maxelem 0 reached
[  255.119796][T16698] syzkaller1: entered promiscuous mode
[  255.121670][T16698] syzkaller1: entered allmulticast mode
[  255.351784][T16738] netlink: 'syz.2.3391': attribute type 10 has an invalid length.
[  255.549485][T16767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.552595][T16767] syzkaller0: entered promiscuous mode
[  255.554376][T16767] syzkaller0: entered allmulticast mode
[  255.561269][T16767] tipc: Resetting bearer <eth:syzkaller0>
[  255.570686][T16766] tipc: Resetting bearer <eth:syzkaller0>
[  255.586637][T16766] tipc: Disabling bearer <eth:syzkaller0>
[  255.904579][T16823] bond0: option xmit_hash_policy: invalid value (8)
[  257.042895][T16879] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  257.167080][T16888] syzkaller0: entered promiscuous mode
[  257.169750][T16888] syzkaller0: entered allmulticast mode
[  257.180831][T16890] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  258.550040][ T5922] syzkaller0: tun_net_xmit 76
[  258.552241][ T5922] syzkaller0: tun_net_xmit 48
[  258.552522][T16906] syzkaller0: create flow: hash 3641865304 index 1
[  259.388183][T16921] __nla_validate_parse: 17 callbacks suppressed
[  259.388198][T16921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3454'.
[  259.452862][T16923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3455'.
[  259.955118][T16905] syzkaller0: delete flow: hash 3641865304 index 1
[  260.002799][T16927] netlink: 'syz.1.3458': attribute type 1 has an invalid length.
[  260.009313][T16927] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3458'.
[  260.222016][T16945] siw: device registration error -23
[  260.226240][T16946] siw: device registration error -23
[  260.241411][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'.
[  260.245412][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'.
[  260.267212][T16945] netlink: 'syz.1.3465': attribute type 21 has an invalid length.
[  260.270492][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3465'.
[  260.333286][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3467'.
[  260.668158][T16974] 8021q: VLANs not supported on nlmon0
[  260.669902][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'.
[  260.765928][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'.
[  260.782950][T16988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3479'.
[  260.802919][T16990] netlink: 'syz.2.3480': attribute type 11 has an invalid length.
[  261.254581][T17032] netlink: 'syz.2.3495': attribute type 39 has an invalid length.
[  261.396323][T17041] syz_tun: entered promiscuous mode
[  261.401160][T17041] batadv_slave_0: entered promiscuous mode
[  261.405279][T17041] hsr2: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.410591][T17041] hsr2: entered allmulticast mode
[  261.414877][T17041] syz_tun: entered allmulticast mode
[  261.416689][T17041] batadv_slave_0: entered allmulticast mode
[  261.502746][T17049] netlink: 'syz.1.3501': attribute type 1 has an invalid length.
[  261.561469][T17056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.618462][T17060] netlink: 'syz.0.3506': attribute type 1 has an invalid length.
[  261.632870][T17060] (unnamed net_device) (uninitialized): option ad_select: invalid value (123)
[  261.830449][T17086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  261.833810][T17086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.127758][T17108] netlink: 'syz.0.3522': attribute type 1 has an invalid length.
[  263.351844][T17151] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  263.358958][T17151] bridge0: port 1(syz_tun) entered disabled state
[  263.371770][T17151] syz_tun (unregistering): left allmulticast mode
[  263.373969][T17151] syz_tun (unregistering): left promiscuous mode
[  263.376486][T17151] bridge0: port 1(syz_tun) entered disabled state
[  263.408848][T17151] netlink: 'syz.1.3538': attribute type 1 has an invalid length.
[  263.411853][T17151] netlink: 'syz.1.3538': attribute type 2 has an invalid length.
[  263.694516][T17192] netlink: 'syz.0.3556': attribute type 1 has an invalid length.
[  263.830155][T17206] vxcan1 speed is unknown, defaulting to 1000
[  263.992811][T17206] lo speed is unknown, defaulting to 1000
[  263.998983][T17206] wg1 speed is unknown, defaulting to 1000
[  264.081472][T17220] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  264.986526][T17243] __nla_validate_parse: 28 callbacks suppressed
[  264.986539][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3575'.
[  264.997093][T17241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3574'.
[  265.026097][T17246] netlink: 'syz.1.3576': attribute type 21 has an invalid length.
[  265.031633][T17246] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3576'.
[  265.099918][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'.
[  265.162776][T17253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'.
[  265.289172][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'.
[  265.406612][T17290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3591'.
[  265.461009][T17296] syzkaller0: entered promiscuous mode
[  265.463346][T17296] syzkaller0: entered allmulticast mode
[  265.478008][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'.
[  265.571678][T17301] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  265.581322][T17305] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  265.622521][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'.
[  265.671313][T17312] netlink: 'syz.1.3600': attribute type 11 has an invalid length.
[  265.923974][T17323] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3604'.
[  266.440240][T17363] netlink: 'syz.1.3621': attribute type 4 has an invalid length.
[  266.448811][T17364] netlink: 'syz.1.3621': attribute type 4 has an invalid length.
[  266.515652][T17370] bridge0: port 1(syz_tun) entered blocking state
[  266.525255][T17370] bridge0: port 1(syz_tun) entered disabled state
[  266.671904][T17387] veth23: entered promiscuous mode
[  267.096100][T17446] pim6reg1: entered promiscuous mode
[  267.098340][T17446] pim6reg1: entered allmulticast mode
[  267.837981][T17463] IPv6: NLM_F_CREATE should be specified when creating new route
[  267.840811][T17463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  267.843123][T17463] IPv6: NLM_F_CREATE should be set when creating new route
[  267.991710][T17480] veth0_to_bridge: entered promiscuous mode
[  267.993918][T17480] veth0_to_bridge: left promiscuous mode
[  268.007477][T17481] vxcan1 speed is unknown, defaulting to 1000
[  268.319487][T17527] netlink: 'syz.1.3681': attribute type 9 has an invalid length.
[  268.322034][T17527] netlink: 'syz.1.3681': attribute type 6 has an invalid length.
[  268.559430][T17560] netlink: 'syz.0.3693': attribute type 1 has an invalid length.
[  268.900682][T17588] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  268.942697][T17598] sctp: [Deprecated]: syz.0.3707 (pid 17598) Use of int in max_burst socket option deprecated.
[  268.942697][T17598] Use struct sctp_assoc_value instead
[  269.315631][T17617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.182132][T17670] __nla_validate_parse: 32 callbacks suppressed
[  270.182146][T17670] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3732'.
[  270.200883][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'.
[  270.230781][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3734'.
[  270.313847][    C1] ==================================================================
[  270.317138][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  270.320433][    C1] Write of size 8 at addr ffff8881088f8db0 by task swapper/1/0
[  270.324464][    C1] 
[  270.325484][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  270.325501][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.325508][    C1] Call Trace:
[  270.325513][    C1]  <IRQ>
[  270.325519][    C1]  dump_stack_lvl+0x189/0x250
[  270.325539][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.325554][    C1]  ? rcu_is_watching+0x15/0xb0
[  270.325566][    C1]  ? __kasan_check_byte+0x12/0x40
[  270.325583][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.325596][    C1]  ? rcu_is_watching+0x15/0xb0
[  270.325607][    C1]  ? lock_release+0x4b/0x3e0
[  270.325624][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.325638][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.325652][    C1]  print_report+0xca/0x240
[  270.325664][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  270.325680][    C1]  kasan_report+0x118/0x150
[  270.325695][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  270.325709][    C1]  __xfrm_state_delete+0x696/0xca0
[  270.325726][    C1]  xfrm_timer_handler+0x18f/0xa00
[  270.325742][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.325756][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  270.325768][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.325785][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.325798][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.325811][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.325825][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.325839][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  270.325857][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  270.325868][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  270.325883][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  270.325897][    C1]  handle_softirqs+0x286/0x870
[  270.325910][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  270.325923][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  270.325935][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  270.325951][    C1]  __irq_exit_rcu+0xca/0x1f0
[  270.325962][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.325976][    C1]  irq_exit_rcu+0x9/0x30
[  270.325987][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  270.326002][    C1]  </IRQ>
[  270.326006][    C1]  <TASK>
[  270.326011][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.326025][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  270.326039][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  270.326049][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  270.326061][    C1] RAX: cdff31af7dc92500 RBX: ffffffff81968308 RCX: cdff31af7dc92500
[  270.326069][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  270.326077][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  270.326084][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa34730
[  270.326091][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  270.326100][    C1]  ? do_idle+0x1e8/0x510
[  270.326114][    C1]  default_idle+0x13/0x20
[  270.326129][    C1]  default_idle_call+0x74/0xb0
[  270.326144][    C1]  do_idle+0x1e8/0x510
[  270.326155][    C1]  ? __pfx_do_idle+0x10/0x10
[  270.326171][    C1]  cpu_startup_entry+0x44/0x60
[  270.326182][    C1]  start_secondary+0x101/0x110
[  270.326200][    C1]  common_startup_64+0x13e/0x147
[  270.326220][    C1]  </TASK>
[  270.326224][    C1] 
[  270.440537][    C1] Allocated by task 15638:
[  270.442165][    C1]  kasan_save_track+0x3e/0x80
[  270.443888][    C1]  __kasan_slab_alloc+0x6c/0x80
[  270.445688][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  270.447715][    C1]  xfrm_state_alloc+0x24/0x2f0
[  270.449506][    C1]  __find_acq_core+0x8a7/0x1c00
[  270.451306][    C1]  xfrm_find_acq+0x78/0xa0
[  270.453007][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  270.454915][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  270.456824][    C1]  netlink_rcv_skb+0x208/0x470
[  270.458597][    C1]  xfrm_netlink_rcv+0x79/0x90
[  270.460379][    C1]  netlink_unicast+0x82f/0x9e0
[  270.462163][    C1]  netlink_sendmsg+0x805/0xb30
[  270.463948][    C1]  __sock_sendmsg+0x21c/0x270
[  270.465739][    C1]  ____sys_sendmsg+0x505/0x830
[  270.467541][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  270.469310][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  270.471181][    C1]  do_syscall_64+0xfa/0x3b0
[  270.472859][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.475049][    C1] 
[  270.475979][    C1] Freed by task 24:
[  270.477454][    C1]  kasan_save_track+0x3e/0x80
[  270.479163][    C1]  kasan_save_free_info+0x46/0x50
[  270.481002][    C1]  __kasan_slab_free+0x5b/0x80
[  270.482806][    C1]  kmem_cache_free+0x18f/0x400
[  270.484595][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  270.486473][    C1]  process_scheduled_works+0xae1/0x17b0
[  270.488487][    C1]  worker_thread+0x8a0/0xda0
[  270.490221][    C1]  kthread+0x711/0x8a0
[  270.491783][    C1]  ret_from_fork+0x3fc/0x770
[  270.493550][    C1]  ret_from_fork_asm+0x1a/0x30
[  270.495292][    C1] 
[  270.496210][    C1] The buggy address belongs to the object at ffff8881088f8d80
[  270.496210][    C1]  which belongs to the cache xfrm_state of size 928
[  270.501068][    C1] The buggy address is located 48 bytes inside of
[  270.501068][    C1]  freed 928-byte region [ffff8881088f8d80, ffff8881088f9120)
[  270.505979][    C1] 
[  270.506893][    C1] The buggy address belongs to the physical page:
[  270.509245][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881088f9200 pfn:0x1088f8
[  270.512908][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  270.516018][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  270.518817][    C1] page_type: f5(slab)
[  270.520370][    C1] raw: 057ff00000000040 ffff88801db7c000 dead000000000122 0000000000000000
[  270.523591][    C1] raw: ffff8881088f9200 00000000800e000c 00000000f5000000 0000000000000000
[  270.526772][    C1] head: 057ff00000000040 ffff88801db7c000 dead000000000122 0000000000000000
[  270.529944][    C1] head: ffff8881088f9200 00000000800e000c 00000000f5000000 0000000000000000
[  270.533220][    C1] head: 057ff00000000002 ffffea0004223e01 00000000ffffffff 00000000ffffffff
[  270.536505][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  270.539710][    C1] page dumped because: kasan: bad access detected
[  270.542170][    C1] page_owner tracks the page as allocated
[  270.544305][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7216, tgid 7215 (syz.1.399), ts 75640005767, free_ts 74609610677
[  270.551101][    C1]  post_alloc_hook+0x240/0x2a0
[  270.552851][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  270.554925][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  270.557138][    C1]  alloc_pages_mpol+0x232/0x4a0
[  270.559106][    C1]  allocate_slab+0x8a/0x370
[  270.560849][    C1]  ___slab_alloc+0xbeb/0x1410
[  270.562574][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  270.564551][    C1]  xfrm_state_alloc+0x24/0x2f0
[  270.566333][    C1]  xfrm_add_sa+0x17d1/0x4070
[  270.568101][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  270.569974][    C1]  netlink_rcv_skb+0x208/0x470
[  270.571811][    C1]  xfrm_netlink_rcv+0x79/0x90
[  270.573554][    C1]  netlink_unicast+0x82f/0x9e0
[  270.575310][    C1]  netlink_sendmsg+0x805/0xb30
[  270.577104][    C1]  __sock_sendmsg+0x21c/0x270
[  270.578833][    C1]  ____sys_sendmsg+0x505/0x830
[  270.580584][    C1] page last free pid 5841 tgid 5841 stack trace:
[  270.582884][    C1]  __free_frozen_pages+0xbc4/0xd30
[  270.584768][    C1]  __put_partials+0x156/0x1a0
[  270.586493][    C1]  put_cpu_partial+0x17c/0x250
[  270.588261][    C1]  __slab_free+0x2d5/0x3c0
[  270.589908][    C1]  qlist_free_all+0x97/0x140
[  270.591662][    C1]  kasan_quarantine_reduce+0x148/0x160
[  270.593650][    C1]  __kasan_slab_alloc+0x22/0x80
[  270.595447][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  270.597457][    C1]  getname_flags+0xb8/0x540
[  270.599097][    C1]  user_path_at+0x24/0x60
[  270.600678][    C1]  __x64_sys_umount+0xee/0x160
[  270.602463][    C1]  do_syscall_64+0xfa/0x3b0
[  270.604102][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.606474][    C1] 
[  270.607421][    C1] Memory state around the buggy address:
[  270.609517][    C1]  ffff8881088f8c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  270.612332][    C1]  ffff8881088f8d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.615228][    C1] >ffff8881088f8d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.618125][    C1]                                      ^
[  270.620131][    C1]  ffff8881088f8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.622972][    C1]  ffff8881088f8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.625903][    C1] ==================================================================
[  270.629166][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.632119][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  270.636794][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.640380][    C1] Call Trace:
[  270.641683][    C1]  <IRQ>
[  270.642860][    C1]  dump_stack_lvl+0x99/0x250
[  270.644745][    C1]  ? __asan_memcpy+0x40/0x70
[  270.646558][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.648526][    C1]  ? __pfx__printk+0x10/0x10
[  270.650229][    C1]  vpanic+0x281/0x750
[  270.651727][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.653683][    C1]  ? __pfx_vpanic+0x10/0x10
[  270.655396][    C1]  ? asm_common_interrupt+0x26/0x40
[  270.657375][    C1]  panic+0xb9/0xc0
[  270.658743][    C1]  ? __pfx_panic+0x10/0x10
[  270.660397][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  270.662609][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.664955][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  270.667036][    C1]  check_panic_on_warn+0x89/0xb0
[  270.668933][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  270.670929][    C1]  end_report+0x78/0x160
[  270.672581][    C1]  kasan_report+0x129/0x150
[  270.674279][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  270.676267][    C1]  __xfrm_state_delete+0x696/0xca0
[  270.678150][    C1]  xfrm_timer_handler+0x18f/0xa00
[  270.680019][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.682028][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  270.684204][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.686178][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.688371][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.690684][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.692872][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  270.694934][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  270.696849][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  270.698910][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  270.701055][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  270.702903][    C1]  handle_softirqs+0x286/0x870
[  270.704698][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  270.706469][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  270.708400][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  270.710315][    C1]  __irq_exit_rcu+0xca/0x1f0
[  270.712031][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.713931][    C1]  irq_exit_rcu+0x9/0x30
[  270.715502][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  270.717584][    C1]  </IRQ>
[  270.718671][    C1]  <TASK>
[  270.719786][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.722033][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  270.724138][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  270.731048][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  270.733317][    C1] RAX: cdff31af7dc92500 RBX: ffffffff81968308 RCX: cdff31af7dc92500
[  270.736549][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  270.739553][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  270.742437][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa34730
[  270.745329][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  270.748233][    C1]  ? do_idle+0x1e8/0x510
[  270.749867][    C1]  default_idle+0x13/0x20
[  270.751518][    C1]  default_idle_call+0x74/0xb0
[  270.753270][    C1]  do_idle+0x1e8/0x510
[  270.754809][    C1]  ? __pfx_do_idle+0x10/0x10
[  270.756550][    C1]  cpu_startup_entry+0x44/0x60
[  270.758381][    C1]  start_secondary+0x101/0x110
[  270.760147][    C1]  common_startup_64+0x13e/0x147
[  270.762007][    C1]  </TASK>
[  270.763866][    C1] Kernel Offset: disabled
[  270.765292][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:20:18  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110047b7000 RBX=0000000000000001 RCX=dffffc0000000000 RDX=ffff888023db8000
RSI=0000000000000020 RDI=000000000000001f RBP=ffffc9000315f630 RSP=ffffc9000315f3a0
R8 =ffff88810198cdff R9 =1ffff110203319bf R10=dffffc0000000000 R11=ffffed10203319c0
R12=00007f11789b0000 R13=ffff888027944010 R14=0000000000004000 R15=0000000000000020
RIP=ffffffff820ba071 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ebb3500 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1179ae56c0 CR3=0000000100adc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00696669775f7472 69765f3168746576
XMM02=307a797300020009 0000000200000000 XMM03=00000000307a7973 0001000900000000
XMM04=0100110000001400 0000000000000000 XMM05=6e75745f7a797300 0100148003001800
XMM06=0000004002000800 0000004001000880 XMM07=03002c0000000030 7a79730001000900
XMM08=0000000000000000 00007f0330e12ee7 XMM09=0000000000000000 00007f0330e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888106490237 R9 =1ffff11020c92046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4909 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3ae7d2 CR3=00000000275a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=080022b0030fffff ffffffff0422a003
XMM02=ffffffffff0422c0 0300080022b80300 XMM03=e00300080022d803 00080022d0030fff
XMM04=ffff0422f0030008 0022e80300080022 XMM05=0102a81000218004 0a1000060102de00
XMM06=080023a003000800 2398030008002390 XMM07=030fffffffffffff 042380030fffffff
XMM08=ffffff0422f00300 080022e803000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
